Refactor VerifyCertificateChain test data to include a key purpose

net/data/verify_certificate_chain_unittest/constrained-non-self-signed-root.pem

 [Created by: generate-constrained-non-self-signed-root.py]
 
 Certificate chain with 1 intermediate and a non-self-signed trust anchor.
 Verification should succeed, it doesn't matter that the root was not
 self-signed if it is designated as the trust anchor.
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Target
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:b3:aa:6c:0c:2e:35:34:f6:1f:5d:c3:8b:9e:fe:
-                    f7:7e:5b:26:fd:2b:ba:20:83:92:3a:4e:02:18:7c:
-                    1d:49:c5:05:15:c1:fa:98:b3:5d:0c:e8:03:9b:60:
-                    d4:e3:a6:3e:0c:ae:b3:c5:21:38:3b:a0:02:fd:80:
-                    a6:05:47:29:d2:12:95:6b:41:7b:41:94:45:ce:bd:
-                    65:84:d4:5a:51:cc:81:2a:a4:03:8f:31:00:d5:15:
-                    06:13:54:07:87:99:d9:55:fa:23:a8:19:56:11:87:
-                    78:4d:62:15:55:4d:b1:5f:00:c3:ce:a1:f0:21:6f:
-                    97:01:ef:76:49:6d:21:6b:f8:50:12:e9:48:94:3e:
-                    cd:01:d2:30:1f:2d:e2:25:f8:b5:ee:ad:a8:91:e9:
-                    0d:03:be:b4:11:84:1c:9f:9f:09:60:37:bf:52:c4:
-                    ad:2c:12:6d:eb:2d:1f:e2:c5:64:a8:55:c3:01:e8:
-                    19:f8:be:96:07:e2:3b:32:7f:59:28:12:79:f2:fd:
-                    e4:98:a7:f1:77:9f:28:13:1e:b7:2c:56:d9:af:8f:
-                    a4:9c:ac:4e:7d:3a:3c:a0:a6:06:61:d2:9c:88:d0:
-                    4b:72:d4:f3:88:18:b5:53:90:ae:b2:80:dd:b4:90:
-                    c4:e4:76:20:c3:ee:ed:ce:bb:44:d9:ad:39:b1:dd:
-                    27:cf
+                    00:e6:27:55:64:41:33:04:6b:80:a5:13:f1:bf:73:
+                    1c:1a:4f:ba:fe:8a:34:0d:aa:5a:1e:a0:58:f6:ae:
+                    53:bf:e1:86:1c:b3:6f:92:fa:52:4e:56:81:12:8a:
+                    24:3f:78:6d:0e:98:1a:c4:7f:14:2c:f1:72:3c:0d:
+                    d2:7c:1d:e4:11:24:73:9e:8f:6a:1b:1d:c4:46:b7:
+                    dd:8a:8c:df:04:31:a7:67:c8:68:08:4e:f9:45:68:
+                    17:aa:00:10:44:16:3b:8c:63:93:d7:7e:c5:79:9a:
+                    bc:e1:2e:cc:57:0d:ae:b4:35:63:10:3f:6b:46:19:
+                    48:2c:80:f4:03:0c:f4:f6:5b:e0:3f:35:90:97:80:
+                    42:35:ed:30:6d:8d:25:a4:24:b7:61:95:02:ec:a7:
+                    9b:89:7e:75:22:80:34:3c:c8:9b:ea:72:5f:85:38:
+                    f5:28:2a:54:f4:59:d0:9a:34:04:df:26:5f:67:17:
+                    9a:8c:fd:a3:c4:be:c5:8c:8e:72:29:b5:bf:ce:17:
+                    f5:6a:68:0e:6b:9b:7a:94:3d:d0:6a:58:72:58:9a:
+                    a1:4f:eb:1d:14:26:ea:f9:e2:16:d8:c9:68:c9:14:
+                    04:2e:3c:5f:ec:69:f2:b9:0f:e3:84:30:01:7a:54:
+                    98:fb:b5:2f:e0:e1:ef:f2:dd:fa:b5:41:0c:4e:76:
+                    d1:95
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                4C:67:B6:67:88:D3:B0:33:53:B8:A0:1F:0F:63:46:A3:28:35:A9:A3
+                32:15:E6:F8:4B:BD:4C:36:3B:51:35:D9:6E:0D:00:1C:A5:6E:DF:EF
             X509v3 Authority Key Identifier: 
-                keyid:9C:54:60:08:5E:37:A1:FA:4A:EA:A7:CB:AB:E1:74:51:84:5F:46:FD
+                keyid:FB:DA:0E:92:4D:60:FD:C1:2C:1C:F6:9B:00:54:DA:31:BA:D0:98:F9
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         26:13:cf:55:3b:59:ce:94:65:01:3e:96:fb:c5:62:d9:d8:0c:
-         53:f2:23:12:f6:a1:a5:c7:30:f3:2b:f2:68:7d:ed:6a:c9:9d:
-         a5:21:b5:5d:1c:aa:4e:af:57:8c:3d:08:e7:72:d6:8c:20:9f:
-         25:f5:cf:31:91:23:47:4e:cc:cc:db:9c:e3:f7:53:d4:46:8f:
-         ea:92:05:37:12:c8:4b:c8:e5:57:24:ed:86:93:0f:14:1b:ea:
-         83:5c:87:c5:52:a4:bb:1c:48:80:4a:28:f6:ef:e6:6d:9a:0c:
-         62:75:11:6d:87:bf:8e:79:14:ed:4a:3f:74:5c:5f:7d:f6:53:
-         f1:dc:94:9b:67:cb:ae:da:18:80:db:31:85:64:ee:b9:36:67:
-         50:a8:26:55:0e:38:74:e3:b3:4f:19:10:b4:82:2b:90:18:34:
-         eb:89:47:3c:2a:fc:e5:06:01:99:fe:8c:56:6c:a1:5b:d6:5f:
-         22:b5:00:c8:dd:fc:ae:43:5a:77:ee:17:1c:27:73:7f:71:a9:
-         e1:e1:0d:7c:81:31:b7:7d:8d:3f:3e:96:8a:2c:5f:bb:8d:7b:
-         ad:b3:91:3a:ce:68:f2:25:02:cf:ca:84:0b:91:4f:b3:f5:d3:
-         e2:34:b6:4a:d7:92:c4:f0:4d:d2:40:f9:46:b7:60:ff:84:95:
-         cd:da:73:73
+         04:cb:ae:c2:7e:4b:84:73:79:b0:b9:a8:1c:39:0e:87:6c:e5:
+         ca:8e:64:6e:59:31:bd:be:63:c9:24:4d:fb:a2:c9:c0:4d:09:
+         5f:53:28:a6:17:7e:3a:dd:03:31:0c:85:9e:c5:2c:5d:4c:3c:
+         ef:57:2b:03:93:4a:de:6d:19:ba:9e:ae:d6:32:9f:5b:35:24:
+         f0:45:d9:65:07:bf:8c:0e:e7:e2:01:06:0e:e8:3d:27:55:bd:
+         76:06:26:90:e0:75:29:2f:d5:e7:c9:ed:c1:27:7d:45:f4:5b:
+         88:f2:2a:7c:ef:c8:bb:e5:b2:0b:01:19:ef:f5:93:29:d5:5e:
+         f1:0e:cf:68:7b:c7:88:40:39:f1:5d:90:c1:45:5e:82:7e:85:
+         a8:ff:af:71:7f:a8:e2:63:f4:7a:d9:9e:e1:af:e2:90:53:8d:
+         1a:b3:75:29:9c:bd:71:53:8b:bc:fe:af:47:b9:7e:9e:8d:fd:
+         6c:23:7b:44:83:61:9f:3e:6a:92:4b:88:80:c5:53:95:32:a3:
+         11:e7:f1:76:1d:21:3f:29:92:53:dd:c2:41:fd:31:bf:78:6a:
+         01:87:70:e3:89:9f:f9:1e:b6:c6:f5:77:d4:67:99:0f:96:35:
+         0b:2b:d9:5e:25:97:b8:5d:b2:ea:cf:38:f3:b2:b6:be:44:12:
+         24:62:b6:9f
 -----BEGIN CERTIFICATE-----
 MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqmwM
-LjU09h9dw4ue/vd+Wyb9K7ogg5I6TgIYfB1JxQUVwfqYs10M6AObYNTjpj4MrrPF
-ITg7oAL9gKYFRynSEpVrQXtBlEXOvWWE1FpRzIEqpAOPMQDVFQYTVAeHmdlV+iOo
-GVYRh3hNYhVVTbFfAMPOofAhb5cB73ZJbSFr+FAS6UiUPs0B0jAfLeIl+LXuraiR
-6Q0DvrQRhByfnwlgN79SxK0sEm3rLR/ixWSoVcMB6Bn4vpYH4jsyf1koEnny/eSY
-p/F3nygTHrcsVtmvj6ScrE59OjygpgZh0pyI0Ety1POIGLVTkK6ygN20kMTkdiDD
-7u3Ou0TZrTmx3SfPAgMBAAGjgekwgeYwHQYDVR0OBBYEFExntmeI07AzU7igHw9j
-RqMoNamjMB8GA1UdIwQYMBaAFJxUYAheN6H6Suqny6vhdFGEX0b9MD8GCCsGAQUF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 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAJhPPVTtZzpRlAT6W+8Vi
-2dgMU/IjEvahpccw8yvyaH3tasmdpSG1XRyqTq9XjD0I53LWjCCfJfXPMZEjR07M
-zNuc4/dT1EaP6pIFNxLIS8jlVyTthpMPFBvqg1yHxVKkuxxIgEoo9u/mbZoMYnUR
-bYe/jnkU7Uo/dFxfffZT8dyUm2fLrtoYgNsxhWTuuTZnUKgmVQ44dOOzTxkQtIIr
-kBg064lHPCr85QYBmf6MVmyhW9ZfIrUAyN38rkNad+4XHCdzf3Gp4eENfIExt32N
-Pz6Wiixfu417rbOROs5o8iUCz8qEC5FPs/XT4jS2SteSxPBN0kD5Rrdg/4SVzdpz
-cw==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEABMuuwn5LhHN5sLmoHDkO
+h2zlyo5kblkxvb5jySRN+6LJwE0JX1Mophd+Ot0DMQyFnsUsXUw871crA5NK3m0Z
+up6u1jKfWzUk8EXZZQe/jA7n4gEGDug9J1W9dgYmkOB1KS/V58ntwSd9RfRbiPIq
+fO/Iu+WyCwEZ7/WTKdVe8Q7PaHvHiEA58V2QwUVegn6FqP+vcX+o4mP0etme4a/i
+kFONGrN1KZy9cVOLvP6vR7l+no39bCN7RINhnz5qkkuIgMVTlTKjEefxdh0hPymS
+U93CQf0xv3hqAYdw44mf+R62xvV31GeZD5Y1CyvZXiWXuF2y6s8487K2vkQSJGK2
+nw==
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Intermediate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c6:0a:10:7c:70:eb:74:84:70:54:78:38:0e:6b:
-                    da:e4:e6:9c:3b:92:69:8c:5f:eb:ab:11:af:56:27:
-                    1d:59:94:21:91:c3:5c:2b:cd:67:75:95:5d:fc:d6:
-                    04:e6:65:0d:9b:4b:70:ce:e5:23:11:a8:a3:f5:61:
-                    d4:5b:d0:99:b8:4b:44:51:3d:7a:ed:9d:5d:e7:82:
-                    09:25:23:60:12:16:0f:b9:9a:3d:9f:02:22:39:f3:
-                    02:85:b2:45:a6:f4:81:e7:2f:6a:f9:65:28:94:b4:
-                    61:b2:4b:04:6e:2d:dd:a9:75:3e:d4:78:16:8a:45:
-                    6f:3c:85:81:b2:f1:8d:3b:84:ff:19:bd:c5:4d:58:
-                    d4:87:ec:dc:34:23:5c:e3:67:d8:26:c0:dc:ae:ad:
-                    27:34:8b:60:9d:47:bb:be:54:c1:4a:0d:56:91:c6:
-                    54:2d:07:51:d5:87:5d:e4:d5:b6:ee:1a:50:51:99:
-                    c4:2d:37:2d:47:4a:3e:19:1c:4f:ba:14:2d:0b:b0:
-                    e7:87:ab:d4:e4:ca:93:a7:77:13:6f:10:c6:df:dd:
-                    f0:86:53:03:0d:b6:92:66:1d:bf:63:1c:84:f0:63:
-                    cb:18:d3:f4:54:20:a8:e8:4c:94:21:7e:3f:b5:81:
-                    49:9f:bc:51:b9:eb:12:ab:6d:cb:03:37:d0:30:a8:
-                    1b:11
+                    00:f0:15:83:ff:9f:31:22:1a:3d:4a:0c:45:cf:41:
+                    5e:a1:d0:58:3e:77:f0:8f:78:5b:64:e2:c2:d2:0e:
+                    b4:f8:c3:f3:ba:9a:10:d6:90:9d:93:f9:35:ad:4e:
+                    96:35:e5:e6:a3:52:1b:23:13:3c:3d:e8:9b:ad:de:
+                    7d:05:52:40:f1:c1:90:af:a2:29:2e:81:99:7e:24:
+                    e3:34:b5:cf:01:f2:96:25:40:97:4e:61:29:88:5e:
+                    f6:74:ed:79:94:8c:92:23:dd:56:4d:77:3e:f2:5c:
+                    59:1f:7c:21:37:6b:df:27:d1:13:3a:96:0d:e5:e4:
+                    3c:60:18:42:df:b0:c1:50:b5:e3:4c:83:c9:7f:b5:
+                    f2:06:c4:fd:eb:ea:1d:e6:d8:bc:6f:37:a7:d2:2d:
+                    e6:88:b4:a2:66:cc:5c:43:68:90:b5:ad:af:3f:12:
+                    44:5a:93:27:97:5a:72:bb:a2:88:87:87:44:17:72:
+                    8e:c0:43:67:84:c6:63:66:b8:c4:93:89:b2:a8:6d:
+                    4f:18:fd:39:6f:66:34:1a:b8:f6:ee:40:d7:60:10:
+                    7e:e4:30:fc:08:85:43:6a:8b:3c:05:66:1e:e0:6a:
+                    90:c3:fa:ef:09:e9:eb:a4:08:9d:08:af:d0:f6:b0:
+                    20:ff:9e:7d:7b:ec:57:0b:d7:ab:7a:b2:b2:50:26:
+                    d2:6d
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                9C:54:60:08:5E:37:A1:FA:4A:EA:A7:CB:AB:E1:74:51:84:5F:46:FD
+                FB:DA:0E:92:4D:60:FD:C1:2C:1C:F6:9B:00:54:DA:31:BA:D0:98:F9
             X509v3 Authority Key Identifier: 
-                keyid:4E:4A:66:D2:28:27:6E:75:19:FA:97:E6:3D:38:18:C6:A6:56:68:69
+                keyid:2A:0D:A0:73:85:3A:BA:A8:17:8D:8D:97:60:4F:7E:3C:85:53:B8:F2
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         5e:d4:51:bf:58:80:db:77:af:e6:7c:a7:03:ab:95:ae:e6:0f:
-         26:64:63:b0:70:30:92:1c:f0:d8:7c:f8:93:13:14:e3:62:6e:
-         45:ed:cf:dd:c0:4d:8d:b7:b7:2f:bc:29:2d:6e:c2:ed:d5:10:
-         e6:80:53:91:88:18:35:c5:88:63:69:95:c1:f2:bc:e6:5c:02:
-         01:e7:e8:22:f4:3e:6d:91:09:82:64:12:86:80:b1:27:3c:9b:
-         ee:61:43:c2:1f:54:dc:31:9b:89:38:fe:3d:48:27:f0:fb:c6:
-         44:58:c6:de:21:19:b1:e1:4a:70:e4:1b:aa:ea:ad:e9:d3:a8:
-         bd:23:9a:95:d8:06:3c:32:9d:21:28:7c:de:37:d7:47:a6:96:
-         a0:d1:98:04:19:f5:47:bc:19:f8:9e:b6:dc:4b:d5:39:c6:27:
-         88:ab:9a:19:f1:f1:33:af:e0:62:36:f7:2e:5d:26:5c:70:55:
-         5e:3c:df:20:12:42:54:64:e0:5e:5f:2e:ee:6a:85:a4:1e:15:
-         52:0b:01:01:1b:70:19:fe:67:31:b7:6e:5e:4d:61:93:6b:3c:
-         c3:fd:c7:55:a8:f0:bc:81:5e:2b:38:84:ab:d8:b8:54:3c:a1:
-         59:db:ae:70:2b:71:ca:f3:5f:f8:ce:d0:67:af:45:99:19:8c:
-         25:9d:d1:e9
+         30:00:47:cc:03:e0:c2:98:f6:a9:44:a4:e0:31:40:63:47:a4:
+         67:df:98:9b:d9:d4:67:56:d4:9c:d9:83:31:54:d7:16:16:11:
+         af:04:39:08:d0:3a:3d:e1:ca:29:19:34:b9:0c:dc:f1:1e:3d:
+         98:88:d4:e3:64:3d:6b:fb:f4:f2:57:87:a9:e3:92:ba:33:a7:
+         0c:33:86:ee:b7:59:9d:29:b0:85:ec:c0:00:31:99:1c:5d:08:
+         74:6d:43:b5:44:84:2f:83:02:b8:e3:c0:33:7f:13:29:d2:52:
+         3d:b8:08:e2:ba:c8:fb:fc:08:2c:c7:ed:f0:12:8e:d6:b2:56:
+         9f:38:aa:ad:7e:63:42:ab:96:9a:e6:9c:d8:87:6a:70:5b:04:
+         52:0f:c0:3c:ae:5b:24:8c:42:8b:71:1f:ef:7d:c5:97:c2:5d:
+         47:fa:9a:02:7a:c3:92:b2:bc:8a:e1:ba:81:d6:c1:09:49:29:
+         48:80:a1:ff:23:42:96:a8:57:e6:bb:5d:70:e7:08:59:88:66:
+         48:02:51:e9:5f:2f:04:cb:05:45:36:0b:18:a2:64:d1:d4:66:
+         fb:c9:5b:c3:22:38:ca:0f:c6:62:de:b3:ad:a5:84:78:e5:bd:
+         c5:ea:17:65:4e:14:41:a9:bc:d8:60:5f:09:a2:6c:72:a0:5e:
+         18:0e:69:24
 -----BEGIN CERTIFICATE-----
 MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgoQfHDr
-dIRwVHg4Dmva5OacO5JpjF/rqxGvVicdWZQhkcNcK81ndZVd/NYE5mUNm0twzuUj
-Eaij9WHUW9CZuEtEUT167Z1d54IJJSNgEhYPuZo9nwIiOfMChbJFpvSB5y9q+WUo
-lLRhsksEbi3dqXU+1HgWikVvPIWBsvGNO4T/Gb3FTVjUh+zcNCNc42fYJsDcrq0n
-NItgnUe7vlTBSg1WkcZULQdR1Ydd5NW27hpQUZnELTctR0o+GRxPuhQtC7Dnh6vU
-5MqTp3cTbxDG393whlMDDbaSZh2/YxyE8GPLGNP0VCCo6EyUIX4/tYFJn7xRuesS
-q23LAzfQMKgbEQIDAQABo4HLMIHIMB0GA1UdDgQWBBScVGAIXjeh+krqp8ur4XRR
-hF9G/TAfBgNVHSMEGDAWgBROSmbSKCdudRn6l+Y9OBjGplZoaTA3BggrBgEFBQcB
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BWD/58x
+Iho9SgxFz0FeodBYPnfwj3hbZOLC0g60+MPzupoQ1pCdk/k1rU6WNeXmo1IbIxM8
+Peibrd59BVJA8cGQr6IpLoGZfiTjNLXPAfKWJUCXTmEpiF72dO15lIySI91WTXc+
+8lxZH3whN2vfJ9ETOpYN5eQ8YBhC37DBULXjTIPJf7XyBsT96+od5ti8bzen0i3m
+iLSiZsxcQ2iQta2vPxJEWpMnl1pyu6KIh4dEF3KOwENnhMZjZrjEk4myqG1PGP05
+b2Y0Grj27kDXYBB+5DD8CIVDaos8BWYe4GqQw/rvCenrpAidCK/Q9rAg/559e+xX
+C9ererKyUCbSbQIDAQABo4HLMIHIMB0GA1UdDgQWBBT72g6STWD9wSwc9psAVNox
+utCY+TAfBgNVHSMEGDAWgBQqDaBzhTq6qBeNjZdgT348hVO48jA3BggrBgEFBQcB
 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AF7UUb9YgNt3r+Z8pwOrla7mDyZkY7BwMJIc8Nh8+JMTFONibkXtz93ATY23ty+8
