Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/expired-target.pem

+[Created by: generate-expired-target.py]
+
+Simple certificate chain with 1 intermediary, where the target
+is expired (violates validity.notAfter)
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b8:87:1e:c7:51:95:2a:29:cc:d1:60:3b:c8:ef:
+                    b8:05:af:c5:8a:e7:43:d8:15:eb:89:3f:2e:a9:59:
+                    b8:15:c6:f4:91:05:a9:b0:40:1f:e3:07:92:e9:69:
+                    b4:22:f1:77:1d:5f:08:b1:ba:ba:f7:6a:b6:1a:6e:
+                    d1:89:04:cd:ef:a4:fe:05:6f:c8:d9:24:7c:7a:89:
+                    9f:a8:52:c7:4b:0e:b4:30:55:f2:f1:2a:5c:fd:4b:
+                    76:e1:d8:d8:70:ab:a8:0b:ab:4a:f1:6f:be:82:c1:
+                    38:4d:37:80:ca:ce:c9:41:09:cb:de:fd:ed:b6:27:
+                    43:6e:85:5c:d4:38:f8:83:2c:51:94:d5:a1:a3:cd:
+                    d2:ae:12:ee:4d:b1:2d:d4:19:2c:44:3c:0f:70:d6:
+                    b0:22:db:18:77:66:88:8f:c6:9f:48:7d:fb:d5:ca:
+                    0a:09:28:37:37:98:b2:e7:a8:50:7d:93:c1:27:f4:
+                    40:4a:72:5e:75:f0:3e:f4:9d:e8:c1:b0:51:ea:9b:
+                    58:d6:e1:6a:6e:b9:32:5b:c1:7e:5e:ea:b7:a8:26:
+                    91:f9:b4:59:3e:db:6c:b9:b9:25:96:b0:96:62:27:
+                    4d:8a:1c:e4:7f:6f:fc:82:fd:22:b0:a4:85:3b:9d:
+                    28:b0:1f:ab:ef:50:b5:1f:0b:0d:e8:a4:8e:23:87:
+                    39:19
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                2A:A1:9D:2F:C1:35:13:80:93:49:7C:12:E2:1E:72:FA:28:3B:BC:D7
+            X509v3 Authority Key Identifier: 
+                keyid:DE:7B:F2:60:AB:33:43:C7:3E:E9:62:08:62:F7:8C:D1:C2:C1:C4:03
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         b8:76:87:57:5f:7d:b4:85:00:27:06:c3:c3:62:ac:30:4e:8f:
+         6b:e7:8f:af:ee:2e:ac:ce:95:c1:1d:12:c4:df:44:86:cf:55:
+         4d:0e:70:5c:c3:96:d4:f1:4a:76:52:56:8a:e4:a1:ca:6b:6f:
+         bd:4d:c6:47:86:bc:3c:98:25:fb:d3:74:d5:7c:4e:07:89:d6:
+         c0:bf:9e:b3:e0:8a:c1:05:3e:6b:98:fa:44:c4:fc:02:40:8c:
+         34:aa:c2:28:ec:ad:6a:ca:70:72:67:45:cc:41:67:96:26:62:
+         99:98:ea:70:38:8f:02:f7:73:0c:ae:93:3a:68:c4:05:4a:33:
+         11:f6:8c:40:a0:e3:5e:e4:f6:d0:84:15:1e:8d:6f:ca:01:ce:
+         22:5e:3e:56:3f:66:2b:0b:51:6c:01:31:be:2b:6f:97:e5:9d:
+         1f:9a:0b:92:84:5f:15:cb:12:bb:7a:f6:64:7a:55:ba:9b:a4:
+         32:bd:de:f0:a4:97:d7:1c:87:75:d9:90:7c:ff:1f:f0:89:be:
+         d4:ff:99:98:3c:a0:6b:0b:c9:a0:df:d0:47:8c:f9:df:d9:ed:
+         e9:09:54:d8:df:b2:51:20:29:c9:ba:83:7f:57:8c:5a:ee:9b:
