| OLD | NEW |
|---|
| (Empty) | |
| 1 [Created by: generate-violates-pathlen-1-constrained-root.py] |
| 2 |
| 3 Certificate chain with 2 intermediates and one end entity certificate. The |
| 4 root certificate has a pathlen:1 restriction, and constraints are enforced |
| 5 on this trust anchor making it an invalid chain. |
| 6 |
| 7 Certificate: |
| 8 Data: |
| 9 Version: 3 (0x2) |
| 10 Serial Number: 1 (0x1) |
| 11 Signature Algorithm: sha256WithRSAEncryption |
| 12 Issuer: CN=Intermediate2 |
| 13 Validity |
| 14 Not Before: Jan 1 12:00:00 2015 GMT |
| 15 Not After : Jan 1 12:00:00 2016 GMT |
| 16 Subject: CN=Target |
| 17 Subject Public Key Info: |
| 18 Public Key Algorithm: rsaEncryption |
| 19 Public-Key: (2048 bit) |
| 20 Modulus: |
| 21 00:b3:a3:d6:09:6c:d5:c4:2b:7b:c6:2d:9f:d3:91: |
| 22 39:f1:53:f0:93:49:96:8d:97:0c:d5:36:1d:7c:86: |
| 23 4f:2c:12:2c:5a:c9:32:b8:ff:21:71:f4:47:06:6f: |
| 24 30:08:2e:76:71:04:ec:f1:9d:f1:b0:59:36:03:64: |
| 25 1f:35:b0:a4:e6:ef:e6:aa:94:4e:d8:6e:aa:9f:92: |
| 26 63:a6:9a:42:47:fc:30:99:a5:c5:90:11:bb:b5:9d: |
| 27 b1:b0:ec:12:c2:1f:29:42:57:d7:90:97:78:5f:5c: |
| 28 28:ab:49:7f:24:f3:2a:0f:68:a2:0a:e5:2a:54:8e: |
| 29 90:04:71:e2:13:9e:52:2e:c7:e6:ff:35:36:e7:01: |
| 30 d7:2b:7f:5b:54:c0:20:e6:b3:09:16:e7:13:bb:96: |
| 31 3e:b7:45:3d:8d:5e:3b:6a:fe:c2:cb:5b:0d:bf:ed: |
| 32 92:98:74:9e:f1:7b:94:71:d0:b1:50:ec:81:06:3d: |
| 33 12:39:f2:00:d3:60:9c:3c:9c:5a:a1:58:cc:56:b1: |
| 34 4f:a7:a1:ec:c7:c5:52:70:81:99:99:a4:ef:de:f4: |
| 35 0d:c1:c5:ff:c6:83:c6:e8:d4:bd:f8:27:f9:86:e0: |
| 36 3c:d4:7b:31:17:4d:49:c8:ce:c0:27:6a:4f:0a:fb: |
| 37 79:75:93:47:b0:05:f8:2e:10:f4:0b:39:ce:f6:43: |
| 38 87:07 |
| 39 Exponent: 65537 (0x10001) |
| 40 X509v3 extensions: |
| 41 X509v3 Subject Key Identifier: |
| 42 FD:9F:2A:24:CC:3C:CE:DA:6D:41:F0:3B:79:09:11:71:B2:29:31:17 |
| 43 X509v3 Authority Key Identifier: |
| 44 keyid:4D:F0:7D:C0:A0:7D:84:3E:38:63:E2:76:18:78:25:8C:09:DD:12:3
6 |
| 45 |
| 46 Authority Information Access: |
| 47 CA Issuers - URI:http://url-for-aia/Intermediate2.cer |
| 48 |
| 49 X509v3 CRL Distribution Points: |
| 50 |
| 51 Full Name: |
| 52 URI:http://url-for-crl/Intermediate2.crl |
| 53 |
| 54 X509v3 Key Usage: critical |
| 55 Digital Signature, Key Encipherment |
| 56 X509v3 Extended Key Usage: |
