| OLD | NEW |
|---|
| (Empty) | |
| 1 [Created by: generate-target-signed-by-512bit-rsa.py] |
| 2 |
| 3 Certificate chain with 1 intermediary. The target certificate |
| 4 is signed using a weak RSA key (512-bit modulus) |
| 5 |
| 6 Certificate: |
| 7 Data: |
| 8 Version: 3 (0x2) |
| 9 Serial Number: 1 (0x1) |
| 10 Signature Algorithm: sha256WithRSAEncryption |
| 11 Issuer: CN=Intermediary |
| 12 Validity |
| 13 Not Before: Jan 1 12:00:00 2015 GMT |
| 14 Not After : Jan 1 12:00:00 2016 GMT |
| 15 Subject: CN=Target |
| 16 Subject Public Key Info: |
| 17 Public Key Algorithm: rsaEncryption |
| 18 Public-Key: (2048 bit) |
| 19 Modulus: |
| 20 00:c8:5b:ad:84:e3:ed:c5:df:f8:56:3a:f8:be:5b: |
| 21 73:75:85:77:d6:56:ab:32:0d:39:ce:cc:5e:c8:7c: |
| 22 df:8e:b0:ec:f6:d9:4e:c8:f4:3c:65:e8:4b:12:c8: |
| 23 8f:9e:c3:3a:76:b8:e2:b1:fb:fa:14:8c:2a:ab:14: |
| 24 53:ea:36:73:d2:3f:a1:a9:d1:8d:bf:9a:f1:cf:a8: |
| 25 9a:0b:2b:e8:7c:90:a1:07:77:a1:55:49:8d:ba:1e: |
| 26 0a:f5:a1:35:eb:bd:5a:79:88:03:95:90:64:7a:63: |
| 27 a4:f4:59:60:76:8e:b9:51:55:91:06:99:8f:92:03: |
| 28 6a:3e:7f:c3:6b:79:62:86:ed:12:3c:4a:bd:5e:e7: |
| 29 13:66:7b:a8:8d:bf:24:ed:64:1e:e5:bf:15:30:e7: |
| 30 10:41:3d:a8:3c:e1:f9:64:68:c1:d2:cf:6d:71:29: |
| 31 96:29:6b:b5:01:d4:eb:c2:61:9e:b1:53:3a:0f:a2: |
| 32 f1:41:ea:85:14:2f:bb:d1:2e:d3:8d:6f:ea:c6:ee: |
| 33 6d:6f:0f:31:78:a8:b6:1a:52:41:c4:dc:05:f5:b5: |
| 34 77:5d:f6:67:36:bd:a8:14:87:4d:64:55:b6:6a:c3: |
| 35 14:22:bf:96:89:6a:d4:e6:47:e4:c1:4c:d3:ce:a8: |
| 36 18:1d:c9:fb:f3:61:74:df:ba:af:55:1f:3d:93:66: |
| 37 59:db |
| 38 Exponent: 65537 (0x10001) |
| 39 X509v3 extensions: |
| 40 X509v3 Subject Key Identifier: |
| 41 15:CF:99:16:65:4E:52:DD:B5:A1:77:C5:E0:87:47:6D:BE:14:67:78 |
| 42 X509v3 Authority Key Identifier: |
| 43 keyid:65:CB:CE:36:6B:AC:32:D4:75:C8:A9:27:70:3C:48:98:FD:50:4B:1
7 |
| 44 |
| 45 Authority Information Access: |
| 46 CA Issuers - URI:http://url-for-aia/Intermediary.cer |
| 47 |
| 48 X509v3 CRL Distribution Points: |
| 49 |
| 50 Full Name: |
| 51 URI:http://url-for-crl/Intermediary.crl |
| 52 |
| 53 X509v3 Key Usage: critical |
| 54 Digital Signature, Key Encipherment |
| 55 X509v3 Extended Key Usage: |
| 56 TLS Web Server Authentication, TLS Web Client Authentication |
| 57 Signature Algorithm: sha256WithRSAEncryption |
| 58 b1:c0:9a:79:94:0d:3d:4a:2a:24:ed:72:ef:f9:5a:5b:eb:e3: |
