1[Created by: generate_policies_tests.py] 2 3Cast certificate chain with the following policies: 4 5 Root: policies={} 6 Intermediate: policies={} 7 Leaf: policies={anyPolicy} 8 9Certificate: 10 Data: 11 Version: 3 (0x2) 12 Serial Number: 7 (0x7) 13 Signature Algorithm: sha256WithRSAEncryption 14 Issuer: CN=Intermediate 15 Validity 16 Not Before: Jan 1 12:00:00 2015 GMT 17 Not After : Jan 1 12:00:00 2018 GMT 18 Subject: CN=Leaf 19 Subject Public Key Info: 20 Public Key Algorithm: rsaEncryption 21 Public-Key: (2048 bit) 22 Modulus: 23 00:cf:15:82:72:db:54:3a:13:1f:6a:ec:55:74:fd: 24 c5:29:b8:33:8b:0e:f9:ab:33:6a:e7:46:e2:5c:96: 25 2f:4d:50:42:a6:dc:2e:55:d3:61:01:6b:c4:a8:8d: 26 ab:05:79:e9:42:28:8a:5a:c2:47:29:9b:99:9a:ab: 27 f8:64:35:75:9b:a0:8e:ce:1e:f5:b2:47:ee:90:23: 28 12:29:e9:4b:1b:1a:59:34:e3:ba:38:7a:83:d5:ce: 29 ce:39:39:78:8d:d1:93:20:4c:0f:60:b5:ac:9a:80: 30 a5:4c:d8:4e:f0:88:89:1b:d9:7a:63:8f:9b:19:75: 31 c5:d2:ef:48:6b:79:eb:cf:61:6d:22:a1:b7:3b:40: 32 20:d2:ae:f6:48:b2:88:90:40:3f:f2:75:a9:ad:2c: 33 76:ab:ca:d8:61:06:93:1c:d4:f5:a4:d8:d9:09:c9: 34 1f:0d:ef:26:37:50:ad:cf:a1:a1:89:00:56:7f:92: 35 cf:6b:ec:0f:76:55:ab:81:55:a7:2e:8f:5e:69:c9: 36 23:38:a2:18:61:20:bf:e5:c7:82:4a:d9:d0:77:03: 37 35:8a:4d:43:c1:30:f8:67:b5:83:29:8c:df:a8:9d: 38 0e:d6:98:64:8f:77:36:13:fc:1d:40:de:3b:3d:4c: 39 19:24:cc:07:68:93:36:b5:1a:0c:fc:4e:17:95:6d: 40 3a:55 41 Exponent: 65537 (0x10001) 42 X509v3 extensions: 43 X509v3 Subject Key Identifier: 44 69:F1:3A:B2:9E:B9:B5:10:AF:79:90:80:34:9D:B9:BD:1C:B0:90:A6 45 X509v3 Authority Key Identifier: 46 keyid:2F:57:CF:1E:AE:33:BF:E2:E3:98:F4:28:80:63:6B:FF:29:21:8F:76 47 48 Authority Information Access: 49 CA Issuers - URI:http://url-for-aia/Intermediate.cer 50 51 X509v3 CRL Distribution Points: 52 53 Full Name: 54 URI:http://url-for-crl/Intermediate.crl 55 56 X509v3 Key Usage: critical 57 Digital Signature, Key Encipherment 58 X509v3 Extended Key Usage: 59 TLS Web Client Authentication 60 X509v3 Certificate Policies: 61 Policy: X509v3 Any Policy 62 63 Signature Algorithm: sha256WithRSAEncryption 64 22:71:c6:67:ab:c1:d7:29:f4:41:6a:da:54:06:9d:26:f2:10: 65 cd:04:0d:f5:99:34:3e:08:6a:be:ff:d0:18:10:63:4d:79:46: 66 b5:28:b4:db:d1:27:4f:79:55:dc:45:30:d9:ba:99:7a:d7:bc: 67 de:14:1e:73:f2:82:2e:ca:6d:45:e4:98:28:cd:a0:28:e9:86: 68 33:93:c6:c4:f0:7a:b9:bf:1d:69:6d:b8:1e:eb:81:85:a6:ad: 69 d0:c9:af:e2:20:5f:e5:8b:40:7b:61:0c:b8:8c:9e:cc:14:9d: 70 0e:c5:e9:13:e3:30:ed:83:d3:ac:ba:cf:3e:04:20:1c:ba:07: 