| OLD | NEW |
|---|
| (Empty) | |
| 1 [Created by: generate-target-signed-using-ecdsa.py] |
| 2 |
| 3 Certificate chain with a trusted root using RSA, and intermediary using EC, |
| 4 and a target certificate using RSA. Verification is expected to succeed. |
| 5 |
| 6 Certificate: |
| 7 Data: |
| 8 Version: 3 (0x2) |
| 9 Serial Number: 1 (0x1) |
| 10 Signature Algorithm: ecdsa-with-SHA256 |
| 11 Issuer: CN=Intermediary |
| 12 Validity |
| 13 Not Before: Jan 1 12:00:00 2015 GMT |
| 14 Not After : Jan 1 12:00:00 2016 GMT |
| 15 Subject: CN=Target |
| 16 Subject Public Key Info: |
| 17 Public Key Algorithm: rsaEncryption |
| 18 Public-Key: (2048 bit) |
| 19 Modulus: |
| 20 00:f5:15:82:5b:5b:ef:98:fd:63:b3:5b:08:9c:21: |
| 21 8b:be:10:f1:3a:ab:17:e8:f2:9c:37:24:80:41:6a: |
| 22 87:71:1d:9a:ea:c3:a6:f7:25:e3:09:03:3f:92:2e: |
| 23 e1:bc:9e:fd:70:65:e9:29:21:4f:46:01:12:20:e2: |
| 24 08:d9:bd:86:40:5d:3d:b9:6a:c5:ad:3f:dc:82:00: |
| 25 75:7b:da:26:a1:c9:49:f2:b5:30:6c:40:07:94:c6: |
| 26 f4:41:1f:88:3a:d7:89:ab:86:79:50:cc:85:8e:f6: |
| 27 a4:fc:7b:03:70:74:1e:6e:09:98:ff:b4:8a:ea:c0: |
| 28 c1:e3:07:ff:8d:f8:e8:bc:f5:fd:6e:aa:db:fc:26: |
| 29 2e:44:bd:52:e3:66:f5:58:6d:ea:0c:30:19:ed:8f: |
| 30 db:cd:1f:40:20:2f:36:35:d7:63:b5:d7:2c:e8:4b: |
| 31 d3:e2:90:82:2f:27:4d:22:8a:94:e3:fb:c7:40:77: |
| 32 e2:e0:56:c7:70:b6:ae:9b:e9:7c:fa:b5:d0:40:34: |
| 33 dd:0b:59:96:0d:ba:84:47:87:62:c1:3e:1f:21:5b: |
| 34 3b:15:56:3a:8b:e8:4e:6c:02:c8:da:dc:b3:2b:a3: |
| 35 b9:7e:c6:dc:06:94:9b:0c:ea:fc:7e:02:d3:3f:d2: |
| 36 87:30:da:c4:41:1a:5f:1f:89:c9:6f:39:96:e5:fd: |
| 37 3a:c9 |
| 38 Exponent: 65537 (0x10001) |
| 39 X509v3 extensions: |
| 40 X509v3 Subject Key Identifier: |
| 41 0A:36:4B:AA:5E:42:C2:6B:CE:3C:58:0C:33:53:9B:ED:09:42:89:B9 |
| 42 X509v3 Authority Key Identifier: |
| 43 keyid:A4:A1:01:1C:8F:94:62:C3:11:19:36:76:04:DC:A9:AF:6F:B6:11:9
C |
| 44 |
| 45 Authority Information Access: |
| 46 CA Issuers - URI:http://url-for-aia/Intermediary.cer |
| 47 |
| 48 X509v3 CRL Distribution Points: |
| 49 |
| 50 Full Name: |
| 51 URI:http://url-for-crl/Intermediary.crl |
| 52 |
| 53 X509v3 Key Usage: critical |
| 54 Digital Signature, Key Encipherment |
| 55 X509v3 Extended Key Usage: |
| 56 TLS Web Server Authentication, TLS Web Client Authentication |
| 57 Signature Algorithm: ecdsa-with-SHA256 |
| 58 30:64:02:30:3b:0e:cc:c2:70:77:25:fe:01:46:fb:e7:fe:ee: |
| 59 68:07:50:f1:14:b8:9a:6f:53:bb:1f:4f:7f:ba:62:d2:76:06: |
