Refactor VerifyCertificateChain test data to include a key purpose

net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem

 [Created by: generate-target-has-keycertsign-but-not-ca.py]
 
 Certificate chain with 1 intermediate, a trusted root, and a target
 certificate that is not a CA, and yet has the keyCertSign bit set. Verification
 is expected to fail, since keyCertSign should only be asserted when CA is
 true.
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Target
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:aa:e6:1b:b4:96:49:1d:88:99:c3:be:30:44:ed:
-                    2a:6e:80:18:66:5a:66:26:44:14:8f:1a:1d:69:81:
-                    8b:44:fb:ee:76:a1:c6:6d:e1:c1:ad:50:aa:99:a2:
-                    d5:ce:ac:f4:86:04:93:02:d9:33:aa:24:ef:36:ef:
-                    5c:93:9a:69:00:45:95:c3:82:37:67:df:25:3e:ea:
-                    dc:d0:fb:08:7f:89:aa:ad:df:a6:b6:c8:09:a3:74:
-                    dc:17:12:b4:03:7d:7d:86:7d:57:1e:ff:d2:16:f7:
-                    9f:85:79:6e:5c:01:e3:cf:64:9d:55:e1:77:2c:43:
-                    89:30:d1:eb:d0:2e:68:e6:d1:c1:2a:92:58:c8:e2:
-                    9b:95:be:f6:d0:42:2d:38:fe:c8:17:a3:cf:37:76:
-                    af:b1:0e:32:a5:6d:58:c9:de:4b:f4:2f:fa:8c:e4:
-                    9c:c6:1c:88:7c:55:01:4b:48:81:b0:0f:4f:19:f7:
-                    fa:12:e7:9e:27:27:85:47:e6:b8:07:d9:59:a3:9a:
-                    ac:3f:7d:a6:14:16:c8:8b:8d:70:d7:7b:fa:46:d4:
-                    32:fc:50:c7:83:82:e3:18:69:a5:a4:56:df:24:a3:
-                    c5:7d:d5:f3:24:a4:67:22:4c:c8:b6:93:c2:05:fc:
-                    01:1b:ae:9d:a4:76:f4:bb:d6:b6:a9:32:2c:3a:fe:
-                    91:93
+                    00:cd:a3:3d:e1:b1:b2:0a:1c:aa:96:29:01:cd:5a:
+                    89:00:99:56:69:3b:d0:c1:28:b1:d1:52:18:30:21:
+                    d0:28:da:7a:f0:b0:94:cb:0f:8c:ec:5f:d3:7f:45:
+                    6a:db:ea:c8:10:8c:c4:42:3e:d3:7a:0b:50:61:38:
+                    e6:11:c5:c8:ac:d9:8d:da:47:b1:2c:15:79:48:49:
+                    19:d1:5e:31:9d:5f:27:e2:46:a1:0b:01:ce:2b:14:
+                    8a:b1:d4:31:05:be:33:79:12:e7:dc:91:9b:f0:b6:
+                    bf:91:bd:73:f8:75:a2:83:53:1e:94:54:70:32:fa:
+                    35:1a:0a:21:56:aa:a4:f5:db:36:ae:b7:22:07:c5:
+                    43:c5:c9:8e:78:d0:87:5e:29:95:c5:09:76:1b:16:
+                    03:66:b7:7f:20:15:33:e1:1a:10:e5:cf:2c:83:58:
+                    2c:25:76:72:de:30:50:a7:24:89:04:0f:17:ee:e9:
+                    a8:74:67:43:16:89:7c:7f:7f:3d:11:ba:95:bd:69:
+                    51:75:c7:9e:35:c6:c6:16:d9:fb:92:39:9d:c2:c4:
+                    02:09:cc:83:e5:4c:30:58:9b:fd:0b:eb:94:f0:e4:
+                    f5:a0:25:d3:ad:f6:50:86:4a:eb:5b:2f:11:62:7c:
+                    39:ac:35:e1:45:06:10:d6:1c:4a:44:49:7c:df:9b:
+                    6b:73
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                55:B5:67:E4:CD:8D:51:AD:5E:A2:25:B0:94:40:72:52:F4:17:24:4E
+                7A:4D:BD:3C:FF:7D:AB:F5:27:F9:22:43:5F:94:4B:64:19:8C:FC:3D
             X509v3 Authority Key Identifier: 
-                keyid:71:AE:42:1C:8C:C1:FB:35:F7:C0:9F:63:95:A7:7B:4F:9D:8E:D2:7A
+                keyid:1D:C8:D6:28:C1:89:4C:16:F8:7E:CF:73:C3:0B:64:07:BF:A5:1E:78
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment, Certificate Sign
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         25:e8:87:e7:07:ba:bd:47:c3:dd:5a:3c:29:bc:af:cb:fb:cd:
-         c6:55:e6:9c:7b:cd:0e:8f:1a:0a:e4:cb:06:db:42:44:02:e5:
-         37:6e:1a:a3:7d:23:96:c6:b2:67:cb:5a:1e:71:a1:e3:4f:15:
-         80:7f:a1:0d:59:60:b0:6f:c9:ab:0f:ef:20:d3:c2:45:e0:99:
-         aa:7e:e1:b7:31:dc:4b:b2:16:78:c5:06:27:a8:5e:c5:7b:3b:
-         dc:81:81:0d:eb:31:13:d5:4b:23:2e:4e:2c:86:fd:ce:58:96:
-         b5:cc:33:80:5c:7b:8a:ce:74:97:aa:df:fc:7c:1e:42:7d:12:
-         58:bb:84:0f:2d:30:7c:a9:0c:1e:5c:c4:c6:ce:2b:c0:9d:bb:
-         7d:c2:51:04:5d:70:c3:63:43:59:57:40:e4:69:52:be:72:79:
-         b4:c5:74:51:30:af:9c:30:8e:33:89:be:69:69:4a:01:03:07:
-         d9:df:8b:0c:69:ff:cc:57:45:7c:c6:23:e5:4a:1f:19:94:19:
-         25:9d:eb:87:04:51:06:ba:9c:6b:72:da:2b:05:ef:72:21:e9:
-         95:5e:61:83:6a:7a:b6:30:f8:97:a1:99:dd:12:ea:47:50:ee:
-         26:02:3b:81:94:a8:19:29:a7:ad:b6:7c:28:10:53:09:53:a4:
-         61:74:57:ed
+         b0:14:85:d7:ca:ca:c2:88:ba:d8:44:6b:08:4b:fc:3a:7c:ec:
+         e1:5b:65:84:47:51:71:67:c2:b2:19:a0:5c:88:21:88:e4:e1:
+         82:bc:19:f4:1f:0d:32:0e:e0:98:29:e2:30:1e:25:24:6c:20:
+         ea:75:b6:45:c7:b1:b6:26:5c:fe:fd:da:22:0a:ac:3d:ad:7f:
+         0d:ae:5b:9d:a8:de:72:c6:8a:00:b5:60:85:aa:a2:98:4a:fa:
+         f5:0f:66:17:3b:5e:32:81:b3:ab:20:f1:98:40:62:d3:39:a1:
+         85:cd:a8:f9:57:2f:7e:80:a2:82:b4:5c:8e:c4:41:c2:cb:d7:
+         46:30:9b:ec:7e:09:b4:97:47:a5:5a:65:3d:1a:f7:44:8b:58:
+         ca:4a:55:15:e6:62:96:2f:11:3d:93:00:a0:44:25:2e:75:36:
+         8e:6f:57:3b:a4:7b:4d:a5:07:63:13:bb:6b:52:e9:43:e4:34:
