| OLD | NEW |
| (Empty) | |
| 1 [Created by: generate-unknown-root.py] |
| 2 |
| 3 Simple certificate chain with 1 intermediary, but the root is |
| 4 not in trust store |
| 5 |
| 6 Certificate: |
| 7 Data: |
| 8 Version: 3 (0x2) |
| 9 Serial Number: 1 (0x1) |
| 10 Signature Algorithm: sha256WithRSAEncryption |
| 11 Issuer: CN=Intermediary |
| 12 Validity |
| 13 Not Before: Jan 1 12:00:00 2015 GMT |
| 14 Not After : Jan 1 12:00:00 2016 GMT |
| 15 Subject: CN=Target |
| 16 Subject Public Key Info: |
| 17 Public Key Algorithm: rsaEncryption |
| 18 Public-Key: (2048 bit) |
| 19 Modulus: |
| 20 00:a7:a7:9f:7d:20:e6:23:62:f2:bf:27:09:09:ae: |
| 21 11:78:c7:1d:f2:ed:e2:fa:4d:55:b1:c8:ca:60:82: |
| 22 42:fd:5e:8e:4c:48:e2:0e:8e:27:36:c9:2b:4f:2b: |
| 23 30:94:51:6c:a0:01:55:b3:38:4b:aa:73:f0:9c:90: |
| 24 f2:a9:8f:5e:fa:ca:d9:07:4b:86:56:7c:9d:7d:43: |
| 25 30:a0:92:e1:6c:19:e8:5e:68:57:b6:f9:5c:53:f8: |
| 26 ed:4e:6a:22:a1:c9:be:8c:f1:03:6f:05:bf:1b:01: |
| 27 64:26:fd:6c:c0:0d:dc:55:e4:fc:0e:48:c8:29:b3: |
| 28 be:8e:3c:00:ca:69:1b:22:7e:2d:da:72:e6:f3:64: |
| 29 78:99:6c:a2:38:06:62:4e:2e:1f:ee:df:64:cc:4a: |
| 30 77:86:10:d3:84:63:1f:a0:3c:a5:76:bf:c7:56:22: |
| 31 27:ff:b5:6c:93:1c:8a:4d:6c:e0:3e:1b:f0:5a:39: |
| 32 94:ca:28:27:bc:70:48:f4:13:d6:df:d6:b1:11:6f: |
| 33 40:ae:b3:98:19:78:e5:f8:7e:79:7b:2c:95:f1:f1: |
| 34 f5:d6:8b:66:03:40:3c:d5:cf:35:65:1d:14:0e:ac: |
| 35 bb:a5:b4:dd:0c:0f:6e:a1:6a:69:f8:54:e8:46:ea: |
| 36 5f:98:ab:1a:b5:aa:52:56:9f:ad:02:8c:20:e5:a4: |
| 37 d7:15 |
| 38 Exponent: 65537 (0x10001) |
| 39 X509v3 extensions: |
| 40 X509v3 Subject Key Identifier: |
| 41 67:54:57:46:B5:AD:7A:5C:A7:B3:AB:C1:B0:AD:FA:B5:F0:02:DC:6C |
| 42 X509v3 Authority Key Identifier: |
| 43 keyid:75:6C:7D:98:64:46:F7:F6:0D:55:A9:3E:38:3A:5B:C9:DB:DA:DA:6
F |
| 44 |
| 45 Authority Information Access: |
| 46 CA Issuers - URI:http://url-for-aia/Intermediary.cer |
| 47 |
| 48 X509v3 CRL Distribution Points: |
| 49 |
| 50 Full Name: |
| 51 URI:http://url-for-crl/Intermediary.crl |
| 52 |
| 53 X509v3 Key Usage: critical |
| 54 Digital Signature, Key Encipherment |
| 55 X509v3 Extended Key Usage: |
| 56 TLS Web Server Authentication, TLS Web Client Authentication |
| 57 Signature Algorithm: sha256WithRSAEncryption |