71 2d:e7:81:0b:b0:1b:d4:7c:d9:3a:92:5d:54:44:c0:79:b9:d8: 72 4f:0f:79:b2:63:ee:2f:ae:2f:00:97:7b:47:92:97:19:dd:25: 73 10:a7:5a:40:ec:eb:dc:b5:c8:05:ab:2e:dc:1a:c2:06:fb:90: 74 b1:88:af:27:56:b5:a1:c0:a8:f5:65:3f:98:bf:0f:16:70:41: 75 c3:cd:fa:c5:f2:fc:21:2a:25:db:98:1e:1f:ab:a7:b0:a2:7f: 76 1a:72:9f:6f:9a:84:81:7d:99:4a:09:13:2f:30:50:fc:98:da: 77 0c:c0:fd:bc:7c:84:66:dc:d3:8d:52:73:28:cd:ee:1e:c7:8f: 78 e5:5d:1c:f7 79-----BEGIN CERTIFICATE----- 80MIIDlDCCAnygAwIBAgIBBzANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl 81cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTgwMTAxMTIwMDAwWjAPMQ0wCwYD 82VQQDDARMZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxWCcttU 83OhMfauxVdP3FKbgziw75qzNq50biXJYvTVBCptwuVdNhAWvEqI2rBXnpQiiKWsJH 84KZuZmqv4ZDV1m6COzh71skfukCMSKelLGxpZNOO6OHqD1c7OOTl4jdGTIEwPYLWs 85moClTNhO8IiJG9l6Y4+bGXXF0u9Ia3nrz2FtIqG3O0Ag0q72SLKIkEA/8nWprSx2 86q8rYYQaTHNT1pNjZCckfDe8mN1Ctz6GhiQBWf5LPa+wPdlWrgVWnLo9eackjOKIY 87YSC/5ceCStnQdwM1ik1DwTD4Z7WDKYzfqJ0O1phkj3c2E/wdQN47PUwZJMwHaJM2 88tRoM/E4XlW06VQIDAQABo4HyMIHvMB0GA1UdDgQWBBRp8Tqynrm1EK95kIA0nbm9 89HLCQpjAfBgNVHSMEGDAWgBQvV88erjO/4uOY9CiAY2v/KSGPdjA/BggrBgEFBQcB 90AQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1lZGlh 91dGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly91cmwtZm9yLWNybC9JbnRl 92cm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcD 93AjARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQELBQADggEBACJxxmerwdcp 949EFq2lQGnSbyEM0EDfWZND4Iar7/0BgQY015RrUotNvRJ095VdxFMNm6mXrXvN4U 95HnPygi7KbUXkmCjNoCjphjOTxsTwerm/HWltuB7rgYWmrdDJr+IgX+WLQHthDLiM 96nswUnQ7F6RPjMO2D06y6zz4EIBy6By3ngQuwG9R82TqSXVREwHm52E8PebJj7i+u 97LwCXe0eSlxndJRCnWkDs69y1yAWrLtwawgb7kLGIrydWtaHAqPVlP5i/DxZwQcPN 98+sXy/CEqJduYHh+rp7Cifxpyn2+ahIF9mUoJEy8wUPyY2gzA/bx8hGbc041ScyjN 997h7Hj+VdHPc= 100-----END CERTIFICATE----- 101 102Certificate: 103 Data: 104 Version: 3 (0x2) 105 Serial Number: 14 (0xe) 106 Signature Algorithm: sha256WithRSAEncryption 107 Issuer: CN=Root 108 Validity 109 Not Before: Jan 1 12:00:00 2015 GMT 110 Not After : Jan 1 12:00:00 2018 GMT 111 Subject: CN=Intermediate 112 Subject Public Key Info: 113 Public Key Algorithm: rsaEncryption 114 Public-Key: (2048 bit) 115 Modulus: 116 00:dc:65:d8:cd:cf:c3:59:0c:3f:6e:3a:3e:47:36: 117 78:2b:84:8d:79:6d:e0:ca:4b:87:6c:48:6c:48:e4: 118 55:83:5f:c9:32:65:56:6c:fa:13:67:1d:2b:da:8f: 119 01:7e:ea:bd:fa:69:ed:29:9f:28:6a:b4:07:a2:10: 120 