[Created by: generate-chains.py]

Certificate chain where the intermediate sets pathlen=0, and is followed by
a self-issued intermediate.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c3:57:03:79:49:32:ce:56:f8:86:e8:81:fd:69:ad:fa:5f:fe:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:86:21:26:6b:16:22:36:2b:5b:b1:d4:52:
                    28:74:2d:76:f3:1b:3b:01:17:dd:e1:18:e3:02:06:
                    a7:88:93:ad:32:59:53:ff:5d:c5:cd:1a:78:70:fb:
                    2e:d9:ba:f9:fa:75:53:fc:02:a8:3c:9b:e0:f4:50:
                    00:4f:30:0b:b3:d6:04:6a:b6:ef:85:0b:42:35:29:
                    77:fa:91:16:0e:ed:34:8a:f3:d2:5e:e9:66:66:57:
                    9b:6f:71:30:16:88:18:7a:f3:fc:61:79:06:d5:e8:
                    b9:18:d6:b9:20:bf:b9:9a:dd:c5:de:64:7d:44:fd:
                    3f:2a:a0:23:31:4d:a7:4c:42:65:ad:9b:38:b6:35:
                    51:f7:4a:58:84:b3:92:cb:98:36:a3:92:0c:33:85:
                    64:18:f2:06:c4:11:a6:12:a9:7c:da:ea:36:59:90:
                    9c:87:a4:60:39:9d:29:e3:21:91:c4:ae:9a:f9:f2:
                    ec:ad:f8:44:55:5c:3a:21:52:81:58:a1:e0:3a:5b:
                    9e:2d:61:62:7f:51:58:44:87:80:41:00:e9:6c:ed:
                    a7:ff:a0:7c:b4:17:33:7c:78:54:ca:92:81:d1:56:
                    75:b1:3a:b7:27:6a:77:e8:0c:30:71:bd:db:b1:06:
                    19:e9:d6:99:d6:41:d2:c6:90:3d:72:31:fc:e7:03:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BF:95:3A:85:28:C1:82:8F:C9:0C:81:29:EA:8A:F8:1E:73:80:F8:7F
            X509v3 Authority Key Identifier: 
                keyid:0C:50:93:FA:6E:53:C4:76:18:87:E2:39:87:0B:AA:8E:31:01:3D:69

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         8a:25:5d:40:b1:6a:f0:07:6a:b7:a3:88:36:24:e4:2a:19:c3:
         07:ee:6b:3e:aa:bb:41:9b:66:cd:95:60:9c:c0:51:63:fe:f3:
         a6:2d:55:a0:f3:93:c3:85:97:84:09:80:3d:36:e6:2e:e7:e9:
         61:fc:6d:78:86:b4:e8:62:40:26:39:fb:81:e5:d4:bc:8a:d1:
         aa:99:43:04:96:9d:99:c0:f0:47:f1:d8:85:74:04:99:e6:3b:
         d1:c4:c5:26:1a:d1:c3:16:5e:c6:84:6e:37:fb:f8:32:56:0f:
         18:1e:17:0d:ac:35:0a:71:b7:4a:a4:92:00:0d:12:5c:52:cb:
         02:d0:44:44:ab:5d:9c:19:5c:31:6d:d6:58:b1:1b:1d:b1:06:
         1d:5b:ad:3d:98:f6:cc:27:29:d9:56:36:df:79:2b:26:99:52:
         be:3f:de:08:ba:1d:8a:7d:23:66:60:71:aa:99:bb:ea:b6:c3:
         76:9b:22:a9:a8:c8:06:54:83:8a:c0:a5:89:64:c7:d6:8f:49:
         e7:90:87:fc:d4:94:d2:0b:b6:16:80:ce:c7:53:99:7d:f0:e0:
         c0:7d:f9:37:31:d2:86:24:ab:1a:94:91:2f:95:70:6b:ed:6d:
         1d:f2:5f:84:8a:6d:62:65:4f:12:4a:c9:91:fc:f4:d7:fc:00:
         5b:dc:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c3:57:03:79:49:32:ce:56:f8:86:e8:81:fd:69:ad:fa:5f:fe:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:84:14:6c:0b:68:76:9e:7d:d5:f7:55:ac:
                    5a:2b:6d:71:ad:aa:34:2a:dc:b4:b0:c2:37:23:5b:
                    05:01:08:b6:9b:fb:97:ce:3c:eb:fe:2f:b2:5e:6b:
                    07:bb:5f:29:fb:b1:25:55:5c:dd:9f:de:89:bd:29:
                    37:e8:a7:8a:99:c3:50:82:32:10:bb:2d:19:bc:a8:
                    47:21:3d:0a:66:b6:8d:ab:42:3a:94:50:7f:c3:19:
                    7f:ea:28:89:c2:9d:a8:87:d5:1b:42:63:9a:9f:9e:
                    06:72:41:ee:64:ee:ac:1e:21:f6:3e:3d:e5:f6:d1:
                    04:dd:7e:61:cb:e5:65:99:c1:49:97:13:c4:11:96:
                    3b:62:f0:46:ad:20:5d:52:5c:16:d6:59:29:e2:9e:
                    91:15:f1:23:0d:fb:3c:86:90:50:05:2d:63:81:cc:
                    39:25:62:cc:00:18:b4:0e:1a:a0:d8:ca:4b:e0:b6:
                    ea:33:83:8a:2e:ab:6c:6f:41:9e:ec:43:92:d1:83:
                    b6:d0:45:e7:a8:8d:28:6b:a4:b5:f7:53:8b:8a:dc:
                    3e:b0:df:9f:d4:70:4e:c2:2c:1a:a5:4d:6c:5d:2e:
                    94:35:84:b9:5d:e9:df:22:fd:55:6e:05:ff:eb:b6:
                    10:0c:28:a3:5b:49:c1:98:63:8f:5d:fa:83:4e:11:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:50:93:FA:6E:53:C4:76:18:87:E2:39:87:0B:AA:8E:31:01:3D:69
            X509v3 Authority Key Identifier: 
                keyid:4E:47:5F:93:57:FE:5F:F3:92:73:A6:6A:55:7C:1A:FB:F9:16:85:36

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         9f:9e:2d:7c:ae:ab:82:1d:10:ad:00:c7:e3:09:b1:2c:ac:07:
         b5:ac:ff:13:98:9e:e7:3a:76:04:a6:9b:fb:e2:bd:9f:24:fb:
         29:a9:fb:2c:f5:cb:5e:aa:64:f6:58:5f:af:55:bd:48:47:62:
         51:3f:13:c9:16:aa:0c:f3:25:f0:14:6a:aa:50:cd:70:b7:50:
         f3:58:9e:53:2e:b0:3d:52:55:c9:a4:4c:2f:a0:b3:08:e8:2a:
         9e:7f:04:de:5e:fa:d3:0f:6b:9f:7c:44:a4:9d:de:85:5c:ec:
         96:7e:e0:fd:d2:2a:70:c5:07:58:29:0e:bd:d3:bf:33:de:19:
         be:10:1e:da:b4:2e:92:32:a2:2d:df:90:68:5d:e5:bf:a7:e5:
         a8:58:ee:59:03:2e:3c:5b:cd:b2:d4:8e:bb:76:71:54:4f:1b:
         41:a1:01:ff:6f:13:42:a1:3c:27:72:60:92:d0:9d:1c:36:d3:
         be:17:89:28:15:ba:97:4d:bb:64:e7:f6:07:0e:78:58:2f:68:
         b5:c9:05:46:26:b4:3b:0f:5e:32:a0:7a:4f:ae:41:fb:36:c0:
         e6:12:5f:31:60:44:b7:e3:1d:01:b5:93:ea:f8:0a:e9:ac:b0:
         55:69:f2:19:55:7a:b3:7b:27:f5:dd:53:40:3f:e1:7e:73:ac:
         37:ee:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:95:e6:ac:68:24:65:1f:52:3f:6e:18:3b:86:7c:da:73:de:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:3c:e9:bb:09:74:83:4d:d6:c8:58:96:d9:
                    3b:ee:6d:f2:fd:9e:11:e5:80:e5:35:50:51:70:0d:
                    95:a9:f9:0e:96:df:33:db:94:6f:a3:7d:2a:80:d2:
                    a4:3b:fa:34:e0:bd:44:e5:07:a6:09:02:40:3b:6f:
                    11:a7:54:88:0f:22:09:58:27:97:4a:7f:55:e3:03:
                    5c:c2:13:fb:62:4b:0b:b0:fb:5b:20:c1:57:fc:a4:
                    32:4d:97:71:f7:5c:f1:63:6c:21:7b:a8:6e:ce:9f:
                    e5:50:66:40:b1:e9:23:df:52:b4:b6:de:aa:99:75:
                    f0:d2:ec:26:60:37:89:c9:a2:dc:b0:f5:33:e9:0e:
                    0f:0e:bd:f3:72:65:1e:4f:9c:c6:1b:32:34:98:de:
                    04:c0:dd:28:24:ec:f7:dc:e5:54:7a:a5:1a:b0:1a:
                    31:96:d3:43:f0:df:4b:52:41:9c:8e:34:22:50:fc:
                    44:bb:a5:fb:c0:c5:59:8a:bb:32:42:29:fc:73:cb:
                    a1:85:54:7f:5a:db:bd:ec:0d:99:76:c0:c5:72:9f:
                    0d:28:e9:ca:65:9f:a1:69:b6:07:20:01:64:c7:03:
                    0f:ff:ab:a1:f1:df:5b:a4:da:7e:e5:79:68:19:a2:
                    63:e0:87:37:05:5d:f7:88:5d:11:c6:1d:d8:18:0a:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4E:47:5F:93:57:FE:5F:F3:92:73:A6:6A:55:7C:1A:FB:F9:16:85:36
            X509v3 Authority Key Identifier: 
                keyid:A0:D4:A1:BC:4B:2D:3E:83:D7:0D:0C:E2:BE:E6:3A:C5:40:4D:4E:DC

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         32:6c:ee:bd:b7:10:9a:3e:55:0d:88:28:e2:ff:94:39:24:37:
         bf:5f:81:a8:87:d0:85:1e:5e:9d:35:a8:2d:74:10:97:aa:7c:
         c1:36:75:cf:4d:ff:1a:fa:58:87:6f:41:df:43:70:cc:5f:dc:
         4e:1d:ac:ee:e1:71:b5:62:08:47:33:d7:a1:69:dc:83:eb:40:
         5f:a3:9e:8f:fa:4b:73:ca:26:52:02:0a:0f:c9:7c:90:d6:2d:
         bc:1a:ee:6c:39:f6:ce:55:6a:a5:1f:5b:f3:27:33:77:23:d3:
         e9:c3:e6:f6:e6:44:f2:24:b8:9d:1f:13:09:80:58:10:41:c7:
         80:4d:7b:fe:d2:17:27:e9:1f:a9:a0:18:8c:cc:9c:9b:26:28:
         2f:d7:b6:65:d0:95:16:b8:33:36:3a:a3:d3:69:47:e4:53:95:
         15:6e:be:4a:83:5b:d8:52:dd:a2:e4:36:3d:3e:29:a3:fc:7f:
         a0:45:03:3e:19:08:ea:9d:72:3f:82:01:40:94:77:3c:db:41:
         8b:6f:58:c9:2b:c4:51:e8:d8:b2:db:e9:e7:e0:fe:22:dc:91:
         b2:b8:ae:c7:aa:a2:7e:a9:ef:a6:ee:00:c4:d9:2a:5a:64:80:
         b6:af:77:45:9c:4d:40:ec:24:9f:21:c5:b8:05:ea:f9:1e:eb:
         88:76:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:95:e6:ac:68:24:65:1f:52:3f:6e:18:3b:86:7c:da:73:de:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:de:61:1e:7e:20:61:c0:eb:1c:13:ee:75:3c:36:
                    f0:5d:4b:ef:d2:83:20:1b:d5:bb:6e:70:cf:2f:4a:
                    4e:13:b1:a7:66:9c:19:fe:7f:5c:69:85:0a:64:3e:
                    05:4e:a3:71:bf:70:70:9a:dd:45:18:14:9b:b6:40:
                    39:75:24:67:c3:bf:18:60:be:c9:b4:07:a9:81:f7:
                    1b:d9:4c:96:66:eb:dc:ef:7b:fd:c5:27:68:fd:9b:
                    94:7e:52:ac:ac:4e:65:60:7b:12:d4:6a:de:0f:81:
                    cc:3c:cd:cf:39:f5:f5:28:9f:e1:ee:65:02:66:f8:
                    0d:df:b0:20:45:03:13:16:d2:c7:f2:f7:c9:c7:c9:
                    0d:03:d0:ec:5c:79:a4:54:99:e5:62:52:6c:aa:83:
                    df:42:d5:f7:83:29:ce:90:32:06:71:80:78:e1:fb:
                    a6:d4:25:02:c5:b1:bd:43:68:fa:8d:c6:cc:10:18:
                    02:58:3d:32:df:65:a8:47:75:cb:88:0e:fa:0e:33:
                    60:bd:d1:fe:0c:e4:29:60:f3:28:fb:91:45:f3:ba:
                    b7:fc:ec:63:ba:b9:2d:4e:fc:95:8e:3d:fb:9d:87:
                    dd:0b:5c:ff:a8:75:3d:66:2c:cd:ec:4a:fd:c8:24:
                    4b:0f:a9:0d:aa:81:69:56:00:c4:ef:97:e1:7d:38:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A0:D4:A1:BC:4B:2D:3E:83:D7:0D:0C:E2:BE:E6:3A:C5:40:4D:4E:DC
            X509v3 Authority Key Identifier: 
                keyid:A0:D4:A1:BC:4B:2D:3E:83:D7:0D:0C:E2:BE:E6:3A:C5:40:4D:4E:DC

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         51:f1:3a:b0:01:82:5f:a2:04:de:1d:3a:77:81:73:e3:5d:f2:
         f1:62:05:1b:4d:53:bf:02:f4:a7:9d:98:20:44:23:4d:12:13:
         0f:d7:5c:aa:30:10:19:3d:bf:b2:29:aa:14:52:15:ef:fc:2b:
         c8:f3:00:55:3f:97:f4:f8:5e:64:30:b0:d8:66:2b:f7:b3:84:
         d5:a0:b6:49:f2:48:f9:b5:d4:24:1d:5e:95:13:1e:64:e2:ce:
         41:89:67:2b:62:4b:65:57:c1:4a:cc:9e:60:69:4a:b3:15:7d:
         21:c4:f6:52:76:24:f6:d5:e8:73:4b:0b:ab:1c:79:04:a2:28:
         d4:b0:a1:5b:67:ba:c8:b9:d7:4c:08:97:37:cc:ae:0b:58:02:
         f7:09:b0:ee:c7:29:c5:2b:c8:fc:12:54:1e:de:fa:b5:0e:bd:
         e9:f6:6d:b0:1e:ef:05:8c:a5:6c:b3:c0:12:14:78:5d:56:95:
         92:92:d8:92:ef:d3:80:cf:de:8b:64:56:de:bb:b0:b2:b6:0f:
         cb:fb:5e:40:8d:65:8e:c8:ca:0a:53:10:45:0f:75:fa:76:f5:
         be:56:ce:87:2d:32:73:4e:62:1f:10:bc:4c:62:1e:9f:41:b5:
         22:6b:bb:00:61:e3:e4:dd:08:0d:63:76:36:fd:60:bd:08:ee:
         42:2e:31:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----