Refactor VerifyCertificateChain test data to include a key purpose

net/data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem

 [Created by: generate-intermediate-lacks-signing-key-usage.py]
 
 Certificate chain with 1 intermediate and a trusted root. The intermediate
 contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit.
 Hence validation is expected to fail.
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Target
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:a3:21:17:35:c0:77:f1:a3:51:77:11:45:3e:92:
-                    5f:97:65:eb:99:cc:26:e2:8c:f8:4a:d8:3d:71:17:
-                    a2:eb:6a:cf:2f:07:a8:fa:27:c1:f8:c5:50:22:42:
-                    a2:6f:92:4b:67:c3:0c:a7:ec:35:87:05:ac:eb:e3:
-                    27:cd:62:3d:c4:2e:80:f6:2a:af:31:05:c7:1b:0f:
-                    3b:71:6d:90:77:0d:b4:48:e7:26:2e:4a:44:af:bb:
-                    76:e0:62:ec:e6:61:cc:5b:61:ea:03:ce:4d:46:d0:
-                    96:e2:d5:d9:67:6f:0c:f2:06:e3:9a:14:04:68:82:
-                    88:d6:8b:c1:7f:fb:81:8c:e6:dc:88:20:f7:53:ef:
-                    d5:56:5b:5e:00:b3:5b:e8:ce:d0:d2:6a:ed:b8:4a:
-                    f2:4b:56:fb:63:75:d4:6b:a3:8a:d4:3f:e6:9e:29:
-                    1b:a7:23:61:ba:f0:d6:19:fb:8c:ad:40:2f:7c:14:
-                    36:0f:4b:f1:6e:f0:b8:6e:7d:cc:82:11:63:48:15:
-                    2f:34:00:99:cd:be:b4:1a:be:d8:73:38:00:ac:c1:
-                    09:41:a2:c4:ec:74:69:15:52:c4:45:2d:20:ff:b5:
-                    ce:d0:41:be:a2:b2:4d:ef:a7:3b:f1:df:9d:78:1a:
-                    9d:2c:6c:61:26:2e:f7:82:ab:50:76:6d:a3:d3:33:
-                    46:07
+                    00:c7:e4:5b:20:c1:2e:a1:89:32:d1:e5:80:0e:e3:
+                    12:77:b7:98:35:d7:6b:ec:9e:9c:50:92:b2:9a:28:
+                    b1:f6:e9:22:99:23:05:54:7d:67:de:8c:09:04:b7:
+                    6f:93:95:d6:c7:c5:48:23:6e:d2:56:32:19:bb:ac:
+                    b4:3d:3b:df:4b:40:85:48:25:2a:1b:22:c4:61:3b:
+                    08:5c:26:89:63:e7:19:27:c5:58:3f:9b:4d:b2:ff:
+                    b4:18:42:4d:7d:b5:a9:5a:4b:4b:46:1b:ce:bb:17:
+                    0e:29:10:78:50:10:bd:d2:16:b6:63:be:94:21:c6:
+                    e7:0b:d1:95:ea:d0:b5:ae:33:27:7e:02:0b:1b:4b:
+                    85:9c:d7:9a:4c:d1:82:b6:8f:4d:25:e4:f0:25:96:
+                    34:a7:f9:b5:e6:24:19:7c:56:54:de:b9:15:5e:39:
+                    ec:bb:12:ff:57:ef:87:37:46:fa:61:bc:a5:4a:32:
+                    6d:c3:35:b1:53:02:0b:cd:f1:6f:de:39:63:03:fe:
+                    a1:b6:7a:67:a9:f6:d0:df:d0:24:ad:39:f0:d8:58:
+                    e3:69:dd:6d:a5:ab:23:9f:be:ff:16:78:6a:0b:7e:
+                    ac:82:b6:5a:d7:e9:e4:b4:3c:fa:4f:64:29:74:5a:
+                    0d:fb:2e:d6:a0:c2:a8:86:3f:be:07:f7:1d:6e:ba:
+                    10:d1
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                95:3C:F4:24:9F:9C:4A:CB:16:AA:A4:8A:AB:DF:D7:9D:6D:BA:AC:FA
+                82:4F:1E:35:E1:DD:95:CF:C7:D0:E7:CC:86:B7:EB:50:BF:33:62:07
             X509v3 Authority Key Identifier: 
-                keyid:29:73:E8:7F:69:DE:63:14:43:C6:6D:55:6C:C2:AE:84:FA:D5:FC:8C
+                keyid:E6:A1:BA:DF:A4:01:75:1C:DE:59:26:D2:66:E6:AE:E7:8D:3E:13:C2
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         a7:dc:31:88:64:26:72:62:34:8d:3a:75:7a:71:d4:ae:7a:2c:
-         f4:2d:44:e9:e9:e8:c5:4d:79:b2:dc:12:ea:75:60:44:cb:6e:
-         df:22:47:d5:ae:f6:03:dc:c4:6b:cf:90:75:29:49:50:04:e0:
-         94:2a:b3:bf:d4:ae:e2:08:ad:52:22:65:91:33:09:79:cf:c9:
-         27:9b:52:dd:a8:0d:f5:21:b6:58:c4:5f:1b:79:72:69:7a:7b:
-         49:7d:64:67:d0:d6:1c:21:fe:e9:ae:39:1c:b4:3f:f2:f6:6d:
-         7e:30:15:76:a3:af:eb:43:c0:ed:f3:8a:bc:48:5c:47:fc:44:
-         09:da:7d:9a:20:f1:e2:1d:4d:40:34:0c:e1:68:16:9e:47:57:
-         1a:6a:19:e4:b2:6e:dd:7c:69:5f:b8:2b:bd:e7:cb:e4:9c:9c:
-         79:e1:a5:b3:82:a1:c9:5b:fd:73:d6:a8:1d:1d:d8:31:d6:37:
-         00:e9:7a:d2:a2:ee:c0:42:21:22:da:70:6e:a8:8c:fa:0c:24:
-         c9:70:4b:49:0a:c1:db:35:f2:71:d7:30:41:a7:6b:05:92:c6:
-         cd:8c:d4:de:c2:6b:aa:b8:70:d2:fa:cf:9a:01:af:34:80:95:
-         ad:ab:59:86:f2:56:6d:d8:43:95:24:e3:f7:7b:b9:83:89:ed:
-         e7:7a:2f:35
+         4b:dc:3c:86:b5:53:1c:c6:e6:77:4d:41:cf:e8:1f:37:dd:33:
+         8d:10:f9:1d:93:1d:41:96:86:79:7b:14:27:1b:70:80:10:96:
+         ea:38:e5:e2:a2:91:4a:c0:a9:8b:de:49:3b:f1:74:c0:bc:ae:
+         81:71:32:21:88:e5:2a:7d:41:d4:c0:e1:e7:0c:3a:d2:52:a5:
+         1e:ca:19:32:c0:88:c5:16:36:cc:b6:7c:cf:af:98:b3:2d:f8:
+         f8:40:08:16:52:00:ba:a2:3a:76:83:e8:cd:1d:95:d1:f1:67:
+         ec:06:e2:71:1d:01:ef:bb:4e:30:73:26:ad:3a:ac:25:4e:b9:
+         24:f9:9e:bb:72:b3:04:ba:ee:7e:16:bb:eb:42:66:04:14:48:
+         5e:5a:7d:0b:b3:5e:40:22:6c:65:e1:5b:61:1b:b6:dd:d0:e4:
+         5f:f8:b1:22:e1:d0:6c:d6:55:aa:a2:f5:9d:fa:62:f0:ab:4a:
+         c4:91:db:e4:fd:7d:df:a7:02:87:5e:17:76:2e:96:56:45:56:
+         cf:b2:2b:01:80:a4:81:9e:4e:a2:79:45:38:83:06:2e:61:ac:
+         22:bb:41:86:b2:9c:9b:b9:1f:62:23:27:cc:d4:bc:06:df:3e:
+         54:22:ed:69:02:e0:53:bc:ed:28:50:5d:82:fe:a6:8f:10:a2:
+         cd:38:17:80
 -----BEGIN CERTIFICATE-----
 MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIRc1
-wHfxo1F3EUU+kl+XZeuZzCbijPhK2D1xF6Lras8vB6j6J8H4xVAiQqJvkktnwwyn
-7DWHBazr4yfNYj3ELoD2Kq8xBccbDztxbZB3DbRI5yYuSkSvu3bgYuzmYcxbYeoD
-zk1G0Jbi1dlnbwzyBuOaFARogojWi8F/+4GM5tyIIPdT79VWW14As1voztDSau24
-SvJLVvtjddRro4rUP+aeKRunI2G68NYZ+4ytQC98FDYPS/Fu8LhufcyCEWNIFS80
-AJnNvrQavthzOACswQlBosTsdGkVUsRFLSD/tc7QQb6isk3vpzvx3514Gp0sbGEm
-LveCq1B2baPTM0YHAgMBAAGjgekwgeYwHQYDVR0OBBYEFJU89CSfnErLFqqkiqvf
-151tuqz6MB8GA1UdIwQYMBaAFClz6H9p3mMUQ8ZtVWzCroT61fyMMD8GCCsGAQUF
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5Fsg
+wS6hiTLR5YAO4xJ3t5g112vsnpxQkrKaKLH26SKZIwVUfWfejAkEt2+TldbHxUgj
+btJWMhm7rLQ9O99LQIVIJSobIsRhOwhcJolj5xknxVg/m02y/7QYQk19talaS0tG
+G867Fw4pEHhQEL3SFrZjvpQhxucL0ZXq0LWuMyd+AgsbS4Wc15pM0YK2j00l5PAl
+ljSn+bXmJBl8VlTeuRVeOey7Ev9X74c3RvphvKVKMm3DNbFTAgvN8W/eOWMD/qG2
+emep9tDf0CStOfDYWONp3W2lqyOfvv8WeGoLfqyCtlrX6eS0PPpPZCl0Wg37Ltag
+wqiGP74H9x1uuhDRAgMBAAGjgekwgeYwHQYDVR0OBBYEFIJPHjXh3ZXPx9DnzIa3
+61C/M2IHMB8GA1UdIwQYMBaAFOahut+kAXUc3lkm0mbmrueNPhPCMD8GCCsGAQUF
 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAp9wxiGQmcmI0jTp1enHU
-rnos9C1E6enoxU15stwS6nVgRMtu3yJH1a72A9zEa8+QdSlJUATglCqzv9Su4git
-UiJlkTMJec/JJ5tS3agN9SG2WMRfG3lyaXp7SX1kZ9DWHCH+6a45HLQ/8vZtfjAV
-dqOv60PA7fOKvEhcR/xECdp9miDx4h1NQDQM4WgWnkdXGmoZ5LJu3XxpX7grvefL
-5JyceeGls4KhyVv9c9aoHR3YMdY3AOl60qLuwEIhItpwbqiM+gwkyXBLSQrB2zXy
-cdcwQadrBZLGzYzU3sJrqrhw0vrPmgGvNICVratZhvJWbdhDlSTj93u5g4nt53ov
-NQ==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAS9w8hrVTHMbmd01Bz+gf
+N90zjRD5HZMdQZaGeXsUJxtwgBCW6jjl4qKRSsCpi95JO/F0wLyugXEyIYjlKn1B
+1MDh5ww60lKlHsoZMsCIxRY2zLZ8z6+Ysy34+EAIFlIAuqI6doPozR2V0fFn7Abi
+cR0B77tOMHMmrTqsJU65JPmeu3KzBLrufha760JmBBRIXlp9C7NeQCJsZeFbYRu2
+3dDkX/ixIuHQbNZVqqL1nfpi8KtKxJHb5P1936cCh14Xdi6WVkVWz7IrAYCkgZ5O
+onlFOIMGLmGsIrtBhrKcm7kfYiMnzNS8Bt8+VCLtaQLgU7ztKFBdgv6mjxCizTgX
+gA==
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Intermediate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:cf:bd:56:f0:dc:36:bc:a8:05:9b:fd:e3:c1:86:
-                    da:96:c5:0b:b0:7f:fd:e5:6d:f4:df:44:46:82:ed:
-                    45:60:4b:5d:c6:27:5a:d8:f1:3c:28:a5:eb:3f:a9:
-                    5f:bc:b2:a9:20:fe:09:fa:39:76:5f:2a:91:b2:ef:
-                    c9:47:70:c9:d0:ce:66:57:25:d0:72:12:c5:2a:ab:
-                    5c:bc:b3:9a:ba:c8:e9:cb:81:6a:16:f1:7d:a9:9f:
-                    e8:9a:0a:47:29:53:34:f7:99:70:14:c6:63:4c:aa:
-                    ba:96:7c:78:c4:11:d1:cc:3b:35:56:e8:7f:41:9c:
-                    41:69:d2:b0:dd:36:00:ed:dd:a2:bd:e2:56:29:c5:
-                    8d:4e:7b:71:fb:f5:a1:7b:37:df:d2:66:d4:fe:c8:
-                    24:6d:a3:c4:43:e9:d3:3e:e3:08:78:95:e9:86:e3:
-                    73:09:f9:04:fe:1a:25:19:5b:7c:a8:da:62:05:aa:
-                    56:1b:2a:d4:33:ff:4f:a2:fe:34:90:ec:e9:94:f5:
-                    0a:92:e9:b3:bf:c4:d3:78:80:0a:5e:4e:11:58:94:
-                    66:a8:52:b8:6e:49:64:cb:45:ee:7c:46:80:d7:3d:
-                    40:df:9e:69:54:ce:a5:7f:db:6b:73:42:c5:9c:6e:
-                    7c:b6:9f:ac:b9:8c:cd:7f:da:00:7b:3b:c2:dd:4d:
-                    44:c7
+                    00:9b:74:18:e4:63:39:09:24:c9:68:d2:cd:f3:7f:
+                    29:14:e9:46:45:e6:ca:47:3f:b5:21:38:a8:f4:ac:
+                    16:6c:51:16:b0:06:93:de:8a:b8:0e:28:02:52:bc:
+                    19:f7:b3:c7:47:a8:d2:20:9b:30:f6:b4:e9:cc:25:
+                    9e:30:f4:74:ed:73:1a:1c:4e:92:f8:8d:04:32:98:
+                    36:85:34:24:7a:c5:3c:e1:bc:0d:c0:a2:7f:ff:65:
+                    12:10:c0:19:6e:c1:cf:2f:04:90:b0:41:4c:42:42:
+                    ed:8a:7a:5f:4c:67:79:6c:e5:15:ce:96:02:bc:73:
+                    cd:4b:7a:e2:c6:54:ee:39:5b:74:39:df:b2:a9:8c:
+                    81:94:b4:ae:05:a0:d2:05:65:68:ee:54:ff:0c:ab:
+                    e2:d1:28:b4:4b:bc:5a:16:d1:84:24:5f:38:d3:7f:
+                    7b:3e:92:ef:8a:4e:ba:d2:2b:fb:f4:df:35:e5:55:
+                    82:d8:4a:5d:e6:49:4e:84:ee:bd:ea:a7:35:86:a8:
+                    dc:43:02:af:a7:ca:3e:2f:c6:bc:7b:aa:07:7a:69:
+                    cf:af:cb:63:89:9d:1d:6d:a8:b4:a1:64:29:bb:b7:
+                    7c:bb:d5:b0:72:89:f5:f9:26:8c:e1:e1:6f:a9:ef:
+                    d5:2c:66:ae:4e:c4:f5:31:ec:74:db:f9:a9:7f:86:
+                    37:e1
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                29:73:E8:7F:69:DE:63:14:43:C6:6D:55:6C:C2:AE:84:FA:D5:FC:8C
+                E6:A1:BA:DF:A4:01:75:1C:DE:59:26:D2:66:E6:AE:E7:8D:3E:13:C2
             X509v3 Authority Key Identifier: 
-                keyid:77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+                keyid:57:30:6C:4F:34:D1:E0:27:4A:2F:E8:2A:EF:D3:75:01:24:6F:B5:FA
