| [Created by: generate-chains.py] |
| |
| Certificate chain where the intermediate has a basic constraints extension |
| that indicates it is NOT a CA. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 5d:89:40:ce:2b:53:75:88:ff:8e:84:70:5e:89:c5:8b:d1:5c:22:c2 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:96:d4:6b:47:00:ed:9a:72:03:1f:bc:14:42:63: |
| 28:8d:c9:5a:08:27:59:06:2e:61:d9:28:aa:ed:58: |
| 17:5f:f2:bf:ee:33:ab:74:0b:1c:c3:00:b6:38:96: |
| 96:d0:dc:91:44:ab:1d:fa:e5:99:ed:fe:ee:43:dd: |
| 21:b0:b8:1a:31:70:bb:c6:a5:eb:6e:2e:79:cf:c3: |
| c9:32:f7:39:e5:ff:9f:1e:fd:c8:8c:8f:9d:42:e6: |
| 5d:cc:b1:75:fa:94:f3:f8:df:f8:47:ea:7a:4f:4c: |
| 1d:67:fd:37:2e:75:a3:13:84:00:92:c5:6c:86:66: |
| 80:39:7b:0f:2e:af:14:ce:82:1c:e4:78:7b:f3:d8: |
| f4:b3:b1:d1:7d:5f:ed:19:6f:1d:eb:7e:be:3a:33: |
| e1:b4:86:82:22:05:28:87:85:b8:2b:70:f1:88:45: |
| 6b:b4:fb:d0:f0:0a:e5:45:f6:a8:e2:18:88:74:56: |
| 4c:a7:4b:cb:13:8e:61:8b:1a:c2:a2:2b:2d:24:7a: |
| f0:4c:53:49:8b:98:be:52:31:72:5d:38:e7:8d:36: |
| 7b:bb:34:4d:66:2d:b3:8b:82:85:9f:e6:f9:d8:58: |
| da:0d:e9:d5:d2:be:53:4b:88:ad:58:8a:3b:3c:1d: |
| 53:60:ed:15:50:9c:fd:c3:bf:0c:fc:56:02:8f:06: |
| ab:9d |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 69:F2:C8:4F:15:5E:61:18:40:61:41:B1:88:18:21:B5:77:6F:F9:DE |
| X509v3 Authority Key Identifier: |
| keyid:AF:9B:3A:70:86:45:08:AD:02:CD:FC:FD:46:48:82:7D:46:63:31:DB |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| 36:7f:1c:0e:1d:9b:9a:89:7b:60:a2:50:2c:8d:88:5d:70:5e: |
| 69:6f:46:49:88:87:32:f2:39:97:fd:ce:eb:16:8a:60:09:1f: |
| 3c:35:59:a6:eb:93:bd:3f:5e:8b:41:58:aa:9f:9d:e3:d1:0e: |
| a0:d2:94:2c:a9:62:37:43:b8:b8:f5:d4:9d:69:c0:3f:36:94: |
| 69:41:5b:30:15:52:ef:60:15:fd:15:91:ed:2b:d7:82:37:cb: |
| 43:13:55:f2:82:83:18:b3:92:43:ac:c9:34:b6:12:67:29:48: |
| f3:d3:b7:a9:d8:79:a2:a9:e2:15:96:33:ba:be:06:fc:70:02: |
| c7:1f:34:79:0d:48:5c:54:94:36:85:31:32:39:b6:19:c2:9f: |
| a4:a7:54:13:fe:e2:be:74:73:98:13:bb:64:bd:57:ab:6a:9d: |
| 9b:a7:97:45:2e:c8:fc:1e:70:d7:da:e1:e0:88:2e:51:34:f3: |
| d5:21:a0:0e:1b:56:75:f4:c8:a9:a1:1c:41:d2:28:43:30:2a: |
| cb:c4:f5:85:33:78:5d:d2:b1:40:63:e8:ce:38:ff:c7:79:8b: |
| c3:f9:ee:90:81:44:57:48:5a:88:39:60:c8:85:80:a9:03:72: |
| a1:db:6e:30:72:4f:41:29:67:29:1f:d0:d8:d8:47:18:78:1f: |
| 8a:c9:02:8f |
| -----BEGIN CERTIFICATE----- |
| MIIDoDCCAoigAwIBAgIUXYlAzitTdYj/joRwXonFi9FcIsIwDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx |
| MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEAltRrRwDtmnIDH7wUQmMojclaCCdZBi5h2Siq7VgXX/K/ |
| 7jOrdAscwwC2OJaW0NyRRKsd+uWZ7f7uQ90hsLgaMXC7xqXrbi55z8PJMvc55f+f |
| Hv3IjI+dQuZdzLF1+pTz+N/4R+p6T0wdZ/03LnWjE4QAksVshmaAOXsPLq8UzoIc |
| 5Hh789j0s7HRfV/tGW8d636+OjPhtIaCIgUoh4W4K3DxiEVrtPvQ8ArlRfao4hiI |
| dFZMp0vLE45hixrCoistJHrwTFNJi5i+UjFyXTjnjTZ7uzRNZi2zi4KFn+b52Fja |
| DenV0r5TS4itWIo7PB1TYO0VUJz9w78M/FYCjwarnQIDAQABo4HpMIHmMB0GA1Ud |
| DgQWBBRp8shPFV5hGEBhQbGIGCG1d2/53jAfBgNVHSMEGDAWgBSvmzpwhkUIrQLN |
| /P1GSIJ9RmMx2zA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD |
| ggEBADZ/HA4dm5qJe2CiUCyNiF1wXmlvRkmIhzLyOZf9zusWimAJHzw1Wabrk70/ |
| XotBWKqfnePRDqDSlCypYjdDuLj11J1pwD82lGlBWzAVUu9gFf0Vke0r14I3y0MT |
| VfKCgxizkkOsyTS2EmcpSPPTt6nYeaKp4hWWM7q+BvxwAscfNHkNSFxUlDaFMTI5 |
| thnCn6SnVBP+4r50c5gTu2S9V6tqnZunl0UuyPwecNfa4eCILlE089UhoA4bVnX0 |
| yKmhHEHSKEMwKsvE9YUzeF3SsUBj6M44/8d5i8P57pCBRFdIWog5YMiFgKkDcqHb |
| bjByT0EpZykf0NjYRxh4H4rJAo8= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 5e:d2:b9:cc:38:a5:71:aa:e1:ce:1e:c1:8b:50:10:aa:15:44:3f:ba |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:c2:02:78:c1:e7:a0:b7:63:87:52:e4:d4:11:71: |
| 3e:cb:65:9c:d9:2f:cb:48:30:8e:62:29:ae:c9:22: |
| 36:a6:67:d2:ea:10:58:d2:82:ab:bc:1e:a3:12:64: |
| 6e:fd:79:af:2e:6c:c0:8b:fd:36:68:ea:e0:0a:09: |
| 53:99:89:75:92:61:13:ac:aa:d9:e2:f1:ac:93:72: |
| 94:65:99:9e:52:9d:8f:6d:1e:b1:3e:83:fb:fa:c4: |
| dd:b4:b3:d2:0b:bb:f8:21:10:a9:51:8e:9e:b4:c8: |
| a8:63:79:50:62:03:59:3f:53:19:02:7c:a4:d9:45: |
| dd:07:b7:76:89:ac:ac:6f:b1:1d:aa:8c:4a:e5:40: |
| a2:05:32:2f:ba:a8:a9:8a:f3:eb:f0:f3:d9:9e:97: |
| e6:89:42:dd:95:67:de:33:62:2c:10:59:0b:b6:de: |
| 9a:3e:54:10:b8:a4:a9:33:05:4d:fc:ea:8b:56:38: |
| 2a:11:88:cd:75:1f:74:ea:4e:ad:3c:ef:da:d4:00: |
| 72:57:1c:16:d3:20:b6:99:cc:7f:aa:58:fa:48:e8: |
| e9:a9:bd:00:2e:87:ce:39:9b:1c:17:23:ac:28:55: |
| 77:81:e7:ac:f6:d6:6d:77:27:fb:e7:a0:22:72:58: |
| 83:4d:1a:1a:be:b6:00:8e:d1:11:c7:71:28:93:09: |
| 74:7b |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| AF:9B:3A:70:86:45:08:AD:02:CD:FC:FD:46:48:82:7D:46:63:31:DB |
| X509v3 Authority Key Identifier: |
| keyid:6C:B8:FE:A6:74:44:97:70:ED:FE:CB:24:38:90:2A:A9:61:48:FB:EB |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:FALSE |
| Signature Algorithm: sha256WithRSAEncryption |
| 0c:87:92:30:22:48:18:74:b6:57:c3:c9:95:13:17:c9:0a:81: |
| 04:6f:4e:8f:79:69:30:3a:7c:b8:d6:13:ea:4e:5c:b8:79:8b: |
| bf:07:f8:12:84:9d:1c:4c:bf:8e:57:a4:b9:e8:eb:58:b9:74: |
