Refactor VerifyCertificateChain test data to include a key purpose

net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem

 [Created by: generate-intermediate-lacks-basic-constraints.py]
 
 Certificate chain with 1 intermediate and a trusted root. The intermediate
 lacks the basic constraints extension, and hence is expected to fail validation
 (RFC 5280 requires v3 signing certificates have a BasicConstaints).
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Target
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:ac:3c:48:cb:8e:9b:00:37:e3:06:36:23:5e:3c:
-                    24:0b:d2:57:0e:52:8f:53:d0:48:ca:38:67:91:a7:
-                    10:d3:35:2d:67:f4:ad:2c:9e:c1:ee:f5:6b:62:23:
-                    34:03:32:76:29:96:fd:db:cc:a4:9a:d8:b6:97:c4:
-                    a9:73:c1:a1:57:2f:cd:80:d1:d9:db:39:82:11:bb:
-                    95:3e:1b:b3:1e:ac:e7:c0:67:f3:1e:cb:4f:d4:a6:
-                    c7:01:32:c5:45:ca:53:ff:cf:46:e1:b3:4f:55:01:
-                    ef:76:44:92:55:55:d8:a4:db:5c:80:8f:48:51:86:
-                    6c:d9:b6:b7:5c:74:56:06:00:38:3f:d9:ee:c3:ae:
-                    78:a0:57:ff:fa:41:02:14:63:00:bb:1f:98:9a:f5:
-                    39:50:51:50:78:03:5d:13:a2:fd:a3:08:b0:ff:69:
-                    ee:60:c8:af:1c:1e:8a:13:4b:0e:b9:48:29:92:f2:
-                    95:0a:d9:85:2f:ff:17:ab:c7:6f:e0:32:d1:16:9e:
-                    66:ae:81:87:b8:7e:70:ac:73:8c:67:de:dd:1a:e0:
-                    0e:0e:bb:ab:bc:f5:ef:38:d9:37:49:71:d1:7c:e6:
-                    64:f7:00:10:e4:83:ed:1e:58:05:44:89:f2:a9:a2:
-                    1d:57:5c:b5:db:bc:55:39:35:d7:f3:a5:b8:28:d1:
-                    45:5d
+                    00:bf:5a:8f:db:be:ba:83:5c:5a:e0:4a:66:41:a8:
+                    39:80:40:e7:b5:92:a3:07:13:ec:65:a5:75:b2:2f:
+                    9a:aa:c7:1f:8f:64:8e:6c:e0:8e:4f:2b:af:95:c0:
+                    f3:86:17:46:1b:b4:1d:7a:f1:fe:32:f8:58:29:da:
+                    22:31:20:8b:0f:45:be:81:80:2b:a7:25:e6:d2:fc:
+                    46:fe:fe:83:b6:55:d3:32:9c:64:f5:a3:0e:ef:5a:
+                    2f:ad:83:fd:44:76:7d:33:42:ef:0a:cd:fd:b0:d3:
+                    2d:70:93:44:25:75:24:61:2e:d1:e2:e6:d4:17:9a:
+                    42:ff:a1:67:23:9d:4b:2a:a3:e9:ba:aa:c3:9e:54:
+                    12:09:8b:d8:4a:8d:22:8c:6f:b8:92:84:4b:fa:7b:
+                    07:e1:82:da:a4:1d:7f:3a:d3:7d:cd:76:e0:90:41:
