1[Created by: generate_policies_tests.py]
2
3Cast certificate chain with the following policies:
4
5  Root:           policies={}
6  Intermediate:   policies={audioOnly}
7  Leaf:           policies={}
8
9Certificate:
10    Data:
11        Version: 3 (0x2)
12        Serial Number: 1 (0x1)
13    Signature Algorithm: sha256WithRSAEncryption
14        Issuer: CN=Intermediate
15        Validity
16            Not Before: Jan  1 12:00:00 2015 GMT
17            Not After : Jan  1 12:00:00 2018 GMT
18        Subject: CN=Leaf
19        Subject Public Key Info:
20            Public Key Algorithm: rsaEncryption
21                Public-Key: (2048 bit)
22                Modulus:
23                    00:97:f2:23:a5:ed:d0:98:d4:07:da:46:ef:ae:58:
24                    2b:4b:fb:3c:2c:41:a6:20:45:19:c4:61:3f:47:a4:
25                    db:cf:16:73:25:56:fd:3d:db:02:60:3a:a6:7d:05:
26                    76:e9:4e:ca:51:64:78:58:82:55:42:43:92:e7:85:
27                    e7:4f:cc:5e:92:fd:7a:bd:ea:ef:5f:33:33:44:6f:
28                    29:a5:e4:51:b1:57:ba:51:cc:b4:da:d9:99:24:5d:
29                    82:c7:88:b0:7c:97:f6:0a:3c:d1:14:a9:91:cc:b7:
30                    1b:14:98:b6:cc:c8:c8:e7:39:c7:bd:05:31:23:d2:
31                    95:17:61:c8:b7:8e:2d:70:84:3d:63:11:bb:d4:d5:
32                    92:e0:49:70:f1:2b:75:d6:a5:29:20:0f:02:ba:8f:
33                    d3:cc:61:0b:7a:fa:bc:6c:be:4e:a0:39:ee:b4:e5:
34                    07:90:b7:77:98:96:95:45:38:b3:a5:c4:c3:97:ee:
35                    ee:70:c7:78:be:b7:50:ba:62:00:2f:a6:9e:1a:9b:
36                    50:d6:08:fd:fe:b9:e0:85:ac:e7:91:ef:a9:41:a0:
37                    62:35:c4:8b:c0:78:59:6e:a8:a7:54:10:88:ed:28:
38                    c9:19:9b:b0:4b:67:c1:42:ec:a3:5d:8b:bd:47:fd:
39                    9d:2c:ad:81:5c:2f:82:13:c4:cf:84:b4:64:ef:e9:
40                    ef:7d
41                Exponent: 65537 (0x10001)
42        X509v3 extensions:
43            X509v3 Subject Key Identifier:
44                86:39:F7:45:1C:19:7F:C1:8D:93:B7:C6:18:53:8E:CD:82:EA:78:8A
45            X509v3 Authority Key Identifier:
46                keyid:05:83:C2:37:26:DF:09:D8:02:81:82:DF:E5:5C:1C:FC:EB:A2:36:22
47
48            Authority Information Access:
49                CA Issuers - URI:http://url-for-aia/Intermediate.cer
50
51            X509v3 CRL Distribution Points:
52
53                Full Name:
54                  URI:http://url-for-crl/Intermediate.crl
55
56            X509v3 Key Usage: critical
57                Digital Signature, Key Encipherment
58            X509v3 Extended Key Usage:
59                TLS Web Client Authentication
60    Signature Algorithm: sha256WithRSAEncryption
61         47:fd:b0:3b:f6:57:43:83:51:b5:c1:d2:fe:fa:b3:ee:54:6e:
62         32:10:ce:da:18:be:2f:57:11:44:7e:5d:e8:09:54:dc:44:5b:
63         fd:17:ce:7f:97:64:1d:f8:32:61:33:55:2f:05:37:b8:35:49:
64         bf:41:9e:5a:0f:29:76:e2:f2:c6:f2:5a:9e:87:b9:2e:cd:ad:
65         84:6b:8d:b9:71:df:a6:dc:32:36:69:25:29:8e:11:77:83:a8:
66         d6:aa:e5:18:89:ab:15:eb:0c:cd:24:56:6d:81:ed:08:ee:f3:
67         57:59:97:41:74:3e:31:7d:ab:b1:32:bb:95:ae:1f:8a:83:60:
68         a4:3d:72:0e:c1:28:05:7e:4b:2e:37:64:36:f5:00:b8:50:6b:
69         66:3f:23:b5:c6:1a:07:b6:c6:fa:44:69:f5:36:0a:3c:d0:16:
70         00:db:4d:92:da:a6:27:89:25:df:9e:c9:48:9d:dd:10:d9:4e:
71         2b:7a:cb:61:5d:32:3a:64:a8:8f:29:eb:19:68:0b:de:b5:3b:
72         e9:76:49:7d:93:c3:6e:75:b8:cf:ca:af:6e:37:1b:38:e4:c3:
73         e8:41:4f:99:dd:af:c0:4e:96:aa:50:70:95:a9:1a:cc:ef:43:
74         b7:08:f0:e9:0b:a7:d8:21:36:ba:98:ea:4f:db:3e:aa:4c:92:
75         84:36:cd:1e
76-----BEGIN CERTIFICATE-----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96-----END CERTIFICATE-----
97
98Certificate:
99    Data:
100        Version: 3 (0x2)
101        Serial Number: 2 (0x2)
102    Signature Algorithm: sha256WithRSAEncryption
103        Issuer: CN=Root
104        Validity
105            Not Before: Jan  1 12:00:00 2015 GMT
106            Not After : Jan  1 12:00:00 2018 GMT
107        Subject: CN=Intermediate
108        Subject Public Key Info:
109            Public Key Algorithm: rsaEncryption
110                Public-Key: (2048 bit)
111                Modulus:
112                    00:c5:f5:38:66:89:22:6a:2f:55:0b:c5:a1:bc:72:
113                    98:d9:66:94:3f:12:5c:a2:ec:6f:d1:5f:79:68:a2:
114                    3e:14:fd:b6:75:20:c6:ba:15:69:e4:10:8c:9e:fa:
115                    bf:56:02:1b:c9:6b:f1:a2:d6:f1:cf:32:1e:37:db:
116                    ae:a1:bd:af:57:b3:7a:de:52:44:46:d8:e5:34:41:
117                    51:55:87:4a:15:b1:a8:4e:ba:48:38:4f:41:b0:ae:
118                    ef:c8:35:a1:ce:9f:2b:a0:84:89:a7:32:62:2e:85:
119                    66:90:a5:ba:e3:4f:4a:87:1c:4e:b1:59:1c:82:ce:
120                    cd:32:f8:9c:3a:9e:79:32:88:f7:18:ea:7e:d0:f9:
121                    75:d1:b2:6c:bf:0c:7b:eb:52:80:2c:c0:0d:93:2d:
122                    a5:45:5f:3d:3c:f2:9b:8a:a5:67:b0:bb:af:8d:1b:
123                    f9:a3:57:55:f9:de:02:a9:4d:27:6d:ae:ff:65:04:
124                    ce:22:2e:44:8f:3a:dd:e6:ee:07:a4:78:6f:a0:1e:
125                    a8:f0:c1:35:bb:eb:6c:33:65:32:a8:e6:c9:38:8a:
126                    cb:63:03:35:00:93:68:3f:2f:fc:f7:3e:2c:9d:4c:
127                    42:53:c4:49:8f:fe:2a:48:94:09:f5:dd:cd:bd:0e:
128                    44:21:6d:52:81:20:f4:f6:92:78:98:fd:4b:50:79:
129                    5e:7d
130                Exponent: 65537 (0x10001)
