| OLD | NEW |
|---|
| (Empty) | |
| 1 [Created by: generate-violates-pathlen-1-root.py] |
| 2 |
| 3 Certificate chain with 2 intermediaries and one end entity certificate. The |
| 4 root certificate has a pathlen:1 restriction so this is an invalid chain. |
| 5 |
| 6 Certificate: |
| 7 Data: |
| 8 Version: 3 (0x2) |
| 9 Serial Number: 1 (0x1) |
| 10 Signature Algorithm: sha256WithRSAEncryption |
| 11 Issuer: CN=Intermediary2 |
| 12 Validity |
| 13 Not Before: Jan 1 12:00:00 2015 GMT |
| 14 Not After : Jan 1 12:00:00 2016 GMT |
| 15 Subject: CN=Target |
| 16 Subject Public Key Info: |
| 17 Public Key Algorithm: rsaEncryption |
| 18 Public-Key: (2048 bit) |
| 19 Modulus: |
| 20 00:bf:b8:e9:8b:9f:2a:8d:58:f0:93:6a:7a:d2:d4: |
| 21 29:ec:ce:35:c9:5e:c0:f7:27:2a:78:a3:76:53:25: |
| 22 54:09:43:e0:30:df:a1:f3:e2:a2:45:21:d7:b0:e6: |
| 23 ff:d0:cc:81:eb:2b:78:9a:b6:85:97:87:d5:b2:9f: |
| 24 3b:f2:d7:55:3d:fe:0f:ba:20:39:a6:0d:c8:7c:ea: |
| 25 23:8a:63:38:8e:70:44:ff:d2:18:66:3e:ad:10:68: |
| 26 ee:ec:21:f7:18:e4:7f:37:09:c6:e6:a8:d1:a2:4c: |
| 27 1f:e5:7a:69:04:13:df:09:5e:13:61:7c:15:09:9c: |
| 28 55:af:27:66:87:0e:bd:fc:2a:9d:7f:1c:73:b5:84: |
| 29 c2:d6:2b:d9:5d:f6:19:52:58:bb:8c:8c:5f:a7:9c: |
| 30 de:d7:8d:5f:ef:8f:f3:24:e1:0d:10:59:58:c6:72: |
| 31 8c:d7:fc:fe:bc:22:a7:58:4d:83:f2:48:4b:cd:55: |
| 32 36:45:28:e4:cf:93:75:78:0f:5e:35:c0:b7:52:e5: |
| 33 e2:91:42:04:bb:9c:0c:cf:eb:89:66:5f:90:46:b2: |
| 34 76:b0:82:c4:af:34:fd:a6:fd:93:7f:54:ce:4f:be: |
| 35 a4:32:8e:9c:3f:40:c9:6c:db:be:85:0c:e6:df:2b: |
| 36 7c:9b:ef:8b:7a:4b:15:dc:09:10:3b:b1:b7:e7:c7: |
| 37 c1:21 |
| 38 Exponent: 65537 (0x10001) |
| 39 X509v3 extensions: |
| 40 X509v3 Subject Key Identifier: |
| 41 11:74:6B:48:F5:42:3C:04:F3:A2:04:42:E5:F2:BC:1C:AD:AB:CB:E2 |
| 42 X509v3 Authority Key Identifier: |
| 43 keyid:9A:80:A6:AF:E0:4A:48:D1:70:0A:10:7A:0D:74:57:B8:CE:48:5B:7
D |
| 44 |
| 45 Authority Information Access: |
| 46 CA Issuers - URI:http://url-for-aia/Intermediary2.cer |
| 47 |
| 48 X509v3 CRL Distribution Points: |
| 49 |
| 50 Full Name: |
| 51 URI:http://url-for-crl/Intermediary2.crl |
| 52 |
| 53 X509v3 Key Usage: critical |
| 54 Digital Signature, Key Encipherment |
| 55 X509v3 Extended Key Usage: |
| 56 TLS Web Server Authentication, TLS Web Client Authentication |
