1[Created by: generate-chains.py] 2 3Generates certificate chains where the intermediate contains netscape server 4gated crypto rather than serverAuth. 5 6Certificate: 7 Data: 8 Version: 3 (0x2) 9 Serial Number: 10 16:b5:13:fb:79:d7:bf:0c:f5:4b:2a:50:4c:9a:68:d0:89:a0:f2:9d 11 Signature Algorithm: sha256WithRSAEncryption 12 Issuer: CN=Intermediate 13 Validity 14 Not Before: Oct 5 12:00:00 2021 GMT 15 Not After : Oct 5 12:00:00 2022 GMT 16 Subject: CN=Target 17 Subject Public Key Info: 18 Public Key Algorithm: rsaEncryption 19 RSA Public-Key: (2048 bit) 20 Modulus: 21 00:ae:2e:8b:18:8d:f7:76:2c:94:0c:3f:a0:b6:ea: 22 70:1f:5e:c8:48:c5:aa:ad:55:6b:bd:55:68:0d:8e: 23 ce:e5:99:27:c5:2c:b2:9a:29:a9:8f:8e:c3:c6:97: 24 89:6d:31:d7:a4:8f:d8:36:37:4f:33:c7:d6:42:03: 25 11:08:c4:7f:35:8c:ee:0f:1b:7a:31:74:04:aa:01: 26 d3:1e:8b:5b:01:9d:60:4b:9c:d1:8f:1e:ab:e5:dc: 27 8f:17:77:49:e3:f6:d5:82:a5:2f:0a:e8:dc:9f:96: 28 1e:2a:a1:41:d1:67:2c:9e:f3:7f:94:0c:6e:cf:5f: 29 55:52:37:05:d0:39:37:1a:6e:11:ed:db:fa:aa:92: 30 a7:4f:50:29:07:69:af:1d:a7:99:fa:e1:56:f0:03: 31 38:b0:ae:6b:e7:19:0b:dd:c3:07:31:8e:84:04:a5: 32 b4:eb:b8:bc:23:f3:40:b0:17:b4:ab:9e:3f:05:96: 33 89:fc:84:23:cc:d1:06:c2:e4:8b:c6:65:f5:24:eb: 34 72:31:bc:41:7d:3a:c9:55:08:0c:ee:a6:ae:1f:78: 35 17:f8:a7:9d:7b:b1:82:f5:ce:82:6b:a8:b2:c6:8a: 36 b9:be:a5:d8:39:f4:49:e2:4c:53:32:85:26:53:4d: 37 44:ce:d5:3b:a0:6b:e7:d9:02:a1:5a:ef:e1:a5:81: 38 a7:fb 39 Exponent: 65537 (0x10001) 40 X509v3 extensions: 41 X509v3 Subject Key Identifier: 42 EB:B0:1C:BD:B7:68:B8:D1:B9:8A:C2:9F:5D:CF:DD:AF:F2:62:70:8A 43 X509v3 Authority Key Identifier: 44 keyid:EE:C6:9A:65:CC:FB:CE:A0:3E:17:02:F9:68:12:86:B6:22:09:60:B4 45 46 Authority Information Access: 47 CA Issuers - URI:http://url-for-aia/Intermediate.cer 48 49 X509v3 CRL Distribution Points: 50 51 Full Name: 52 URI:http://url-for-crl/Intermediate.crl 53 54 X509v3 Key Usage: critical 55 Digital Signature, Key Encipherment 56 X509v3 Extended Key Usage: 57 TLS Web Server Authentication, TLS Web Client Authentication 58 X509v3 Subject Alternative Name: 59 DNS:test.example 60 Signature Algorithm: sha256WithRSAEncryption 61 ae:3a:23:25:7f:40:ed:93:24:d6:8d:66:f1:b5:aa:56:37:c1: 62 28:89:e5:84:0b:42:14:28:29:45:93:24:6f:80:71:2f:d9:0e: 63 ab:c9:70:29:60:83:0a:87:3a:f1:9f:5e:35:dc:36:e9:83:b4: 64 ab:41:2d:7f:00:df:a6:ff:21:b0:89:cb:b1:7f:bf:7b:18:f6: 65 62:51:0b:97:c7:5b:af:3f:a1:e7:a1:07:3c:d3:57:54:c3:33: 66 58:78:8e:2b:40:6a:7b:c5:5a:f8:ee:12:2b:8e:12:da:65:b3: 67 