| 58 46:20:0f:59:ab:0c:68:97:ab:d8:ea:b9:30:db:ef:83:71:07: |
| 59 dc:3b:15:a7:00:8e:f5:f7:31:1d:4b:e9:ed:cc:63:ea:d6:4f: |
| 60 85:22:de:be:c2:8f:7a:2c:98:20:55:c3:46:a0:5e:f0:67:66: |
| 61 b4:dd:40:a4:02:73:48:13:23:e7:89:4c:b3:bb:71:64:c6:04: |
| 62 15:35:e0:eb:99:91:b4:30:55:c4:77:93:9e:ab:ec:68:f1:20: |
| 63 6a:1b:a8:b9:90:41:69:aa:86:72:cf:9e:0b:4f:2f:b0:44:73: |
| 64 b5:f0:4f:62:77:aa:dc:c4:fb:97:8e:57:10:a4:20:d8:cf:25: |
| 65 0b:c7:68:f4:c0:da:9b:21:75:83:95:9b:f5:b5:c1:ea:85:cd: |
| 66 ed:f8:59:51:19:7e:d0:0c:b8:1f:d7:56:a2:b8:18:d7:b6:c2: |
| 67 90:3f:a6:7a:62:76:e0:aa:f7:48:8e:c1:1b:5a:1d:ec:a1:36: |
| 68 30:26:de:ac:39:fc:67:1b:47:9f:ac:e8:d0:a6:47:15:7e:e0: |
| 69 74:22:84:65:6d:a7:fe:c5:84:73:aa:f1:43:47:93:e0:16:13: |
| 70 e6:b6:c8:6d:8f:11:25:bc:d7:45:29:0b:c3:12:e6:e5:05:b6: |
| 71 4f:eb:21:c3:fc:27:a5:41:d5:7b:55:99:2c:d5:61:a1:16:38: |
| 72 e7:3c:f2:c9 |
| 73 -----BEGIN CERTIFICATE----- |
| 74 MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl |
| 75 cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD |
| 76 VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnp599 |
| 77 IOYjYvK/JwkJrhF4xx3y7eL6TVWxyMpggkL9Xo5MSOIOjic2yStPKzCUUWygAVWz |
| 78 OEuqc/CckPKpj176ytkHS4ZWfJ19QzCgkuFsGeheaFe2+VxT+O1OaiKhyb6M8QNv |
| 79 Bb8bAWQm/WzADdxV5PwOSMgps76OPADKaRsifi3acubzZHiZbKI4BmJOLh/u32TM |
| 80 SneGENOEYx+gPKV2v8dWIif/tWyTHIpNbOA+G/BaOZTKKCe8cEj0E9bf1rERb0Cu |
| 81 s5gZeOX4fnl7LJXx8fXWi2YDQDzVzzVlHRQOrLultN0MD26hamn4VOhG6l+Yqxq1 |
| 82 qlJWn60CjCDlpNcVAgMBAAGjgekwgeYwHQYDVR0OBBYEFGdUV0a1rXpcp7OrwbCt |
| 83 +rXwAtxsMB8GA1UdIwQYMBaAFHVsfZhkRvf2DVWpPjg6W8nb2tpvMD8GCCsGAQUF |
| 84 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk |
| 85 aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu |
| 86 dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF |
| 87 BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEARiAPWasMaJer2Oq5MNvv |
| 88 g3EH3DsVpwCO9fcxHUvp7cxj6tZPhSLevsKPeiyYIFXDRqBe8GdmtN1ApAJzSBMj |
| 89 54lMs7txZMYEFTXg65mRtDBVxHeTnqvsaPEgahuouZBBaaqGcs+eC08vsERztfBP |
| 90 Yneq3MT7l45XEKQg2M8lC8do9MDamyF1g5Wb9bXB6oXN7fhZURl+0Ay4H9dWorgY |
| 91 17bCkD+memJ24Kr3SI7BG1od7KE2MCberDn8ZxtHn6zo0KZHFX7gdCKEZW2n/sWE |
| 92 c6rxQ0eT4BYT5rbIbY8RJbzXRSkLwxLm5QW2T+shw/wnpUHVe1WZLNVhoRY45zzy |
| 93 yQ== |
| 94 -----END CERTIFICATE----- |
