| OLD | NEW |
|---|
| (Empty) | |
| 1 [Created by: generate-target-signed-using-ecdsa.py] |
| 2 |
| 3 Simple certificate where the intermediary has an EC key, but |
| 4 the root and target contain RSA keys. |
| 5 |
| 6 Certificate: |
| 7 Data: |
| 8 Version: 3 (0x2) |
| 9 Serial Number: 1 (0x1) |
| 10 Signature Algorithm: ecdsa-with-SHA256 |
| 11 Issuer: CN=Intermediary |
| 12 Validity |
| 13 Not Before: Jan 1 12:00:00 2015 GMT |
| 14 Not After : Jan 1 12:00:00 2016 GMT |
| 15 Subject: CN=Target |
| 16 Subject Public Key Info: |
| 17 Public Key Algorithm: rsaEncryption |
| 18 Public-Key: (2048 bit) |
| 19 Modulus: |
| 20 00:c7:a5:97:73:19:8e:39:d8:c1:a5:34:30:08:81: |
| 21 c0:12:bc:5a:1d:42:cf:63:6a:10:68:94:50:43:7e: |
| 22 1c:e5:62:a8:3d:77:7d:5a:30:e2:7c:dd:21:68:b0: |
| 23 c2:c6:ef:b4:0f:e3:88:ad:0b:2b:28:6b:1f:40:8c: |
| 24 ae:d1:a7:06:8b:f3:b3:d5:0e:48:f3:84:af:9d:e4: |
| 25 bd:0b:59:56:7b:16:40:be:c5:48:59:58:38:94:3d: |
| 26 78:ac:eb:50:53:cc:22:56:ca:1b:c6:50:31:11:78: |
| 27 33:3f:d3:62:b6:2c:90:36:16:a8:71:10:77:e4:6e: |
| 28 ba:86:1a:da:07:9b:47:92:e6:3a:ca:36:da:72:62: |
| 29 e3:19:70:b9:60:23:60:7e:7d:56:46:f3:49:b7:15: |
| 30 85:29:a2:77:00:25:0e:d4:d6:29:31:fc:03:d4:43: |
| 31 e8:10:cf:51:b9:a2:68:63:8a:01:91:70:9c:29:a4: |
| 32 0a:1a:b8:03:c4:1e:d5:bd:51:85:7e:9a:9a:e5:d2: |
| 33 04:26:1a:02:11:f2:75:9f:60:b6:39:8b:46:9b:48: |
| 34 15:52:d8:44:55:54:cc:82:d1:1f:f6:eb:63:ab:90: |
| 35 ae:a0:5a:87:61:31:8b:83:7f:7d:bd:90:fa:fb:0d: |
| 36 ec:f3:8f:63:47:c1:4e:06:3e:05:f8:76:11:b2:a6: |
| 37 59:55 |
| 38 Exponent: 65537 (0x10001) |
| 39 X509v3 extensions: |
| 40 X509v3 Subject Key Identifier: |
| 41 49:35:CD:0D:2E:4B:B7:13:BB:1C:4F:AB:B5:59:CA:96:E5:6B:78:CF |
| 42 X509v3 Authority Key Identifier: |
| 43 keyid:C4:05:A1:49:A5:36:56:0B:FC:A8:76:9B:50:2A:70:FB:B5:C5:E8:A
B |
| 44 |
| 45 Authority Information Access: |
| 46 CA Issuers - URI:http://url-for-aia/Intermediary.cer |
| 47 |
| 48 X509v3 CRL Distribution Points: |
| 49 |
| 50 Full Name: |
| 51 URI:http://url-for-crl/Intermediary.crl |
| 52 |
| 53 X509v3 Key Usage: critical |
| 54 Digital Signature, Key Encipherment |
| 55 X509v3 Extended Key Usage: |
| 56 TLS Web Server Authentication, TLS Web Client Authentication |
| 57 Signature Algorithm: ecdsa-with-SHA256 |
| 58 30:65:02:31:00:a2:15:ec:4d:14:a0:4e:de:22:fc:41:3b:67: |
| 59 c5:f6:dc:1d:d9:4f:0a:b2:7b:39:be:90:a8:f9:52:3f:8a:24: |
