Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem

+[Created by: generate-intermediary-lacks-signing-key-usage.py]
+
+Simple certificate chain with 1 intermediary and a trusted
+root. The intermediary lacks the correct usage for signing certificates
+(keyCertSign)
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:d2:b9:ca:37:bb:9d:fb:5f:f7:74:7e:41:4b:c3:
+                    c9:36:f9:e1:f8:ba:9d:3e:6d:af:60:46:64:86:89:
+                    c2:60:df:63:30:81:62:c2:8b:c2:b6:d5:81:bd:94:
+                    ea:b5:f4:5f:a7:cc:6b:1b:dd:12:5d:13:a5:32:09:
+                    bf:0c:b1:87:7c:1e:0c:d1:ac:e1:fa:0e:61:8a:5d:
+                    86:ad:8d:77:89:48:62:1d:4a:34:e1:c5:ad:a3:3c:
+                    22:54:28:59:c6:6c:53:97:80:37:02:87:e4:f8:ea:
+                    30:e6:61:85:2e:db:c7:62:f4:6f:38:ac:76:5e:3d:
+                    1a:2d:76:71:3a:a6:e9:c0:ac:5b:95:a4:c4:a1:f9:
+                    df:d8:6e:f4:a9:9e:91:b4:2c:49:42:64:58:d0:44:
+                    d9:33:32:96:20:ad:b2:e7:8c:f6:fa:e5:84:0f:17:
+                    0c:af:fc:0c:22:6d:d2:11:b4:b2:a1:0e:4b:5e:58:
+                    53:c0:98:3d:35:69:04:8e:a5:06:eb:a9:73:3e:77:
+                    92:8f:96:07:4c:53:40:68:1b:7d:ca:52:5b:87:03:
+                    4d:6a:24:01:92:3e:ad:71:d4:df:92:cb:77:54:50:
+                    76:64:3b:76:53:eb:27:9d:07:ea:bf:aa:c5:9c:b6:
+                    84:1a:e5:03:fb:8c:b7:61:28:cd:0e:f7:92:bc:6a:
+                    a9:4b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                39:FA:EF:13:04:7E:08:07:35:5B:63:3B:8B:20:CE:CB:BC:97:FA:C6
+            X509v3 Authority Key Identifier: 
+                keyid:4C:53:4B:DD:D4:3C:82:E2:D9:70:27:A7:4B:24:E2:73:91:CB:C7:F9
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         8a:1f:f5:b7:6a:7a:11:8d:a7:ba:2c:30:44:95:73:02:b2:bd:
+         a3:64:73:75:9f:50:84:e1:9e:6f:c8:28:92:a7:45:2c:a3:fe:
+         16:0f:10:5e:13:0a:6c:91:64:6c:0a:1a:e1:09:a7:9a:07:73:
+         74:13:42:75:23:08:e8:42:4d:3f:86:9a:79:e6:a5:7d:f0:91:
+         55:8b:3b:59:48:ac:39:e2:97:ca:f4:14:07:98:46:d4:09:92:
+         61:76:29:7e:0d:8c:2a:88:04:25:72:95:75:54:23:d3:8d:f7:
+         a8:67:f2:b7:4b:8e:54:5b:e9:88:c4:51:e0:fc:28:a6:7d:f6:
+         22:7f:19:a1:8c:a9:50:66:df:2e:e4:04:47:89:1a:e4:bb:69:
+         f6:4a:65:5b:71:e7:5e:d6:30:e8:d0:48:55:76:19:ab:06:ee:
+         d1:04:ec:63:6a:37:f3:c5:44:1b:54:c3:6e:62:ab:cf:2d:34:
+         69:df:b9:4d:01:05:44:e0:01:96:9e:36:26:16:dd:ff:f0:e7:
+         3c:7a:5f:76:e4:76:86:75:6f:57:9c:74:a7:2b:be:29:b7:a8:
+         c9:48:86:94:f2:6f:d6:ea:45:54:e7:ee:43:80:af:fc:64:1e:
+         94:a8:61:4b:b3:16:2a:93:73:70:68:06:56:9d:a2:58:b3:bf:
+         df:aa:48:3d
+-----BEGIN CERTIFICATE-----
+MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
+cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuco3
+u537X/d0fkFLw8k2+eH4up0+ba9gRmSGicJg32MwgWLCi8K21YG9lOq19F+nzGsb
+3RJdE6UyCb8MsYd8HgzRrOH6DmGKXYatjXeJSGIdSjThxa2jPCJUKFnGbFOXgDcC
+h+T46jDmYYUu28di9G84rHZePRotdnE6punArFuVpMSh+d/YbvSpnpG0LElCZFjQ
+RNkzMpYgrbLnjPb65YQPFwyv/AwibdIRtLKhDkteWFPAmD01aQSOpQbrqXM+d5KP
+lgdMU0BoG33KUluHA01qJAGSPq1x1N+Sy3dUUHZkO3ZT6yedB+q/qsWctoQa5QP7
+jLdhKM0O95K8aqlLAgMBAAGjgekwgeYwHQYDVR0OBBYEFDn67xMEfggHNVtjO4sg
+zsu8l/rGMB8GA1UdIwQYMBaAFExTS93UPILi2XAnp0sk4nORy8f5MD8GCCsGAQUF
+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
+aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAih/1t2p6EY2nuiwwRJVz
+ArK9o2RzdZ9QhOGeb8gokqdFLKP+Fg8QXhMKbJFkbAoa4QmnmgdzdBNCdSMI6EJN
+P4aaeealffCRVYs7WUisOeKXyvQUB5hG1AmSYXYpfg2MKogEJXKVdVQj0433qGfy
+t0uOVFvpiMRR4Pwopn32In8ZoYypUGbfLuQER4ka5Ltp9kplW3HnXtYw6NBIVXYZ
+qwbu0QTsY2o388VEG1TDbmKrzy00ad+5TQEFROABlp42Jhbd//DnPHpfduR2hnVv
+V5x0pyu+KbeoyUiGlPJv1upFVOfuQ4Cv/GQelKhhS7MWKpNzcGgGVp2iWLO/36pI
+PQ==
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ab:f6:43:cb:ea:8e:b8:47:cc:47:79:76:5a:25:
+                    ca:a0:e6:62:bc:e1:83:a2:b1:83:3a:af:ad:18:d6:
+                    2c:32:f0:c2:f2:bd:b3:e8:d3:b3:ad:02:62:0a:6d:
+                    a1:3c:53:68:6f:8e:93:85:79:15:48:59:10:43:ab:
+                    4b:d9:bf:d4:f2:66:5b:76:b8:bf:4c:1d:fc:c2:51:
+                    e0:22:8a:81:37:2c:7a:af:48:58:91:72:df:d5:32:
+                    60:e5:ab:bc:28:d8:b2:3a:70:81:4d:b8:47:92:d1:
+                    8c:6d:50:69:7f:35:a3:26:44:7a:11:c4:55:49:ed:
+                    75:3a:4b:f7:3c:44:ec:02:b6:f1:89:f7:81:18:86:
+                    79:2f:67:32:42:fb:4c:0c:d6:9c:22:b1:54:53:dd:
+                    b0:6f:bb:e5:d5:0f:5d:4d:5a:a5:30:18:fc:81:40:
+                    c9:88:21:75:01:5f:e1:69:72:fe:b1:08:07:f2:43:
+                    f6:c0:1b:47:7a:05:b7:44:0b:98:ab:31:26:69:4a:
+                    51:c8:08:30:6b:a1:d6:b9:5f:c4:31:30:59:f8:99:
+                    fa:7c:dd:28:b9:6e:04:36:c0:2e:b8:14:cd:b3:ec:
+                    77:36:82:9f:cd:44:27:18:a4:eb:13:24:a1:77:16:
+                    c0:2e:aa:06:81:98:3b:18:c2:b0:c0:14:40:c3:4f:
+                    7b:41
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                4C:53:4B:DD:D4:3C:82:E2:D9:70:27:A7:4B:24:E2:73:91:CB:C7:F9
+            X509v3 Authority Key Identifier: 
+                keyid:49:B1:4D:2A:88:7E:C9:63:36:DE:27:F9:BC:A3:FA:46:A0:94:C9:D2
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         0d:17:49:54:48:07:b7:1a:15:af:4c:e8:0e:b9:b9:60:25:a6:
+         de:c7:e9:23:2c:41:41:82:9b:d1:0d:78:cd:ba:86:fe:b1:3e:
+         2c:ee:be:43:43:7b:5c:85:96:32:75:f5:57:8b:5a:35:1a:24:
+         a0:22:24:4a:4b:56:26:b4:72:a1:73:fe:7e:39:3f:ee:02:4c:
+         29:9f:bc:54:9c:39:b4:67:34:13:00:ec:c9:71:e4:3e:98:05:
+         f3:2e:c7:53:3a:c8:81:c3:73:ab:6f:03:5a:51:35:4a:6e:7a:
+         71:11:b0:49:7d:41:ba:ad:57:40:46:e2:19:a7:bc:d7:65:a4:
+         0a:93:0a:8a:71:20:1f:02:e9:78:ba:8a:00:9d:92:ac:71:0a:
+         9f:a9:dd:59:4d:4d:d5:41:62:0c:df:42:da:3e:44:0b:95:57:
+         90:87:a6:1b:45:28:85:e0:1f:e2:6b:4a:1b:02:fd:c5:ee:63:
+         2a:91:12:a6:5e:96:d2:a8:21:76:0f:08:fc:e3:86:f3:82:dd:
+         95:97:07:13:11:9d:ba:5a:5a:5e:c8:c0:b3:60:5b:04:f1:2b:
+         c8:db:9c:34:87:31:8d:0f:ee:e6:53:48:49:28:53:85:99:a9:
+         e8:f7:6e:fa:a4:63:f0:70:5a:d3:c0:82:c4:c6:f3:8c:be:0e:
+         a2:6c:43:bb
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:f2:45:68:d6:e4:ea:0c:15:58:8e:8a:ed:51:b9:
+                    e9:3c:b7:cd:5c:72:7f:3c:72:45:43:d4:c5:81:0e:
+                    48:5c:b7:0c:f9:02:a8:13:a2:2e:73:6e:3c:82:ca:
+                    ad:b6:01:f8:fa:22:48:a0:3c:d3:fc:c2:8d:ac:be:
+                    ef:85:1a:0f:7d:ba:80:5a:ad:60:8f:18:f3:f9:69:
+                    13:ab:96:4a:26:e2:aa:5b:f8:b5:a1:e0:a7:33:77:
+                    ee:9f:fd:c1:56:f8:10:b2:ca:60:9d:49:26:f2:59:
+                    56:05:0f:8a:6a:38:2f:66:20:5c:a0:d6:a0:d5:73:
+                    97:0e:ff:66:d2:d8:85:6a:40:cd:8b:9e:bf:28:98:
+                    a6:cb:69:b0:04:66:2a:66:a2:2e:3d:8f:55:85:d7:
+                    f4:a0:11:62:22:d2:0f:3d:c0:0b:dc:68:f6:e7:f3:
+                    c0:29:e9:5d:ab:48:eb:79:c5:d3:dc:21:fb:da:24:
+                    72:02:48:56:0f:7c:06:2d:8d:96:c1:60:18:6b:cf:
+                    e8:47:ce:2f:9e:25:71:a8:af:cd:89:cc:37:24:52:
+                    ee:44:60:ce:73:70:82:b1:15:f4:72:2a:ef:6d:27:
+                    57:67:22:f0:2c:2a:79:91:02:57:bb:a7:b9:a2:de:
+                    54:00:1d:ca:2b:96:1e:87:1d:f3:c4:62:7b:8a:39:
+                    6f:63
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                49:B1:4D:2A:88:7E:C9:63:36:DE:27:F9:BC:A3:FA:46:A0:94:C9:D2
+            X509v3 Authority Key Identifier: 
+                keyid:49:B1:4D:2A:88:7E:C9:63:36:DE:27:F9:BC:A3:FA:46:A0:94:C9:D2
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         25:ca:ca:4c:cc:50:78:ed:ea:bc:63:4a:7f:65:64:ba:71:84:
+         ac:43:5e:e4:c6:94:3e:7a:1c:6c:08:ac:23:2f:27:03:6a:a5:
+         a1:06:bf:74:c7:69:72:3b:9d:5a:aa:95:2c:f5:2f:41:6e:eb:
+         8a:16:01:5d:b0:8c:ba:e6:0e:c1:78:d7:bc:ff:80:b7:e3:d5:
+         fa:00:39:51:c2:9d:86:20:b2:c6:5e:c0:6d:1f:e5:f0:fb:78:
+         3f:6c:e7:26:9c:50:21:dd:8b:7a:25:47:67:8a:d6:58:fb:e1:
+         f4:70:76:bc:1c:9b:6a:8c:c0:cf:d0:6c:1d:46:68:6f:ca:72:
+         05:f8:0d:e0:97:db:22:f8:10:15:15:e6:64:a6:19:a2:f8:c7:
+         13:8a:a2:57:d8:09:38:85:8f:1b:b5:6f:f5:f3:47:93:85:e8:
+         18:57:c7:a8:d4:3f:81:7d:eb:1d:43:d9:e6:92:4a:fb:67:0a:
+         f1:ed:29:ec:9e:76:05:86:e8:75:48:bb:ce:38:bf:6a:53:77:
+         61:ec:00:f2:22:31:ae:d6:3c:ba:1c:fb:56:3c:e7:4d:64:ca:
+         bd:f0:6e:8d:f9:db:35:bf:ea:0a:93:b6:3a:72:1f:1b:7b:5a:
+         8b:05:25:83:6b:fe:27:a2:36:c5:c1:79:8a:b3:c3:25:01:97:
+         cd:b4:77:32
+-----BEGIN TRUSTED_CERTIFICATE-----
+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPJFaNbk6gwVWI6K7VG5
+6Ty3zVxyfzxyRUPUxYEOSFy3DPkCqBOiLnNuPILKrbYB+PoiSKA80/zCjay+74Ua
+D326gFqtYI8Y8/lpE6uWSibiqlv4taHgpzN37p/9wVb4ELLKYJ1JJvJZVgUPimo4
+L2YgXKDWoNVzlw7/ZtLYhWpAzYuevyiYpstpsARmKmaiLj2PVYXX9KARYiLSDz3A
+C9xo9ufzwCnpXatI63nF09wh+9okcgJIVg98Bi2NlsFgGGvP6EfOL54lcaivzYnM
+NyRS7kRgznNwgrEV9HIq720nV2ci8CwqeZECV7unuaLeVAAdyiuWHocd88Rie4o5
+b2MCAwEAAaOByzCByDAdBgNVHQ4EFgQUSbFNKoh+yWM23if5vKP6RqCUydIwHwYD
+VR0jBBgwFoAUSbFNKoh+yWM23if5vKP6RqCUydIwNwYIKwYBBQUHAQEEKzApMCcG
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAlyspMzFB4
+7eq8Y0p/ZWS6cYSsQ17kxpQ+ehxsCKwjLycDaqWhBr90x2lyO51aqpUs9S9BbuuK
+FgFdsIy65g7BeNe8/4C349X6ADlRwp2GILLGXsBtH+Xw+3g/bOcmnFAh3Yt6JUdn
+itZY++H0cHa8HJtqjMDP0GwdRmhvynIF+A3gl9si+BAVFeZkphmi+McTiqJX2Ak4
+hY8btW/180eThegYV8eo1D+BfesdQ9nmkkr7Zwrx7SnsnnYFhuh1SLvOOL9qU3dh
+7ADyIjGu1jy6HPtWPOdNZMq98G6N+ds1v+oKk7Y6ch8be1qLBSWDa/4nojbFwXmK
+s8MlAZfNtHcy
+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----