| 57 Signature Algorithm: sha256WithRSAEncryption |
| 58 6e:0e:da:63:ae:72:b5:ee:9b:ee:f6:34:18:30:e5:4c:9b:b7: |
| 59 a8:21:ef:fe:fe:55:c9:27:4d:13:ab:32:be:89:76:93:b8:2a: |
| 60 be:c2:3f:6d:f6:23:6d:ed:b2:4f:77:7e:b7:7c:f4:5a:a3:de: |
| 61 80:09:f6:c0:3b:87:34:2d:97:5c:1a:a0:0d:e4:9f:28:93:d4: |
| 62 d6:38:ca:ea:c8:4e:ec:71:07:b8:c7:cb:c0:59:77:e5:99:80: |
| 63 34:7b:9f:77:8f:63:b0:d0:3d:ce:a9:c4:aa:ba:49:02:5e:31: |
| 64 84:a3:7f:8e:51:5c:06:a4:44:49:04:c4:27:7e:04:f7:13:18: |
| 65 61:67:d1:4d:23:b0:16:f2:47:79:bd:e5:40:52:77:06:73:8b: |
| 66 4b:c6:c4:5c:09:46:29:a3:36:b5:3c:75:6d:94:71:13:db:ff: |
| 67 e8:62:e4:76:59:06:88:9d:c5:5b:d7:af:ae:16:72:80:60:6a: |
| 68 23:01:4d:fa:90:33:ad:01:38:47:d6:5d:91:28:9f:78:6f:ba: |
| 69 da:62:5b:17:fa:9f:5a:6e:28:5f:59:96:de:64:a8:3b:b7:de: |
| 70 fe:f7:b5:3c:79:e9:fe:15:b2:73:0f:65:5f:83:2e:6b:85:55: |
| 71 04:42:da:87:48:6b:7d:1c:a2:b0:e2:60:7f:c9:22:70:d1:a4: |
| 72 51:94:40:3c |
| 73 -----BEGIN CERTIFICATE----- |
| 74 MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl |
| 75 cm1lZGlhcnkyMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowETEPMA0G |
| 76 A1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jp |
| 77 i58qjVjwk2p60tQp7M41yV7A9ycqeKN2UyVUCUPgMN+h8+KiRSHXsOb/0MyB6yt4 |
| 78 mraFl4fVsp878tdVPf4PuiA5pg3IfOojimM4jnBE/9IYZj6tEGju7CH3GOR/NwnG |
| 79 5qjRokwf5XppBBPfCV4TYXwVCZxVrydmhw69/CqdfxxztYTC1ivZXfYZUli7jIxf |
| 80 p5ze141f74/zJOENEFlYxnKM1/z+vCKnWE2D8khLzVU2RSjkz5N1eA9eNcC3UuXi |
| 81 kUIEu5wMz+uJZl+QRrJ2sILErzT9pv2Tf1TOT76kMo6cP0DJbNu+hQzm3yt8m++L |
| 82 eksV3AkQO7G358fBIQIDAQABo4HrMIHoMB0GA1UdDgQWBBQRdGtI9UI8BPOiBELl |
| 83 8rwcravL4jAfBgNVHSMEGDAWgBSagKav4EpI0XAKEHoNdFe4zkhbfTBABggrBgEF |
| 84 BQcBAQQ0MDIwMAYIKwYBBQUHMAKGJGh0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1l |
| 85 ZGlhcnkyLmNlcjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vdXJsLWZvci1jcmwv |
| 86 SW50ZXJtZWRpYXJ5Mi5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG |
| 87 AQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAbg7aY65yte6b7vY0 |
| 88 GDDlTJu3qCHv/v5VySdNE6syvol2k7gqvsI/bfYjbe2yT3d+t3z0WqPegAn2wDuH |
| 89 NC2XXBqgDeSfKJPU1jjK6shO7HEHuMfLwFl35ZmANHufd49jsNA9zqnEqrpJAl4x |
| 90 hKN/jlFcBqRESQTEJ34E9xMYYWfRTSOwFvJHeb3lQFJ3BnOLS8bEXAlGKaM2tTx1 |
| 91 bZRxE9v/6GLkdlkGiJ3FW9evrhZygGBqIwFN+pAzrQE4R9ZdkSifeG+62mJbF/qf |