| 60 4d:18:51:3e:1f:0f:ca:64:9f:c9:6b:24:07:0f:a7:99:f2:02: |
| 61 30:54:33:12:c0:a3:92:f2:04:e5:71:20:74:52:e4:20:74:61: |
| 62 f0:20:4c:a8:f4:26:cb:fa:c5:e2:56:1f:93:20:53:0c:3c:cd: |
| 63 6f:21:4c:90:6f:e1:34:9c:30:0c:a1:05:23 |
| 64 -----BEGIN CERTIFICATE----- |
| 65 MIIC7DCCAnKgAwIBAgIBATAKBggqhkjOPQQDAjAXMRUwEwYDVQQDDAxJbnRlcm1l |
| 66 ZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYDVQQD |
| 67 DAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpZdzGY45 |
| 68 2MGlNDAIgcASvFodQs9jahBolFBDfhzlYqg9d31aMOJ83SFosMLG77QP44itCyso |
| 69 ax9AjK7RpwaL87PVDkjzhK+d5L0LWVZ7FkC+xUhZWDiUPXis61BTzCJWyhvGUDER |
| 70 eDM/02K2LJA2FqhxEHfkbrqGGtoHm0eS5jrKNtpyYuMZcLlgI2B+fVZG80m3FYUp |
| 71 oncAJQ7U1ikx/APUQ+gQz1G5omhjigGRcJwppAoauAPEHtW9UYV+mprl0gQmGgIR |
| 72 8nWfYLY5i0abSBVS2ERVVMyC0R/262OrkK6gWodhMYuDf329kPr7Dezzj2NHwU4G |
| 73 PgX4dhGypllVAgMBAAGjgekwgeYwHQYDVR0OBBYEFEk1zQ0uS7cTuxxPq7VZypbl |
| 74 a3jPMB8GA1UdIwQYMBaAFMQFoUmlNlYL/Kh2m1AqcPu1xeirMD8GCCsGAQUFBwEB |
| 75 BDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVkaWFy |
| 76 eS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0ludGVy |
| 77 bWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB |
| 78 BggrBgEFBQcDAjAKBggqhkjOPQQDAgNoADBlAjEAohXsTRSgTt4i/EE7Z8X23B3Z |
| 79 Twqyezm+kKj5Uj+KJE0YUT4fD8pkn8lrJAcPp5nyAjBUMxLAo5LyBOVxIHRS5CB0 |
| 80 YfAgTKj0Jsv6xeJWH5MgUww8zW8hTJBv4TScMAyhBSM= |
| 81 -----END CERTIFICATE----- |
| 82 |
| 83 Certificate: |
| 84 Data: |
| 85 Version: 3 (0x2) |
| 86 Serial Number: 2 (0x2) |
| 87 Signature Algorithm: sha256WithRSAEncryption |
| 88 Issuer: CN=Root |
| 89 Validity |
| 90 Not Before: Jan 1 12:00:00 2015 GMT |
| 91 Not After : Jan 1 12:00:00 2016 GMT |
| 92 Subject: CN=Intermediary |
| 93 Subject Public Key Info: |
| 94 Public Key Algorithm: id-ecPublicKey |
| 95 Public-Key: (384 bit) |
| 96 pub: |
| 97 04:4b:29:88:21:da:e7:c0:8d:7b:8d:cf:69:2f:82: |
| 98 6d:0a:e5:c3:63:6a:66:c6:16:13:ac:2f:10:b5:8b: |
| 99 57:e8:26:d4:49:91:36:10:7c:dc:26:1b:1f:ec:85: |
| 100 37:95:a2:9b:3f:63:d4:ff:1f:0f:27:ed:fa:2d:d2: |
| 101 8f:5c:0c:87:11:2a:22:b7:d7:65:81:3b:f4:48:73: |
| 102 64:dc:6c:30:34:a0:9c:2f:3d:f4:18:b1:40:39:08: |
| 103 e9:5f:df:41:ed:96:fc |
| 104 ASN1 OID: secp384r1 |
| 105 X509v3 extensions: |
| 106 X509v3 Subject Key Identifier: |
| 107 C4:05:A1:49:A5:36:56:0B:FC:A8:76:9B:50:2A:70:FB:B5:C5:E8:AB |
| 108 X509v3 Authority Key Identifier: |
| 109 keyid:8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:0
