Add scripts to generate simple test data for certificate verification.

net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem

+[Created by: generate-intermediary-unknown-non-critical-extension.py]
+
+Simple certificate chain with 1 intermediary and a trusted
+root. The intermediary has an unknown X.509 extension that is marked as
+non-critical
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediary
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Target
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c1:b7:e9:8a:1c:e9:9c:13:16:1c:65:6d:5c:4a:
+                    3d:e8:de:e6:97:6b:64:18:86:f4:9e:d9:42:8b:20:
+                    90:39:af:6d:30:9f:df:55:dc:99:a5:65:61:c3:76:
+                    2d:18:69:fd:81:f6:ef:76:40:4c:12:5e:fa:dc:70:
+                    42:b6:65:e4:50:1d:26:06:30:2d:3c:c7:fd:03:93:
+                    7f:9e:40:b9:97:3e:d1:7a:f0:2f:cf:9c:6a:92:55:
+                    fc:34:7c:06:3e:18:d1:1b:37:8a:54:d2:7b:a2:ff:
+                    65:79:bf:5f:ab:0a:f8:55:62:76:02:52:7c:49:f6:
+                    17:34:dd:67:47:7f:06:18:1d:07:99:dd:85:8d:91:
+                    45:fb:22:48:2a:a2:a9:90:53:fc:82:97:6f:67:4f:
+                    3a:ff:5e:ae:d8:d4:c4:30:7f:6e:d3:eb:c3:d5:8a:
+                    c3:48:da:1b:f0:08:77:af:9a:62:ef:1f:2d:92:5b:
+                    24:d9:c7:91:fc:99:bc:9b:99:de:de:3a:0b:47:a8:
+                    e8:e7:c6:92:09:a5:64:05:5b:76:b4:e8:e4:f1:fc:
+                    9c:d9:6e:b3:9c:58:79:cb:a6:05:c8:96:86:ad:84:
+                    36:d6:02:81:d2:dc:58:07:28:8c:7d:e1:3f:c7:a1:
+                    84:a6:2b:97:84:c2:97:79:64:ae:f9:e4:af:0f:f7:
+                    53:95
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                D4:A3:B6:8F:38:27:47:E0:B4:B1:9B:3D:E3:A0:D2:F0:97:7B:4D:AB
+            X509v3 Authority Key Identifier: 
+                keyid:E1:CB:12:A2:68:A3:8C:43:3A:BE:B9:FF:95:5F:FA:8C:39:72:B0:B9
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediary.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         8f:b1:ef:ec:56:f5:a4:66:07:54:42:e6:0d:98:e4:8e:bb:54:
+         0f:83:0e:c6:01:50:34:a2:20:82:4e:91:c7:da:3c:80:ee:a7:
+         93:0b:ce:3c:35:5d:8d:4d:5c:20:d3:18:10:30:cb:48:5a:2e:
+         7b:0a:52:06:12:cf:07:92:88:7e:33:5d:f0:e6:da:e9:7e:3a:
+         d9:f9:52:50:ca:77:2a:17:10:68:61:b2:3b:b8:fd:8e:d7:c0:
+         58:7c:89:67:aa:a1:77:77:91:1a:6d:d9:57:b8:4a:0a:71:88:
+         04:d9:1d:68:5c:2b:0a:c4:ef:81:8d:e9:f5:3d:49:db:13:b3:
+         71:04:fa:57:0b:fd:0f:5e:e0:63:a0:6c:fb:00:bd:f7:b0:04:
+         0d:c4:9d:11:0f:4a:77:a9:55:79:9d:9f:f9:92:8c:04:0b:d6:
+         b3:f2:55:4f:30:89:fa:f8:a4:ae:02:a7:68:03:87:03:3a:fd:
+         fa:fb:76:10:81:f7:82:20:df:32:57:8c:27:65:6a:cd:2d:31:
+         06:07:ab:16:09:7b:b0:f9:a7:e4:5a:e3:1c:d4:6d:1c:e3:73:
+         1e:24:08:f5:0a:c2:78:ef:a7:40:77:c7:d1:fe:32:3c:11:14:
+         89:a3:32:5b:95:f3:1c:38:a5:5e:0b:e2:b1:1f:1a:1c:94:e6:
+         ee:07:de:46
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Intermediary