| 92 Wm4oX1mW3mSoO7fe/ve1PHnp/hWycw9lX4Mua4VVBELah0hrfRyisOJgf8kicNGk |
| 93 UZRAPA== |
| 94 -----END CERTIFICATE----- |
| 95 |
| 96 Certificate: |
| 97 Data: |
| 98 Version: 3 (0x2) |
| 99 Serial Number: 1 (0x1) |
| 100 Signature Algorithm: sha256WithRSAEncryption |
| 101 Issuer: CN=Intermediary1 |
| 102 Validity |
| 103 Not Before: Jan 1 12:00:00 2015 GMT |
| 104 Not After : Jan 1 12:00:00 2016 GMT |
| 105 Subject: CN=Intermediary2 |
| 106 Subject Public Key Info: |
| 107 Public Key Algorithm: rsaEncryption |
| 108 Public-Key: (2048 bit) |
| 109 Modulus: |
| 110 00:9b:e8:f6:41:79:62:c9:06:fd:13:2c:f5:cc:07: |
| 111 a9:dd:5c:1e:90:76:a5:71:fa:f3:5c:34:1f:c9:3a: |
| 112 33:77:05:a0:27:7b:6a:eb:8b:d8:de:25:65:6f:b6: |
| 113 d6:e1:82:34:0a:7b:13:d3:85:37:7d:d9:70:04:43: |
| 114 b3:e3:46:8b:60:e1:99:ba:28:5b:ef:c2:7e:b3:c4: |
| 115 20:6f:94:f2:47:79:66:ce:0f:5d:79:58:aa:f7:62: |
| 116 80:38:14:4a:17:34:59:86:39:1d:ed:38:b8:14:f4: |
| 117 10:0c:1f:2c:8e:49:e5:5d:fd:d2:0f:37:5c:b8:e5: |
| 118 a9:86:07:0e:5e:27:ee:05:a0:ad:b5:b6:86:43:30: |
| 119 8b:0d:35:b5:86:cd:98:98:e8:d6:04:53:4e:2b:81: |
| 120 be:d2:96:6f:cf:2f:72:2d:f5:6c:c8:ba:f5:42:7a: |
| 121 f1:67:33:03:bb:cf:6d:67:03:f3:1a:3c:39:d9:cf: |
| 122 8f:ad:03:ca:2c:dc:e3:33:92:24:18:46:86:8e:dc: |
| 123 27:b8:76:57:3a:7d:a2:89:96:18:07:96:04:d9:75: |
| 124 8c:e6:1b:cf:1f:e9:6c:5d:8d:77:2f:4d:9d:00:bb: |
| 125 16:e9:c5:da:7d:5f:45:e8:3d:17:d8:72:a6:bf:68: |
| 126 1f:0a:a5:88:c1:74:45:53:b9:0c:d5:05:a5:ba:ed: |
| 127 55:73 |
| 128 Exponent: 65537 (0x10001) |
| 129 X509v3 extensions: |
| 130 X509v3 Subject Key Identifier: |
| 131 9A:80:A6:AF:E0:4A:48:D1:70:0A:10:7A:0D:74:57:B8:CE:48:5B:7D |
| 132 X509v3 Authority Key Identifier: |
| 133 keyid:1D:4A:1C:48:70:30:B6:65:73:56:A7:6E:A0:48:35:81:6E:3B:95:8
A |
| 134 |
| 135 Authority Information Access: |
| 136 CA Issuers - URI:http://url-for-aia/Intermediary1.cer |
| 137 |
| 138 X509v3 CRL Distribution Points: |
| 139 |
| 140 Full Name: |
| 141 URI:http://url-for-crl/Intermediary1.crl |
| 142 |
| 143 X509v3 Key Usage: critical |
| 144 Certificate Sign, CRL Sign |
| 145 X509v3 Basic Constraints: critical |
| 146 CA:TRUE |
| 147 Signature Algorithm: sha256WithRSAEncryption |
| 148 47:1c:62:1b:7e:69:aa:b6:d8:6c:50:44:09:e8:15:b5:fe:ee: |