| 57 TLS Web Server Authentication, TLS Web Client Authentication |
| 58 Signature Algorithm: sha256WithRSAEncryption |
| 59 2b:4d:3f:19:05:a2:6b:66:7e:85:21:18:9a:0c:f0:81:cd:f7: |
| 60 81:71:50:38:95:f4:d0:68:d6:e2:02:9b:f3:08:1e:8c:4a:57: |
| 61 b6:2b:e3:57:7c:ca:70:74:48:ee:d6:5f:2e:f7:b5:fc:95:75: |
| 62 fa:c3:1d:5c:e1:aa:dc:85:cc:4c:2f:a7:05:b6:4f:38:a7:50: |
| 63 44:8c:4a:1f:2c:fc:37:f4:96:a9:03:77:65:b0:5d:a4:36:f9: |
| 64 29:ab:6e:1e:64:47:9b:cd:89:45:85:84:d3:4a:0f:97:87:99: |
| 65 83:15:67:cb:42:80:69:8d:17:89:d0:1a:c5:e5:48:60:86:b3: |
| 66 20:2e:9a:40:7b:ec:90:53:fd:b4:6e:6b:d2:82:2b:5a:5c:e4: |
| 67 fe:ee:16:ec:15:20:f8:4d:07:b6:f0:9a:95:6c:08:d4:d0:b2: |
| 68 09:3d:67:40:13:a6:5b:21:5f:03:4b:d7:c5:83:a9:2d:a1:1b: |
| 69 93:c6:5b:6d:36:85:f7:4c:9c:65:33:ab:e1:8f:e1:18:c1:6b: |
| 70 ec:4c:c7:a4:de:8a:b8:a1:66:a3:94:e3:40:5e:8c:cd:42:e5: |
| 71 f2:8a:e0:5b:19:01:5b:ba:74:eb:11:3b:ac:56:04:6b:a7:22: |
| 72 35:9b:ac:3e:da:12:3f:42:39:3d:7e:7d:ac:1e:3c:c6:7b:09: |
| 73 8f:97:f2:f2 |
| 74 -----BEGIN CERTIFICATE----- |
| 75 MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl |
| 76 cm1lZGlhdGUyMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowETEPMA0G |
| 77 A1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6PW |
| 78 CWzVxCt7xi2f05E58VPwk0mWjZcM1TYdfIZPLBIsWskyuP8hcfRHBm8wCC52cQTs |
| 79 8Z3xsFk2A2QfNbCk5u/mqpRO2G6qn5JjpppCR/wwmaXFkBG7tZ2xsOwSwh8pQlfX |
| 80 kJd4X1woq0l/JPMqD2iiCuUqVI6QBHHiE55SLsfm/zU25wHXK39bVMAg5rMJFucT |
| 81 u5Y+t0U9jV47av7Cy1sNv+2SmHSe8XuUcdCxUOyBBj0SOfIA02CcPJxaoVjMVrFP |
| 82 p6Hsx8VScIGZmaTv3vQNwcX/xoPG6NS9+Cf5huA81HsxF01JyM7AJ2pPCvt5dZNH |
| 83 sAX4LhD0CznO9kOHBwIDAQABo4HrMIHoMB0GA1UdDgQWBBT9nyokzDzO2m1B8Dt5 |
| 84 CRFxsikxFzAfBgNVHSMEGDAWgBRN8H3AoH2EPjhj4nYYeCWMCd0SNjBABggrBgEF |
| 85 BQcBAQQ0MDIwMAYIKwYBBQUHMAKGJGh0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1l |
| 86 ZGlhdGUyLmNlcjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vdXJsLWZvci1jcmwv |
| 87 SW50ZXJtZWRpYXRlMi5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG |
| 88 AQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAK00/GQWia2Z+hSEY |
| 89 mgzwgc33gXFQOJX00GjW4gKb8wgejEpXtivjV3zKcHRI7tZfLve1/JV1+sMdXOGq |
| 90 3IXMTC+nBbZPOKdQRIxKHyz8N/SWqQN3ZbBdpDb5KatuHmRHm82JRYWE00oPl4eZ |
| 91 gxVny0KAaY0XidAaxeVIYIazIC6aQHvskFP9tG5r0oIrWlzk/u4W7BUg+E0HtvCa |