15:28:46:01:b7:27:5b:3a:61:03:47:6a:fe:d2:71: 121 e7:aa:b7:f4:a8:29:74:cc:7e:a0:52:c1:f6:fb:81: 122 90:77:55:e6:03:8a:d9:d0:e5:5e:31:1b:0d:52:7f: 123 2c:4d:2d:37:7c:e9:66:1f:a9:eb:45:9a:e8:bd:a7: 124 4d:5d:4a:fe:21:4b:2c:a2:3a:b5:e6:81:fd:fc:d0: 125 af:96:02:53:1e:b3:07:1c:9b:25:d5:a7:d9:22:6a: 126 e4:50:4a:86:bf:9b:54:02:04:28:6f:e2:47:c3:f8: 127 02:af:ed:10:f3:f5:68:f3:ca:8b:41:85:b3:63:61: 128 23:22:79:fa:0a:0f:5e:a0:5c:67:61:9b:12:e7:02: 129 2f:63:da:a2:79:e3:94:10:44:2f:bd:78:62:c0:73: 130 f0:d0:76:ff:a1:8b:2f:be:f3:87:fa:5e:8b:63:5d: 131 cd:73:42:e3:a1:84:c5:a4:62:37:6f:8a:2c:2a:3d: 132 97:5c:0c:00:52:e7:85:b5:a1:f9:39:b0:13:ca:a5: 133 12:f3 134 Exponent: 65537 (0x10001) 135 X509v3 extensions: 136 X509v3 Subject Key Identifier: 137 2F:57:CF:1E:AE:33:BF:E2:E3:98:F4:28:80:63:6B:FF:29:21:8F:76 138 X509v3 Authority Key Identifier: 139 keyid:E4:A1:AC:CB:CC:C3:AD:20:0C:B2:59:77:33:E0:71:96:CC:C3:13:75 140 141 Authority Information Access: 142 CA Issuers - URI:http://url-for-aia/Root.cer 143 144 X509v3 CRL Distribution Points: 145 146 Full Name: 147 URI:http://url-for-crl/Root.crl 148 149 X509v3 Key Usage: critical 150 Certificate Sign, CRL Sign 151 X509v3 Basic Constraints: critical 152 CA:TRUE 153 Signature Algorithm: sha256WithRSAEncryption 154 9b:ee:65:41:e3:21:87:17:8e:50:68:34:5e:07:9e:bf:34:eb: 155 73:db:d6:f9:a0:86:68:bc:e1:49:3a:81:fd:6b:16:ac:a9:fa: 156 c5:c9:04:78:3e:4a:00:1d:a9:67:a3:54:2a:40:44:bb:9a:6d: 157 0f:e7:2d:97:0e:c3:0a:e9:78:87:90:e3:73:63:53:4e:96:e7: 158 07:f0:04:9f:57:c4:7a:54:06:10:db:a9:b6:5e:c6:2e:64:62: 159 5d:da:c9:ea:91:56:aa:b2:43:c9:00:6b:60:f8:ab:28:41:59: 160 27:24:de:e7:bb:fd:54:49:d5:df:df:c2:b1:1b:ca:a7:37:83: 161 f6:bc:0e:d6:87:cb:f7:f1:8a:5f:31:a9:32:c8:ca:1c:bd:ab: 162 b8:0b:13:17:5a:ec:6a:57:7f:db:a6:9d:d8:e1:d5:50:f6:15: 163 08:a2:95:6a:1e:c2:ae:8d:b0:72:bb:12:84:2d:ab:10:e0:2f: 164 af:28:33:64:1f:3d:9b:f3:03:60:8d:58:81:6e:9b:ac:89:c9: 165 06:33:06:d5:4a:e6:c3:81:34:47:6d:9b:2d:a0:30:df:f3:a7: 166 17:1d:07:29:55:20:97:20:69:5b:25:fe:c4:ff:ff:32:df:41: 167 a2:bc:6b:85:6d:f3:3a:d4:13:42:81:6c:5e:6b:5f:7f:fc:30: 168 d1:3a:13:b6 169-----BEGIN CERTIFICATE----- 170MIIDbTCCAlWgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 171MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 172ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GXYzc/D 173WQw/bjo+RzZ4K4SNeW3gykuHbEhsSORVg1/JMmVWbPoTZx0r2o8Bfuq9+mntKZ8o 174arQHohAVKEYBtydbOmEDR2r+0nHnqrf0qCl0zH6gUsH2+4GQd1XmA4rZ0OVeMRsN 