| 95 |
| 96 Certificate: |
| 97 Data: |
| 98 Version: 3 (0x2) |
| 99 Serial Number: 2 (0x2) |
| 100 Signature Algorithm: sha256WithRSAEncryption |
| 101 Issuer: CN=Root |
| 102 Validity |
| 103 Not Before: Jan 1 12:00:00 2015 GMT |
| 104 Not After : Jan 1 12:00:00 2016 GMT |
| 105 Subject: CN=Intermediary |
| 106 Subject Public Key Info: |
| 107 Public Key Algorithm: rsaEncryption |
| 108 Public-Key: (2048 bit) |
| 109 Modulus: |
| 110 00:c0:e7:ef:17:ad:a9:ad:1c:4e:0a:fb:d2:47:d7: |
| 111 18:d4:d6:28:9a:68:7e:47:d5:b2:dc:a3:22:8b:d3: |
| 112 f4:23:67:7b:59:20:f9:76:4c:be:95:29:ef:fd:ef: |
| 113 a1:ba:72:1b:52:8a:85:b5:5a:64:59:d2:fb:50:7c: |
| 114 b6:7d:00:79:f3:26:3a:fa:f9:d9:8f:cf:4d:ce:ef: |
| 115 2e:ce:43:0f:4e:5b:74:42:fb:41:d2:21:5f:db:3e: |
| 116 ac:6f:2f:99:1d:d8:38:fe:ca:d2:4e:55:69:73:41: |
| 117 07:82:93:5e:25:4e:fd:87:cb:2e:06:4b:20:02:dd: |
| 118 76:2a:6a:d7:a7:9f:9a:fe:d0:fe:39:a9:33:d5:90: |
| 119 9b:36:37:23:d4:d3:11:ee:1f:16:1c:a4:1c:1d:fc: |
| 120 db:09:6f:0b:58:f5:d4:d4:f6:4f:9f:c8:16:54:ee: |
| 121 61:07:b2:64:f8:b9:91:62:12:93:ab:d1:23:1b:c4: |
| 122 25:9d:b0:a4:72:34:df:9e:a9:4d:71:28:44:94:be: |
| 123 36:31:ab:59:0a:ac:3d:6f:b3:3c:d7:d0:25:8f:be: |
| 124 14:fc:31:2d:4a:44:cc:87:39:7b:a2:58:a9:fe:d5: |
| 125 8d:70:40:58:7f:f7:eb:f0:11:3c:91:31:dd:94:06: |
| 126 d1:37:27:f9:50:85:31:1d:cf:0f:64:d6:b1:f0:df: |
| 127 07:ad |
| 128 Exponent: 65537 (0x10001) |
| 129 X509v3 extensions: |
| 130 X509v3 Subject Key Identifier: |
| 131 75:6C:7D:98:64:46:F7:F6:0D:55:A9:3E:38:3A:5B:C9:DB:DA:DA:6F |
| 132 X509v3 Authority Key Identifier: |
| 133 keyid:1F:C3:67:60:53:E1:07:52:B5:92:8E:46:41:E5:3C:43:88:ED:20:3
A |
| 134 |
| 135 Authority Information Access: |
| 136 CA Issuers - URI:http://url-for-aia/Root.cer |
| 137 |
| 138 X509v3 CRL Distribution Points: |
| 139 |
| 140 Full Name: |
| 141 URI:http://url-for-crl/Root.crl |
| 142 |
| 143 X509v3 Key Usage: critical |
| 144 Certificate Sign, CRL Sign |
| 145 X509v3 Basic Constraints: critical |
| 146 CA:TRUE |
| 147 Signature Algorithm: sha256WithRSAEncryption |
| 148 56:b1:93:87:27:f4:8a:38:6b:9a:1a:68:d3:ce:9b:ad:0f:d2: |
| 149 78:1e:46:c4:18:ab:39:01:c4:73:f5:c3:ab:8b:61:98:76:9a: |
| 150 34:a2:62:8b:16:e0:a6:48:fe:4b:a1:b4:c1:bd:e9:0f:bb:d5: |
