| [Created by: generate-expired-target-notBefore.py] |
| |
| Certificate chain with 1 intermediate, where the target is expired (violates |
| validity.notBefore). Verification is expected to fail. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 1 (0x1) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Mar 2 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:d8:d8:32:e7:2a:be:55:8d:e7:e8:ae:ee:1d:c6: |
| f5:3b:0c:6d:25:d9:53:8e:4a:84:0c:1e:7b:cb:30: |
| 2f:5f:1f:85:a3:e7:e0:92:79:b4:a2:35:fe:b7:71: |
| b4:a3:c0:79:dd:50:e5:e4:b0:61:b5:2c:97:2e:e6: |
| 4a:bc:c6:3c:c7:20:f3:87:20:4e:27:d8:8a:f6:0d: |
| a9:ac:0a:57:9a:53:03:9e:5f:32:ef:07:18:0a:ab: |
| f6:a7:42:4e:ef:36:9a:10:4a:db:d3:9f:49:d7:04: |
| 3a:95:61:77:ba:5e:d2:84:cb:57:ec:45:91:d0:fd: |
| be:5b:8b:4d:2f:0b:21:ab:89:ab:92:d9:fc:18:0c: |
| 44:bb:54:0a:94:5d:bd:ee:ac:a9:ee:f2:27:a8:3f: |
| 30:b1:e7:f6:fd:1a:05:86:56:db:22:de:bd:e5:a6: |
| d2:50:2d:4c:0c:ab:1c:b2:49:6c:23:9a:46:d8:f5: |
| 53:f4:9d:52:2c:f0:25:e3:a8:e7:99:d3:6d:ec:f0: |
| 0c:d1:bd:1e:73:c6:8f:5d:11:50:88:b3:63:bc:c7: |
| c5:eb:36:74:8f:03:fe:1a:36:d7:ac:5f:18:ae:73: |
| 11:7f:dc:81:dc:7c:77:17:ec:2c:91:c5:db:cc:2d: |
| 1a:a0:f1:ad:aa:d4:b6:1d:22:ee:22:bd:48:c9:f0: |
| df:7f |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| E6:C3:54:85:55:F1:44:F6:4B:55:D3:EA:09:69:E3:95:F6:DA:2A:FA |
| X509v3 Authority Key Identifier: |
| keyid:EC:3F:B7:92:DD:EA:7D:97:A5:77:22:28:E9:98:4D:0D:07:69:C4:86 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| 27:8e:41:9c:f0:5c:4a:e0:b0:63:c7:fa:cc:1f:d4:21:35:33: |
| 87:13:68:b7:18:08:0e:ba:22:a1:51:1a:d9:ba:31:a7:35:80: |
| c7:75:35:a4:68:c8:3e:91:79:55:e3:60:34:79:a1:0f:a9:cc: |
| 05:92:61:40:b0:66:2b:fe:c7:29:a2:54:f3:7c:71:b6:36:fe: |
| a9:fd:7b:79:ea:66:19:c0:2f:d2:56:97:2f:ca:12:a3:96:6b: |
| b3:57:c8:06:58:6f:de:53:d7:63:ee:93:d6:b2:f2:11:9c:8a: |
| a1:00:26:6c:9a:bd:dd:da:97:ea:07:61:5e:48:8e:dd:3f:10: |
| 4b:39:d1:9a:ba:8f:14:30:b3:36:3c:9f:a7:2c:68:b4:3c:da: |
| f2:90:24:4a:03:19:38:24:73:b5:72:b3:ae:31:b3:44:96:36: |
| 3d:38:c5:c7:07:62:78:06:d8:5d:01:07:d9:b3:2d:be:0f:46: |
| 13:8c:25:f9:d7:e0:84:5d:a4:62:a7:5d:3b:22:cf:e6:95:97: |
| 20:d3:24:40:cc:cf:3d:72:17:f9:c1:8e:ee:15:6f:99:8f:24: |
| d1:83:6b:f9:fe:6b:94:3a:9c:2c:02:5c:1d:70:d6:f8:d6:69: |
| 0d:99:f5:53:89:4f:21:7b:a6:34:dd:ce:27:ef:45:a5:e0:c6: |
| e5:f5:fc:5f |
| -----BEGIN CERTIFICATE----- |
| MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
| cm1lZGlhdGUwHhcNMTUwMzAyMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD |
| VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2DLn |