175Un8sTS03fOlmH6nrRZrovadNXUr+IUssojq15oH9/NCvlgJTHrMHHJsl1afZImrk 176UEqGv5tUAgQob+JHw/gCr+0Q8/Vo88qLQYWzY2EjInn6Cg9eoFxnYZsS5wIvY9qi 177eeOUEEQvvXhiwHPw0Hb/oYsvvvOH+l6LY13Nc0LjoYTFpGI3b4osKj2XXAwAUueF 178taH5ObATyqUS8wIDAQABo4HLMIHIMB0GA1UdDgQWBBQvV88erjO/4uOY9CiAY2v/ 179KSGPdjAfBgNVHSMEGDAWgBTkoazLzMOtIAyyWXcz4HGWzMMTdTA3BggrBgEFBQcB 180AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs 181BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD 182VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB 183AJvuZUHjIYcXjlBoNF4Hnr8063Pb1vmghmi84Uk6gf1rFqyp+sXJBHg+SgAdqWej 184VCpARLuabQ/nLZcOwwrpeIeQ43NjU06W5wfwBJ9XxHpUBhDbqbZexi5kYl3ayeqR 185VqqyQ8kAa2D4qyhBWSck3ue7/VRJ1d/fwrEbyqc3g/a8DtaHy/fxil8xqTLIyhy9 186q7gLExda7GpXf9umndjh1VD2FQiilWoewq6NsHK7EoQtqxDgL68oM2QfPZvzA2CN 187WIFum6yJyQYzBtVK5sOBNEdtmy2gMN/zpxcdBylVIJcgaVsl/sT//zLfQaK8a4Vt 1888zrUE0KBbF5rX3/8MNE6E7Y= 189-----END CERTIFICATE----- 190 191Certificate: 192 Data: 193 Version: 3 (0x2) 194 Serial Number: 13 (0xd) 195 Signature Algorithm: sha256WithRSAEncryption 196 Issuer: CN=Root 197 Validity 198 Not Before: Jan 1 12:00:00 2015 GMT 199 Not After : Jan 1 12:00:00 2018 GMT 200 Subject: CN=Root 201 Subject Public Key Info: 202 Public Key Algorithm: rsaEncryption 203 Public-Key: (2048 bit) 204 Modulus: 205 00:df:14:ae:c9:18:37:0f:37:56:f3:f0:a6:cf:84: 206 38:c2:48:88:e4:49:a5:db:0d:29:1c:71:e4:9b:2b: 207 1b:23:c4:2f:2e:4a:02:c7:f7:d7:84:e5:67:f5:ab: 208 b2:99:49:65:82:96:70:3d:35:33:9b:da:77:4f:e0: 209 02:01:dd:cb:a3:0f:1b:e4:48:6b:f1:d9:14:97:3d: 210 b5:b7:a7:29:6f:ce:74:47:73:df:23:3e:40:6f:01: 211 4f:6e:d3:bd:0d:23:be:94:bd:e3:a0:34:1f:8c:3a: 212 80:eb:98:4a:fa:2a:00:ee:0d:da:fb:f6:69:c1:73: 213 cc:0f:c0:23:c6:6f:1e:af:4c:d5:42:79:00:66:19: 214 ae:4b:c0:ed:52:a3:bf:40:4c:98:ec:92:97:d8:af: 215 d9:e7:47:8a:23:f7:76:b6:43:a7:bd:ee:4d:3a:4c: 216 6f:1d:1b:2a:aa:c0:39:3a:e2:b5:27:dc:58:d9:b6: 217 60:c5:84:77:9d:66:da:76:d3:12:de:93:37:c5:b8: 218 aa:dc:39:3a:2d:be:65:45:de:d9:eb:e0:0c:53:51: 219 ee:0b:96:9b:72:21:eb:53:5c:3b:3b:82:d8:2f:10: 220 56:04:c3:12:73:f7:72:d3:30:50:ee:1d:99:6b:02: 221 39:40:a1:36:fd:27:5d:f4:82:19:21:3c:68:54:e7: 222 d1:19 223 Exponent: 65537 (0x10001) 224 X509v3 extensions: 225 X509v3 Subject Key Identifier: 226 E4:A1:AC:CB:CC:C3:AD:20:0C:B2:59:77:33:E0:71:96:CC:C3:13:75 227 X509v3 Authority Key Identifier: 228 keyid:E4:A1:AC:CB:CC:C3:AD:20:0C:B2:59:77:33:E0:71:96:CC:C3:13:75 229 230 Authority Information Access: 231 