| 149 86:5c:69:6d:4c:7a:90:1f:2e:4f:e8:21:a3:44:38:d6:07:0b: |
| 150 43:cf:dd:13:64:64:42:a9:ae:62:f6:1b:ea:03:2e:3b:4f:ed: |
| 151 8a:45:8e:ec:09:d8:1a:67:eb:ef:c6:77:fc:cf:03:9f:b4:4a: |
| 152 59:76:4e:2b:b0:d3:41:5a:a0:8c:bb:1c:61:67:52:7d:48:2e: |
| 153 3f:c2:7d:a6:60:95:25:75:47:9c:1a:c3:1e:25:cd:e9:7d:2b: |
| 154 71:26:fc:97:f1:2e:c6:2f:d4:2a:bb:27:d4:76:7e:c9:bc:05: |
| 155 92:24:86:56:46:27:e0:14:af:d7:c6:72:d2:dc:be:93:2f:b3: |
| 156 44:d3:e1:4a:08:75:47:50:16:e6:50:36:61:e3:6f:b7:a6:40: |
| 157 1c:61:14:ae:66:20:93:0b:fb:6d:b1:a9:4d:d5:ec:8d:2b:d6: |
| 158 84:36:c4:61:70:e5:99:4f:7e:af:97:d2:42:91:11:a7:1f:0e: |
| 159 32:fc:09:37:44:a2:c9:bb:35:82:73:85:e5:90:b4:80:a7:4b: |
| 160 40:ce:cb:62:ca:e1:2b:36:f6:e7:bc:3a:67:71:6d:ab:4b:87: |
| 161 cf:72:70:ad:ef:7a:85:ab:72:5d:c7:c1:ac:5e:b5:81:dc:ff: |
| 162 96:6f:08:02 |
| 163 -----BEGIN CERTIFICATE----- |
| 164 MIIDiTCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl |
| 165 cm1lZGlhcnkxMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQG |
| 166 A1UEAwwNSW50ZXJtZWRpYXJ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC |
| 167 ggEBAJvo9kF5YskG/RMs9cwHqd1cHpB2pXH681w0H8k6M3cFoCd7auuL2N4lZW+2 |
| 168 1uGCNAp7E9OFN33ZcARDs+NGi2DhmbooW+/CfrPEIG+U8kd5Zs4PXXlYqvdigDgU |
| 169 Shc0WYY5He04uBT0EAwfLI5J5V390g83XLjlqYYHDl4n7gWgrbW2hkMwiw01tYbN |
| 170 mJjo1gRTTiuBvtKWb88vci31bMi69UJ68WczA7vPbWcD8xo8OdnPj60Dyizc4zOS |
| 171 JBhGho7cJ7h2Vzp9oomWGAeWBNl1jOYbzx/pbF2Ndy9NnQC7FunF2n1fReg9F9hy |
| 172 pr9oHwqliMF0RVO5DNUFpbrtVXMCAwEAAaOB3TCB2jAdBgNVHQ4EFgQUmoCmr+BK |
| 173 SNFwChB6DXRXuM5IW30wHwYDVR0jBBgwFoAUHUocSHAwtmVzVqduoEg1gW47lYow |
| 174 QAYIKwYBBQUHAQEENDAyMDAGCCsGAQUFBzAChiRodHRwOi8vdXJsLWZvci1haWEv |
| 175 SW50ZXJtZWRpYXJ5MS5jZXIwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL3VybC1m |
| 176 b3ItY3JsL0ludGVybWVkaWFyeTEuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB |
| 177 Af8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBHHGIbfmmqtthsUEQJ6BW1/u6G |
| 178 XGltTHqQHy5P6CGjRDjWBwtDz90TZGRCqa5i9hvqAy47T+2KRY7sCdgaZ+vvxnf8 |
| 179 zwOftEpZdk4rsNNBWqCMuxxhZ1J9SC4/wn2mYJUldUecGsMeJc3pfStxJvyX8S7G |
| 180 L9QquyfUdn7JvAWSJIZWRifgFK/XxnLS3L6TL7NE0+FKCHVHUBbmUDZh42+3pkAc |
| 181 YRSuZiCTC/ttsalN1eyNK9aENsRhcOWZT36vl9JCkRGnHw4y/Ak3RKLJuzWCc4Xl |
| 182 kLSAp0tAzstiyuErNvbnvDpncW2rS4fPcnCt73qFq3Jdx8GsXrWB3P+WbwgC |
