| Index: net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem | 
| diff --git a/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem | 
| new file mode 100644 | 
| index 0000000000000000000000000000000000000000..8179595940df56291aaa264017aad3fa81a6ea93 | 
| --- /dev/null | 
| +++ b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem | 
| @@ -0,0 +1,247 @@ | 
| +[Created by: generate-target-signed-by-512bit-rsa.py] | 
| + | 
| +Certificate chain with 1 intermediary. The target certificate | 
| +is signed using a weak RSA key (512-bit modulus) | 
| + | 
| +Certificate: | 
| +    Data: | 
| +        Version: 3 (0x2) | 
| +        Serial Number: 1 (0x1) | 
| +    Signature Algorithm: sha256WithRSAEncryption | 
| +        Issuer: CN=Intermediary | 
| +        Validity | 
| +            Not Before: Jan  1 12:00:00 2015 GMT | 
| +            Not After : Jan  1 12:00:00 2016 GMT | 
| +        Subject: CN=Target | 
| +        Subject Public Key Info: | 
| +            Public Key Algorithm: rsaEncryption | 
| +                Public-Key: (2048 bit) | 
| +                Modulus: | 
| +                    00:ca:10:3e:cf:ee:e8:57:a8:4a:4b:80:03:ff:b0: | 
| +                    70:c3:03:80:ec:a9:15:d6:94:6c:b6:f0:02:31:1a: | 
| +                    52:49:95:14:ba:10:52:36:8a:cd:36:37:8f:3f:2a: | 
| +                    74:5f:ac:38:a5:d2:dd:35:2e:ee:e4:47:7f:5d:f7: | 
| +                    6a:26:4e:a0:33:ca:46:ba:18:71:76:94:22:ba:ae: | 
| +                    b0:ea:62:ca:36:63:d9:4e:5e:18:e0:fc:1a:9d:e6: | 
| +                    04:52:75:71:b2:7e:24:91:81:be:74:c9:4f:e6:ca: | 
| +                    d4:77:cf:28:29:07:73:1b:3b:55:83:d5:73:10:fb: | 
| +                    96:ec:12:46:b1:26:fb:06:5f:b2:84:16:de:04:36: | 
| +                    30:be:99:af:23:e3:6f:be:63:6c:fd:0c:62:6d:8c: | 
| +                    29:43:9b:79:26:0d:7c:f0:38:e8:19:1b:4d:57:63: | 
| +                    0e:2e:6b:e6:f7:61:d7:6b:cc:3a:f1:76:b0:da:8b: | 
| +                    21:f2:a3:97:78:f9:d8:76:97:80:b9:34:8e:1c:27: | 
| +                    ef:48:22:c5:ac:a3:ac:b3:cc:3b:54:dc:67:c6:e8: | 
| +                    18:7b:8c:f0:8c:e3:e8:6b:9e:5f:17:eb:bc:3c:79: | 
| +                    03:5e:c3:17:d2:26:49:97:3f:ba:6c:64:f5:9e:8e: | 
| +                    98:25:2d:98:05:1a:6f:f1:5c:5e:8e:d1:04:50:41: | 
| +                    8f:e9 | 
| +                Exponent: 65537 (0x10001) | 
| +        X509v3 extensions: | 
| +            X509v3 Subject Key Identifier: | 
| +                80:48:02:46:1D:D2:6B:B6:90:3A:D9:CA:9A:51:6E:B8:EA:06:9D:23 | 
| +            X509v3 Authority Key Identifier: | 
| +                keyid:4E:20:FE:20:6A:E4:2E:EE:8D:23:B4:13:86:17:6D:9A:66:47:4B:81 | 
| + | 