| 92 lWwI1NCyCT1nQBOmWyFfA0vXxYOpLaEbk8ZbbTaF90ycZTOr4Y/hGMFr7EzHpN6K |
| 93 uKFmo5TjQF6MzULl8orgWxkBW7p06xE7rFYEa6ciNZusPtoSP0I5PX59rB48xnsJ |
| 94 j5fy8g== |
| 95 -----END CERTIFICATE----- |
| 96 |
| 97 Certificate: |
| 98 Data: |
| 99 Version: 3 (0x2) |
| 100 Serial Number: 1 (0x1) |
| 101 Signature Algorithm: sha256WithRSAEncryption |
| 102 Issuer: CN=Intermediate1 |
| 103 Validity |
| 104 Not Before: Jan 1 12:00:00 2015 GMT |
| 105 Not After : Jan 1 12:00:00 2016 GMT |
| 106 Subject: CN=Intermediate2 |
| 107 Subject Public Key Info: |
| 108 Public Key Algorithm: rsaEncryption |
| 109 Public-Key: (2048 bit) |
| 110 Modulus: |
| 111 00:c9:f0:db:40:19:44:5e:67:d4:e7:dd:4f:67:12: |
| 112 71:af:2a:42:76:de:6a:c0:ce:e6:9f:78:4e:90:f9: |
| 113 62:6a:14:9d:5e:63:3a:55:8e:88:a4:83:34:f6:f1: |
| 114 35:19:d1:fe:94:61:b6:9a:c6:b0:47:81:95:69:21: |
| 115 ff:ca:c9:c9:79:4c:ac:ee:f6:08:ba:eb:ae:fe:96: |
| 116 8a:dc:97:11:c1:2f:8b:55:9f:58:cb:b1:8f:c3:2a: |
| 117 36:0b:4b:d2:17:36:45:0d:33:64:b0:58:27:45:a1: |
| 118 71:f1:db:2c:d7:de:6f:6d:f5:bc:38:62:c3:5a:9d: |
| 119 f5:95:58:1d:ef:c2:00:6a:e5:c2:97:84:f7:ac:cc: |
| 120 19:18:f0:f8:cb:1a:b0:7b:b4:63:cc:35:5d:8c:cf: |
| 121 f0:0c:a6:7e:fa:19:96:a9:dd:8a:26:ef:31:e9:38: |
| 122 44:11:62:ff:30:35:fe:86:2a:5f:52:20:93:2a:a8: |
| 123 5c:a9:c6:16:08:3e:c1:da:34:4e:83:28:a1:d4:6c: |
| 124 78:58:06:a0:ef:65:69:4c:19:65:0a:82:98:d4:cf: |
| 125 56:22:d2:47:b1:82:40:8f:fc:50:5d:52:c5:12:a8: |
| 126 0f:17:0c:18:3b:ef:9b:8c:3c:da:c4:c2:2d:63:44: |
| 127 59:08:8e:54:4a:5d:1d:e7:ba:2f:7a:d7:92:40:8d: |
| 128 f4:9f |
| 129 Exponent: 65537 (0x10001) |
| 130 X509v3 extensions: |
| 131 X509v3 Subject Key Identifier: |
| 132 4D:F0:7D:C0:A0:7D:84:3E:38:63:E2:76:18:78:25:8C:09:DD:12:36 |
| 133 X509v3 Authority Key Identifier: |
| 134 keyid:C5:16:E8:6A:00:06:4F:0B:E0:6E:86:89:50:32:72:E0:22:08:AE:6
0 |
| 135 |
| 136 Authority Information Access: |
| 137 CA Issuers - URI:http://url-for-aia/Intermediate1.cer |
| 138 |
| 139 X509v3 CRL Distribution Points: |
| 140 |
| 141 Full Name: |
| 142 URI:http://url-for-crl/Intermediate1.crl |
| 143 |
| 144 X509v3 Key Usage: critical |
| 145 Certificate Sign, CRL Sign |
| 146 X509v3 Basic Constraints: critical |
| 147 CA:TRUE |
| 148 Signature Algorithm: sha256WithRSAEncryption |
| 149 52:00:7b:6d:93:e0:12:f4:bd:3e:1e:67:ac:a2:a2:46:dd:68: |