| 59 03:d8:10:25:76:59:95:de:ca:04:9c:25:56:ba:cc:b3:40:28: |
| 60 82:e4:56:20:31:de:de:a8:85:4a:a4:23:bc:5d:73:d8:44:2b: |
| 61 07:b0:ce:99:59:15:d9:18:69:56 |
| 62 -----BEGIN CERTIFICATE----- |
| 63 MIICyzCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
| 64 cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD |
| 65 VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIW62E |
| 66 4+3F3/hWOvi+W3N1hXfWVqsyDTnOzF7IfN+OsOz22U7I9Dxl6EsSyI+ewzp2uOKx |
| 67 +/oUjCqrFFPqNnPSP6Gp0Y2/mvHPqJoLK+h8kKEHd6FVSY26Hgr1oTXrvVp5iAOV |
| 68 kGR6Y6T0WWB2jrlRVZEGmY+SA2o+f8NreWKG7RI8Sr1e5xNme6iNvyTtZB7lvxUw |
| 69 5xBBPag84flkaMHSz21xKZYpa7UB1OvCYZ6xUzoPovFB6oUUL7vRLtONb+rG7m1v |
| 70 DzF4qLYaUkHE3AX1tXdd9mc2vagUh01kVbZqwxQiv5aJatTmR+TBTNPOqBgdyfvz |
| 71 YXTfuq9VHz2TZlnbAgMBAAGjgekwgeYwHQYDVR0OBBYEFBXPmRZlTlLdtaF3xeCH |
| 72 R22+FGd4MB8GA1UdIwQYMBaAFGXLzjZrrDLUdcipJ3A8SJj9UEsXMD8GCCsGAQUF |
| 73 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk |
| 74 aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu |
| 75 dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF |
| 76 BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBALHAmnmUDT1KKiTtcu/5Wlvr |
| 77 4wPYECV2WZXeygScJVa6zLNAKILkViAx3t6ohUqkI7xdc9hEKwewzplZFdkYaVY= |
| 78 -----END CERTIFICATE----- |
| 79 |
| 80 Certificate: |
| 81 Data: |
| 82 Version: 3 (0x2) |
| 83 Serial Number: 2 (0x2) |
| 84 Signature Algorithm: sha256WithRSAEncryption |
| 85 Issuer: CN=Root |
| 86 Validity |
| 87 Not Before: Jan 1 12:00:00 2015 GMT |
| 88 Not After : Jan 1 12:00:00 2016 GMT |
| 89 Subject: CN=Intermediary |
| 90 Subject Public Key Info: |
| 91 Public Key Algorithm: rsaEncryption |
| 92 Public-Key: (512 bit) |
| 93 Modulus: |
| 94 00:de:29:ae:77:48:9c:90:70:78:54:da:89:3b:1a: |
| 95 39:af:f1:51:da:e4:5f:14:79:d1:a7:ae:5a:37:4e: |
| 96 e7:88:8a:b7:f5:77:ed:38:b0:54:11:7c:31:72:6b: |
| 97 c0:da:64:41:b5:fa:b6:67:0d:78:eb:54:72:90:25: |
| 98 53:c3:b2:9c:99 |
| 99 Exponent: 65537 (0x10001) |
| 100 X509v3 extensions: |
| 101 X509v3 Subject Key Identifier: |
| 102 65:CB:CE:36:6B:AC:32:D4:75:C8:A9:27:70:3C:48:98:FD:50:4B:17 |
| 103 X509v3 Authority Key Identifier: |
| 104 keyid:18:ED:A3:61:31:FF:C6:AD:A6:26:A6:04:76:B4:3B:CE:55:D9:66:1
8 |
| 105 |
| 106 Authority Information Access: |
| 107 CA Issuers - URI:http://url-for-aia/Root.cer |
