1[Created by: generate-chains.py]
2
3Certificate chain where the target certificate is a CA rather than an
4end-entity certificate (based on the basic constraints extension).
5
6Certificate:
7    Data:
8        Version: 3 (0x2)
9        Serial Number:
10            4d:a4:86:6a:41:8e:28:fd:af:66:05:2a:fc:73:db:94:88:ab:21:08
11        Signature Algorithm: sha256WithRSAEncryption
12        Issuer: CN=Intermediate
13        Validity
14            Not Before: Oct  5 12:00:00 2021 GMT
15            Not After : Oct  5 12:00:00 2022 GMT
16        Subject: CN=Target
17        Subject Public Key Info:
18            Public Key Algorithm: rsaEncryption
19                RSA Public-Key: (2048 bit)
20                Modulus:
21                    00:a5:45:4e:2d:c7:c9:c2:ab:e9:b7:ff:2f:3a:09:
22                    f2:64:ea:bc:ea:9c:34:fa:39:c1:2d:c2:38:c3:51:
23                    ec:7b:06:6e:21:c6:7b:a0:04:ec:e3:dd:5a:72:0a:
24                    0f:bc:73:37:7f:01:7e:02:3d:d5:cb:7a:2d:cc:b3:
25                    c7:d9:cb:44:0e:d6:a3:1d:dc:69:08:80:50:ce:2b:
26                    9b:a3:8d:3f:4e:79:55:ea:cc:94:81:7a:9d:fc:54:
27                    f5:15:9e:17:99:e2:30:9b:67:55:4c:79:cc:85:13:
28                    ca:38:af:ec:df:a5:50:bc:b8:ff:0a:4e:12:be:5e:
29                    de:64:d3:ac:7d:f5:cc:3f:9a:b5:94:32:75:65:8e:
30                    47:b0:81:d7:c8:27:5f:7c:44:31:53:6d:93:36:6f:
31                    54:99:dc:82:24:7c:ab:14:eb:67:2f:3b:10:a4:cb:
32                    56:34:05:f4:b1:fc:12:42:dd:3c:dc:16:0f:d1:8f:
33                    f0:87:fa:07:b4:fa:3d:7a:47:c0:dc:95:09:77:9c:
34                    28:b3:a3:ae:9e:72:d3:bc:3b:a5:57:f7:31:3b:4f:
35                    76:30:a2:43:56:74:f9:3b:7b:f7:ec:43:64:3e:56:
36                    aa:93:53:d4:4a:5a:84:8b:fb:68:43:17:a4:20:13:
37                    07:e0:aa:7f:b1:c3:36:15:8b:b3:ec:e2:e6:d6:4a:
38                    5f:83
39                Exponent: 65537 (0x10001)
40        X509v3 extensions:
41            X509v3 Subject Key Identifier:
42                93:E1:6A:2B:C0:A8:CA:CA:A9:B3:28:0E:8B:11:FF:0B:B0:24:73:F6
43            X509v3 Authority Key Identifier:
44                keyid:9A:2E:6F:0B:96:F4:DF:5E:32:32:96:E5:03:2A:FA:DD:98:12:55:EE
45
46            Authority Information Access:
47                CA Issuers - URI:http://url-for-aia/Intermediate.cer
48
49            X509v3 CRL Distribution Points:
50
51                Full Name:
52                  URI:http://url-for-crl/Intermediate.crl
53
54            X509v3 Key Usage: critical
55                Certificate Sign, CRL Sign
56            X509v3 Basic Constraints: critical
57                CA:TRUE
58    Signature Algorithm: sha256WithRSAEncryption
59         3b:1b:cf:43:25:88:9a:60:97:96:37:99:75:4d:6c:e6:51:fb:
60         f7:4e:bc:90:c5:d4:3b:ce:62:22:11:26:fd:56:58:7c:7b:c4:
61         b7:d4:50:ce:89:6d:4f:4d:7f:dc:42:e5:d4:78:aa:7b:0f:78:
62         5c:9b:17:be:d5:6e:7c:8e:7a:29:eb:eb:19:64:98:b9:94:ea:
63         fe:bc:1b:7a:52:b3:1b:c5:7f:b2:9b:1a:fc:f5:13:40:5b:14:
64         3d:cb:c2:b5:e6:d9:5b:69:5f:66:09:9a:d2:68:8a:34:5b:3f:
65         8b:d1:e9:dc:00:d1:fa:f2:0a:5a:71:c9:63:55:87:8a:f2:af:
66         72:34:94:31:8f:06:5c:45:80:fa:e4:32:70:6d:8d:39:c8:2c:
67         78:8e:10:c6:ef:a0:ec:c1:4f:ba:49:2f:9b:8c:43:e0:4c:47:
68         7f:d5:c9:92:db:ac:36:9a:71:f4:aa:d6:7c:45:c1:a7:e9:3e:
69         39:f1:e7:88:e0:ca:f5:93:d0:ba:c7:ab:36:09:5e:49:e7:8c:
70         9a:aa:98:aa:86:47:77:87:1f:34:4f:f6:56:84:be:5e:e7:f4:
71         6e:f7:23:d1:7c:3c:98:82:5c:89:b9:cc:ba:d4:f2:f9:4d:ec:
72         3a:63:80:06:1a:a3:25:48:80:c6:22:dd:09:6c:c6:d2:20:68:
73         49:23:f2:ab
74-----BEGIN CERTIFICATE-----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95-----END CERTIFICATE-----
96
97Certificate:
98    Data:
99        Version: 3 (0x2)
100        Serial Number:
101            1e:c3:39:90:77:32:c2:7e:ea:1a:68:8b:35:f3:20:6c:3d:1d:57:65
102        Signature Algorithm: sha256WithRSAEncryption
103        Issuer: CN=Root
104        Validity
105            Not Before: Oct  5 12:00:00 2021 GMT
106            Not After : Oct  5 12:00:00 2022 GMT
107        Subject: CN=Intermediate
108        Subject Public Key Info:
109            Public Key Algorithm: rsaEncryption
110                RSA Public-Key: (2048 bit)
111                Modulus:
112                    00:b2:94:35:8b:85:75:a2:74:1e:b4:bd:5c:9b:e2:
113                    7a:87:32:a1:df:63:d4:5c:10:c8:3c:c2:7e:aa:53:
114                    09:d8:fa:ce:14:bd:80:a7:b3:cb:4b:84:af:fc:c8:
115                    de:97:38:d8:17:cd:1d:6a:65:39:b5:27:36:bc:64:
116                    9a:4f:2d:91:5f:34:2b:f2:83:fa:2b:ea:1c:6e:5f:
117                    60:09:c3:70:94:0f:bd:0c:eb:e2:a0:ba:43:5a:3a:
118                    dd:3e:02:99:52:4a:28:e2:e4:dc:18:95:3a:bd:44:
119                    6f:c1:a2:3e:6f:43:57:60:a4:70:17:ae:42:d1:9c:
120                    7c:08:7f:f0:77:93:78:59:b2:c4:39:db:28:cd:19:
121                    42:78:c5:00:a2:3a:6f:ef:57:a7:22:d5:87:6a:26:
122                    c4:d1:9f:18:70:05:43:9c:72:a1:03:79:47:ba:f5:
123                    64:f9:0f:63:c1:fe:70:3f:f0:5c:92:44:e6:71:88:
124                    0e:ec:13:0c:45:33:93:b8:3c:c2:fe:07:7d:0e:b2:
125                    bb:2f:19:69:d0:d1:9c:77:77:48:54:ca:5d:0f:8e:
126                    6d:8d:27:37:61:45:12:de:22:6c:da:2f:23:9f:d1:
127                    0f:38:03:75:b4:53:ba:81:17:4a:83:93:19:4b:56:
128                    4e:31:63:12:6f:89:5c:5c:7b:1b:49:fc:6a:a0:8a:
129                    54:8d