4 |
| 110 |
| 111 Authority Information Access: |
| 112 CA Issuers - URI:http://url-for-aia/Root.cer |
| 113 |
| 114 X509v3 CRL Distribution Points: |
| 115 |
| 116 Full Name: |
| 117 URI:http://url-for-crl/Root.crl |
| 118 |
| 119 X509v3 Key Usage: critical |
| 120 Certificate Sign, CRL Sign |
| 121 X509v3 Basic Constraints: critical |
| 122 CA:TRUE |
| 123 Signature Algorithm: sha256WithRSAEncryption |
| 124 97:e3:d3:a7:ba:58:f3:2c:bb:91:8c:1f:47:7a:9d:ba:a3:9b: |
| 125 2b:d5:16:64:7d:a6:0a:ab:2a:db:6b:fe:19:18:92:30:c2:3a: |
| 126 97:17:c9:71:be:a7:e7:d3:6c:14:68:2d:06:5d:e4:85:a7:f2: |
| 127 21:e1:33:1e:90:2e:da:f4:be:27:a7:c6:84:46:b0:4d:98:f3: |
| 128 de:cc:bf:68:31:56:c8:40:e2:b3:11:39:ef:65:d8:3f:47:a1: |
| 129 69:87:2d:2c:4f:c8:46:0e:7e:7e:a6:23:23:73:4d:1b:d0:b2: |
| 130 2a:50:bb:e5:fb:1a:58:a0:be:81:37:0b:a7:c4:86:45:ce:ef: |
| 131 a5:ab:73:69:cc:d4:ef:d0:91:45:e1:4d:67:03:3d:0d:79:5c: |
| 132 60:6b:8c:ce:a4:b3:c5:e4:45:51:68:fc:54:f7:9f:00:b8:8c: |
| 133 fb:30:c3:f7:9f:3a:92:16:53:ef:f5:24:12:f3:08:06:22:97: |
| 134 5f:f8:3e:ff:6b:ac:d4:d4:e5:49:c4:2b:a3:56:30:7e:d7:87: |
| 135 0d:b3:53:39:7e:50:0e:6d:38:8a:0b:31:b2:1b:10:73:df:d5: |
| 136 67:70:55:6c:f5:ec:22:91:7a:0c:ba:66:cd:0d:2c:24:35:da: |
| 137 a0:06:c3:dc:d6:0f:0f:6e:ea:63:bf:c9:ba:ae:98:46:04:d6: |
| 138 0f:cc:3e:0e |
| 139 -----BEGIN CERTIFICATE----- |
| 140 MIICvzCCAaegAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 141 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| 142 ZXJtZWRpYXJ5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAESymIIdrnwI17jc9pL4Jt |
| 143 CuXDY2pmxhYTrC8QtYtX6CbUSZE2EHzcJhsf7IU3laKbP2PU/x8PJ+36LdKPXAyH |
| 144 ESoit9dlgTv0SHNk3GwwNKCcLz30GLFAOQjpX99B7Zb8o4HLMIHIMB0GA1UdDgQW |
| 145 BBTEBaFJpTZWC/yodptQKnD7tcXoqzAfBgNVHSMEGDAWgBSM2N5laFB/OJ6VuWk4 |
| 146 KAjHa4FqBDA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwt |
| 147 Zm9yLWFpYS9Sb290LmNlcjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZv |
| 148 ci1jcmwvUm9vdC5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w |
| 149 DQYJKoZIhvcNAQELBQADggEBAJfj06e6WPMsu5GMH0d6nbqjmyvVFmR9pgqrKttr |
| 150 /hkYkjDCOpcXyXG+p+fTbBRoLQZd5IWn8iHhMx6QLtr0vienxoRGsE2Y897Mv2gx |
| 151 VshA4rMROe9l2D9HoWmHLSxPyEYOfn6mIyNzTRvQsipQu+X7GligvoE3C6fEhkXO |
| 152 76Wrc2nM1O/QkUXhTWcDPQ15XGBrjM6ks8XkRVFo/FT3nwC4jPsww/efOpIWU+/1 |
| 153 JBLzCAYil1/4Pv9rrNTU5UnEK6NWMH7Xhw2zUzl+UA5tOIoLMbIbEHPf1WdwVWz1 |
