| [Created by: ./generate-target-not-end-entity.py] |
| |
| Certificate chain with 1 intermediary, a trusted root, and a target |
| certificate that is also a CA. Verification is expected to succeed, as the test |
| code accepts any target certificate. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 1 (0x1) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediary |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:ee:c2:63:d9:42:ea:55:e7:60:10:b7:7a:07:f3: |
| 2c:85:b7:38:91:0c:ec:29:d5:fd:ca:14:ad:58:8b: |
| 12:c2:fd:b6:2e:fb:50:dc:04:e9:c3:20:d1:db:23: |
| da:0e:5e:93:94:cf:82:54:fd:e7:5d:9a:ee:01:37: |
| 84:67:e9:f4:93:7b:ef:be:b1:e1:a3:5a:5a:eb:31: |
| b1:29:8e:05:1a:90:d5:15:aa:5e:de:29:1b:1f:80: |
| eb:17:fa:89:4b:d4:5b:77:0f:d1:e0:7b:f2:8d:a6: |
| b4:aa:22:44:42:3e:bb:af:b7:5e:06:ae:0b:c0:20: |
| 6e:ea:90:ef:4c:cb:34:5a:6b:37:29:a7:07:0c:66: |
| 65:16:36:29:f0:d7:c8:e7:cc:88:2f:cc:bd:63:33: |
| 2d:f5:91:8d:9b:69:f6:f3:05:d3:ca:87:96:ed:79: |
| e4:0f:85:a4:41:62:aa:f2:f9:89:fe:a7:92:e5:7c: |
| 0a:6e:74:70:b0:be:b2:67:12:2c:c4:44:77:54:f0: |
| d6:07:26:aa:ad:8f:9c:f2:12:c2:c1:23:2d:54:8c: |
| 09:df:94:59:7c:8b:e0:62:f1:2d:7b:cc:26:f3:11: |
| 7b:97:04:3b:2a:02:c5:8f:2f:28:c5:c4:52:dc:4c: |
| 5b:6f:0b:8c:e4:89:0a:85:d0:a3:d4:02:74:35:48: |
| c7:c5 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 75:E4:93:1E:26:35:79:D3:34:F7:E2:FD:A3:1C:38:1C:68:8B:F6:CD |
| X509v3 Authority Key Identifier: |
| keyid:58:01:24:B6:3B:E6:E7:85:87:83:6F:54:23:6A:C2:D4:E0:9D:6C:37 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediary.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediary.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 86:0e:74:e2:4f:1c:93:23:8a:9c:37:4a:42:ff:ab:4b:7b:5c: |
| 38:c3:67:11:1d:60:03:b3:1e:57:15:8f:1f:b2:94:45:f0:44: |
| 31:f1:7e:30:0e:f9:cc:48:7b:a3:27:2b:bf:9a:bd:e9:a1:69: |
| e2:1f:e7:91:ef:98:e9:58:5e:f8:7c:a0:8d:e5:81:85:af:8c: |
| a6:04:c5:57:3e:cb:5f:33:dc:ca:b6:72:5b:e7:82:9b:68:91: |
| 73:aa:f2:47:b9:6b:e2:7d:12:b4:85:87:2a:a9:49:a0:cd:79: |
| 41:8d:60:33:43:e8:aa:55:4b:60:8a:41:26:ca:e1:75:35:bd: |
| 45:00:a7:1a:2e:16:15:14:1f:be:9d:aa:25:54:e2:0d:f2:da: |
| 96:27:72:2c:75:4b:d7:06:5f:9d:47:37:25:08:7f:1f:ad:df: |
| e7:6f:1d:f6:95:63:e8:08:02:c9:51:dc:ae:4a:31:eb:c5:61: |
| 24:79:4c:d1:88:79:1f:04:ae:35:79:24:bc:29:4d:0c:c0:05: |
| 99:91:db:f3:83:af:95:4f:f3:13:35:b4:a9:40:04:81:cb:f5: |
| 39:e1:55:96:cf:42:86:68:26:f8:cc:82:6a:b9:10:77:41:55: |
| 03:16:9d:0e:57:37:33:a0:53:ca:7e:0b:1c:85:9e:c2:81:8d: |
| c8:3e:b8:62 |
| -----BEGIN CERTIFICATE----- |
| MIIDfzCCAmegAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
| cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD |
| VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuwmPZ |
| QupV52AQt3oH8yyFtziRDOwp1f3KFK1YixLC/bYu+1DcBOnDINHbI9oOXpOUz4JU |
| /eddmu4BN4Rn6fSTe+++seGjWlrrMbEpjgUakNUVql7eKRsfgOsX+olL1Ft3D9Hg |
| e/KNprSqIkRCPruvt14GrgvAIG7qkO9MyzRaazcppwcMZmUWNinw18jnzIgvzL1j |
| My31kY2bafbzBdPKh5bteeQPhaRBYqry+Yn+p5LlfApudHCwvrJnEizERHdU8NYH |
| Jqqtj5zyEsLBIy1UjAnflFl8i+Bi8S17zCbzEXuXBDsqAsWPLyjFxFLcTFtvC4zk |
| iQqF0KPUAnQ1SMfFAgMBAAGjgdswgdgwHQYDVR0OBBYEFHXkkx4mNXnTNPfi/aMc |
| OBxoi/bNMB8GA1UdIwQYMBaAFFgBJLY75ueFh4NvVCNqwtTgnWw3MD8GCCsGAQUF |
| BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk |
| aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu |
| dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w |
| DQYJKoZIhvcNAQELBQADggEBAIYOdOJPHJMjipw3SkL/q0t7XDjDZxEdYAOzHlcV |
| jx+ylEXwRDHxfjAO+cxIe6MnK7+avemhaeIf55HvmOlYXvh8oI3lgYWvjKYExVc+ |
| y18z3Mq2clvngptokXOq8ke5a+J9ErSFhyqpSaDNeUGNYDND6KpVS2CKQSbK4XU1 |
| vUUApxouFhUUH76dqiVU4g3y2pYncix1S9cGX51HNyUIfx+t3+dvHfaVY+gIAslR |
| 3K5KMevFYSR5TNGIeR8ErjV5JLwpTQzABZmR2/ODr5VP8xM1tKlABIHL9TnhVZbP |
| QoZoJvjMgmq5EHdBVQMWnQ5XNzOgU8p+CxyFnsKBjcg+uGI= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 2 (0x2) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Intermediary |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:c7:c3:50:5c:f2:60:57:55:0d:be:39:c4:be:74: |
| 76:26:ce:b2:4c:be:ac:dc:17:ac:a0:a4:c3:5f:ae: |
| 64:59:da:20:77:7c:88:28:0e:75:7e:ef:70:80:9c: |
| 0c:8e:94:1c:48:ea:4f:b3:34:1e:e4:cf:af:f8:29: |
| 13:06:6f:19:0f:e7:9a:df:59:8c:44:d3:0e:26:70: |
| 5f:c7:a5:3a:36:4d:4b:50:9c:bd:14:fb:21:4a:f8: |
| d6:2b:49:94:2b:df:4c:8c:89:32:d7:53:f8:59:14: |
| e9:23:76:f3:fb:b4:27:2d:c9:28:17:cc:fe:06:2c: |
| bd:b5:97:30:83:40:9e:c7:ff:9e:0a:99:a7:f0:e8: |
| 0c:c7:73:ca:3f:48:3a:75:97:bd:de:9a:84:6d:5b: |
| 13:dc:0c:64:1e:66:4f:72:10:28:cd:34:bb:15:f1: |
| ca:65:3f:03:db:aa:fa:4d:4c:26:64:8a:3f:6f:67: |
| 51:fa:15:2d:71:7c:fd:0b:12:9e:12:c2:77:9c:f2: |
| a8:86:78:f2:6f:9f:79:c9:50:51:28:41:13:79:79: |
| 7c:a1:93:dd:71:f7:08:92:99:f7:9c:37:ff:2b:82: |
| b6:4e:a9:93:47:83:dc:36:83:40:13:22:96:eb:5e: |
| 2f:ad:a1:d6:70:38:c5:2b:3a:0b:ce:4c:fc:81:c1: |
| 49:f5 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 58:01:24:B6:3B:E6:E7:85:87:83:6F:54:23:6A:C2:D4:E0:9D:6C:37 |
| X509v3 Authority Key Identifier: |
| keyid:92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 3d:c9:5f:4a:71:a9:28:ca:c0:27:47:f1:23:b0:87:2c:5f:4c: |