| Kr5Vjeforu4dxvU7DG0l2VOOSoQMHnvLMC9fH4Wj5+CSebSiNf63cbSjwHndUOXk |
| sGG1LJcu5kq8xjzHIPOHIE4n2Ir2DamsCleaUwOeXzLvBxgKq/anQk7vNpoQStvT |
| n0nXBDqVYXe6XtKEy1fsRZHQ/b5bi00vCyGriauS2fwYDES7VAqUXb3urKnu8ieo |
| PzCx5/b9GgWGVtsi3r3lptJQLUwMqxyySWwjmkbY9VP0nVIs8CXjqOeZ023s8AzR |
| vR5zxo9dEVCIs2O8x8XrNnSPA/4aNtesXxiucxF/3IHcfHcX7CyRxdvMLRqg8a2q |
| 1LYdIu4ivUjJ8N9/AgMBAAGjgekwgeYwHQYDVR0OBBYEFObDVIVV8UT2S1XT6glp |
| 45X22ir6MB8GA1UdIwQYMBaAFOw/t5Ld6n2XpXciKOmYTQ0HacSGMD8GCCsGAQUF |
| BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk |
| aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu |
| dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF |
| BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAJ45BnPBcSuCwY8f6zB/U |
| ITUzhxNotxgIDroioVEa2boxpzWAx3U1pGjIPpF5VeNgNHmhD6nMBZJhQLBmK/7H |
| KaJU83xxtjb+qf17eepmGcAv0laXL8oSo5Zrs1fIBlhv3lPXY+6T1rLyEZyKoQAm |
| bJq93dqX6gdhXkiO3T8QSznRmrqPFDCzNjyfpyxotDza8pAkSgMZOCRztXKzrjGz |
| RJY2PTjFxwdieAbYXQEH2bMtvg9GE4wl+dfghF2kYqddOyLP5pWXINMkQMzPPXIX |
| +cGO7hVvmY8k0YNr+f5rlDqcLAJcHXDW+NZpDZn1U4lPIXumNN3OJ+9FpeDG5fX8 |
| Xw== |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 2 (0x2) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:e4:7c:a3:bb:4c:6d:c3:5e:ae:62:cd:af:18:39: |
| c5:4b:6a:a3:fd:85:d0:ed:8b:25:93:bd:2b:06:22: |
| b2:6b:c1:ff:73:c9:26:dd:d6:eb:eb:ee:93:4a:6d: |
| df:10:02:b8:c5:72:d4:2f:c7:b4:1a:06:e9:38:b4: |
| 90:ae:9f:5f:69:45:47:07:68:17:b2:84:8a:65:b8: |
| 1e:ef:de:f1:b4:8a:6b:ab:de:55:79:5d:f5:2e:96: |
| 46:5b:5c:87:0b:4a:a8:53:70:4f:6f:f3:9e:9d:f4: |
| f8:38:fa:1f:a6:5f:a3:25:08:f2:e9:63:fc:3c:98: |
| 4d:91:df:77:60:e7:e2:bd:af:bb:d9:23:38:2d:6e: |
| 07:07:0c:1a:59:5e:8a:43:c7:da:b2:ce:39:3a:80: |
| c6:72:60:1f:d3:93:45:cd:63:b8:8b:96:bf:30:cd: |
| b1:f6:56:d7:a9:de:14:42:ae:42:40:f8:e9:7b:47: |
| a3:63:a1:5d:b9:2b:c0:3b:2b:81:56:11:54:ce:96: |
| 85:e6:3a:8c:66:ff:42:9f:ce:e4:a4:80:f5:59:8a: |
| 4b:ae:b2:37:c2:1f:45:9b:49:cd:db:0f:8b:a7:37: |
| 31:20:19:b4:42:20:aa:e9:e4:af:13:5a:b9:ea:d2: |
| 2c:9a:15:48:af:8d:ed:d0:fe:02:c0:a2:c6:47:bd: |
| dd:2f |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| EC:3F:B7:92:DD:EA:7D:97:A5:77:22:28:E9:98:4D:0D:07:69:C4:86 |
| X509v3 Authority Key Identifier: |
| keyid:44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 40:21:7c:15:90:68:e9:aa:b0:ab:21:63:e7:21:f1:92:5b:75: |
| 02:34:b4:cd:06:b3:45:f4:93:07:d1:0f:f2:bc:92:ac:75:94: |
| 43:ad:a8:4f:91:6a:28:0c:cd:47:8d:01:de:54:51:aa:14:e3: |
| 35:f8:eb:d8:d4:59:f5:86:ef:55:e6:6f:54:17:47:c1:5f:e8: |
| be:0d:7f:34:d2:88:2d:b5:04:29:25:11:cc:a3:d7:0e:49:b2: |
