| [Created by: generate-chains.py] |
| |
| Certificate chain where the supposed root certificate is wrong: |
| |
| * The intermediate's "issuer" does not match the root's "subject" |
| * The intermediate's signature was not generated using the root's key |
| |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 6f:d4:ce:21:aa:ed:06:7b:56:9b:0b:40:d4:28:fb:ff:a9:d9:2b:9b |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:b3:d8:e1:c8:d6:ce:ed:3b:b7:8a:5b:17:c2:9e: |
| 0c:04:f4:4e:ba:ad:1b:cf:c0:63:b7:c9:01:e9:7a: |
| 28:d4:d8:0b:71:36:af:02:f6:44:fc:ce:5e:84:50: |
| fb:5f:ef:a0:b8:b5:77:62:c0:6c:9f:8f:4f:64:52: |
| 67:04:0b:d3:92:31:a5:79:f3:8d:11:03:03:a2:c0: |
| da:ef:8f:b5:68:f8:55:f0:ac:9b:05:3a:df:ea:7b: |
| 3b:06:f2:de:e3:b2:c5:27:3e:b9:39:90:c0:27:0d: |
| de:6c:a2:8e:e4:2e:f9:95:13:37:df:20:12:28:ae: |
| 82:5e:91:3a:cb:75:ae:55:fb:07:d6:40:48:cd:6f: |
| 9c:3e:07:0f:48:d1:8f:ba:db:fa:b2:7c:ce:29:10: |
| e0:6b:48:36:80:db:4c:10:19:a1:28:fb:e0:b5:4f: |
| b2:89:40:b7:6b:9a:af:a1:9b:b0:52:03:23:16:fb: |
| 0f:5d:c6:c9:f2:98:08:c5:07:85:76:30:57:46:be: |
| 85:46:ed:14:74:60:00:61:ce:f7:88:62:6c:0b:a2: |
| 41:9c:5a:27:3f:e5:29:9c:36:73:a3:04:8b:ab:74: |
| 2d:1e:f5:96:f7:b4:c2:51:77:a9:9c:ef:ac:fd:bc: |
| aa:cf:ba:98:cf:6c:1b:fc:e9:20:8c:dc:17:45:49: |
| 12:45 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 14:7E:08:D5:73:67:A9:9C:5B:C1:26:14:D1:96:8E:09:88:11:32:67 |
| X509v3 Authority Key Identifier: |
| keyid:3F:EE:51:69:3A:24:09:D6:26:3C:A4:08:22:1F:0D:77:7D:D5:E7:3B |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| 6f:45:77:15:36:c4:de:ad:a1:91:fd:91:06:3c:ae:9b:c1:9d: |
| 5a:0b:94:52:be:cf:a2:2b:3b:92:04:e1:dd:9b:a5:cd:ae:cb: |
| 60:13:d0:f5:52:f8:83:e1:ae:6b:65:9d:e2:23:23:c6:2f:71: |
| 40:b6:c8:95:45:8e:e6:11:aa:0e:b0:47:64:5d:3a:53:dc:4b: |
| 72:19:69:87:e8:65:a3:a1:b5:da:5b:79:70:83:57:df:69:5e: |
| 4a:fa:6e:6f:ec:83:d8:65:25:90:5d:d3:d2:99:9d:3b:78:56: |
| 44:6c:b5:02:95:2e:b0:4a:4a:c4:13:48:f0:cb:6a:2b:8d:f1: |
| cf:93:21:c2:fe:b5:67:e9:a0:6b:d3:c0:f6:1d:7f:96:75:88: |
| cc:72:e8:a0:39:fd:b0:48:fa:be:a0:7c:e2:93:1c:58:16:78: |