| 108 |
| 109 X509v3 CRL Distribution Points: |
| 110 |
| 111 Full Name: |
| 112 URI:http://url-for-crl/Root.crl |
| 113 |
| 114 X509v3 Key Usage: critical |
| 115 Certificate Sign, CRL Sign |
| 116 X509v3 Basic Constraints: critical |
| 117 CA:TRUE |
| 118 Signature Algorithm: sha256WithRSAEncryption |
| 119 69:d5:65:ff:bb:a9:1b:af:5b:37:c4:aa:6c:f4:8a:77:a6:7a: |
| 120 b3:f2:6d:7d:b0:19:8e:ff:72:fc:31:fe:5e:96:ab:e3:14:96: |
| 121 81:02:cc:ee:c6:34:6e:a7:31:47:18:fb:92:b1:2b:14:ea:1b: |
| 122 95:2a:fe:8f:2a:ae:41:52:23:18:56:b2:bd:bc:17:93:31:0f: |
| 123 e7:41:b0:27:30:99:f1:2c:89:45:0c:37:d3:6d:ee:6e:50:d7: |
| 124 7d:52:a2:af:ac:24:28:aa:1a:93:9f:52:3f:3c:e1:44:b1:8b: |
| 125 09:99:51:45:87:91:57:ae:71:f2:03:a1:07:9f:90:a3:e9:75: |
| 126 64:4b:dc:7f:34:26:89:8d:8e:f0:c3:21:de:5e:f1:3a:9e:ab: |
| 127 b1:c6:3d:77:9f:50:ea:0d:80:59:27:8f:64:4c:1b:d5:75:01: |
| 128 29:a8:f7:e0:62:33:f3:c0:14:38:62:e4:29:0d:c6:4a:3c:f6: |
| 129 93:16:79:7f:99:7b:50:ff:1f:dc:38:a5:4a:ac:4c:9b:5c:16: |
| 130 ed:90:37:87:3e:0d:b3:79:df:77:67:00:b7:9b:8b:9d:c4:41: |
| 131 37:f9:dd:fb:5d:d8:74:89:90:6c:7c:c9:80:44:1e:e8:f7:97: |
| 132 4b:85:b6:7f:73:b7:f0:75:2b:73:6b:78:b7:e5:02:dd:01:23: |
| 133 27:58:25:84 |
| 134 -----BEGIN CERTIFICATE----- |
| 135 MIICpTCCAY2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 136 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| 137 ZXJtZWRpYXJ5MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN4prndInJBweFTaiTsa |
| 138 Oa/xUdrkXxR50aeuWjdO54iKt/V37TiwVBF8MXJrwNpkQbX6tmcNeOtUcpAlU8Oy |
| 139 nJkCAwEAAaOByzCByDAdBgNVHQ4EFgQUZcvONmusMtR1yKkncDxImP1QSxcwHwYD |
| 140 VR0jBBgwFoAUGO2jYTH/xq2mJqYEdrQ7zlXZZhgwNwYIKwYBBQUHAQEEKzApMCcG |
| 141 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 142 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 143 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBp1WX/u6kb |
| 144 r1s3xKps9Ip3pnqz8m19sBmO/3L8Mf5elqvjFJaBAszuxjRupzFHGPuSsSsU6huV |
| 145 Kv6PKq5BUiMYVrK9vBeTMQ/nQbAnMJnxLIlFDDfTbe5uUNd9UqKvrCQoqhqTn1I/ |
| 146 POFEsYsJmVFFh5FXrnHyA6EHn5Cj6XVkS9x/NCaJjY7wwyHeXvE6nquxxj13n1Dq |
| 147 DYBZJ49kTBvVdQEpqPfgYjPzwBQ4YuQpDcZKPPaTFnl/mXtQ/x/cOKVKrEybXBbt |
| 148 kDeHPg2zed93ZwC3m4udxEE3+d37Xdh0iZBsfMmARB7o95dLhbZ/c7fwdStza3i3 |
| 149 5QLdASMnWCWE |
| 150 -----END CERTIFICATE----- |
| 151 |
| 152 Certificate: |
| 153 Data: |
