1[Created by: generate-chains.py]
2
3Certificate chain where the target certificate has an incorrect signature.
4
5Certificate:
6    Data:
7        Version: 3 (0x2)
8        Serial Number:
9            64:12:b2:41:aa:b4:4c:d7:9a:e2:15:7a:bc:3b:e5:1c:2e:2f:6f:9a
10        Signature Algorithm: sha256WithRSAEncryption
11        Issuer: CN=Intermediate
12        Validity
13            Not Before: Oct  5 12:00:00 2021 GMT
14            Not After : Oct  5 12:00:00 2022 GMT
15        Subject: CN=Target
16        Subject Public Key Info:
17            Public Key Algorithm: rsaEncryption
18                RSA Public-Key: (2048 bit)
19                Modulus:
20                    00:a3:10:52:35:1d:ac:4e:a5:23:41:40:b1:1d:66:
21                    30:25:bc:dd:a5:62:66:d1:74:db:5f:bd:5d:96:07:
22                    08:94:c4:61:a4:e9:07:31:f9:e8:6a:52:f5:8a:3d:
23                    1c:6d:00:c8:47:51:30:99:42:8b:27:11:48:e9:c6:
24                    de:db:ff:7f:ee:6e:29:cf:48:77:1e:63:11:bc:2a:
25                    81:fb:3a:5d:4e:d2:b8:0c:ce:68:6b:61:f2:bf:64:
26                    da:aa:3f:06:74:47:77:72:08:d2:a3:c3:35:cf:e5:
27                    dd:13:f7:d3:45:21:f5:9c:cf:7e:50:56:53:11:c8:
28                    eb:90:f2:a2:eb:8f:9d:c1:07:c4:b8:4b:38:04:3d:
29                    7f:be:73:36:3e:5f:c4:7e:37:a7:0c:88:8b:a8:63:
30                    79:74:b4:2c:c6:7c:52:61:e1:03:d3:ff:4f:c5:50:
31                    63:19:83:eb:f3:89:a3:91:e5:90:ab:80:43:18:3e:
32                    c8:77:ac:69:97:cf:2f:5b:be:a9:59:89:99:3a:5d:
33                    87:c4:4f:97:4a:60:18:ea:ea:a5:b7:1e:61:57:98:
34                    50:55:91:13:34:0d:03:65:a4:f4:bb:63:e6:bb:3e:
35                    9f:03:84:f7:e6:63:d0:f3:82:5b:0c:96:b1:32:f2:
36                    2f:2a:55:5b:24:a6:b6:33:62:6e:ed:0b:f2:77:f8:
37                    f8:f3
38                Exponent: 65537 (0x10001)
39        X509v3 extensions:
40            X509v3 Subject Key Identifier:
41                19:59:39:C0:2B:03:0A:9B:BF:AA:A8:AB:B2:FB:AF:95:88:63:CA:6E
42            X509v3 Authority Key Identifier:
43                keyid:CC:47:D8:FF:8B:67:33:FB:F5:CD:D0:A7:B6:12:A0:19:27:27:D1:57
44
45            Authority Information Access:
46                CA Issuers - URI:http://url-for-aia/Intermediate.cer
47
48            X509v3 CRL Distribution Points:
49
50                Full Name:
51                  URI:http://url-for-crl/Intermediate.crl
52
53            X509v3 Key Usage: critical
54                Digital Signature, Key Encipherment
55            X509v3 Extended Key Usage:
56                TLS Web Server Authentication, TLS Web Client Authentication
57    Signature Algorithm: sha256WithRSAEncryption
58         56:c1:31:dc:59:0e:4f:9d:6f:91:77:f7:6b:55:54:a5:34:37:
59         8a:e8:37:88:d6:84:d6:d9:b2:80:61:3c:8a:68:01:bb:ef:f4:
60         ee:23:51:ca:58:ea:a4:62:cd:93:78:a9:e2:79:49:aa:d4:02:
61         da:55:55:98:8e:15:70:08:b1:0d:01:2e:3a:0e:27:10:76:03:
62         41:2d:3f:1a:7e:45:ba:8e:fc:9a:d0:19:be:85:72:db:cc:ff:
63         7a:87:39:07:87:c0:89:b5:bd:d2:43:db:86:6b:0e:9a:08:1d:
64         d3:ea:c6:ca:68:5b:88:b2:89:1c:55:72:a5:8f:c0:0e:19:db:
65         fd:65:42:5c:6b:fe:a7:83:6a:63:96:a8:27:dd:16:61:31:03:
66         74:9d:bc:f5:90:20:90:31:8e:94:9e:a9:99:15:55:47:a1:20:
67         49:82:a4:38:a9:6b:eb:73:56:1d:e7:80:f0:46:76:4a:f9:8a:
68         9b:d0:dd:ab:9c:ab:eb:63:f8:e1:90:a2:b5:85:54:8d:90:e0:
69         56:a3:0c:46:bd:7a:c5:f6:11:96:7e:da:d1:f0:38:c6:91:f3:
70         ed:8d:2a:a0:4a:6b:60:76:a4:7f:57:0f:ff:14:26:d5:3d:6f:
71         4a:96:c0:14:c3:2d:62:e0:17:65:b2:4f:42:08:dc:9e:52:e6:
72         27:66:45:ce
73-----BEGIN CERTIFICATE-----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94-----END CERTIFICATE-----
95
96Certificate:
97    Data:
98        Version: 3 (0x2)
99        Serial Number:
100            6a:9f:ff:3a:b6:b8:fe:7d:22:0c:6a:3b:9d:e9:cc:59:3d:d5:60:ed
101        Signature Algorithm: sha256WithRSAEncryption
102        Issuer: CN=Root
103        Validity
104            Not Before: Oct  5 12:00:00 2021 GMT
105            Not After : Oct  5 12:00:00 2022 GMT
106        Subject: CN=Intermediate
107        Subject Public Key Info:
108            Public Key Algorithm: rsaEncryption
109                RSA Public-Key: (2048 bit)
110                Modulus:
111                    00:e8:a7:ff:7c:21:83:d4:bd:ed:f4:09:73:79:69:
112                    0c:ec:79:18:79:54:2e:a6:87:f3:7b:65:e8:73:6a:
113                    a5:af:fd:00:6b:c9:ed:86:50:18:f0:4c:d9:12:17:
114                    3a:23:ae:7a:49:3d:71:7c:6e:da:4f:7b:ed:55:73:
115                    e8:71:5c:72:13:84:8f:83:aa:30:4f:0a:bc:38:51:
116                    75:47:67:c3:6c:5e:e8:af:96:07:4a:0c:f7:5d:c1:
117                    82:ea:02:e2:c3:da:57:68:2c:03:1a:a0:d9:51:05:
118                    ef:ec:67:cc:fd:c4:09:b4:f7:2f:c7:5a:df:84:7f:
119                    15:60:32:9d:17:4e:4b:3c:15:48:a7:42:a1:f5:d4:
120                    04:82:bb:cc:18:3a:ab:07:d1:66:82:9b:0d:b0:ef:
121                    d8:47:18:71:78:e6:07:47:97:29:24:0c:7a:12:ab:
122                    2f:4b:14:ec:35:7a:d2:a3:2a:16:0c:0b:91:5a:e2:
123                    f2:64:93:85:1d:e2:27:7e:7e:cd:eb:5f:83:d7:07:
124                    0c:06:b8:8f:44:91:0c:37:d8:86:65:23:1a:fe:8f:
125                    69:3e:bb:20:bb:ef:1b:18:1b:fd:2f:bf:5b:d3:be:
126                    da:2d:9f:9a:57:6b:4b:73:3f:34:04:99:5d:a1:73:
127                    b5:08:d1:bb:9a:5c:88:a0:f8:65:1c:e7:7f:f3:95:
128                    d0:fd