| 9c:ee:14:54:d7:a3:99:32:fa:da:50:7d:92:69:1e:6c:55:45: |
| 35:d5:b7:a6:87:2d:c9:ec:00:fb:f2:d2:f0:f9:22:49:bb:4c: |
| cb:b9:2e:b8:e1:dc:3f:a3:85:1d:ff:94:ad:e5:57:02:f9:d7: |
| fe:b5:4b:c4:26:7f:cd:34:3f:9d:66:10:b2:a8:3c:3d:71:b8: |
| 05:45:9e:36:03:90:38:70:22:ed:d8:e3:00:65:f8:9e:1b:36: |
| 8c:9f:de:ac:0b:8e:e9:a3:ae:6d:39:79:6d:8d:aa:e9:4c:d3: |
| 3e:d2:c4:0f:10:05:dd:c5:30:b8:a2:e8:3e:60:48:49:59:ab: |
| 40:e7:22:b5:64:74:26:22:30:a4:b9:30:1b:b4:1b:91:53:c9: |
| 3c:9e:1d:d6:3c:f1:11:9a:58:fb:34:ee:88:40:7a:2f:02:e0: |
| 06:55:df:2f:b3:8c:73:40:58:ad:42:21:7c:8f:27:e8:95:2b: |
| bf:1a:41:48:f1:50:f3:8a:e9:c0:05:a7:dc:36:f5:0a:4a:35: |
| 9c:21:6c:77 |
| -----BEGIN CERTIFICATE----- |
| MIIDfTCCAmWgAwIBAgIUXtK5zDilcarhzh7Bi1AQqhVEP7owDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBAMICeMHnoLdjh1Lk1BFxPstlnNkvy0gwjmIprskiNqZn0uoQ |
| WNKCq7weoxJkbv15ry5swIv9Nmjq4AoJU5mJdZJhE6yq2eLxrJNylGWZnlKdj20e |
| sT6D+/rE3bSz0gu7+CEQqVGOnrTIqGN5UGIDWT9TGQJ8pNlF3Qe3domsrG+xHaqM |
| SuVAogUyL7qoqYrz6/Dz2Z6X5olC3ZVn3jNiLBBZC7bemj5UELikqTMFTfzqi1Y4 |
| KhGIzXUfdOpOrTzv2tQAclccFtMgtpnMf6pY+kjo6am9AC6HzjmbHBcjrChVd4Hn |
| rPbWbXcn++egInJYg00aGr62AI7REcdxKJMJdHsCAwEAAaOByDCBxTAdBgNVHQ4E |
| FgQUr5s6cIZFCK0Czfz9RkiCfUZjMdswHwYDVR0jBBgwFoAUbLj+pnREl3Dt/ssk |
| OJAqqWFI++swNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAMBgNVHRMBAf8EAjAAMA0G |
| CSqGSIb3DQEBCwUAA4IBAQAMh5IwIkgYdLZXw8mVExfJCoEEb06PeWkwOny41hPq |
| Tly4eYu/B/gShJ0cTL+OV6S56OtYuXSc7hRU16OZMvraUH2SaR5sVUU11bemhy3J |
| 7AD78tLw+SJJu0zLuS644dw/o4Ud/5St5VcC+df+tUvEJn/NND+dZhCyqDw9cbgF |
| RZ42A5A4cCLt2OMAZfieGzaMn96sC47po65tOXltjarpTNM+0sQPEAXdxTC4oug+ |
| YEhJWatA5yK1ZHQmIjCkuTAbtBuRU8k8nh3WPPERmlj7NO6IQHovAuAGVd8vs4xz |
| QFitQiF8jyfolSu/GkFI8VDziunABafcNvUKSjWcIWx3 |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 5e:d2:b9:cc:38:a5:71:aa:e1:ce:1e:c1:8b:50:10:aa:15:44:3f:b9 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:bb:74:06:fa:a6:03:d1:64:c6:fa:62:8c:f6:40: |
| 93:be:4e:7d:71:8b:3c:fb:57:b2:64:7a:08:9d:ce: |
| c3:40:ff:eb:84:43:e9:0c:e0:80:2c:e3:9c:38:43: |
| 90:9d:e1:a5:4e:a1:10:9f:ac:b4:bf:24:38:7a:d7: |
| 37:21:0d:ae:de:f0:99:37:43:6a:e7:7f:d0:4a:ba: |
| d3:a4:f4:df:ce:fa:d1:b0:03:f9:5d:79:a5:c5:82: |
| b0:cf:62:02:87:84:ec:73:d2:65:33:86:02:d7:f4: |
| 57:8d:98:a2:2a:8f:89:c6:23:29:68:ff:56:46:d2: |
| dc:9a:e3:d2:24:d8:e9:fe:18:0c:4f:67:b3:cd:5e: |
| 31:4a:70:2e:4c:b2:7e:10:e1:38:c7:a1:fa:bc:8f: |
| 9b:23:e9:19:56:c5:38:4a:e8:7d:31:e2:6e:03:70: |
| ce:f2:0b:52:7d:6d:d7:d7:53:d8:e0:1c:6e:95:f3: |