| +            Authority Information Access: | 
| +                CA Issuers - URI:http://url-for-aia/Intermediary.cer | 
| + | 
| +            X509v3 CRL Distribution Points: | 
| + | 
| +                Full Name: | 
| +                  URI:http://url-for-crl/Intermediary.crl | 
| + | 
| +            X509v3 Key Usage: critical | 
| +                Digital Signature, Key Encipherment | 
| +            X509v3 Extended Key Usage: | 
| +                TLS Web Server Authentication, TLS Web Client Authentication | 
| +    Signature Algorithm: sha256WithRSAEncryption | 
| +         a9:8b:48:ed:b6:51:5c:5c:36:b7:8b:ff:64:76:94:f1:8f:b4: | 
| +         8a:a0:96:47:76:5d:dc:84:11:0c:ae:1b:29:d7:de:58:85:46: | 
| +         d9:bd:10:91:0f:bb:c0:99:bc:ef:9f:7f:65:31:21:a4:f5:e0: | 
| +         db:e9:5c:3e:fa:71:8d:24:3d:e9 | 
| +-----BEGIN CERTIFICATE----- | 
| +MIICyzCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl | 
| +cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD | 
| +VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKED7P | 
| +7uhXqEpLgAP/sHDDA4DsqRXWlGy28AIxGlJJlRS6EFI2is02N48/KnRfrDil0t01 | 
| +Lu7kR39d92omTqAzyka6GHF2lCK6rrDqYso2Y9lOXhjg/Bqd5gRSdXGyfiSRgb50 | 
| +yU/mytR3zygpB3MbO1WD1XMQ+5bsEkaxJvsGX7KEFt4ENjC+ma8j42++Y2z9DGJt | 
| +jClDm3kmDXzwOOgZG01XYw4ua+b3YddrzDrxdrDaiyHyo5d4+dh2l4C5NI4cJ+9I | 
| +IsWso6yzzDtU3GfG6Bh7jPCM4+hrnl8X67w8eQNewxfSJkmXP7psZPWejpglLZgF | 
| +Gm/xXF6O0QRQQY/pAgMBAAGjgekwgeYwHQYDVR0OBBYEFIBIAkYd0mu2kDrZyppR | 
| +brjqBp0jMB8GA1UdIwQYMBaAFE4g/iBq5C7ujSO0E4YXbZpmR0uBMD8GCCsGAQUF | 
| +BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk | 
| +aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu | 
| +dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF | 
| +BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBAKmLSO22UVxcNreL/2R2lPGP | 
| +tIqglkd2XdyEEQyuGynX3liFRtm9EJEPu8CZvO+ff2UxIaT14NvpXD76cY0kPek= | 
| +-----END CERTIFICATE----- | 
| + | 
| +Certificate: | 
| +    Data: | 
| +        Version: 3 (0x2) | 
| +        Serial Number: 2 (0x2) | 
| +    Signature Algorithm: sha256WithRSAEncryption | 
| +        Issuer: CN=Root | 
| +        Validity | 
| +            Not Before: Jan  1 12:00:00 2015 GMT | 
| +            Not After : Jan  1 12:00:00 2016 GMT | 
| +        Subject: CN=Intermediary | 
| +        Subject Public Key Info: | 
| +            Public Key Algorithm: rsaEncryption | 
| +                Public-Key: (512 bit) | 
| +                Modulus: | 
| +                    00:b6:6f:fa:f8:27:9c:43:68:d0:dd:c9:6e:cd:56: | 
| +                    2b:34:4c:fe:89:3e:8a:76:ed:0a:53:2a:a2:ff:85: | 
| +                    ec:9c:88:72:b7:8c:64:31:31:d6:30:cc:f3:e1:1a: | 
| +                    f3:ba:e2:f2:80:4c:2c:e2:16:24:e3:2c:2c:9b:4c: | 
