| [Created by: generate-expired-target.py] |
| |
| Certificate chain with 1 intermediary, where the target is expired (violates |
| validity.notAfter). Verification is expected to fail. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 1 (0x1) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediary |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:e4:45:ec:2b:33:db:da:8a:1f:b0:9c:73:6b:4b: |
| c2:a7:60:29:4f:61:1c:a6:5d:2a:17:76:d1:87:76: |
| ec:d7:2c:a6:80:72:62:c1:0c:7b:01:d4:6e:7a:c5: |
| fe:cc:89:1b:e6:4b:ef:76:0b:b8:46:b0:39:c0:50: |
| 54:44:97:d8:ea:4a:95:ae:3e:2c:38:1a:69:51:06: |
| cb:4d:85:44:e0:57:49:30:78:cc:fd:40:81:52:1a: |
| 43:c7:4a:02:db:b0:90:3a:b9:5f:7a:bd:a1:b1:7d: |
| a5:f7:ed:95:c5:e6:da:0e:d5:1a:fa:12:ce:2e:4f: |
| 6b:7c:a4:6b:de:89:47:0d:b9:34:62:c2:3a:06:db: |
| 72:2e:56:29:ca:80:d0:80:27:9e:3f:bf:73:b1:14: |
| 3c:88:f5:31:d3:d9:27:54:46:c3:b2:e3:59:f4:54: |
| 37:b8:73:b5:04:6b:6d:d2:e2:93:e6:57:2e:f8:3a: |
| 36:24:7c:fa:33:da:1a:5b:5d:da:f5:91:87:67:4a: |
| ca:2e:79:47:df:8c:33:8b:36:76:39:79:63:a9:7d: |
| 26:ef:95:22:e2:16:de:0a:1a:4a:4b:74:e3:d8:c5: |
| b9:ee:60:8d:ad:f7:cf:d4:d6:4e:b0:27:18:84:d1: |
| e3:ef:23:b8:00:6d:71:e8:a0:8e:bb:84:72:d9:75: |
| 76:6d |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 40:D1:E0:A6:C2:37:1A:32:25:B8:D9:6D:5E:67:E7:CA:E0:76:30:16 |
| X509v3 Authority Key Identifier: |
| keyid:DA:CD:B0:93:32:B4:DB:D9:38:FF:99:C6:AF:A7:44:80:D0:C0:4A:A1 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediary.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediary.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| 08:63:be:8b:50:78:97:05:7a:ee:a4:f1:fe:6f:bd:68:84:c4: |
| ce:e6:c9:fd:30:d8:27:a6:3c:37:74:21:4a:69:23:81:5f:da: |
| 02:56:45:f4:1e:a0:22:4c:43:8c:f0:65:c2:cb:db:68:05:5b: |
| 94:4b:93:3a:08:77:da:a0:67:3f:b2:d3:95:09:ad:ed:1e:e2: |
| 91:a4:8e:63:7d:37:d8:90:20:83:60:ab:0f:b7:ec:73:69:69: |
| b3:8e:54:6f:54:5b:95:de:2d:c9:49:73:5e:87:43:7e:37:07: |
| 02:a7:b7:df:e5:5e:9b:77:fb:9a:1f:15:29:29:f4:7e:00:e4: |
| 6f:5c:d2:66:46:5f:54:c4:6b:b2:50:2f:f4:78:8a:5e:cb:da: |
| 32:56:1c:ae:a7:92:d0:8e:71:95:6c:b1:ba:6c:b3:eb:3c:29: |
| 57:4e:e1:cd:8a:ef:41:ea:bd:7f:ce:17:cf:f5:9c:ec:d6:21: |
| cf:e2:e8:2d:b6:b9:dd:d9:2a:fe:d0:91:54:0e:15:a0:d3:ae: |
| ea:92:f9:98:c5:a2:da:a6:0d:89:8f:c9:fe:2e:25:9b:f4:f1: |
| 7f:ae:1a:5b:0f:94:c0:49:fb:15:0a:bb:1f:2b:fe:ca:d1:8e: |
| 10:94:16:c6:a0:a0:af:b9:5d:6a:31:c2:87:94:ee:ca:1e:93: |
| b3:ac:d6:dd |
| -----BEGIN CERTIFICATE----- |
| MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
| cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD |
| VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRewr |
| M9vaih+wnHNrS8KnYClPYRymXSoXdtGHduzXLKaAcmLBDHsB1G56xf7MiRvmS+92 |
| C7hGsDnAUFREl9jqSpWuPiw4GmlRBstNhUTgV0kweMz9QIFSGkPHSgLbsJA6uV96 |
| vaGxfaX37ZXF5toO1Rr6Es4uT2t8pGveiUcNuTRiwjoG23IuVinKgNCAJ54/v3Ox |
| FDyI9THT2SdURsOy41n0VDe4c7UEa23S4pPmVy74OjYkfPoz2hpbXdr1kYdnSsou |
| eUffjDOLNnY5eWOpfSbvlSLiFt4KGkpLdOPYxbnuYI2t98/U1k6wJxiE0ePvI7gA |
| bXHooI67hHLZdXZtAgMBAAGjgekwgeYwHQYDVR0OBBYEFEDR4KbCNxoyJbjZbV5n |
| 58rgdjAWMB8GA1UdIwQYMBaAFNrNsJMytNvZOP+Zxq+nRIDQwEqhMD8GCCsGAQUF |
| BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk |
| aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu |
| dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF |
| BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEACGO+i1B4lwV67qTx/m+9 |
| aITEzubJ/TDYJ6Y8N3QhSmkjgV/aAlZF9B6gIkxDjPBlwsvbaAVblEuTOgh32qBn |
| P7LTlQmt7R7ikaSOY3032JAgg2CrD7fsc2lps45Ub1Rbld4tyUlzXodDfjcHAqe3 |
| 3+Vem3f7mh8VKSn0fgDkb1zSZkZfVMRrslAv9HiKXsvaMlYcrqeS0I5xlWyxumyz |
| 6zwpV07hzYrvQeq9f84Xz/Wc7NYhz+LoLba53dkq/tCRVA4VoNOu6pL5mMWi2qYN |
| iY/J/i4lm/Txf64aWw+UwEn7FQq7Hyv+ytGOEJQWxqCgr7ldajHCh5Tuyh6Ts6zW |
| 3Q== |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 2 (0x2) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Intermediary |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:b9:80:44:8f:9b:41:d5:be:e0:1a:a7:a4:4d:4e: |
| a0:52:ae:81:e7:c4:bd:f9:79:80:36:6e:8e:2a:56: |
| a9:84:26:da:d5:ad:e2:2a:5a:0e:68:2d:e9:ab:24: |
| 52:89:8e:7e:99:3d:b6:b7:ca:27:b7:80:45:38:4a: |
| eb:66:54:e1:28:a3:0e:df:a1:b7:63:4c:e1:44:e1: |
| af:6f:60:b3:35:af:9e:4d:51:cc:51:4c:70:8f:6b: |
| f2:73:c4:39:cb:a6:0b:9f:14:27:1a:90:f6:75:d3: |
| 3c:a0:b7:ba:3d:7c:27:eb:b3:b1:37:58:2a:e1:d8: |
| 62:09:dc:07:33:41:40:34:2c:93:98:e5:26:bc:d6: |
| 98:ed:75:b2:f1:98:4a:71:b4:21:61:96:12:98:7f: |
| 24:6e:d8:37:f2:2b:54:1e:4a:b0:8a:d9:2c:ab:b7: |
| 88:f5:a7:fb:fe:a7:04:b7:35:82:66:3f:ea:fb:eb: |
| 15:26:ae:52:ae:34:ec:da:fe:08:fa:ef:fd:40:f6: |
| 8d:b4:c5:68:a7:e3:60:2c:dc:b8:e0:3e:54:a9:60: |
| 11:7d:1e:54:37:98:b1:c2:fe:d0:fd:fa:b5:e6:f9: |
| bd:a6:50:b9:b6:1b:ec:3f:dc:ed:c2:d7:01:37:9e: |
| 69:24:90:05:d5:f2:26:fa:76:f3:76:34:e5:b7:88: |
| 92:95 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| DA:CD:B0:93:32:B4:DB:D9:38:FF:99:C6:AF:A7:44:80:D0:C0:4A:A1 |
| X509v3 Authority Key Identifier: |
| keyid:CB:65:23:DB:47:DE:B5:40:EC:44:D8:90:A7:D6:C0:78:81:FA:E2:CE |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 9d:a0:3a:08:79:82:a7:ac:d8:e9:bc:8a:e1:32:88:09:c8:de: |
| 54:ed:6f:43:fd:ab:68:b2:32:37:8e:74:de:37:da:f9:31:2d: |