| 1c:b6:04:50:03:23:39:86:42:28:68:26:5f:ca:a7: |
| 13:e2:51:ed:f0:55:bb:ac:4e:9d:cf:e5:07:44:41: |
| 45:f8:5c:65:cf:d7:7f:0a:e0:ee:5e:5e:2c:0c:13: |
| 10:f6:d4:e3:ba:9f:16:f4:8c:85:b2:53:4c:e1:56: |
| 63:f0:08:11:84:df:dc:e1:a0:7f:fb:78:5d:eb:21: |
| f9:e5 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 6C:B8:FE:A6:74:44:97:70:ED:FE:CB:24:38:90:2A:A9:61:48:FB:EB |
| X509v3 Authority Key Identifier: |
| keyid:6C:B8:FE:A6:74:44:97:70:ED:FE:CB:24:38:90:2A:A9:61:48:FB:EB |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 0d:e4:4e:a1:61:ea:2b:a2:58:40:4a:af:90:ae:45:06:da:3b: |
| e0:af:63:61:78:37:8d:5b:3a:02:f5:97:29:f4:0d:a6:92:fd: |
| 29:d0:0a:73:a6:be:5c:44:d1:0c:a1:5c:57:fa:82:75:f5:af: |
| c3:e2:95:d9:4c:b1:36:d6:78:e4:b9:21:a3:88:f0:7d:71:80: |
| 54:ca:1b:d5:7b:33:e3:59:b4:fe:08:4b:3a:96:ec:19:b4:41: |
| 1e:27:83:c6:13:a4:ef:da:ab:65:84:d9:05:42:59:66:8b:60: |
| 56:21:91:89:57:9c:d0:13:95:da:b7:43:e9:fd:7f:5c:50:93: |
| 10:56:8b:bf:fd:52:23:dd:73:0c:be:24:e6:7c:b4:f3:91:37: |
| db:91:7a:30:99:f0:19:2b:ef:e7:3e:a0:50:b4:16:84:0d:6e: |
| ee:19:47:0e:74:6a:37:3c:c1:82:13:5f:3f:01:4d:4b:9a:52: |
| 77:88:28:ae:ac:0d:4b:f0:55:76:c6:0a:46:08:e0:5c:ad:50: |
| 99:7e:04:4e:c3:7d:8b:fb:7e:36:aa:b8:89:a5:fe:9e:ce:4d: |
| 81:c9:a9:23:97:61:c3:df:54:ba:c2:9b:b5:97:ee:4b:36:87: |
| 5f:3b:29:30:e9:b2:89:05:d5:ad:12:af:98:45:48:91:21:d5: |
| c6:10:de:40 |
| -----BEGIN CERTIFICATE----- |
| MIIDeDCCAmCgAwIBAgIUXtK5zDilcarhzh7Bi1AQqhVEP7kwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQC7dAb6pgPRZMb6Yoz2QJO+Tn1xizz7V7JkegidzsNA/+uEQ+kM4IAs45w4 |
| Q5Cd4aVOoRCfrLS/JDh61zchDa7e8Jk3Q2rnf9BKutOk9N/O+tGwA/ldeaXFgrDP |
| YgKHhOxz0mUzhgLX9FeNmKIqj4nGIylo/1ZG0tya49Ik2On+GAxPZ7PNXjFKcC5M |
| sn4Q4TjHofq8j5sj6RlWxThK6H0x4m4DcM7yC1J9bdfXU9jgHG6V8xy2BFADIzmG |
| QihoJl/KpxPiUe3wVbusTp3P5QdEQUX4XGXP138K4O5eXiwMExD21OO6nxb0jIWy |
| U0zhVmPwCBGE39zhoH/7eF3rIfnlAgMBAAGjgcswgcgwHQYDVR0OBBYEFGy4/qZ0 |
| RJdw7f7LJDiQKqlhSPvrMB8GA1UdIwQYMBaAFGy4/qZ0RJdw7f7LJDiQKqlhSPvr |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG |
| 9w0BAQsFAAOCAQEADeROoWHqK6JYQEqvkK5FBto74K9jYXg3jVs6AvWXKfQNppL9 |
| KdAKc6a+XETRDKFcV/qCdfWvw+KV2UyxNtZ45Lkho4jwfXGAVMob1Xsz41m0/ghL |
| OpbsGbRBHieDxhOk79qrZYTZBUJZZotgViGRiVec0BOV2rdD6f1/XFCTEFaLv/1S |
| I91zDL4k5ny085E325F6MJnwGSvv5z6gULQWhA1u7hlHDnRqNzzBghNfPwFNS5pS |
| d4gorqwNS/BVdsYKRgjgXK1QmX4ETsN9i/t+Nqq4iaX+ns5NgcmpI5dhw99UusKb |
| tZfuSzaHXzspMOmyiQXVrRKvmEVIkSHVxhDeQA== |
| -----END CERTIFICATE----- |
