• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1[Created by: ./generate-chains.py]
2
3Certificate chain with inhibitAnyPolicy on the root, and an intermediate
4that uses anyPolicy. Should fail if the policyConstraints on the root are
5enforced.
6
7Certificate:
8    Data:
9        Version: 3 (0x2)
10        Serial Number:
11            5a:d9:1e:25:c2:df:a8:d3:08:03:19:0f:58:d0:d7:b7:19:da:11:a1
12        Signature Algorithm: sha256WithRSAEncryption
13        Issuer: CN=Intermediate
14        Validity
15            Not Before: Oct  5 12:00:00 2021 GMT
16            Not After : Oct  5 12:00:00 2022 GMT
17        Subject: CN=Target
18        Subject Public Key Info:
19            Public Key Algorithm: rsaEncryption
20                Public-Key: (2048 bit)
21                Modulus:
22                    00:b1:df:79:78:69:06:41:4f:b2:c1:6a:83:99:da:
23                    2b:0b:0a:e3:a1:99:04:7f:24:50:ce:1a:97:b1:b2:
24                    42:cc:32:80:1b:34:f6:8e:6a:06:a0:46:ab:fb:0f:
25                    1b:a9:b7:01:5a:c3:25:82:6c:00:cd:1d:13:40:a4:
26                    70:88:96:e0:94:79:ed:2a:47:a9:d2:f3:7e:ac:1d:
27                    15:28:d8:88:32:9b:7a:2c:10:09:41:3a:8b:ef:f9:
28                    96:36:cd:27:11:02:f6:76:18:95:fe:4d:d7:e5:35:
29                    41:40:1f:05:46:c8:63:a1:52:45:43:30:54:83:9e:
30                    7c:eb:48:a1:66:ca:4a:21:69:25:d8:29:12:39:f5:
31                    4b:14:97:3b:42:f2:c7:7e:38:cd:2c:57:56:b9:92:
32                    ea:f3:15:c3:33:7f:fe:92:41:a6:d3:b5:72:f6:87:
33                    31:66:bf:a2:5b:0b:66:ed:c8:f0:fe:b7:34:2c:dc:
34                    09:16:d2:54:c1:b6:d1:1c:6e:ff:55:28:29:44:bd:
35                    b7:9f:40:ea:87:88:23:51:a4:23:25:61:25:b6:b9:
36                    db:39:64:03:12:ba:17:86:f5:02:56:07:94:ff:f2:
37                    1c:d0:03:f6:60:19:5d:56:48:c1:0e:a7:2b:79:9b:
38                    8f:f4:0d:d2:eb:44:bb:85:18:64:f6:e4:46:3b:9c:
39                    68:b5
40                Exponent: 65537 (0x10001)
41        X509v3 extensions:
42            X509v3 Subject Key Identifier:
43                80:FA:9C:59:69:9E:9A:82:47:3A:65:24:E7:00:9E:DC:54:53:54:5C
44            X509v3 Authority Key Identifier:
45                48:8C:E1:C6:32:0E:AB:6E:B3:7B:4B:CB:28:2A:AF:69:BE:BC:96:E0
46            Authority Information Access:
47                CA Issuers - URI:http://url-for-aia/Intermediate.cer
48            X509v3 CRL Distribution Points:
49                Full Name:
50                  URI:http://url-for-crl/Intermediate.crl
51            X509v3 Key Usage: critical
52                Digital Signature, Key Encipherment
53            X509v3 Extended Key Usage:
54                TLS Web Server Authentication, TLS Web Client Authentication
55            X509v3 Certificate Policies: critical
56                Policy: 1.2.3.5
57    Signature Algorithm: sha256WithRSAEncryption
58    Signature Value:
59        05:38:45:d0:f2:65:e1:0a:b8:35:e2:d0:5d:b0:e4:53:20:aa:
60        0f:7e:2b:4c:74:b1:49:a3:04:88:89:58:1b:ac:f8:e7:03:ce:
61        d9:82:82:67:f2:6f:12:53:5e:7b:e4:d6:6c:a9:3d:c9:c4:12:
62        18:d3:8b:29:ea:c7:9b:66:39:39:6e:dc:25:de:a4:f4:1d:34:
63        d3:50:50:7d:ff:7d:4a:5c:85:3f:30:d1:dd:14:9f:42:42:b5:
64        4d:1a:47:66:f6:87:c6:fa:43:91:f0:3c:77:b0:79:71:94:06:
65        14:da:a8:9e:02:6c:d2:d0:2b:af:72:d3:15:20:40:ca:2c:7a:
66        8f:6e:58:d6:10:e5:fa:51:d4:80:00:eb:9b:b5:9d:43:d3:ff:
67        78:7a:45:da:4f:e5:6a:80:87:e4:85:18:c2:8e:f2:cb:0f:ba:
68        fe:e5:95:b2:d6:bc:a2:bc:5c:66:b6:59:16:44:bd:da:d3:52:
69        24:ea:31:cf:e7:2a:65:98:95:df:19:23:70:b4:45:ae:fb:6c:
70        3a:f7:ce:ad:fd:76:97:89:59:b0:1e:e0:d5:08:0a:f4:0d:47:
71        b9:d8:eb:86:12:41:c8:25:7c:0d:ad:a9:59:c9:de:79:e7:4e:
72        ab:ce:18:91:a3:34:07:6f:09:a6:ff:fd:aa:43:15:4f:0d:1a:
73        c1:8d:ff:2a
74-----BEGIN CERTIFICATE-----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95-----END CERTIFICATE-----
96
97Certificate:
98    Data:
99        Version: 3 (0x2)
100        Serial Number:
101            27:31:77:a6:0a:3a:73:f3:ea:47:c4:6a:4b:cb:b8:a6:ba:0c:4b:fd
102        Signature Algorithm: sha256WithRSAEncryption
103        Issuer: CN=Root
104        Validity
105            Not Before: Oct  5 12:00:00 2021 GMT
106            Not After : Oct  5 12:00:00 2022 GMT
107        Subject: CN=Intermediate
108        Subject Public Key Info:
109            Public Key Algorithm: rsaEncryption
110                Public-Key: (2048 bit)
111                Modulus:
112                    00:c2:1d:00:3e:0c:67:5d:f7:ff:70:1e:a1:33:e9:
113                    b3:28:7a:3c:3f:5e:ab:a7:8d:b5:91:c2:02:8e:2c:
114                    b1:93:90:43:4e:2a:d4:1b:80:bd:1c:8b:4c:5d:74:
115                    16:8a:fa:6f:88:2e:87:39:e0:11:c4:7c:4b:76:fd:
116                    87:f0:1f:38:0e:5c:6d:33:2d:16:00:3d:15:dc:14:
117                    fb:ee:5f:bf:49:41:3c:ec:e7:43:74:1c:71:fb:bc:
118                    6b:ae:54:5f:5e:90:fb:5b:b0:93:8c:72:79:6a:d2:
119                    8e:c6:7b:1f:ac:d9:c1:d7:30:ee:d2:b1:39:cb:7d:
120                    44:96:9d:eb:31:d1:28:74:f8:b5:80:e3:62:86:73:
121                    28:02:62:83:12:32:e9:42:6a:ed:75:5b:ec:ba:7d:
122                    30:62:74:a0:2c:1e:1e:9b:10:85:22:1a:af:bf:f0:
123                    0c:4d:9b:bd:1e:fb:fd:a5:dc:e9:98:fb:35:61:4a:
124                    ca:cb:6c:e0:4d:10:f4:fe:b8:17:ad:30:91:30:db:
125                    9a:53:6b:2f:1c:d9:ec:f2:28:d7:42:b9:b5:02:0d:
126                    5f:52:ed:9f:16:b6:14:7b:cf:28:d7:f7:5e:02:38:
127                    df:0e:bc:60:40:6a:6f:65:64:a6:4a:ae:fd:d0:b7:
128                    aa:5f:40:c6:e1:17:c1:dc:9a:25:1f:4e:56:90:9e:
129                    ab:63
130                Exponent: 65537 (0x10001)
131        X509v3 extensions:
132            X509v3 Subject Key Identifier:
133                48:8C:E1:C6:32:0E:AB:6E:B3:7B:4B:CB:28:2A:AF:69:BE:BC:96:E0
134            X509v3 Authority Key Identifier:
135                99:59:00:A4:21:DA:73:35:FA:D0:46:7C:5E:3A:64:E7:C1:CA:C4:71
136            Authority Information Access:
137                CA Issuers - URI:http://url-for-aia/Root.cer
138            X509v3 CRL Distribution Points:
139                Full Name:
140                  URI:http://url-for-crl/Root.crl
141            X509v3 Key Usage: critical
142                Certificate Sign, CRL Sign
