1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
|
[Created by: generate-chains.py]
Certificate chain where the root certificate lacks a basic constraints
extension.
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:30:93:e0:af:42:20:f7:92:d9:8d:63:e4:7e:ee:e3:df:49:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Intermediate
Validity
Not Before: Oct 5 12:00:00 2021 GMT
Not After : Oct 5 12:00:00 2022 GMT
Subject: CN=Target
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:39:1a:67:64:64:af:b8:19:4f:41:9e:78:
a6:a8:fc:a4:43:70:a7:7c:23:f9:27:a0:7f:98:37:
e7:ee:fe:be:2d:82:65:9e:46:15:1e:fc:3d:70:36:
96:47:69:6a:c0:51:c5:f1:59:2a:d7:1e:3f:b3:2e:
df:ac:af:89:16:45:ed:71:ae:38:04:4d:5e:e7:b8:
d9:a1:45:14:a5:f9:a4:f7:e3:e7:e4:e9:ac:7e:82:
95:e6:5c:8e:ac:da:14:d5:2f:04:ed:48:f7:56:4b:
5a:98:72:0f:07:66:ca:17:a5:0e:b7:05:64:3b:6a:
97:ad:b1:7e:4d:b3:8c:d4:2b:23:3d:88:bb:c9:80:
04:d9:5b:1a:36:37:ab:d2:c7:06:a8:81:6f:62:b7:
c1:74:74:8e:ee:f6:6b:c0:15:28:44:50:85:dc:8d:
3b:e7:0b:82:9d:bd:db:20:69:1a:55:68:48:0e:84:
2a:25:26:ca:01:ad:16:7f:3c:30:d4:5b:47:9a:86:
fe:fc:90:b5:d0:bb:d3:ee:af:9a:80:3c:4c:da:46:
c8:db:36:68:89:51:fe:76:78:cf:22:eb:ce:62:d4:
2c:2b:c7:7c:24:48:64:ca:9b:91:b2:90:fc:c9:29:
65:70:83:60:05:1a:32:70:ca:12:f3:70:52:dd:3e:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:6D:F3:B3:9E:A3:B9:81:22:1C:C5:19:24:06:BC:D9:D6:92:ED
X509v3 Authority Key Identifier:
keyid:C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
b4:37:d0:b2:e6:04:26:d5:cf:ea:f2:91:5c:aa:03:17:35:07:
21:bd:67:52:60:9c:c2:9e:79:6e:ef:5f:a2:05:74:6c:b4:75:
7e:f1:3b:0f:2e:62:85:b2:33:3b:23:68:7c:67:e1:b6:e1:c4:
b0:af:50:29:a7:73:fc:aa:b9:e0:f2:fb:7e:f3:f5:27:07:e6:
26:c0:b8:51:06:7c:42:9d:59:b5:b3:2f:ae:ea:f4:e5:0b:9c:
63:00:34:2c:46:cd:df:22:55:21:3b:78:23:b0:8e:0d:69:8d:
66:92:16:90:83:fd:ad:46:60:7f:5f:87:61:7f:2f:0f:c2:8c:
0f:7a:dc:b4:6e:cc:a7:80:88:3b:49:17:ef:fb:95:48:9b:80:
b6:f4:32:95:e0:e8:e6:1a:97:2f:fe:c6:a7:ad:02:b8:ef:a7:
25:42:cd:ea:bd:c1:64:6b:b0:89:6c:bb:fb:e6:9c:43:b8:51:
03:0c:ed:03:01:44:5b:ef:ad:8e:59:aa:29:cd:2d:c4:c8:1f:
55:66:c6:26:d8:6c:2d:07:ca:91:10:2e:04:54:5d:e1:ee:87:
1b:22:ff:2a:b9:7a:e2:be:be:d7:51:d2:7f:3e:ee:e0:80:c8:
58:fc:f1:7e:66:ca:6f:24:1a:bc:c0:98:a0:75:88:27:2e:28:
59:30:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:55:78:34:50:50:34:15:fe:10:58:e3:0b:cb:6b:c3:c6:56:3d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Root
Validity
Not Before: Oct 5 12:00:00 2021 GMT
Not After : Oct 5 12:00:00 2022 GMT
Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:c0:76:c5:4c:d0:8e:b3:87:07:91:66:aa:
f1:ae:93:8f:a2:83:2d:d5:05:91:b8:52:f6:2d:a5:
ff:fd:95:ee:85:0f:85:c3:eb:d7:8e:f7:6f:2a:c0:
15:de:ae:1e:62:62:12:64:c3:f7:c1:0f:05:a4:0f:
b7:33:69:92:66:57:93:4f:4e:04:43:bb:23:bb:c3:
c6:29:0b:42:68:1f:26:81:77:2d:91:f6:62:b8:e3:
9a:2c:78:2d:7c:1f:3a:f5:ce:f2:c2:75:39:5a:b7:
c2:23:f5:f5:ee:7e:a5:7a:45:c4:d4:1e:12:c8:a6:
40:44:64:07:ff:33:a8:ce:41:df:77:c4:01:f5:c5:
41:6b:4e:a0:ee:9d:36:63:5a:b0:e8:38:bb:bd:fb:
a5:7f:6e:5c:6d:c6:62:dd:05:2f:90:d4:fb:5b:18:
71:84:57:e2:c9:d3:cc:c8:36:5f:d1:78:20:4c:68:
83:1f:df:64:a3:11:9f:e8:bd:d4:bb:8e:04:63:0d:
3d:6d:a9:43:30:5d:f0:ca:e3:62:8f:11:9e:8b:8f:
de:9a:6e:6d:03:e5:8c:0f:6f:00:6e:1a:72:2c:13:
e0:a1:78:93:ef:2c:6d:2c:0a:8a:5c:02:65:50:36:
fa:da:07:ba:36:b9:21:eb:01:14:97:ab:19:60:be:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70
X509v3 Authority Key Identifier:
keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Root.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
0a:11:c3:21:b5:94:3d:5f:ae:33:72:18:c4:74:c0:cb:15:b0:
22:74:39:5d:76:7b:77:a9:91:0d:02:7c:1b:0c:fa:d1:dc:94:
f2:d3:38:01:f3:64:42:53:5b:0e:a7:a3:7e:8d:8d:0b:6f:1a:
93:ab:17:3a:02:43:23:c6:c2:8c:40:32:fe:e9:e4:42:31:c2:
4f:96:87:da:54:70:f0:85:31:7c:a3:a2:96:af:c6:a3:0a:26:
68:3c:db:1b:dc:be:58:c6:c2:ef:62:a1:87:3e:01:4a:3c:c0:
aa:fa:f5:30:d7:7d:35:3c:3b:f0:ef:7b:e9:f8:67:5a:f7:75:
5f:0f:ae:63:a6:61:98:5a:21:8a:36:ca:59:40:75:60:4b:6b:
cd:0e:99:d7:2f:fc:85:1d:81:4c:50:e0:66:1b:fe:8f:83:e4:
bf:00:07:48:3c:ea:16:c4:43:8d:53:3a:44:bf:64:99:58:1e:
72:38:f9:ec:63:ad:4e:e3:5a:7b:b3:22:0a:54:d8:49:41:e7:
4f:f6:ad:df:3b:f2:c2:3d:d5:e1:62:30:4a:61:30:09:ea:2a:
66:98:1e:a7:51:e1:cc:08:c2:32:5e:c7:77:2c:93:c0:6b:77:
89:99:e3:f5:89:bb:62:6b:3e:96:25:ac:a1:79:2e:82:9b:e3:
1b:4b:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:55:78:34:50:50:34:15:fe:10:58:e3:0b:cb:6b:c3:c6:56:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Root
Validity
Not Before: Oct 5 12:00:00 2021 GMT
Not After : Oct 5 12:00:00 2022 GMT
Subject: CN=Root
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:0c:2e:e1:46:5f:9d:dc:3a:16:51:56:2f:
4c:5c:f7:92:93:2a:a1:bf:d1:bd:15:cd:8a:f8:e3:
8a:a4:41:fa:9f:de:85:84:ff:cd:5b:7d:13:33:ca:
b8:8b:34:f6:85:73:a5:23:ef:ba:61:ca:18:9f:08:
ea:39:17:18:69:dd:3a:21:57:a5:6d:b2:63:a7:42:
ba:b6:8a:4e:e2:1f:ab:88:4f:ae:ca:1a:66:b8:79:
d2:94:73:b9:46:c4:be:89:31:53:c1:d8:b4:cc:1c:
6b:d9:0c:a3:5a:e3:a5:20:7c:a0:bd:d4:14:7a:14:
29:0c:b7:40:da:f5:fc:af:c3:91:65:78:b3:41:ee:
f5:9f:0b:22:0b:c1:f5:12:94:89:25:13:1b:dd:a3:
a3:44:7a:57:7c:40:17:e0:66:33:a9:27:7c:2e:6f:
9f:38:d3:fa:4d:67:80:39:33:36:e5:41:fd:ac:6b:
37:d0:84:75:e2:84:93:3b:8d:ce:8c:22:98:4e:05:
64:7f:df:fb:96:85:c5:ea:0e:11:24:f9:84:bd:17:
ce:15:30:86:ad:c6:de:2c:48:84:d0:45:d4:0b:1f:
13:e9:a4:ca:e7:69:c0:24:a1:23:5e:6b:4e:76:b4:
bd:d7:0d:96:94:b6:d9:8e:25:9b:1e:c9:a2:00:10:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
X509v3 Authority Key Identifier:
keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Root.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Signature Algorithm: sha256WithRSAEncryption
a0:63:51:25:66:b7:9a:52:c8:f3:a5:18:a4:76:b5:02:e8:a1:
12:0e:f7:e0:92:32:6f:85:2a:d3:95:ae:c1:5d:11:11:53:c2:
bb:85:55:a5:5c:71:f5:65:c6:f2:88:8a:a5:10:66:b6:bb:36:
d6:d5:c3:c1:87:be:bc:5f:c6:47:87:63:de:ef:6a:d6:46:db:
ca:b6:09:17:07:39:76:6d:3a:ef:69:37:05:0d:c8:24:51:1f:
24:a7:c0:bc:44:a4:a3:57:28:f3:4f:ca:52:3b:1c:1a:3c:18:
07:17:26:8c:ed:22:d0:0a:41:05:ae:cc:2c:b9:24:80:d5:22:
1e:c0:eb:a7:48:fd:3a:c3:ee:89:95:6d:25:0b:45:86:70:11:
69:da:11:38:c9:7a:3a:c1:b0:a7:f3:df:15:85:d1:66:ae:8f:
2d:52:38:2d:db:32:c5:12:ba:e2:fd:b1:77:8a:ef:1b:8d:cd:
99:85:33:e3:82:bb:42:f2:f7:92:56:4d:5d:4e:8d:82:54:23:
e8:90:3b:32:d2:9e:24:a7:4b:58:86:ed:fe:bf:b5:8d:e5:a5:
c3:af:d8:fa:92:df:bb:ae:8b:00:8c:64:e0:6c:53:5e:d9:14:
bd:30:78:40:80:f4:58:cd:b1:92:50:c9:87:59:91:39:18:a9:
ea:18:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
|