| 60 4b:d4:93:8a:1b:f6:3c:96:91:8c:57:90:a2:99:5d:0b:02:30: |
| 61 3e:98:92:c5:01:13:f9:d4:21:bc:44:14:a6:9b:b9:8e:f0:86: |
| 62 ec:67:c8:12:07:74:41:8c:f0:f3:e8:b7:cc:e3:23:a0:a1:05: |
| 63 2f:66:73:be:62:9b:1c:ce:70:fe:eb:09 |
| 64 -----BEGIN CERTIFICATE----- |
| 65 MIIC6zCCAnKgAwIBAgIBATAKBggqhkjOPQQDAjAXMRUwEwYDVQQDDAxJbnRlcm1l |
| 66 ZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYDVQQD |
| 67 DAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FYJbW++Y |
| 68 /WOzWwicIYu+EPE6qxfo8pw3JIBBaodxHZrqw6b3JeMJAz+SLuG8nv1wZekpIU9G |
| 69 ARIg4gjZvYZAXT25asWtP9yCAHV72iahyUnytTBsQAeUxvRBH4g614mrhnlQzIWO |
| 70 9qT8ewNwdB5uCZj/tIrqwMHjB/+N+Oi89f1uqtv8Ji5EvVLjZvVYbeoMMBntj9vN |
| 71 H0AgLzY112O11yzoS9PikIIvJ00iipTj+8dAd+LgVsdwtq6b6Xz6tdBANN0LWZYN |
| 72 uoRHh2LBPh8hWzsVVjqL6E5sAsja3LMro7l+xtwGlJsM6vx+AtM/0ocw2sRBGl8f |
| 73 iclvOZbl/TrJAgMBAAGjgekwgeYwHQYDVR0OBBYEFAo2S6peQsJrzjxYDDNTm+0J |
| 74 Qom5MB8GA1UdIwQYMBaAFKShARyPlGLDERk2dgTcqa9vthGcMD8GCCsGAQUFBwEB |
| 75 BDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVkaWFy |
| 76 eS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0ludGVy |
| 77 bWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB |
| 78 BggrBgEFBQcDAjAKBggqhkjOPQQDAgNnADBkAjA7DszCcHcl/gFG++f+7mgHUPEU |
| 79 uJpvU7sfT3+6YtJ2BkvUk4ob9jyWkYxXkKKZXQsCMD6YksUBE/nUIbxEFKabuY7w |
| 80 huxnyBIHdEGM8PPot8zjI6ChBS9mc75imxzOcP7rCQ== |
| 81 -----END CERTIFICATE----- |
| 82 |
| 83 Certificate: |
| 84 Data: |
| 85 Version: 3 (0x2) |
| 86 Serial Number: 2 (0x2) |
| 87 Signature Algorithm: sha256WithRSAEncryption |
| 88 Issuer: CN=Root |
| 89 Validity |
| 90 Not Before: Jan 1 12:00:00 2015 GMT |
| 91 Not After : Jan 1 12:00:00 2016 GMT |
| 92 Subject: CN=Intermediary |
| 93 Subject Public Key Info: |
| 94 Public Key Algorithm: id-ecPublicKey |
| 95 Public-Key: (384 bit) |
| 96 pub: |
| 97 04:ca:bc:6c:d5:4b:51:ef:d3:7d:8a:46:12:ab:5f: |
| 98 d4:f3:3c:7d:eb:40:8b:de:0f:79:6d:6f:a4:40:0f: |
| 99 96:51:8a:00:20:48:7a:d3:d4:30:2e:5b:1d:9f:e1: |
| 100 00:3e:54:cb:93:62:21:7c:09:57:2e:43:38:08:77: |
| 101 5c:1c:8b:aa:17:c1:22:c0:db:01:bf:c0:80:0a:24: |
| 102 68:0d:2d:ce:51:e4:a3:2a:c9:42:0b:7c:57:82:31: |
| 103 94:2f:b7:a8:42:9c:4e |
| 104 ASN1 OID: secp384r1 |
| 105 X509v3 extensions: |
| 106 X509v3 Subject Key Identifier: |
| 107 A4:A1:01:1C:8F:94:62:C3:11:19:36:76:04:DC:A9:AF:6F:B6:11:9C |
| 108 X509v3 Authority Key Identifier: |