| ee:d6:f7:0b:d2:25:f9:16:1e:93:f1:f3:e1:fd:fd:0f:ac:75: |
| 7b:a4:60:09:4c:0f:ea:45:5b:46:cf:e5:5a:c9:36:37:17:ee: |
| cf:44:82:51:c9:ba:eb:55:13:2d:f5:6f:83:9e:01:0c:04:ff: |
| 58:ad:50:54:7c:ee:a5:a4:e6:3c:93:46:c8:a7:bd:6f:18:7f: |
| d0:5c:1c:8a:a4:f3:1d:e3:d7:a3:1d:7e:a4:ca:cd:1b:92:ff: |
| 26:13:cc:b8:89:b2:b8:24:0c:30:df:43:70:20:5d:72:3f:b0: |
| 0e:8b:08:3e:e5:52:c9:d8:65:db:c6:31:95:a1:c4:56:b4:1f: |
| eb:af:e8:9c:8b:78:c2:75:c4:f1:98:e1:20:d6:5a:32:9f:94: |
| 75:c0:a5:86:da:79:a7:d3:25:20:56:13:dd:04:27:bd:e7:27: |
| 21:9d:8d:1d:dd:87:bc:6e:07:fd:9f:64:c5:7e:ac:2a:a4:a8: |
| e5:29:d1:5b:e2:24:6c:db:ca:3a:b6:13:34:00:81:15:08:1d: |
| fb:eb:ac:1a:ab:53:3e:31:db:30:40:4e:17:f3:98:53:00:d8: |
| d1:b8:5c:58 |
| -----BEGIN CERTIFICATE----- |
| MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYBEj5tB |
| 1b7gGqekTU6gUq6B58S9+XmANm6OKlaphCba1a3iKloOaC3pqyRSiY5+mT22t8on |
| t4BFOErrZlThKKMO36G3Y0zhROGvb2CzNa+eTVHMUUxwj2vyc8Q5y6YLnxQnGpD2 |
| ddM8oLe6PXwn67OxN1gq4dhiCdwHM0FANCyTmOUmvNaY7XWy8ZhKcbQhYZYSmH8k |
| btg38itUHkqwitksq7eI9af7/qcEtzWCZj/q++sVJq5SrjTs2v4I+u/9QPaNtMVo |
| p+NgLNy44D5UqWARfR5UN5ixwv7Q/fq15vm9plC5thvsP9ztwtcBN55pJJAF1fIm |
| +nbzdjTlt4iSlQIDAQABo4HLMIHIMB0GA1UdDgQWBBTazbCTMrTb2Tj/mcavp0SA |
| 0MBKoTAfBgNVHSMEGDAWgBTLZSPbR961QOxE2JCn1sB4gfrizjA3BggrBgEFBQcB |
| AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs |
| BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD |
| VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB |
| AJ2gOgh5gqes2Om8iuEyiAnI3lTtb0P9q2iyMjeOdN432vkxLe7W9wvSJfkWHpPx |
| 8+H9/Q+sdXukYAlMD+pFW0bP5VrJNjcX7s9EglHJuutVEy31b4OeAQwE/1itUFR8 |
| 7qWk5jyTRsinvW8Yf9BcHIqk8x3j16MdfqTKzRuS/yYTzLiJsrgkDDDfQ3AgXXI/ |
| sA6LCD7lUsnYZdvGMZWhxFa0H+uv6JyLeMJ1xPGY4SDWWjKflHXApYbaeafTJSBW |
| E90EJ73nJyGdjR3dh7xuB/2fZMV+rCqkqOUp0VviJGzbyjq2EzQAgRUIHfvrrBqr |
| Uz4x2zBAThfzmFMA2NG4XFg= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 1 (0x1) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:c6:2e:8f:2a:f4:b2:4f:96:3c:a7:4e:f6:92:54: |
| be:34:77:64:65:fe:dd:dc:fd:11:29:a7:6c:56:04: |
| 9d:70:2f:3c:3f:55:e5:54:79:f0:bb:5f:79:97:f0: |
| 7b:0a:22:fb:66:d5:e8:6d:30:81:93:99:a5:8f:a5: |
| e2:33:b8:bd:05:9e:b1:c7:0a:63:75:12:e6:ac:75: |
| a3:1c:58:a0:c5:7b:40:45:60:f9:6a:8e:45:2a:59: |
| 7e:5f:8a:b8:a3:c9:bc:9d:dd:aa:d9:1d:85:30:67: |
| 67:db:d3:04:aa:cf:e9:42:fe:5d:df:46:ac:06:59: |
| 51:16:a0:e0:6c:f4:c0:ca:f6:c4:85:24:91:60:84: |
| b1:d0:92:7f:ab:ef:ce:5c:35:07:bc:03:72:32:c8: |
| 40:67:23:13:08:db:08:f3:cc:a0:75:e4:08:f7:e9: |
| ba:b3:e1:17:57:b1:16:93:ac:07:fa:04:1c:a7:6c: |