+                    87:c9:56:39:14:30:b4:2c:1b:7d:dc:4b:48:03:cd:
+                    3c:88:9a:6d:08:97:8c:01:14:14:06:f7:2a:cd:76:
+                    2e:ba:74:af:76:b8:3c:dc:83:a4:9e:ab:ab:93:0e:
+                    61:2e:6c:2d:18:97:95:c5:29:e6:f4:c9:96:09:d4:
+                    12:ce:39:a9:1a:40:ad:c0:54:4c:fc:41:07:15:1e:
+                    cd:cd:0b:9c:e0:03:af:e6:b0:b6:7a:35:fa:7c:70:
+                    b3:cf
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                9E:25:C3:B0:61:AE:69:26:DE:05:F4:15:3C:58:B0:7C:6D:91:5C:5B
+                A4:58:36:4B:8C:71:D3:FA:D3:04:1A:BC:36:D9:CC:78:1C:C1:E0:D6
             X509v3 Authority Key Identifier: 
-                keyid:E5:AE:8F:CC:87:F7:B5:85:86:1E:4B:A6:CF:FC:B9:CA:10:C8:79:90
+                keyid:89:51:1E:D6:EA:B6:84:32:05:F0:15:A9:39:24:C0:46:25:5F:FB:8A
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         c5:3c:97:21:6a:dc:f8:0c:23:76:c2:4e:33:63:f4:7e:d1:61:
-         bd:f8:cf:6d:b5:ef:d6:f1:96:a0:84:07:42:ab:e2:34:90:3a:
-         95:2a:db:f6:19:28:bd:19:22:65:20:b0:25:b0:f0:ca:d0:d3:
-         44:41:fe:03:f2:9f:0c:df:02:dc:64:c6:47:13:1e:26:dd:6a:
-         5d:52:8a:fe:d3:0a:9a:d1:8c:a5:93:ec:1a:d4:d5:ad:ba:cd:
-         6b:c2:99:6b:04:b7:06:98:a8:53:dc:d9:97:97:da:ac:29:bb:
-         09:4a:25:ca:08:83:eb:ed:1f:a7:ae:28:fc:51:09:a9:e4:95:
-         f2:66:97:f2:97:48:9e:01:44:40:5b:4a:91:a5:ed:f9:86:6b:
-         fb:e2:47:c8:47:aa:ad:8d:aa:79:30:fb:4f:f1:a7:7c:c3:23:
-         b3:23:4d:15:a3:04:67:ff:26:b1:50:c0:5a:13:f4:8a:61:da:
-         98:a2:35:0e:ec:4f:2b:e7:e0:dc:29:0a:07:20:e4:22:97:b1:
-         da:0d:73:6f:32:03:f1:cd:4b:a2:7b:9b:c3:62:a8:dd:55:02:
-         57:6b:2f:a4:d6:46:20:bc:bd:f7:52:e7:44:8e:3d:2c:73:05:
-         55:ac:35:8b:af:39:32:a1:07:da:fd:bb:8c:bb:35:e0:e6:bb:
-         0c:49:1a:e4
+         8d:4b:a8:5d:f6:9a:e0:3d:6d:e5:78:57:26:00:b6:90:4d:f6:
+         38:ae:30:a2:40:5e:1f:42:43:fd:2e:34:f3:03:c8:e1:e3:a5:
+         17:34:37:81:f6:8d:8f:af:7b:ff:4b:5c:dd:27:0e:58:69:ba:
+         46:a9:b1:31:8d:d1:b2:f7:1d:6b:ea:25:9e:00:ce:93:89:5a:
+         9f:66:e1:48:1e:56:97:4e:76:60:42:c8:c9:6d:f5:dd:d2:58:
+         12:d2:4a:71:85:2b:b8:df:6c:1f:ff:8e:e9:25:15:a5:d2:b4:
+         82:00:59:e5:1e:9e:bd:8e:30:6f:b7:b8:b4:08:c2:85:4f:77:
+         c8:66:8a:33:a4:bf:ed:13:3a:85:5f:90:1c:f4:e5:35:8f:5b:
+         57:14:e4:04:e1:4e:1c:79:74:a6:2f:c3:a7:6b:d4:29:fa:d0:
+         12:b9:e1:3c:94:8f:f0:49:b4:01:7b:df:87:a2:8d:e8:f1:72:
+         a7:95:b2:a0:de:41:85:87:3f:01:cf:1d:77:2f:ac:17:e1:35:
+         6e:4b:9e:64:a3:3e:30:e3:e3:9c:32:e9:de:4a:e3:b8:7d:12:
+         36:0a:e6:bf:36:38:85:2d:df:f2:57:e4:ad:c4:f9:7f:fa:62:
+         42:c2:b6:ad:3e:ae:9c:6d:aa:3d:d1:02:86:9a:4d:40:ef:9d:
+         1c:71:6f:04
 -----BEGIN CERTIFICATE-----
 MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPEjL
-jpsAN+MGNiNePCQL0lcOUo9T0EjKOGeRpxDTNS1n9K0snsHu9WtiIzQDMnYplv3b
-zKSa2LaXxKlzwaFXL82A0dnbOYIRu5U+G7MerOfAZ/Mey0/UpscBMsVFylP/z0bh
-s09VAe92RJJVVdik21yAj0hRhmzZtrdcdFYGADg/2e7DrnigV//6QQIUYwC7H5ia
-9TlQUVB4A10Tov2jCLD/ae5gyK8cHooTSw65SCmS8pUK2YUv/xerx2/gMtEWnmau
-gYe4fnCsc4xn3t0a4A4Ou6u89e842TdJcdF85mT3ABDkg+0eWAVEifKpoh1XXLXb
-vFU5Ndfzpbgo0UVdAgMBAAGjgekwgeYwHQYDVR0OBBYEFJ4lw7Bhrmkm3gX0FTxY
-sHxtkVxbMB8GA1UdIwQYMBaAFOWuj8yH97WFhh5Lps/8ucoQyHmQMD8GCCsGAQUF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 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAxTyXIWrc+AwjdsJOM2P0
-ftFhvfjPbbXv1vGWoIQHQqviNJA6lSrb9hkovRkiZSCwJbDwytDTREH+A/KfDN8C
-3GTGRxMeJt1qXVKK/tMKmtGMpZPsGtTVrbrNa8KZawS3BpioU9zZl5farCm7CUol
-ygiD6+0fp64o/FEJqeSV8maX8pdIngFEQFtKkaXt+YZr++JHyEeqrY2qeTD7T/Gn
-fMMjsyNNFaMEZ/8msVDAWhP0imHamKI1DuxPK+fg3CkKByDkIpex2g1zbzID8c1L
-onubw2Ko3VUCV2svpNZGILy991LnRI49LHMFVaw1i685MqEH2v27jLs14Oa7DEka
-5A==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAjUuoXfaa4D1t5XhXJgC2
+kE32OK4wokBeH0JD/S408wPI4eOlFzQ3gfaNj697/0tc3ScOWGm6RqmxMY3Rsvcd
+a+olngDOk4lan2bhSB5Wl052YELIyW313dJYEtJKcYUruN9sH/+O6SUVpdK0ggBZ
+5R6evY4wb7e4tAjChU93yGaKM6S/7RM6hV+QHPTlNY9bVxTkBOFOHHl0pi/Dp2vU
+KfrQErnhPJSP8Em0AXvfh6KN6PFyp5WyoN5BhYc/Ac8ddy+sF+E1bkueZKM+MOPj
+nDLp3krjuH0SNgrmvzY4hS3f8lfkrcT5f/piQsK2rT6unG2qPdEChppNQO+dHHFv
+BA==
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Intermediate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c5:bf:ce:e4:8e:d2:b9:92:d9:78:eb:36:78:b0:
-                    d4:2b:a9:22:cd:83:57:58:a2:0f:5b:e5:c8:e4:f4:
-                    d6:41:2c:1f:5a:08:6b:12:7b:f6:8f:39:44:0f:f4:
-                    d2:3e:56:cd:63:87:13:b1:88:1a:da:f1:13:2f:4a:
-                    d0:76:78:61:6f:71:08:e0:0c:a2:9a:6a:6b:c7:8c:
-                    81:6f:e1:ea:22:09:83:fd:09:53:78:f0:1d:4e:f7:
-                    b3:17:17:7e:fc:dc:a5:21:83:7f:46:8c:81:af:07:
-                    68:91:14:54:43:bf:d2:85:fa:58:91:61:cc:87:bc:
-                    8d:b3:97:c1:a5:42:de:73:49:29:c9:0c:48:92:15:
-                    d9:0e:6b:3d:4a:4c:50:c6:8b:a5:69:6c:b2:2f:02:
-                    9e:0a:4f:27:1a:d0:1c:0e:b8:d9:fc:a7:62:92:69:
-                    0c:40:ec:49:3b:59:a5:38:fc:8e:cb:2f:91:9f:09:
-                    76:2c:b8:d4:25:7e:83:71:56:89:29:2c:a3:d8:bf:
-                    95:70:99:f5:cb:20:df:fa:fd:b8:89:e6:42:82:a9:
-                    01:d8:e0:42:f2:d2:c3:78:26:cc:fb:05:30:90:a0:
-                    83:bd:ce:b3:6d:bb:01:ae:84:aa:71:4f:d9:37:38:
-                    7e:07:35:6f:ed:88:c7:52:17:38:ac:c6:44:b5:fe:
-                    4a:b3
+                    00:df:57:52:0b:c1:38:ec:8a:61:d8:2f:9c:fd:66:
+                    0f:34:ab:e1:b3:fd:70:90:04:71:47:1a:3f:aa:44:
+                    57:c4:a9:c2:18:64:c1:3e:5d:aa:6c:b2:0f:48:53:
+                    d2:9e:08:2b:e6:ff:b1:57:3f:39:d4:7d:81:b7:69:
+                    0a:4d:5d:5c:2d:17:17:81:89:77:84:b8:1c:f5:31:
+                    a5:40:6c:6f:e9:e2:52:80:39:e9:71:95:b9:54:8b:
+                    5a:0d:18:05:fa:c5:6d:9d:27:c9:27:bd:7d:36:5f:
+                    ac:a0:42:a0:ce:66:06:6a:e0:57:9f:e2:c5:de:54:
+                    f0:e5:ec:89:f0:4f:6d:7b:70:2b:6e:c1:2b:ee:4c:
+                    37:91:43:40:e5:d6:ad:64:a4:a0:b8:29:37:8c:4d:
+                    01:2d:85:4f:06:8e:37:ba:5c:dc:96:f8:f5:37:62:
+                    5d:00:f5:85:ed:91:19:9d:cc:9a:ae:ce:7b:53:d4:
+                    5e:42:9a:5a:2c:fb:e1:7a:79:55:81:4e:b5:51:2d:
+                    b6:ad:10:f1:36:3e:fe:25:31:07:3c:7d:df:f6:3c:
+                    bc:e3:57:4d:e0:50:6d:d5:48:53:d1:4c:a4:c6:77:
+                    93:ac:be:e1:c9:3f:d3:f4:f8:3a:19:59:29:ff:46:
+                    5a:b6:3e:da:69:91:4d:c7:dc:27:ac:5f:ca:e4:be:
+                    99:6d
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                E5:AE:8F:CC:87:F7:B5:85:86:1E:4B:A6:CF:FC:B9:CA:10:C8:79:90
+                89:51:1E:D6:EA:B6:84:32:05:F0:15:A9:39:24:C0:46:25:5F:FB:8A
             X509v3 Authority Key Identifier: 
-                keyid:0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+                keyid:91:4D:6E:E7:EC:8F:13:8D:84:C8:44:2E:23:E9:BA:B1:A6:6D:44:96
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
     Signature Algorithm: sha256WithRSAEncryption
-         12:11:99:0b:59:f6:cd:61:bf:99:bc:25:83:b2:e7:4b:42:ec:
-         ee:1d:03:3b:cf:5d:76:95:19:2c:d1:41:d0:f6:5c:08:9d:6f:
-         66:50:07:ea:07:fa:88:01:96:05:39:8d:6a:e0:34:27:1e:a2:
-         80:c2:9b:91:ba:17:35:49:ef:8c:42:9d:59:ac:42:3f:52:fa:
-         ef:5f:51:aa:3a:dc:b6:ee:d6:8c:20:89:de:36:7d:a2:e2:ff:
-         eb:13:9d:dc:99:d1:62:33:c5:82:19:12:18:d4:94:5b:5f:c4:
-         f7:74:55:f0:be:fa:0e:4d:7a:01:7e:53:b3:2d:4d:09:b6:7b:
-         8e:0a:7c:3e:b9:39:a1:ee:b6:3d:3f:e8:4a:b0:1d:e4:ee:7b:
-         96:75:19:b5:71:6a:ae:e0:af:14:59:9f:fc:2b:13:dd:70:c9:
-         da:dd:a9:3c:14:3e:f1:69:3b:ce:42:b4:c5:3f:12:f8:37:eb:
-         bf:0c:9d:48:a4:6e:4c:9f:e7:3c:4f:a5:91:32:8b:7f:2e:5f:
-         e7:bf:bc:f4:a0:5f:43:f7:3a:1f:78:a3:0e:8e:c0:46:16:9e:
-         58:6a:0f:7e:e0:69:af:94:ec:bc:3a:7f:8b:44:ef:19:f8:14:
-         16:a4:1d:bd:49:c6:96:da:ba:11:a8:bc:36:11:c7:ad:ab:e0:
-         a5:e2:05:77
+         4b:c2:17:9e:2e:d2:af:2a:32:48:01:ca:5c:ec:24:2d:cc:81:
+         49:b9:86:3a:83:5e:23:9a:b6:8b:46:e8:43:04:20:9b:23:43:
+         b1:e2:a8:93:f0:1f:92:b6:5a:74:64:c1:df:29:20:40:39:fb:
+         d3:91:61:5b:40:e5:b0:95:6c:20:1a:b1:b9:ef:e6:1c:1c:dd:
+         61:78:86:12:7e:c2:59:d3:ed:3c:15:df:53:55:38:55:5d:b1:
+         7e:b0:52:9e:4f:dc:c2:60:66:8b:c5:1e:b6:9e:59:88:b5:cb:
+         07:94:d7:09:72:11:87:b3:16:d9:e7:10:c4:08:a0:48:51:e4:
+         b5:08:e2:30:d2:cd:7a:17:b0:be:af:ee:d1:fc:5c:a2:76:5e:
+         8e:f7:e1:c6:86:0a:8d:a9:41:86:8e:8d:08:44:69:a1:1b:c4:
+         94:59:41:dc:db:52:a6:41:36:63:7e:7e:53:26:a4:71:5a:c4:
+         41:ef:72:2a:1d:cd:1e:4a:df:7b:0a:5b:55:13:4e:80:34:34:
+         0b:44:7e:cb:40:ed:34:54:c9:53:1c:0a:9f:39:a5:b6:92:32:
+         83:b2:8e:55:4c:f7:2d:91:b0:99:dc:15:32:ea:59:3a:bd:d7:
+         15:f6:09:a7:57:77:a7:64:e6:a6:87:ac:4f:46:e3:f8:e5:6a:
+         0b:41:c0:82
 -----BEGIN CERTIFICATE-----
 MIIDXDCCAkSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb/O5I7S
-uZLZeOs2eLDUK6kizYNXWKIPW+XI5PTWQSwfWghrEnv2jzlED/TSPlbNY4cTsYga
-2vETL0rQdnhhb3EI4Ayimmprx4yBb+HqIgmD/QlTePAdTvezFxd+/NylIYN/RoyB
-rwdokRRUQ7/ShfpYkWHMh7yNs5fBpULec0kpyQxIkhXZDms9SkxQxoulaWyyLwKe
-Ck8nGtAcDrjZ/KdikmkMQOxJO1mlOPyOyy+Rnwl2LLjUJX6DcVaJKSyj2L+VcJn1
-yyDf+v24ieZCgqkB2OBC8tLDeCbM+wUwkKCDvc6zbbsBroSqcU/ZNzh+BzVv7YjH
-Uhc4rMZEtf5KswIDAQABo4G6MIG3MB0GA1UdDgQWBBTlro/Mh/e1hYYeS6bP/LnK
-EMh5kDAfBgNVHSMEGDAWgBQPWTwNuLFbxZadtOhPz0ums60z5zA3BggrBgEFBQcB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 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IBAQASEZkLWfbNYb+ZvCWDsudL