+         31:3f:c1:71:ef:70:02:b5:40:e1:38:7b:80:ef:1b:86:8d:a8:
+         50:3f:87:76:16:38:fb:4d:4c:03:af:8f:45:a9:54:31:a1:a1:
+         1d:8c:f5:e9:ad:5d:de:5c:cf:1d:8c:20:65:b6:c6:b0:f7:71:
+         2f:2b:b5:3d:5c:b3:32:d4:40:91:6a:bf:67:33:3e:d8:90:af:
+         0d:41:43:7d
 -----BEGIN CERTIFICATE-----
 MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5hu0
-lkkdiJnDvjBE7SpugBhmWmYmRBSPGh1pgYtE++52ocZt4cGtUKqZotXOrPSGBJMC
-2TOqJO8271yTmmkARZXDgjdn3yU+6tzQ+wh/iaqt36a2yAmjdNwXErQDfX2GfVce
-/9IW95+FeW5cAePPZJ1V4XcsQ4kw0evQLmjm0cEqkljI4puVvvbQQi04/sgXo883
-dq+xDjKlbVjJ3kv0L/qM5JzGHIh8VQFLSIGwD08Z9/oS554nJ4VH5rgH2Vmjmqw/
-faYUFsiLjXDXe/pG1DL8UMeDguMYaaWkVt8ko8V91fMkpGciTMi2k8IF/AEbrp2k
-dvS71rapMiw6/pGTAgMBAAGjgekwgeYwHQYDVR0OBBYEFFW1Z+TNjVGtXqIlsJRA
-clL0FyROMB8GA1UdIwQYMBaAFHGuQhyMwfs198CfY5Wne0+djtJ6MD8GCCsGAQUF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 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgKkMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAJeiH5we6vUfD3Vo8Kbyv
-y/vNxlXmnHvNDo8aCuTLBttCRALlN24ao30jlsayZ8taHnGh408VgH+hDVlgsG/J
-qw/vINPCReCZqn7htzHcS7IWeMUGJ6hexXs73IGBDesxE9VLIy5OLIb9zliWtcwz
-gFx7is50l6rf/HweQn0SWLuEDy0wfKkMHlzExs4rwJ27fcJRBF1ww2NDWVdA5GlS
-vnJ5tMV0UTCvnDCOM4m+aWlKAQMH2d+LDGn/zFdFfMYj5UofGZQZJZ3rhwRRBrqc
-a3LaKwXvciHplV5hg2p6tjD4l6GZ3RLqR1DuJgI7gZSoGSmnrbZ8KBBTCVOkYXRX
-7Q==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAsBSF18rKwoi62ERrCEv8
+Onzs4VtlhEdRcWfCshmgXIghiOThgrwZ9B8NMg7gmCniMB4lJGwg6nW2RcextiZc
+/v3aIgqsPa1/Da5bnajecsaKALVghaqimEr69Q9mFzteMoGzqyDxmEBi0zmhhc2o
++VcvfoCigrRcjsRBwsvXRjCb7H4JtJdHpVplPRr3RItYykpVFeZili8RPZMAoEQl
+LnU2jm9XO6R7TaUHYxO7a1LpQ+Q0MT/Bce9wArVA4Th7gO8bho2oUD+HdhY4+01M
+A6+PRalUMaGhHYz16a1d3lzPHYwgZbbGsPdxLyu1PVyzMtRAkWq/ZzM+2JCvDUFD
+fQ==
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Intermediate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c4:8f:d1:37:69:c5:65:2a:c8:df:6e:82:4d:1a:
-                    ea:2c:59:9d:43:07:8b:d1:c3:01:3a:1d:7a:9f:81:
-                    ad:b8:fb:10:35:ae:84:80:07:69:5b:47:eb:af:1c:
-                    7b:43:21:f3:3c:13:8a:3b:62:c0:20:fa:96:06:9b:
-                    50:04:82:05:c2:7a:e3:53:d1:34:ab:2e:94:a9:6b:
-                    5f:6c:a9:66:0d:df:d0:73:79:f0:bd:ac:9c:99:68:
-                    e7:1c:25:6f:c6:68:36:07:99:57:23:17:a8:8e:4e:
-                    8c:b9:41:ef:25:7e:92:3d:08:8a:82:c2:de:fe:a3:
-                    cc:05:ed:b5:8b:b8:2f:09:eb:87:29:4d:55:f1:4e:
-                    ee:3a:91:54:dc:6f:6a:9e:d8:17:2a:3a:46:00:65:
-                    f4:4d:ae:26:35:72:97:06:41:ef:4e:bd:af:83:ec:
-                    9b:e2:96:24:61:2b:88:71:77:a7:e8:cf:2e:3e:79:
-                    5b:a2:33:11:94:aa:e7:65:6b:06:a2:4e:94:c8:d7:
-                    56:0f:cc:12:b9:9c:c1:b5:f6:bf:2a:a0:f8:b1:74:
-                    34:54:0e:cb:f0:87:87:f6:93:3f:f4:5f:10:81:90:
-                    78:51:ae:41:19:6e:c9:89:8c:9d:d9:85:64:18:de:
-                    e5:d6:8c:a8:5a:4b:60:b0:44:5f:7a:1e:f4:d1:5b:
-                    94:97
+                    00:f2:b6:c9:a7:02:57:38:c5:5f:78:1c:51:80:aa:
+                    71:61:a7:55:85:4f:03:7c:19:ce:d5:cb:24:ae:e1:
+                    8f:3e:b9:4a:ad:8e:bd:7f:84:fb:98:ae:08:7c:c6:
+                    6a:69:7c:24:fa:72:ae:90:ea:04:5a:01:3b:4e:f2:
+                    a2:c1:92:0e:ac:f2:0f:11:de:ea:53:94:e2:49:61:
+                    6c:b2:e5:71:0c:cb:47:10:b2:f4:d4:ae:b5:9e:03:
+                    d9:ec:3c:da:9e:f7:ef:4b:69:29:57:52:e7:3c:dc:
+                    8a:97:69:79:16:47:85:38:0e:5d:77:90:ff:59:c7:
+                    4d:a3:4c:6b:3f:31:a9:97:51:00:1e:94:91:86:3d:
+                    45:ba:84:f1:2d:1a:2e:49:0f:5e:fa:de:bf:db:d9:
+                    b7:0e:31:86:04:63:bf:0e:6c:de:8a:78:d9:a1:0c:
+                    9a:6d:3c:5e:00:c3:cf:f6:21:87:b9:d0:28:7c:c6:
+                    c1:3c:ab:60:2d:38:02:84:ad:3d:b6:e1:77:80:b6:
+                    93:d6:8a:30:ca:8f:7c:b8:71:04:af:4c:a8:f8:20:
+                    a2:1e:7b:00:38:e4:8d:fc:ab:67:28:6c:2a:69:b3:
+                    b0:d3:c9:48:2a:b8:ac:eb:13:94:1c:26:2c:ff:8c:
+                    9c:47:94:0d:b7:32:00:1f:70:6e:c9:90:f5:3e:2e:
+                    ed:49
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                71:AE:42:1C:8C:C1:FB:35:F7:C0:9F:63:95:A7:7B:4F:9D:8E:D2:7A
+                1D:C8:D6:28:C1:89:4C:16:F8:7E:CF:73:C3:0B:64:07:BF:A5:1E:78
             X509v3 Authority Key Identifier: 
-                keyid:F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
+                keyid:14:AB:FE:3A:B7:AA:66:F4:9F:E4:59:25:44:0F:D3:3A:D6:7B:59:5C
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         7b:29:bd:b8:c7:76:7f:09:90:d3:5d:e7:20:9e:f6:a0:bd:dc:
-         a1:cb:7c:c8:c8:17:d5:80:81:79:6a:88:e5:e8:c8:e3:56:37:
-         60:3f:9c:2a:14:86:fe:e0:79:2f:d6:ec:67:51:d4:d8:65:9d:
-         ce:3b:59:b6:42:06:7b:c8:2a:79:7f:40:2f:ed:fb:50:d3:78:
-         9e:99:fe:1d:fe:a1:4f:1d:58:c9:2d:b4:75:72:3f:6a:7a:db:
-         2e:7b:81:3b:00:3f:e4:95:47:63:42:90:fd:25:ba:db:53:0a:
-         01:37:28:78:7d:c6:cf:54:5e:2b:94:88:79:bb:4c:f7:06:e3:
-         7a:be:44:29:c3:2e:17:ea:61:c4:8f:16:f0:b6:e0:60:fe:19:
-         08:48:fd:a8:bf:95:ef:e5:32:1c:cf:e5:59:6b:04:1d:4c:6d:
-         ea:9b:4d:b4:f9:14:c2:00:a3:32:d6:1b:54:00:5a:17:29:8f:
-         85:0c:eb:ed:41:70:6f:52:f8:37:92:ed:2b:ae:8c:b8:e4:51:
-         aa:68:62:12:9b:97:62:1a:5b:27:46:b5:5f:8c:0e:c9:93:15:
-         d7:d8:85:99:67:56:ef:31:4a:55:1f:67:7c:09:fc:03:c9:a0:
-         67:b8:ed:32:d7:c0:0b:bd:b6:47:b9:50:78:f2:0a:ec:1d:bd:
-         d5:e9:06:b3
+         60:93:90:eb:55:18:92:93:6e:e2:6e:e8:6d:93:9b:47:c7:00:
+         9d:25:b9:54:e9:23:41:37:5c:89:0b:18:dd:f5:ce:17:a5:1d:
+         fb:11:7e:e1:cf:b4:e0:27:68:06:14:68:9c:40:68:44:72:00:
+         95:c4:db:10:4d:ca:ad:a2:4a:d2:b0:b8:86:79:33:75:7c:c7:
+         83:68:7b:6f:12:aa:06:3c:3c:82:c4:d6:cd:35:18:9d:24:78:
+         b9:b4:69:67:e8:62:27:ed:ab:2f:b2:2d:26:d2:ad:bf:d6:d6:
+         ef:71:eb:48:46:0d:fd:ee:9e:ad:5f:02:fa:4b:bf:f1:09:c2:
+         6b:8b:8e:4b:ca:a1:52:12:df:24:82:94:cf:da:5c:36:04:d8:
+         3e:f8:e0:c9:6d:f4:03:2f:f1:56:c4:d0:aa:0c:ea:21:32:29:
+         da:09:e0:ac:9d:14:f1:db:53:77:f1:cc:14:09:f7:31:00:7e:
+         86:55:a9:91:dc:c7:bf:ba:5f:2e:b8:22:a4:73:e7:89:1a:ef:
+         9d:58:ac:a4:8c:b1:77:38:2c:0b:b6:70:89:93:bf:5f:b0:17:
+         4f:d7:0f:c7:4f:e7:58:8b:1e:e9:92:40:05:20:fd:05:a8:71:
+         9a:f0:1d:1d:38:96:b3:01:ae:d0:8d:1a:12:9d:33:54:31:79:
+         a7:b1:85:0f
 -----BEGIN CERTIFICATE-----
 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI/RN2nF
-ZSrI326CTRrqLFmdQweL0cMBOh16n4GtuPsQNa6EgAdpW0frrxx7QyHzPBOKO2LA
-IPqWBptQBIIFwnrjU9E0qy6UqWtfbKlmDd/Qc3nwvaycmWjnHCVvxmg2B5lXIxeo
-jk6MuUHvJX6SPQiKgsLe/qPMBe21i7gvCeuHKU1V8U7uOpFU3G9qntgXKjpGAGX0
-Ta4mNXKXBkHvTr2vg+yb4pYkYSuIcXen6M8uPnlbojMRlKrnZWsGok6UyNdWD8wS
-uZzBtfa/KqD4sXQ0VA7L8IeH9pM/9F8QgZB4Ua5BGW7JiYyd2YVkGN7l1oyoWktg
-sERfeh700VuUlwIDAQABo4HLMIHIMB0GA1UdDgQWBBRxrkIcjMH7NffAn2OVp3tP
-nY7SejAfBgNVHSMEGDAWgBT3pEzKu4F7EGNrzLxz7cYcVlVAHDA3BggrBgEFBQcB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 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AHspvbjHdn8JkNNd5yCe9qC93KHLfMjIF9WAgXlqiOXoyONWN2A/nCoUhv7geS/W
-7GdR1Nhlnc47WbZCBnvIKnl/QC/t+1DTeJ6Z/h3+oU8dWMkttHVyP2p62y57gTsA
-P+SVR2NCkP0luttTCgE3KHh9xs9UXiuUiHm7TPcG43q+RCnDLhfqYcSPFvC24GD+
-GQhI/ai/le/lMhzP5VlrBB1MbeqbTbT5FMIAozLWG1QAWhcpj4UM6+1BcG9S+DeS
-7SuujLjkUapoYhKbl2IaWydGtV+MDsmTFdfYhZlnVu8xSlUfZ3wJ/APJoGe47TLX