05:ea:49:e4:38:11:a5:73:f1:11:3e:41:77:d5:3b:af:a3:88: 68 c4:54:21:bc:3c:52:e9:2e:04:cb:9a:39:08:6b:c9:d5:4f:7b: 69 39:3f:54:82:d0:93:53:72:51:bb:2e:39:75:7f:c9:df:78:f6: 70 bd:f4:39:e5:bd:49:89:6b:4d:9a:ca:af:94:2e:d7:a1:aa:a5: 71 9e:6c:c3:af:cc:00:4b:1a:86:86:a6:80:b2:fe:cc:d2:1d:09: 72 c7:a3:3a:bc:aa:c0:d6:1a:ca:47:9a:96:9f:44:d1:90:7e:53: 73 70:87:e7:20:c7:33:f6:f7:3b:76:32:68:29:62:48:24:65:d6: 74 bf:5d:ec:33:b1:13:9b:24:a6:e6:d1:22:b4:04:2c:9e:0d:63: 75 65:7b:a5:69 76-----BEGIN CERTIFICATE----- 77MIIDujCCAqKgAwIBAgIUFrUT+3nXvwz1SypQTJpo0Img8p0wDQYJKoZIhvcNAQEL 78BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy 79MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF 80AAOCAQ8AMIIBCgKCAQEAri6LGI33diyUDD+gtupwH17ISMWqrVVrvVVoDY7O5Zkn 81xSyymimpj47DxpeJbTHXpI/YNjdPM8fWQgMRCMR/NYzuDxt6MXQEqgHTHotbAZ1g 82S5zRjx6r5dyPF3dJ4/bVgqUvCujcn5YeKqFB0WcsnvN/lAxuz19VUjcF0Dk3Gm4R 837dv6qpKnT1ApB2mvHaeZ+uFW8AM4sK5r5xkL3cMHMY6EBKW067i8I/NAsBe0q54/ 84BZaJ/IQjzNEGwuSLxmX1JOtyMbxBfTrJVQgM7qauH3gX+Kede7GC9c6Ca6iyxoq5 85vqXYOfRJ4kxTMoUmU01EztU7oGvn2QKhWu/hpYGn+wIDAQABo4IBAjCB/zAdBgNV 86HQ4EFgQU67AcvbdouNG5isKfXc/dr/JicIowHwYDVR0jBBgwFoAU7saaZcz7zqA+ 87FwL5aBKGtiIJYLQwPwYIKwYBBQUHAQEEMzAxMC8GCCsGAQUFBzAChiNodHRwOi8v 88dXJsLWZvci1haWEvSW50ZXJtZWRpYXRlLmNlcjA0BgNVHR8ELTArMCmgJ6AlhiNo 89dHRwOi8vdXJsLWZvci1jcmwvSW50ZXJtZWRpYXRlLmNybDAOBgNVHQ8BAf8EBAMC 90BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBcGA1UdEQQQMA6CDHRl 91c3QuZXhhbXBsZTANBgkqhkiG9w0BAQsFAAOCAQEArjojJX9A7ZMk1o1m8bWqVjfB 92KInlhAtCFCgpRZMkb4BxL9kOq8lwKWCDCoc68Z9eNdw26YO0q0EtfwDfpv8hsInL 93sX+/exj2YlELl8dbrz+h56EHPNNXVMMzWHiOK0Bqe8Va+O4SK44S2mWzBepJ5DgR 94pXPxET5Bd9U7r6OIxFQhvDxS6S4Ey5o5CGvJ1U97OT9UgtCTU3JRuy45dX/J33j2 95vfQ55b1JiWtNmsqvlC7XoaqlnmzDr8wASxqGhqaAsv7M0h0Jx6M6vKrA1hrKR5qW 96n0TRkH5TcIfnIMcz9vc7djJoKWJIJGXWv13sM7ETmySm5tEitAQsng1jZXulaQ== 97-----END CERTIFICATE----- 98 99Certificate: 100 Data: 101 Version: 3 (0x2) 102 Serial Number: 103 42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:9e 104 Signature Algorithm: sha1WithRSAEncryption 105 Issuer: CN=Root 106 Validity 107 Not Before: Oct 5 12:00:00 2021 GMT 108 Not After : Oct 5 12:00:00 2022 GMT 109 Subject: CN=Intermediate 110 Subject Public Key Info: 111 Public Key Algorithm: rsaEncryption 112 RSA Public-Key: (2048 bit) 113 Modulus: 114 00:d1:41:40:6f:cb:25:05:d9:29:d0:a3:c7:fe:2f: 115 f0:53:ad:46:36:19:aa:b1:1f:3f:7a:a2:e0:fb:03: 116 2b:77:65:6a:79:eb:f3:a3:16:13:34:83:3b:42:de: 117 a2:bb:e2:bf:d8:d2:75:3d:48:38:86:bb:2a:7d:14: 118 