| 154 7CKRegy6Zs0NLCQ12qAGw9zWDw9u6mO/ybqumEYE1g/MPg4= |
| 155 -----END CERTIFICATE----- |
| 156 |
| 157 Certificate: |
| 158 Data: |
| 159 Version: 3 (0x2) |
| 160 Serial Number: 1 (0x1) |
| 161 Signature Algorithm: sha256WithRSAEncryption |
| 162 Issuer: CN=Root |
| 163 Validity |
| 164 Not Before: Jan 1 12:00:00 2015 GMT |
| 165 Not After : Jan 1 12:00:00 2016 GMT |
| 166 Subject: CN=Root |
| 167 Subject Public Key Info: |
| 168 Public Key Algorithm: rsaEncryption |
| 169 Public-Key: (2048 bit) |
| 170 Modulus: |
| 171 00:ce:54:ae:89:0b:94:ed:af:85:32:d3:25:71:d4: |
| 172 9b:f0:54:e5:4e:47:4d:90:91:77:f1:16:ba:e6:a1: |
| 173 c3:e2:55:83:d4:8c:c7:d3:a5:74:77:d8:3e:8e:c0: |
| 174 4d:54:a7:87:fc:ea:82:2f:a0:07:72:c8:9f:5b:d8: |
| 175 fd:c7:94:6e:16:64:f9:92:4e:08:30:70:11:83:61: |
| 176 65:55:a7:94:3b:a2:09:c8:c8:49:c5:4d:d2:f7:bf: |
| 177 75:e5:b2:6b:b0:e1:40:79:0f:af:14:90:67:38:f0: |
| 178 3d:47:dd:cd:f9:7b:57:c3:d3:03:9d:67:1d:2f:1e: |
| 179 22:54:07:9e:71:2f:a6:9f:05:d8:8c:63:2d:9a:4f: |
| 180 97:6d:12:35:9f:d4:c8:ba:88:ff:3c:f4:7f:5b:1d: |
| 181 0f:81:c0:a0:21:98:8b:4f:08:af:84:2a:a6:ee:e7: |
| 182 85:e1:f7:12:f7:23:c8:fd:2c:43:f4:0a:5f:d7:e1: |
| 183 47:1c:4e:65:e4:13:c6:0f:37:5d:62:78:f7:cd:41: |
| 184 b5:67:65:77:4a:9c:de:da:e3:4c:57:0a:a1:2f:2d: |
| 185 37:6e:41:05:a0:60:bf:57:b8:13:69:51:98:f1:a7: |
| 186 5f:90:e6:57:c9:74:11:cc:b8:70:75:25:15:11:d2: |
| 187 0f:31:28:44:d0:14:37:9b:a7:c4:4b:07:8c:95:4d: |
| 188 26:45 |
| 189 Exponent: 65537 (0x10001) |
| 190 X509v3 extensions: |
| 191 X509v3 Subject Key Identifier: |
| 192 8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:04 |
| 193 X509v3 Authority Key Identifier: |
| 194 keyid:8C:D8:DE:65:68:50:7F:38:9E:95:B9:69:38:28:08:C7:6B:81:6A:0
4 |
| 195 |
| 196 Authority Information Access: |
| 197 CA Issuers - URI:http://url-for-aia/Root.cer |
| 198 |
| 199 X509v3 CRL Distribution Points: |
| 200 |
| 201 Full Name: |
| 202 URI:http://url-for-crl/Root.crl |
| 203 |
| 204 X509v3 Key Usage: critical |
| 205 Certificate Sign, CRL Sign |
| 206 X509v3 Basic Constraints: critical |
| 207 CA:TRUE |
| 208 Signature Algorithm: sha256WithRSAEncryption |
| 209 0a:fe:e1:09:d2:48:71:2c:48:23:41:a9:43:00:98:b0:29:6f: |
| 210 1f:fc:7a:60:ee:16:b4:90:34:2c:de:89:19:5a:9f:ec:65:1a: |
| 211 9f:e6:f3:73:de:50:3f:50:97:0b:55:d7:4d:80:98:64:39:b9: |
| 212 a5:83:d5:0f:5f:28:79:52:30:f9:ab:3b:1b:c7:bd:8e:ed:de: |