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         ad:b2:08:36:77:a1:da:aa:e4:31:7d:a8:61:03:be:0a:86:a2:
-         15:3b:08:bb:c8:86:eb:f8:52:c0:63:27:db:5c:25:16:98:05:
-         b1:84:dc:12:74:ce:25:a6:2e:be:32:2c:1f:0a:04:4e:9e:bb:
-         a1:b6:34:ef:20:2d:a3:fe:cc:b3:40:2e:75:9c:2d:c3:c0:e7:
-         8e:aa:9f:18:60:a9:61:18:4f:a5:d8:3d:c7:d3:09:62:6c:b8:
-         5a:99:3b:34:70:7b:7d:61:cc:f8:c9:71:97:2c:59:96:d2:1a:
-         c5:4e:ce:df:65:cf:18:05:bd:9f:bc:86:ba:16:55:79:58:d8:
-         f7:32:44:b6:59:32:9f:5d:ef:04:25:2a:2d:54:36:9e:62:0f:
-         c4:df:1c:10:64:02:ba:64:f2:ea:3d:cc:5c:ea:2e:4d:72:fa:
-         e9:72:0f:77:af:5d:1e:32:b9:64:7c:c5:b2:77:36:64:e5:ba:
-         d0:a0:8c:97:7d:b3:76:6c:c1:15:70:f8:0c:50:b8:3c:d4:6c:
-         4f:33:32:f2:c8:b8:35:cd:80:a2:3a:49:55:ba:2e:5b:c9:9a:
-         b6:77:fb:0f:01:2e:72:21:bc:88:f6:e3:71:8c:68:59:f3:1b:
-         d8:e1:d3:e3:6c:15:5d:8d:82:a3:db:84:44:58:3e:2f:a9:88:
-         56:2a:a6:4b
+         5f:8c:fb:75:af:a0:cb:79:8e:c5:c9:6d:90:11:3d:a7:aa:12:
+         ac:e9:22:15:b1:15:9a:8f:30:7b:5c:ad:f8:0a:df:38:69:4a:
+         56:38:1b:ee:c4:af:63:26:13:10:40:ef:3d:42:d0:77:25:b4:
+         54:59:05:72:d1:8d:61:d6:ad:7d:09:28:ba:a8:e1:99:aa:ae:
+         3b:78:03:d9:56:80:23:5d:81:81:0f:96:ce:07:35:3e:cf:88:
+         54:4d:7f:3c:5d:d0:03:93:3c:b7:76:9f:4d:51:37:4f:6b:8c:
+         18:e2:ba:e4:4c:18:a2:c2:80:c4:a8:4d:b7:81:d4:99:9d:28:
+         fe:ca:ab:a5:af:f1:0f:dd:13:84:47:be:fc:d2:88:47:d4:7c:
+         be:aa:62:49:65:f2:b8:b1:4e:ad:7a:f3:e1:52:50:6b:3c:8e:
+         07:df:d4:22:20:53:32:68:fa:0b:9c:8a:4a:e9:63:08:ee:eb:
+         65:10:05:1d:9d:c1:2b:a3:22:4b:90:37:59:c5:9f:90:ac:8f:
+         10:cb:76:3b:ca:1a:60:f5:a1:b1:26:24:05:92:2c:68:61:8e:
+         03:ca:54:e6:f6:40:b2:bf:db:a8:18:9f:62:ad:05:10:e1:05:
+         ce:be:2f:34:8c:1d:44:73:90:b3:4e:5b:7d:1a:2e:b6:2b:0f:
+         79:da:15:4b
 -----BEGIN CERTIFICATE-----
 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz71W8Nw2
-vKgFm/3jwYbalsULsH/95W3030RGgu1FYEtdxida2PE8KKXrP6lfvLKpIP4J+jl2
-XyqRsu/JR3DJ0M5mVyXQchLFKqtcvLOausjpy4FqFvF9qZ/omgpHKVM095lwFMZj
-TKq6lnx4xBHRzDs1Vuh/QZxBadKw3TYA7d2iveJWKcWNTntx+/Whezff0mbU/sgk
-baPEQ+nTPuMIeJXphuNzCfkE/holGVt8qNpiBapWGyrUM/9Pov40kOzplPUKkumz
-v8TTeIAKXk4RWJRmqFK4bklky0XufEaA1z1A355pVM6lf9trc0LFnG58tp+suYzN
-f9oAezvC3U1ExwIDAQABo4HLMIHIMB0GA1UdDgQWBBQpc+h/ad5jFEPGbVVswq6E