| +                    f5:82:86:35:db | 
| +                Exponent: 65537 (0x10001) | 
| +        X509v3 extensions: | 
| +            X509v3 Subject Key Identifier: | 
| +                4E:20:FE:20:6A:E4:2E:EE:8D:23:B4:13:86:17:6D:9A:66:47:4B:81 | 
| +            X509v3 Authority Key Identifier: | 
| +                keyid:16:B5:C9:50:1F:6E:98:6B:7D:33:56:2F:52:20:33:1E:C9:44:C0:E8 | 
| + | 
| +            Authority Information Access: | 
| +                CA Issuers - URI:http://url-for-aia/Root.cer | 
| + | 
| +            X509v3 CRL Distribution Points: | 
| + | 
| +                Full Name: | 
| +                  URI:http://url-for-crl/Root.crl | 
| + | 
| +            X509v3 Key Usage: critical | 
| +                Certificate Sign, CRL Sign | 
| +            X509v3 Basic Constraints: critical | 
| +                CA:TRUE | 
| +    Signature Algorithm: sha256WithRSAEncryption | 
| +         9e:13:bf:0b:f8:09:17:18:22:f3:09:44:8a:41:71:23:46:cc: | 
| +         72:ac:ba:96:9a:2c:70:80:7a:ca:e0:66:11:77:92:bb:63:05: | 
| +         c7:95:c5:2d:ad:1b:f3:c6:7c:14:5a:e0:25:06:a3:ad:c8:41: | 
| +         cf:23:69:61:bb:b6:2c:eb:80:f6:01:af:e2:81:16:0c:2b:c2: | 
| +         b7:e9:6e:f9:b4:01:a9:72:61:76:9f:91:96:1e:ce:85:ae:31: | 
| +         0f:59:9d:2f:ef:11:c2:e0:79:b3:dd:17:e8:3f:3f:78:2f:9a: | 
| +         2a:cd:b7:c9:06:f7:03:93:c6:26:2d:44:36:3b:71:17:88:3c: | 
| +         c5:3c:d5:b1:5e:05:e7:ca:be:e9:bc:98:fb:e0:92:41:82:9a: | 
| +         7a:df:49:4e:b4:25:bf:e3:9c:4a:d8:0a:4f:bc:2a:bc:4b:5d: | 
| +         50:91:ad:be:a5:6f:78:3a:6a:fa:67:6b:91:3f:30:21:05:50: | 
| +         28:fe:71:db:3a:19:25:80:66:fa:af:dc:12:eb:fe:bb:03:22: | 
| +         59:88:34:b4:3a:5a:6c:37:0c:91:f7:5f:10:83:e9:f4:04:ad: | 
| +         43:1b:32:29:24:11:48:fe:e6:c1:3f:11:8e:b5:a6:93:cc:af: | 
| +         ee:87:7f:24:58:b6:a4:37:ae:57:73:c5:34:74:66:44:ca:90: | 
| +         9f:b8:83:03 | 
| +-----BEGIN CERTIFICATE----- | 
| +MIICpTCCAY2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 
| +MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 | 
| +ZXJtZWRpYXJ5MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALZv+vgnnENo0N3Jbs1W | 
| +KzRM/ok+inbtClMqov+F7JyIcreMZDEx1jDM8+Ea87ri8oBMLOIWJOMsLJtM9YKG | 
| +NdsCAwEAAaOByzCByDAdBgNVHQ4EFgQUTiD+IGrkLu6NI7QThhdtmmZHS4EwHwYD | 
| +VR0jBBgwFoAUFrXJUB9umGt9M1YvUiAzHslEwOgwNwYIKwYBBQUHAQEEKzApMCcG | 
| +CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 
| +IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 
| +AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCeE78L+AkX | 
| +GCLzCUSKQXEjRsxyrLqWmixwgHrK4GYRd5K7YwXHlcUtrRvzxnwUWuAlBqOtyEHP | 
| +I2lhu7Ys64D2Aa/igRYMK8K36W75tAGpcmF2n5GWHs6FrjEPWZ0v7xHC4Hmz3Rfo | 
