1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
|
[Created by: generate-chains.py]
Certificate chain where the target certificate uses a EC key and has the single key usage digitalSignature
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:41:46:e2:6f:47:ae:e6:ef:ca:22:1e:bc:61:9b:ed:27:e8:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Intermediate
Validity
Not Before: Oct 5 12:00:00 2021 GMT
Not After : Oct 5 12:00:00 2022 GMT
Subject: CN=Target
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (384 bit)
pub:
04:6a:64:c7:4b:c6:a0:87:b5:c2:07:13:ac:b8:0d:
37:95:90:e4:e2:82:95:31:6f:62:e5:1f:b0:59:30:
e9:2b:c6:e0:b4:83:9b:54:9d:61:56:d6:04:10:b7:
f3:b9:5e:31:e6:cf:af:40:0e:aa:7a:2a:d8:1c:ee:
5d:d1:5c:17:64:c7:37:f7:34:3d:42:6c:10:0c:ad:
e3:27:a9:ef:e6:02:48:66:0f:61:92:37:fe:26:53:
2c:9f:79:a7:29:7c:4c
ASN1 OID: secp384r1
NIST CURVE: P-384
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7D:41:4C:94:83:61:60:ED:FA:58:3C:92:33:58:E5:79:C2:07:A0
X509v3 Authority Key Identifier:
keyid:80:14:1E:04:C6:A0:C4:28:25:30:28:59:BD:40:1A:65:07:05:18:38
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication
Signature Algorithm: sha256WithRSAEncryption
78:ef:6f:37:e0:d7:e6:d3:89:ec:7a:7e:a1:82:26:e9:e5:3e:
58:cd:97:d8:c0:fc:95:a2:8f:77:9b:d5:e5:b0:a9:93:d7:48:
76:44:7a:ed:d1:b2:36:a7:31:92:6b:83:af:bc:2a:d7:34:f6:
e4:07:5c:25:22:9f:10:47:c1:f9:c4:d1:3e:c8:8a:9d:2d:bf:
2b:c0:1f:b2:a4:0e:34:2c:2d:cb:69:84:5c:e5:cd:92:8d:70:
aa:78:f0:25:b6:10:00:50:f9:0c:6f:f5:50:f8:ff:3e:f4:83:
b1:ac:76:4d:25:20:7c:93:4f:9c:0f:56:0b:96:ea:f1:bb:bd:
5d:e5:ab:e0:17:82:fe:7c:cf:92:b8:9a:de:11:12:53:47:49:
c4:6b:11:60:7b:26:06:ab:fc:76:6a:d7:64:92:d6:73:7e:bd:
4d:b9:75:e7:4f:e9:b0:2f:9f:b1:ac:fb:14:0e:64:bb:e8:57:
c0:e4:d9:db:d9:fb:38:6e:d9:be:f9:59:48:e7:7c:66:0d:57:
43:fb:0d:27:2c:f2:0b:59:84:8e:67:5f:43:d7:7c:56:64:c6:
26:58:ad:0e:33:c5:c5:41:e6:99:e5:3c:27:66:0a:e0:53:23:
32:e3:96:bc:92:e6:3d:76:ba:eb:8a:2a:c6:a1:b1:d0:d1:a7:
24:89:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:2c:98:11:ad:7d:7c:47:ab:8a:21:e3:43:a7:12:a0:c9:a9:32:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Root
Validity
Not Before: Oct 5 12:00:00 2021 GMT
Not After : Oct 5 12:00:00 2022 GMT
Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:23:0c:dc:31:55:3d:23:7a:a3:0f:5e:16:
9e:62:44:e4:28:bf:0b:b0:76:a3:5e:71:e7:a9:85:
52:1e:ae:3b:2b:21:0d:95:35:73:c2:c0:a0:78:13:
d3:fc:27:57:8a:98:de:83:e3:8f:a3:13:a5:20:a7:
a9:bf:c8:f5:02:1b:08:1a:2e:a5:04:7a:11:24:a1:
59:11:3d:c0:3b:57:35:62:cd:2a:41:cd:5c:15:35:
ac:c8:66:f8:a9:f2:d4:1c:0c:b4:dc:9d:7b:99:f9:
07:1b:c9:f0:03:6a:6c:71:d8:e6:cb:7a:ec:c7:a7:
b7:36:0b:f0:49:22:37:22:f4:77:f3:1a:a6:57:59:
0b:6c:6a:3b:b8:d1:47:df:48:ac:54:ee:82:1e:39:
14:dc:a6:9c:ab:33:b7:87:4f:3b:70:55:af:db:40:
e5:26:a9:0f:bc:59:8f:61:92:47:0a:34:73:de:fb:
25:fa:f1:bd:a4:03:35:93:5e:57:a3:a3:3f:13:e6:
09:68:c5:51:29:20:53:b8:5e:fa:8a:ce:e8:0a:ef:
9e:07:6e:55:f7:f6:c1:e7:12:9f:22:c1:72:b8:2a:
af:25:34:eb:08:28:36:73:8e:f6:80:70:21:16:8a:
81:2b:69:47:62:c5:ef:7e:dd:80:7c:09:4e:6d:57:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:1E:04:C6:A0:C4:28:25:30:28:59:BD:40:1A:65:07:05:18:38
X509v3 Authority Key Identifier:
keyid:71:50:52:35:92:69:F7:54:B1:8A:0C:C1:93:87:3E:84:E9:BE:5C:80
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Root.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
9b:a2:b5:c1:e1:98:7e:0f:1d:2a:0e:eb:b8:65:57:0f:4d:78:
85:7e:81:cb:0f:8c:04:5c:1a:40:6b:f1:00:71:61:59:0b:19:
3a:f0:97:a3:94:38:55:35:65:9b:b7:0c:a3:a0:99:eb:1d:f7:
68:ed:3c:21:90:99:80:69:52:00:71:3d:b1:1d:64:66:62:c3:
37:4e:f4:38:1e:c9:14:3f:50:66:2f:b9:f5:11:31:2c:87:30:
1e:f1:1b:14:c3:90:05:ba:bc:57:06:39:6a:e9:46:f1:67:6a:
a9:9b:16:04:b9:bd:93:bb:df:48:5a:77:9d:03:07:bb:8b:2e:
2d:88:4d:aa:de:d3:73:2e:d8:04:e8:25:8b:ea:9b:e0:c5:87:
5f:64:56:ac:b4:4e:74:ac:21:ac:ec:6a:a9:54:cd:77:24:2e:
bd:56:b6:70:26:a8:81:b6:1a:69:31:4a:53:5e:93:46:f4:28:
40:90:6b:65:44:94:3b:61:f8:5f:8c:b7:31:e7:46:a6:79:e0:
33:38:69:27:6b:b3:6e:5c:e4:f7:5a:2f:f9:bc:67:57:3e:e3:
dd:3a:99:5f:3a:ac:c7:5f:b7:5b:38:4b:ab:e1:1a:12:ec:e1:
95:0a:2d:54:a4:99:30:d0:93:78:27:5b:a4:d5:69:5b:c8:c1:
ef:ff:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:2c:98:11:ad:7d:7c:47:ab:8a:21:e3:43:a7:12:a0:c9:a9:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Root
Validity
Not Before: Oct 5 12:00:00 2021 GMT
Not After : Oct 5 12:00:00 2022 GMT
Subject: CN=Root
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:0b:0b:a2:8a:9c:9c:68:ad:24:f9:f9:e6:
95:ef:e4:71:1e:00:fb:ec:bf:b1:cb:6e:d6:40:30:
42:7a:38:87:9e:5b:cd:58:3e:b7:31:5c:8d:0d:84:
7a:be:ef:e6:98:ba:4e:c5:ae:2b:2f:66:b2:b2:3f:
e7:c0:a8:8b:75:60:61:2a:67:8a:d2:55:72:83:e2:
ff:de:76:d6:63:58:79:ba:91:c1:80:e1:06:1b:35:
9c:b3:e9:19:f8:c7:21:80:dd:9e:04:18:35:de:df:
00:80:21:09:06:3c:6c:9a:de:10:d1:fd:4d:2f:27:
5e:56:24:44:67:88:48:e4:25:52:cc:c7:17:3f:69:
1f:76:fc:b1:83:45:48:5d:37:da:80:3e:3d:7f:f6:
8d:ec:83:00:d6:2f:c4:41:5d:79:ae:ad:14:4c:24:
b3:5e:1e:fe:ed:e8:39:17:4a:4b:ca:eb:10:5d:6e:
af:38:58:b1:12:a5:69:bd:bd:63:dd:f5:21:71:2c:
36:37:72:51:3b:3a:de:8f:1e:a0:e2:6b:45:da:02:
ad:7e:04:b7:d3:c8:64:34:c6:f4:08:a0:e5:c9:02:
1b:6f:42:22:be:d3:8b:7b:63:6e:39:c4:97:17:c6:
9a:ba:9e:26:9b:e1:65:a6:4d:4a:93:5e:b2:4e:18:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:50:52:35:92:69:F7:54:B1:8A:0C:C1:93:87:3E:84:E9:BE:5C:80
X509v3 Authority Key Identifier:
keyid:71:50:52:35:92:69:F7:54:B1:8A:0C:C1:93:87:3E:84:E9:BE:5C:80
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Root.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
6f:c2:f5:0d:cc:f7:a8:c4:03:50:ff:33:02:72:38:ac:72:19:
da:fe:1e:d0:20:79:44:d9:ce:cf:22:b1:09:78:16:5d:12:12:
aa:bd:9b:27:08:6f:18:08:08:7d:d2:06:52:a1:ae:19:35:61:
be:27:8f:20:e4:59:d5:f3:4e:56:55:77:28:2b:f8:a4:9c:8d:
75:d8:4f:99:92:75:0f:a1:79:c5:47:6b:32:c7:86:a2:ce:17:
55:ab:78:b0:ac:b4:15:04:19:0f:55:f3:09:ca:48:84:bf:32:
01:58:04:33:75:84:57:8e:67:32:53:a7:09:1b:13:c0:3a:9f:
65:2e:e2:82:26:1a:9c:47:c2:4f:bb:b9:c4:d2:b9:b3:cc:86:
bc:25:03:3c:6a:66:e2:82:58:03:fb:3e:dd:f5:a3:cc:d5:b9:
1f:53:d5:63:6a:2c:a2:36:0a:8a:a8:15:bf:63:50:ad:db:98:
e8:40:97:24:2c:80:27:35:e1:53:27:da:26:86:72:67:ea:b7:
a1:30:5a:67:3f:ff:2c:3e:a4:7f:8a:6e:ff:e2:41:f2:02:34:
8e:12:59:c0:c6:80:3b:78:d9:fd:1a:b8:e1:b5:b7:7f:c8:63:
27:30:4d:00:7a:96:f1:4d:6e:a0:e9:da:9f:11:a2:b4:69:2f:
8d:d4:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
|