| 9e:60:9c:a3:ca:9d:76:43:f2:3b:c3:44:a0:e3:7a:0b:54:07: |
| 07:20:86:94:6d:0f:61:08:6b:05:c5:b3:48:c7:90:42:2d:20: |
| 65:73:ee:34:46:49:8d:23:35:5c:34:52:51:89:9d:60:f7:0f: |
| d4:b6:a6:ee:37:55:93:b3:3e:91:ac:b4:7c:37:47:20:67:de: |
| 8a:7a:5f:f1:24:75:d1:4b:4c:a1:5b:62:c1:11:76:69:7e:28: |
| 2e:09:02:c4 |
| -----BEGIN CERTIFICATE----- |
| MIIDoDCCAoigAwIBAgIUb9TOIartBntWmwtA1Cj7/6nZK5swDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx |
| MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEAs9jhyNbO7Tu3ilsXwp4MBPROuq0bz8Bjt8kB6Xoo1NgL |
| cTavAvZE/M5ehFD7X++guLV3YsBsn49PZFJnBAvTkjGlefONEQMDosDa74+1aPhV |
| 8KybBTrf6ns7BvLe47LFJz65OZDAJw3ebKKO5C75lRM33yASKK6CXpE6y3WuVfsH |
| 1kBIzW+cPgcPSNGPutv6snzOKRDga0g2gNtMEBmhKPvgtU+yiUC3a5qvoZuwUgMj |
| FvsPXcbJ8pgIxQeFdjBXRr6FRu0UdGAAYc73iGJsC6JBnFonP+UpnDZzowSLq3Qt |
| HvWW97TCUXepnO+s/byqz7qYz2wb/OkgjNwXRUkSRQIDAQABo4HpMIHmMB0GA1Ud |
| DgQWBBQUfgjVc2epnFvBJhTRlo4JiBEyZzAfBgNVHSMEGDAWgBQ/7lFpOiQJ1iY8 |
| pAgiHw13fdXnOzA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD |
| ggEBAG9FdxU2xN6toZH9kQY8rpvBnVoLlFK+z6IrO5IE4d2bpc2uy2AT0PVS+IPh |
| rmtlneIjI8YvcUC2yJVFjuYRqg6wR2RdOlPcS3IZaYfoZaOhtdpbeXCDV99pXkr6 |
| bm/sg9hlJZBd09KZnTt4VkRstQKVLrBKSsQTSPDLaiuN8c+TIcL+tWfpoGvTwPYd |
| f5Z1iMxy6KA5/bBI+r6gfOKTHFgWeJ5gnKPKnXZD8jvDRKDjegtUBwcghpRtD2EI |
| awXFs0jHkEItIGVz7jRGSY0jNVw0UlGJnWD3D9S2pu43VZOzPpGstHw3RyBn3op6 |
| X/EkddFLTKFbYsERdml+KC4JAsQ= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 3e:47:c8:ca:0d:d0:ba:cc:83:24:aa:c4:09:b2:53:44:d2:da:f7:4b |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:e4:40:ac:b5:f3:c7:b0:dc:ca:07:85:b4:fa:5f: |
| 0d:28:a4:0d:88:12:cb:05:a3:4f:bb:7d:01:88:de: |
| 0c:b3:b9:0c:cc:3f:b4:6e:9f:d6:b6:a7:2a:6b:03: |
| c5:bc:3b:10:17:69:fd:29:5c:d3:fd:38:fe:b6:5e: |
| b2:04:8f:10:93:92:aa:db:76:07:a2:60:0f:3e:07: |
| bb:8d:f1:ca:c8:f3:38:69:61:38:41:4e:69:2d:70: |
| c2:ed:af:85:81:99:dc:8e:65:03:45:32:9b:01:95: |
| 7c:d5:c0:90:bd:f4:08:a5:44:4b:e5:a2:e7:fe:17: |
| e4:f3:3d:59:35:8e:6d:3b:70:4d:b8:49:ac:63:ff: |
| 3e:d4:71:36:e9:2b:50:c9:5c:bc:bb:b0:c6:1b:c4: |
| 0a:01:ec:ae:3f:b7:bd:10:57:08:5e:ec:8a:07:ce: |
