Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem

+[Created by: generate-expired-target-notBefore.py]
+
+Simple certificate chain with 1 intermediary, where the target
+is expired (violates validity.notBefore)
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bd:ab:68:2c:f9:da:e3:c1:b6:3d:da:3c:85:17:
+                    33:c9:5b:bf:b5:03:52:a6:eb:bc:b6:41:b1:35:de:
+                    18:97:bf:66:ef:75:8d:80:7e:e7:aa:69:e7:66:9a:
+                    cb:a2:72:76:92:50:92:63:ef:4b:9f:9e:c6:aa:3e:
+                    72:f7:cb:71:89:7f:05:6d:10:44:ed:a9:b4:47:5f:
+                    23:89:fe:08:f1:10:9c:e7:1e:84:53:d2:8e:92:70:
+                    d6:90:de:80:ab:94:dd:12:8a:82:7f:a2:a6:21:52:
+                    9e:24:2e:9e:4d:93:3b:b0:5f:37:9d:dd:58:03:91:
+                    75:6f:3d:1c:71:fd:85:34:1a:2e:e9:41:ee:d1:53:
+                    55:8d:44:a0:27:51:94:68:07:ac:db:54:f1:d3:8d:
+                    7f:41:a3:bc:12:62:74:98:ee:18:cb:b6:91:25:bd:
+                    01:de:9a:c7:4b:56:95:63:49:03:49:d8:8e:10:14:
+                    e9:76:3e:7d:8f:3a:2d:80:bf:d4:51:3d:64:6c:18:
+                    85:84:67:80:29:48:7d:55:ec:54:74:e5:2a:6d:92:
+                    44:52:9c:5c:a2:36:d1:07:bd:06:4c:a8:1c:1d:d3:
+                    f9:b1:71:0e:2f:99:57:da:e9:74:92:97:ec:b1:18:
+                    a0:84:17:17:5f:9e:87:9d:dd:04:6a:3d:23:18:84:
+                    a6:c3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                37:52:88:A8:20:FC:C0:84:14:A6:F3:48:22:EB:3E:42:52:35:95:50
+            X509v3 Authority Key Identifier: 
+                keyid:B8:5F:A3:4F:60:5A:89:2C:3A:11:1D:0B:D9:AA:98:C8:65:0F:26:85
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         71:d6:15:ad:dd:db:73:17:8d:7d:9e:23:14:32:a3:06:f9:4a:
+         2a:e4:4d:71:9c:d3:3d:3b:9b:45:86:3e:d4:42:b3:db:5d:79:
+         56:aa:4e:cf:0d:b0:40:1e:6d:1b:43:cb:bd:c5:38:f7:04:37:
+         6c:48:c2:d2:bd:f0:65:c7:f3:f4:3c:19:76:94:2d:c0:85:b5:
+         d8:00:88:6e:fc:8e:02:d7:df:e9:57:f4:8c:24:34:6d:71:ce:
+         0a:33:10:93:a3:c4:87:d3:43:a6:8c:35:e1:9b:d7:24:5f:c2:
+         28:72:67:d7:07:23:65:74:55:a9:06:e3:eb:26:e9:6e:d2:16:
+         66:e9:37:de:3a:d5:c7:36:a6:27:75:72:4a:57:36:da:0b:f3:
+         5d:01:96:ff:ff:59:6f:f4:49:07:a1:b5:75:7c:f5:bf:25:b9:
+         62:5e:aa:6e:4b:9f:a5:fc:09:25:f9:41:24:f0:20:b7:4e:3e:
+         74:cb:32:a6:89:88:71:5b:05:f6:32:1a:21:5e:c9:30:44:dd:
+         7f:05:f6:4f:4f:4f:08:9f:e7:fa:75:40:44:0b:02:9f:d9:47:
+         88:55:c7:44:92:df:e3:7a:c8:81:e1:c4:f9:77:11:21:37:9d:
+         08:25:e8:58:bf:e6:90:04:21:2f:a0:84:33:a1:d8:48:66:11:
+         3c:ce:3d:d4
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a9:27:cc:97:53:8e:8d:27:ac:e5:df:b4:4f:e6:
+                    50:2c:2d:e0:dc:7c:b1:7b:d2:d0:70:c1:e2:f0:89:
+                    be:c3:0b:33:40:f6:7b:f8:a8:44:d2:85:7e:7a:d6:
+                    7e:66:b6:41:2f:5d:3f:73:2d:e9:4b:1a:4e:26:29:
+                    95:0d:63:0b:a4:12:32:e1:8c:cd:20:51:64:9f:87:
+                    19:83:a4:e5:19:a2:91:2e:5b:59:7f:35:16:6c:7d:
+                    2f:70:04:53:f2:85:90:37:21:4c:9c:df:4c:54:2f:
+                    93:2e:56:5f:aa:ce:37:6d:77:1b:6a:52:9f:6b:73:
+                    6f:06:ab:f8:21:85:9b:56:97:94:59:a8:e8:23:f5:
+                    bb:90:8e:60:09:8a:87:ff:1c:fe:bd:af:6b:80:36:
+                    5f:c4:fa:a0:90:a9:87:28:93:85:dc:78:16:94:1a:
+                    1c:f7:e6:3b:81:d0:c7:8a:42:6c:ba:0a:27:0d:f6:
+                    04:ec:1e:03:da:66:69:06:80:18:2e:12:e6:4b:7c:
+                    47:38:08:02:7e:45:55:df:90:50:04:c8:5f:ed:00:
+                    86:fc:97:9b:03:9b:d5:f1:b5:e7:19:62:da:d8:c5:
+                    65:c8:c8:9b:f6:6a:86:29:fd:e7:cf:88:b4:72:bb:
+                    80:93:29:d8:51:ef:d4:35:95:0b:ed:37:f4:a0:e1:
+                    51:57
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                B8:5F:A3:4F:60:5A:89:2C:3A:11:1D:0B:D9:AA:98:C8:65:0F:26:85
+            X509v3 Authority Key Identifier: 
+                keyid:BC:8D:64:1D:CD:B6:17:0C:FE:D0:21:4E:CF:3C:8B:78:40:4B:F8:55
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         b1:f8:15:81:c0:83:25:3e:fc:ed:2a:d3:a8:70:05:29:11:31:
+         cf:be:f1:b9:ec:29:4e:fc:a2:6b:b3:59:b2:d2:4d:a3:42:ca:
+         f6:21:78:da:0b:7b:4e:9f:4b:a2:dc:c6:c8:d0:6e:ef:5c:36:
+         ff:67:f7:62:ca:a1:88:ce:89:38:85:36:5b:f5:34:de:a5:dc:
+         c2:9e:51:cd:80:ab:69:91:7a:62:5a:1a:b9:a2:6a:24:ac:ec:
+         0b:33:3f:85:fc:d8:25:5b:19:5d:97:d4:20:0c:e7:00:ab:b6:
+         be:7e:3c:41:65:a4:89:08:fd:11:74:48:3f:8a:b0:79:f8:29:
+         ec:ac:12:37:48:65:23:5b:99:8a:34:3e:34:d7:1d:b7:20:fd:
+         b1:79:df:2a:a9:8f:fc:1e:57:0a:23:b4:f1:4b:0e:e3:86:07:
+         71:a0:91:4e:d9:57:b5:ab:e6:23:84:44:54:e1:18:3f:09:f6:
+         69:66:b2:f3:a9:97:c5:9e:aa:98:03:e7:06:34:bd:08:60:a1:
+         cc:2d:b9:c8:4e:65:e7:75:fb:9c:b9:32:44:c6:45:82:d4:01:
+         fa:ff:c5:70:4b:ac:9b:d9:bf:8a:7b:54:5c:b6:ee:c9:7c:e8:
+         16:cd:c8:ba:aa:12:1a:b8:e5:fb:bf:42:a0:43:3a:93:1d:4b:
+         9d:de:0a:c7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:be:e9:c4:6c:85:73:3b:d8:a3:d3:87:9b:c8:29:
+                    90:e1:b5:27:75:f5:8c:df:19:1f:6f:71:cc:ed:ca:
+                    fe:82:68:97:15:89:15:cf:31:a9:a3:62:fd:3c:e5:
+                    2c:93:83:c7:5c:ab:bd:24:e2:8a:b9:fa:f8:16:44:
+                    3e:cc:23:a7:30:2e:be:b9:62:a3:5a:70:c3:ea:7b:
+                    1b:e5:d4:35:23:1a:7f:7b:04:a7:31:e2:75:58:8c:
+                    ae:64:d6:e3:57:e3:70:c7:63:6f:5c:fc:57:29:73:
+                    f1:35:fd:19:6b:67:9e:02:b7:f4:d6:4e:ac:1d:6d:
+                    e4:f9:1a:71:1f:2a:a1:4d:cf:86:7a:13:d7:99:bb:
+                    24:7d:f2:ce:33:d4:25:d1:eb:6d:f9:da:b9:87:f3:
+                    de:9f:07:ba:e7:f6:dc:8b:10:d6:0e:32:d8:d9:75:
+                    4c:ce:a6:70:26:39:ac:00:5d:c2:ce:f0:00:b8:4f:
+                    b7:fb:79:fa:8f:03:7f:a9:97:3e:68:16:b3:6d:58:
+                    f3:2a:0a:80:80:39:4f:e2:c8:0b:2e:86:c1:45:24:
+                    31:14:60:6e:cb:a0:92:2f:24:0a:1c:bd:bd:2b:30:
+                    1c:11:54:be:45:ee:4a:72:d7:03:30:1c:6c:b2:3d:
+                    df:f5:9d:6d:0a:ac:c1:2b:fe:94:f0:f2:6c:e2:f8:
+                    c8:bb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                BC:8D:64:1D:CD:B6:17:0C:FE:D0:21:4E:CF:3C:8B:78:40:4B:F8:55
+            X509v3 Authority Key Identifier: 
+                keyid:BC:8D:64:1D:CD:B6:17:0C:FE:D0:21:4E:CF:3C:8B:78:40:4B:F8:55
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         bc:4e:76:42:c9:cb:b4:a8:ea:59:d4:99:83:a5:fe:20:e8:aa:
+         0c:ed:86:cb:8b:5b:df:0d:c3:61:d2:dd:fd:e7:26:6c:12:35:
+         62:95:dc:79:03:36:17:3f:65:32:07:06:e0:7a:be:90:6f:ac:
+         e0:6f:6d:62:16:d0:4a:f3:b6:37:1f:f4:30:e3:75:23:0c:b1:
+         b2:6c:b8:a9:9f:8b:ee:11:7d:aa:a1:98:37:13:df:68:c0:e2:
+         9d:04:d2:6e:a8:09:d5:40:63:05:55:13:fe:60:a7:d9:f8:d8:
+         91:ac:80:ed:4f:23:14:2c:57:95:a7:06:75:e3:f6:21:8c:f3:
+         6c:6e:a4:16:2d:e4:ff:df:c3:d1:ea:72:4f:f5:29:1e:2d:24:
+         47:d5:59:24:4e:25:99:e8:d9:fa:e8:83:a1:86:8f:4c:b1:35:
+         83:74:bb:95:fb:60:88:11:f6:21:b9:0e:29:b5:10:b2:57:73:
+         ff:5c:3c:ec:eb:be:de:42:aa:ef:05:e9:15:82:6d:21:28:2f:
+         f2:9d:8d:28:7e:bb:54:99:f6:55:21:22:05:e4:3b:97:f2:64:
+         90:19:20:6a:12:9f:15:80:52:12:46:9f:d7:55:90:29:9c:c7:
+         97:06:1d:ca:09:d1:82:0d:f8:1d:4c:f2:40:98:e7:a5:f9:8a:
+         97:7d:37:5d
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTQwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----