| 109 keyid:E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:5
3 |
| 110 |
| 111 Authority Information Access: |
| 112 CA Issuers - URI:http://url-for-aia/Root.cer |
| 113 |
| 114 X509v3 CRL Distribution Points: |
| 115 |
| 116 Full Name: |
| 117 URI:http://url-for-crl/Root.crl |
| 118 |
| 119 X509v3 Key Usage: critical |
| 120 Certificate Sign, CRL Sign |
| 121 X509v3 Basic Constraints: critical |
| 122 CA:TRUE |
| 123 Signature Algorithm: sha256WithRSAEncryption |
| 124 22:50:e8:71:34:bf:8b:44:c5:4e:82:31:fd:50:48:f4:fa:3a: |
| 125 01:4a:f9:71:a6:a9:a2:d0:1e:bc:d3:1d:dc:ac:8f:4e:db:58: |
| 126 8a:6b:a2:64:29:6e:f5:1b:0b:87:2e:f5:bd:dd:92:7a:5f:4e: |
| 127 a6:aa:1d:b4:7c:f2:eb:5a:2b:17:83:99:29:1f:2b:12:45:9b: |
| 128 1a:cd:d3:b1:71:a3:d9:7d:cf:78:f4:64:ce:03:a5:0b:c7:98: |
| 129 e8:73:58:e2:26:47:5c:c0:ed:ac:c0:11:b8:39:11:19:39:fc: |
| 130 01:b6:4c:a2:f5:4a:ae:a3:9e:3c:82:73:3e:b5:2c:28:63:ec: |
| 131 14:a2:9f:a7:d7:4b:3e:f3:56:50:f6:9e:87:9b:d1:38:fa:78: |
| 132 2e:7f:29:fe:4a:a8:d6:43:c4:05:d6:d6:67:7f:52:90:36:53: |
| 133 ff:a6:78:1f:7f:f7:ad:66:65:7d:4b:57:3c:d6:b3:19:9d:08: |
| 134 af:d2:5b:1a:76:42:ff:b2:6b:2c:0d:d1:1d:05:c0:d8:28:02: |
| 135 9b:cb:f6:1d:7a:35:93:b9:c9:76:2d:d3:ef:f4:07:bf:d6:8b: |
| 136 33:2a:83:69:8a:68:63:0a:b9:45:f6:e4:12:38:37:87:d6:53: |
| 137 46:33:ae:f8:72:d3:e5:e9:93:bb:ba:db:8d:73:01:b1:79:0f: |
| 138 d8:1c:a0:d0 |
| 139 -----BEGIN CERTIFICATE----- |
| 140 MIICvzCCAaegAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 141 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| 142 ZXJtZWRpYXJ5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEyrxs1UtR79N9ikYSq1/U |
| 143 8zx960CL3g95bW+kQA+WUYoAIEh609QwLlsdn+EAPlTLk2IhfAlXLkM4CHdcHIuq |
| 144 F8EiwNsBv8CACiRoDS3OUeSjKslCC3xXgjGUL7eoQpxOo4HLMIHIMB0GA1UdDgQW |
| 145 BBSkoQEcj5RiwxEZNnYE3Kmvb7YRnDAfBgNVHSMEGDAWgBTprHMJtobNlUIpXeXs |
| 146 x5kpEpGMUzA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwt |
| 147 Zm9yLWFpYS9Sb290LmNlcjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZv |
| 148 ci1jcmwvUm9vdC5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w |
| 149 DQYJKoZIhvcNAQELBQADggEBACJQ6HE0v4tExU6CMf1QSPT6OgFK+XGmqaLQHrzT |
| 150 Hdysj07bWIpromQpbvUbC4cu9b3dknpfTqaqHbR88utaKxeDmSkfKxJFmxrN07Fx |
| 151 o9l9z3j0ZM4DpQvHmOhzWOImR1zA7azAEbg5ERk5/AG2TKL1Sq6jnjyCcz61LChj |
| 152 7BSin6fXSz7zVlD2noeb0Tj6eC5/Kf5KqNZDxAXW1md/UpA2U/+meB9/961mZX1L |
| 153 VzzWsxmdCK/SWxp2Qv+yaywN0R0FwNgoApvL9h16NZO5yXYt0+/0B7/WizMqg2mK |
