1[Created by: generate_policies_tests.py]
2
3Cast certificate chain with the following policies:
4
5  Root:           policies={}
6  Intermediate:   policies={}
7  Leaf:           policies={}
8
9Certificate:
10    Data:
11        Version: 3 (0x2)
12        Serial Number: 5 (0x5)
13    Signature Algorithm: sha256WithRSAEncryption
14        Issuer: CN=Intermediate
15        Validity
16            Not Before: Jan  1 12:00:00 2015 GMT
17            Not After : Jan  1 12:00:00 2018 GMT
18        Subject: CN=Leaf
19        Subject Public Key Info:
20            Public Key Algorithm: rsaEncryption
21                Public-Key: (2048 bit)
22                Modulus:
23                    00:c4:9e:5a:c3:98:a5:13:8c:c7:94:55:72:71:10:
24                    c2:f3:eb:d9:7b:ce:34:57:74:d7:c1:53:2e:75:f0:
25                    f4:15:04:80:f9:d9:60:ef:6e:be:89:9a:8f:7c:3b:
26                    ee:a6:4c:b9:ff:87:8f:af:9b:61:ad:02:5e:f9:f7:
27                    ad:fd:65:96:79:01:64:ff:c8:88:bd:c8:96:8a:46:
28                    e0:62:bd:1a:20:1d:83:74:61:51:96:b0:29:f0:26:
29                    b7:86:31:08:de:4e:16:9a:fd:f6:f3:08:10:c9:93:
30                    bc:7d:4a:3f:76:9a:b1:5b:0f:8c:66:35:e2:5e:e0:
31                    b9:51:ff:46:65:d2:bf:b3:45:97:eb:07:2f:74:de:
32                    b8:f0:20:7e:2c:6e:ab:ea:09:92:28:11:70:4c:09:
33                    02:f4:c7:8b:fe:17:d5:b1:d6:3c:04:0e:85:8a:dc:
34                    3a:2a:4d:0d:62:8f:d4:d4:0c:96:e7:18:48:8c:46:
35                    b0:a4:bb:8d:d7:7f:5b:45:d0:2a:c7:a9:83:c1:86:
36                    12:9b:97:75:65:91:04:bb:52:4e:56:7a:3c:2e:9c:
37                    72:ac:c4:eb:8a:c2:eb:28:58:94:da:df:45:bc:f6:
38                    e1:91:ba:db:d9:3e:76:e8:87:84:eb:8c:c4:16:dd:
39                    b7:e8:c3:b2:24:fa:e1:b1:8f:ec:74:20:70:e5:13:
40                    e2:1d
41                Exponent: 65537 (0x10001)
42        X509v3 extensions:
43            X509v3 Subject Key Identifier:
44                28:F3:70:47:2A:49:D0:97:E3:41:14:C7:6F:42:98:8B:E3:7C:7C:0B
45            X509v3 Authority Key Identifier:
46                keyid:61:89:8E:9B:4C:E5:ED:3A:40:96:77:89:D3:BD:C0:66:CC:A5:39:9D
47
48            Authority Information Access:
49                CA Issuers - URI:http://url-for-aia/Intermediate.cer
50
51            X509v3 CRL Distribution Points:
52
53                Full Name:
54                  URI:http://url-for-crl/Intermediate.crl
55
56            X509v3 Key Usage: critical
57                Digital Signature, Key Encipherment
58            X509v3 Extended Key Usage:
59                TLS Web Client Authentication
60    Signature Algorithm: sha256WithRSAEncryption
61         af:9a:86:7d:cd:27:1e:e2:31:c5:8a:3b:3a:d5:80:e0:8a:86:
62         e6:1b:3c:28:75:f0:8a:a9:ac:99:eb:3e:78:bb:00:d0:2f:e6:
63         8f:ce:11:dc:c9:0e:f5:87:b4:2f:6e:fd:26:cd:45:30:3a:4d:
64         8d:b9:88:28:ab:c8:a2:9e:c4:30:60:05:e4:b8:73:62:a2:2c:
65         b5:9f:35:c5:f4:20:ab:83:29:b5:a0:e5:75:8b:fb:b5:0e:83:
66         5f:81:84:79:a6:32:b0:4d:9d:91:47:19:11:e3:ac:f7:95:3a:
67         81:cf:27:f2:88:5c:28:92:ce:1c:64:34:f4:0d:44:db:c4:40:
68         dd:4b:e7:b5:f8:7e:01:ac:1e:69:60:7b:a8:d5:e6:8b:c1:7a:
69         1d:6e:e5:ce:bf:9b:c7:64:68:97:df:09:5a:c4:e0:d4:60:01:
70         76:ab:31:4f:f5:2d:b0:dd:c6:a2:44:75:d2:4d:22:4d:ae:bb:
71         5e:a3:61:e3:10:6d:0f:be:74:60:90:07:21:a7:d6:24:f1:a5:
72         77:35:6c:33:fb:b2:3d:ea:40:b3:9b:cd:82:a0:d8:89:bd:7d:
73         58:30:04:50:de:03:08:b1:02:24:91:35:77:34:b7:18:03:91:
74         d4:e7:74:1b:fb:a1:77:4c:8f:56:78:fe:77:18:39:57:c2:45:
75         25:a6:e3:76