131        X509v3 extensions:
132            X509v3 Subject Key Identifier:
133                05:83:C2:37:26:DF:09:D8:02:81:82:DF:E5:5C:1C:FC:EB:A2:36:22
134            X509v3 Authority Key Identifier:
135                keyid:3E:D6:2F:0D:F6:31:B3:AD:E0:AA:1D:00:88:8E:39:FB:C3:E4:BC:BA
136
137            Authority Information Access:
138                CA Issuers - URI:http://url-for-aia/Root.cer
139
140            X509v3 CRL Distribution Points:
141
142                Full Name:
143                  URI:http://url-for-crl/Root.crl
144
145            X509v3 Key Usage: critical
146                Certificate Sign, CRL Sign
147            X509v3 Basic Constraints: critical
148                CA:TRUE
149            X509v3 Certificate Policies:
150                Policy: 1.3.6.1.4.1.11129.2.5.2
151
152    Signature Algorithm: sha256WithRSAEncryption
153         92:2c:74:a2:94:0e:a8:cc:ca:17:ab:1f:c1:35:97:45:2f:63:
154         6c:a7:d7:6a:a6:5a:8d:d0:1d:d5:9f:35:9d:bb:10:ba:b2:2f:
155         c7:41:95:7c:ac:f7:12:3d:8e:6e:af:c5:f6:ff:c0:34:7b:b3:
156         d0:c8:f4:ba:3d:c1:72:9c:90:10:73:de:bf:9c:50:fe:a3:a5:
157         1f:93:15:4b:30:a4:ae:6c:76:ac:7c:d2:94:45:0b:05:8a:ef:
158         f8:b3:a1:1e:e0:ca:ca:b6:3b:1f:11:a5:64:b7:d4:bd:67:7e:
159         da:2d:84:f5:ba:e9:42:da:49:cb:1e:b7:51:e6:12:1b:f2:1c:
160         8e:79:10:f4:00:fd:8d:e4:26:75:0b:85:6a:48:74:f1:e6:cf:
161         b2:92:f2:ad:df:da:b9:3c:32:70:e6:b0:16:12:bd:bf:64:45:
162         a7:43:8d:47:1c:f9:13:04:6f:57:f8:72:d2:68:e9:f0:c7:1e:
163         c8:d9:b2:05:fd:aa:36:85:f9:2c:09:43:b4:8a:14:ee:7f:82:
164         f3:47:67:0a:bb:7e:a1:13:6f:38:54:88:5e:87:e3:79:ee:f0:
165         c4:3f:76:96:5e:1d:d0:c7:4a:23:3d:d2:d6:bd:b9:ce:fb:5f:
166         69:92:e3:c9:b8:4a:be:75:32:e4:f6:61:0a:38:65:16:28:59:
167         48:94:5d:58
168-----BEGIN CERTIFICATE-----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188-----END CERTIFICATE-----
189
190Certificate:
191    Data:
192        Version: 3 (0x2)
193        Serial Number: 1 (0x1)
194    Signature Algorithm: sha256WithRSAEncryption
195        Issuer: CN=Root
196        Validity
197            Not Before: Jan  1 12:00:00 2015 GMT
198            Not After : Jan  1 12:00:00 2018 GMT
199        Subject: CN=Root
200        Subject Public Key Info:
201            Public Key Algorithm: rsaEncryption
202                Public-Key: (2048 bit)
203                Modulus:
204                    00:de:b7:b7:b9:aa:ed:10:09:6d:50:62:43:51:cf:
205                    e6:d8:4f:84:6c:98:1b:4d:a8:85:f0:d9:ae:db:4e:
206                    7d:c8:8d:1c:48:eb:24:7e:66:0d:9b:54:15:12:5c:
207                    07:e3:7a:db:4a:4a:8a:62:6b:71:8e:bc:55:0b:3f:
208                    9b:60:a3:15:6a:1f:2f:49:cc:2b:09:a3:1a:1f:4b:
209                    86:e1:82:5f:78:3e:e7:1e:84:42:1b:e1:fc:0c:f6:
210                    47:92:29:74:e8:49:c8:33:ee:25:ba:36:5a:8c:34:
211                    ba:e4:07:a0:a4:eb:fb:cd:ab:ae:d4:d6:51:a1:63:
212                    fb:e7:f3:03:c0:1b:8b:9b:a0:2a:9f:f6:ac:58:ef:
213                    3c:9d:58:42:b9:53:66:06:90:1d:0c:30:5d:db:f5:
214                    2d:13:da:ce:09:05:2d:d4:65:9b:c0:f8:37:07:95:
215                    d4:fc:fc:a6:a0:cf:8f:77:b8:06:0f:22:5e:12:10:
216                    96:58:64:f1:d9:1a:9d:9e:16:47:3b:ce:dd:8f:8f:
217                    6e:06:23:1c:52:10:f1:3e:e6:4d:a8:40:fc:17:5f:
218                    fa:9f:d9:1f:81:40:39:4f:8b:f3:74:ba:b5:07:b0:
219                    fc:2d:ef:58:d2:db:3f:1f:04:b7:7c:d6:80:5c:59:
220                    4b:29:74:d8:5f:99:8e:f0:bc:c1:20:2c:34:24:eb:
221                    be:e9
222                Exponent: 65537 (0x10001)
223        X509v3 extensions:
224            X509v3 Subject Key Identifier:
225                3E:D6:2F:0D:F6:31:B3:AD:E0:AA:1D:00:88:8E:39:FB:C3:E4:BC:BA
226            X509v3 Authority Key Identifier:
227                keyid:3E:D6:2F:0D:F6:31:B3:AD:E0:AA:1D:00:88:8E:39:FB:C3:E4:BC:BA
228
229            Authority Information Access:
230                CA Issuers - URI:http://url-for-aia/Root.cer
231
232            X509v3 CRL Distribution Points:
233
234                Full Name:
235                  URI:http://url-for-crl/Root.crl
236
237            X509v3 Key Usage: critical
238                Certificate Sign, CRL Sign
239            X509v3 Basic Constraints: critical
240                CA:TRUE
241    Signature Algorithm: sha256WithRSAEncryption
242         51:75:c8:11:3e:1f:f6:8f:29:97:5a:ef:41:d3:60:7c:61:41:
243         4f:03:1a:17:db:92:a3:fd:72:11:05:c7:6a:5f:a7:30:76:41:
244         dd:b4:f0:f9:30:ab:d9:3f:6c:3e:2a:63:45:a9:7f:32:aa:05:
245         0b:0f:c1:84:57:c9:0b:4e:f8:86:7e:c9:cc:e9:52:83:a2:c0:
246         73:c1:06:f8:eb:af:0a:a9:8e:6a:12:77:f9:e3:77:f0:a8:fa:
247         fb:af:76:4e:c4:5a:e6:60:c6:8b:24:10:4f:5e:07:d4:4e:4d:
248         78:c6:9b:5d:40:ef:a5:c3:2e:3b:1d:f6:1b:98:3c:d2:ed:ba:
249         47:d6:11:af:f0:21:65:a3:72:f8:ce:29:5f:f4:e7:bc:2b:0a:
250         fe:d8:c3:76:28:73:67:5d:dd:9c:2c:7a:d7:f6:1b:c6:c3:10:
251         10:9d:34:8e:bd:00:46:9e:9d:41:64:23:36:ed:b6:d0:29:2b:
252         88:cc:9d:66:20:9f:14:d1:13:6c:9b:9f:84:04:c5:8c:e3:50:
253         0c:2c:f5:2e:5c:e7:a2:74:b2:8a:ee:ae:2f:d0:c8:18:43:2d:
254         ad:3e:cb:f6:ad:9c:ab:27:ba:b3:15:82:03:e6:ee:69:0a:cb:
255         01:4f:fb:54:b3:e0:75:d5:10:ad:7d:c5:f8:84:4a:d8:88:85:
256         7a:20:0d:a6
257-----BEGIN CERTIFICATE-----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277-----END CERTIFICATE-----
278