-wAu9tke5UHjyCuwdvdXpBrM=
+AGCTkOtVGJKTbuJu6G2Tm0fHAJ0luVTpI0E3XIkLGN31zhelHfsRfuHPtOAnaAYU
+aJxAaERyAJXE2xBNyq2iStKwuIZ5M3V8x4Noe28SqgY8PILE1s01GJ0keLm0aWfo
+Yiftqy+yLSbSrb/W1u9x60hGDf3unq1fAvpLv/EJwmuLjkvKoVIS3ySClM/aXDYE
+2D744Mlt9AMv8VbE0KoM6iEyKdoJ4KydFPHbU3fxzBQJ9zEAfoZVqZHcx7+6Xy64
+IqRz54ka751YrKSMsXc4LAu2cImTv1+wF0/XD8dP51iLHumSQAUg/QWocZrwHR04
+lrMBrtCNGhKdM1QxeaexhQ8=
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:cd:6b:8f:1c:b6:4c:54:b3:0d:f7:e0:b8:5a:a6:
-                    d3:cc:0b:63:89:cb:3a:5a:87:3c:39:65:aa:63:32:
-                    79:fe:5c:67:f6:00:8c:32:b6:75:01:2f:7b:45:d3:
-                    a4:53:f4:7a:47:7e:2d:ca:5a:d2:22:eb:22:8c:02:
-                    e3:c1:91:ad:71:f8:67:43:62:8f:f1:60:17:77:ea:
-                    a3:d6:78:64:b2:58:c2:fd:20:e0:a2:06:d5:18:a8:
-                    36:9e:2e:b0:97:20:c7:72:a4:51:0d:d5:f0:f0:1f:
-                    b2:05:8e:82:98:9e:b5:67:dd:55:bb:c1:03:e1:9f:
-                    45:73:74:d7:11:aa:5b:de:c1:5d:5e:f2:29:85:29:
-                    03:e3:14:fa:e8:91:f5:29:a3:8c:c0:78:1c:4c:18:
-                    2b:49:2b:20:31:1e:bf:e1:55:7f:ed:76:25:4d:95:
-                    a5:40:4c:cc:f4:8e:de:85:d3:88:0a:86:27:95:f4:
-                    c8:4b:00:8d:16:b7:33:e9:76:12:aa:85:43:1e:89:
-                    bb:ae:16:f2:f1:26:c4:a7:b9:44:89:76:1b:1a:2c:
-                    34:50:4b:e0:68:bc:f1:fb:be:22:14:b0:2b:67:78:
-                    22:f0:71:07:43:21:a3:24:d7:4e:28:a0:7d:04:16:
-                    b1:a2:d8:35:2a:2b:2e:13:8e:6b:e9:c9:7f:78:7e:
-                    98:df
+                    00:c1:49:cb:88:de:c9:13:63:49:6b:e4:12:db:c5:
+                    2e:d2:00:04:fc:c0:22:3f:24:fe:ed:2d:ce:98:69:
+                    c6:2d:9c:10:87:7a:ab:2b:75:30:50:0f:b9:11:43:
+                    ad:35:a5:d1:f4:ce:fa:9b:cf:53:d7:51:91:b4:68:
+                    7c:6c:66:f4:0b:87:06:7f:48:c2:ed:20:ce:04:42:
+                    ad:d4:05:eb:48:c2:c0:38:4b:d4:a6:a4:7f:f9:6c:
+                    2a:cb:d3:9a:38:a2:c5:80:35:38:53:9a:2a:f6:4d:
+                    0c:04:34:57:ee:03:5b:92:7f:77:af:5a:0c:ae:cf:
+                    44:f7:ce:15:5b:53:b2:4c:dd:54:cc:52:97:44:19:
+                    e2:1a:d7:9d:7d:69:f9:86:6c:1a:da:d5:01:43:33:
+                    1d:8d:4c:9c:6b:60:9d:a8:05:91:3e:e8:09:d0:57:
+                    04:5a:b7:29:f5:bd:af:d8:20:de:ae:28:98:cb:df:
+                    0d:41:89:d1:bf:b3:20:03:3c:8a:66:23:16:bf:10:
+                    af:ba:cc:19:67:42:a7:45:0b:e6:68:13:55:d6:1b:
+                    c5:7b:56:b2:a4:0a:28:eb:f4:1b:9b:6c:67:82:58:
+                    bd:d7:a4:d5:1c:8e:e5:20:44:7d:14:00:52:5c:ea:
+                    b8:ab:a2:00:bc:78:31:e3:09:be:d5:da:c4:fd:9e:
+                    6f:6b
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
+                14:AB:FE:3A:B7:AA:66:F4:9F:E4:59:25:44:0F:D3:3A:D6:7B:59:5C
             X509v3 Authority Key Identifier: 
-                keyid:F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
+                keyid:14:AB:FE:3A:B7:AA:66:F4:9F:E4:59:25:44:0F:D3:3A:D6:7B:59:5C
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         50:5f:b0:32:ec:41:85:3d:75:ff:8d:05:17:be:20:98:81:da:
-         48:39:17:20:24:a7:31:cf:63:35:90:29:26:d0:60:29:e1:68:
-         fe:35:fd:6c:61:c0:3a:cd:08:92:9b:cc:ad:73:d4:dd:a5:51:
-         0e:a9:65:04:7d:16:77:8b:b8:b4:9d:fb:c4:7a:4a:ab:8a:9e:
-         d0:70:47:45:74:a4:57:ab:c2:cd:b3:c5:44:6b:7e:3b:78:8f:
-         5b:7f:f0:f7:c3:ef:24:a2:40:fe:c6:71:cd:a8:a6:ac:63:22:
-         57:39:f5:98:c3:91:79:bf:47:6a:0b:c6:b1:61:c6:35:1b:1c:
-         10:cc:e7:bc:20:83:f6:48:26:4a:80:47:e0:22:fa:04:1f:b0:
-         06:9c:54:fa:46:45:9b:d5:20:a2:f0:ee:be:b5:a2:83:92:86:
-         5d:f5:40:f5:32:d0:85:35:eb:af:5d:9b:04:5d:21:b3:35:90:
-         e8:5f:0a:6c:90:85:eb:86:31:e4:89:81:c6:aa:73:4d:1e:3e:
-         af:40:07:f1:38:ae:30:ab:2d:aa:6d:2f:b2:1d:ff:d8:18:2e:
-         f3:d0:74:8e:ff:6d:24:97:30:cb:b6:e5:6f:cb:6b:c2:27:5e:
-         a5:f1:63:c0:d9:0d:c5:08:7f:86:8c:47:c4:9b:cb:e2:d9:da:
-         17:51:5b:12
+         85:11:4e:e7:d7:8d:db:f0:78:1e:04:2e:43:17:0a:f6:24:42:
+         75:ec:e9:59:37:46:3b:ee:f6:1b:8b:d1:62:49:cc:fe:dd:74:
+         ac:78:08:0f:75:12:d3:5f:5b:77:7e:f7:49:09:db:18:d4:c4:
+         4b:9f:d3:ef:6e:7f:ab:a7:02:c9:c4:fa:98:40:cf:37:96:dd:
+         0f:53:5a:23:60:e5:29:3c:0a:74:9d:3d:8b:7b:73:43:0f:c1:
+         fe:25:73:03:a1:15:83:9f:48:fa:7b:78:f9:a2:0d:52:69:17:
+         eb:bb:41:66:64:16:c3:a0:cf:00:ae:4f:45:e0:e4:da:5c:2e:
+         81:8d:41:11:86:f0:57:c3:27:3f:62:af:39:94:85:17:58:66:
+         39:fa:cf:5f:78:af:d2:00:b9:1e:62:42:6f:b6:1f:40:85:c4:
+         1e:30:01:0e:8a:99:49:53:bb:35:b0:83:dc:a9:c7:14:ff:43:
+         f5:2a:da:06:06:70:81:db:b9:39:57:1d:17:37:57:ea:e5:1a:
+         a8:7c:92:73:42:44:02:fb:73:1b:34:ac:ec:65:9e:22:0e:55:
+         1d:61:2c:4c:50:e3:67:76:2d:90:ab:3e:d9:a9:64:dd:f7:53:
+         09:36:a9:a4:56:89:d0:c6:c1:0f:03:07:c7:7f:0e:71:95:02:
+         69:a7:01:73
 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM1rjxy2TFSzDffguFqm
-08wLY4nLOlqHPDllqmMyef5cZ/YAjDK2dQEve0XTpFP0ekd+Lcpa0iLrIowC48GR
-rXH4Z0Nij/FgF3fqo9Z4ZLJYwv0g4KIG1RioNp4usJcgx3KkUQ3V8PAfsgWOgpie
-tWfdVbvBA+GfRXN01xGqW97BXV7yKYUpA+MU+uiR9SmjjMB4HEwYK0krIDEev+FV
-f+12JU2VpUBMzPSO3oXTiAqGJ5X0yEsAjRa3M+l2EqqFQx6Ju64W8vEmxKe5RIl2
-GxosNFBL4Gi88fu+IhSwK2d4IvBxB0MhoyTXTiigfQQWsaLYNSorLhOOa+nJf3h+
-mN8CAwEAAaOByzCByDAdBgNVHQ4EFgQU96RMyruBexBja8y8c+3GHFZVQBwwHwYD
-VR0jBBgwFoAU96RMyruBexBja8y8c+3GHFZVQBwwNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFJy4jeyRNjSWvkEtvF
+LtIABPzAIj8k/u0tzphpxi2cEId6qyt1MFAPuRFDrTWl0fTO+pvPU9dRkbRofGxm
+9AuHBn9Iwu0gzgRCrdQF60jCwDhL1Kakf/lsKsvTmjiixYA1OFOaKvZNDAQ0V+4D
+W5J/d69aDK7PRPfOFVtTskzdVMxSl0QZ4hrXnX1p+YZsGtrVAUMzHY1MnGtgnagF
+kT7oCdBXBFq3KfW9r9gg3q4omMvfDUGJ0b+zIAM8imYjFr8Qr7rMGWdCp0UL5mgT
+VdYbxXtWsqQKKOv0G5tsZ4JYvdek1RyO5SBEfRQAUlzquKuiALx4MeMJvtXaxP2e
+b2sCAwEAAaOByzCByDAdBgNVHQ4EFgQUFKv+OreqZvSf5FklRA/TOtZ7WVwwHwYD
+VR0jBBgwFoAUFKv+OreqZvSf5FklRA/TOtZ7WVwwNwYIKwYBBQUHAQEEKzApMCcG
 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBQX7Ay7EGF
-PXX/jQUXviCYgdpIORcgJKcxz2M1kCkm0GAp4Wj+Nf1sYcA6zQiSm8ytc9TdpVEO
-qWUEfRZ3i7i0nfvEekqrip7QcEdFdKRXq8LNs8VEa347eI9bf/D3w+8kokD+xnHN
-qKasYyJXOfWYw5F5v0dqC8axYcY1GxwQzOe8IIP2SCZKgEfgIvoEH7AGnFT6RkWb
-1SCi8O6+taKDkoZd9UD1MtCFNeuvXZsEXSGzNZDoXwpskIXrhjHkiYHGqnNNHj6v
-QAfxOK4wqy2qbS+yHf/YGC7z0HSO/20klzDLtuVvy2vCJ16l8WPA2Q3FCH+GjEfE
-m8vi2doXUVsS
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCFEU7n143b
+8HgeBC5DFwr2JEJ17OlZN0Y77vYbi9FiScz+3XSseAgPdRLTX1t3fvdJCdsY1MRL
+n9Pvbn+rpwLJxPqYQM83lt0PU1ojYOUpPAp0nT2Le3NDD8H+JXMDoRWDn0j6e3j5
+og1SaRfru0FmZBbDoM8Ark9F4OTaXC6BjUERhvBXwyc/Yq85lIUXWGY5+s9feK/S
+ALkeYkJvth9AhcQeMAEOiplJU7s1sIPcqccU/0P1KtoGBnCB27k5Vx0XN1fq5Rqo
+fJJzQkQC+3MbNKzsZZ4iDlUdYSxMUONndi2Qqz7ZqWTd91MJNqmkVonQxsEPAwfH
+fw5xlQJppwFz
 -----END TRUST_ANCHOR_UNCONSTRAINED-----
 
 150302120000Z
 -----BEGIN TIME-----
 MTUwMzAyMTIwMDAwWg==
 -----END TIME-----
 
 FAIL
 -----BEGIN VERIFY_RESULT-----
 RkFJTA==
 -----END VERIFY_RESULT-----
 
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----
+
 ----- Certificate i=0 (CN=Target) -----
 ERROR: Target certificate looks like a CA but does not set all CA properties
 
 
 -----BEGIN ERRORS-----
 LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBUYXJnZXQgY2VydGlmaWNhdGUgbG9va3MgbGlrZSBhIENBIGJ1dCBkb2VzIG5vdCBzZXQgYWxsIENBIHByb3BlcnRpZXMKCg==
 -----END ERRORS-----