76-----BEGIN CERTIFICATE-----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96-----END CERTIFICATE-----
97
98Certificate:
99    Data:
100        Version: 3 (0x2)
101        Serial Number: 10 (0xa)
102    Signature Algorithm: sha256WithRSAEncryption
103        Issuer: CN=Root
104        Validity
105            Not Before: Jan  1 12:00:00 2015 GMT
106            Not After : Jan  1 12:00:00 2018 GMT
107        Subject: CN=Intermediate
108        Subject Public Key Info:
109            Public Key Algorithm: rsaEncryption
110                Public-Key: (2048 bit)
111                Modulus:
112                    00:c4:2d:30:96:25:ad:86:fe:6f:7c:ed:b1:d8:67:
113                    c1:3e:58:5d:95:22:9f:2f:a1:88:f4:e1:f1:63:7f:
114                    77:b4:60:95:23:57:33:ad:c4:8e:85:71:71:36:1b:
115                    02:78:bb:69:7a:5e:ae:af:e4:97:97:66:2d:3a:f7:
116                    df:b9:d8:5a:34:a5:68:35:e3:5d:e4:e9:18:77:93:
117                    c6:54:e8:6c:a0:34:20:a5:99:d0:4f:fb:44:b9:29:
118                    52:00:34:38:9b:17:e1:88:5c:41:d0:19:8b:4b:77:
119                    4a:cc:ab:a7:32:79:b4:77:25:6b:38:05:05:70:0e:
120                    9e:fd:94:17:de:d7:02:09:82:00:65:8f:b6:f9:d7:
121                    a0:57:ac:e6:4c:a7:2e:f3:b8:c9:b4:d1:6d:d1:9f:
122                    81:d4:99:93:01:63:52:72:5d:30:75:3c:8c:1d:73:
123                    1c:75:7d:18:1b:a8:b3:f0:83:a4:0e:b9:15:39:03:
124                    81:18:b0:4e:bf:c2:fe:1d:17:f2:1c:4a:de:a5:87:
125                    63:30:f8:5b:93:ed:83:1b:3f:f7:72:54:49:33:31:
126                    33:66:2f:0e:3f:b7:e4:97:ae:63:69:9c:a0:1c:e5:
127                    90:42:5e:07:62:4b:a5:c4:12:fb:97:b4:a7:da:01:
128                    90:1e:8b:78:ee:66:40:af:dc:23:d4:7f:f5:99:f2:
129                    47:41
130                Exponent: 65537 (0x10001)
131        X509v3 extensions:
132            X509v3 Subject Key Identifier:
133                61:89:8E:9B:4C:E5:ED:3A:40:96:77:89:D3:BD:C0:66:CC:A5:39:9D
134            X509v3 Authority Key Identifier:
135                keyid:27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5
136
137            Authority Information Access:
138                CA Issuers - URI:http://url-for-aia/Root.cer
139
140            X509v3 CRL Distribution Points:
141
142                Full Name:
143                  URI:http://url-for-crl/Root.crl
144
145            X509v3 Key Usage: critical
146                Certificate Sign, CRL Sign
147            X509v3 Basic Constraints: critical
148                CA:TRUE
149    Signature Algorithm: sha256WithRSAEncryption
150         ce:dd:90:3d:0a:fe:c3:42:e6:3d:32:57:e5:84:04:6d:80:72:
151         6c:92:75:cb:ae:2a:0d:a4:c8:41:2f:c7:c6:bc:02:8f:33:3d:
152         c5:e2:97:51:ef:8d:e5:84:aa:8a:97:fb:c3:10:a1:73:ae:68:
153         76:a5:80:42:ab:df:4c:8a:8a:15:5b:bf:b9:ca:6b:3a:66:ec:
154         22:9e:c8:0a:27:9d:c8:5b:07:71:ba:06:74:47:63:dc:08:06:
155         9b:d6:eb:6a:11:a2:12:48:68:33:a4:0f:35:aa:a3:78:44:0e:
156         d6:af:96:5d:e6:26:66:df:09:be:ce:ee:38:2a:4d:b7:36:32:
157         d2:1c:73:b3:54:6a:a6:dd:0d:76:16:08:eb:a0:8d:30:ce:8d:
158         bc:b7:8b:be:c7:27:79:95:0b:80:88:57:97:b2:e8:53:46:86:
159         ad:62:bc:2c:04:59:e9:6b:3b:31:f8:78:93:3d:55:10:3f:da:
160         47:bd:a3:89:58:f7:62:ad:8f:00:29:6c:03:ab:7b:c0:6f:bd:
161         11:25:2c:35:b7:51:c4:13:ee:be:76:ae:e3:50:d6:1e:e5:a3:
162         85:88:ea:fa:4f:49:68:61:c4:27:28:d0:f0:92:eb:ce:bd:59:
163         af:d5:a4:c8:06:4f:2c:16:8f:eb:cc:a2:91:26:72:f1:81:1f:
164         82:92:0b:4c