| 9a:e3:01:1d:3f:15:89:68:41:19:4d:ee:8d:12:0e:96:ce:5e: |
| e5:08:31:64:4f:89:e0:91:1b:a9:b0:3c:4e:50:cb:83:a0:df: |
| d0:d3:df:af:53:d5:99:6b:88:dd:9c:4f:98:f1:0d:1d:f5:29: |
| f6:c5:be:18:84:4f:1f:76:ce:6f:c8:08:a0:f4:58:af:a3:ff: |
| cb:44:55:ad:2e:6e:e0:44:07:f4:a3:d4:08:9c:d1:0e:04:29: |
| 34:54:1b:bd:e8:e3:b4:56:e1:0b:05:bd:ee:6d:47:fb:10:42: |
| d2:14:12:e4:15:29:bd:06:13:7d:12:41:fa:5f:5d:01:27:69: |
| 99:76:ff:76:74:c8:c8:fe:11:c5:2e:67:44:d3:32:6d:8f:45: |
| e4:0a:5a:73:ef:74:75:6a:6c:d6:c2:c5:e8:73:bc:be:29:b3: |
| 3a:01:cf:02 |
| -----BEGIN CERTIFICATE----- |
| MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hyju0xt |
| w16uYs2vGDnFS2qj/YXQ7Yslk70rBiKya8H/c8km3dbr6+6TSm3fEAK4xXLUL8e0 |
| GgbpOLSQrp9faUVHB2gXsoSKZbge797xtIprq95VeV31LpZGW1yHC0qoU3BPb/Oe |
| nfT4OPofpl+jJQjy6WP8PJhNkd93YOfiva+72SM4LW4HBwwaWV6KQ8fass45OoDG |
| cmAf05NFzWO4i5a/MM2x9lbXqd4UQq5CQPjpe0ejY6FduSvAOyuBVhFUzpaF5jqM |
| Zv9Cn87kpID1WYpLrrI3wh9Fm0nN2w+LpzcxIBm0QiCq6eSvE1q56tIsmhVIr43t |
| 0P4CwKLGR73dLwIDAQABo4HLMIHIMB0GA1UdDgQWBBTsP7eS3ep9l6V3IijpmE0N |
| B2nEhjAfBgNVHSMEGDAWgBRE/J3wUfIjmf6kdsvLXDm9/Gg4RTA3BggrBgEFBQcB |
| AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs |
| BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD |
| VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB |
| AEAhfBWQaOmqsKshY+ch8ZJbdQI0tM0Gs0X0kwfRD/K8kqx1lEOtqE+RaigMzUeN |
| Ad5UUaoU4zX469jUWfWG71Xmb1QXR8Ff6L4NfzTSiC21BCklEcyj1w5JsprjAR0/ |
| FYloQRlN7o0SDpbOXuUIMWRPieCRG6mwPE5Qy4Og39DT369T1ZlriN2cT5jxDR31 |
| KfbFvhiETx92zm/ICKD0WK+j/8tEVa0ubuBEB/Sj1Aic0Q4EKTRUG73o47RW4QsF |
| ve5tR/sQQtIUEuQVKb0GE30SQfpfXQEnaZl2/3Z0yMj+EcUuZ0TTMm2PReQKWnPv |
| dHVqbNbCxehzvL4pszoBzwI= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 1 (0x1) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:a0:21:1c:d1:00:97:80:26:4c:59:fe:1f:73:23: |
| 48:97:10:b0:7f:bb:bb:34:00:76:fb:5d:e6:1f:59: |
| ed:24:d9:25:9c:16:06:50:8e:83:da:d6:93:22:80: |
| 34:69:d3:d2:ee:98:9b:51:09:02:25:e4:04:fa:cc: |
| de:4f:f6:3d:9c:65:80:b3:83:19:dd:74:b7:3f:84: |
| 86:7f:77:f9:5b:bc:c9:5c:0d:98:3e:77:df:3b:f1: |
| 43:cd:3d:4a:88:81:76:08:cb:56:25:5f:ff:56:7e: |
| e1:e2:ab:41:60:9a:89:32:cf:9b:5e:3f:95:17:04: |
| 75:2d:a2:b7:e8:02:ea:6e:a0:2f:69:9f:30:a7:cd: |
| 7b:e6:e5:3d:98:01:51:b4:3e:c2:cf:87:f9:a1:e8: |
| 9d:69:43:91:37:58:b9:ec:2e:64:5f:76:21:e5:09: |
| 8c:6e:72:31:f4:c5:79:2f:14:1f:84:17:10:e3:50: |
| 0f:5d:d2:dd:f1:33:cb:57:f2:19:8c:04:96:e8:a7: |
| 3b:77:51:3a:6e:03:2b:29:2a:db:40:da:fb:41:f2: |
| bc:37:ef:31:5c:2b:0f:b2:f4:58:27:b6:0f:24:4d: |
| 1d:97:ca:bd:00:c8:5f:eb:c4:3d:5d:b7:9e:d6:58: |