| e5:da:46:25:e8:ca:0a:e0:c2:cc:0d:44:84:db:0c: |
| 88:d5:0f:65:bc:ea:69:10:ba:dc:93:ef:34:f9:2f: |
| c7:9b:c5:49:27:72:9c:a3:fd:40:9c:49:e3:59:7c: |
| 24:cc:99:9a:01:b6:0d:fb:41:cb:36:80:41:88:c7: |
| 75:9f:d5:01:6f:63:d5:f5:75:85:cd:26:3e:a6:fe: |
| 8d:a9:ef:a8:b0:04:8b:7e:89:f3:5f:75:3a:56:69: |
| c7:07 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 3F:EE:51:69:3A:24:09:D6:26:3C:A4:08:22:1F:0D:77:7D:D5:E7:3B |
| X509v3 Authority Key Identifier: |
| keyid:64:6F:C2:6E:64:18:20:24:F6:02:A9:AF:63:23:01:ED:CC:69:9B:E0 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 58:7e:16:d7:e5:72:b1:be:d4:7f:e8:59:cc:53:02:d8:5c:9e: |
| 11:75:b2:01:0b:3f:86:ed:0f:9a:29:2d:69:37:0b:40:19:19: |
| fe:d2:12:33:82:5e:8f:bc:22:d6:d1:6e:18:9e:f9:39:3d:a7: |
| d8:a0:18:96:13:a3:41:89:05:24:71:8f:d3:55:4c:2f:62:62: |
| a5:ef:04:ee:47:a8:ad:c2:d4:fd:d8:fc:18:e7:88:9e:bb:8f: |
| 11:c6:62:6e:2e:3b:2a:c6:17:6a:a6:4b:cb:13:8e:5f:5b:8b: |
| 01:f0:71:cc:01:0c:48:38:6e:aa:dd:b7:17:03:aa:40:a9:47: |
| 99:f2:c5:93:54:7e:33:5b:d1:e3:e1:0f:83:3e:c5:c8:63:e6: |
| 7c:8c:55:92:86:38:5e:cb:e0:96:4e:83:b1:98:6d:e8:e1:30: |
| 88:b0:49:d4:7c:ae:e3:71:df:5d:f6:b6:15:b3:40:a4:e3:15: |
| 61:31:89:d1:25:d5:1d:46:ce:87:88:af:fb:4c:6d:31:58:b4: |
| b9:c5:39:e9:78:b7:62:48:a1:b7:f1:f8:f2:72:e6:51:b3:6d: |
| 81:f0:97:09:64:ee:c9:7a:20:d7:f1:ce:9f:bf:30:fe:c6:e8: |
| 85:de:48:18:ac:de:0a:d9:e8:f0:d0:7d:74:e9:3c:67:90:b6: |
| 7c:c5:16:a1 |
| -----BEGIN CERTIFICATE----- |
| MIIDgDCCAmigAwIBAgIUPkfIyg3QusyDJKrECbJTRNLa90swDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBAORArLXzx7DcygeFtPpfDSikDYgSywWjT7t9AYjeDLO5DMw/ |
| tG6f1ranKmsDxbw7EBdp/Slc0/04/rZesgSPEJOSqtt2B6JgDz4Hu43xysjzOGlh |
| OEFOaS1wwu2vhYGZ3I5lA0UymwGVfNXAkL30CKVES+Wi5/4X5PM9WTWObTtwTbhJ |
| rGP/PtRxNukrUMlcvLuwxhvECgHsrj+3vRBXCF7sigfO5dpGJejKCuDCzA1EhNsM |
| iNUPZbzqaRC63JPvNPkvx5vFSSdynKP9QJxJ41l8JMyZmgG2DftByzaAQYjHdZ/V |
| AW9j1fV1hc0mPqb+janvqLAEi36J8191OlZpxwcCAwEAAaOByzCByDAdBgNVHQ4E |
| FgQUP+5RaTokCdYmPKQIIh8Nd33V5zswHwYDVR0jBBgwFoAUZG/CbmQYICT2Aqmv |
| YyMB7cxpm+AwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ |
| MA0GCSqGSIb3DQEBCwUAA4IBAQBYfhbX5XKxvtR/6FnMUwLYXJ4RdbIBCz+G7Q+a |
| KS1pNwtAGRn+0hIzgl6PvCLW0W4Ynvk5PafYoBiWE6NBiQUkcY/TVUwvYmKl7wTu |
| R6itwtT92PwY54ieu48RxmJuLjsqxhdqpkvLE45fW4sB8HHMAQxIOG6q3bcXA6pA |
| qUeZ8sWTVH4zW9Hj4Q+DPsXIY+Z8jFWShjhey+CWToOxmG3o4TCIsEnUfK7jcd9d |
| 9rYVs0Ck4xVhMYnRJdUdRs6HiK/7TG0xWLS5xTnpeLdiSKG38fjycuZRs22B8JcJ |
| ZO7JeiDX8c6fvzD+xuiF3kgYrN4K2ejw0H106TxnkLZ8xRah |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 66:63:f9:27:23:34:d5:b4:a6:e3:b2:e1:3f:8c:39:ed:fb:cd:58:fc |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=BogusRoot |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=BogusRoot |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:b8:c8:2f:dc:30:b5:3e:65:02:31:fe:76:d5:cf: |
| 18:49:18:9a:99:63:02:ea:1f:9c:fc:34:05:04:f5: |
| dc:94:15:48:0c:0b:c0:18:b9:0f:a5:a0:8f:66:27: |
| 02:0b:a9:33:0f:a8:27:d7:61:d7:77:7e:d5:ab:db: |
| d4:a0:32:d0:40:9b:66:91:5b:ec:07:df:67:13:14: |
| 71:1f:21:98:d8:89:ae:15:dd:68:07:3d:3b:62:5c: |
| 34:f8:e8:39:da:2a:23:01:6a:09:a7:91:a1:c1:94: |
| ab:ba:42:7f:24:20:57:c8:67:2a:d6:cf:24:7b:b6: |
| 14:ad:69:61:c5:50:6b:6b:d2:77:0c:0c:6e:30:df: |
| 2b:e8:c4:de:89:a9:94:bf:8d:70:4e:ee:e1:5d:0f: |
| 11:0f:80:71:3d:67:90:59:c5:c7:d6:8b:6a:29:7d: |
| 8a:43:7a:98:0d:75:83:db:3c:09:27:19:12:77:99: |
| 2c:2b:a2:94:dc:7d:78:41:e2:4a:9a:31:f4:fa:8b: |
| ef:d3:d3:42:dd:1d:a5:be:5d:2f:1c:9c:33:4f:7d: |
| c8:bd:12:eb:18:cd:e0:80:d5:7a:1a:2d:93:fc:1f: |
| 59:8e:72:f8:e5:21:e1:f2:fe:b7:6a:c1:e1:39:20: |
| 26:60:98:fd:02:f0:5b:a2:6d:13:c7:15:20:9b:ef: |
| d5:31 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 6F:BD:F8:37:8B:1D:B5:1A:91:4C:D6:08:E8:33:85:8C:08:E9:3E:63 |
| X509v3 Authority Key Identifier: |
| keyid:6F:BD:F8:37:8B:1D:B5:1A:91:4C:D6:08:E8:33:85:8C:08:E9:3E:63 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/BogusRoot.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/BogusRoot.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 1a:f5:48:c5:bc:2a:d4:78:ad:33:1b:59:d9:22:c2:a9:19:f0: |
| a5:9f:39:40:c5:eb:8f:f2:cd:d5:ac:90:2f:a5:a1:ec:7b:de: |
| a4:04:80:d7:86:99:64:66:25:5f:e3:1d:75:97:9a:6c:e3:66: |