| 151 3b:25:73:62:f2:9f:69:5b:23:5b:d0:72:71:ad:63:bb:41:9e: |
| 152 65:ef:98:b5:e6:85:ed:2c:d7:cc:6c:b5:b0:e1:bd:57:1f:5b: |
| 153 25:e1:27:e3:74:3e:70:9e:5c:e1:12:53:83:73:40:1a:fb:71: |
| 154 eb:29:79:b0:d6:be:0d:0e:f0:ee:11:2d:39:db:8c:b6:bb:b7: |
| 155 7b:36:0f:5b:77:6b:2a:7a:ab:f1:15:91:bf:e6:34:31:f2:d1: |
| 156 ce:de:46:1c:19:fc:59:69:aa:3e:76:6c:98:21:95:9d:c1:f3: |
| 157 ca:31:0b:7f:94:08:a2:a4:90:2d:a2:26:72:75:63:db:43:cc: |
| 158 0e:22:4a:70:9d:fb:54:13:9a:10:76:31:bc:99:24:dc:6e:da: |
| 159 fd:f0:84:3e:3c:22:50:2f:7e:c3:02:78:90:f2:02:53:db:2a: |
| 160 1f:3a:3f:92:cd:44:e3:0a:87:60:15:89:eb:55:58:9f:1f:78: |
| 161 b5:06:5c:ce:c0:8a:99:d1:71:11:f7:88:ce:e4:7d:6a:25:d7: |
| 162 07:74:06:3e |
| 163 -----BEGIN CERTIFICATE----- |
| 164 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 165 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| 166 ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOfvF62p |
| 167 rRxOCvvSR9cY1NYommh+R9Wy3KMii9P0I2d7WSD5dky+lSnv/e+hunIbUoqFtVpk |
| 168 WdL7UHy2fQB58yY6+vnZj89Nzu8uzkMPTlt0QvtB0iFf2z6sby+ZHdg4/srSTlVp |
| 169 c0EHgpNeJU79h8suBksgAt12KmrXp5+a/tD+Oakz1ZCbNjcj1NMR7h8WHKQcHfzb |
| 170 CW8LWPXU1PZPn8gWVO5hB7Jk+LmRYhKTq9EjG8QlnbCkcjTfnqlNcShElL42MatZ |
| 171 Cqw9b7M819Alj74U/DEtSkTMhzl7olip/tWNcEBYf/fr8BE8kTHdlAbRNyf5UIUx |
| 172 Hc8PZNax8N8HrQIDAQABo4HLMIHIMB0GA1UdDgQWBBR1bH2YZEb39g1VqT44OlvJ |
| 173 29rabzAfBgNVHSMEGDAWgBQfw2dgU+EHUrWSjkZB5TxDiO0gOjA3BggrBgEFBQcB |
| 174 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs |
| 175 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD |
| 176 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB |
| 177 AFaxk4cn9Io4a5oaaNPOm60P0ngeRsQYqzkBxHP1w6uLYZh2mjSiYosW4KZI/kuh |
| 178 tMG96Q+71Tslc2Lyn2lbI1vQcnGtY7tBnmXvmLXmhe0s18xstbDhvVcfWyXhJ+N0 |
| 179 PnCeXOESU4NzQBr7cespebDWvg0O8O4RLTnbjLa7t3s2D1t3ayp6q/EVkb/mNDHy |
| 180 0c7eRhwZ/Flpqj52bJghlZ3B88oxC3+UCKKkkC2iJnJ1Y9tDzA4iSnCd+1QTmhB2 |
| 181 MbyZJNxu2v3whD48IlAvfsMCeJDyAlPbKh86P5LNROMKh2AVietVWJ8feLUGXM7A |
| 182 ipnRcRH3iM7kfWol1wd0Bj4= |
| 183 -----END CERTIFICATE----- |
| 184 |
| 185 -----BEGIN TIME----- |
| 186 MTUwMzAyMTIwMDAwWg== |
| 187 -----END TIME----- |
| 188 |
| 189 -----BEGIN VERIFY_RESULT----- |
| 190 RkFJTA== |
| 191 -----END VERIFY_RESULT----- |
| OLD | NEW |