• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1[Created by: ./generate-chains.py]
2
3Certificate chain where the root keyUsage extension is present but does not
4contain keyCertSign.
5
6Certificate:
7    Data:
8        Version: 3 (0x2)
9        Serial Number:
10            4d:9c:b5:b6:68:93:5e:c6:e1:a7:65:67:49:b3:e4:0e:bd:5e:63:b4
11        Signature Algorithm: sha256WithRSAEncryption
12        Issuer: CN=Intermediate
13        Validity
14            Not Before: Oct  5 12:00:00 2021 GMT
15            Not After : Oct  5 12:00:00 2022 GMT
16        Subject: CN=Target
17        Subject Public Key Info:
18            Public Key Algorithm: rsaEncryption
19                Public-Key: (2048 bit)
20                Modulus:
21                    00:b1:1c:a4:b9:20:81:72:4b:f5:2c:50:7e:3f:1a:
22                    85:27:5b:2d:50:7c:e5:36:fd:9c:ac:26:a0:7d:b7:
23                    94:d5:6b:fd:c3:46:1a:dc:4d:10:45:98:cc:87:8d:
24                    af:fc:0e:bc:c9:b2:61:4b:8c:c2:9b:c8:da:7b:05:
25                    b3:3b:e0:21:95:a5:9c:01:72:34:48:3d:e4:44:f2:
26                    e7:b6:6b:58:f4:8d:60:92:c8:91:29:41:23:29:23:
27                    fd:da:62:d0:c3:78:92:5f:01:09:55:2e:3a:a2:b3:
28                    2c:2d:c5:cd:79:26:7a:66:bc:e3:a5:17:51:ae:b7:
29                    29:50:75:10:6f:2c:55:a9:79:04:21:05:3b:14:32:
30                    65:7c:3a:2c:33:ea:6b:72:20:f1:87:31:f2:8f:27:
31                    69:4f:50:1d:c2:18:36:8e:b8:6d:c4:b8:0b:7a:23:
32                    87:e1:48:84:ec:44:98:77:df:a7:7a:06:37:4d:42:
33                    33:40:e2:b2:c9:67:2f:94:20:69:5c:6d:30:1a:b8:
34                    c5:60:9e:32:6e:4d:b2:85:de:94:b9:86:50:f9:0c:
35                    72:06:34:bb:f0:4a:fc:cd:c8:89:7b:eb:69:e5:64:
36                    e8:55:4c:12:79:cc:81:88:26:f6:59:22:d5:60:8c:
37                    36:4f:96:30:e2:ea:f4:10:dc:82:08:d2:3b:e2:05:
38                    13:77
39                Exponent: 65537 (0x10001)
40        X509v3 extensions:
41            X509v3 Subject Key Identifier:
42                A9:6C:19:42:95:E3:95:C7:FF:D2:0F:BD:2C:E9:43:1F:2E:09:A2:C7
43            X509v3 Authority Key Identifier:
44                5E:60:7B:07:9D:3D:65:C3:D3:DE:FB:C8:28:BE:34:22:10:C9:C4:A2
45            Authority Information Access:
46                CA Issuers - URI:http://url-for-aia/Intermediate.cer
47            X509v3 CRL Distribution Points:
48                Full Name:
49                  URI:http://url-for-crl/Intermediate.crl
50            X509v3 Key Usage: critical
51                Digital Signature, Key Encipherment
52            X509v3 Extended Key Usage:
53                TLS Web Server Authentication, TLS Web Client Authentication
54    Signature Algorithm: sha256WithRSAEncryption
55    Signature Value:
56        14:bf:fa:03:43:bd:68:2c:77:55:2b:4a:49:ed:1b:71:4d:50:
57        0c:91:f8:c0:2c:db:66:d8:a9:45:86:25:f6:cf:3a:db:94:e9:
58        c2:c9:76:3f:c1:b3:1f:58:08:e8:05:d2:2f:de:82:35:ad:87:
59        56:c7:a8:d9:2c:e4:1a:a9:3f:91:52:cc:82:1b:2d:6d:83:99:
60        7e:2a:0f:90:93:a7:d3:09:a6:53:49:bc:d2:73:08:73:77:9c:
61        5d:d8:7b:3e:ae:42:e3:2d:d5:89:1c:45:de:06:3d:99:a9:e8:
62        63:f9:27:f7:01:1c:aa:85:00:1e:37:11:8d:4b:c0:a0:b4:fe:
63        16:30:6f:da:88:8e:a9:34:33:9b:9d:6c:d7:f2:c8:e6:86:9d:
64        f4:07:60:7e:86:fc:fb:4a:22:a4:cf:84:95:dc:da:cd:35:46:
65        71:d3:d3:71:e2:50:0b:a9:8c:25:1e:dc:13:9d:f6:e2:90:fa:
66        dd:64:a2:d4:d8:04:fd:64:eb:77:c7:87:88:b5:1a:90:0b:d1:
67        e3:5f:5c:94:3a:8d:3b:6b:ad:f7:9c:27:8f:dd:a2:b7:de:64:
68        fb:2f:c1:8e:b0:49:88:30:e8:2e:c9:49:26:a2:ad:3f:f8:b5:
69        4c:7a:d0:42:33:18:ae:fc:c1:29:66:8a:3d:7b:88:83:48:f6:
70        77:c0:02:d1
71-----BEGIN CERTIFICATE-----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92-----END CERTIFICATE-----
93
94Certificate:
95    Data:
96        Version: 3 (0x2)
97        Serial Number:
98            54:e3:4d:7d:5e:fd:13:7b:9f:32:55:f3:77:55:e6:39:52:6f:ef:40
99        Signature Algorithm: sha256WithRSAEncryption
100        Issuer: CN=Root
101        Validity
102            Not Before: Oct  5 12:00:00 2021 GMT
103            Not After : Oct  5 12:00:00 2022 GMT
104        Subject: CN=Intermediate
105        Subject Public Key Info:
106            Public Key Algorithm: rsaEncryption
107                Public-Key: (2048 bit)
108                Modulus:
109                    00:9c:38:da:61:b8:ad:0d:aa:de:44:df:52:78:01:
110                    82:89:fb:5f:bd:fc:a9:79:d0:8d:10:5c:3c:4e:b7:
111                    b5:43:36:bc:05:3a:0c:4e:54:88:00:45:fb:33:25:
112                    ca:cf:3a:aa:ad:a4:de:d2:2e:c1:53:44:b8:f5:58:
113                    e7:27:19:5a:70:34:71:c7:4d:77:1f:53:f2:66:b9:
114                    79:e8:c2:10:8c:2f:5d:19:17:7e:e3:26:7e:0c:5d:
115                    8e:ae:85:01:f7:05:ac:ce:18:5d:7c:a4:fa:fc:38:
116                    e6:18:63:a5:4c:d0:a3:cb:a3:e6:47:ad:5f:ec:32:
117                    fc:11:02:87:cb:fa:87:c9:38:aa:b8:b2:7e:98:99:
118                    1b:4e:f3:01:fc:48:6a:60:a5:29:80:3c:0c:50:23:
119                    3a:ae:0a:a6:d4:29:69:1e:15:34:ed:93:31:fb:30:
120                    d4:d6:23:59:94:89:fa:99:b4:16:d8:04:63:d0:c3:
121                    a9:2d:be:ff:6a:84:c7:54:bb:e8:eb:bd:16:5b:88:
122                    33:10:1b:6e:20:4f:60:49:56:09:86:dc:95:fc:c5:
123                    d9:2c:de:03:32:88:fc:3a:84:06:48:92:10:7c:2d:
124                    b9:6a:25:fd:93:c0:51:75:bd:54:e7:ba:0b:bb:d8:
125                    b3:f5:60:55:9e:c7:06:70:fd:f3:f0:13:8e:a8:33:
126                    17:ff
127                Exponent: 65537 (0x10001)
128        X509v3 extensions:
129            X509v3 Subject Key Identifier:
130                5E:60:7B:07:9D:3D:65:C3:D3:DE:FB:C8:28:BE:34:22:10:C9:C4:A2
131            X509v3 Authority Key Identifier:
132                20:1D:40:05:AB:57:09:3B:3A:83:BE:19:65:15:EB:74:EF:0C:0D:D7
133            Authority Information Access:
134                CA Issuers - URI:http://url-for-aia/Root.cer
135            X509v3 CRL Distribution Points:
136                Full Name:
137                  URI:http://url-for-crl/Root.crl
138            X509v3 Key Usage: critical
139                Certificate Sign, CRL Sign
140            X509v3 Basic Constraints: critical
141                CA:TRUE
142    Signature Algorithm: sha256WithRSAEncryption
143    Signature Value:
144        12:3c:5d:46:a3:a4:11:4c:f6:d7:cc:92:61:b0:fd:ec:b6:12:
145        37:3f:52:43:39:5e:8b:ff:5f:a9:09:3e:3b:3a:e4:c9:ec:59:
146        00:8d:08:12:f9:b5:bd:8b:f4:41:dd:ff:d4:5c:5f:58:e7:e7:
147        8c:a9:96:60:f0:78:27:7c:ca:da:24:67:93:ff:72:58:50:6b:
148        8c:f2:11:da:8b:27:1b:68:9a:e0:9d:59:78:64:0d:d1:c4:c2:
149        72:5f:9f:ef:32:d6:65:10:38:62:54:97:d5:03:cf:c4:a5:34:
150        f6:d2:d0:dd:b4:fc:08:49:2d:43:55:7c:2d:43:a1:1c:30:65:
151        b2:30:f8:5a:0a:ce:e8:1e:ad:c0:41:2d:d3:a2:64:76:3b:e8:
152        82:3a:5b:93:f3:e8:84:de:7e:20:8d:05:06:2b:82:fd:6d:7c:
153        35:6a:04:05:c0:6c:1b:91:6d:db:b3:a7:a5:35:42:9f:af:69:
154        22:81:a9:f7:58:1c:fc:f1:31:54:26:f6:c5:b9:67:d0:da:eb:
155        01:bd:69:10:de:ea:d3:95:29:ab:f2:59:8d:62:b9:01:b2:32:
156        75:b7:47:3c:39:51:5d:be:46:48:da:19:f2:a8:61:8c:5f:cf:
157        9c:a9:c9:92:a8:4e:ef:5c:8a:3f:73:fd:38:91:c2:90:33:c6:
158        60:8e:67:22
159-----BEGIN CERTIFICATE-----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179-----END CERTIFICATE-----
180
181Certificate:
182    Data:
183        Version: 3 (0x2)
184        Serial Number:
185            54:e3:4d:7d:5e:fd:13:7b:9f:32:55:f3:77:55:e6:39:52:6f:ef:3f
186        Signature Algorithm: sha256WithRSAEncryption
187        Issuer: CN=Root
188        Validity
189            Not Before: Oct  5 12:00:00 2021 GMT
190            Not After : Oct  5 12:00:00 2022 GMT
191        Subject: CN=Root
192        Subject Public Key Info:
193            Public Key Algorithm: rsaEncryption
194                Public-Key: (2048 bit)
195                Modulus:
196                    00:9d:78:55:f3:0c:19:87:95:61:61:db:6c:07:71:
197                    bb:94:fd:a5:8d:cc:a7:b2:d6:0a:36:85:0a:07:1c:
198                    6b:e2:06:63:06:2b:ca:c6:ac:a8:fe:9b:02:f4:c0:
199                    bc:cf:12:cd:49:18:2c:90:35:55:16:a1:2b:49:77:
200                    0a:a3:e2:04:22:e8:2c:58:21:7c:f4:b6:bd:19:61:
201                    c6:50:4f:a8:0f:b1:e9:96:e7:fc:f6:1d:bb:ad:58:
202                    69:25:e9:db:6d:91:cc:61:2b:e5:93:9d:a9:37:c3:
203                    f3:29:74:58:cd:b9:85:48:b8:ca:49:14:7b:18:54:
204                    ee:c5:c7:18:98:48:91:f8:c2:c2:ec:15:67:27:bf:
205                    a6:1b:29:25:97:67:ce:07:25:13:56:1a:b0:42:c8:
206                    1d:1b:33:49:83:f4:da:67:52:79:22:3c:0d:9f:0c:
207                    e5:91:87:5f:fe:f6:43:70:bc:2f:68:c8:d6:37:8f:
208                    cf:97:7b:c9:d6:3f:9e:06:c6:b0:ea:20:b6:7f:b0:
209                    33:a0:0f:5b:05:2a:1a:02:b9:22:80:d8:1a:bb:dc:
210                    81:db:68:cb:d7:c1:99:6e:34:f7:f5:b2:72:94:94:
211                    c4:0e:04:8c:6d:b7:5f:6b:bb:c5:3f:6b:50:08:42:
212                    9a:cc:5f:41:96:ff:a2:fd:67:37:38:77:6f:d3:f4:
213                    2c:93
214                Exponent: 65537 (0x10001)
215        X509v3 extensions:
216            X509v3 Subject Key Identifier:
217                20:1D:40:05:AB:57:09:3B:3A:83:BE:19:65:15:EB:74:EF:0C:0D:D7
218            X509v3 Authority Key Identifier:
219                20:1D:40:05:AB:57:09:3B:3A:83:BE:19:65:15:EB:74:EF:0C:0D:D7
220            Authority Information Access:
221                CA Issuers - URI:http://url-for-aia/Root.cer
222            X509v3 CRL Distribution Points:
223                Full Name:
224                  URI:http://url-for-crl/Root.crl
225            X509v3 Key Usage: critical
226                Digital Signature, Key Encipherment
227            X509v3 Basic Constraints: critical
228                CA:TRUE
229    Signature Algorithm: sha256WithRSAEncryption
230    Signature Value:
231        24:3d:9b:fe:64:91:03:db:33:58:d3:74:2a:57:a5:82:48:28:
232        80:2e:57:82:09:ff:3d:6e:1a:f4:2d:c3:ee:90:9b:07:88:1d:
233        25:97:65:5b:ef:90:54:b4:61:86:4c:15:5e:1a:a5:ee:d4:41:
234        af:6f:0a:2b:4e:b0:75:bd:d8:2c:8e:20:e9:6f:7a:d1:1b:4a:
235        b6:2d:c6:60:be:cb:56:7d:f1:c3:06:03:cd:c4:23:25:1f:09:
236        f5:44:d1:7c:9e:48:29:b4:a6:a7:55:40:f7:11:05:dc:45:5c:
237        45:3f:2d:a6:23:54:e7:74:a8:d8:a3:81:23:00:77:64:9c:d3:
238        1e:f1:f1:33:b6:a5:21:8e:af:a9:14:f5:37:6a:e3:6f:82:9f:
239        65:6d:ab:de:0a:a5:29:62:d9:01:57:bf:69:48:c9:93:be:c2:
240        2d:4b:e6:ed:0e:1e:e5:d8:fe:9c:8b:fc:36:09:08:45:f8:31:
241        45:21:22:0b:62:c3:61:82:8f:65:bb:01:14:37:c2:b0:31:2f:
242        a2:40:b9:91:21:54:50:b6:24:39:6b:c1:a5:90:3f:b4:77:9c:
243        13:d7:0a:dc:3d:85:ef:77:fa:53:6b:fc:cf:8a:3e:45:db:5c:
244        8b:4b:6b:a5:d8:ee:0b:19:f2:c1:a3:02:e0:ba:36:43:c8:e8:
245        8b:c8:9a:2f
246-----BEGIN CERTIFICATE-----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266-----END CERTIFICATE-----
267