| 42:aa:f1:75:2f:20:80:06:d5:ea:f1:17:81:83:eb:a7:2c:70: |
| 26:dc:ef:5f:d6:56:bf:83:55:c4:8a:53:68:de:02:92:4e:d3: |
| 35:86:a4:61:24:68:b5:c6:37:f4:e9:d1:dd:96:96:0c:1a:b9: |
| 23:cc:e8:5e:5e:d9:92:5e:85:72:ec:67:b7:38:07:1d:85:1f: |
| 31:93:f9:6e:65:dc:d1:df:3d:22:57:9e:6a:d8:d0:9f:d6:99: |
| 57:75:1c:17:88:1e:64:85:e9:91:a2:34:5a:15:ea:81:25:55: |
| d8:77:9b:6a:67:33:bf:89:a5:81:4a:20:71:87:b0:ec:fd:66: |
| 5c:f1:62:f3:07:2d:07:ff:a1:41:fb:3f:fa:97:a7:4e:48:60: |
| 55:65:cc:a2:54:88:27:9b:99:82:19:ac:ba:be:a2:5b:df:1e: |
| ad:fc:72:dd:ca:cb:d6:08:66:96:09:d2:29:a8:98:0d:68:d2: |
| 05:6b:e2:b1:49:37:8d:08:39:b4:4b:c5:f2:f5:35:ee:85:ad: |
| 56:b8:d6:53 |
| -----BEGIN CERTIFICATE----- |
| MIIDjDCCAnSgAwIBAgIUZmP5JyM01bSm47LhP4w57fvNWPwwDQYJKoZIhvcNAQEL |
| BQAwFDESMBAGA1UEAwwJQm9ndXNSb290MB4XDTE4MDMxMDEyMDAwMFoXDTIxMDEw |
| MTEyMDAwMFowFDESMBAGA1UEAwwJQm9ndXNSb290MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEAuMgv3DC1PmUCMf521c8YSRiamWMC6h+c/DQFBPXclBVI |
| DAvAGLkPpaCPZicCC6kzD6gn12HXd37Vq9vUoDLQQJtmkVvsB99nExRxHyGY2Imu |
| Fd1oBz07Ylw0+Og52iojAWoJp5GhwZSrukJ/JCBXyGcq1s8ke7YUrWlhxVBra9J3 |
| DAxuMN8r6MTeiamUv41wTu7hXQ8RD4BxPWeQWcXH1otqKX2KQ3qYDXWD2zwJJxkS |
| d5ksK6KU3H14QeJKmjH0+ovv09NC3R2lvl0vHJwzT33IvRLrGM3ggNV6Gi2T/B9Z |
| jnL45SHh8v63asHhOSAmYJj9AvBbom0TxxUgm+/VMQIDAQABo4HVMIHSMB0GA1Ud |
| DgQWBBRvvfg3ix21GpFM1gjoM4WMCOk+YzAfBgNVHSMEGDAWgBRvvfg3ix21GpFM |
| 1gjoM4WMCOk+YzA8BggrBgEFBQcBAQQwMC4wLAYIKwYBBQUHMAKGIGh0dHA6Ly91 |
| cmwtZm9yLWFpYS9Cb2d1c1Jvb3QuY2VyMDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6 |
| Ly91cmwtZm9yLWNybC9Cb2d1c1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNV |
| HRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAa9UjFvCrUeK0zG1nZIsKp |
| GfClnzlAxeuP8s3VrJAvpaHse96kBIDXhplkZiVf4x11l5ps42ZCqvF1LyCABtXq |
| 8ReBg+unLHAm3O9f1la/g1XEilNo3gKSTtM1hqRhJGi1xjf06dHdlpYMGrkjzOhe |
| XtmSXoVy7Ge3OAcdhR8xk/luZdzR3z0iV55q2NCf1plXdRwXiB5khemRojRaFeqB |
| JVXYd5tqZzO/iaWBSiBxh7Ds/WZc8WLzBy0H/6FB+z/6l6dOSGBVZcyiVIgnm5mC |
| Gay6vqJb3x6t/HLdysvWCGaWCdIpqJgNaNIFa+KxSTeNCDm0S8Xy9TXuha1WuNZT |
| -----END CERTIFICATE----- |