143            X509v3 Basic Constraints: critical
144                CA:TRUE
145            X509v3 Policy Constraints: critical
146                Require Explicit Policy:0
147            X509v3 Certificate Policies: critical
148                Policy: X509v3 Any Policy
149    Signature Algorithm: sha256WithRSAEncryption
150    Signature Value:
151        88:09:58:2d:a5:73:dc:dd:1b:fd:8a:e2:31:38:5e:9a:b9:f8:
152        5d:68:db:00:a5:48:92:8e:28:6e:51:f0:9a:7b:ad:ac:d3:05:
153        b2:30:5c:45:e0:5d:9e:e5:47:c5:96:d0:5e:87:66:ee:8c:96:
154        4b:ab:cb:71:63:41:83:93:30:86:e9:a2:4b:27:fa:7d:0f:28:
155        52:9a:a1:ad:82:79:ca:c7:b6:c0:26:9c:bb:9e:b7:17:98:11:
156        9d:d0:6b:e3:de:0c:88:08:0d:17:68:77:4a:c9:62:0f:f2:c0:
157        76:04:40:d6:8e:c1:14:39:50:be:63:09:cd:a7:38:06:8e:aa:
158        3a:ee:9c:39:1f:bb:1d:fc:c2:09:e9:69:d3:91:b4:58:8f:e1:
159        d6:b3:fa:34:fa:b4:ef:45:e8:c5:fc:8b:10:57:a9:74:fc:6e:
160        3f:37:2f:37:24:c4:e1:19:84:71:f1:27:aa:cf:f0:1f:37:33:
161        20:f9:11:14:14:ad:21:f7:8b:59:51:af:a2:16:86:61:cc:df:
162        a2:5d:d0:1d:42:4a:6f:44:b8:78:ec:d7:98:2f:55:f7:78:42:
163        ec:21:0c:ba:ee:36:5f:d7:e5:d6:91:e0:63:cc:d2:ea:31:bd:
164        ce:09:ec:44:be:d9:0b:ed:d0:43:68:24:02:27:88:0a:4d:62:
165        f1:c0:2c:b5
166-----BEGIN CERTIFICATE-----
167MIIDpzCCAo+gAwIBAgIUJzF3pgo6c/PqR8RqS8u4proMS/0wDQYJKoZIhvcNAQEL
168BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw
169MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
170ggEPADCCAQoCggEBAMIdAD4MZ133/3AeoTPpsyh6PD9eq6eNtZHCAo4ssZOQQ04q
1711BuAvRyLTF10For6b4guhzngEcR8S3b9h/AfOA5cbTMtFgA9FdwU++5fv0lBPOzn
172Q3Qccfu8a65UX16Q+1uwk4xyeWrSjsZ7H6zZwdcw7tKxOct9RJad6zHRKHT4tYDj
173YoZzKAJigxIy6UJq7XVb7Lp9MGJ0oCweHpsQhSIar7/wDE2bvR77/aXc6Zj7NWFK
174ysts4E0Q9P64F60wkTDbmlNrLxzZ7PIo10K5tQINX1Ltnxa2FHvPKNf3XgI43w68
175YEBqb2Vkpkqu/dC3ql9AxuEXwdyaJR9OVpCeq2MCAwEAAaOB8jCB7zAdBgNVHQ4E
176FgQUSIzhxjIOq26ze0vLKCqvab68luAwHwYDVR0jBBgwFoAUmVkApCHaczX60EZ8
177Xjpk58HKxHEwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
178LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
179b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
180MA8GA1UdJAEB/wQFMAOAAQAwFAYDVR0gAQH/BAowCDAGBgRVHSAAMA0GCSqGSIb3
181DQEBCwUAA4IBAQCICVgtpXPc3Rv9iuIxOF6aufhdaNsApUiSjihuUfCae62s0wWy
182MFxF4F2e5UfFltBeh2bujJZLq8txY0GDkzCG6aJLJ/p9DyhSmqGtgnnKx7bAJpy7
183nrcXmBGd0Gvj3gyICA0XaHdKyWIP8sB2BEDWjsEUOVC+YwnNpzgGjqo67pw5H7sd
184/MIJ6WnTkbRYj+HWs/o0+rTvRejF/IsQV6l0/G4/Ny83JMThGYRx8Seqz/AfNzMg
185+REUFK0h94tZUa+iFoZhzN+iXdAdQkpvRLh47NeYL1X3eELsIQy67jZf1+XWkeBj
186zNLqMb3OCexEvtkL7dBDaCQCJ4gKTWLxwCy1
187-----END CERTIFICATE-----
188
189Certificate:
190    Data:
191        Version: 3 (0x2)
192        Serial Number:
193            27:31:77:a6:0a:3a:73:f3:ea:47:c4:6a:4b:cb:b8:a6:ba:0c:4b:fc
194        Signature Algorithm: sha256WithRSAEncryption
195        Issuer: CN=Root
196        Validity
197            Not Before: Oct  5 12:00:00 2021 GMT
198            Not After : Oct  5 12:00:00 2022 GMT
199        Subject: CN=Root
200        Subject Public Key Info:
201            Public Key Algorithm: rsaEncryption
202                Public-Key: (2048 bit)