165-----BEGIN CERTIFICATE-----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185-----END CERTIFICATE-----
186
187Certificate:
188    Data:
189        Version: 3 (0x2)
190        Serial Number: 9 (0x9)
191    Signature Algorithm: sha256WithRSAEncryption
192        Issuer: CN=Root
193        Validity
194            Not Before: Jan  1 12:00:00 2015 GMT
195            Not After : Jan  1 12:00:00 2018 GMT
196        Subject: CN=Root
197        Subject Public Key Info:
198            Public Key Algorithm: rsaEncryption
199                Public-Key: (2048 bit)
200                Modulus:
201                    00:f4:50:3d:b5:7c:ca:fd:0b:8f:4c:94:7e:6a:6e:
202                    d7:fc:6e:b0:40:8b:e2:48:78:b6:99:7e:b6:ab:fd:
203                    2a:0f:c8:64:6d:2a:70:79:d8:b9:0e:33:61:21:c4:
204                    89:3f:79:28:db:7c:d7:8a:13:f3:2e:f1:85:be:ab:
205                    21:31:d2:c3:7e:0a:d6:bd:56:e2:2a:b2:29:6c:52:
206                    00:17:45:c8:47:15:1e:30:ff:be:4b:c9:87:5d:86:
207                    a5:d0:f5:20:e6:79:a2:94:29:ec:5d:19:b0:e5:32:
208                    81:5a:34:8b:a7:06:20:33:f8:03:3e:0f:8e:e1:87:
209                    19:1c:0a:ab:94:f0:17:0b:67:62:9f:47:02:70:22:
210                    2c:d8:cb:55:51:19:b4:7f:62:f6:3a:18:e4:42:fd:
211                    5c:f7:f5:26:49:6e:6c:1f:90:f5:52:9a:85:fb:e0:
212                    05:22:24:6a:21:27:a7:03:c4:64:ba:5d:ae:20:ce:
213                    77:4d:25:50:4f:a4:d3:7a:11:e0:f7:51:1c:b1:8f:
214                    d2:19:73:70:4d:d0:55:4f:ef:14:0f:1e:7a:ce:5d:
215                    87:45:85:6b:ab:bd:d4:fc:0b:2e:c8:2b:7d:02:19:
216                    89:39:37:b0:93:ab:b4:e4:db:6b:c2:d3:99:db:87:
217                    db:ef:c5:c0:04:26:63:7a:dc:46:07:5d:09:ba:bd:
218                    f0:a1
219                Exponent: 65537 (0x10001)
220        X509v3 extensions:
221            X509v3 Subject Key Identifier:
222                27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5
223            X509v3 Authority Key Identifier:
224                keyid:27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5
225
226            Authority Information Access:
227                CA Issuers - URI:http://url-for-aia/Root.cer
228
229            X509v3 CRL Distribution Points:
230
231                Full Name:
232                  URI:http://url-for-crl/Root.crl
233
234            X509v3 Key Usage: critical
235                Certificate Sign, CRL Sign
236            X509v3 Basic Constraints: critical
237                CA:TRUE
238    Signature Algorithm: sha256WithRSAEncryption
239         94:72:28:25:43:3a:f3:7e:0c:ad:21:54:ac:c2:08:3b:6d:0a:
240         42:5c:4d:d5:73:3d:54:e3:c6:9d:52:3a:0e:f3:fc:e8:ea:bd:
241         20:9b:8b:cb:35:9a:4c:42:b4:7e:cf:09:4a:18:00:e1:97:be:
242         e7:7b:a9:34:f2:23:fc:87:a5:06:ca:8c:2c:67:3a:19:fc:a2:
243         69:ca:c9:3c:f5:aa:1b:7e:42:8a:dc:e4:3c:ce:37:f5:3b:f1:
244         2c:92:f2:e8:91:6e:9c:13:f8:f2:14:a8:4f:a4:bd:76:f8:12:
245         45:fb:30:45:d7:ce:4d:dd:5b:46:f1:89:9d:c5:29:d8:0f:77:
246         6b:71:07:ff:ab:2d:95:7f:ba:21:a1:8a:db:d7:af:1c:29:d2:
247         28:41:e1:e4:4e:4f:12:2c:ef:98:84:7c:f2:55:19:5b:46:34:
248         f8:1f:1d:3b:16:e4:27:8f:32:16:f8:4e:f4:14:22:bc:b6:c2:
249         1b:83:c1:e2:6a:23:64:51:65:af:7f:9d:21:a1:89:2e:8e:23:
250         8e:e6:20:3a:42:37:8e:f2:55:22:22:88:cd:04:da:a9:fd:5d:
251         fe:b3:36:6d:77:30:76:e4:a1:97:42:0e:7f:a5:b9:ac:26:88:
252         b9:3f:76:27:7b:fd:a7:95:f9:2b:17:58:89:fa:21:28:a0:17:
253         37:9f:50:11
254-----BEGIN CERTIFICATE-----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274-----END CERTIFICATE-----
275