1[Created by: generate-chains.py]
2
3Certificate chain where the root certificate lacks a basic constraints
4extension.
5
6Certificate:
7    Data:
8        Version: 3 (0x2)
9        Serial Number:
10            6f:30:93:e0:af:42:20:f7:92:d9:8d:63:e4:7e:ee:e3:df:49:cd:56
11        Signature Algorithm: sha256WithRSAEncryption
12        Issuer: CN=Intermediate
13        Validity
14            Not Before: Oct  5 12:00:00 2021 GMT
15            Not After : Oct  5 12:00:00 2022 GMT
16        Subject: CN=Target
17        Subject Public Key Info:
18            Public Key Algorithm: rsaEncryption
19                RSA Public-Key: (2048 bit)
20                Modulus:
21                    00:e0:2c:39:1a:67:64:64:af:b8:19:4f:41:9e:78:
22                    a6:a8:fc:a4:43:70:a7:7c:23:f9:27:a0:7f:98:37:
23                    e7:ee:fe:be:2d:82:65:9e:46:15:1e:fc:3d:70:36:
24                    96:47:69:6a:c0:51:c5:f1:59:2a:d7:1e:3f:b3:2e:
25                    df:ac:af:89:16:45:ed:71:ae:38:04:4d:5e:e7:b8:
26                    d9:a1:45:14:a5:f9:a4:f7:e3:e7:e4:e9:ac:7e:82:
27                    95:e6:5c:8e:ac:da:14:d5:2f:04:ed:48:f7:56:4b:
28                    5a:98:72:0f:07:66:ca:17:a5:0e:b7:05:64:3b:6a:
29                    97:ad:b1:7e:4d:b3:8c:d4:2b:23:3d:88:bb:c9:80:
30                    04:d9:5b:1a:36:37:ab:d2:c7:06:a8:81:6f:62:b7:
31                    c1:74:74:8e:ee:f6:6b:c0:15:28:44:50:85:dc:8d:
32                    3b:e7:0b:82:9d:bd:db:20:69:1a:55:68:48:0e:84:
33                    2a:25:26:ca:01:ad:16:7f:3c:30:d4:5b:47:9a:86:
34                    fe:fc:90:b5:d0:bb:d3:ee:af:9a:80:3c:4c:da:46:
35                    c8:db:36:68:89:51:fe:76:78:cf:22:eb:ce:62:d4:
36                    2c:2b:c7:7c:24:48:64:ca:9b:91:b2:90:fc:c9:29:
37                    65:70:83:60:05:1a:32:70:ca:12:f3:70:52:dd:3e:
38                    82:b1
39                Exponent: 65537 (0x10001)
40        X509v3 extensions:
41            X509v3 Subject Key Identifier:
42                98:FA:6D:F3:B3:9E:A3:B9:81:22:1C:C5:19:24:06:BC:D9:D6:92:ED
43            X509v3 Authority Key Identifier:
44                keyid:C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70
45
46            Authority Information Access:
47                CA Issuers - URI:http://url-for-aia/Intermediate.cer
48
49            X509v3 CRL Distribution Points:
50
51                Full Name:
52                  URI:http://url-for-crl/Intermediate.crl
53
54            X509v3 Key Usage: critical
55                Digital Signature, Key Encipherment
56            X509v3 Extended Key Usage:
57                TLS Web Server Authentication, TLS Web Client Authentication
58    Signature Algorithm: sha256WithRSAEncryption
59         b4:37:d0:b2:e6:04:26:d5:cf:ea:f2:91:5c:aa:03:17:35:07:
60         21:bd:67:52:60:9c:c2:9e:79:6e:ef:5f:a2:05:74:6c:b4:75:
61         7e:f1:3b:0f:2e:62:85:b2:33:3b:23:68:7c:67:e1:b6:e1:c4:
62         b0:af:50:29:a7:73:fc:aa:b9:e0:f2:fb:7e:f3:f5:27:07:e6:
63         26:c0:b8:51:06:7c:42:9d:59:b5:b3:2f:ae:ea:f4:e5:0b:9c:
64         63:00:34:2c:46:cd:df:22:55:21:3b:78:23:b0:8e:0d:69:8d:
65         66:92:16:90:83:fd:ad:46:60:7f:5f:87:61:7f:2f:0f:c2:8c:
66         0f:7a:dc:b4:6e:cc:a7:80:88:3b:49:17:ef:fb:95:48:9b:80:
67         b6:f4:32:95:e0:e8:e6:1a:97:2f:fe:c6:a7:ad:02:b8:ef:a7:
68         25:42:cd:ea:bd:c1:64:6b:b0:89:6c:bb:fb:e6:9c:43:b8:51:
69         03:0c:ed:03:01:44:5b:ef:ad:8e:59:aa:29:cd:2d:c4:c8:1f:
70         55:66:c6:26:d8:6c:2d:07:ca:91:10:2e:04:54:5d:e1:ee:87:
71         1b:22:ff:2a:b9:7a:e2:be:be:d7:51:d2:7f:3e:ee:e0:80:c8:
72         58:fc:f1:7e:66:ca:6f:24:1a:bc:c0:98:a0:75:88:27:2e:28:
73         59:30:f4:05