| d6:12:4f:c5:75:da:d4:6d:99:21:d1:9e:84:15:7a: |
| 34:ff:89:4e:c2:5b:43:89:86:63:90:db:37:93:15: |
| 57:27:0e:7a:c9:bb:21:a8:06:69:5d:41:b5:19:24: |
| bf:08:ea:67:0c:26:22:a3:86:7e:e0:04:d0:82:48: |
| b4:f5:48:01:56:20:6e:73:6d:c5:e1:62:1b:8e:f2: |
| bd:e7 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| CB:65:23:DB:47:DE:B5:40:EC:44:D8:90:A7:D6:C0:78:81:FA:E2:CE |
| X509v3 Authority Key Identifier: |
| keyid:CB:65:23:DB:47:DE:B5:40:EC:44:D8:90:A7:D6:C0:78:81:FA:E2:CE |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 74:69:8a:c4:51:dd:1d:be:5d:53:de:9d:de:c7:91:3a:0d:47: |
| 2f:36:0d:d8:a7:c9:89:7e:68:8f:86:ed:af:e6:83:9c:9e:4e: |
| 99:df:ae:bb:e7:d0:c2:e4:b9:e7:e5:71:f5:4f:c4:55:a5:1d: |
| a6:93:2c:f8:5f:ab:45:b4:37:74:bc:14:d6:32:b0:f5:c4:82: |
| b0:5e:47:14:52:37:64:14:4e:25:f5:bf:db:41:27:78:56:29: |
| 6a:35:87:62:ef:f8:35:fa:51:d7:36:96:b3:6a:6e:bd:3f:ad: |
| a5:0f:c8:25:7e:11:26:96:1b:a2:32:ac:21:ad:a8:ff:31:32: |
| 3d:f3:aa:07:df:f7:72:28:12:a7:b9:40:38:b6:6f:69:89:4e: |
| 33:52:fc:40:61:85:de:b1:29:92:b5:47:b3:f6:a4:37:1c:8c: |
| b9:1b:02:52:72:a1:4d:46:aa:84:32:8e:d8:c9:e5:87:87:3d: |
| 66:8f:a1:af:ef:71:3e:a0:a3:8d:cb:75:4b:57:d6:c8:03:e2: |
| 40:e3:85:cd:a7:cb:af:cc:49:9c:4c:a2:2a:8c:75:6a:70:88: |
| 3e:6a:24:a1:35:85:e7:6d:0d:7a:b1:35:45:e3:8e:a8:a6:c9: |
| 0c:d3:78:41:44:5c:0b:d1:ff:b0:b2:91:ed:a0:83:c7:04:b3: |
| a9:a7:c1:6e |
| -----BEGIN TRUSTED_CERTIFICATE----- |
| MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMYujyr0sk+WPKdO9pJU |
| vjR3ZGX+3dz9ESmnbFYEnXAvPD9V5VR58LtfeZfwewoi+2bV6G0wgZOZpY+l4jO4 |
| vQWesccKY3US5qx1oxxYoMV7QEVg+WqORSpZfl+KuKPJvJ3dqtkdhTBnZ9vTBKrP |
| 6UL+Xd9GrAZZURag4Gz0wMr2xIUkkWCEsdCSf6vvzlw1B7wDcjLIQGcjEwjbCPPM |
| oHXkCPfpurPhF1exFpOsB/oEHKds1hJPxXXa1G2ZIdGehBV6NP+JTsJbQ4mGY5Db |
| N5MVVycOesm7IagGaV1BtRkkvwjqZwwmIqOGfuAE0IJItPVIAVYgbnNtxeFiG47y |
| vecCAwEAAaOByzCByDAdBgNVHQ4EFgQUy2Uj20fetUDsRNiQp9bAeIH64s4wHwYD |
| VR0jBBgwFoAUy2Uj20fetUDsRNiQp9bAeIH64s4wNwYIKwYBBQUHAQEEKzApMCcG |
| CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB0aYrEUd0d |
| vl1T3p3ex5E6DUcvNg3Yp8mJfmiPhu2v5oOcnk6Z366759DC5Lnn5XH1T8RVpR2m |
| kyz4X6tFtDd0vBTWMrD1xIKwXkcUUjdkFE4l9b/bQSd4VilqNYdi7/g1+lHXNpaz |
| am69P62lD8glfhEmlhuiMqwhraj/MTI986oH3/dyKBKnuUA4tm9piU4zUvxAYYXe |
| sSmStUez9qQ3HIy5GwJScqFNRqqEMo7YyeWHhz1mj6Gv73E+oKONy3VLV9bIA+JA |
| 44XNp8uvzEmcTKIqjHVqcIg+aiShNYXnbQ16sTVF446opskM03hBRFwL0f+wspHt |
| oIPHBLOpp8Fu |
| -----END TRUSTED_CERTIFICATE----- |
| |
| -----BEGIN TIME----- |
| MTYwMzAyMTIwMDAwWg== |
| -----END TIME----- |
| |
| -----BEGIN VERIFY_RESULT----- |
| RkFJTA== |
| -----END VERIFY_RESULT----- |