-KS1uwu3VEOaAU5GIGDXFiGNplcHyvOZcAgHn6CL0Pm2RCYJkEoaAsSc8m+5hQ8If
-VNwxm4k4/j1IJ/D7xkRYxt4hGbHhSnDkG6rqrenTqL0jmpXYBjwynSEofN4310em
-lqDRmAQZ9Ue8GfiettxL1TnGJ4irmhnx8TOv4GI29y5dJlxwVV483yASQlRk4F5f
-Lu5qhaQeFVILAQEbcBn+ZzG3bl5NYZNrPMP9x1Wo8LyBXis4hKvYuFQ8oVnbrnAr
-ccrzX/jO0GevRZkZjCWd0ek=
+ADAAR8wD4MKY9qlEpOAxQGNHpGffmJvZ1GdW1JzZgzFU1xYWEa8EOQjQOj3hyikZ
+NLkM3PEePZiI1ONkPWv79PJXh6njkrozpwwzhu63WZ0psIXswAAxmRxdCHRtQ7VE
+hC+DArjjwDN/EynSUj24COK6yPv8CCzH7fASjtayVp84qq1+Y0KrlprmnNiHanBb
+BFIPwDyuWySMQotxH+99xZfCXUf6mgJ6w5KyvIrhuoHWwQlJKUiAof8jQpaoV+a7
+XXDnCFmIZkgCUelfLwTLBUU2CxiiZNHUZvvJW8MiOMoPxmLes62lhHjlvcXqF2VO
+FEGpvNhgXwmibHKgXhgOaSQ=
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=UberRoot
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:a5:1a:7b:1e:97:d2:f5:6c:17:83:73:76:62:4f:
-                    12:53:75:3d:4b:86:2d:42:77:e7:11:75:65:cd:43:
-                    69:5a:b3:80:ad:42:87:a0:8e:9e:cf:e5:9e:6a:2d:
-                    1f:3e:0a:9a:6e:2b:01:e9:aa:d5:bd:91:50:38:f8:
-                    16:04:79:d3:fe:69:1c:82:9d:e7:10:2c:19:31:8a:
-                    1b:8d:a7:ef:f2:4c:36:de:f6:2f:65:93:78:0a:77:
-                    ba:1d:5b:b1:39:bf:55:71:05:43:fb:6c:d4:49:b2:
-                    35:93:85:c0:99:4e:3b:d2:4d:bf:19:4c:1b:55:b6:
-                    ef:ca:40:b3:6e:6a:18:29:eb:78:fa:f5:7e:15:61:
-                    85:70:1d:1f:a4:cd:59:eb:86:c1:a5:c4:8b:74:22:
-                    e1:5d:9b:80:d4:26:a1:a1:7d:40:4d:89:17:4f:ef:
-                    ea:04:d0:d1:b8:7a:38:b1:a5:13:9a:08:64:4d:85:
-                    88:4e:8d:07:fc:55:0b:22:7e:b7:ab:85:28:b9:d9:
-                    71:c9:99:cb:fb:85:fb:cf:8a:2e:cd:98:90:bb:b1:
-                    17:5f:50:02:5e:23:9c:55:d7:f2:fa:76:47:d6:ee:
-                    12:44:9a:17:c4:67:83:9d:75:5f:20:b1:a8:70:c4:
-                    22:69:00:17:26:a8:9d:c5:88:1a:e5:29:bb:63:c8:
-                    02:f5
+                    00:b9:6b:4b:41:42:a1:61:15:05:4a:1b:4d:cf:26:
+                    42:0f:9d:86:1e:29:97:4c:fd:2a:c3:bd:dd:58:56:
+                    46:85:20:c9:12:98:c1:cc:7c:c7:c6:43:16:47:7e:
+                    f8:37:2c:60:07:e1:a3:45:f8:79:a3:68:f5:3a:90:
+                    5d:2b:b5:74:ea:13:91:69:46:0d:32:c7:9a:a4:a3:
+                    54:cd:16:50:dc:11:62:58:bf:ef:cc:40:d3:76:b9:
+                    0c:a2:45:12:a9:63:f9:40:3f:4c:44:78:87:45:c6:
+                    cc:eb:5a:c5:4f:7f:0c:8f:15:a9:bb:3c:2e:55:1c:
+                    bf:75:73:7d:e3:1e:62:c6:79:08:0e:ec:c9:83:61:
+                    92:b6:71:43:c4:91:a6:d3:11:c7:89:d7:92:e2:32:
+                    21:9b:61:13:84:89:ab:d0:02:9b:72:2e:30:bc:19:
+                    d5:56:d5:e7:ae:e4:e5:ee:59:a1:29:6b:1b:22:ac:
+                    3b:33:2b:3f:06:f6:24:92:04:85:bf:fa:e2:86:06:
+                    f1:46:a4:fd:1c:31:c4:1f:6e:c9:95:27:6a:9d:e9:
+                    0a:24:05:c6:ad:d0:14:16:53:3c:c7:49:da:06:89:
+                    89:ed:ff:0f:c3:76:ba:f6:e6:6b:f9:54:de:c3:7c:
+                    4b:4e:ad:ce:fb:15:90:48:07:f6:6a:1b:f1:e3:70:
+                    37:37
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                4E:4A:66:D2:28:27:6E:75:19:FA:97:E6:3D:38:18:C6:A6:56:68:69
+                2A:0D:A0:73:85:3A:BA:A8:17:8D:8D:97:60:4F:7E:3C:85:53:B8:F2
             X509v3 Authority Key Identifier: 
-                keyid:8F:01:DF:48:8B:1D:55:FA:61:CF:0A:EF:D6:89:C1:E7:69:7E:24:51
+                keyid:3C:49:3D:9A:7E:00:F0:23:D1:08:68:01:1A:EB:50:33:F2:B5:1F:F2
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/UberRoot.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/UberRoot.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         c8:bb:c7:40:ef:2b:d4:1d:61:92:65:48:61:99:5b:d4:5b:1d:
-         8d:c6:ea:b8:d4:bf:1b:e9:ea:5a:f0:21:f3:95:b8:e7:cf:e7:
-         c3:8b:68:b2:14:53:fc:c8:07:4d:d8:fc:97:27:8d:0d:41:68:
-         4c:5e:c8:ab:ee:e3:9c:72:d3:d5:5b:a4:3a:2b:e4:2f:e2:13:
-         c8:a5:8d:63:61:c9:f8:e1:99:3f:c4:22:36:0d:bb:88:28:85:
-         99:23:ae:b9:0b:4e:50:7b:81:2d:28:da:9e:9e:7e:86:21:99:
-         ac:f1:a9:bc:1f:cf:6c:5f:90:91:b1:bf:76:b2:3a:5f:f3:e6:
-         54:89:bf:db:1e:f5:3a:93:53:ec:80:75:7e:ea:81:e0:c1:8b:
-         2d:89:f8:62:16:f0:96:ae:8e:be:d7:af:e6:fa:d4:54:b4:01:
-         bc:dd:f0:93:cc:89:b7:f2:06:81:2e:df:02:11:ac:22:21:44:
-         77:de:22:aa:9f:2b:05:3a:4e:a9:b4:a2:15:50:13:03:b1:a1:
-         1a:f4:de:c4:7b:2e:84:56:80:7c:98:db:82:af:a0:8e:79:a5:
-         b1:81:b7:0f:9b:60:78:5b:57:fc:eb:8e:74:91:e5:e3:58:c6:
-         b7:82:b2:88:d2:83:5f:b4:94:75:6b:97:8a:3f:88:40:ad:5d:
-         a1:18:da:7a
+         4d:22:da:99:6e:42:69:9e:c5:d4:77:0a:71:ff:d5:f9:20:bd:
+         8c:4c:3e:7d:17:55:c8:18:09:10:99:4d:eb:e7:4d:35:63:30:
+         ea:6c:b0:c7:de:2f:16:ac:f6:a6:90:61:92:c5:9b:46:31:44:
+         e4:30:c3:22:6a:a1:85:e1:9c:b1:93:61:66:67:a1:89:99:bf:
+         2f:b7:7e:75:83:a9:c8:c2:46:90:0d:fd:be:3c:c3:93:25:f2:
+         8a:c3:6d:21:ab:cf:56:27:55:7d:05:c1:27:9a:29:5e:e5:5d:
+         36:63:7e:e9:c9:56:22:c0:61:40:8a:24:ea:c1:18:7d:f5:fb:
+         11:4d:92:93:49:54:6e:c2:cf:6d:19:7a:16:c7:1f:79:3d:73:
+         41:17:38:5c:93:e0:b5:c3:18:27:07:3c:ae:3a:29:a1:73:60:
+         12:d2:69:64:47:68:5c:75:78:78:f8:19:a4:04:25:a5:37:9b:
+         ef:a8:e6:aa:d4:2c:19:48:72:9b:bb:75:30:77:46:69:e7:08:
+         2b:ef:06:d3:70:d6:d2:94:45:83:91:f8:4b:e5:0c:42:72:11:
+         e2:68:31:27:95:59:cd:e9:a0:06:3f:93:bd:13:fc:f9:7a:a9:
+         e0:f1:7f:f6:ed:aa:3b:d4:51:39:af:f8:58:ad:9d:85:01:88:
+         3e:0d:74:75
 -----BEGIN TRUST_ANCHOR_CONSTRAINED-----
 MIIDcTCCAlmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDDAhVYmVy
 Um9vdDAeFw0xNTAxMDExMjAwMDBaFw0xNjAxMDExMjAwMDBaMA8xDTALBgNVBAMM
-BFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGnsel9L1bBeD
-c3ZiTxJTdT1Lhi1Cd+cRdWXNQ2las4CtQoegjp7P5Z5qLR8+CppuKwHpqtW9kVA4
-+BYEedP+aRyCnecQLBkxihuNp+/yTDbe9i9lk3gKd7odW7E5v1VxBUP7bNRJsjWT
-hcCZTjvSTb8ZTBtVtu/KQLNuahgp63j69X4VYYVwHR+kzVnrhsGlxIt0IuFdm4DU
-JqGhfUBNiRdP7+oE0NG4ejixpROaCGRNhYhOjQf8VQsifrerhSi52XHJmcv7hfvP
-ii7NmJC7sRdfUAJeI5xV1/L6dkfW7hJEmhfEZ4OddV8gsahwxCJpABcmqJ3FiBrl
-KbtjyAL1AgMBAAGjgdMwgdAwHQYDVR0OBBYEFE5KZtIoJ251GfqX5j04GMamVmhp
-MB8GA1UdIwQYMBaAFI8B30iLHVX6Yc8K79aJwedpfiRRMDsGCCsGAQUFBwEBBC8w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 LTArBggrBgEFBQcwAoYfaHR0cDovL3VybC1mb3ItYWlhL1ViZXJSb290LmNlcjAw
 BgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vdXJsLWZvci1jcmwvVWJlclJvb3QuY3Js
 MA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUA
-A4IBAQDIu8dA7yvUHWGSZUhhmVvUWx2Nxuq41L8b6epa8CHzlbjnz+fDi2iyFFP8
-yAdN2PyXJ40NQWhMXsir7uOcctPVW6Q6K+Qv4hPIpY1jYcn44Zk/xCI2DbuIKIWZ
-I665C05Qe4EtKNqenn6GIZms8am8H89sX5CRsb92sjpf8+ZUib/bHvU6k1PsgHV+
-6oHgwYstifhiFvCWro6+16/m+tRUtAG83fCTzIm38gaBLt8CEawiIUR33iKqnysF
-Ok6ptKIVUBMDsaEa9N7Eey6EVoB8mNuCr6COeaWxgbcPm2B4W1f86450keXjWMa3
-grKI0oNftJR1a5eKP4hArV2hGNp6
+A4IBAQBNItqZbkJpnsXUdwpx/9X5IL2MTD59F1XIGAkQmU3r5001YzDqbLDH3i8W
+rPamkGGSxZtGMUTkMMMiaqGF4Zyxk2FmZ6GJmb8vt351g6nIwkaQDf2+PMOTJfKK
+w20hq89WJ1V9BcEnmile5V02Y37pyVYiwGFAiiTqwRh99fsRTZKTSVRuws9tGXoW
+xx95PXNBFzhck+C1wxgnBzyuOimhc2AS0mlkR2hcdXh4+BmkBCWlN5vvqOaq1CwZ
+SHKbu3Uwd0Zp5wgr7wbTcNbSlEWDkfhL5QxCchHiaDEnlVnN6aAGP5O9E/z5eqng
+8X/27ao71FE5r/hYrZ2FAYg+DXR1
 -----END TRUST_ANCHOR_CONSTRAINED-----
 
 150302120000Z
 -----BEGIN TIME-----
 MTUwMzAyMTIwMDAwWg==
 -----END TIME-----
 
 SUCCESS
 -----BEGIN VERIFY_RESULT-----
 U1VDQ0VTUw==
 -----END VERIFY_RESULT-----
+
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----