| +Pz94L5oqzbfJBvcDk8YmLUQ2O3EXiDzFPNWxXgXnyr7pvJj74JJBgpp630lOtCW/ | 
| +45xK2ApPvCq8S11Qka2+pW94Omr6Z2uRPzAhBVAo/nHbOhklgGb6r9wS6/67AyJZ | 
| +iDS0OlpsNwyR918Qg+n0BK1DGzIpJBFI/ubBPxGOtaaTzK/uh38kWLakN65Xc8U0 | 
| +dGZEypCfuIMD | 
| +-----END CERTIFICATE----- | 
| + | 
| +Certificate: | 
| +    Data: | 
| +        Version: 3 (0x2) | 
| +        Serial Number: 1 (0x1) | 
| +    Signature Algorithm: sha256WithRSAEncryption | 
| +        Issuer: CN=Root | 
| +        Validity | 
| +            Not Before: Jan  1 12:00:00 2015 GMT | 
| +            Not After : Jan  1 12:00:00 2016 GMT | 
| +        Subject: CN=Root | 
| +        Subject Public Key Info: | 
| +            Public Key Algorithm: rsaEncryption | 
| +                Public-Key: (2048 bit) | 
| +                Modulus: | 
| +                    00:c7:27:b9:d2:57:ee:3d:8e:4b:ab:23:c4:f7:1a: | 
| +                    4d:bf:98:79:d9:3c:f1:68:f8:e0:b9:65:c5:ae:60: | 
| +                    a2:16:c1:31:a2:e1:d7:a7:fc:57:be:13:e1:d2:d7: | 
| +                    c2:48:1c:0a:a0:6a:bc:ac:84:ed:75:ab:ea:68:33: | 
| +                    fb:30:0c:05:ad:ee:12:d2:b1:6f:16:f9:81:30:aa: | 
| +                    0f:96:3d:98:96:09:b4:06:2c:fa:8f:6d:68:be:1d: | 
| +                    f8:a7:74:8a:9b:1e:91:e3:20:b2:d5:d5:49:9c:bd: | 
| +                    7d:09:7e:71:eb:08:61:ec:25:9d:eb:a7:4a:46:3d: | 
| +                    92:28:57:94:29:62:d7:a0:bc:28:90:e8:ac:54:2a: | 
| +                    96:73:2a:e3:d1:4b:9e:f0:cf:8b:de:47:fc:55:c0: | 
| +                    78:e0:8e:f6:c1:9f:c8:b2:78:4c:93:32:b6:e4:bf: | 
| +                    54:dc:ea:90:69:96:12:e0:f4:a0:41:7a:80:28:6b: | 
| +                    ed:39:51:35:64:08:51:9d:40:72:5c:f2:5b:4d:97: | 
| +                    fb:aa:ff:d1:26:82:32:1e:72:9e:c0:b7:ec:94:45: | 
| +                    f5:cb:91:fe:ed:bc:83:46:c2:b9:a5:4a:9c:c9:76: | 
| +                    9b:8a:02:89:1b:66:6e:21:a3:53:e2:e1:3b:03:13: | 
| +                    32:9b:26:09:27:c2:bf:9b:89:bc:41:83:ae:58:90: | 
| +                    f3:bf | 
| +                Exponent: 65537 (0x10001) | 
| +        X509v3 extensions: | 
| +            X509v3 Subject Key Identifier: | 
| +                16:B5:C9:50:1F:6E:98:6B:7D:33:56:2F:52:20:33:1E:C9:44:C0:E8 | 
| +            X509v3 Authority Key Identifier: | 
| +                keyid:16:B5:C9:50:1F:6E:98:6B:7D:33:56:2F:52:20:33:1E:C9:44:C0:E8 | 
| + | 
| +            Authority Information Access: | 
| +                CA Issuers - URI:http://url-for-aia/Root.cer | 
| + | 
| +            X509v3 CRL Distribution Points: | 
| + | 
| +                Full Name: | 
| +                  URI:http://url-for-crl/Root.crl | 
| + | 
| +            X509v3 Key Usage: critical | 