| 154 Version: 3 (0x2) |
| 155 Serial Number: 1 (0x1) |
| 156 Signature Algorithm: sha256WithRSAEncryption |
| 157 Issuer: CN=Root |
| 158 Validity |
| 159 Not Before: Jan 1 12:00:00 2015 GMT |
| 160 Not After : Jan 1 12:00:00 2016 GMT |
| 161 Subject: CN=Root |
| 162 Subject Public Key Info: |
| 163 Public Key Algorithm: rsaEncryption |
| 164 Public-Key: (2048 bit) |
| 165 Modulus: |
| 166 00:c0:09:f4:9e:79:58:3e:c7:95:2b:65:8d:20:eb: |
| 167 b0:28:e0:66:b9:87:5a:24:85:a0:e5:29:08:6d:07: |
| 168 41:1e:44:61:3f:95:24:83:71:14:6b:55:e1:9f:fd: |
| 169 a0:b5:ee:63:d5:95:70:fe:6d:ad:dd:de:bb:88:3d: |
| 170 36:d4:41:6d:04:20:48:fb:15:1a:7d:82:4e:f3:ad: |
| 171 5f:80:45:b8:41:c0:79:e6:3d:e9:7c:ba:ca:14:3d: |
| 172 f4:bf:81:c1:6e:95:f4:fe:2d:6d:05:22:d3:76:7a: |
| 173 91:74:06:aa:f0:1e:68:d2:b4:d8:33:9f:07:e6:d9: |
| 174 af:94:9b:7a:8d:2a:cf:5f:ca:86:6a:73:38:62:3d: |
| 175 52:13:f9:03:f8:26:f3:71:96:8f:72:19:90:a9:58: |
| 176 25:bc:3d:b0:b2:95:81:db:2c:d6:8e:14:e8:7a:27: |
| 177 23:43:23:74:17:23:41:e3:59:9e:98:df:6a:eb:3a: |
| 178 6d:b7:cc:ec:3a:91:88:35:f8:cb:37:3b:4f:2c:a8: |
| 179 48:69:d4:94:7d:f3:e3:cc:ba:58:82:fb:92:b5:f6: |
| 180 b0:b4:07:cf:65:58:7a:9c:31:e1:f0:2f:86:ff:63: |
| 181 59:35:be:3f:01:8f:92:25:ba:b9:0d:3b:96:4b:02: |
| 182 0f:8a:e3:1c:95:54:7e:a5:60:21:a0:10:37:21:e5: |
| 183 ae:07 |
| 184 Exponent: 65537 (0x10001) |
| 185 X509v3 extensions: |
| 186 X509v3 Subject Key Identifier: |
| 187 18:ED:A3:61:31:FF:C6:AD:A6:26:A6:04:76:B4:3B:CE:55:D9:66:18 |
| 188 X509v3 Authority Key Identifier: |
| 189 keyid:18:ED:A3:61:31:FF:C6:AD:A6:26:A6:04:76:B4:3B:CE:55:D9:66:1
8 |
| 190 |
| 191 Authority Information Access: |
| 192 CA Issuers - URI:http://url-for-aia/Root.cer |
| 193 |
| 194 X509v3 CRL Distribution Points: |
| 195 |
| 196 Full Name: |
| 197 URI:http://url-for-crl/Root.crl |
| 198 |
| 199 X509v3 Key Usage: critical |
| 200 Certificate Sign, CRL Sign |
| 201 X509v3 Basic Constraints: critical |
| 202 CA:TRUE |
| 203 Signature Algorithm: sha256WithRSAEncryption |
| 204 49:ab:73:fe:09:f0:15:b7:5d:33:06:1f:f0:bd:30:b7:33:e9: |
| 205 9c:14:33:45:53:88:da:88:8b:47:ca:a2:a1:2b:48:87:b0:9c: |
| 206 0d:ab:9f:4a:39:86:4c:11:2f:3a:f3:c6:9f:8c:56:ba:fd:4e: |
| 207 51:31:22:9a:56:7a:01:9d:12:a8:f0:ee:8c:5e:ea:48:02:4f: |
| 208 d6:18:84:e4:c8:8f:f3:f1:e5:c6:b1:bf:88:0b:26:0b:cc:d9: |