130                Exponent: 65537 (0x10001)
131        X509v3 extensions:
132            X509v3 Subject Key Identifier:
133                9A:2E:6F:0B:96:F4:DF:5E:32:32:96:E5:03:2A:FA:DD:98:12:55:EE
134            X509v3 Authority Key Identifier:
135                keyid:19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E
136
137            Authority Information Access:
138                CA Issuers - URI:http://url-for-aia/Root.cer
139
140            X509v3 CRL Distribution Points:
141
142                Full Name:
143                  URI:http://url-for-crl/Root.crl
144
145            X509v3 Key Usage: critical
146                Certificate Sign, CRL Sign
147            X509v3 Basic Constraints: critical
148                CA:TRUE
149    Signature Algorithm: sha256WithRSAEncryption
150         44:62:37:44:99:36:0e:d9:27:a8:40:bb:43:49:e2:ff:17:8b:
151         a8:0c:f8:ab:18:c3:f8:6f:07:bb:cd:e6:3b:33:05:2e:34:2d:
152         b8:01:53:9c:88:27:b8:c0:74:d1:23:e3:36:1f:43:05:98:38:
153         6c:26:94:67:62:73:77:73:d7:c0:b0:57:65:f2:cb:7d:03:ef:
154         a0:46:0b:ff:52:f0:db:cf:f3:9d:d9:21:bf:f3:ae:59:d7:03:
155         ce:e0:0c:34:ec:53:20:8b:be:16:55:a2:96:86:e6:2e:18:d2:
156         4f:bd:49:71:aa:52:19:ce:a5:d7:01:28:53:2a:42:3d:e1:a2:
157         22:84:72:86:f6:40:f5:3b:78:80:0e:c9:f4:70:30:00:31:ed:
158         53:37:7e:9e:e0:fe:2d:6d:b4:6a:1c:10:d4:59:d8:e3:09:d5:
159         62:8a:a3:37:06:74:51:18:f0:63:26:9b:2a:3f:8c:c3:2e:14:
160         e7:71:69:2e:f3:d2:c9:39:cf:28:c7:16:be:68:b4:c5:25:da:
161         15:f0:9d:05:9b:54:0d:61:d1:d1:d4:2e:8c:85:6b:c2:eb:9c:
162         89:89:62:1b:e2:f7:96:f6:d7:8b:c0:0a:b7:51:3c:41:e1:f2:
163         b7:46:30:92:e9:e3:4e:eb:66:a7:c0:47:44:bb:e8:62:42:8d:
164         71:39:ab:1e
165-----BEGIN CERTIFICATE-----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185-----END CERTIFICATE-----
186
187Certificate:
188    Data:
189        Version: 3 (0x2)
190        Serial Number:
191            1e:c3:39:90:77:32:c2:7e:ea:1a:68:8b:35:f3:20:6c:3d:1d:57:64
192        Signature Algorithm: sha256WithRSAEncryption
193        Issuer: CN=Root
194        Validity
195            Not Before: Oct  5 12:00:00 2021 GMT
196            Not After : Oct  5 12:00:00 2022 GMT
197        Subject: CN=Root
198        Subject Public Key Info:
199            Public Key Algorithm: rsaEncryption
200                RSA Public-Key: (2048 bit)
201                Modulus:
202                    00:cd:cf:00:37:2d:30:07:b1:79:ce:1c:2f:e5:de:
203                    14:66:f0:c4:c9:65:94:d5:d8:86:9b:f8:3e:fa:8f:
204                    2a:f6:45:59:3f:2b:e2:ca:27:da:e1:63:8b:cd:3d:
205                    9d:f7:9c:fd:a8:c0:34:87:d3:7a:ff:50:a2:43:8c:
206                    96:db:d7:a9:43:bd:e9:f9:ac:f2:6c:85:e7:46:33:
207                    4b:4b:32:2f:62:fb:86:5e:f7:70:74:24:b7:a7:9b:
208                    f5:1c:ba:d2:06:93:d4:2c:7e:94:de:64:d4:df:a5:
209                    d7:07:f0:57:32:76:e8:d8:dc:10:37:54:24:73:34:
210                    1d:7f:fe:8a:5f:21:40:b4:cd:aa:ab:a6:ea:9b:f3:
211                    6e:eb:45:0f:52:f2:0b:aa:5f:0c:bd:69:b4:bc:c5:
212                    ba:eb:36:29:07:62:9c:f1:26:59:89:04:b7:87:c6:
213                    5b:9e:e9:93:af:81:f2:29:21:8a:fc:99:93:2d:d9:
214                    8a:0e:5a:43:b1:d8:31:42:e3:70:ab:5d:ed:7c:bc:
215                    08:71:27:e9:8f:f2:ac:09:12:be:28:91:31:c7:89:
216                    a4:e3:0a:07:e5:c0:f4:6c:fa:53:4f:1f:71:3a:42:
217                    c7:b3:25:56:fc:69:ce:98:99:d6:fa:b4:e2:3d:c7:
218                    4c:b8:f2:a9:c7:39:3e:dd:60:e6:06:dd:68:f9:ec:
219                    55:3b
220                Exponent: 65537 (0x10001)
221        X509v3 extensions:
222            X509v3 Subject Key Identifier:
223                19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E
224            X509v3 Authority Key Identifier:
225                keyid:19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E
226
227            Authority Information Access:
228                CA Issuers - URI:http://url-for-aia/Root.cer
229
230            X509v3 CRL Distribution Points:
231
232                Full Name:
233                  URI:http://url-for-crl/Root.crl
234
235            X509v3 Key Usage: critical
236                Certificate Sign, CRL Sign
237            X509v3 Basic Constraints: critical
238                CA:TRUE
239    Signature Algorithm: sha256WithRSAEncryption
240         20:f5:24:c4:1a:b4:5e:99:ec:db:65:89:a5:41:d3:eb:0e:78:
241         85:18:3a:db:c2:37:ca:c7:3c:d7:ba:ac:14:bf:ce:31:8c:fb:
242         8b:8c:53:a1:bd:c6:1f:13:82:e3:90:0a:a8:9e:bb:58:00:8f:
243         37:bb:04:59:60:87:56:04:3f:0b:0a:60:e0:57:54:29:81:b3:
244         07:d1:05:01:b6:72:ba:28:55:c1:d1:62:af:9c:f8:c8:4b:fa:
245         c4:6a:51:94:13:63:74:2a:61:9a:c9:f5:75:1b:3c:db:d4:0a:
246         8b:cb:ef:f8:ae:9e:f5:ae:e3:9f:8e:94:54:08:80:45:f4:50:
247         5a:41:cb:f2:ae:58:b3:cf:c0:97:16:af:19:7a:d6:17:39:8e:
248         17:49:8b:a4:70:de:af:ee:80:01:dc:1f:29:52:70:16:9f:61:
249         ef:1c:a4:44:90:17:9d:b3:b0:cc:c6:d5:cc:6a:14:d7:92:a3:
250         e5:09:9f:96:23:c8:08:4c:09:4c:c1:a3:03:cf:b5:56:1a:49:
251         12:52:f4:f7:a7:78:d4:f0:89:89:97:ff:52:21:0a:05:7a:6d:
252         e8:4b:b6:8f:a5:4d:ed:a0:13:06:97:d0:75:5d:d4:00:d9:31:
253         2a:3c:cd:45:e1:fc:0f:be:a5:58:a6:94:52:0c:96:95:39:4c:
254         e7:64:73:4e
255-----BEGIN CERTIFICATE-----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275-----END CERTIFICATE-----
276