a3:88:f7:7c:00:f4:0a:6b:6b:aa:9b:44:24:62:fe: 119 db:a3:42:55:15:67:2a:32:ff:b2:4d:80:93:d0:84: 120 ef:1b:dc:7c:ac:56:2d:54:08:02:f6:18:6e:b5:80: 121 a8:77:52:1f:b8:2c:09:6d:cc:f8:1c:04:91:62:6e: 122 1e:dd:1d:89:b2:f1:23:0b:4d:4c:6c:da:49:3d:61: 123 83:72:0f:66:36:12:3f:f3:ff:53:52:73:53:a1:ca: 124 38:bd:c3:48:bf:7a:2f:13:19:d7:c2:28:e1:6f:32: 125 00:5e:64:ac:4b:05:7a:77:62:57:55:a9:59:83:d5: 126 ed:a3:2e:28:34:71:79:2f:b9:c3:9e:df:b3:2a:b1: 127 59:cd:04:00:1d:8b:11:56:ae:c6:67:f6:4f:1d:58: 128 07:65:e0:b0:2f:ef:57:6d:de:c1:a0:7c:6e:38:a8: 129 45:26:21:96:e0:f6:ef:0e:28:cf:01:70:57:dc:20: 130 15:08:ad:e8:e3:98:74:8c:54:32:c1:28:17:e0:de: 131 a1:8b 132 Exponent: 65537 (0x10001) 133 X509v3 extensions: 134 X509v3 Subject Key Identifier: 135 EE:C6:9A:65:CC:FB:CE:A0:3E:17:02:F9:68:12:86:B6:22:09:60:B4 136 X509v3 Authority Key Identifier: 137 keyid:42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91 138 139 Authority Information Access: 140 CA Issuers - URI:http://url-for-aia/Root.cer 141 142 X509v3 CRL Distribution Points: 143 144 Full Name: 145 URI:http://url-for-crl/Root.crl 146 147 X509v3 Key Usage: critical 148 Certificate Sign, CRL Sign 149 X509v3 Basic Constraints: critical 150 CA:TRUE 151 X509v3 Extended Key Usage: 152 Netscape Server Gated Crypto 153 Signature Algorithm: sha1WithRSAEncryption 154 7a:c0:60:a1:ed:92:ff:ee:fa:8d:8e:c6:9a:04:d1:e9:b2:6a: 155 64:f0:ad:c0:9a:20:40:22:db:1f:b9:d7:34:c5:cb:df:fa:cf: 156 52:37:4e:57:84:8f:e3:ba:fc:ad:b3:50:76:d5:58:9a:8a:49: 157 c9:6c:71:93:a9:f1:bf:6e:db:01:59:42:2f:97:69:01:8c:3a: 158 15:41:41:39:78:6f:ad:f9:61:50:38:54:b0:18:9c:8c:10:c9: 159 ee:ef:f2:74:62:e3:bf:3a:db:69:27:bd:d2:db:70:da:73:2f: 160 03:2d:74:06:a5:1f:47:45:78:ad:33:49:5e:e0:e9:b3:cf:e6: 161 31:41:ff:9f:26:8f:28:22:bb:07:5e:b4:2a:ff:20:b0:e1:5e: 162 43:79:44:e9:85:4b:17:44:6a:98:3f:76:b5:2f:af:2f:bb:08: 163 cb:58:7b:61:de:f6:29:87:97:57:dd:a2:09:62:b9:21:4c:69: 164 dc:c4:52:94:4b:9a:29:d2:19:15:c5:01:9a:d0:bd:c5:fe:03: 165 5a:55:0d:01:3e:58:b0:06:49:92:ae:4c:11:19:4f:c0:04:50: 166 81:9d:18:88:ea:f9:eb:23:a4:d3:bb:e5:c0:a1:75:db:f5:20: 167 e4:0d:34:16:39:2e:70:3a:60:26:fb:d5:ad:5a:4d:be:11:08: 168 6f:69:c9:63 169-----BEGIN CERTIFICATE----- 170MIIDljCCAn6gAwIBAgIUQuAeNnVAEhYZjQeoP5v/4Vm8ap4wDQYJKoZIhvcNAQEF 171BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw 172MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD 173ggEPADCCAQoCggEBANFBQG/LJQXZKdCjx/4v8FOtRjYZqrEfP3qi4PsDK3dlannr 17486MWEzSDO0Leorviv9jSdT1IOIa7Kn0Uo4j3fAD0CmtrqptEJGL+26NCVRVnKjL/ 