| 154 aGMKuUX25BI4N4fWU0Yzrvhy0+Xpk7u6241zAbF5D9gcoNA= |
| 155 -----END CERTIFICATE----- |
| 156 |
| 157 Certificate: |
| 158 Data: |
| 159 Version: 3 (0x2) |
| 160 Serial Number: 1 (0x1) |
| 161 Signature Algorithm: sha256WithRSAEncryption |
| 162 Issuer: CN=Root |
| 163 Validity |
| 164 Not Before: Jan 1 12:00:00 2015 GMT |
| 165 Not After : Jan 1 12:00:00 2016 GMT |
| 166 Subject: CN=Root |
| 167 Subject Public Key Info: |
| 168 Public Key Algorithm: rsaEncryption |
| 169 Public-Key: (2048 bit) |
| 170 Modulus: |
| 171 00:b8:3c:af:88:6d:5e:96:7e:58:90:09:5d:40:54: |
| 172 11:4f:55:ff:bb:e7:94:1b:ba:d7:df:b9:47:c3:ff: |
| 173 84:71:22:da:a8:89:e6:98:71:4b:ae:d8:c1:19:df: |
| 174 4f:69:bf:c2:3d:da:0a:a8:65:08:a8:c3:2c:aa:34: |
| 175 c7:a2:b9:00:45:6f:2e:69:6e:90:ee:9b:a2:f6:20: |
| 176 0d:75:17:c2:33:e0:59:2c:7d:d6:3d:23:34:0e:e6: |
| 177 e0:49:74:3b:21:04:9f:6b:25:92:1a:2e:0f:e5:4a: |
| 178 0a:96:85:0d:69:dc:ab:31:23:19:b7:d0:54:e6:18: |
| 179 c6:a1:ef:c6:e1:8b:da:a4:c2:78:7a:61:19:d7:83: |
| 180 5f:81:34:37:3e:1a:e2:b4:56:64:eb:db:af:7c:83: |
| 181 c7:67:58:f1:69:c4:02:3a:05:1c:d9:56:5c:32:32: |
| 182 bd:a7:e9:5f:82:b3:bb:1e:a6:e8:9c:86:86:ee:de: |
| 183 9b:19:d7:19:4f:89:cf:98:76:81:6d:dc:10:7d:d3: |
| 184 92:b8:7b:0d:c8:2f:2d:fc:ee:d7:68:fb:d5:87:7e: |
| 185 64:9a:32:73:57:58:5b:31:fc:da:d3:2c:2c:22:1d: |
| 186 d6:db:71:a6:58:0b:84:0d:28:de:82:ad:d1:4e:2c: |
| 187 4b:b4:df:1d:78:34:59:52:a3:16:bd:0b:77:26:4d: |
| 188 4b:6f |
| 189 Exponent: 65537 (0x10001) |
| 190 X509v3 extensions: |
| 191 X509v3 Subject Key Identifier: |
| 192 E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53 |
| 193 X509v3 Authority Key Identifier: |
| 194 keyid:E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:5
3 |
| 195 |
| 196 Authority Information Access: |
| 197 CA Issuers - URI:http://url-for-aia/Root.cer |
| 198 |
| 199 X509v3 CRL Distribution Points: |
| 200 |
| 201 Full Name: |
| 202 URI:http://url-for-crl/Root.crl |
| 203 |
| 204 X509v3 Key Usage: critical |
| 205 Certificate Sign, CRL Sign |
| 206 X509v3 Basic Constraints: critical |
| 207 CA:TRUE |
| 208 Signature Algorithm: sha256WithRSAEncryption |
| 209 76:62:2d:4c:94:4e:63:cb:7f:35:52:08:e2:8a:f3:d1:03:55: |
| 210 31:f4:e8:e0:79:68:23:f0:19:d5:7f:b2:dd:27:0a:a2:bb:6c: |
| 211 f3:85:ae:48:83:3c:37:7e:62:69:e9:af:e0:4d:60:f0:8b:bf: |
| 212 1b:2c:da:90:10:fc:8c:83:b1:55:46:a6:fe:d1:d1:21:6f:91: |