-+tX8jDAfBgNVHSMEGDAWgBR3s71JTWfQfk9nwybHHmZC+W3kCDA3BggrBgEFBQcB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 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
 VR0PAQH/BAQDAgWgMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AK2yCDZ3odqq5DF9qGEDvgqGohU7CLvIhuv4UsBjJ9tcJRaYBbGE3BJ0ziWmLr4y
-LB8KBE6eu6G2NO8gLaP+zLNALnWcLcPA546qnxhgqWEYT6XYPcfTCWJsuFqZOzRw
-e31hzPjJcZcsWZbSGsVOzt9lzxgFvZ+8hroWVXlY2PcyRLZZMp9d7wQlKi1UNp5i
-D8TfHBBkArpk8uo9zFzqLk1y+ulyD3evXR4yuWR8xbJ3NmTlutCgjJd9s3ZswRVw
-+AxQuDzUbE8zMvLIuDXNgKI6SVW6LlvJmrZ3+w8BLnIhvIj243GMaFnzG9jh0+Ns
-FV2NgqPbhERYPi+piFYqpks=
+AF+M+3WvoMt5jsXJbZARPaeqEqzpIhWxFZqPMHtcrfgK3zhpSlY4G+7Er2MmExBA
+7z1C0HcltFRZBXLRjWHWrX0JKLqo4Zmqrjt4A9lWgCNdgYEPls4HNT7PiFRNfzxd
+0AOTPLd2n01RN09rjBjiuuRMGKLCgMSoTbeB1JmdKP7Kq6Wv8Q/dE4RHvvzSiEfU
+fL6qYkll8rixTq168+FSUGs8jgff1CIgUzJo+gucikrpYwju62UQBR2dwSujIkuQ
+N1nFn5CsjxDLdjvKGmD1obEmJAWSLGhhjgPKVOb2QLK/26gYn2KtBRDhBc6+LzSM
+HURzkLNOW30aLrYrD3naFUs=
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:b3:13:19:f8:ad:c0:ff:5e:86:19:9a:3c:7f:0c:
-                    04:81:2c:bd:c4:ee:fe:6c:bb:b5:a2:ee:08:10:bd:
-                    bb:b6:d1:6c:0d:e7:49:6a:45:0f:0f:46:2b:b6:49:
-                    49:92:7d:c8:b8:81:c1:3f:70:80:39:8a:29:de:77:
-                    f0:a3:3e:ef:8f:8d:9c:74:ca:05:c6:5f:12:fc:d4:
-                    4f:47:64:5d:ea:4d:84:af:f0:d0:88:ff:58:98:ad:
-                    7f:6f:c0:22:bc:8e:a4:44:7b:2c:d3:3e:08:45:2a:
-                    13:20:90:1d:b6:0b:2c:4e:a4:40:c3:76:66:6f:eb:
-                    5c:49:fc:1d:81:8e:a7:cc:a3:91:bd:6f:fa:22:73:
-                    84:35:99:08:2c:3e:8e:0b:74:a6:16:79:b3:37:2f:
-                    66:5c:b1:4c:55:76:af:65:9c:cc:e6:af:b0:8c:c3:
-                    28:24:c9:a0:f2:b4:d0:74:d3:e0:72:af:0d:86:f0:
-                    21:4a:9e:4a:9f:95:7b:7a:73:4c:a9:b5:0a:ac:23:
-                    f7:63:64:88:fc:00:9b:69:23:33:1a:75:bd:6d:f6:
-                    f2:62:c7:68:19:d0:d1:55:2c:6d:f4:41:d8:3b:79:
-                    41:5f:44:97:b9:8f:5a:b4:0a:12:b9:94:0e:34:c7:
-                    a7:93:cf:dd:f1:3d:bb:0f:11:33:fc:c8:c4:76:2d:
-                    9e:cd
+                    00:b0:25:1d:c5:67:18:55:8a:dd:f2:19:86:be:a3:
+                    da:c1:03:6b:82:76:3f:09:83:35:0b:73:b7:53:40:
+                    64:94:90:8b:5b:e5:24:a6:bb:cf:46:ce:80:44:f1:
+                    85:17:86:d4:3b:9e:54:1f:7c:b4:ff:fd:c2:24:57:
+                    2e:a8:9d:97:57:92:ec:f7:bb:31:32:70:53:cc:7f:
+                    0f:b3:be:65:86:dc:f1:86:4b:c1:d9:df:1d:9b:d8:
+                    49:4c:16:54:de:f9:a2:8f:c3:b1:38:85:ea:6b:4c:
+                    04:8a:52:f6:3e:96:a4:86:9d:de:6d:be:ae:21:21:
+                    f6:82:03:3f:b0:23:70:f3:6f:31:a4:70:a1:4f:9f:
+                    23:c1:78:41:ff:f8:65:93:75:a5:f9:5a:74:1c:7f:
+                    74:1a:55:bf:8c:66:e5:30:44:fd:3d:f3:43:9a:c8:
+                    e0:43:96:41:ca:4b:9b:71:f5:ca:fe:91:d3:39:b6:
+                    03:c7:58:d9:7d:8f:7c:f6:1e:55:46:a6:03:dd:d6:
+                    38:b4:d2:f0:bd:b2:83:9b:ea:8b:6b:c8:5e:ff:7b:
+                    05:60:84:bf:ba:7b:6d:8f:88:4a:31:c7:11:c2:4c:
+                    08:e1:2e:26:19:f0:5d:08:c5:e2:61:f8:52:4a:0b:
+                    92:f5:a4:d0:7c:ad:91:59:f1:3b:d8:fa:62:0d:58:
+                    79:07
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+                57:30:6C:4F:34:D1:E0:27:4A:2F:E8:2A:EF:D3:75:01:24:6F:B5:FA
             X509v3 Authority Key Identifier: 
-                keyid:77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+                keyid:57:30:6C:4F:34:D1:E0:27:4A:2F:E8:2A:EF:D3:75:01:24:6F:B5:FA
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         5d:bb:5a:36:f5:74:9c:51:8c:7c:b3:e0:71:91:0d:51:59:45:
-         92:b8:3c:f1:0a:42:ac:c3:c7:9f:4e:2a:61:09:7d:46:27:c7:
-         a6:23:09:39:39:18:9e:78:3f:94:cf:d6:44:5e:8e:9f:c4:4e:
-         fd:b4:ab:4f:56:ea:90:6d:4d:51:88:55:e2:56:c0:03:14:a2:
-         99:d2:1d:67:03:75:6d:5c:a0:c5:5c:78:a6:c5:8e:96:6e:7a:
-         4f:a1:b0:4e:29:62:92:bc:44:88:a4:72:8d:64:16:da:ff:c4:
-         e8:4c:d3:eb:a6:03:85:eb:a8:42:ee:ae:c0:87:f2:43:41:05:
-         43:e2:d5:ad:b6:59:dd:59:51:6c:2b:77:f3:51:a9:e0:9b:3e:
-         ba:04:64:d3:f3:ce:59:5a:ad:b1:56:da:91:80:89:d9:62:81:
-         99:9c:a4:49:24:7a:bc:91:4e:ab:86:e6:0b:76:0d:34:2d:75:
-         fa:7b:13:f5:b3:52:22:c1:57:7c:cd:79:0c:2b:ba:8b:87:83:
-         52:59:5b:69:55:9d:c4:0a:98:b0:b0:dd:88:86:8c:28:c3:b2:
-         bd:35:85:b1:f0:78:6a:99:ac:63:52:08:5b:69:97:55:c0:87:
-         81:be:bd:09:7f:eb:56:a9:84:9f:f6:9c:df:f2:19:41:60:f1:
-         06:d1:77:38
+         37:42:51:57:5a:64:63:1c:1c:47:88:7d:76:dc:d7:5a:81:75:
+         eb:36:20:4b:1c:99:82:1b:e6:48:f6:10:c2:1b:07:7e:12:f6:
+         c9:39:47:4e:9b:30:4e:78:4a:0f:69:d5:19:51:dc:64:df:c9:
+         e2:09:4e:15:55:25:5f:47:43:66:d4:4e:cc:f7:89:a2:60:dd:
+         42:a7:3e:69:b3:28:d8:a3:60:2a:4e:d1:3e:65:2d:fa:c8:13:
+         29:fc:0e:a8:ad:82:47:e0:fc:3b:54:1d:da:ac:fd:f3:db:39:
+         d9:bb:a9:96:33:43:96:0c:95:df:be:af:a2:64:44:08:ad:5f:
+         83:1b:be:a3:ad:41:a2:0f:0b:05:f5:49:4c:b5:b2:cb:a7:e4:
+         30:c7:44:5a:bd:3b:34:d8:ad:27:6b:f5:83:ed:78:53:2e:d7:
+         cc:b4:82:d7:52:2b:06:c4:62:96:53:23:e7:4a:8d:13:b5:95:
+         3f:34:25:23:e9:0a:04:74:83:f1:c3:c9:94:2e:b0:0a:a2:b6:
+         ce:dc:03:11:a2:52:7b:26:7f:5e:37:98:7b:7b:3f:99:a8:a5:
+         07:4b:55:90:7a:21:a9:32:92:1d:c6:f3:55:ca:4e:a2:83:14:
+         d8:1f:d2:1d:76:11:19:ae:10:81:72:35:bf:0b:fa:d1:66:a8:
+         f5:19:d9:6b
 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMTGfitwP9ehhmaPH8M
-BIEsvcTu/my7taLuCBC9u7bRbA3nSWpFDw9GK7ZJSZJ9yLiBwT9wgDmKKd538KM+
-74+NnHTKBcZfEvzUT0dkXepNhK/w0Ij/WJitf2/AIryOpER7LNM+CEUqEyCQHbYL
-LE6kQMN2Zm/rXEn8HYGOp8yjkb1v+iJzhDWZCCw+jgt0phZ5szcvZlyxTFV2r2Wc
-zOavsIzDKCTJoPK00HTT4HKvDYbwIUqeSp+Ve3pzTKm1Cqwj92NkiPwAm2kjMxp1
-vW328mLHaBnQ0VUsbfRB2Dt5QV9El7mPWrQKErmUDjTHp5PP3fE9uw8RM/zIxHYt
-ns0CAwEAAaOByzCByDAdBgNVHQ4EFgQUd7O9SU1n0H5PZ8Mmxx5mQvlt5AgwHwYD
-VR0jBBgwFoAUd7O9SU1n0H5PZ8Mmxx5mQvlt5AgwNwYIKwYBBQUHAQEEKzApMCcG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 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBdu1o29XSc
-UYx8s+BxkQ1RWUWSuDzxCkKsw8efTiphCX1GJ8emIwk5ORieeD+Uz9ZEXo6fxE79
-tKtPVuqQbU1RiFXiVsADFKKZ0h1nA3VtXKDFXHimxY6WbnpPobBOKWKSvESIpHKN
-ZBba/8ToTNPrpgOF66hC7q7Ah/JDQQVD4tWttlndWVFsK3fzUangmz66BGTT885Z
-Wq2xVtqRgInZYoGZnKRJJHq8kU6rhuYLdg00LXX6exP1s1IiwVd8zXkMK7qLh4NS
-WVtpVZ3ECpiwsN2Ihowow7K9NYWx8HhqmaxjUghbaZdVwIeBvr0Jf+tWqYSf9pzf
-8hlBYPEG0Xc4
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA3QlFXWmRj
+HBxHiH123NdagXXrNiBLHJmCG+ZI9hDCGwd+EvbJOUdOmzBOeEoPadUZUdxk38ni
+CU4VVSVfR0Nm1E7M94miYN1Cpz5psyjYo2AqTtE+ZS36yBMp/A6orYJH4Pw7VB3a
+rP3z2znZu6mWM0OWDJXfvq+iZEQIrV+DG76jrUGiDwsF9UlMtbLLp+Qwx0RavTs0
+2K0na/WD7XhTLtfMtILXUisGxGKWUyPnSo0TtZU/NCUj6QoEdIPxw8mULrAKorbO
+3AMRolJ7Jn9eN5h7ez+ZqKUHS1WQeiGpMpIdxvNVyk6igxTYH9IddhEZrhCBcjW/
+C/rRZqj1Gdlr
 -----END TRUST_ANCHOR_UNCONSTRAINED-----
 
 150302120000Z
 -----BEGIN TIME-----
 MTUwMzAyMTIwMDAwWg==
 -----END TIME-----
 
 FAIL
 -----BEGIN VERIFY_RESULT-----
 RkFJTA==
 -----END VERIFY_RESULT-----
 
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----
+
 ----- Certificate i=1 (CN=Intermediate) -----
 ERROR: keyCertSign bit is not set
 
 
 -----BEGIN ERRORS-----
 LS0tLS0gQ2VydGlmaWNhdGUgaT0xIChDTj1JbnRlcm1lZGlhdGUpIC0tLS0tCkVSUk9SOiBrZXlDZXJ0U2lnbiBiaXQgaXMgbm90IHNldAoK
 -----END ERRORS-----