| 183 -----END CERTIFICATE----- |
| 184 |
| 185 Certificate: |
| 186 Data: |
| 187 Version: 3 (0x2) |
| 188 Serial Number: 2 (0x2) |
| 189 Signature Algorithm: sha256WithRSAEncryption |
| 190 Issuer: CN=Root |
| 191 Validity |
| 192 Not Before: Jan 1 12:00:00 2015 GMT |
| 193 Not After : Jan 1 12:00:00 2016 GMT |
| 194 Subject: CN=Intermediary1 |
| 195 Subject Public Key Info: |
| 196 Public Key Algorithm: rsaEncryption |
| 197 Public-Key: (2048 bit) |
| 198 Modulus: |
| 199 00:b9:d1:e1:e9:55:23:09:13:95:52:d6:31:f6:16: |
| 200 49:28:4d:e9:02:bd:42:73:3b:f6:9a:d4:05:86:6e: |
| 201 fd:c4:26:b1:59:d5:e1:be:64:f0:84:39:f0:d9:cf: |
| 202 0a:62:98:68:c6:7b:a1:6c:73:4c:79:5e:92:88:ba: |
| 203 db:e2:16:f9:0a:5b:46:f7:ef:6b:77:4b:98:d9:40: |
| 204 ca:1b:2d:7b:fa:9a:92:11:fe:85:6c:ef:2e:39:6f: |
| 205 2f:16:32:cc:45:c7:a7:bd:62:2a:d7:49:9d:c1:cc: |
| 206 0d:a8:b1:91:e0:f7:b8:e5:77:f4:0a:ef:01:de:e1: |
| 207 65:4c:e0:e6:29:3f:2d:3f:aa:0d:a4:38:69:90:5d: |
| 208 83:b4:e9:b0:04:c4:f4:a4:b9:5f:c0:a8:88:68:13: |
| 209 86:a1:9b:fe:24:d3:ef:cc:34:be:3d:bb:70:58:64: |
| 210 74:54:7d:c8:6a:a3:d3:37:9e:91:5c:fe:16:15:5f: |
| 211 00:45:2f:f9:81:3a:7f:ef:bb:03:60:b8:08:ce:9f: |
| 212 88:20:62:ba:4d:8a:18:8a:57:1d:ea:12:1e:62:d7: |
| 213 eb:01:80:e6:a9:72:d2:2f:84:aa:16:20:e8:f8:47: |
| 214 e1:4e:43:46:16:20:51:cd:20:39:a3:47:70:0f:9f: |
| 215 4e:e6:7b:fa:5d:c2:9e:67:ce:22:e1:e8:1c:89:bd: |
| 216 a0:49 |
| 217 Exponent: 65537 (0x10001) |
| 218 X509v3 extensions: |
| 219 X509v3 Subject Key Identifier: |
| 220 1D:4A:1C:48:70:30:B6:65:73:56:A7:6E:A0:48:35:81:6E:3B:95:8A |
| 221 X509v3 Authority Key Identifier: |
| 222 keyid:88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F
6 |
| 223 |
| 224 Authority Information Access: |
| 225 CA Issuers - URI:http://url-for-aia/Root.cer |
| 226 |
| 227 X509v3 CRL Distribution Points: |
| 228 |
| 229 Full Name: |
| 230 URI:http://url-for-crl/Root.crl |
| 231 |
| 232 X509v3 Key Usage: critical |
| 233 Certificate Sign, CRL Sign |
| 234 X509v3 Basic Constraints: critical |
| 235 CA:TRUE |
| 236 Signature Algorithm: sha256WithRSAEncryption |
| 237 7c:45:39:85:85:2e:2a:47:1a:05:7c:45:0b:9d:1c:94:58:c9: |
| 238 a6:ab:95:85:fb:64:da:a3:cf:96:98:80:8c:c4:fe:5d:10:db: |
| 239 94:df:6c:eb:15:45:d3:e8:d1:80:39:0e:b9:28:4a:b8:0c:aa: |
