net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem - Issue 2245643004: Support trust anchor constraints, by specifying them as a certificate.

Side by Side Diff: net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem

Issue 2245643004: Support trust anchor constraints, by specifying them as a certificate. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: update gypi Created 4 years, 4 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« no previous file with comments | « net/data/verify_certificate_chain_unittest/violates-pathlen-1-constrained-root.pem ('k') | net/data/verify_certificate_chain_unittest/violates-pathlen-1-unconstrained-root.pem » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
	(Empty)
1 [Created by: generate-violates-pathlen-1-root.py]

2

3 Certificate chain with 2 intermediates and one end entity certificate. The

4 root certificate has a pathlen:1 restriction. Ordinarily this would be an

5 invalid chain, however constraints on trust anchors are not validated.

6

7 Certificate:

8 Data:

9 Version: 3 (0x2)

10 Serial Number: 1 (0x1)

11 Signature Algorithm: sha256WithRSAEncryption

12 Issuer: CN=Intermediate2

13 Validity

14 Not Before: Jan 1 12:00:00 2015 GMT

15 Not After : Jan 1 12:00:00 2016 GMT

16 Subject: CN=Target

17 Subject Public Key Info:

18 Public Key Algorithm: rsaEncryption

19 Public-Key: (2048 bit)

20 Modulus:

21 00:c7:02:89:18:09:bc:9f:9c:9a:41:35:a9:5f:f7:

22 c2:22:3e:b2:39:fe:ba:57:1d:95:2e:dd:65:23:45:

23 ce:33:77:99:dd:f1:d7:69:0b:fb:a7:0e:89:98:02:

24 7a:94:58:7b:61:e6:10:98:69:1a:09:2b:9f:73:3a:

25 d8:70:18:64:e2:8a:85:87:c5:69:f3:45:1e:70:d8:

26 c0:5e:23:6c:a6:7d:8f:77:23:8a:5d:74:a0:0b:d5:

27 7f:a7:dd:f5:21:2d:02:c2:0f:e0:c8:f8:29:20:f5:

28 5e:33:58:2a:38:c8:41:a6:25:66:ac:cf:c4:03:cb:

29 03:25:db:e6:65:3d:bd:ab:da:fb:8f:b5:0e:d8:ba:

30 3d:14:2b:9b:07:62:13:d4:1c:ea:b1:d5:7d:4d:54:

31 04:c0:13:fb:d1:df:c2:36:e3:00:cf:fa:49:0b:44:

32 9c:05:80:19:75:02:25:41:3d:e0:e6:cd:87:d8:63:

33 d7:84:3d:0c:3a:c8:ec:e8:58:22:62:2f:18:e9:ad:

34 45:ce:b8:a6:63:c2:65:29:69:1e:21:08:8d:3a:da:

35 96:e0:89:27:09:cc:35:e9:f1:f0:d8:f3:61:c5:05:

36 3e:b1:d0:00:3c:7e:25:4a:36:e3:1d:b4:95:37:2d:

37 44:ac:9e:79:38:67:e7:c7:ac:0c:71:d3:d1:60:86:

38 44:09

39 Exponent: 65537 (0x10001)

40 X509v3 extensions:

41 X509v3 Subject Key Identifier:

42 C6:CC:7E:B5:7C:7A:51:EC:1C:35:E1:CD:3C:A7:FC:06:31:53:CA:06

43 X509v3 Authority Key Identifier:

44 keyid:48:BF:34:63:E8:E4:FB:87:49:F2:0E:A0:23:38:D2:BE:6A:3D:45:3 C

45

46 Authority Information Access:

47 CA Issuers - URI:http://url-for-aia/Intermediate2.cer

48

49 X509v3 CRL Distribution Points:

50

51 Full Name:

52 URI:http://url-for-crl/Intermediate2.crl

53

54 X509v3 Key Usage: critical

55 Digital Signature, Key Encipherment

56 X509v3 Extended Key Usage:

57 TLS Web Server Authentication, TLS Web Client Authentication

58 Signature Algorithm: sha256WithRSAEncryption

59 51:8c:f9:c8:cb:cc:14:e3:54:cd:63:1a:f0:1e:0b:a3:6e:60:

60 99:68:06:fe:e6:97:f5:68:e7:d8:7a:e1:b1:78:48:3e:03:57:

61 e4:84:5a:24:08:47:9f:fb:73:1a:7f:76:66:40:5d:ac:2f:f4:

62 f0:9e:b1:21:b0:15:5f:d1:68:4a:b6:fe:84:23:05:51:7d:d3:

63 22:95:81:d0:76:87:29:9c:24:e8:3f:e0:41:a0:bb:57:96:1d:

64 7e:92:2d:22:b3:98:67:4c:87:5e:42:f5:c9:08:fb:b9:05:25:

65 73:b8:f0:9a:45:62:96:c6:48:b6:fe:ac:6c:42:a4:9e:41:aa:

66 fd:55:86:8e:4f:85:9e:b7:26:75:e3:79:28:ed:09:8d:63:35:

67 b5:55:78:13:46:43:17:3d:e8:12:c8:c3:c6:2f:88:f9:ce:b5:

68 df:af:6d:70:6f:6b:f6:1e:ff:1a:44:84:b6:51:7a:b1:7c:4f:

69 b4:7a:19:83:4c:85:b8:d0:e7:65:2e:0e:e2:ed:92:33:c4:f9:

70 cd:35:78:96:d6:8e:06:2c:17:18:0e:bf:be:f0:c5:7f:d3:85:

71 71:62:94:83:d8:1b:51:c4:77:37:d3:6a:fd:43:b4:54:44:fe:

72 f9:da:01:3e:59:d4:7b:a4:26:32:e4:ba:9a:bf:f3:2b:6c:71:

73 d2:1e:2c:c4

74 -----BEGIN CERTIFICATE-----

75 MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl

76 cm1lZGlhdGUyMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowETEPMA0G

77 A1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwKJ

78 GAm8n5yaQTWpX/fCIj6yOf66Vx2VLt1lI0XOM3eZ3fHXaQv7pw6JmAJ6lFh7YeYQ

79 mGkaCSufczrYcBhk4oqFh8Vp80UecNjAXiNspn2PdyOKXXSgC9V/p931IS0Cwg/g

80 yPgpIPVeM1gqOMhBpiVmrM/EA8sDJdvmZT29q9r7j7UO2Lo9FCubB2IT1BzqsdV9

81 TVQEwBP70d/CNuMAz/pJC0ScBYAZdQIlQT3g5s2H2GPXhD0MOsjs6FgiYi8Y6a1F

82 zrimY8JlKWkeIQiNOtqW4IknCcw16fHw2PNhxQU+sdAAPH4lSjbjHbSVNy1ErJ55

83 OGfnx6wMcdPRYIZECQIDAQABo4HrMIHoMB0GA1UdDgQWBBTGzH61fHpR7Bw14c08

84 p/wGMVPKBjAfBgNVHSMEGDAWgBRIvzRj6OT7h0nyDqAjONK+aj1FPDBABggrBgEF

85 BQcBAQQ0MDIwMAYIKwYBBQUHMAKGJGh0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1l

86 ZGlhdGUyLmNlcjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vdXJsLWZvci1jcmwv

87 SW50ZXJtZWRpYXRlMi5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG

88 AQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAUYz5yMvMFONUzWMa

89 8B4Lo25gmWgG/uaX9Wjn2HrhsXhIPgNX5IRaJAhHn/tzGn92ZkBdrC/08J6xIbAV

90 X9FoSrb+hCMFUX3TIpWB0HaHKZwk6D/gQaC7V5YdfpItIrOYZ0yHXkL1yQj7uQUl

91 c7jwmkVilsZItv6sbEKknkGq/VWGjk+FnrcmdeN5KO0JjWM1tVV4E0ZDFz3oEsjD

92 xi+I+c61369tcG9r9h7/GkSEtlF6sXxPtHoZg0yFuNDnZS4O4u2SM8T5zTV4ltaO

93 BiwXGA6/vvDFf9OFcWKUg9gbUcR3N9Nq/UO0VET++doBPlnUe6QmMuS6mr/zK2xx

94 0h4sxA==

95 -----END CERTIFICATE-----

96

97 Certificate:

98 Data:

99 Version: 3 (0x2)

100 Serial Number: 1 (0x1)

101 Signature Algorithm: sha256WithRSAEncryption

102 Issuer: CN=Intermediate1

103 Validity

104 Not Before: Jan 1 12:00:00 2015 GMT

105 Not After : Jan 1 12:00:00 2016 GMT

106 Subject: CN=Intermediate2

107 Subject Public Key Info:

108 Public Key Algorithm: rsaEncryption

109 Public-Key: (2048 bit)

110 Modulus:

111 00:9b:46:28:e2:70:56:b6:e1:f2:57:56:40:07:c9:

112 66:0f:15:6f:6a:e9:b6:35:a4:f1:a7:17:4c:86:a4:

113 8c:b7:74:55:0f:f2:cb:b0:43:11:4a:61:e0:9f:ea:

114 8a:2b:c2:75:0f:b6:50:49:bc:ad:5c:3f:6c:92:4c:

115 64:dc:50:2e:4d:66:65:eb:ba:9f:17:b7:d1:7e:ff:

116 5d:d2:41:1f:9d:37:94:97:e1:f6:22:88:26:e2:8a:

117 65:0f:0d:16:1d:b1:cc:df:e4:b1:78:87:f0:c6:f5:

118 f0:21:c9:f6:69:34:64:4c:cd:5b:27:ad:ee:0b:3d:

119 e3:ee:7a:6b:35:21:23:2b:6d:a4:82:c1:e0:37:f1:

120 46:3c:16:c4:b9:20:29:16:13:14:26:05:41:c7:1e:

121 21:e9:57:69:a4:3a:7b:b1:fe:92:c4:72:75:f7:bc:

122 c0:ef:ba:4a:0c:73:37:c1:48:e2:4d:07:c4:14:da:

123 ae:26:31:39:06:b8:43:6b:ec:2a:df:c8:db:02:af:

124 24:9a:f2:af:28:98:1b:f3:0f:0d:57:2c:a5:c5:80:

125 ef:71:41:9f:99:16:20:d1:e2:f7:1d:59:1d:84:e2:

126 0b:2d:23:f7:2f:05:9e:51:c3:c9:65:84:ba:db:23:

127 2e:7e:43:b4:c1:eb:12:63:f4:3c:32:2e:18:dd:4c:

128 ad:8b

129 Exponent: 65537 (0x10001)

130 X509v3 extensions:

131 X509v3 Subject Key Identifier:

132 48:BF:34:63:E8:E4:FB:87:49:F2:0E:A0:23:38:D2:BE:6A:3D:45:3C

133 X509v3 Authority Key Identifier:

134 keyid:87:09:94:1A:5F:B2:4B:AE:02:70:24:A9:73:76:78:FD:C0:0E:DC:5 6

135

136 Authority Information Access:

137 CA Issuers - URI:http://url-for-aia/Intermediate1.cer

138

139 X509v3 CRL Distribution Points:

140

141 Full Name:

142 URI:http://url-for-crl/Intermediate1.crl

143

144 X509v3 Key Usage: critical

145 Certificate Sign, CRL Sign

146 X509v3 Basic Constraints: critical

147 CA:TRUE

148 Signature Algorithm: sha256WithRSAEncryption

149 be:14:33:c3:9f:0f:7b:fa:15:2f:1d:2c:29:52:bc:27:de:b3:

150 7a:f5:d2:e4:3a:51:38:97:8f:90:b2:ce:5d:50:88:77:5c:e8:

151 ae:35:01:68:13:3a:ca:5b:6c:ab:a2:ac:f0:e0:97:37:6f:ff:

152 15:d2:4a:f7:ff:80:7c:64:c8:6a:11:c1:02:f0:4b:0e:97:24:

153 81:7e:90:a4:38:41:af:8d:0b:eb:0b:24:2b:dc:89:4d:32:d1:

154 0b:b1:7c:67:6e:4f:43:bf:e0:63:9b:e8:f4:42:9c:3b:db:7e:

155 ec:f7:64:82:28:73:8c:a0:2e:73:d2:45:dd:3a:ad:6a:6a:5e:

156 ae:6d:f3:cd:be:4a:95:5c:d0:0d:87:54:b6:83:40:ed:14:e5:

157 d7:9d:23:e2:04:d1:6c:a0:2c:0a:ca:42:57:cc:f7:0b:66:4e:

158 35:ef:e3:93:5f:87:e9:0e:64:c7:52:c9:22:16:61:f9:ec:f7:

159 f0:4a:7a:b8:ef:d6:34:d4:6c:3d:b5:a9:6c:0b:f4:19:a8:9b:

160 04:d5:04:9f:fc:04:fe:60:7a:14:70:6f:38:92:80:be:8a:a6:

161 c4:57:a2:40:5d:bc:06:53:83:6d:f3:5f:f5:22:4a:22:10:a2:

162 82:00:87:35:77:07:f1:34:81:2f:86:0b:1a:3b:8f:3d:88:0c:

163 3a:a0:15:25

164 -----BEGIN CERTIFICATE-----

165 MIIDiTCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl

166 cm1lZGlhdGUxMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQG

167 A1UEAwwNSW50ZXJtZWRpYXRlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC

168 ggEBAJtGKOJwVrbh8ldWQAfJZg8Vb2rptjWk8acXTIakjLd0VQ/yy7BDEUph4J/q

169 iivCdQ+2UEm8rVw/bJJMZNxQLk1mZeu6nxe30X7/XdJBH503lJfh9iKIJuKKZQ8N

170 Fh2xzN/ksXiH8Mb18CHJ9mk0ZEzNWyet7gs94+56azUhIyttpILB4DfxRjwWxLkg

171 KRYTFCYFQcceIelXaaQ6e7H+ksRydfe8wO+6SgxzN8FI4k0HxBTariYxOQa4Q2vs

172 Kt/I2wKvJJryryiYG/MPDVcspcWA73FBn5kWINHi9x1ZHYTiCy0j9y8FnlHDyWWE

173 utsjLn5DtMHrEmP0PDIuGN1MrYsCAwEAAaOB3TCB2jAdBgNVHQ4EFgQUSL80Y+jk

174 +4dJ8g6gIzjSvmo9RTwwHwYDVR0jBBgwFoAUhwmUGl+yS64CcCSpc3Z4/cAO3FYw

175 QAYIKwYBBQUHAQEENDAyMDAGCCsGAQUFBzAChiRodHRwOi8vdXJsLWZvci1haWEv

176 SW50ZXJtZWRpYXRlMS5jZXIwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL3VybC1m

177 b3ItY3JsL0ludGVybWVkaWF0ZTEuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB

178 Af8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQC+FDPDnw97+hUvHSwpUrwn3rN6

179 9dLkOlE4l4+Qss5dUIh3XOiuNQFoEzrKW2yroqzw4Jc3b/8V0kr3/4B8ZMhqEcEC

180 8EsOlySBfpCkOEGvjQvrCyQr3IlNMtELsXxnbk9Dv+Bjm+j0Qpw7237s92SCKHOM

181 oC5z0kXdOq1qal6ubfPNvkqVXNANh1S2g0DtFOXXnSPiBNFsoCwKykJXzPcLZk41

182 7+OTX4fpDmTHUskiFmH57PfwSnq479Y01Gw9talsC/QZqJsE1QSf/AT+YHoUcG84

183 koC+iqbEV6JAXbwGU4Nt81/1IkoiEKKCAIc1dwfxNIEvhgsaO489iAw6oBUl

184 -----END CERTIFICATE-----

185

186 Certificate:

187 Data:

188 Version: 3 (0x2)

189 Serial Number: 2 (0x2)

190 Signature Algorithm: sha256WithRSAEncryption

191 Issuer: CN=Root

192 Validity

193 Not Before: Jan 1 12:00:00 2015 GMT

194 Not After : Jan 1 12:00:00 2016 GMT

195 Subject: CN=Intermediate1

196 Subject Public Key Info:

197 Public Key Algorithm: rsaEncryption

198 Public-Key: (2048 bit)

199 Modulus:

200 00:cc:c9:7a:84:dc:8e:0c:4b:60:fc:fb:35:ff:5c:

201 72:00:1d:25:df:87:50:fa:65:2e:fa:40:a2:c7:9a:

202 cb:b5:2e:b6:0d:d8:80:6c:54:ef:44:c9:2f:a4:20:

203 60:07:c7:0a:f9:0f:62:0c:30:9e:ff:9b:3f:a7:35:

204 6a:ab:a3:56:ca:1b:ea:62:90:0f:ef:e3:29:52:dc:

205 88:06:a5:65:1f:29:ba:73:11:b5:98:70:dd:88:7f:

206 83:a6:0b:4c:da:42:92:e6:08:45:da:f4:54:e0:8d:

207 67:6c:97:0b:fd:8c:13:65:81:6a:1b:49:1b:4e:c7:

208 de:dc:b5:68:1d:14:57:23:98:33:7b:43:a2:bf:da:

209 bf:ef:e7:58:43:27:d3:d6:a9:45:d0:8d:e7:d7:48:

210 b1:dc:f1:00:9b:85:8a:66:3e:20:f3:fc:e1:0f:89:

211 9f:28:a6:2d:2c:f7:a2:44:e8:47:5a:0a:fa:cd:8e:

212 40:2a:75:06:6d:ca:38:89:b6:9d:1f:15:d9:42:36:

213 14:7e:2b:c4:e3:d7:03:a6:cf:4c:cb:34:c0:ce:e9:

214 ad:05:da:8c:73:91:25:d3:23:3e:70:ab:16:e7:fe:

215 8b:95:69:f6:4f:98:68:86:04:d6:70:bd:0f:9a:37:

216 0b:35:b9:ad:18:27:aa:15:b7:08:d0:54:1e:94:af:

217 ed:f9

218 Exponent: 65537 (0x10001)

219 X509v3 extensions:

220 X509v3 Subject Key Identifier:

221 87:09:94:1A:5F:B2:4B:AE:02:70:24:A9:73:76:78:FD:C0:0E:DC:56

222 X509v3 Authority Key Identifier:

223 keyid:0F:0F:6A:FA:74:D2:B6:49:DD:B5:2E:25:97:97:E3:E0:51:F7:1E:2 A

224

225 Authority Information Access:

226 CA Issuers - URI:http://url-for-aia/Root.cer

227

228 X509v3 CRL Distribution Points:

229

230 Full Name:

231 URI:http://url-for-crl/Root.crl

232

233 X509v3 Key Usage: critical

234 Certificate Sign, CRL Sign

235 X509v3 Basic Constraints: critical

236 CA:TRUE

237 Signature Algorithm: sha256WithRSAEncryption

238 db:01:1b:5b:f9:4f:9a:03:74:cb:a6:84:16:ab:ba:bb:63:7d:

239 22:94:f5:70:03:dd:6d:fa:53:f2:23:c6:7b:a2:d2:62:96:ba:

240 5a:95:f8:c8:a0:1f:f5:37:01:ce:a5:56:ef:19:5e:da:30:3a:

241 81:ac:13:37:74:dd:5d:1b:b0:4a:cc:c0:b5:8f:d0:ce:6e:06:

242 2b:74:c0:c4:70:fa:3b:90:d1:7b:c3:10:b3:8f:e1:69:42:ec:

243 82:5c:09:ad:5b:0e:8d:4a:18:83:ec:f8:82:dc:e9:d8:5c:fa:

244 cc:f9:c9:6d:cc:b4:db:b0:d8:99:b9:fb:30:d2:28:a0:46:b8:

245 77:fc:c2:12:eb:75:52:20:81:85:da:a6:ed:71:49:db:5c:4f:

246 a5:31:0f:59:c2:73:8d:da:10:be:ec:0c:4a:f8:d4:35:c7:13:

247 5c:eb:f3:c8:42:19:d7:22:07:13:ac:71:46:9f:12:73:9e:0d:

248 2e:c6:75:2d:fc:00:b4:99:13:e4:35:be:7f:7a:2f:2c:7b:44:

249 57:3f:0f:2b:bb:06:25:45:94:2c:2d:af:c0:9f:e2:29:14:61:

250 53:9d:ac:89:d2:04:c6:b9:52:a0:21:70:6f:b1:c0:9c:c9:6d:

251 07:ab:14:d3:d3:49:05:bb:1e:4d:47:b6:62:6d:a2:35:3c:47:

252 3e:32:1c:11

253 -----BEGIN CERTIFICATE-----

254 MIIDbjCCAlagAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

255 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQGA1UEAwwNSW50

256 ZXJtZWRpYXRlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMzJeoTc

257 jgxLYPz7Nf9ccgAdJd+HUPplLvpAoseay7Uutg3YgGxU70TJL6QgYAfHCvkPYgww

258 nv+bP6c1aqujVsob6mKQD+/jKVLciAalZR8punMRtZhw3Yh/g6YLTNpCkuYIRdr0

259 VOCNZ2yXC/2ME2WBahtJG07H3ty1aB0UVyOYM3tDor/av+/nWEMn09apRdCN59dI

260 sdzxAJuFimY+IPP84Q+JnyimLSz3okToR1oK+s2OQCp1Bm3KOIm2nR8V2UI2FH4r

261 xOPXA6bPTMs0wM7prQXajHORJdMjPnCrFuf+i5Vp9k+YaIYE1nC9D5o3CzW5rRgn

262 qhW3CNBUHpSv7fkCAwEAAaOByzCByDAdBgNVHQ4EFgQUhwmUGl+yS64CcCSpc3Z4

263 /cAO3FYwHwYDVR0jBBgwFoAUDw9q+nTStkndtS4ll5fj4FH3HiowNwYIKwYBBQUH

264 AQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIw

265 LAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4G

266 A1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IB

267 AQDbARtb+U+aA3TLpoQWq7q7Y30ilPVwA91t+lPyI8Z7otJilrpalfjIoB/1NwHO

268 pVbvGV7aMDqBrBM3dN1dG7BKzMC1j9DObgYrdMDEcPo7kNF7wxCzj+FpQuyCXAmt

269 Ww6NShiD7PiC3OnYXPrM+cltzLTbsNiZufsw0iigRrh3/MIS63VSIIGF2qbtcUnb

270 XE+lMQ9ZwnON2hC+7AxK+NQ1xxNc6/PIQhnXIgcTrHFGnxJzng0uxnUt/AC0mRPk

271 Nb5/ei8se0RXPw8ruwYlRZQsLa/An+IpFGFTnayJ0gTGuVKgIXBvscCcyW0HqxTT

272 00kFux5NR7ZibaI1PEc+MhwR

273 -----END CERTIFICATE-----

274

275 Certificate:

276 Data:

277 Version: 3 (0x2)

278 Serial Number: 1 (0x1)

279 Signature Algorithm: sha256WithRSAEncryption

280 Issuer: CN=Root

281 Validity

282 Not Before: Jan 1 12:00:00 2015 GMT

283 Not After : Jan 1 12:00:00 2016 GMT

284 Subject: CN=Root

285 Subject Public Key Info:

286 Public Key Algorithm: rsaEncryption

287 Public-Key: (2048 bit)

288 Modulus:

289 00:f1:6d:df:8a:62:88:18:33:0e:b6:95:4d:a7:53:

290 82:ad:ec:81:5e:c7:e1:d8:b9:38:a5:eb:3f:8e:d8:

291 97:bb:ed:29:77:b2:d6:ac:34:96:a0:cd:a2:33:d8:

292 88:49:88:6b:ce:aa:91:02:b9:33:51:52:d5:e7:b6:

293 ef:55:d3:d6:6a:f3:3f:87:d9:1b:60:b2:e3:b3:78:

294 be:e2:8c:b4:30:f3:60:75:eb:30:c5:71:51:49:90:

295 b9:99:5c:2c:78:9e:72:0d:02:3f:16:bb:6d:f7:f7:

296 9e:07:d2:b4:47:85:ea:b0:92:3e:b6:8a:41:71:6a:

297 4c:f6:ba:6d:60:4f:7c:29:b3:82:1d:04:07:76:32:

298 bc:25:38:2c:e4:be:29:2d:80:c3:20:62:a3:65:31:

299 f2:14:93:2d:92:9d:54:8b:96:4e:4d:df:4e:f7:80:

300 b2:e7:88:fd:06:32:30:3e:64:9d:e4:96:e0:0e:3a:

301 ea:c3:4f:ca:df:4a:46:22:1f:df:92:bd:24:82:59:

302 20:36:95:62:82:92:2e:d9:d7:a7:93:1e:a7:75:fb:

303 a9:22:a6:98:4d:e6:f2:b4:12:d0:76:0c:b8:a2:fc:

304 c3:5e:e7:df:fb:c0:b5:90:5b:a8:1a:1d:33:ae:ab:

305 e3:25:3d:87:b5:58:c6:bc:e4:fa:db:e9:50:67:3f:

306 ad:ad

307 Exponent: 65537 (0x10001)

308 X509v3 extensions:

309 X509v3 Subject Key Identifier:

310 0F:0F:6A:FA:74:D2:B6:49:DD:B5:2E:25:97:97:E3:E0:51:F7:1E:2A

311 X509v3 Authority Key Identifier:

312 keyid:0F:0F:6A:FA:74:D2:B6:49:DD:B5:2E:25:97:97:E3:E0:51:F7:1E:2 A

313

314 Authority Information Access:

315 CA Issuers - URI:http://url-for-aia/Root.cer

316

317 X509v3 CRL Distribution Points:

318

319 Full Name:

320 URI:http://url-for-crl/Root.crl

321

322 X509v3 Key Usage: critical

323 Certificate Sign, CRL Sign

324 X509v3 Basic Constraints: critical

325 CA:TRUE, pathlen:1

326 Signature Algorithm: sha256WithRSAEncryption

327 38:cf:2c:95:d8:1b:14:a6:43:13:ed:9b:a2:9f:54:eb:33:64:

328 2b:a6:c0:04:81:23:52:27:f1:17:12:a1:9a:f0:d2:77:dd:06:

329 95:90:a5:bb:be:e1:98:f7:f0:11:a3:fc:71:80:c7:d0:72:f3:

330 d4:dc:3f:36:51:52:66:5f:92:a8:fa:ca:4f:8f:8f:2a:3d:93:

331 12:8a:4f:94:69:99:6f:60:0b:86:81:91:00:98:cd:00:37:a7:

332 c7:60:e9:f4:07:85:5b:db:35:9b:61:bb:b6:aa:ca:a2:af:1c:

333 a4:e2:f8:0d:2b:84:2a:9f:7f:53:b6:25:31:ff:31:b8:e6:03:

334 3c:f3:a1:5c:1a:51:4b:3e:d6:82:c9:24:d2:e8:3c:06:6b:b7:

335 f9:f5:77:55:67:fd:75:93:1a:d4:07:5d:6c:7c:6a:ed:12:9c:

336 b5:d6:f2:df:0c:39:a9:05:b9:11:b9:ca:21:31:26:5c:63:ac:

337 c3:bb:a7:e7:87:82:80:10:3a:32:fb:3a:9a:a8:0d:cf:af:94:

338 a4:a2:8a:0e:1c:1d:89:05:82:53:b6:86:1d:80:b4:00:de:31:

339 f1:20:4e:77:65:16:28:70:95:78:6b:d3:2e:e5:30:40:32:d2:

340 f6:b6:5c:30:de:07:70:5f:87:6b:51:31:85:4b:cf:8c:d9:0e:

341 01:9a:12:6c

342 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----

343 MIIDaDCCAlCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

344 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v

345 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPFt34piiBgzDraVTadT

346 gq3sgV7H4di5OKXrP47Yl7vtKXey1qw0lqDNojPYiEmIa86qkQK5M1FS1ee271XT

347 1mrzP4fZG2Cy47N4vuKMtDDzYHXrMMVxUUmQuZlcLHiecg0CPxa7bff3ngfStEeF

348 6rCSPraKQXFqTPa6bWBPfCmzgh0EB3YyvCU4LOS+KS2AwyBio2Ux8hSTLZKdVIuW

349 Tk3fTveAsueI/QYyMD5kneSW4A466sNPyt9KRiIf35K9JIJZIDaVYoKSLtnXp5Me

350 p3X7qSKmmE3m8rQS0HYMuKL8w17n3/vAtZBbqBodM66r4yU9h7VYxrzk+tvpUGc/

351 ra0CAwEAAaOBzjCByzAdBgNVHQ4EFgQUDw9q+nTStkndtS4ll5fj4FH3HiowHwYD

352 VR0jBBgwFoAUDw9q+nTStkndtS4ll5fj4FH3HiowNwYIKwYBBQUHAQEEKzApMCcG

353 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw

354 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE

355 AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMA0GCSqGSIb3DQEBCwUAA4IBAQA4zyyV

356 2BsUpkMT7Zuin1TrM2QrpsAEgSNSJ/EXEqGa8NJ33QaVkKW7vuGY9/ARo/xxgMfQ

357 cvPU3D82UVJmX5Ko+spPj48qPZMSik+UaZlvYAuGgZEAmM0AN6fHYOn0B4Vb2zWb

358 Ybu2qsqirxyk4vgNK4Qqn39TtiUx/zG45gM886FcGlFLPtaCySTS6DwGa7f59XdV

359 Z/11kxrUB11sfGrtEpy11vLfDDmpBbkRucohMSZcY6zDu6fnh4KAEDoy+zqaqA3P

360 r5SkoooOHB2JBYJTtoYdgLQA3jHxIE53ZRYocJV4a9Mu5TBAMtL2tlww3gdwX4dr

361 UTGFS8+M2Q4BmhJs

362 -----END TRUST_ANCHOR_UNCONSTRAINED-----

363

364 -----BEGIN TIME-----

365 MTUwMzAyMTIwMDAwWg==

366 -----END TIME-----

367

368 -----BEGIN VERIFY_RESULT-----

369 U1VDQ0VTUw==

370 -----END VERIFY_RESULT-----

OLD	NEW