175sk2Ak9CE7xvcfKxWLVQIAvYYbrWAqHdSH7gsCW3M+BwEkWJuHt0dibLxIwtNTGza 176ST1hg3IPZjYSP/P/U1JzU6HKOL3DSL96LxMZ18Io4W8yAF5krEsFendiV1WpWYPV 1777aMuKDRxeS+5w57fsyqxWc0EAB2LEVauxmf2Tx1YB2XgsC/vV23ewaB8bjioRSYh 178luD27w4ozwFwV9wgFQit6OOYdIxUMsEoF+DeoYsCAwEAAaOB4TCB3jAdBgNVHQ4E 179FgQU7saaZcz7zqA+FwL5aBKGtiIJYLQwHwYDVR0jBBgwFoAUQnVBNMVZn5mjmxwM 180V9tcx8FIt5EwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs 181LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m 182b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ 183MBQGA1UdJQQNMAsGCWCGSAGG+EIEATANBgkqhkiG9w0BAQUFAAOCAQEAesBgoe2S 184/+76jY7GmgTR6bJqZPCtwJogQCLbH7nXNMXL3/rPUjdOV4SP47r8rbNQdtVYmopJ 185yWxxk6nxv27bAVlCL5dpAYw6FUFBOXhvrflhUDhUsBicjBDJ7u/ydGLjvzrbaSe9 1860ttw2nMvAy10BqUfR0V4rTNJXuDps8/mMUH/nyaPKCK7B160Kv8gsOFeQ3lE6YVL 187F0RqmD92tS+vL7sIy1h7Yd72KYeXV92iCWK5IUxp3MRSlEuaKdIZFcUBmtC9xf4D 188WlUNAT5YsAZJkq5MERlPwARQgZ0YiOr56yOk07vlwKF12/Ug5A00FjkucDpgJvvV 189rVpNvhEIb2nJYw== 190-----END CERTIFICATE----- 191 192Certificate: 193 Data: 194 Version: 3 (0x2) 195 Serial Number: 196 42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:9d 197 Signature Algorithm: sha256WithRSAEncryption 198 Issuer: CN=Root 199 Validity 200 Not Before: Oct 5 12:00:00 2021 GMT 201 Not After : Oct 5 12:00:00 2022 GMT 202 Subject: CN=Root 203 Subject Public Key Info: 204 Public Key Algorithm: rsaEncryption 205 RSA Public-Key: (2048 bit) 206 Modulus: 207 00:c3:96:66:c7:e7:fd:21:14:ec:df:4a:05:1a:8c: 208 22:da:8f:3e:b7:8e:ca:a2:de:d7:e3:08:05:cd:28: 209 1c:da:d4:99:ba:ad:de:92:07:44:18:55:e7:b5:41: 210 6b:38:64:18:06:ab:6c:b8:ad:3d:b8:4e:c8:fa:8c: 211 fc:58:2c:2c:a8:42:08:28:b4:85:2a:aa:57:e2:a8: 212 76:4a:6e:fe:38:2f:d1:14:c6:52:6f:05:a4:89:54: 213 c2:0f:f0:93:83:09:b7:55:56:94:7b:57:65:87:09: 214 dd:61:ea:1a:02:3c:24:a5:cc:2d:d3:7c:0a:dc:2e: 215 67:a2:7f:91:ad:b4:76:76:02:ac:7f:85:5f:61:86: 216 0c:60:15:a0:82:7f:85:16:f4:10:8d:49:27:e4:33: 217 58:75:55:6b:5a:ab:c7:d1:bd:3d:a8:3b:68:1b:b4: 218 de:68:89:c4:87:fe:87:04:d4:52:f3:8f:fa:2e:44: 219 79:c1:62:46:b7:88:4c:bb:75:61:fd:e6:c5:6a:fb: 220 a8:3b:ef:a7:e6:1a:1e:44:2d:61:a7:4e:63:5e:66: 221 b8:f7:85:60:74:8b:ea:20:82:84:84:71:f5:1d:c6: 222 0c:c2:ee:11:78:01:ae:44:5a:e3:7b:97:2e:01:d0: 223 18:91:77:01:23:7f:d2:21:73:f4:f3:9a:94:ad:93: 224 2e:a1 225 Exponent: 65537 (0x10001) 226 X509v3 extensions: 227 X509v3 Subject Key Identifier: 228 42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91 229 X509v3 Authority Key Identifier: 230 keyid:42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91 