| 240 87:cc:4b:b2:14:4d:fe:2c:a6:36:5e:40:5c:10:49:e2:90:1d: |
| 241 46:ad:d1:b5:25:85:35:3d:99:da:0b:da:ad:f0:9d:94:50:6e: |
| 242 b8:4c:1c:86:d6:68:cc:d9:7f:7e:b8:8d:0c:43:0c:e9:6a:05: |
| 243 00:0e:7d:00:88:62:70:4f:f9:a1:68:48:9f:c4:c7:cd:78:63: |
| 244 c6:6c:ec:84:c3:09:65:64:14:27:f4:f9:df:a1:f4:bc:c1:43: |
| 245 88:88:ba:98:ba:14:66:8a:47:42:49:dc:9a:35:84:e0:8b:17: |
| 246 9e:5b:bd:8f:4f:b3:01:2e:61:3e:12:45:ab:63:38:77:b1:f2: |
| 247 21:57:04:49:53:e4:23:4b:58:81:23:42:9a:a5:fe:1c:08:7b: |
| 248 d6:bf:7e:ec:9d:b1:15:b7:27:2a:f2:96:81:05:52:ad:97:92: |
| 249 71:20:34:33:99:77:a3:e9:92:e1:68:73:ea:31:eb:54:cb:f9: |
| 250 97:61:03:56:de:4c:35:c5:cd:d4:75:a7:e4:f2:5c:66:f5:5d: |
| 251 34:ab:8f:f8 |
| 252 -----BEGIN CERTIFICATE----- |
| 253 MIIDbjCCAlagAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 254 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQGA1UEAwwNSW50 |
| 255 ZXJtZWRpYXJ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnR4elV |
| 256 IwkTlVLWMfYWSShN6QK9QnM79prUBYZu/cQmsVnV4b5k8IQ58NnPCmKYaMZ7oWxz |
| 257 THlekoi62+IW+QpbRvfva3dLmNlAyhste/qakhH+hWzvLjlvLxYyzEXHp71iKtdJ |
| 258 ncHMDaixkeD3uOV39ArvAd7hZUzg5ik/LT+qDaQ4aZBdg7TpsATE9KS5X8CoiGgT |
| 259 hqGb/iTT78w0vj27cFhkdFR9yGqj0zeekVz+FhVfAEUv+YE6f++7A2C4CM6fiCBi |
| 260 uk2KGIpXHeoSHmLX6wGA5qly0i+EqhYg6PhH4U5DRhYgUc0gOaNHcA+fTuZ7+l3C |
| 261 nmfOIuHoHIm9oEkCAwEAAaOByzCByDAdBgNVHQ4EFgQUHUocSHAwtmVzVqduoEg1 |
| 262 gW47lYowHwYDVR0jBBgwFoAUiBzW5g2Pg96dnC4+HuVhguotEfYwNwYIKwYBBQUH |
| 263 AQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIw |
| 264 LAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4G |
| 265 A1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IB |
| 266 AQB8RTmFhS4qRxoFfEULnRyUWMmmq5WF+2Tao8+WmICMxP5dENuU32zrFUXT6NGA |
| 267 OQ65KEq4DKqHzEuyFE3+LKY2XkBcEEnikB1GrdG1JYU1PZnaC9qt8J2UUG64TByG |
| 268 1mjM2X9+uI0MQwzpagUADn0AiGJwT/mhaEifxMfNeGPGbOyEwwllZBQn9PnfofS8 |
| 269 wUOIiLqYuhRmikdCSdyaNYTgixeeW72PT7MBLmE+EkWrYzh3sfIhVwRJU+QjS1iB |
| 270 I0Kapf4cCHvWv37snbEVtycq8paBBVKtl5JxIDQzmXej6ZLhaHPqMetUy/mXYQNW |
| 271 3kw1xc3Udafk8lxm9V00q4/4 |
| 272 -----END CERTIFICATE----- |
| 273 |
| 274 Certificate: |
| 275 Data: |
| 276 Version: 3 (0x2) |
| 277 Serial Number: 1 (0x1) |
| 278 Signature Algorithm: sha256WithRSAEncryption |
| 279 Issuer: CN=Root |
| 280 Validity |