+         26:fb:25:c1:fb:87:e6:aa:8f:db:2c:16:69:22:7a:24:26:aa:
+         0d:74:3c:4c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cd:b7:8d:39:69:ae:88:93:8e:d1:89:d4:52:50:
+                    7b:31:42:59:8f:a1:f0:17:22:45:6d:80:a0:06:17:
+                    51:6a:9d:f3:42:a8:07:b2:67:0e:fb:e6:c7:6a:c1:
+                    79:1b:ee:fa:62:c9:48:0b:1c:85:76:19:e5:18:5f:
+                    36:8a:51:59:ea:b0:f1:3c:fc:89:4e:50:6e:81:c7:
+                    6e:7a:52:ee:7b:35:4d:3d:2c:0f:46:43:8e:28:d5:
+                    83:81:a8:31:01:34:21:85:43:c0:73:2c:4e:e7:1b:
+                    f3:43:8d:94:74:ef:fc:aa:90:b5:53:a7:24:e2:8a:
+                    38:a1:c8:46:9f:4e:8f:bf:7d:66:60:23:97:ea:33:
+                    51:34:5b:9e:f3:44:1b:6d:ed:15:fd:9e:d3:64:17:
+                    69:7d:f0:34:c4:e1:f4:bb:91:f5:5c:1c:82:6d:26:
+                    08:06:44:e0:96:79:aa:bc:62:af:63:a6:d2:d0:f8:
+                    68:13:1a:52:c2:a8:1c:32:a7:49:b0:48:da:85:d3:
+                    41:71:1e:be:3e:43:10:91:27:db:48:8e:07:a8:b9:
+                    d5:f4:d1:30:22:1f:2a:6a:95:29:c7:84:51:41:24:
+                    e0:a6:5b:95:de:a2:33:c3:f0:04:98:14:82:16:f5:
+                    4f:97:89:c5:8b:04:dd:eb:19:61:14:1a:4a:76:62:
+                    3a:0d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                DE:7B:F2:60:AB:33:43:C7:3E:E9:62:08:62:F7:8C:D1:C2:C1:C4:03
+            X509v3 Authority Key Identifier: 
+                keyid:89:D8:BF:6B:4C:F2:E6:DF:73:54:2A:A8:CB:1E:F8:74:E8:F5:93:95
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         89:67:d6:43:27:14:84:be:5e:4f:dd:8c:b1:6a:4b:5a:49:2b:
+         a4:3b:47:b1:e4:c6:73:69:e6:bd:ae:80:8e:58:20:a2:5f:4c:
+         2e:b0:9b:05:7c:18:db:55:ba:ec:5b:f6:94:98:19:02:bf:cc:
+         c7:90:2b:8d:0f:0d:17:c4:f0:38:ea:ab:36:d9:1e:f4:96:04:
+         43:0c:11:a0:72:92:25:63:b0:53:f3:36:e1:1a:0e:42:47:64:
+         b0:7e:44:3c:ac:79:53:69:c0:95:11:a9:7c:ce:16:89:e8:09:
+         46:44:75:de:b8:75:f1:85:db:c0:aa:55:82:ac:f6:fd:50:10:
+         9f:e2:ff:60:f5:de:e1:aa:89:3c:60:be:3b:33:b3:29:03:0d:
+         18:ac:8a:24:c4:27:20:78:ce:69:79:78:ee:f1:47:02:ac:ab:
+         7c:a2:92:ac:d9:b5:4d:78:34:69:88:d4:a8:29:32:c7:7b:f0:
+         5a:1f:a8:c2:38:53:98:4a:b7:d3:a1:42:c5:82:63:5b:eb:8d:
+         e7:c2:fb:bc:e5:e1:e1:59:48:95:bf:27:36:ce:8c:83:ff:5d:
+         b9:62:bf:6f:4b:d2:1f:13:77:9b:5c:cc:1e:35:a6:0b:84:10:
+         9a:8d:d2:a1:d5:3f:23:c7:cc:20:3d:8e:ec:67:5c:11:7f:4a:
+         cf:31:17:4a