| 150 7f:41:c5:7e:a4:04:07:d2:5b:1a:d3:26:b7:9d:6a:62:9c:51: |
| 151 a5:19:55:7d:1d:42:4d:88:12:39:21:a5:fe:59:27:94:92:7c: |
| 152 4c:54:f6:85:f7:7d:3b:ac:23:51:63:67:05:66:b3:5e:4e:c2: |
| 153 db:e9:33:e6:5a:7c:08:96:16:b9:33:af:83:02:15:d0:eb:2f: |
| 154 02:98:18:5a:53:ca:f5:ee:a8:3c:95:44:bd:c7:bf:47:f4:7b: |
| 155 22:e5:b2:df:ee:e1:e2:eb:50:89:a9:ad:72:e2:03:74:f7:82: |
| 156 90:2a:6e:36:39:f6:06:95:81:52:56:e1:7e:35:32:43:90:78: |
| 157 57:54:00:fc:df:39:e6:f6:92:d6:57:5d:01:ee:69:a0:fb:8c: |
| 158 df:75:9b:8c:0e:e7:af:27:d4:11:01:c3:9d:56:7b:52:0b:06: |
| 159 57:1f:40:13:12:76:2a:40:b1:97:47:5f:6d:c4:5a:45:99:cd: |
| 160 96:61:ce:52:47:5f:8d:66:14:6d:a2:3c:bb:6e:0f:9c:3c:ba: |
| 161 9e:fb:75:92:32:eb:f3:71:16:d5:c6:84:e4:7d:c5:79:3f:ce: |
| 162 08:57:96:5b:56:c5:28:d5:96:41:f0:bc:a7:72:a1:18:6f:ab: |
| 163 d9:e5:47:93 |
| 164 -----BEGIN CERTIFICATE----- |
| 165 MIIDiTCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl |
| 166 cm1lZGlhdGUxMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQG |
| 167 A1UEAwwNSW50ZXJtZWRpYXRlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC |
| 168 ggEBAMnw20AZRF5n1OfdT2cSca8qQnbeasDO5p94TpD5YmoUnV5jOlWOiKSDNPbx |
| 169 NRnR/pRhtprGsEeBlWkh/8rJyXlMrO72CLrrrv6WityXEcEvi1WfWMuxj8MqNgtL |
| 170 0hc2RQ0zZLBYJ0WhcfHbLNfeb231vDhiw1qd9ZVYHe/CAGrlwpeE96zMGRjw+Msa |
| 171 sHu0Y8w1XYzP8AymfvoZlqndiibvMek4RBFi/zA1/oYqX1IgkyqoXKnGFgg+wdo0 |
| 172 ToMoodRseFgGoO9laUwZZQqCmNTPViLSR7GCQI/8UF1SxRKoDxcMGDvvm4w82sTC |
| 173 LWNEWQiOVEpdHee6L3rXkkCN9J8CAwEAAaOB3TCB2jAdBgNVHQ4EFgQUTfB9wKB9 |
| 174 hD44Y+J2GHgljAndEjYwHwYDVR0jBBgwFoAUxRboagAGTwvgboaJUDJy4CIIrmAw |
| 175 QAYIKwYBBQUHAQEENDAyMDAGCCsGAQUFBzAChiRodHRwOi8vdXJsLWZvci1haWEv |
| 176 SW50ZXJtZWRpYXRlMS5jZXIwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL3VybC1m |
| 177 b3ItY3JsL0ludGVybWVkaWF0ZTEuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB |
| 178 Af8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBSAHttk+AS9L0+HmesoqJG3Wh/ |
| 179 QcV+pAQH0lsa0ya3nWpinFGlGVV9HUJNiBI5IaX+WSeUknxMVPaF9307rCNRY2cF |
| 180 ZrNeTsLb6TPmWnwIlha5M6+DAhXQ6y8CmBhaU8r17qg8lUS9x79H9Hsi5bLf7uHi |
| 181 61CJqa1y4gN094KQKm42OfYGlYFSVuF+NTJDkHhXVAD83znm9pLWV10B7mmg+4zf |
| 182 dZuMDuevJ9QRAcOdVntSCwZXH0ATEnYqQLGXR19txFpFmc2WYc5SR1+NZhRtojy7 |
