[Created by: generate-chains.py]

Generates certificate chains where the intermediate contains netscape server
gated crypto rather than serverAuth.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:13:fb:79:d7:bf:0c:f5:4b:2a:50:4c:9a:68:d0:89:a0:f2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:8b:18:8d:f7:76:2c:94:0c:3f:a0:b6:ea:
                    70:1f:5e:c8:48:c5:aa:ad:55:6b:bd:55:68:0d:8e:
                    ce:e5:99:27:c5:2c:b2:9a:29:a9:8f:8e:c3:c6:97:
                    89:6d:31:d7:a4:8f:d8:36:37:4f:33:c7:d6:42:03:
                    11:08:c4:7f:35:8c:ee:0f:1b:7a:31:74:04:aa:01:
                    d3:1e:8b:5b:01:9d:60:4b:9c:d1:8f:1e:ab:e5:dc:
                    8f:17:77:49:e3:f6:d5:82:a5:2f:0a:e8:dc:9f:96:
                    1e:2a:a1:41:d1:67:2c:9e:f3:7f:94:0c:6e:cf:5f:
                    55:52:37:05:d0:39:37:1a:6e:11:ed:db:fa:aa:92:
                    a7:4f:50:29:07:69:af:1d:a7:99:fa:e1:56:f0:03:
                    38:b0:ae:6b:e7:19:0b:dd:c3:07:31:8e:84:04:a5:
                    b4:eb:b8:bc:23:f3:40:b0:17:b4:ab:9e:3f:05:96:
                    89:fc:84:23:cc:d1:06:c2:e4:8b:c6:65:f5:24:eb:
                    72:31:bc:41:7d:3a:c9:55:08:0c:ee:a6:ae:1f:78:
                    17:f8:a7:9d:7b:b1:82:f5:ce:82:6b:a8:b2:c6:8a:
                    b9:be:a5:d8:39:f4:49:e2:4c:53:32:85:26:53:4d:
                    44:ce:d5:3b:a0:6b:e7:d9:02:a1:5a:ef:e1:a5:81:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EB:B0:1C:BD:B7:68:B8:D1:B9:8A:C2:9F:5D:CF:DD:AF:F2:62:70:8A
            X509v3 Authority Key Identifier: 
                keyid:EE:C6:9A:65:CC:FB:CE:A0:3E:17:02:F9:68:12:86:B6:22:09:60:B4

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:test.example
    Signature Algorithm: sha256WithRSAEncryption
         81:9d:f7:3e:47:27:60:0d:75:e5:d6:1d:19:00:aa:ad:34:f1:
         2f:02:e4:bf:ad:87:09:29:8a:7f:63:eb:a9:e3:0b:8a:bf:18:
         eb:1b:69:f9:9d:49:af:c2:aa:50:ed:50:74:a8:c9:be:ca:c3:
         69:6f:5f:35:cb:86:4e:fe:83:cc:d0:ba:3e:ad:e3:c9:12:26:
         6a:df:bb:e4:dd:d5:35:7d:49:37:81:e9:de:68:d3:57:b0:c8:
         7c:4d:8d:e2:35:d3:89:09:b9:80:5c:77:31:6e:87:dc:b8:81:
         be:fd:27:d8:26:86:b0:24:10:88:d0:d4:52:ea:93:31:7c:98:
         6f:fe:95:9f:98:c2:2d:ce:05:a0:99:b0:2c:0a:2d:85:fe:31:
         de:2c:fc:e4:94:88:f9:01:54:d3:02:21:4b:0b:f8:93:9e:fd:
         31:a2:b6:d4:4e:af:d3:97:c0:b7:86:96:48:20:fd:37:d9:fa:
         9f:40:07:ba:84:23:3b:c5:15:d4:af:fd:37:7e:cf:df:05:34:
         62:4f:ef:92:7a:2f:cd:b7:c2:cd:43:80:92:aa:88:5c:39:6d:
         1d:87:59:7e:1c:b9:16:c5:f7:16:36:6a:98:37:6a:15:e4:60:
         a0:55:f8:2f:e8:69:af:7b:49:f6:e6:95:6f:fe:e5:92:14:44:
         f3:e7:05:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:9e
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:40:6f:cb:25:05:d9:29:d0:a3:c7:fe:2f:
                    f0:53:ad:46:36:19:aa:b1:1f:3f:7a:a2:e0:fb:03:
                    2b:77:65:6a:79:eb:f3:a3:16:13:34:83:3b:42:de:
                    a2:bb:e2:bf:d8:d2:75:3d:48:38:86:bb:2a:7d:14:
                    a3:88:f7:7c:00:f4:0a:6b:6b:aa:9b:44:24:62:fe:
                    db:a3:42:55:15:67:2a:32:ff:b2:4d:80:93:d0:84:
                    ef:1b:dc:7c:ac:56:2d:54:08:02:f6:18:6e:b5:80:
                    a8:77:52:1f:b8:2c:09:6d:cc:f8:1c:04:91:62:6e:
                    1e:dd:1d:89:b2:f1:23:0b:4d:4c:6c:da:49:3d:61:
                    83:72:0f:66:36:12:3f:f3:ff:53:52:73:53:a1:ca:
                    38:bd:c3:48:bf:7a:2f:13:19:d7:c2:28:e1:6f:32:
                    00:5e:64:ac:4b:05:7a:77:62:57:55:a9:59:83:d5:
                    ed:a3:2e:28:34:71:79:2f:b9:c3:9e:df:b3:2a:b1:
                    59:cd:04:00:1d:8b:11:56:ae:c6:67:f6:4f:1d:58:
                    07:65:e0:b0:2f:ef:57:6d:de:c1:a0:7c:6e:38:a8:
                    45:26:21:96:e0:f6:ef:0e:28:cf:01:70:57:dc:20:
                    15:08:ad:e8:e3:98:74:8c:54:32:c1:28:17:e0:de:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:C6:9A:65:CC:FB:CE:A0:3E:17:02:F9:68:12:86:B6:22:09:60:B4
            X509v3 Authority Key Identifier: 
                keyid:42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Extended Key Usage: 
                Netscape Server Gated Crypto
    Signature Algorithm: sha1WithRSAEncryption
         42:5d:65:d0:1e:bf:76:0c:fd:56:7b:24:da:04:04:8a:e7:ba:
         2a:56:03:39:1b:49:57:33:97:1e:80:dd:e5:89:47:16:75:bf:
         82:bc:15:dd:55:92:cb:c9:6d:b3:44:3c:25:e2:67:60:f5:d7:
         b3:5b:73:8d:e2:17:e6:40:e7:89:31:77:47:96:bf:91:85:af:
         f8:95:72:45:c3:e6:67:8d:c2:67:14:21:0d:03:a0:32:96:e8:
         f8:b5:07:64:43:71:5d:34:27:a2:97:a6:e9:e6:03:53:21:99:
         50:b2:62:a5:48:6d:c2:4d:0a:92:57:86:db:50:98:a6:fe:9c:
         10:7d:85:eb:71:de:b5:b7:b7:0f:49:93:56:5a:08:eb:8a:68:
         68:33:4d:1f:60:cf:54:50:97:30:30:02:48:0e:79:21:68:77:
         f9:94:f4:4c:93:8d:2a:bf:eb:29:fc:18:62:53:1e:49:12:38:
         80:69:eb:95:1a:14:94:77:b8:02:be:a7:b6:e2:07:b9:d9:1f:
         05:34:6d:63:41:ab:97:82:41:28:bf:2a:d5:01:dc:6a:93:5f:
         4f:6f:9c:1c:be:8d:96:95:42:76:e0:f2:92:c4:0c:2b:bd:01:
         76:65:9b:90:17:7d:6a:68:78:04:b6:e1:bd:2d:95:35:5b:09:
         75:ab:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:66:c7:e7:fd:21:14:ec:df:4a:05:1a:8c:
                    22:da:8f:3e:b7:8e:ca:a2:de:d7:e3:08:05:cd:28:
                    1c:da:d4:99:ba:ad:de:92:07:44:18:55:e7:b5:41:
                    6b:38:64:18:06:ab:6c:b8:ad:3d:b8:4e:c8:fa:8c:
                    fc:58:2c:2c:a8:42:08:28:b4:85:2a:aa:57:e2:a8:
                    76:4a:6e:fe:38:2f:d1:14:c6:52:6f:05:a4:89:54:
                    c2:0f:f0:93:83:09:b7:55:56:94:7b:57:65:87:09:
                    dd:61:ea:1a:02:3c:24:a5:cc:2d:d3:7c:0a:dc:2e:
                    67:a2:7f:91:ad:b4:76:76:02:ac:7f:85:5f:61:86:
                    0c:60:15:a0:82:7f:85:16:f4:10:8d:49:27:e4:33:
                    58:75:55:6b:5a:ab:c7:d1:bd:3d:a8:3b:68:1b:b4:
                    de:68:89:c4:87:fe:87:04:d4:52:f3:8f:fa:2e:44:
                    79:c1:62:46:b7:88:4c:bb:75:61:fd:e6:c5:6a:fb:
                    a8:3b:ef:a7:e6:1a:1e:44:2d:61:a7:4e:63:5e:66:
                    b8:f7:85:60:74:8b:ea:20:82:84:84:71:f5:1d:c6:
                    0c:c2:ee:11:78:01:ae:44:5a:e3:7b:97:2e:01:d0:
                    18:91:77:01:23:7f:d2:21:73:f4:f3:9a:94:ad:93:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91
            X509v3 Authority Key Identifier: 
                keyid:42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         16:32:37:d7:4d:ee:39:46:c8:2d:00:48:8a:61:9a:c0:ef:f6:
         5b:40:5a:cf:26:02:16:6b:b7:a2:6b:71:a8:1b:d9:ef:76:ac:
         6e:15:98:77:5c:0e:dd:a1:ce:7c:3f:9b:b2:8c:9f:3f:2f:f8:
         56:84:cb:ea:93:6b:d7:79:d4:87:5b:d1:7b:44:60:c0:44:f3:
         ab:fa:aa:ee:89:2a:1c:5b:64:fe:26:6c:89:f6:c6:d7:9a:81:
         24:fb:e1:f3:ec:6f:24:91:4e:9e:86:0a:58:8f:62:f0:1f:a5:
         8f:62:df:85:6a:82:ab:25:c8:7d:6e:65:78:f7:7c:5e:18:aa:
         49:90:36:36:54:91:63:c0:ff:25:94:21:bc:e2:5f:84:0e:68:
         26:90:02:46:3f:a6:27:e9:e5:7f:06:24:70:63:6b:76:0e:3d:
         d0:fa:0e:0d:83:b0:d7:ce:8c:b2:4b:63:11:a4:0c:81:f5:78:
         00:95:e4:82:0a:19:0e:aa:94:36:0b:e2:00:5e:63:27:a8:b5:
         a1:e3:bb:e4:eb:f3:e2:af:cb:11:3f:fb:3d:37:b3:d0:a8:4a:
         8f:38:05:e0:dc:0c:d8:12:c4:63:13:8a:1e:99:0b:47:29:74:
         bc:56:2d:86:39:93:b6:49:27:e6:04:22:fb:16:9f:82:65:8b:
         bb:9e:1a:af
-----BEGIN CERTIFICATE-----
MIIDeDCCAmCgAwIBAgIUQuAeNnVAEhYZjQeoP5v/4Vm8ap0wDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDlmbH5/0hFOzfSgUajCLajz63jsqi3tfjCAXNKBza1Jm6rd6SB0QYVee1
QWs4ZBgGq2y4rT24Tsj6jPxYLCyoQggotIUqqlfiqHZKbv44L9EUxlJvBaSJVMIP
8JODCbdVVpR7V2WHCd1h6hoCPCSlzC3TfArcLmeif5GttHZ2Aqx/hV9hhgxgFaCC
f4UW9BCNSSfkM1h1VWtaq8fRvT2oO2gbtN5oicSH/ocE1FLzj/ouRHnBYka3iEy7
dWH95sVq+6g776fmGh5ELWGnTmNeZrj3hWB0i+oggoSEcfUdxgzC7hF4Aa5EWuN7
ly4B0BiRdwEjf9Ihc/TzmpStky6hAgMBAAGjgcswgcgwHQYDVR0OBBYEFEJ1QTTF
WZ+Zo5scDFfbXMfBSLeRMB8GA1UdIwQYMBaAFEJ1QTTFWZ+Zo5scDFfbXMfBSLeR
MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh
L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S
b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG
9w0BAQsFAAOCAQEAFjI3103uOUbILQBIimGawO/2W0BazyYCFmu3omtxqBvZ73as
bhWYd1wO3aHOfD+bsoyfPy/4VoTL6pNr13nUh1vRe0RgwETzq/qq7okqHFtk/iZs
ifbG15qBJPvh8+xvJJFOnoYKWI9i8B+lj2LfhWqCqyXIfW5lePd8XhiqSZA2NlSR
Y8D/JZQhvOJfhA5oJpACRj+mJ+nlfwYkcGNrdg490PoODYOw186MsktjEaQMgfV4
AJXkggoZDqqUNgviAF5jJ6i1oeO75Ovz4q/LET/7PTez0KhKjzgF4NwM2BLEYxOK
HpkLRyl0vFYthjmTtkkn5gQi+xafgmWLu54arw==
-----END CERTIFICATE-----