| 281 Not Before: Jan 1 12:00:00 2015 GMT |
| 282 Not After : Jan 1 12:00:00 2016 GMT |
| 283 Subject: CN=Root |
| 284 Subject Public Key Info: |
| 285 Public Key Algorithm: rsaEncryption |
| 286 Public-Key: (2048 bit) |
| 287 Modulus: |
| 288 00:a3:90:0c:56:93:34:da:26:53:6e:a9:d5:07:b9: |
| 289 83:30:70:85:69:ed:18:67:72:bb:1d:c4:06:ff:a8: |
| 290 b8:00:75:fd:38:ac:f1:e2:4a:86:21:4d:01:77:fc: |
| 291 f3:2d:90:94:7e:14:2c:8a:89:c2:cd:42:a5:ae:fe: |
| 292 7a:ca:9d:44:78:21:f6:ab:6d:d3:c8:8a:07:57:eb: |
| 293 22:10:cf:1e:44:f2:a4:23:e7:10:46:1e:d4:21:60: |
| 294 9c:01:72:ff:ca:20:c8:48:c4:ad:b0:17:28:f3:14: |
| 295 af:49:65:52:52:58:9a:1b:68:1a:9d:77:e9:61:52: |
| 296 54:0b:81:e4:0b:c7:2d:b3:2d:aa:9e:16:1f:51:ec: |
| 297 7d:e7:2d:2c:e6:c4:88:81:3e:1b:e1:e7:1f:21:12: |
| 298 21:47:ec:14:a5:d9:ab:a2:2b:ac:1f:3c:b2:a5:c1: |
| 299 69:4e:55:88:66:e8:5a:4d:9d:08:27:1c:fe:cd:62: |
| 300 b0:95:62:c4:4b:ff:12:11:4c:d8:10:66:a4:d0:29: |
| 301 da:d5:79:b7:ee:19:d5:b9:33:92:c5:61:89:56:a8: |
| 302 4f:48:cf:9a:a0:3e:95:f0:1f:b7:c9:de:82:89:09: |
| 303 b0:87:a5:c5:71:2c:71:3b:72:4a:0a:51:c4:c4:7d: |
| 304 ac:84:c3:9b:60:3d:ff:0c:52:05:23:4d:57:57:06: |
| 305 60:17 |
| 306 Exponent: 65537 (0x10001) |
| 307 X509v3 extensions: |
| 308 X509v3 Subject Key Identifier: |
| 309 88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F6 |
| 310 X509v3 Authority Key Identifier: |
| 311 keyid:88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F
6 |
| 312 |
| 313 Authority Information Access: |
| 314 CA Issuers - URI:http://url-for-aia/Root.cer |
| 315 |
| 316 X509v3 CRL Distribution Points: |
| 317 |
| 318 Full Name: |
| 319 URI:http://url-for-crl/Root.crl |
| 320 |
| 321 X509v3 Key Usage: critical |
| 322 Certificate Sign, CRL Sign |
| 323 X509v3 Basic Constraints: critical |
| 324 CA:TRUE, pathlen:1 |
| 325 Signature Algorithm: sha256WithRSAEncryption |
| 326 2e:81:16:b6:af:49:9b:93:4d:84:34:9c:f0:43:ee:76:91:f5: |
| 327 88:9e:6b:cd:a8:95:f2:5e:10:19:f0:41:98:b2:ac:38:2a:ac: |
| 328 3e:4c:0f:49:0b:b9:fd:97:d3:c9:61:6c:8b:7d:26:06:1d:65: |
| 329 7e:e8:92:23:07:82:cc:3c:c9:c7:32:7b:2e:e2:3e:e8:42:52: |
| 330 29:9f:6d:8f:7d:34:57:37:7a:71:8f:f1:28:33:70:aa:59:88: |
| 331 12:95:74:82:60:d0:14:50:b5:d4:5a:ad:7c:03:85:ab:84:c9: |
| 332 e5:bf:7a:4a:3e:1a:d0:44:0b:bc:e1:ae:3b:48:e9:00:1c:92: |