203                Modulus:
204                    00:98:98:3f:4c:87:cb:65:52:40:92:de:70:8f:fe:
205                    49:25:11:9f:7b:10:6b:64:a6:04:81:89:5d:df:f9:
206                    01:1f:a8:f7:5a:a8:bf:36:f8:0f:37:bc:f6:8b:03:
207                    90:f9:cf:09:b4:9b:8b:7a:ee:1d:80:ad:fc:29:92:
208                    d9:7e:51:f6:18:43:df:26:cb:1a:e2:43:d7:c4:bd:
209                    bb:f8:95:7a:e4:54:3d:9c:7e:c3:31:d6:20:d5:13:
210                    84:ee:9c:a3:83:1d:70:27:e0:48:aa:62:df:81:1a:
211                    ef:6c:5f:f6:69:7a:3a:e6:eb:86:22:37:3e:73:ee:
212                    cf:b3:5f:7f:c5:fe:64:61:35:79:04:0f:3b:48:83:
213                    c0:99:65:39:41:8f:b7:b4:6a:aa:ee:c9:e8:84:36:
214                    4e:5d:77:37:dd:0f:ff:20:5e:e2:a0:d8:45:48:36:
215                    1b:c5:89:40:71:0f:83:e8:de:90:7d:22:e1:e5:64:
216                    9a:35:77:31:8b:e1:3e:95:25:4a:03:d4:b4:30:ce:
217                    b4:06:29:d7:8f:3a:03:2a:f0:fa:9a:9b:7d:45:b3:
218                    7d:81:4c:c8:ae:45:64:de:28:6c:d5:53:11:2d:03:
219                    37:35:45:88:7f:51:51:e3:36:c3:10:3e:71:d0:e6:
220                    78:5d:87:ae:39:2a:dd:2f:29:13:18:af:00:5c:71:
221                    1b:6b
222                Exponent: 65537 (0x10001)
223        X509v3 extensions:
224            X509v3 Subject Key Identifier:
225                99:59:00:A4:21:DA:73:35:FA:D0:46:7C:5E:3A:64:E7:C1:CA:C4:71
226            X509v3 Authority Key Identifier:
227                99:59:00:A4:21:DA:73:35:FA:D0:46:7C:5E:3A:64:E7:C1:CA:C4:71
228            Authority Information Access:
229                CA Issuers - URI:http://url-for-aia/Root.cer
230            X509v3 CRL Distribution Points:
231                Full Name:
232                  URI:http://url-for-crl/Root.crl
233            X509v3 Key Usage: critical
234                Certificate Sign, CRL Sign
235            X509v3 Basic Constraints: critical
236                CA:TRUE
237            X509v3 Inhibit Any Policy: critical
238                0
239    Signature Algorithm: sha256WithRSAEncryption
240    Signature Value:
241        84:91:b6:14:f8:76:93:b3:61:fc:65:c1:09:72:81:f9:a8:d4:
242        cb:b2:45:f6:15:a5:7b:6c:e0:c0:a6:b4:23:05:ed:c9:a0:ab:
243        1a:bd:e4:1e:a0:2d:b9:5f:6a:64:8c:0c:00:be:87:85:55:ae:
244        a9:55:db:03:db:f9:76:0f:f7:44:a9:3a:f0:af:82:78:ea:aa:
245        97:63:e3:99:d0:8e:36:29:4b:09:8d:85:75:9e:85:10:47:37:
246        48:31:6e:7c:7c:3d:03:17:b5:52:f3:90:05:d9:93:81:0d:72:
247        d8:5f:6f:64:f5:3e:cc:15:a2:e2:18:15:4a:b4:6a:7a:ff:d5:
248        d6:9b:e2:ad:87:74:36:ec:2c:54:c7:79:86:14:a0:f0:26:e4:
249        86:ae:62:45:6c:0f:69:e2:d9:05:9e:55:60:8d:ed:f8:de:6c:
250        4d:ac:23:a2:94:2b:95:a3:e8:7c:c1:40:5e:c5:63:b4:4d:53:
251        20:10:98:09:98:dd:ad:64:fe:dc:95:a0:c7:ca:3d:7a:f8:96:
252        45:f1:96:07:ba:4f:13:22:7d:45:5f:89:1c:3f:e6:6c:78:67:
253        54:69:6f:5f:c7:d9:d4:bb:34:27:6f:f4:e3:26:55:e6:79:14:
254        76:64:c8:7e:e8:9d:de:7f:6a:85:a3:8f:d0:88:6c:ab:3f:5c:
255        55:4b:88:38
256-----BEGIN CERTIFICATE-----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==
276-----END CERTIFICATE-----
277