| +                Certificate Sign, CRL Sign | 
| +            X509v3 Basic Constraints: critical | 
| +                CA:TRUE | 
| +    Signature Algorithm: sha256WithRSAEncryption | 
| +         42:1d:03:ac:af:b1:8e:ae:50:c5:7f:b7:7f:03:2c:8e:4b:3c: | 
| +         5a:24:07:7a:fd:f4:49:5f:e6:07:d8:cc:69:1c:c3:62:95:86: | 
| +         ad:d3:70:7a:ec:d0:4e:59:55:80:d6:c2:e8:f8:5d:be:52:81: | 
| +         68:5f:47:b2:60:5a:ee:9e:5a:42:9f:37:dc:2c:7b:4b:7f:b9: | 
| +         d5:68:e0:fe:35:af:71:9d:a3:30:c6:40:47:31:e8:de:48:89: | 
| +         fc:cf:0f:0c:7e:48:09:9c:e1:cf:93:85:0a:04:3f:f0:50:b9: | 
| +         8f:ff:5e:05:da:c0:41:a1:e5:0e:90:89:e3:cd:11:34:8a:d7: | 
| +         a2:06:fb:0f:ac:b7:2c:97:43:49:4f:23:9f:a2:b6:dd:28:83: | 
| +         22:9c:61:5f:3f:ad:af:02:ab:59:03:66:4e:ac:eb:41:d0:5c: | 
| +         cb:9b:65:72:50:9f:cc:13:e2:d4:a3:5c:41:50:90:b3:4f:16: | 
| +         2d:ac:8b:1b:52:f3:29:f3:c2:f6:e8:e1:be:bc:b4:12:08:d9: | 
| +         6d:e1:11:7b:89:7e:7c:8e:16:42:f3:d0:3c:40:5c:cb:4f:79: | 
| +         5a:cf:8f:ca:58:1a:f1:66:7e:9e:b6:b4:df:32:77:a9:90:57: | 
| +         d0:0a:08:5d:98:1d:5d:4a:b1:40:2a:bd:29:ea:6f:ba:ad:a7: | 
| +         b1:c0:ee:49 | 
| +-----BEGIN TRUSTED_CERTIFICATE----- | 
| +MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 
| +MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | 
| +dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcnudJX7j2OS6sjxPca | 
| +Tb+Yedk88Wj44Lllxa5gohbBMaLh16f8V74T4dLXwkgcCqBqvKyE7XWr6mgz+zAM | 
| +Ba3uEtKxbxb5gTCqD5Y9mJYJtAYs+o9taL4d+Kd0ipsekeMgstXVSZy9fQl+cesI | 
| +YewlneunSkY9kihXlCli16C8KJDorFQqlnMq49FLnvDPi95H/FXAeOCO9sGfyLJ4 | 
| +TJMytuS/VNzqkGmWEuD0oEF6gChr7TlRNWQIUZ1AclzyW02X+6r/0SaCMh5ynsC3 | 
| +7JRF9cuR/u28g0bCuaVKnMl2m4oCiRtmbiGjU+LhOwMTMpsmCSfCv5uJvEGDrliQ | 
| +878CAwEAAaOByzCByDAdBgNVHQ4EFgQUFrXJUB9umGt9M1YvUiAzHslEwOgwHwYD | 
| +VR0jBBgwFoAUFrXJUB9umGt9M1YvUiAzHslEwOgwNwYIKwYBBQUHAQEEKzApMCcG | 
| +CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 
| +IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 
| +AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBCHQOsr7GO | 
| +rlDFf7d/AyyOSzxaJAd6/fRJX+YH2MxpHMNilYat03B67NBOWVWA1sLo+F2+UoFo | 
| +X0eyYFrunlpCnzfcLHtLf7nVaOD+Na9xnaMwxkBHMejeSIn8zw8MfkgJnOHPk4UK | 
| +BD/wULmP/14F2sBBoeUOkInjzRE0iteiBvsPrLcsl0NJTyOforbdKIMinGFfP62v | 
| +AqtZA2ZOrOtB0FzLm2VyUJ/ME+LUo1xBUJCzTxYtrIsbUvMp88L26OG+vLQSCNlt | 
| +4RF7iX58jhZC89A8QFzLT3laz4/KWBrxZn6etrTfMnepkFfQCghdmB1dSrFAKr0p | 
| +6m+6raexwO5J | 
| +-----END TRUSTED_CERTIFICATE----- | 
| + | 
| +-----BEGIN TIME----- | 
| +MTYwMzAyMTIwMDAwWg== | 
| +-----END TIME----- | 
| + | 
| +-----BEGIN VERIFY_RESULT----- | 
| +RkFJTA== | 
| +-----END VERIFY_RESULT----- | 
|  |