| 20:de:1e:60:8b:6d:c3:42:2c:bf:ed:82:26:00:b6:f8:4f:7e: |
| ac:37:ec:43:ea:7a:a5:58:fc:34:cd:af:54:2d:3e:30:e8:44: |
| 8d:37:8d:5b:5c:b8:52:bd:f1:d5:ab:c7:61:d9:83:b5:f5:51: |
| 41:ed:f0:1c:02:c7:ae:4f:57:60:49:c8:6d:3e:44:53:13:ce: |
| 97:47:78:b5:04:23:fd:0a:49:e5:99:67:90:07:e7:a5:66:61: |
| 2b:93:5f:b5:dd:d0:fe:92:e8:36:3e:4f:cb:a7:f0:64:d2:88: |
| 11:e5:78:42:89:a7:3f:b6:fe:93:3a:d8:52:d0:8c:9d:ea:89: |
| 21:56:67:04:21:c5:c2:83:42:13:43:ee:5c:1c:2f:00:97:45: |
| 56:4a:18:21:ad:2d:b3:b6:38:ed:5e:df:fe:13:43:53:90:2a: |
| 05:ab:47:6a:dd:9e:9e:51:a2:f2:98:08:03:4c:3f:17:5f:55: |
| e7:b0:f3:ae:62:be:a3:0f:5f:d2:3c:b9:c3:48:55:a9:f6:0d: |
| 4b:fd:15:54:f5:0b:57:30:c7:f5:fb:61:ff:0a:82:35:58:21: |
| f0:05:90:a2:d6:52:d4:6b:53:a8:ea:98:68:53:59:0c:11:db: |
| b2:af:fd:3e |
| -----BEGIN CERTIFICATE----- |
| MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8NQXPJg |
| V1UNvjnEvnR2Js6yTL6s3BesoKTDX65kWdogd3yIKA51fu9wgJwMjpQcSOpPszQe |
| 5M+v+CkTBm8ZD+ea31mMRNMOJnBfx6U6Nk1LUJy9FPshSvjWK0mUK99MjIky11P4 |
| WRTpI3bz+7QnLckoF8z+Biy9tZcwg0Cex/+eCpmn8OgMx3PKP0g6dZe93pqEbVsT |
| 3AxkHmZPchAozTS7FfHKZT8D26r6TUwmZIo/b2dR+hUtcXz9CxKeEsJ3nPKohnjy |
| b595yVBRKEETeXl8oZPdcfcIkpn3nDf/K4K2TqmTR4PcNoNAEyKW614vraHWcDjF |
| KzoLzkz8gcFJ9QIDAQABo4HLMIHIMB0GA1UdDgQWBBRYASS2O+bnhYeDb1QjasLU |
| 4J1sNzAfBgNVHSMEGDAWgBSSACPHwzMUYj1ZyVKkzKBcFt01LTA3BggrBgEFBQcB |
| AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs |
| BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD |
| VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB |
| AD3JX0pxqSjKwCdH8SOwhyxfTCDeHmCLbcNCLL/tgiYAtvhPfqw37EPqeqVY/DTN |
| r1QtPjDoRI03jVtcuFK98dWrx2HZg7X1UUHt8BwCx65PV2BJyG0+RFMTzpdHeLUE |
| I/0KSeWZZ5AH56VmYSuTX7Xd0P6S6DY+T8un8GTSiBHleEKJpz+2/pM62FLQjJ3q |
| iSFWZwQhxcKDQhND7lwcLwCXRVZKGCGtLbO2OO1e3/4TQ1OQKgWrR2rdnp5RovKY |
| CANMPxdfVeew865ivqMPX9I8ucNIVan2DUv9FVT1C1cwx/X7Yf8KgjVYIfAFkKLW |
| UtRrU6jqmGhTWQwR27Kv/T4= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 1 (0x1) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:9d:bb:c1:61:ff:52:46:21:fd:d7:06:43:c7:e0: |
| 5d:5c:c8:02:0a:44:68:63:45:92:58:8d:2f:d6:b3: |
| 86:f1:01:ee:fd:34:97:4b:d6:64:fc:4f:8f:88:50: |
| 56:1a:e6:20:00:9f:8c:8d:e0:c0:30:41:28:99:10: |
| 14:b6:28:6c:b9:37:ef:5c:c4:ee:eb:37:ff:06:07: |
| f3:5c:17:8b:aa:d6:5c:8e:19:01:8d:66:3b:8f:c9: |
| e2:83:0a:0f:8c:7b:21:da:cb:4d:ea:81:11:17:92: |
| 83:f5:35:19:d5:b5:92:49:3d:08:a5:c3:95:37:76: |
| ad:38:9c:fd:11:ff:d4:7f:09:60:10:ea:07:93:5c: |
| 2f:4c:95:53:a1:cb:3b:b1:a8:9a:9d:b9:a4:87:af: |
| 78:78:6e:dc:76:bb:00:74:cd:54:75:6a:17:45:b8: |