| 333 1b:b5:40:a4:e6:65:88:ec:3b:6e:ab:da:37:10:b7:6d:45:e5: |
| 334 70:89:eb:e4:21:68:2e:77:e6:de:25:e3:5d:7a:a0:f1:33:4c: |
| 335 cc:e2:8b:a9:c8:fd:dc:0b:4b:9e:4c:5c:7c:86:0f:d4:ab:f9: |
| 336 e0:c8:c0:82:76:38:55:d3:dc:4d:57:d0:ca:76:63:9f:92:5c: |
| 337 ff:5f:1b:bd:b6:39:5e:0f:5f:93:0b:86:23:9e:08:d3:e4:11: |
| 338 02:5f:5f:bd:00:af:d3:22:c0:14:3a:f4:4b:8b:fb:be:5e:b7: |
| 339 1c:34:e1:20:69:5d:7c:d9:f5:86:28:ab:92:a6:31:6b:fe:1d: |
| 340 03:00:f0:89 |
| 341 -----BEGIN TRUSTED_CERTIFICATE----- |
| 342 MIIDaDCCAlCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 343 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 344 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKOQDFaTNNomU26p1Qe5 |
| 345 gzBwhWntGGdyux3EBv+ouAB1/Tis8eJKhiFNAXf88y2QlH4ULIqJws1Cpa7+esqd |
| 346 RHgh9qtt08iKB1frIhDPHkTypCPnEEYe1CFgnAFy/8ogyEjErbAXKPMUr0llUlJY |
| 347 mhtoGp136WFSVAuB5AvHLbMtqp4WH1HsfectLObEiIE+G+HnHyESIUfsFKXZq6Ir |
| 348 rB88sqXBaU5ViGboWk2dCCcc/s1isJVixEv/EhFM2BBmpNAp2tV5t+4Z1bkzksVh |
| 349 iVaoT0jPmqA+lfAft8negokJsIelxXEscTtySgpRxMR9rITDm2A9/wxSBSNNV1cG |
| 350 YBcCAwEAAaOBzjCByzAdBgNVHQ4EFgQUiBzW5g2Pg96dnC4+HuVhguotEfYwHwYD |
| 351 VR0jBBgwFoAUiBzW5g2Pg96dnC4+HuVhguotEfYwNwYIKwYBBQUHAQEEKzApMCcG |
| 352 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 353 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 354 AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMA0GCSqGSIb3DQEBCwUAA4IBAQAugRa2 |
| 355 r0mbk02ENJzwQ+52kfWInmvNqJXyXhAZ8EGYsqw4Kqw+TA9JC7n9l9PJYWyLfSYG |
| 356 HWV+6JIjB4LMPMnHMnsu4j7oQlIpn22PfTRXN3pxj/EoM3CqWYgSlXSCYNAUULXU |
| 357 Wq18A4WrhMnlv3pKPhrQRAu84a47SOkAHJIbtUCk5mWI7Dtuq9o3ELdtReVwievk |
| 358 IWgud+beJeNdeqDxM0zM4oupyP3cC0ueTFx8hg/Uq/ngyMCCdjhV09xNV9DKdmOf |
| 359 klz/Xxu9tjleD1+TC4YjngjT5BECX1+9AK/TIsAUOvRLi/u+XrccNOEgaV182fWG |
| 360 KKuSpjFr/h0DAPCJ |
| 361 -----END TRUSTED_CERTIFICATE----- |
| 362 |
| 363 -----BEGIN TIME----- |
| 364 MTUwMzAyMTIwMDAwWg== |
| 365 -----END TIME----- |
| 366 |
| 367 -----BEGIN VERIFY_RESULT----- |
| 368 RkFJTA== |
| 369 -----END VERIFY_RESULT----- |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 1890193003:
Make Cast certificate verification enforce constraints specified in the trusted root certificate. (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@master