Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(114)

Unified Diff: net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem

Issue 1923433002: Certificate path builder for new certificate verification library (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: rebase Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
new file mode 100644
index 0000000000000000000000000000000000000000..057952d326450d8375718256f863ae098de9847d
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
@@ -0,0 +1,489 @@
+[Created by: ./generate-key-rollover.py]
+
+A certificate tree with two self-signed root certificates(oldroot, newroot),
+and a third root certificate (newrootrollover) which has the same key as newroot
+but is signed by oldroot, all with the same subject and issuer.
+There are two intermediates with the same key, subject and issuer
+(oldintermediary signed by oldroot, and newintermediary signed by newroot).
+The target certificate is signed by the intermediate key.
+
+
+In graphical form:
+
+ oldroot-------->newrootrollover newroot
+ | | |
+ v v v
+oldintermediary newintermediary
+ | |
+ +------------+-------------+
+ |
+ v
+ target
+
+
+Several chains are output:
+ key-rollover-oldchain.pem:
+ target<-oldintermediary<-oldroot
+ key-rollover-rolloverchain.pem:
+ target<-newintermediary<-newrootrollover<-oldroot
+ key-rollover-longrolloverchain.pem:
+ target<-newintermediary<-newroot<-newrootrollover<-oldroot
+ key-rollover-newchain.pem:
+ target<-newintermediary<-newroot
+
+All of these chains should verify successfully.
+
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediary
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:e0:75:a4:9a:ce:70:cc:22:41:4b:d4:cd:76:ae:
+ 35:80:a5:38:11:fa:47:a0:a2:5a:86:d3:9e:48:10:
+ 24:b0:23:7e:69:5c:fc:96:b2:ef:6f:fa:24:45:e4:
+ de:4e:dd:e4:0d:43:78:5a:51:49:5d:21:53:e1:91:
+ 7f:7a:4c:60:64:81:8e:fe:bc:6f:e6:f4:59:a6:ce:
+ 9c:2a:0f:97:a4:79:77:87:c7:6e:b5:24:44:e0:43:
+ fa:39:47:46:71:01:92:c4:db:3c:35:5d:dd:38:02:
+ 5c:2a:27:cb:ca:0c:16:f9:72:31:61:d2:7c:df:c2:
+ cb:06:b0:77:bc:42:48:07:af:ef:7b:81:50:dd:70:
+ b0:cd:50:6c:2d:09:6e:56:98:56:09:b9:70:e0:10:
+ a2:b7:d4:71:47:15:6b:53:f8:82:1a:58:76:dc:67:
+ 2a:9b:84:0b:a7:7f:d5:ba:96:34:3b:cb:72:88:e8:
+ c5:d7:d1:0d:2e:4d:32:2f:58:e6:ff:16:94:22:5b:
+ 61:5d:4d:86:31:0d:cb:2a:62:7c:5b:fa:34:79:83:
+ 06:49:f5:15:92:de:b7:19:30:52:47:03:4e:ff:46:
+ d6:cc:30:f8:86:a8:4c:59:cc:31:16:61:28:11:3e:
+ ae:1e:a9:74:ed:07:74:a9:93:bb:24:de:06:06:1f:
+ 2d:3b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 45:5B:76:CB:6D:E0:6D:3A:63:9A:BA:E6:9A:18:CD:8A:9D:17:EE:44
+ X509v3 Authority Key Identifier:
+ keyid:95:21:87:1E:BA:A9:30:13:5B:61:C0:A9:0C:4C:76:8E:A8:53:35:26
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediary.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediary.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 7e:20:1b:56:3d:05:91:c1:d0:e7:23:5c:79:43:4a:07:70:6a:
+ 77:b2:ee:c4:f2:ee:b2:d0:b9:c6:1c:e5:f3:cf:7b:af:93:3e:
+ d9:5f:fa:57:73:7e:31:75:e4:77:38:af:b0:df:dd:db:11:f5:
+ e4:25:cf:3d:51:fa:1b:b5:78:76:61:97:7c:37:26:ce:3d:f3:
+ 96:9c:b6:bb:e2:be:d6:71:b6:2e:41:f9:31:d5:2f:de:4f:ad:
+ 27:93:1f:ab:79:9c:5a:61:b9:f8:6c:d1:24:6f:2d:9e:68:5f:
+ 64:30:ac:dd:5a:0f:9e:1f:97:c6:99:5f:2f:e3:ad:3f:2d:4c:
+ 68:d3:08:68:c5:39:18:0f:87:ce:a1:4a:25:c7:35:52:3f:a5:
+ f7:03:4a:09:5f:10:8a:84:f1:c6:ab:fa:b6:f2:23:f7:e4:60:
+ 87:c7:79:24:4d:73:bb:f4:19:b8:8d:02:1a:47:09:fb:21:8b:
+ 77:3c:08:05:88:c1:a5:c8:55:a5:ed:9f:88:9f:2a:db:78:dc:
+ 0f:bc:87:ac:b3:30:5b:f5:06:c9:0e:c3:6d:e3:6b:aa:bf:56:
+ 98:da:ce:c5:32:36:1a:1e:79:9f:3c:ab:af:86:87:7a:e9:8c:
+ c1:d0:ae:5a:9a:3c:7e:49:d0:cd:18:77:05:b4:d4:67:61:d8:
+ 73:06:52:79
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 2 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediary
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:bd:f6:aa:4f:a5:b1:3a:df:2a:b2:9b:04:74:fc:
+ f1:0f:c5:d4:1f:d3:b6:93:7e:be:17:c1:60:cd:da:
+ d1:a0:2e:f9:05:51:35:54:2a:51:14:41:28:ce:f9:
+ 0b:7b:fb:d8:df:61:ff:16:f2:00:ce:7c:20:cd:af:
+ 92:15:2e:32:e9:77:1e:81:b7:0f:86:61:3b:83:d7:
+ 1d:40:13:66:9f:83:8c:1f:51:cf:b3:d4:af:53:b9:
+ 0a:dc:52:71:ec:53:ad:0e:36:2d:aa:20:59:5c:3c:
+ 3b:5d:84:fc:e9:3f:90:8b:9c:24:e3:25:60:01:84:
+ 3c:ec:a7:48:66:da:b2:e2:32:f6:0d:d7:99:8d:b6:
+ 97:f7:d1:92:5d:57:26:f7:f4:fe:a8:2e:92:a7:6f:
+ a6:84:59:f4:b2:66:ac:73:a4:de:27:8d:9c:a7:4a:
+ 67:6c:64:7d:92:36:1a:e7:62:bf:34:9f:12:97:f2:
+ 77:2b:8e:f6:5e:28:a0:52:3d:01:5c:c4:11:77:78:
+ 59:db:c2:76:da:f6:9c:f8:27:55:4c:4c:3f:55:c8:
+ 3c:34:f4:98:9e:2e:c8:f5:6a:69:ff:75:66:e4:25:
+ e8:d0:85:76:16:0a:df:7a:53:f7:40:e0:11:28:1f:
+ cc:cd:0b:d4:ce:fa:7f:41:f2:54:47:fa:bd:6d:07:
+ a8:85
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 95:21:87:1E:BA:A9:30:13:5B:61:C0:A9:0C:4C:76:8E:A8:53:35:26