| 45:8a:20:af:2f:16:fc:51:6c:55:66:24:19:21:66: |
| 38:9f |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45 |
| X509v3 Authority Key Identifier: |
| keyid:44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 94:de:4b:73:02:e3:22:7f:1e:82:0c:64:a8:de:79:70:34:96: |
| 9d:b5:e9:a0:51:bc:5c:3a:b1:97:7e:a4:0a:04:60:5a:3b:3a: |
| 88:7e:ff:67:1a:19:7f:61:c0:6a:f9:73:14:b4:6b:be:21:fd: |
| f3:e2:7a:61:56:73:15:9e:8d:c5:bb:21:47:8a:1f:fa:03:0d: |
| 0a:90:20:37:69:49:0b:2e:6a:9c:64:5b:e8:f0:ed:29:32:5f: |
| bc:f8:59:81:ad:d8:d9:71:ef:8d:bd:9c:ed:2e:c3:53:4f:12: |
| ec:f3:83:24:36:30:b1:c6:59:a7:2c:a8:6d:62:30:bc:a3:28: |
| 13:0a:09:ed:47:a9:f5:68:e9:97:33:b2:e7:e7:5c:f9:bb:c1: |
| 4b:7b:63:62:0a:0f:31:58:7e:24:88:30:f5:42:cf:3e:86:ca: |
| 48:5b:83:44:b0:04:fa:0b:e2:9c:8b:5f:9c:68:77:23:79:40: |
| 29:95:0d:6e:32:bf:ab:b4:ae:8a:2a:ca:f2:2a:92:a7:0d:b4: |
| 80:5d:ce:be:f8:68:24:00:d9:30:9c:de:ba:35:d4:22:b5:dd: |
| 15:37:70:bd:2e:7c:53:65:db:6f:1d:47:fa:53:56:dd:d0:9f: |
| e7:d5:d5:27:7f:c7:2e:9b:55:c2:70:1f:5e:66:b8:d1:2e:ac: |
| c6:e9:de:aa |
| -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- |
| MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKAhHNEAl4AmTFn+H3Mj |
| SJcQsH+7uzQAdvtd5h9Z7STZJZwWBlCOg9rWkyKANGnT0u6Ym1EJAiXkBPrM3k/2 |
| PZxlgLODGd10tz+Ehn93+Vu8yVwNmD533zvxQ809SoiBdgjLViVf/1Z+4eKrQWCa |
| iTLPm14/lRcEdS2it+gC6m6gL2mfMKfNe+blPZgBUbQ+ws+H+aHonWlDkTdYuewu |
| ZF92IeUJjG5yMfTFeS8UH4QXEONQD13S3fEzy1fyGYwEluinO3dROm4DKykq20Da |
| +0HyvDfvMVwrD7L0WCe2DyRNHZfKvQDIX+vEPV23ntZYRYogry8W/FFsVWYkGSFm |
| OJ8CAwEAAaOByzCByDAdBgNVHQ4EFgQURPyd8FHyI5n+pHbLy1w5vfxoOEUwHwYD |
| VR0jBBgwFoAURPyd8FHyI5n+pHbLy1w5vfxoOEUwNwYIKwYBBQUHAQEEKzApMCcG |
| CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCU3ktzAuMi |
| fx6CDGSo3nlwNJadtemgUbxcOrGXfqQKBGBaOzqIfv9nGhl/YcBq+XMUtGu+If3z |
| 4nphVnMVno3FuyFHih/6Aw0KkCA3aUkLLmqcZFvo8O0pMl+8+FmBrdjZce+NvZzt |
| LsNTTxLs84MkNjCxxlmnLKhtYjC8oygTCgntR6n1aOmXM7Ln51z5u8FLe2NiCg8x |
| WH4kiDD1Qs8+hspIW4NEsAT6C+Kci1+caHcjeUAplQ1uMr+rtK6KKsryKpKnDbSA |
| Xc6++GgkANkwnN66NdQitd0VN3C9LnxTZdtvHUf6U1bd0J/n1dUnf8cum1XCcB9e |
| ZrjRLqzG6d6q |
| -----END TRUST_ANCHOR_UNCONSTRAINED----- |
| |
| 150301120000Z |
| -----BEGIN TIME----- |
| MTUwMzAxMTIwMDAwWg== |
| -----END TIME----- |
| |
| FAIL |
| -----BEGIN VERIFY_RESULT----- |
| RkFJTA== |
| -----END VERIFY_RESULT----- |
| |
| [Context] Processing Certificate |
| index: 1 |
| [Error] Time is before notBefore |
| |
| -----BEGIN ERRORS----- |
| W0NvbnRleHRdIFByb2Nlc3NpbmcgQ2VydGlmaWNhdGUKICBpbmRleDogMQogICAgICBbRXJyb3JdIFRpbWUgaXMgYmVmb3JlIG5vdEJlZm9yZQo= |
| -----END ERRORS----- |