| 183 bg+cPLqe+3WSMuvzcRbVxoTkfcV5P84IV5ZbVsUo1ZZB8LyncqEYb6vZ5UeT |
| 184 -----END CERTIFICATE----- |
| 185 |
| 186 Certificate: |
| 187 Data: |
| 188 Version: 3 (0x2) |
| 189 Serial Number: 2 (0x2) |
| 190 Signature Algorithm: sha256WithRSAEncryption |
| 191 Issuer: CN=Root |
| 192 Validity |
| 193 Not Before: Jan 1 12:00:00 2015 GMT |
| 194 Not After : Jan 1 12:00:00 2016 GMT |
| 195 Subject: CN=Intermediate1 |
| 196 Subject Public Key Info: |
| 197 Public Key Algorithm: rsaEncryption |
| 198 Public-Key: (2048 bit) |
| 199 Modulus: |
| 200 00:e9:9a:81:41:08:cf:b0:5d:90:15:7b:33:d8:14: |
| 201 e0:04:05:c4:86:6c:65:6d:fa:9c:cb:68:e8:d3:3f: |
| 202 1f:02:00:4c:b0:8d:21:ab:fb:f4:ea:e4:d5:10:84: |
| 203 73:99:ed:ac:1a:d8:96:66:21:0b:8a:40:56:54:37: |
| 204 1e:49:b4:96:d8:be:63:8a:b2:5c:16:a1:c6:79:d0: |
| 205 30:3d:ee:83:da:58:e3:cf:7b:fd:37:d6:29:74:6a: |
| 206 69:8a:62:9f:1a:6f:22:7b:2b:68:51:b8:af:91:d3: |
| 207 48:7a:a1:d1:cb:ea:d7:c2:54:f7:09:55:a4:7f:cf: |
| 208 33:87:43:80:bb:04:2d:be:77:ea:db:e4:59:a6:4b: |
| 209 c4:9e:d4:6a:54:b6:45:4d:4e:28:c0:13:33:d2:0a: |
| 210 12:49:4a:d7:e0:60:a7:88:0b:3d:54:61:5a:e1:e5: |
| 211 f3:56:56:42:f0:3c:4e:65:dc:b9:c3:07:7f:56:da: |
| 212 4a:45:c4:e4:ba:e7:66:e2:09:e3:4d:84:5d:24:af: |
| 213 bc:d2:2b:24:39:e3:04:bd:7c:1d:cf:71:5b:60:64: |
| 214 dc:f3:75:e3:18:44:3b:8f:b1:70:72:20:ab:da:30: |
| 215 bb:18:0d:d1:ed:fd:e8:87:5c:58:2d:de:11:e6:e8: |
| 216 0a:99:66:fd:a3:c3:b9:6b:02:ac:07:0c:35:c1:90: |
| 217 66:2d |
| 218 Exponent: 65537 (0x10001) |
| 219 X509v3 extensions: |
| 220 X509v3 Subject Key Identifier: |
| 221 C5:16:E8:6A:00:06:4F:0B:E0:6E:86:89:50:32:72:E0:22:08:AE:60 |
| 222 X509v3 Authority Key Identifier: |
| 223 keyid:E8:DD:B2:61:D1:FC:02:1F:CD:68:F1:34:9D:6E:55:E7:97:B5:3A:2
3 |
| 224 |
| 225 Authority Information Access: |
| 226 CA Issuers - URI:http://url-for-aia/Root.cer |
| 227 |
| 228 X509v3 CRL Distribution Points: |
| 229 |
| 230 Full Name: |
| 231 URI:http://url-for-crl/Root.crl |
| 232 |
| 233 X509v3 Key Usage: critical |
| 234 Certificate Sign, CRL Sign |
| 235 X509v3 Basic Constraints: critical |
| 236 CA:TRUE |
| 237 Signature Algorithm: sha256WithRSAEncryption |
| 238 68:ca:ff:4f:17:59:d1:14:01:ad:bd:21:09:39:d3:de:3f:9e: |
| 239 12:71:16:9c:49:f6:e1:2d:d2:d3:4f:93:d3:60:a0:6f:9e:ac: |
| 240 49:99:a2:2c:ad:fc:29:1a:e1:5a:6e:07:e8:83:67:67:e1:23: |