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:d8:56:38:8a:85:69:0c:30:35:e3:cb:b0:51:c7:
+                    f5:40:69:84:8c:00:dc:66:b2:4c:6b:de:aa:2c:66:
+                    0f:4c:bb:f5:54:9b:4f:d7:f9:15:0d:50:18:fd:ae:
+                    04:c1:06:7e:e4:61:27:1a:3a:14:86:e9:0c:f1:f8:
+                    77:86:70:52:88:6b:73:ee:6f:34:40:5e:ec:e2:82:
+                    3f:c7:fe:86:74:a1:3b:62:c5:1d:16:58:b6:b1:ae:
+                    7e:7a:13:b6:1c:fe:22:4e:74:62:79:83:55:c6:9c:
+                    1f:04:e0:4e:67:02:a2:91:08:58:d3:df:5e:d8:ce:
+                    60:6e:17:6d:44:40:cf:0e:b1:81:03:42:cc:48:32:
+                    1b:b3:72:e6:be:3b:81:12:45:7f:51:c6:cc:cd:cf:
+                    87:b3:1c:46:a6:00:de:74:4c:9a:17:87:36:f3:fb:
+                    57:3a:3f:fe:7a:a0:f3:2d:5b:28:c7:38:67:65:20:
+                    e1:33:84:82:92:96:4c:39:37:54:82:65:20:de:24:
+                    89:8a:ca:6b:ce:9c:a2:47:db:fd:b4:76:c9:aa:5b:
+                    84:05:52:2d:28:8c:39:32:fb:49:71:77:70:5d:ef:
+                    9c:f4:20:8f:d3:95:1a:60:07:8e:70:12:c1:cc:ea:
+                    16:0b:d9:dd:a0:e2:bc:10:88:48:16:be:5c:59:e9:
+                    5e:c7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                E1:CB:12:A2:68:A3:8C:43:3A:BE:B9:FF:95:5F:FA:8C:39:72:B0:B9
+            X509v3 Authority Key Identifier: 
+                keyid:C1:A1:74:FE:32:C9:66:87:0C:BE:1F:07:4F:98:17:D4:F1:E2:D8:D9
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            1.2.3.4: 
+                ....
+    Signature Algorithm: sha256WithRSAEncryption
+         b4:a0:0b:d7:4b:4b:6a:6f:0f:84:4f:cf:85:be:5a:5d:02:7e:
+         be:00:5b:b7:81:48:7c:3e:ce:67:ad:89:50:6c:a9:39:8a:00:
+         02:22:9f:8f:6d:60:78:78:25:b5:4e:90:ac:ce:c0:b5:2b:42:
+         79:80:c2:6a:ac:f3:97:5e:fa:e1:95:06:d4:43:7a:4c:f9:08:
+         35:e0:e2:43:69:cd:a5:dc:f6:5f:83:29:ce:23:48:c1:3d:e9:
+         a1:ee:e1:bd:0b:4d:e4:6d:3b:10:27:fa:70:af:94:18:2a:4c:
+         03:5d:f5:ad:84:41:de:b0:a4:a0:07:dd:5f:05:1b:6c:a5:64:
+         e1:d7:91:96:71:5e:b6:17:35:76:57:0f:44:13:90:03:a2:18:
+         66:e3:b8:e4:21:6c:b0:b5:5d:73:33:70:7c:fe:cb:04:26:d3:
+         6d:cb:85:c6:8e:d6:cb:59:8a:da:4d:13:41:51:41:3e:14:f9:
+         f1:5a:c8:84:4c:4d:f2:32:f1:35:50:a6:d9:dd:93:aa:aa:fd:
+         ba:e4:0a:0b:85:82:0d:9c:6b:b4:19:f5:43:c6:79:8f:d6:3d:
+         e7:cb:fe:12:89:76:d8:fe:ef:23:0c:2d:cf:33:8e:a4:a1:63:
+         77:2e:ac:31:2c:99:08:20:63:e9:3d:dd:bf:80:ba:0a:87:d7:
+         c7:41:ac:42
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2016 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b5:e5:68:a7:46:a0:0a:aa:9e:33:33:90:74:a7:
+                    1a:f7:ce:f6:29:aa:95:c7:3e:f5:4e:80:67:3b:d1:
+                    15:75:6c:97:60:4e:69:df:74:3a:d9:6f:93:32:3c:
+                    9f:9b:c8:aa:d9:57:bb:11:23:b9:4e:18:23:69:18:
+                    30:af:d1:ea:d4:18:fe:38:9d:af:8e:1d:19:32:e7:
+                    26:ae:c8:cb:ff:35:b3:f1:5b:83:db:89:5c:05:71:
+                    17:3e:cc:84:99:1f:df:08:cc:cc:10:e5:42:d4:5e:
+                    ab:30:d8:1c:93:65:2e:bc:71:3e:5d:0a:18:4f:bd:
+                    2b:ee:d9:a1:53:b6:88:35:61:da:d9:2a:cd:9d:80:
+                    ae:71:5d:cf:ed:b3:27:db:1c:7c:f2:52:7d:5f:80:
+                    f3:fa:1c:b0:f2:e6:a3:3f:5d:f1:0e:5a:f7:03:7e:
+                    72:78:ca:22:70:5a:88:7a:23:10:e6:3b:bf:32:62:
+                    d4:dc:a4:35:fa:f1:ae:61:e7:f0:c2:8d:08:14:37:
+                    c7:81:b6:30:33:38:07:ca:ec:f3:df:36:24:5f:03:
+                    cd:03:68:b5:63:0a:d4:bb:27:b7:95:8c:ac:99:e8:
+                    de:d4:9a:e5:b9:3b:0e:90:1a:4d:e6:8d:ae:56:43:
+                    16:bb:97:fe:ec:f9:c1:91:9a:20:ba:57:b0:d9:5a:
+                    34:f7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                C1:A1:74:FE:32:C9:66:87:0C:BE:1F:07:4F:98:17:D4:F1:E2:D8:D9
+            X509v3 Authority Key Identifier: 
+                keyid:C1:A1:74:FE:32:C9:66:87:0C:BE:1F:07:4F:98:17:D4:F1:E2:D8:D9
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         08:93:30:0b:f8:b4:8c:f4:e8:c7:47:60:41:2e:77:76:df:0c:
+         93:40:68:07:82:fc:fe:6d:e5:83:77:34:df:d7:82:52:7c:31:
+         1d:1e:03:76:f7:0e:ac:42:cf:f9:f4:c2:ce:17:32:1a:6c:cb:
+         70:0c:71:31:bc:dd:e4:bf:c2:12:14:d2:22:84:b9:ce:de:3f:
+         d2:63:bd:de:c2:72:24:64:9b:87:3d:7e:24:67:fb:62:f7:d3:
+         1c:78:c1:0a:58:21:7b:c0:d0:d0:8b:97:67:9d:a7:b1:48:e0:
+         a2:d7:fb:51:0d:9b:8b:15:8f:71:2b:cc:ee:23:20:9c:54:c4:
+         31:c5:b4:bd:5c:78:73:c3:7b:1b:c7:4e:8b:d8:d8:0b:29:73:
+         7c:df:f7:fc:fa:8e:13:c7:16:34:6f:1a:43:e2:7d:dd:be:09:
+         17:5f:e2:1f:eb:1a:a1:e9:79:67:a7:f4:73:cb:53:89:9d:44:
+         ad:81:b1:0a:60:76:21:08:21:9b:db:18:0a:58:cb:d0:56:a8:
+         ca:fa:20:c5:a0:a3:91:55:41:3a:cf:f1:b5:56:35:03:05:5a:
+         38:e1:90:b4:57:07:62:20:63:6f:f9:bf:f8:6d:39:a1:14:c6:
+         ec:14:8a:2c:9a:42:65:c3:4f:cd:7f:51:12:1b:7f:0f:cf:02:
+         c9:eb:73:03
+-----BEGIN TRUSTED_CERTIFICATE-----
+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXlaKdGoAqqnjMzkHSn
+GvfO9imqlcc+9U6AZzvRFXVsl2BOad90OtlvkzI8n5vIqtlXuxEjuU4YI2kYMK/R
+6tQY/jidr44dGTLnJq7Iy/81s/Fbg9uJXAVxFz7MhJkf3wjMzBDlQtReqzDYHJNl
+LrxxPl0KGE+9K+7ZoVO2iDVh2tkqzZ2ArnFdz+2zJ9scfPJSfV+A8/ocsPLmoz9d
+8Q5a9wN+cnjKInBaiHojEOY7vzJi1NykNfrxrmHn8MKNCBQ3x4G2MDM4B8rs8982
+JF8DzQNotWMK1Lsnt5WMrJno3tSa5bk7DpAaTeaNrlZDFruX/uz5wZGaILpXsNla
+NPcCAwEAAaOByzCByDAdBgNVHQ4EFgQUwaF0/jLJZocMvh8HT5gX1PHi2NkwHwYD
+VR0jBBgwFoAUwaF0/jLJZocMvh8HT5gX1PHi2NkwNwYIKwYBBQUHAQEEKzApMCcG
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAIkzAL+LSM
+9OjHR2BBLnd23wyTQGgHgvz+beWDdzTf14JSfDEdHgN29w6sQs/59MLOFzIabMtw
+DHExvN3kv8ISFNIihLnO3j/SY73ewnIkZJuHPX4kZ/ti99MceMEKWCF7wNDQi5dn
+naexSOCi1/tRDZuLFY9xK8zuIyCcVMQxxbS9XHhzw3sbx06L2NgLKXN83/f8+o4T
+xxY0bxpD4n3dvgkXX+If6xqh6Xlnp/Rzy1OJnUStgbEKYHYhCCGb2xgKWMvQVqjK
++iDFoKORVUE6z/G1VjUDBVo44ZC0VwdiIGNv+b/4bTmhFMbsFIosmkJlw0/Nf1ES
+G38PzwLJ63MD
+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----