129                Exponent: 65537 (0x10001)
130        X509v3 extensions:
131            X509v3 Subject Key Identifier:
132                1E:51:BA:4C:14:B3:B7:2B:E2:AE:4C:1C:35:21:7C:DB:92:18:AB:53
133            X509v3 Authority Key Identifier:
134                keyid:5B:22:4E:B0:32:77:9B:92:26:9B:3B:E9:76:31:CE:FB:43:87:A3:2A
135
136            Authority Information Access:
137                CA Issuers - URI:http://url-for-aia/Root.cer
138
139            X509v3 CRL Distribution Points:
140
141                Full Name:
142                  URI:http://url-for-crl/Root.crl
143
144            X509v3 Key Usage: critical
145                Certificate Sign, CRL Sign
146            X509v3 Basic Constraints: critical
147                CA:TRUE
148    Signature Algorithm: sha256WithRSAEncryption
149         d4:1e:bf:d9:98:97:43:3d:5d:ca:eb:f0:2c:40:8b:91:46:f1:
150         4c:f9:61:ac:c0:72:b1:07:5e:67:23:46:ba:ea:ce:1b:e6:f7:
151         69:7a:14:30:0b:8c:4e:b0:ff:c3:11:ab:e6:fb:1e:a2:f9:f4:
152         f0:41:0d:ce:0f:4c:82:5b:b6:fd:a6:1b:8a:8f:da:8e:0f:a9:
153         19:0a:26:59:c4:42:84:a2:b9:60:ed:6a:11:6e:f0:05:18:67:
154         bb:18:e6:de:00:dd:a0:a7:42:29:c6:a1:b4:aa:81:56:e4:12:
155         39:1f:8a:0e:5b:2c:f7:07:7d:ad:db:be:86:89:f2:24:ee:b3:
156         34:f6:75:fe:5c:4e:fa:1f:6a:fc:2e:93:ca:0e:6e:33:a6:ba:
157         7e:a8:3f:66:2c:cb:16:b0:93:80:91:50:7e:7b:76:af:e4:7c:
158         fc:35:a2:f5:b1:4a:07:7b:b4:8e:da:76:c0:43:91:83:81:47:
159         10:2f:bb:2b:63:a0:63:e6:a4:24:01:75:69:ad:0c:62:ad:24:
160         3f:01:b4:a9:b4:77:85:b9:4a:79:4f:35:9b:e8:1e:7e:e5:0e:
161         22:ce:f6:76:ad:58:f9:53:7f:d9:d5:0c:43:5a:c4:7b:1e:a4:
162         7d:af:03:9c:a0:56:92:6f:b4:bc:f7:71:08:1a:6a:07:a1:f2:
163         79:8d:a4:4a
164-----BEGIN CERTIFICATE-----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184-----END CERTIFICATE-----
185
186Certificate:
187    Data:
188        Version: 3 (0x2)
189        Serial Number:
190            6a:9f:ff:3a:b6:b8:fe:7d:22:0c:6a:3b:9d:e9:cc:59:3d:d5:60:eb
191        Signature Algorithm: sha256WithRSAEncryption
192        Issuer: CN=Root
193        Validity
194            Not Before: Oct  5 12:00:00 2021 GMT
195            Not After : Oct  5 12:00:00 2022 GMT
196        Subject: CN=Root
197        Subject Public Key Info:
198            Public Key Algorithm: rsaEncryption
199                RSA Public-Key: (2048 bit)
200                Modulus:
201                    00:df:f9:b3:49:5f:c8:1f:a6:a5:bc:9e:5d:08:17:
202                    7e:a5:87:b6:d2:53:a6:c2:ce:73:29:cb:f4:35:07:
203                    26:c5:b0:ef:87:ca:a0:64:db:7f:e4:2c:05:da:81:
204                    8e:98:b8:80:d2:f1:c3:e5:d6:6c:1a:ac:90:8f:f0:
205                    4d:43:fd:09:f4:eb:17:fa:c4:cb:da:2a:56:7e:b6:
206                    d2:ce:6d:5f:d5:ec:01:67:af:02:3a:d6:18:a2:61:
207                    43:f6:ff:45:10:c4:8e:c1:15:1b:a0:88:77:45:82:
208                    39:10:f8:d7:2c:26:13:df:20:62:0f:9a:5d:69:d1:
209                    ae:4e:c2:28:30:0c:dd:d5:6e:8e:23:d0:45:f3:4f:
210                    2c:9a:f6:f7:d4:fd:b8:6e:28:32:74:57:94:5d:f8:
211                    3f:51:ef:11:21:09:27:3c:05:46:86:78:63:f6:c5:
212                    0d:7c:28:e5:b7:1a:66:f4:91:59:f2:91:16:a2:7b:
213                    0a:34:e7:30:78:72:73:10:dc:b7:60:cd:d3:ea:8b:
214                    09:0e:7c:9c:01:f9:f5:d8:ce:35:86:8f:60:e4:00:
215                    38:98:81:ac:36:1a:25:7e:c6:59:bd:79:53:5b:83:
216                    f0:72:50:78:a2:3f:53:45:fc:64:56:40:ed:64:5d:
217                    7d:df:62:4f:a0:01:25:19:59:9f:84:e6:c7:21:04:
218                    b8:2f
219                Exponent: 65537 (0x10001)
220        X509v3 extensions:
221            X509v3 Subject Key Identifier:
222                5B:22:4E:B0:32:77:9B:92:26:9B:3B:E9:76:31:CE:FB:43:87:A3:2A
223            X509v3 Authority Key Identifier:
224                keyid:5B:22:4E:B0:32:77:9B:92:26:9B:3B:E9:76:31:CE:FB:43:87:A3:2A
225
226            Authority Information Access:
227                CA Issuers - URI:http://url-for-aia/Root.cer
228
229            X509v3 CRL Distribution Points:
230
231                Full Name:
232                  URI:http://url-for-crl/Root.crl
233
234            X509v3 Key Usage: critical
235                Certificate Sign, CRL Sign
236            X509v3 Basic Constraints: critical
237                CA:TRUE
238    Signature Algorithm: sha256WithRSAEncryption
239         16:d1:9e:75:72:6b:30:1b:89:1b:ea:97:b9:28:bf:93:75:1b:
240         51:3c:89:47:1e:58:59:87:1e:f8:aa:8a:d7:b9:7d:60:42:44:
241         39:da:8d:84:f2:e1:97:8f:9c:db:46:cf:49:54:f0:af:fd:7a:
242         38:77:9b:c1:d1:1b:21:4f:05:3c:2e:19:e4:42:76:35:f3:ef:
243         38:45:a1:a5:b3:ab:e1:8b:13:32:3e:89:4c:49:f9:32:df:02:
244         c1:f3:1f:d5:77:9c:c8:87:c7:73:0b:94:e1:74:65:64:8a:ca:
245         69:b0:c4:81:91:be:05:a2:6d:09:e4:29:78:66:af:89:54:96:
246         9c:bd:ad:bc:1e:e6:64:01:48:93:63:d5:aa:72:87:0d:65:98:
247         2c:b3:b4:85:97:b5:4e:fe:b3:31:0c:e8:85:eb:c4:5f:65:c6:
248         f4:00:a4:26:7b:ae:17:b7:6c:89:95:db:e5:c1:50:65:ee:f5:
249         73:28:26:21:24:0b:b3:4a:e6:24:e9:c1:b9:e1:5a:6a:86:35:
250         c3:44:8e:b1:30:10:79:38:fe:96:1c:07:ad:43:22:ec:58:c6:
251         1f:66:93:50:52:4a:7e:a6:74:4b:c3:31:53:c0:3e:f9:a3:3a:
252         ea:0c:e9:b5:c1:8d:c3:93:e9:f5:89:12:98:cd:85:63:33:12:
253         b7:6e:63:cd
254-----BEGIN CERTIFICATE-----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274-----END CERTIFICATE-----
275