| 213 03:ea:fc:7b:c2:3f:35:24:1c:82:b1:9e:cb:ac:9c:cb:7d:38: |
| 214 4d:38:18:01:86:6c:57:77:a1:a9:af:62:95:bb:86:46:ca:17: |
| 215 66:6e:29:a1:0a:c5:fe:22:1f:43:71:5e:ed:f3:3c:5e:a8:b0: |
| 216 41:cb:b2:56:5e:cb:15:5f:4d:3d:2e:31:89:7d:51:7a:bd:61: |
| 217 30:1f:17:49:a4:e3:5e:6c:af:1c:a7:18:63:bb:6f:14:5f:29: |
| 218 94:77:50:45:5d:9c:24:ee:bd:a9:6a:b9:b5:b6:82:ee:d3:d7: |
| 219 00:06:9c:dd:7c:f3:26:fa:b2:34:00:65:1b:e9:c7:83:d7:f1: |
| 220 d8:cb:77:fe:c9:d8:79:81:93:d7:81:56:16:86:32:f7:2e:77: |
| 221 10:24:05:4d:e3:52:a2:3d:65:77:1a:19:4e:92:1c:24:dd:da: |
| 222 7d:5c:fb:0d:b0:94:79:c7:58:f4:f1:2c:7e:d6:02:69:3f:63: |
| 223 c1:d2:ae:df |
| 224 -----BEGIN TRUSTED_CERTIFICATE----- |
| 225 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 226 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 227 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM5UrokLlO2vhTLTJXHU |
| 228 m/BU5U5HTZCRd/EWuuahw+JVg9SMx9OldHfYPo7ATVSnh/zqgi+gB3LIn1vY/ceU |
| 229 bhZk+ZJOCDBwEYNhZVWnlDuiCcjIScVN0ve/deWya7DhQHkPrxSQZzjwPUfdzfl7 |
| 230 V8PTA51nHS8eIlQHnnEvpp8F2IxjLZpPl20SNZ/UyLqI/zz0f1sdD4HAoCGYi08I |
| 231 r4Qqpu7nheH3EvcjyP0sQ/QKX9fhRxxOZeQTxg83XWJ4981BtWdld0qc3trjTFcK |
| 232 oS8tN25BBaBgv1e4E2lRmPGnX5DmV8l0Ecy4cHUlFRHSDzEoRNAUN5unxEsHjJVN |
| 233 JkUCAwEAAaOByzCByDAdBgNVHQ4EFgQUjNjeZWhQfzielblpOCgIx2uBagQwHwYD |
| 234 VR0jBBgwFoAUjNjeZWhQfzielblpOCgIx2uBagQwNwYIKwYBBQUHAQEEKzApMCcG |
| 235 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 236 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 237 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAK/uEJ0khx |
| 238 LEgjQalDAJiwKW8f/Hpg7ha0kDQs3okZWp/sZRqf5vNz3lA/UJcLVddNgJhkObml |
| 239 g9UPXyh5UjD5qzsbx72O7d4D6vx7wj81JByCsZ7LrJzLfThNOBgBhmxXd6Gpr2KV |
| 240 u4ZGyhdmbimhCsX+Ih9DcV7t8zxeqLBBy7JWXssVX009LjGJfVF6vWEwHxdJpONe |
| 241 bK8cpxhju28UXymUd1BFXZwk7r2parm1toLu09cABpzdfPMm+rI0AGUb6ceD1/HY |
| 242 y3f+ydh5gZPXgVYWhjL3LncQJAVN41KiPWV3GhlOkhwk3dp9XPsNsJR5x1j08Sx+ |
| 243 1gJpP2PB0q7f |
| 244 -----END TRUSTED_CERTIFICATE----- |
| 245 |
| 246 -----BEGIN TIME----- |
| 247 MTUwMzAyMTIwMDAwWg== |
| 248 -----END TIME----- |
| 249 |
| 250 -----BEGIN VERIFY_RESULT----- |
| 251 U1VDQ0VTUw== |
| 252 -----END VERIFY_RESULT----- |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 1414393008:
Add scripts to generate simple test data for certificate verification. (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@key_usages