231 232 Authority Information Access: 233 CA Issuers - URI:http://url-for-aia/Root.cer 234 235 X509v3 CRL Distribution Points: 236 237 Full Name: 238 URI:http://url-for-crl/Root.crl 239 240 X509v3 Key Usage: critical 241 Certificate Sign, CRL Sign 242 X509v3 Basic Constraints: critical 243 CA:TRUE 244 Signature Algorithm: sha256WithRSAEncryption 245 33:ba:bf:f6:77:75:ff:00:54:82:6a:d9:2b:33:43:5c:ce:d1: 246 5f:4b:2a:fe:00:65:0c:2b:89:75:ba:e7:b7:95:2e:2d:34:7c: 247 2e:21:a8:f5:7f:9a:eb:67:6a:30:61:d7:bc:35:6b:7e:7a:8d: 248 77:19:8d:8e:a0:e1:c8:00:9c:7f:0f:3d:3b:41:27:ac:34:c9: 249 8e:77:2e:14:4e:e9:09:06:59:15:33:fb:92:af:2f:4c:c8:de: 250 3c:3a:b3:68:f6:4d:34:87:b6:cd:bd:db:e4:d9:24:33:3a:c3: 251 77:4e:1b:9e:e0:6d:8d:2d:7f:dd:65:de:18:38:ec:b0:0d:33: 252 88:12:9d:85:68:dd:f5:b0:b9:23:c3:e6:50:72:eb:ae:dc:42: 253 2e:36:29:bd:e8:c1:11:f7:02:6e:65:5f:81:1d:dc:06:20:3e: 254 27:41:11:e5:20:dd:6a:47:c9:19:06:77:41:ff:f7:58:15:8c: 255 88:c4:d6:44:c1:c2:87:09:09:dc:64:0f:a8:90:77:88:42:bc: 256 bc:d2:75:d7:3d:69:6e:93:fb:60:89:e0:30:b3:a9:94:f7:01: 257 25:23:1b:59:9b:b2:0a:a5:17:28:5c:67:4d:be:d6:ea:ca:b8: 258 2c:e3:8f:cc:0f:38:d6:75:ba:07:d4:d5:76:e0:33:c8:f0:9f: 259 28:4d:2f:3e 260-----BEGIN CERTIFICATE----- 261MIIDeDCCAmCgAwIBAgIUQuAeNnVAEhYZjQeoP5v/4Vm8ap0wDQYJKoZIhvcNAQEL 262BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw 263MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK 264AoIBAQDDlmbH5/0hFOzfSgUajCLajz63jsqi3tfjCAXNKBza1Jm6rd6SB0QYVee1 265QWs4ZBgGq2y4rT24Tsj6jPxYLCyoQggotIUqqlfiqHZKbv44L9EUxlJvBaSJVMIP 2668JODCbdVVpR7V2WHCd1h6hoCPCSlzC3TfArcLmeif5GttHZ2Aqx/hV9hhgxgFaCC 267f4UW9BCNSSfkM1h1VWtaq8fRvT2oO2gbtN5oicSH/ocE1FLzj/ouRHnBYka3iEy7 268dWH95sVq+6g776fmGh5ELWGnTmNeZrj3hWB0i+oggoSEcfUdxgzC7hF4Aa5EWuN7 269ly4B0BiRdwEjf9Ihc/TzmpStky6hAgMBAAGjgcswgcgwHQYDVR0OBBYEFEJ1QTTF 270WZ+Zo5scDFfbXMfBSLeRMB8GA1UdIwQYMBaAFEJ1QTTFWZ+Zo5scDFfbXMfBSLeR 271MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh 272L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S 273b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG 2749w0BAQsFAAOCAQEAM7q/9nd1/wBUgmrZKzNDXM7RX0sq/gBlDCuJdbrnt5UuLTR8 275LiGo9X+a62dqMGHXvDVrfnqNdxmNjqDhyACcfw89O0EnrDTJjncuFE7pCQZZFTP7 276kq8vTMjePDqzaPZNNIe2zb3b5NkkMzrDd04bnuBtjS1/3WXeGDjssA0ziBKdhWjd 2779bC5I8PmUHLrrtxCLjYpvejBEfcCbmVfgR3cBiA+J0ER5SDdakfJGQZ3Qf/3WBWM 278iMTWRMHChwkJ3GQPqJB3iEK8vNJ11z1pbpP7YIngMLOplPcBJSMbWZuyCqUXKFxn 279Tb7W6sq4LOOPzA841nW6B9TVduAzyPCfKE0vPg== 280-----END CERTIFICATE----- 281