| 55:d8:87:87:88:7a:d4:98:30:05:92:df:65:07:aa: |
| d7:08:b7:18:b8:35:79:bb:5e:13:e2:c3:07:65:42: |
| d4:52:e3:91:41:9d:38:cb:1e:9e:5d:3b:51:7d:95: |
| f4:3b:6f:31:77:57:4b:e8:74:59:82:47:60:f9:91: |
| 83:19:20:54:03:a0:cb:76:5e:50:32:ec:32:57:f6: |
| d0:1d:f7:46:7d:c1:ff:a7:b8:1d:80:66:f0:d9:c9: |
| 59:d9 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D |
| X509v3 Authority Key Identifier: |
| keyid:92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 7a:76:9e:1b:08:ba:ae:df:d7:32:30:27:f7:6d:e0:00:f2:4f: |
| f0:cf:dd:b5:3e:65:71:d9:97:18:5c:fc:5f:a4:61:88:41:73: |
| e6:45:d2:09:3a:a5:6d:09:ab:29:13:dc:0a:43:fd:8a:1f:be: |
| 7f:a5:a2:07:cc:9c:63:d5:30:51:93:eb:fc:27:17:08:d4:15: |
| 80:84:1c:5e:1b:bd:00:a0:21:0d:08:8a:44:64:40:73:6c:b5: |
| 50:2b:82:5f:c8:d8:fd:26:f6:91:38:df:d2:58:20:a0:ae:f2: |
| 14:54:e5:d2:ff:ef:87:57:7d:bd:5e:68:b8:1b:62:e0:ae:f4: |
| 08:cd:53:35:1e:a4:cf:3c:21:22:55:1e:e4:51:87:f9:74:38: |
| 10:29:86:64:87:8b:55:9b:96:5a:81:e4:93:2d:c0:fb:06:7f: |
| dd:17:b1:d3:24:75:73:97:df:31:d6:01:a4:be:70:e2:af:ee: |
| c3:bc:fc:a1:cd:93:2d:4d:b6:b5:95:02:28:38:68:27:59:38: |
| 95:d9:64:20:1e:e5:46:f1:bb:f3:5a:2c:b3:f8:d8:cc:fd:34: |
| 09:fb:0b:02:b7:e5:de:0f:ea:2a:2b:0d:81:55:4d:84:d6:f6: |
| ba:a4:47:fe:f1:f9:7d:3f:f9:a1:46:bf:fd:dd:89:8b:b4:22: |
| 1d:86:9f:c5 |
| -----BEGIN TRUSTED_CERTIFICATE----- |
| MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ27wWH/UkYh/dcGQ8fg |
| XVzIAgpEaGNFkliNL9azhvEB7v00l0vWZPxPj4hQVhrmIACfjI3gwDBBKJkQFLYo |
| bLk371zE7us3/wYH81wXi6rWXI4ZAY1mO4/J4oMKD4x7IdrLTeqBEReSg/U1GdW1 |
| kkk9CKXDlTd2rTic/RH/1H8JYBDqB5NcL0yVU6HLO7Gomp25pIeveHhu3Ha7AHTN |
| VHVqF0W4VdiHh4h61JgwBZLfZQeq1wi3GLg1ebteE+LDB2VC1FLjkUGdOMsenl07 |
| UX2V9DtvMXdXS+h0WYJHYPmRgxkgVAOgy3ZeUDLsMlf20B33Rn3B/6e4HYBm8NnJ |
| WdkCAwEAAaOByzCByDAdBgNVHQ4EFgQUkgAjx8MzFGI9WclSpMygXBbdNS0wHwYD |
| VR0jBBgwFoAUkgAjx8MzFGI9WclSpMygXBbdNS0wNwYIKwYBBQUHAQEEKzApMCcG |
| CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB6dp4bCLqu |
| 39cyMCf3beAA8k/wz921PmVx2ZcYXPxfpGGIQXPmRdIJOqVtCaspE9wKQ/2KH75/ |
| paIHzJxj1TBRk+v8JxcI1BWAhBxeG70AoCENCIpEZEBzbLVQK4JfyNj9JvaRON/S |
| WCCgrvIUVOXS/++HV329Xmi4G2LgrvQIzVM1HqTPPCEiVR7kUYf5dDgQKYZkh4tV |
| m5ZageSTLcD7Bn/dF7HTJHVzl98x1gGkvnDir+7DvPyhzZMtTba1lQIoOGgnWTiV |
| 2WQgHuVG8bvzWiyz+NjM/TQJ+wsCt+XeD+oqKw2BVU2E1va6pEf+8fl9P/mhRr/9 |
| 3YmLtCIdhp/F |
| -----END TRUSTED_CERTIFICATE----- |
| |
| -----BEGIN TIME----- |
| MTUwMzAyMTIwMDAwWg== |
| -----END TIME----- |
| |
| -----BEGIN VERIFY_RESULT----- |
| U1VDQ0VTUw== |
| -----END VERIFY_RESULT----- |