| 209 f7:d9:17:ff:79:43:df:a6:a9:07:95:93:ca:9b:cd:70:91:01: |
| 210 06:83:7e:2e:b7:ca:06:09:3c:da:ea:50:7c:6e:10:e1:23:c1: |
| 211 b2:32:4d:87:9a:03:ee:59:89:cd:02:5a:30:57:0d:ad:c5:bf: |
| 212 01:f6:d3:92:ff:01:51:34:98:d4:ac:d5:4a:f2:73:09:58:f4: |
| 213 f3:cf:7b:2b:cf:a5:ff:e5:c1:ad:e5:c5:a0:96:4b:d8:63:aa: |
| 214 6c:23:bb:ce:21:ac:80:18:3f:25:0c:7f:25:5d:dc:15:f6:41: |
| 215 bc:e0:8f:23:17:0c:50:13:a9:1e:ca:23:4b:05:65:b6:0d:b7: |
| 216 5b:35:82:33:30:5b:f4:14:77:c3:9a:e9:6d:d5:57:ec:e9:96: |
| 217 73:3d:19:88:26:27:8c:24:af:4f:9e:88:cb:cb:78:13:a5:15: |
| 218 6f:ca:59:22 |
| 219 -----BEGIN TRUSTED_CERTIFICATE----- |
| 220 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 221 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 222 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMAJ9J55WD7HlStljSDr |
| 223 sCjgZrmHWiSFoOUpCG0HQR5EYT+VJINxFGtV4Z/9oLXuY9WVcP5trd3eu4g9NtRB |
| 224 bQQgSPsVGn2CTvOtX4BFuEHAeeY96Xy6yhQ99L+BwW6V9P4tbQUi03Z6kXQGqvAe |
| 225 aNK02DOfB+bZr5Sbeo0qz1/KhmpzOGI9UhP5A/gm83GWj3IZkKlYJbw9sLKVgdss |
| 226 1o4U6HonI0MjdBcjQeNZnpjfaus6bbfM7DqRiDX4yzc7TyyoSGnUlH3z48y6WIL7 |
| 227 krX2sLQHz2VYepwx4fAvhv9jWTW+PwGPkiW6uQ07lksCD4rjHJVUfqVgIaAQNyHl |
| 228 rgcCAwEAAaOByzCByDAdBgNVHQ4EFgQUGO2jYTH/xq2mJqYEdrQ7zlXZZhgwHwYD |
| 229 VR0jBBgwFoAUGO2jYTH/xq2mJqYEdrQ7zlXZZhgwNwYIKwYBBQUHAQEEKzApMCcG |
| 230 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 231 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 232 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBJq3P+CfAV |
| 233 t10zBh/wvTC3M+mcFDNFU4jaiItHyqKhK0iHsJwNq59KOYZMES8688afjFa6/U5R |
| 234 MSKaVnoBnRKo8O6MXupIAk/WGITkyI/z8eXGsb+ICyYLzNn32Rf/eUPfpqkHlZPK |
| 235 m81wkQEGg34ut8oGCTza6lB8bhDhI8GyMk2HmgPuWYnNAlowVw2txb8B9tOS/wFR |
| 236 NJjUrNVK8nMJWPTzz3srz6X/5cGt5cWglkvYY6psI7vOIayAGD8lDH8lXdwV9kG8 |
| 237 4I8jFwxQE6keyiNLBWW2DbdbNYIzMFv0FHfDmult1Vfs6ZZzPRmIJieMJK9PnojL |
| 238 y3gTpRVvylki |
| 239 -----END TRUSTED_CERTIFICATE----- |
| 240 |
| 241 -----BEGIN TIME----- |
| 242 MTUwMzAyMTIwMDAwWg== |
| 243 -----END TIME----- |
| 244 |
| 245 -----BEGIN VERIFY_RESULT----- |
| 246 RkFJTA== |
| 247 -----END VERIFY_RESULT----- |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 1414393008:
Add scripts to generate simple test data for certificate verification. (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@key_usages