| 213 e1:cc:d6:c6:8c:1e:b1:03:e5:d7:5b:5f:3c:a7:2d:16:a1:71: |
| 214 54:e1:8a:4b:62:61:18:42:b1:f4:ec:6e:33:5a:3b:52:2a:8e: |
| 215 1a:60:75:73:89:78:72:86:9f:42:82:e5:d7:0e:5c:ce:36:a7: |
| 216 2d:8e:78:0a:e9:95:2d:72:d2:42:6f:b6:7c:7e:28:29:2d:85: |
| 217 3c:46:ab:6f:04:a8:f4:a2:ec:c4:24:7e:7a:a9:96:ec:b3:49: |
| 218 8b:ec:2a:00:88:c0:a6:50:01:a5:f0:df:ef:1c:6c:f8:bf:8e: |
| 219 64:ab:ff:43:bf:05:ce:82:b6:d4:cc:30:47:d8:74:7f:4e:4c: |
| 220 dc:cc:a6:92:e3:96:37:97:b1:03:27:93:38:62:4d:b7:ae:fe: |
| 221 a2:2b:61:05:32:27:28:27:c3:1f:e9:50:91:0a:4a:4b:ca:a3: |
| 222 b0:8e:d4:56:30:ad:e8:76:49:e4:0e:36:83:15:22:8a:bc:59: |
| 223 27:1c:62:f3 |
| 224 -----BEGIN TRUSTED_CERTIFICATE----- |
| 225 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 226 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 227 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALg8r4htXpZ+WJAJXUBU |
| 228 EU9V/7vnlBu619+5R8P/hHEi2qiJ5phxS67YwRnfT2m/wj3aCqhlCKjDLKo0x6K5 |
| 229 AEVvLmlukO6bovYgDXUXwjPgWSx91j0jNA7m4El0OyEEn2slkhouD+VKCpaFDWnc |
| 230 qzEjGbfQVOYYxqHvxuGL2qTCeHphGdeDX4E0Nz4a4rRWZOvbr3yDx2dY8WnEAjoF |
| 231 HNlWXDIyvafpX4Kzux6m6JyGhu7emxnXGU+Jz5h2gW3cEH3Tkrh7DcgvLfzu12j7 |
| 232 1Yd+ZJoyc1dYWzH82tMsLCId1ttxplgLhA0o3oKt0U4sS7TfHXg0WVKjFr0LdyZN |
| 233 S28CAwEAAaOByzCByDAdBgNVHQ4EFgQU6axzCbaGzZVCKV3l7MeZKRKRjFMwHwYD |
| 234 VR0jBBgwFoAU6axzCbaGzZVCKV3l7MeZKRKRjFMwNwYIKwYBBQUHAQEEKzApMCcG |
| 235 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 236 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 237 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB2Yi1MlE5j |
| 238 y381UgjiivPRA1Ux9OjgeWgj8BnVf7LdJwqiu2zzha5Igzw3fmJp6a/gTWDwi78b |
| 239 LNqQEPyMg7FVRqb+0dEhb5HhzNbGjB6xA+XXW188py0WoXFU4YpLYmEYQrH07G4z |
| 240 WjtSKo4aYHVziXhyhp9CguXXDlzONqctjngK6ZUtctJCb7Z8figpLYU8RqtvBKj0 |
| 241 ouzEJH56qZbss0mL7CoAiMCmUAGl8N/vHGz4v45kq/9DvwXOgrbUzDBH2HR/Tkzc |
| 242 zKaS45Y3l7EDJ5M4Yk23rv6iK2EFMicoJ8Mf6VCRCkpLyqOwjtRWMK3odknkDjaD |
| 243 FSKKvFknHGLz |
| 244 -----END TRUSTED_CERTIFICATE----- |
| 245 |
| 246 -----BEGIN TIME----- |
| 247 MTUwMzAyMTIwMDAwWg== |
| 248 -----END TIME----- |
| 249 |
| 250 -----BEGIN VERIFY_RESULT----- |
| 251 U1VDQ0VTUw== |
| 252 -----END VERIFY_RESULT----- |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 1414393008:
Add scripts to generate simple test data for certificate verification. (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@key_usages