-QuzuHQM7z112lRks0UHQ9lwInW9mUAfqB/qIAZYFOY1q4DQnHqKAwpuRuhc1Se+M
-Qp1ZrEI/UvrvX1GqOty27taMIIneNn2i4v/rE53cmdFiM8WCGRIY1JRbX8T3dFXw
-vvoOTXoBflOzLU0JtnuOCnw+uTmh7rY9P+hKsB3k7nuWdRm1cWqu4K8UWZ/8KxPd
-cMna3ak8FD7xaTvOQrTFPxL4N+u/DJ1IpG5Mn+c8T6WRMot/Ll/nv7z0oF9D9zof
-eKMOjsBGFp5Yag9+4GmvlOy8On+LRO8Z+BQWpB29ScaW2roRqLw2Ecetq+Cl4gV3
+VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IBAQBLwheeLtKvKjJIAcpc7CQt
+zIFJuYY6g14jmraLRuhDBCCbI0Ox4qiT8B+Stlp0ZMHfKSBAOfvTkWFbQOWwlWwg
+GrG57+YcHN1heIYSfsJZ0+08Fd9TVThVXbF+sFKeT9zCYGaLxR62nlmItcsHlNcJ
+chGHsxbZ5xDECKBIUeS1COIw0s16F7C+r+7R/Fyidl6O9+HGhgqNqUGGjo0IRGmh
+G8SUWUHc21KmQTZjfn5TJqRxWsRB73IqHc0eSt97CltVE06ANDQLRH7LQO00VMlT
+HAqfOaW2kjKDso5VTPctkbCZ3BUy6lk6vdcV9gmnV3enZOamh6xPRuP45WoLQcCC
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c3:da:da:10:95:78:5c:73:c8:43:66:41:23:8e:
-                    3e:3f:a1:00:57:de:60:d9:2a:84:57:85:08:c6:60:
-                    79:65:2d:51:c9:93:c1:e7:fa:5b:1a:eb:6f:79:44:
-                    d5:71:f6:bd:f4:8c:86:0b:d9:e3:49:dd:a6:f3:5d:
-                    48:8a:25:4a:2a:20:80:c1:83:da:b8:c5:e0:20:de:
-                    40:67:bc:22:38:51:72:df:e3:b7:82:aa:47:ed:c9:
-                    74:a0:82:97:71:35:a8:2f:73:01:86:56:43:e8:88:
-                    42:f9:cc:9b:69:71:09:45:8c:39:82:14:db:2e:08:
-                    17:85:96:c5:69:46:73:55:9b:d8:12:4b:5f:32:70:
-                    cc:52:4e:7e:77:94:78:0e:f4:dd:40:ff:d7:3b:cc:
-                    f7:df:a9:a7:a1:a3:a3:4e:25:c8:e4:68:1c:e3:90:
-                    c2:c5:bb:66:3a:c1:8b:e3:1b:df:b9:8c:0c:9a:3a:
-                    6a:a9:8e:8d:b3:54:49:14:af:28:51:29:b2:5b:7b:
-                    68:34:4c:f3:bb:a5:5d:51:0b:99:6b:b1:fe:b3:16:
-                    d1:ef:2f:18:ee:8a:f8:05:9b:df:0d:92:3a:e0:62:
-                    7b:1d:bc:fb:60:45:ce:f9:e0:46:f6:16:39:08:a7:
-                    68:b5:da:e5:9f:7c:db:07:15:dc:47:e6:5d:a3:8c:
-                    06:7b
+                    00:a0:05:db:73:c2:62:ce:b7:44:2a:d4:fa:15:84:
+                    b6:22:26:47:86:56:7a:e1:d0:e9:d5:60:bb:f3:37:
+                    79:79:21:c1:68:a1:db:d3:22:14:7a:04:15:0e:6c:
+                    c3:1f:fe:0d:0d:b2:2e:6b:7a:19:63:f3:f8:e3:c9:
+                    e9:63:8e:5b:47:98:7e:68:02:2b:e3:9a:e0:9b:04:
+                    f5:04:a4:49:b9:f7:f4:e4:3d:86:34:72:62:e2:dd:
+                    80:71:de:ba:6a:01:eb:a2:fb:db:1f:7c:57:b6:89:
+                    2c:2d:5e:9e:3a:8d:4c:40:dc:96:9d:a4:4f:3a:e6:
+                    e7:a4:63:1c:12:29:76:dd:2f:82:72:4a:d7:81:d6:
+                    59:7a:88:8b:b0:7e:f4:b7:e9:5b:e1:86:8a:27:82:
+                    92:77:bc:b3:38:92:93:13:59:07:5a:79:23:a9:af:
+                    8c:3e:7f:c1:08:59:96:4c:4c:90:ca:0f:37:c6:52:
+                    c6:bd:f4:64:8b:a4:f9:6b:dc:f5:f2:a0:62:d5:29:
+                    79:9b:31:3a:6b:32:38:75:66:0a:55:9b:2d:b9:2b:
+                    5d:72:bc:ec:28:d0:3c:26:3e:c4:f2:f8:a8:14:11:
+                    dd:ca:3c:81:2f:20:55:4a:89:24:0e:77:d7:fa:36:
+                    a7:d8:b1:c3:c1:b2:c6:c1:db:83:f0:1a:37:f8:95:
+                    a2:dd
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+                91:4D:6E:E7:EC:8F:13:8D:84:C8:44:2E:23:E9:BA:B1:A6:6D:44:96
             X509v3 Authority Key Identifier: 
-                keyid:0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+                keyid:91:4D:6E:E7:EC:8F:13:8D:84:C8:44:2E:23:E9:BA:B1:A6:6D:44:96
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         3e:f9:8e:c2:1a:d7:ea:b1:71:03:6d:6d:a9:de:e9:45:1d:ab:
-         a3:26:4c:95:4b:15:ad:9d:be:94:aa:20:57:83:b2:32:96:06:
-         c1:37:9a:6a:18:41:ad:13:3b:52:23:a1:0a:1f:fc:8c:fa:3b:
-         88:43:d1:5e:1e:59:80:06:a5:0a:5e:95:66:3d:3d:cb:4a:b4:
-         38:77:a6:fa:04:29:e8:c1:b8:b5:f7:49:07:ae:53:dd:62:64:
-         3c:70:4c:64:b5:54:84:4d:04:3f:6d:86:80:9d:e2:2b:a4:88:
-         1c:38:74:fc:83:c3:60:c8:86:64:f5:d7:29:f7:e4:8e:02:a9:
-         47:a6:e1:46:0f:c4:b5:22:59:f1:a7:1b:ae:86:7c:70:32:d4:
-         8c:19:7f:a7:6d:82:0b:f3:42:37:02:b5:3d:f3:41:d5:7d:67:
-         97:80:78:9a:e2:06:54:18:bc:b0:7f:5d:77:15:bb:89:cb:4d:
-         29:0c:02:ab:b3:b7:40:44:3a:2c:4a:2e:54:43:7f:ff:b0:5f:
-         da:c5:5f:38:0e:ce:4e:18:ed:f3:f9:99:f0:7c:01:69:ca:0e:
-         15:85:1e:ff:b7:2d:04:6c:3b:5b:f9:7f:70:bc:0c:ac:16:b7:
-         d1:b4:f1:74:84:ad:73:e7:9f:c7:c9:ea:93:d9:f1:c6:a7:59:
-         bf:92:4e:ec
+         63:d1:10:02:d6:c9:15:54:98:5d:1e:fb:fe:43:46:f7:43:91:
+         b2:e2:68:75:1d:7c:0a:b5:85:5d:22:70:dc:89:3b:72:91:3d:
+         6b:d6:90:ac:a8:ec:c9:d9:03:03:93:90:7d:ed:f9:47:b9:c4:
+         93:61:eb:e0:99:eb:56:7e:ce:2b:9b:9f:3f:1d:22:b9:97:19:
+         47:c3:60:33:38:af:cc:7d:19:34:42:c8:fe:26:28:af:31:1d:
+         e8:36:85:c8:67:0f:f3:e0:8e:6c:2b:52:1b:32:05:e5:b5:d8:
+         8c:e9:d5:43:ab:12:6b:4d:da:cc:27:11:01:1f:f4:9a:50:96:
+         cb:f7:29:24:cc:d3:3f:a6:c9:01:d1:9c:e3:8c:f8:3f:ce:91:
+         d7:ed:68:67:40:03:29:93:ed:0c:c1:5d:83:31:e9:12:df:96:
+         a9:0e:44:9d:e5:7f:75:1b:15:58:71:ac:e5:32:ee:d6:5d:9f:
+         19:11:7b:d7:5d:0c:62:f3:ab:0c:e9:a3:6a:ee:f3:c1:d7:c7:
+         3a:87:9e:61:f3:20:3e:70:d4:8e:2a:1f:b0:1d:3d:f0:0c:93:
+         10:ff:91:c7:5e:1a:48:c5:11:b3:89:29:2a:c1:21:f4:d3:1e:
+         be:33:bc:a0:85:37:74:0b:87:f4:53:94:fc:71:35:b8:9b:f9:
+         8d:c4:f0:86
 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMPa2hCVeFxzyENmQSOO
-Pj+hAFfeYNkqhFeFCMZgeWUtUcmTwef6Wxrrb3lE1XH2vfSMhgvZ40ndpvNdSIol
-SioggMGD2rjF4CDeQGe8IjhRct/jt4KqR+3JdKCCl3E1qC9zAYZWQ+iIQvnMm2lx
-CUWMOYIU2y4IF4WWxWlGc1Wb2BJLXzJwzFJOfneUeA703UD/1zvM99+pp6Gjo04l
-yORoHOOQwsW7ZjrBi+Mb37mMDJo6aqmOjbNUSRSvKFEpslt7aDRM87ulXVELmWux
-/rMW0e8vGO6K+AWb3w2SOuBiex28+2BFzvngRvYWOQinaLXa5Z982wcV3EfmXaOM
-BnsCAwEAAaOByzCByDAdBgNVHQ4EFgQUD1k8DbixW8WWnbToT89LprOtM+cwHwYD
-VR0jBBgwFoAUD1k8DbixW8WWnbToT89LprOtM+cwNwYIKwYBBQUHAQEEKzApMCcG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 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA++Y7CGtfq
-sXEDbW2p3ulFHaujJkyVSxWtnb6UqiBXg7IylgbBN5pqGEGtEztSI6EKH/yM+juI
-Q9FeHlmABqUKXpVmPT3LSrQ4d6b6BCnowbi190kHrlPdYmQ8cExktVSETQQ/bYaA
-neIrpIgcOHT8g8NgyIZk9dcp9+SOAqlHpuFGD8S1IlnxpxuuhnxwMtSMGX+nbYIL
-80I3ArU980HVfWeXgHia4gZUGLywf113FbuJy00pDAKrs7dARDosSi5UQ3//sF/a
-xV84Ds5OGO3z+ZnwfAFpyg4VhR7/ty0EbDtb+X9wvAysFrfRtPF0hK1z55/HyeqT
-2fHGp1m/kk7s
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBj0RAC1skV
+VJhdHvv+Q0b3Q5Gy4mh1HXwKtYVdInDciTtykT1r1pCsqOzJ2QMDk5B97flHucST
+YevgmetWfs4rm58/HSK5lxlHw2AzOK/MfRk0Qsj+JiivMR3oNoXIZw/z4I5sK1Ib
+MgXltdiM6dVDqxJrTdrMJxEBH/SaUJbL9ykkzNM/pskB0ZzjjPg/zpHX7WhnQAMp
+k+0MwV2DMekS35apDkSd5X91GxVYcazlMu7WXZ8ZEXvXXQxi86sM6aNq7vPB18c6
+h55h8yA+cNSOKh+wHT3wDJMQ/5HHXhpIxRGziSkqwSH00x6+M7yghTd0C4f0U5T8
+cTW4m/mNxPCG
 -----END TRUST_ANCHOR_UNCONSTRAINED-----
 
 150302120000Z
 -----BEGIN TIME-----
 MTUwMzAyMTIwMDAwWg==
 -----END TIME-----
 
 FAIL
 -----BEGIN VERIFY_RESULT-----
 RkFJTA==
 -----END VERIFY_RESULT-----
 
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----
+
 ----- Certificate i=1 (CN=Intermediate) -----
 ERROR: Does not have Basic Constraints
 
 
 -----BEGIN ERRORS-----
 LS0tLS0gQ2VydGlmaWNhdGUgaT0xIChDTj1JbnRlcm1lZGlhdGUpIC0tLS0tCkVSUk9SOiBEb2VzIG5vdCBoYXZlIEJhc2ljIENvbnN0cmFpbnRzCgo=
 -----END ERRORS-----