| 241 c4:01:e2:b5:c3:c1:28:f3:71:3e:49:e7:1e:dc:ee:66:fb:eb: |
| 242 64:3d:5c:2f:e2:1d:fd:55:f6:98:ff:fc:af:82:aa:45:d0:be: |
| 243 89:bd:73:4b:87:fb:a8:9e:c7:03:75:77:7c:d1:8c:50:f0:03: |
| 244 e2:7a:2e:f5:f8:dd:53:33:9f:86:d3:f3:32:83:d2:2a:70:67: |
| 245 ca:8a:f1:df:15:b0:fd:38:bf:67:4e:22:e2:6f:73:6c:a6:b9: |
| 246 27:c9:89:ce:a3:9e:00:7c:82:55:44:d5:e6:2a:3d:1c:80:e1: |
| 247 ef:37:f5:ab:e0:ea:25:b4:45:4c:28:50:2d:cb:ed:bb:6b:1d: |
| 248 06:3e:16:e4:f0:b8:15:16:6e:7a:91:cd:f3:1c:39:2c:ec:d3: |
| 249 7e:0b:e0:de:2a:f1:d5:27:78:a6:9c:3a:3f:b8:cc:b2:f6:9c: |
| 250 8f:f1:9b:ce:c6:67:eb:9f:f5:4b:39:87:89:ef:d2:2f:ba:73: |
| 251 d8:af:cc:90:95:9d:95:e4:1c:a5:fb:3a:85:f6:f8:cc:69:ae: |
| 252 2e:6a:fc:6e |
| 253 -----BEGIN CERTIFICATE----- |
| 254 MIIDbjCCAlagAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 255 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQGA1UEAwwNSW50 |
| 256 ZXJtZWRpYXRlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOmagUEI |
| 257 z7BdkBV7M9gU4AQFxIZsZW36nMto6NM/HwIATLCNIav79Ork1RCEc5ntrBrYlmYh |
| 258 C4pAVlQ3Hkm0lti+Y4qyXBahxnnQMD3ug9pY4897/TfWKXRqaYpinxpvInsraFG4 |
| 259 r5HTSHqh0cvq18JU9wlVpH/PM4dDgLsELb536tvkWaZLxJ7UalS2RU1OKMATM9IK |
| 260 EklK1+Bgp4gLPVRhWuHl81ZWQvA8TmXcucMHf1baSkXE5LrnZuIJ402EXSSvvNIr |
| 261 JDnjBL18Hc9xW2Bk3PN14xhEO4+xcHIgq9owuxgN0e396IdcWC3eEeboCplm/aPD |
| 262 uWsCrAcMNcGQZi0CAwEAAaOByzCByDAdBgNVHQ4EFgQUxRboagAGTwvgboaJUDJy |
| 263 4CIIrmAwHwYDVR0jBBgwFoAU6N2yYdH8Ah/NaPE0nW5V55e1OiMwNwYIKwYBBQUH |
| 264 AQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIw |
| 265 LAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4G |
| 266 A1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IB |
| 267 AQBoyv9PF1nRFAGtvSEJOdPeP54ScRacSfbhLdLTT5PTYKBvnqxJmaIsrfwpGuFa |
| 268 bgfog2dn4SPEAeK1w8Eo83E+Sece3O5m++tkPVwv4h39VfaY//yvgqpF0L6JvXNL |
| 269 h/uonscDdXd80YxQ8APiei71+N1TM5+G0/Myg9IqcGfKivHfFbD9OL9nTiLib3Ns |
| 270 prknyYnOo54AfIJVRNXmKj0cgOHvN/Wr4OoltEVMKFAty+27ax0GPhbk8LgVFm56 |
| 271 kc3zHDks7NN+C+DeKvHVJ3imnDo/uMyy9pyP8ZvOxmfrn/VLOYeJ79IvunPYr8yQ |
| 272 lZ2V5Byl+zqF9vjMaa4uavxu |
| 273 -----END CERTIFICATE----- |
| 274 |
| 275 Certificate: |
| 276 Data: |
| 277 Version: 3 (0x2) |
| 278 Serial Number: 1 (0x1) |
| 279 Signature Algorithm: sha256WithRSAEncryption |
