NOT FOR REVIEW....

net/data/verify_certificate_chain_unittest/target-and-intermediary.pem

Index: net/data/verify_certificate_chain_unittest/target-and-intermediary.pem
diff --git a/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem b/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem
new file mode 100644
index 0000000000000000000000000000000000000000..0b109cf8ac650f5a64ff22d822df7fcda105cba2
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem
@@ -0,0 +1,280 @@
+[Created by: generate-target-and-intermediary.py]
+
+Simple certificate chain with 1 intermediary and a trusted
+root.
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e0:a5:c8:74:b6:df:db:bd:36:8c:cd:0c:63:bb:
+                    5d:ef:31:c1:55:f3:d1:5e:ba:b7:97:01:6e:07:24:
+                    15:d7:db:67:53:d3:b4:7b:dc:43:44:88:84:19:bc:
+                    f3:4a:63:f3:47:b6:aa:83:3e:96:89:be:ca:f1:e0:
+                    5f:01:4d:c3:cd:76:11:12:3f:5b:21:16:45:94:b4:
+                    0e:9b:13:94:f2:88:31:7f:0c:a7:e2:23:e9:f7:09:
+                    8a:d3:de:48:90:db:cd:c2:6e:86:6f:f6:8b:ee:65:
+                    4e:ff:8c:3f:f7:0a:71:66:d7:78:43:b1:d5:15:fa:
+                    af:07:04:dc:c5:56:a9:e3:ba:59:0c:20:6d:2a:a7:
+                    ab:26:28:34:c6:c4:ba:18:0d:ca:4b:86:e4:69:d0:
+                    5a:f9:ea:ad:dc:ca:43:29:a3:31:ad:e0:01:b6:f9:
+                    50:6b:d5:61:c9:68:30:3f:47:6f:12:9c:91:8c:26:
+                    42:8f:bb:81:43:4d:c6:4e:48:02:b7:cd:93:12:61:
+                    90:6a:81:b4:b2:56:a5:52:b3:b6:21:29:0f:02:c8:
+                    79:da:0c:a1:bb:fe:c1:a4:eb:33:95:bb:85:32:e0:
+                    19:3c:2a:72:45:18:5f:3b:a5:77:51:91:47:d2:d1:
+                    f6:40:6a:c7:e9:02:73:b6:20:21:44:3e:9a:5c:79:
+                    c0:b1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                51:5A:4D:C4:CF:BB:FC:F4:3E:2E:4F:4E:7B:2B:8A:CF:0F:82:8C:4F
+            X509v3 Authority Key Identifier: 
+                keyid:CD:66:CE:60:9F:76:C4:3B:CA:BB:1D:65:8B:55:FF:8C:4B:09:18:7B
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         9e:56:77:37:a5:d3:15:2a:4b:d0:c7:09:10:23:61:94:b6:01:
+         50:9e:74:f1:fc:34:9e:6e:7e:4c:27:01:91:3a:f7:62:2b:ce:
+         63:d0:48:5a:33:d3:03:42:28:31:85:47:25:a2:dc:35:cc:5b:
+         40:f8:18:85:7f:79:09:81:40:c2:c8:18:97:71:86:d2:58:ae:
+         f9:cd:c6:61:8b:df:18:f8:a8:92:cc:cb:95:17:e8:80:ec:91:
+         4c:45:14:bf:81:5f:92:2c:31:f3:b7:62:ae:d8:a4:77:fb:a5:
+         73:f9:e7:34:8e:43:4e:16:5d:18:3b:03:06:b5:93:77:71:e5:
+         95:8e:2c:74:10:1d:5b:3b:3f:87:97:4a:12:e0:7f:b9:c4:a9:
+         e6:70:d0:c5:7d:5d:b6:a0:81:9a:39:0f:98:9c:c8:87:77:3a:
+         b2:d7:27:8f:e5:fd:ec:bf:aa:09:06:83:f9:26:07:96:21:e1:
+         f7:19:b8:01:b9:a1:d0:f6:88:66:9f:8b:4d:07:09:45:5f:e9:
+         95:cc:62:20:9f:b7:ed:d5:6c:51:11:92:2f:4a:df:d0:29:da:
+         bb:7c:f2:8f:b5:25:9c:08:bd:5b:10:6c:a9:94:38:32:ed:7a:
+         3b:fb:ce:d4:7a:e5:39:88:6b:1c:35:03:df:32:40:e9:86:2e:
+         1a:d5:64:bb
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b0:36:c6:b1:ce:64:b0:e0:16:67:71:37:d6:7e:
+                    cf:54:ec:cf:44:87:09:75:05:94:cf:73:a6:29:d4:
+                    ba:50:66:c7:96:3d:37:4e:39:9c:72:c1:ce:16:8a:
+                    3e:55:08:cb:2a:54:80:0d:cf:26:f7:b1:d1:dc:eb:
+                    4d:4b:6d:d0:9b:5f:8e:3f:e7:da:0b:95:eb:83:d2:
+                    41:01:4b:b9:d8:57:aa:dd:57:12:dd:ba:8d:32:25:
+                    dc:c4:de:0c:e4:77:d6:e6:c4:c4:7a:eb:e6:d9:6c:
+                    83:73:20:ce:bb:cb:66:39:cb:d4:8d:69:2a:4c:9c:
+                    87:90:98:b4:43:b7:1a:34:bb:32:5a:1d:9a:9c:b3:
+                    f8:ff:56:37:0d:f2:49:20:81:9e:9e:fc:18:41:38:
+                    87:21:0a:e0:d2:58:b7:cf:e8:7f:cc:3b:9a:d0:fa:
+                    7f:f5:96:8d:bd:7f:b6:53:53:13:40:09:5d:c8:3e:
+                    83:62:af:1b:0b:4d:fd:d6:60:17:7d:01:bd:84:12:
+                    d4:85:a0:d4:3a:ab:5d:d8:79:cf:21:3a:f8:a0:4a:
+                    b9:dd:78:1e:67:cc:88:7b:85:0c:29:bf:70:01:69:
+                    44:59:f6:d7:0d:05:0e:7d:c8:45:51:3d:0f:7c:41:
+                    9c:40:e8:23:6c:ea:c1:a8:65:17:db:f6:99:64:e8:
+                    d5:49
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                CD:66:CE:60:9F:76:C4:3B:CA:BB:1D:65:8B:55:FF:8C:4B:09:18:7B
+            X509v3 Authority Key Identifier: 
+                keyid:89:25:E2:77:64:DC:70:B5:C2:D7:C5:BA:BB:05:85:E3:16:41:2A:81
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         af:98:23:50:b9:00:01:b6:1e:95:a3:04:93:b1:12:62:73:2d:
+         fd:31:8f:13:57:ad:f5:72:84:3f:1e:a7:a1:d6:c4:81:3a:4e:
+         a7:2a:d8:03:32:1f:43:c3:5e:09:26:49:c8:2a:c5:aa:dc:e8:
+         b2:ca:fb:40:79:75:c3:e3:76:ab:58:1d:b0:bf:0e:5e:78:c7:
+         d4:0e:51:b0:d3:40:89:82:78:ee:a4:ad:67:fc:54:34:c5:12:
+         12:04:de:4d:65:4e:f1:bb:23:47:5b:48:a3:a8:58:77:d2:f6:
+         83:c2:c5:71:86:cb:10:4e:20:de:46:a0:5a:03:5e:66:e0:ae:
+         a3:c3:64:cb:05:e6:49:fd:c0:b7:d2:09:0b:fb:72:4e:04:33:
+         a7:3d:a8:15:47:57:75:fb:74:b0:ce:4b:75:58:16:32:08:db:
+         fb:6e:95:52:ce:6f:00:56:82:bb:e8:2e:90:86:5f:a0:8c:c5:
+         f1:8c:fb:3c:05:c1:9a:54:88:8a:49:6b:16:e9:b8:7b:09:3d:
+         9d:b6:72:65:5b:d8:1a:a7:21:36:9c:3a:0d:ed:32:31:b7:c9:
+         9e:50:28:f1:09:79:b9:6a:3c:34:48:65:8e:d7:34:8d:32:8e:
+         95:ab:a6:72:b3:88:f1:8d:5a:53:c5:6f:6f:98:2a:6b:51:1e:
+         f6:ce:f3:e2
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:de:b2:b7:d7:b9:61:0d:2a:e9:2c:28:55:18:4e:
+                    26:85:1d:bf:b9:12:50:0a:bd:90:13:a0:fa:a8:94:
+                    b1:59:f3:b7:2f:73:3d:04:c2:ac:67:b1:0a:b9:32:
+                    36:47:54:21:74:e0:13:cd:87:45:12:46:d1:0b:ce:
+                    d8:f8:e2:db:b5:8d:4d:cf:85:83:da:9f:52:f2:e4:
+                    92:46:8f:c8:3c:ca:68:98:4f:35:ce:49:35:62:2b:
+                    d8:64:77:2a:04:e4:6b:73:71:7c:b0:46:d8:b1:27:
+                    81:a4:f9:4a:60:91:0d:27:db:2b:17:8d:88:24:b4:
+                    d3:ea:fc:f8:82:32:79:c0:87:8e:6b:58:dc:7b:8e:
+                    27:bf:01:f3:7a:dd:d8:06:97:f3:9f:0a:d5:1a:32:
+                    30:a4:e1:3f:ce:6b:8b:f1:5a:0b:9f:28:22:01:08:
+                    5f:55:1d:05:7b:7e:79:43:04:bc:de:fc:dd:c7:17:
+                    cb:d7:92:07:73:76:78:24:10:b4:9f:ed:6b:b1:36:
+                    ee:e5:66:fb:6b:d4:d7:b6:43:be:24:d2:f8:98:43:
+                    ce:53:d7:40:72:b1:a5:88:9d:3f:47:6f:55:4f:bc:
+                    27:1c:fb:19:f8:89:f1:a7:79:d8:af:a2:da:e9:dd:
+                    7f:64:6a:bc:06:a4:86:c8:67:af:ae:f2:fc:a4:72:
+                    73:55
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                89:25:E2:77:64:DC:70:B5:C2:D7:C5:BA:BB:05:85:E3:16:41:2A:81
+            X509v3 Authority Key Identifier: 
+                keyid:89:25:E2:77:64:DC:70:B5:C2:D7:C5:BA:BB:05:85:E3:16:41:2A:81
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         3c:ee:b5:f8:9b:00:dc:dc:74:14:e9:ac:9f:f9:dc:2f:a3:a7:
+         25:e3:58:43:b0:2c:9f:5c:44:b2:69:e6:2d:a5:34:4e:c0:87:
+         75:67:5a:cc:b4:9d:20:c5:30:e8:4f:0a:8d:75:24:17:c6:b3:
+         2e:28:d4:70:cb:92:7d:39:ae:d1:6c:16:e8:4b:18:63:3b:d8:
+         01:7c:6f:2f:b0:27:d7:76:d5:7b:15:93:47:d4:ea:d4:eb:ef:
+         67:ba:bd:23:cd:71:50:26:3a:b1:98:6f:49:46:32:60:9c:97:
+         bd:75:91:51:18:f1:7d:3c:e6:9c:f1:4f:6c:52:3f:21:a8:0c:
+         05:d4:52:e7:5c:2d:2f:2b:b6:eb:4c:d6:f6:63:ef:8c:25:ff:
+         6c:6e:7a:e9:b9:9b:69:5e:5c:2e:34:1d:19:f9:be:14:c0:30:
+         bc:80:de:25:f8:26:7d:a4:92:8a:bb:6d:26:3a:fa:fb:ac:78:
+         71:48:c4:47:79:fd:0c:87:f2:5c:b9:6f:af:48:58:1b:2b:52:
+         91:fa:cf:41:a6:5c:6d:5d:3e:67:03:29:6b:6b:5f:b9:64:91:
+         25:2b:76:83:20:33:bd:cc:df:32:fb:e8:8f:2a:b4:35:4e:9a:
+         f4:25:97:58:f4:ec:69:c0:52:1e:74:e2:60:cc:3d:f5:48:bb:
+         79:13:3d:03
+-----BEGIN TRUSTED_CERTIFICATE-----
+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN6yt9e5YQ0q6SwoVRhO
+JoUdv7kSUAq9kBOg+qiUsVnzty9zPQTCrGexCrkyNkdUIXTgE82HRRJG0QvO2Pji
+27WNTc+Fg9qfUvLkkkaPyDzKaJhPNc5JNWIr2GR3KgTka3NxfLBG2LEngaT5SmCR
+DSfbKxeNiCS00+r8+IIyecCHjmtY3HuOJ78B83rd2AaX858K1RoyMKThP85ri/Fa
+C58oIgEIX1UdBXt+eUMEvN783ccXy9eSB3N2eCQQtJ/ta7E27uVm+2vU17ZDviTS
++JhDzlPXQHKxpYidP0dvVU+8Jxz7GfiJ8ad52K+i2undf2RqvAakhshnr67y/KRy
+c1UCAwEAAaOByzCByDAdBgNVHQ4EFgQUiSXid2TccLXC18W6uwWF4xZBKoEwHwYD
+VR0jBBgwFoAUiSXid2TccLXC18W6uwWF4xZBKoEwNwYIKwYBBQUHAQEEKzApMCcG
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA87rX4mwDc
+3HQU6ayf+dwvo6cl41hDsCyfXESyaeYtpTROwId1Z1rMtJ0gxTDoTwqNdSQXxrMu
+KNRwy5J9Oa7RbBboSxhjO9gBfG8vsCfXdtV7FZNH1OrU6+9nur0jzXFQJjqxmG9J
+RjJgnJe9dZFRGPF9POac8U9sUj8hqAwF1FLnXC0vK7brTNb2Y++MJf9sbnrpuZtp
+XlwuNB0Z+b4UwDC8gN4l+CZ9pJKKu20mOvr7rHhxSMRHef0Mh/JcuW+vSFgbK1KR
++s9BplxtXT5nAylra1+5ZJElK3aDIDO9zN8y++iPKrQ1Tpr0JZdY9OxpwFIedOJg
+zD31SLt5Ez0D
+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTYwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----