CA Issuers - URI:http://url-for-aia/Root.cer 232 233 X509v3 CRL Distribution Points: 234 235 Full Name: 236 URI:http://url-for-crl/Root.crl 237 238 X509v3 Key Usage: critical 239 Certificate Sign, CRL Sign 240 X509v3 Basic Constraints: critical 241 CA:TRUE 242 Signature Algorithm: sha256WithRSAEncryption 243 7e:6f:b9:38:cc:e4:f7:f5:2b:de:1e:b4:1c:46:71:0e:f0:e0: 244 2b:88:cd:e2:fe:d5:de:ec:87:c4:f2:fc:32:71:6d:f5:eb:f3: 245 26:70:ae:48:45:6e:a6:8b:30:38:d1:30:8a:36:d8:27:6e:83: 246 f4:f2:96:68:db:d6:36:c7:ed:d7:d1:13:04:bf:5a:1c:8b:70: 247 3e:fd:ca:50:ac:a6:21:0f:22:61:78:d8:5d:46:7e:48:ca:23: 248 24:06:5e:91:09:cf:ef:0e:15:4c:c9:4a:83:b4:a7:c0:1b:93: 249 9b:2a:a9:4d:3c:ad:49:b2:7c:6b:f3:b1:be:63:d2:80:c8:86: 250 28:6f:87:f3:84:d2:c7:37:26:8b:f5:8c:93:89:8b:9a:32:bb: 251 e9:b6:50:b8:f2:8c:b8:06:f6:32:ee:2d:d4:d2:c8:bc:6d:8e: 252 ba:02:94:f7:68:c1:c5:6f:01:68:e3:14:31:2e:f8:90:6f:91: 253 36:2e:ce:3d:3b:e3:f4:90:f8:7d:ac:b6:a2:ab:d2:ea:e1:24: 254 67:25:4e:c0:65:d0:13:df:97:a6:02:b9:67:80:2d:4e:3d:da: 255 bc:d4:e5:53:9a:d2:91:48:33:47:d8:c4:e9:d0:8f:18:85:76: 256 df:d6:c0:92:90:8c:de:9e:7b:cc:1d:1c:3e:d3:c3:4b:be:e8: 257 e0:2c:3d:2b 258-----BEGIN CERTIFICATE----- 259MIIDZTCCAk2gAwIBAgIBDTANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 260MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v 261dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN8UrskYNw83VvPwps+E 262OMJIiORJpdsNKRxx5JsrGyPELy5KAsf314TlZ/WrsplJZYKWcD01M5vad0/gAgHd 263y6MPG+RIa/HZFJc9tbenKW/OdEdz3yM+QG8BT27TvQ0jvpS946A0H4w6gOuYSvoq 264AO4N2vv2acFzzA/AI8ZvHq9M1UJ5AGYZrkvA7VKjv0BMmOySl9iv2edHiiP3drZD 265p73uTTpMbx0bKqrAOTritSfcWNm2YMWEd51m2nbTEt6TN8W4qtw5Oi2+ZUXe2evg 266DFNR7guWm3Ih61NcOzuC2C8QVgTDEnP3ctMwUO4dmWsCOUChNv0nXfSCGSE8aFTn 2670RkCAwEAAaOByzCByDAdBgNVHQ4EFgQU5KGsy8zDrSAMsll3M+BxlszDE3UwHwYD 268VR0jBBgwFoAU5KGsy8zDrSAMsll3M+BxlszDE3UwNwYIKwYBBQUHAQEEKzApMCcG 269CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw 270IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE 271AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB+b7k4zOT3 2729SveHrQcRnEO8OAriM3i/tXe7IfE8vwycW316/MmcK5IRW6mizA40TCKNtgnboP0 2738pZo29Y2x+3X0RMEv1oci3A+/cpQrKYhDyJheNhdRn5IyiMkBl6RCc/vDhVMyUqD 274tKfAG5ObKqlNPK1Jsnxr87G+Y9KAyIYob4fzhNLHNyaL9YyTiYuaMrvptlC48oy4 275BvYy7i3U0si8bY66ApT3aMHFbwFo4xQxLviQb5E2Ls49O+P0kPh9rLaiq9Lq4SRn 276JU7AZdAT35emArlngC1OPdq81OVTmtKRSDNH2MTp0I8YhXbf1sCSkIzennvMHRw+ 27708NLvujgLD0r 278-----END CERTIFICATE----- 279