| 280 Issuer: CN=Root |
| 281 Validity |
| 282 Not Before: Jan 1 12:00:00 2015 GMT |
| 283 Not After : Jan 1 12:00:00 2016 GMT |
| 284 Subject: CN=Root |
| 285 Subject Public Key Info: |
| 286 Public Key Algorithm: rsaEncryption |
| 287 Public-Key: (2048 bit) |
| 288 Modulus: |
| 289 00:ca:b8:37:0e:d3:aa:65:77:fd:8d:e5:02:89:2e: |
| 290 62:d3:50:7d:1b:05:5b:f1:d5:5d:b2:94:57:c2:c2: |
| 291 70:a5:fa:cb:02:e0:02:c0:d7:de:1b:2d:2d:b0:46: |
| 292 2e:d8:8e:69:7b:51:a7:cf:47:cf:bb:25:1e:ed:ed: |
| 293 67:ba:e8:a5:f7:85:59:d7:a2:fb:4f:55:00:22:05: |
| 294 84:e3:31:20:2b:e0:ff:72:9e:99:de:be:67:48:60: |
| 295 ac:86:35:3a:da:85:06:5b:92:29:7c:da:50:1c:e0: |
| 296 34:d8:5e:81:26:18:7e:de:07:20:c2:59:3b:43:f1: |
| 297 bd:02:29:d4:ae:29:6e:bb:dc:be:48:2c:9a:15:18: |
| 298 33:86:6f:c3:26:2e:88:46:35:ce:92:b1:c2:a6:96: |
| 299 cc:2c:e0:60:87:1f:9b:e2:a0:ce:7f:af:53:04:d8: |
| 300 24:cb:da:19:ca:3b:fe:02:f1:11:05:e7:40:af:2d: |
| 301 eb:df:c4:53:1e:64:5a:73:b5:93:42:46:64:72:a5: |
| 302 d9:d4:e0:70:65:f5:89:c3:07:83:17:0d:83:a8:aa: |
| 303 69:b5:56:57:20:1b:38:49:72:16:fb:a0:b4:d9:55: |
| 304 32:0a:e7:1c:1f:ec:3d:fc:7a:b9:81:02:d8:9e:57: |
| 305 cd:97:18:16:6e:de:36:fe:d2:63:73:b3:8a:6e:57: |
| 306 93:a9 |
| 307 Exponent: 65537 (0x10001) |
| 308 X509v3 extensions: |
| 309 X509v3 Subject Key Identifier: |
| 310 E8:DD:B2:61:D1:FC:02:1F:CD:68:F1:34:9D:6E:55:E7:97:B5:3A:23 |
| 311 X509v3 Authority Key Identifier: |
| 312 keyid:E8:DD:B2:61:D1:FC:02:1F:CD:68:F1:34:9D:6E:55:E7:97:B5:3A:2
3 |
| 313 |
| 314 Authority Information Access: |
| 315 CA Issuers - URI:http://url-for-aia/Root.cer |
| 316 |
| 317 X509v3 CRL Distribution Points: |
| 318 |
| 319 Full Name: |
| 320 URI:http://url-for-crl/Root.crl |
| 321 |
| 322 X509v3 Key Usage: critical |
| 323 Certificate Sign, CRL Sign |
| 324 X509v3 Basic Constraints: critical |
| 325 CA:TRUE, pathlen:1 |
| 326 Signature Algorithm: sha256WithRSAEncryption |
| 327 a5:51:20:51:70:47:97:be:a8:b8:d8:76:64:ac:f1:47:36:3c: |
| 328 4d:c2:d1:b1:23:81:dc:2e:c0:36:d1:83:97:af:94:c3:46:fd: |
| 329 bb:5e:9b:ca:e2:42:06:bb:ff:d4:68:f0:53:7f:96:43:cb:6f: |
| 330 24:09:53:a0:fb:d2:79:10:0f:f9:f8:3d:04:cb:23:40:50:37: |
| 331 5a:29:67:da:8a:b7:30:5b:62:b2:62:ce:70:43:81:29:c1:79: |
| 332 91:c8:b6:80:76:cf:93:45:70:ee:6b:22:a1:69:29:a6:e3:62: |