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b6:56:7b:2d:00:bd:5b:45:95:63:71:e7:32:fa:
+                    a1:95:42:50:25:9e:26:d5:e5:63:8c:d7:31:d6:bb:
+                    b4:61:5a:1a:56:ac:52:26:57:68:ae:aa:45:5a:c4:
+                    24:e6:ea:ab:07:2b:08:8f:1f:55:b2:7e:0b:d4:5e:
+                    40:76:a8:29:af:98:33:dd:92:3d:44:33:68:3e:ee:
+                    0c:31:79:10:5f:b4:e5:2c:e9:7f:0f:cb:4e:a0:1f:
+                    c8:bb:b1:c3:a9:05:8b:dd:06:5a:29:76:81:11:aa:
+                    5f:80:e9:b7:ce:b2:b1:0a:85:fa:f4:33:0a:c2:b6:
+                    80:5d:60:67:29:b3:6e:88:f1:a0:1d:e8:2e:73:17:
+                    af:14:8d:45:38:9d:a8:28:00:5d:0b:4a:71:ce:88:
+                    7a:80:a6:9f:b8:9e:51:71:2e:25:a9:ba:93:94:af:
+                    ed:dc:01:bd:2d:11:7f:46:6f:46:08:79:ef:54:a6:
+                    97:a1:92:ee:4c:9b:52:47:85:97:cb:28:56:fd:55:
+                    75:ef:f9:a5:2d:41:92:57:d6:64:13:37:83:84:b5:
+                    85:86:a2:63:91:25:be:1b:8f:31:6e:c0:3f:1c:61:
+                    f8:59:77:70:e2:bf:e4:d9:c1:41:74:cf:ba:ca:24:
+                    33:8d:c8:4f:fe:59:41:69:d2:90:44:fb:12:23:ce:
+                    ac:03
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                89:D8:BF:6B:4C:F2:E6:DF:73:54:2A:A8:CB:1E:F8:74:E8:F5:93:95
+            X509v3 Authority Key Identifier: 
+                keyid:89:D8:BF:6B:4C:F2:E6:DF:73:54:2A:A8:CB:1E:F8:74:E8:F5:93:95
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         9d:67:b3:65:a3:2e:8f:16:82:e7:4b:49:92:f1:c5:65:fb:a3:
+         e1:e8:a9:52:c7:0b:93:ff:36:d2:50:be:97:94:91:c3:a2:6c:
+         52:b6:25:8b:c9:ca:09:55:19:9e:4b:7b:4b:e8:1a:2a:2c:e1:
+         9f:a5:b1:f6:f2:ad:23:47:03:cb:25:3c:a4:8c:fb:03:68:13:
+         e9:7c:39:bc:eb:7c:5f:17:12:15:3e:8d:42:4f:98:b8:15:cb:
+         57:f8:4a:24:bc:37:e8:19:1f:d6:f4:e5:a6:bc:96:ae:7e:72:
+         ef:34:ba:b6:80:ea:21:89:35:39:a4:b2:4a:53:14:99:da:13:
+         f2:d9:7c:3a:a0:2e:b7:a4:31:ce:92:93:e2:20:71:af:fc:53:
+         55:0a:0b:3f:ed:3d:57:45:9e:2f:53:5e:df:56:5f:98:46:85:
+         16:25:c0:cc:b0:38:7d:7d:55:85:d5:de:d8:18:86:74:50:c2:
+         c6:3d:35:76:47:fa:c5:43:25:74:3b:0c:4d:03:d1:bc:0a:f1:
+         98:0e:85:9a:c6:72:d4:17:ab:95:5d:68:46:0d:0e:a8:1d:ba:
+         bf:ad:04:94:bf:a1:45:c4:6e:e7:20:dd:29:d3:da:67:2c:3b:
+         81:9e:d5:27:2c:df:70:8a:36:df:80:ed:5e:c2:f7:2d:cb:a5:
+         13:82:62:75
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTYwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----