74-----BEGIN CERTIFICATE-----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95-----END CERTIFICATE-----
96
97Certificate:
98    Data:
99        Version: 3 (0x2)
100        Serial Number:
101            08:55:78:34:50:50:34:15:fe:10:58:e3:0b:cb:6b:c3:c6:56:3d:16
102        Signature Algorithm: sha256WithRSAEncryption
103        Issuer: CN=Root
104        Validity
105            Not Before: Oct  5 12:00:00 2021 GMT
106            Not After : Oct  5 12:00:00 2022 GMT
107        Subject: CN=Intermediate
108        Subject Public Key Info:
109            Public Key Algorithm: rsaEncryption
110                RSA Public-Key: (2048 bit)
111                Modulus:
112                    00:de:e6:c0:76:c5:4c:d0:8e:b3:87:07:91:66:aa:
113                    f1:ae:93:8f:a2:83:2d:d5:05:91:b8:52:f6:2d:a5:
114                    ff:fd:95:ee:85:0f:85:c3:eb:d7:8e:f7:6f:2a:c0:
115                    15:de:ae:1e:62:62:12:64:c3:f7:c1:0f:05:a4:0f:
116                    b7:33:69:92:66:57:93:4f:4e:04:43:bb:23:bb:c3:
117                    c6:29:0b:42:68:1f:26:81:77:2d:91:f6:62:b8:e3:
118                    9a:2c:78:2d:7c:1f:3a:f5:ce:f2:c2:75:39:5a:b7:
119                    c2:23:f5:f5:ee:7e:a5:7a:45:c4:d4:1e:12:c8:a6:
120                    40:44:64:07:ff:33:a8:ce:41:df:77:c4:01:f5:c5:
121                    41:6b:4e:a0:ee:9d:36:63:5a:b0:e8:38:bb:bd:fb:
122                    a5:7f:6e:5c:6d:c6:62:dd:05:2f:90:d4:fb:5b:18:
123                    71:84:57:e2:c9:d3:cc:c8:36:5f:d1:78:20:4c:68:
124                    83:1f:df:64:a3:11:9f:e8:bd:d4:bb:8e:04:63:0d:
125                    3d:6d:a9:43:30:5d:f0:ca:e3:62:8f:11:9e:8b:8f:
126                    de:9a:6e:6d:03:e5:8c:0f:6f:00:6e:1a:72:2c:13:
127                    e0:a1:78:93:ef:2c:6d:2c:0a:8a:5c:02:65:50:36:
128                    fa:da:07:ba:36:b9:21:eb:01:14:97:ab:19:60:be:
129                    97:6b
130                Exponent: 65537 (0x10001)
131        X509v3 extensions:
132            X509v3 Subject Key Identifier:
133                C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70
134            X509v3 Authority Key Identifier:
135                keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
136
137            Authority Information Access:
138                CA Issuers - URI:http://url-for-aia/Root.cer
139
140            X509v3 CRL Distribution Points:
141
142                Full Name:
143                  URI:http://url-for-crl/Root.crl
144
145            X509v3 Key Usage: critical
146                Certificate Sign, CRL Sign
147            X509v3 Basic Constraints: critical
148                CA:TRUE
149    Signature Algorithm: sha256WithRSAEncryption
150         0a:11:c3:21:b5:94:3d:5f:ae:33:72:18:c4:74:c0:cb:15:b0:
151         22:74:39:5d:76:7b:77:a9:91:0d:02:7c:1b:0c:fa:d1:dc:94:
152         f2:d3:38:01:f3:64:42:53:5b:0e:a7:a3:7e:8d:8d:0b:6f:1a:
153         93:ab:17:3a:02:43:23:c6:c2:8c:40:32:fe:e9:e4:42:31:c2:
154         4f:96:87:da:54:70:f0:85:31:7c:a3:a2:96:af:c6:a3:0a:26:
155         68:3c:db:1b:dc:be:58:c6:c2:ef:62:a1:87:3e:01:4a:3c:c0:
156         aa:fa:f5:30:d7:7d:35:3c:3b:f0:ef:7b:e9:f8:67:5a:f7:75:
157         5f:0f:ae:63:a6:61:98:5a:21:8a:36:ca:59:40:75:60:4b:6b:
158         cd:0e:99:d7:2f:fc:85:1d:81:4c:50:e0:66:1b:fe:8f:83:e4:
159         bf:00:07:48:3c:ea:16:c4:43:8d:53:3a:44:bf:64:99:58:1e:
160         72:38:f9:ec:63:ad:4e:e3:5a:7b:b3:22:0a:54:d8:49:41:e7:
161         4f:f6:ad:df:3b:f2:c2:3d:d5:e1:62:30:4a:61:30:09:ea:2a:
162         66:98:1e:a7:51:e1:cc:08:c2:32:5e:c7:77:2c:93:c0:6b:77:
163         89:99:e3:f5:89:bb:62:6b:3e:96:25:ac:a1:79:2e:82:9b:e3:
164         1b:4b:28:96