| 333 d0:3d:27:67:86:26:dc:71:49:e3:1a:98:05:63:26:d8:e5:80: |
| 334 b7:d9:38:db:1b:97:fc:0b:97:1f:5a:59:24:ea:6c:f6:c2:f6: |
| 335 c1:ee:b8:02:48:1a:23:97:1d:3f:24:45:9c:f4:37:6f:ee:73: |
| 336 1b:bf:d3:c1:ed:a1:50:37:48:28:2f:ee:68:bc:d6:a8:35:a5: |
| 337 1c:00:a1:52:29:b5:a4:2a:79:f4:f9:a0:a5:30:6f:3f:01:ca: |
| 338 47:f0:08:8a:3f:3e:a9:bf:3e:4c:ef:e3:c3:ec:35:c5:5b:f3: |
| 339 58:18:80:be:08:e9:c2:77:a6:17:5c:62:3c:77:fe:a6:69:0e: |
| 340 de:ca:96:dd:ed:13:01:ef:20:85:2f:94:a2:7d:30:df:c5:4d: |
| 341 84:e2:4d:1c |
| 342 -----BEGIN TRUST_ANCHOR_CONSTRAINED----- |
| 343 MIIDaDCCAlCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 344 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 345 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMq4Nw7TqmV3/Y3lAoku |
| 346 YtNQfRsFW/HVXbKUV8LCcKX6ywLgAsDX3hstLbBGLtiOaXtRp89Hz7slHu3tZ7ro |
| 347 pfeFWdei+09VACIFhOMxICvg/3Kemd6+Z0hgrIY1OtqFBluSKXzaUBzgNNhegSYY |
| 348 ft4HIMJZO0PxvQIp1K4pbrvcvkgsmhUYM4ZvwyYuiEY1zpKxwqaWzCzgYIcfm+Kg |
| 349 zn+vUwTYJMvaGco7/gLxEQXnQK8t69/EUx5kWnO1k0JGZHKl2dTgcGX1icMHgxcN |
| 350 g6iqabVWVyAbOElyFvugtNlVMgrnHB/sPfx6uYEC2J5XzZcYFm7eNv7SY3Ozim5X |
| 351 k6kCAwEAAaOBzjCByzAdBgNVHQ4EFgQU6N2yYdH8Ah/NaPE0nW5V55e1OiMwHwYD |
| 352 VR0jBBgwFoAU6N2yYdH8Ah/NaPE0nW5V55e1OiMwNwYIKwYBBQUHAQEEKzApMCcG |
| 353 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 354 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 355 AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMA0GCSqGSIb3DQEBCwUAA4IBAQClUSBR |
| 356 cEeXvqi42HZkrPFHNjxNwtGxI4HcLsA20YOXr5TDRv27XpvK4kIGu//UaPBTf5ZD |
| 357 y28kCVOg+9J5EA/5+D0EyyNAUDdaKWfaircwW2KyYs5wQ4EpwXmRyLaAds+TRXDu |
| 358 ayKhaSmm42LQPSdnhibccUnjGpgFYybY5YC32TjbG5f8C5cfWlkk6mz2wvbB7rgC |
| 359 SBojlx0/JEWc9Ddv7nMbv9PB7aFQN0goL+5ovNaoNaUcAKFSKbWkKnn0+aClMG8/ |
| 360 AcpH8AiKPz6pvz5M7+PD7DXFW/NYGIC+COnCd6YXXGI8d/6maQ7eypbd7RMB7yCF |
| 361 L5SifTDfxU2E4k0c |
| 362 -----END TRUST_ANCHOR_CONSTRAINED----- |
| 363 |
| 364 -----BEGIN TIME----- |
| 365 MTUwMzAyMTIwMDAwWg== |
| 366 -----END TIME----- |
| 367 |
| 368 -----BEGIN VERIFY_RESULT----- |
| 369 RkFJTA== |
| 370 -----END VERIFY_RESULT----- |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 2245643004:
Support trust anchor constraints, by specifying them as a certificate. (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@master