+ X509v3 Authority Key Identifier:
+ keyid:D7:32:56:4A:55:77:36:2A:CD:B8:19:6E:32:13:40:97:54:87:C1:41
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ cc:4e:fc:f2:a4:0f:2e:b3:6a:8d:c0:0b:27:1c:88:7c:0f:88:
+ 9a:bf:ea:a4:0d:50:83:ad:f4:40:25:09:85:26:69:38:c5:a8:
+ 4f:d8:1b:d7:40:40:3e:f5:5c:ec:13:0c:87:ff:39:f8:b3:ba:
+ 1f:a2:e6:f6:89:ef:cc:16:e5:94:e9:e6:b3:f8:78:ea:46:95:
+ 3e:13:50:04:21:29:83:75:c4:fa:e1:a0:36:f1:8b:46:25:73:
+ 93:c4:85:37:5c:30:d0:5b:41:10:a8:e6:d1:28:cc:4b:32:6c:
+ 6a:12:25:6b:55:36:ae:48:1f:53:fc:59:5b:34:fb:90:c3:e8:
+ fd:32:a7:fe:32:39:68:97:41:97:5c:b7:e9:eb:d7:8a:e8:6a:
+ f4:41:ea:38:be:d7:af:be:33:d6:82:1f:5e:eb:68:a0:a5:65:
+ d2:21:2c:91:01:02:98:3b:ad:fe:69:e5:8f:55:e3:74:98:46:
+ 5d:27:cd:22:2e:7c:a8:da:78:4d:4c:88:90:cc:d4:49:10:28:
+ a3:1b:5f:c1:0d:88:40:3b:65:b0:dd:ac:f4:7f:31:17:a3:9e:
+ a5:45:37:fe:f0:40:d5:cb:02:40:ac:14:44:21:68:74:fa:a6:
+ 99:dd:66:8d:ab:45:4b:c5:b1:d9:ab:59:28:d8:7e:48:10:83:
+ 49:87:87:a6
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 2 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:df:90:f5:53:a4:c4:b3:97:68:4a:37:9b:1f:fc:
+ 9c:24:e5:b5:ec:8d:f6:64:30:70:92:24:a6:07:8b:
+ 28:a2:3b:81:93:79:97:40:28:a5:da:6c:99:5a:35:
+ 93:7e:17:8e:89:85:a3:ef:41:be:15:27:c1:9b:b6:
+ 1d:e4:83:4a:d6:59:6f:88:95:23:d8:71:6a:7e:fb:
+ 8d:29:3c:f3:bd:76:51:eb:50:d1:83:ac:cd:90:87:
+ b5:85:50:5e:0b:bf:77:29:53:ca:7b:4f:7b:da:e4:
+ 0e:9d:be:5a:47:44:e3:50:8e:2c:7e:bc:6a:08:e3:
+ bc:ee:64:31:04:84:24:e9:e0:e0:d9:57:86:d6:57:
+ dd:c9:fa:cd:a5:f3:d8:86:8b:84:31:c7:e7:c6:81:
+ 42:52:2d:ac:b2:ac:a8:b2:d4:32:c5:b2:c4:0a:47:
+ 5c:00:0c:b9:d3:d8:04:65:dd:1c:4b:7e:1f:5b:81:
+ e1:85:17:be:70:4b:a8:1c:0d:15:54:c2:db:65:78:
+ 18:15:15:57:73:a8:3a:31:36:5b:6f:c3:38:17:32:
+ ce:05:17:69:53:f4:9b:f3:d0:18:93:b9:e9:a1:de:
+ 4a:79:d6:95:ac:f7:dd:eb:15:75:13:73:0d:47:4d:
+ 1f:0b:fd:15:88:26:be:71:59:23:d0:d7:55:4a:5d:
+ 73:21
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ D7:32:56:4A:55:77:36:2A:CD:B8:19:6E:32:13:40:97:54:87:C1:41
+ X509v3 Authority Key Identifier:
+ keyid:D7:32:56:4A:55:77:36:2A:CD:B8:19:6E:32:13:40:97:54:87:C1:41
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 50:9a:6c:34:e9:18:50:04:54:f3:7a:6c:a7:52:e7:cd:fe:19:
+ 58:f1:a7:a0:ea:60:59:87:a7:aa:19:cf:c3:df:05:2f:01:a1:
+ c7:25:98:0e:89:b9:3e:b3:f7:94:36:9c:ed:6e:45:51:cc:37:
+ 1c:36:9a:80:b4:6a:05:ef:91:a3:31:d0:9a:34:2f:bd:60:50:
+ f9:ba:03:0b:08:30:d5:8b:d4:f1:d7:14:08:c9:ad:82:f3:7e:
+ 13:0b:f5:c9:82:1e:e5:0e:60:c5:d9:8b:8d:94:32:87:03:4e:
+ 44:44:ff:af:4a:2f:e3:13:ab:ca:8a:ce:26:72:90:97:c4:7e:
+ 38:29:7b:fc:d2:8b:2f:75:35:92:48:c4:78:71:a4:6e:7e:e0:
+ c6:f1:42:a9:63:d5:61:bf:a5:8c:5c:fa:8a:6d:c3:23:72:55:
+ fe:68:4e:21:d7:ad:76:38:cc:26:05:d0:a8:50:f0:63:46:25:
+ 62:76:d4:74:c9:50:db:47:e5:ad:4f:93:fc:62:35:db:18:16:
+ 6d:27:d2:92:94:6d:a9:83:ae:f7:1e:1e:f9:3e:82:f9:40:e4:
+ 96:3a:4d:23:90:98:43:8b:f0:36:07:8e:0b:4e:87:ec:37:8d:
+ 47:0f:f7:e8:06:92:65:3f:eb:8b:df:44:1a:2b:8b:c4:54:2d:
+ bc:61:d7:bc
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 3 (0x3)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 2 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:df:90:f5:53:a4:c4:b3:97:68:4a:37:9b:1f:fc:
+ 9c:24:e5:b5:ec:8d:f6:64:30:70:92:24:a6:07:8b:
+ 28:a2:3b:81:93:79:97:40:28:a5:da:6c:99:5a:35:
+ 93:7e:17:8e:89:85:a3:ef:41:be:15:27:c1:9b:b6:
+ 1d:e4:83:4a:d6:59:6f:88:95:23:d8:71:6a:7e:fb:
+ 8d:29:3c:f3:bd:76:51:eb:50:d1:83:ac:cd:90:87:
+ b5:85:50:5e:0b:bf:77:29:53:ca:7b:4f:7b:da:e4:
+ 0e:9d:be:5a:47:44:e3:50:8e:2c:7e:bc:6a:08:e3:
+ bc:ee:64:31:04:84:24:e9:e0:e0:d9:57:86:d6:57:
+ dd:c9:fa:cd:a5:f3:d8:86:8b:84:31:c7:e7:c6:81:
+ 42:52:2d:ac:b2:ac:a8:b2:d4:32:c5:b2:c4:0a:47:
+ 5c:00:0c:b9:d3:d8:04:65:dd:1c:4b:7e:1f:5b:81:
+ e1:85:17:be:70:4b:a8:1c:0d:15:54:c2:db:65:78:
+ 18:15:15:57:73:a8:3a:31:36:5b:6f:c3:38:17:32:
+ ce:05:17:69:53:f4:9b:f3:d0:18:93:b9:e9:a1:de:
+ 4a:79:d6:95:ac:f7:dd:eb:15:75:13:73:0d:47:4d:
+ 1f:0b:fd:15:88:26:be:71:59:23:d0:d7:55:4a:5d:
+ 73:21
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ D7:32:56:4A:55:77:36:2A:CD:B8:19:6E:32:13:40:97:54:87:C1:41
+ X509v3 Authority Key Identifier:
+ keyid:3C:15:EB:E0:B6:E5:4B:77:A7:DC:BC:E5:01:5F:E2:B6:6B:A0:24:E1
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 8f:47:2b:77:7c:3c:46:a9:88:cd:6f:33:dc:93:09:ff:86:b4:
+ 4a:26:ff:7a:db:d8:bc:a2:f3:b1:32:06:68:a8:fb:7e:f3:55:
+ 62:45:23:12:65:0b:b9:21:65:6f:06:63:81:83:0b:d6:c6:98:
+ 85:53:d1:8d:bd:d0:7b:36:53:54:7e:8c:4b:24:14:eb:f2:35:
+ 1c:b8:10:a3:31:96:19:9f:78:6c:6b:26:ab:bb:26:ac:33:b5:
+ 1a:b3:76:c8:45:17:16:a0:39:54:99:f9:b3:58:04:d3:09:51:
+ 21:e4:24:e4:f4:ce:a6:c7:f7:a9:1e:01:a1:16:c1:d2:7b:5c:
+ 5b:bb:98:b6:b2:c2:4f:2c:35:9a:68:ab:1d:6b:63:35:02:f4:
+ f0:bb:f1:ea:ea:6f:46:8a:31:51:5e:16:cc:9f:c0:92:26:e1:
+ 78:a7:f5:b4:91:4f:8b:9f:3c:32:6b:db:62:a2:e4:32:e4:83:
+ 07:26:68:85:b5:d2:e6:5c:70:b4:bf:ec:ee:a4:79:62:59:7d:
+ ff:11:25:67:63:ec:3f:3e:b5:71:8b:4f:33:1d:26:b0:e3:2c:
+ 32:cc:12:43:97:32:7c:7a:02:45:54:f3:9a:25:36:8c:fe:36:
+ 05:be:37:5e:e4:92:e8:5d:f0:72:bc:3d:f3:70:88:51:64:19:
+ a6:8f:d3:c9
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:bd:ad:c8:5d:2d:85:2d:00:39:01:33:f2:03:b2:
+ e4:87:7c:e5:45:35:fa:80:8c:99:92:fb:ba:8c:f8:
+ d7:e6:3a:51:1d:a3:b3:67:9f:14:fe:8c:27:c3:82:
+ 30:b3:c5:12:9d:7a:7e:c0:13:3c:a3:73:29:ec:f5:
+ 6a:d0:68:0d:e8:35:13:01:00:c9:f9:6a:f2:53:50:
+ a4:12:82:82:d4:1a:30:45:6d:b1:a0:d8:56:5b:36:
+ 98:59:4c:28:78:88:21:e6:44:34:af:55:12:89:5e:
+ 6a:a3:8b:27:a3:65:b1:f0:0b:67:49:d8:41:ca:0a:
+ 0e:63:48:5f:4a:2f:12:3f:5a:37:85:4d:70:80:9e:
+ 8c:d0:54:e8:3e:09:fe:99:b5:51:67:0a:5d:8a:0e:
+ 97:a5:36:55:cf:10:9d:45:07:44:c7:4a:60:4e:13:
+ 25:99:0f:6c:7d:f9:7a:99:52:2a:e2:7b:b5:7a:50:
+ 21:72:24:e7:52:cf:4a:27:6c:60:a0:a9:2c:c7:70:
+ 3e:6e:0b:4e:21:c6:0a:30:a6:a9:73:a0:08:66:ab:
+ 99:3e:03:92:44:89:23:2d:03:f4:13:5f:42:55:ef:
+ 80:03:5a:aa:34:84:ae:e4:b7:b7:cc:51:1a:d0:ec:
+ 04:ab:e5:bb:f1:d1:80:8d:6a:ab:e6:80:2c:7d:0e:
+ fe:f3
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 3C:15:EB:E0:B6:E5:4B:77:A7:DC:BC:E5:01:5F:E2:B6:6B:A0:24:E1
+ X509v3 Authority Key Identifier:
+ keyid:3C:15:EB:E0:B6:E5:4B:77:A7:DC:BC:E5:01:5F:E2:B6:6B:A0:24:E1
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 9a:45:ef:29:2f:b6:bf:98:7d:f0:e1:b4:ac:5c:7e:f4:3f:2b:
+ 87:76:19:32:b0:f1:b0:ff:32:05:c4:c6:d4:9d:bf:22:31:30:
+ 79:a3:a1:ec:66:c5:02:bd:7f:cc:47:e0:39:7f:fd:19:d5:4f:
+ 2b:a7:0a:b7:5b:3f:a9:54:51:1d:d7:dd:8f:72:7d:b7:1a:a1:
+ 16:5e:80:d0:d0:83:9f:87:13:c5:66:79:cf:26:5e:38:c6:0c:
+ f8:76:2e:ff:8b:68:95:d8:f6:84:f2:13:13:59:d3:b3:a6:93:
+ 73:f8:5d:e7:f3:75:9a:42:30:74:ed:c0:a5:84:cf:30:eb:9c:
+ 89:ee:26:6c:a3:9a:b4:01:e2:f4:21:94:eb:69:3d:6b:82:dd:
+ f9:88:57:37:64:0a:09:8c:fd:29:73:2d:85:ca:fa:f0:38:76:
+ cc:65:c3:52:50:8d:0e:2e:f5:9f:fe:a0:5a:b3:7a:dc:c6:ee:
+ e8:a6:0a:95:23:ab:0c:86:89:87:aa:ff:6b:88:49:ef:eb:63:
+ d8:ea:d1:86:b0:c8:3c:eb:f3:d3:ff:5f:95:a0:68:dc:52:a1:
+ 26:e5:f2:60:c5:fd:9d:fa:03:fd:5f:c9:33:21:c8:9e:3f:e7:
+ 75:b4:c5:43:3b:7c:65:38:82:87:76:1d:aa:7b:48:81:27:03:
+ 93:cb:81:50
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----

Powered by Google App Engine
This is Rietveld 408576698