165-----BEGIN CERTIFICATE-----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185-----END CERTIFICATE-----
186
187Certificate:
188    Data:
189        Version: 3 (0x2)
190        Serial Number:
191            08:55:78:34:50:50:34:15:fe:10:58:e3:0b:cb:6b:c3:c6:56:3d:15
192        Signature Algorithm: sha256WithRSAEncryption
193        Issuer: CN=Root
194        Validity
195            Not Before: Oct  5 12:00:00 2021 GMT
196            Not After : Oct  5 12:00:00 2022 GMT
197        Subject: CN=Root
198        Subject Public Key Info:
199            Public Key Algorithm: rsaEncryption
200                RSA Public-Key: (2048 bit)
201                Modulus:
202                    00:b7:0e:0c:2e:e1:46:5f:9d:dc:3a:16:51:56:2f:
203                    4c:5c:f7:92:93:2a:a1:bf:d1:bd:15:cd:8a:f8:e3:
204                    8a:a4:41:fa:9f:de:85:84:ff:cd:5b:7d:13:33:ca:
205                    b8:8b:34:f6:85:73:a5:23:ef:ba:61:ca:18:9f:08:
206                    ea:39:17:18:69:dd:3a:21:57:a5:6d:b2:63:a7:42:
207                    ba:b6:8a:4e:e2:1f:ab:88:4f:ae:ca:1a:66:b8:79:
208                    d2:94:73:b9:46:c4:be:89:31:53:c1:d8:b4:cc:1c:
209                    6b:d9:0c:a3:5a:e3:a5:20:7c:a0:bd:d4:14:7a:14:
210                    29:0c:b7:40:da:f5:fc:af:c3:91:65:78:b3:41:ee:
211                    f5:9f:0b:22:0b:c1:f5:12:94:89:25:13:1b:dd:a3:
212                    a3:44:7a:57:7c:40:17:e0:66:33:a9:27:7c:2e:6f:
213                    9f:38:d3:fa:4d:67:80:39:33:36:e5:41:fd:ac:6b:
214                    37:d0:84:75:e2:84:93:3b:8d:ce:8c:22:98:4e:05:
215                    64:7f:df:fb:96:85:c5:ea:0e:11:24:f9:84:bd:17:
216                    ce:15:30:86:ad:c6:de:2c:48:84:d0:45:d4:0b:1f:
217                    13:e9:a4:ca:e7:69:c0:24:a1:23:5e:6b:4e:76:b4:
218                    bd:d7:0d:96:94:b6:d9:8e:25:9b:1e:c9:a2:00:10:
219                    47:77
220                Exponent: 65537 (0x10001)
221        X509v3 extensions:
222            X509v3 Subject Key Identifier:
223                96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
224            X509v3 Authority Key Identifier:
225                keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
226
227            Authority Information Access:
228                CA Issuers - URI:http://url-for-aia/Root.cer
229
230            X509v3 CRL Distribution Points:
231
232                Full Name:
233                  URI:http://url-for-crl/Root.crl
234
235            X509v3 Key Usage: critical
236                Certificate Sign, CRL Sign
237    Signature Algorithm: sha256WithRSAEncryption
238         a0:63:51:25:66:b7:9a:52:c8:f3:a5:18:a4:76:b5:02:e8:a1:
239         12:0e:f7:e0:92:32:6f:85:2a:d3:95:ae:c1:5d:11:11:53:c2:
240         bb:85:55:a5:5c:71:f5:65:c6:f2:88:8a:a5:10:66:b6:bb:36:
241         d6:d5:c3:c1:87:be:bc:5f:c6:47:87:63:de:ef:6a:d6:46:db:
242         ca:b6:09:17:07:39:76:6d:3a:ef:69:37:05:0d:c8:24:51:1f:
243         24:a7:c0:bc:44:a4:a3:57:28:f3:4f:ca:52:3b:1c:1a:3c:18:
244         07:17:26:8c:ed:22:d0:0a:41:05:ae:cc:2c:b9:24:80:d5:22:
245         1e:c0:eb:a7:48:fd:3a:c3:ee:89:95:6d:25:0b:45:86:70:11:
246         69:da:11:38:c9:7a:3a:c1:b0:a7:f3:df:15:85:d1:66:ae:8f:
247         2d:52:38:2d:db:32:c5:12:ba:e2:fd:b1:77:8a:ef:1b:8d:cd:
248         99:85:33:e3:82:bb:42:f2:f7:92:56:4d:5d:4e:8d:82:54:23:
249         e8:90:3b:32:d2:9e:24:a7:4b:58:86:ed:fe:bf:b5:8d:e5:a5:
250         c3:af:d8:fa:92:df:bb:ae:8b:00:8c:64:e0:6c:53:5e:d9:14:
251         bd:30:78:40:80:f4:58:cd:b1:92:50:c9:87:59:91:39:18:a9:
252         ea:18:44:e7
253-----BEGIN CERTIFICATE-----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273-----END CERTIFICATE-----
274