Refactor VerifyCertificateChain test data to include a key purpose

net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem

 [Created by: generate-target-has-pathlen-but-not-ca.py]
 
 Certificate chain with 1 intermediate, a trusted root, and a target
 certificate that is not a CA, and yet has a pathlen set. Verification is
 expected to fail, since pathlen should only be set for CAs.
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Target
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:ca:73:f9:c5:cb:c6:2c:26:07:85:8f:4b:a4:ac:
-                    52:18:84:42:ca:cb:34:59:92:5a:d8:f7:1f:df:51:
-                    ed:6a:d5:e2:e1:dc:06:fb:72:0d:f3:e7:9f:38:0d:
-                    46:f4:19:77:31:33:4c:5b:ac:dd:6c:8c:06:68:4c:
-                    48:84:e2:c7:17:28:a9:0b:4e:07:07:b6:7b:cc:a9:
-                    ef:6c:ae:22:6e:03:d6:d4:5b:f1:d9:aa:9e:61:54:
-                    c7:14:79:cb:d6:c2:8f:da:87:e8:ae:d2:b3:66:4f:
-                    d3:4c:56:b8:e0:80:f8:45:b7:11:35:53:ec:d4:49:
-                    f8:05:70:f3:5b:56:b2:05:6d:3e:46:f8:be:67:71:
-                    48:a6:65:dd:55:62:a3:23:b0:94:e1:f2:3b:17:54:
-                    40:cc:37:90:d9:78:5a:d8:29:99:3f:02:16:a8:5b:
-                    5e:64:f4:f2:84:ad:25:c6:cf:2c:5b:e7:6c:bf:88:
-                    63:0c:8a:9b:fb:d9:b1:30:5a:21:74:1f:e4:5a:54:
-                    23:3a:a1:02:34:97:2c:a2:af:08:05:f0:db:52:58:
-                    7f:86:80:12:a3:f9:78:c0:ad:d6:8b:12:53:72:55:
-                    24:ca:3e:70:f2:7f:78:8f:b7:a1:32:f1:2c:7f:23:
-                    db:7b:ce:79:cf:cc:6d:d8:f7:14:54:5c:e0:db:7d:
-                    60:b3
+                    00:c8:bd:cf:49:54:fa:f7:4c:6b:1d:c4:0e:2a:3d:
+                    4f:ed:1a:80:d5:f9:bc:ea:64:89:fa:c7:c7:39:32:
+                    dd:7a:8f:4b:b8:11:85:9b:ef:bb:8f:71:93:69:59:
+                    e3:b5:5c:69:2f:d9:fa:04:e1:df:31:9e:f8:cc:17:
+                    4e:8b:c4:3d:f5:2f:02:23:c7:4c:e6:31:d5:bd:ef:
+                    06:af:f3:cd:81:f4:5d:f3:b9:0a:bf:7e:71:c0:5a:
+                    ea:9b:46:cf:ff:04:ed:11:a3:6f:6c:c6:84:d7:48:
+                    31:3a:ce:d6:ff:c8:95:7c:db:95:bd:cc:3f:3f:0e:
+                    e9:3b:1c:46:91:c2:3a:cc:5b:31:9b:66:16:4b:ac:
+                    a0:be:8c:98:9b:26:27:4a:50:08:20:d8:01:6e:cc:
+                    83:b0:1f:69:0a:d6:22:80:43:63:25:6b:fb:e3:76:
+                    b6:fd:e0:fc:13:38:6d:5b:3e:93:04:0d:0d:93:20:
+                    a8:d2:01:3c:e6:21:f7:0d:ac:9d:8e:aa:b7:69:fe:
+                    e0:f8:15:98:95:a1:2c:58:35:de:4d:d5:eb:7f:fe:
+                    72:d8:14:18:dc:46:34:5c:4d:42:33:71:ea:39:71:
+                    8b:8b:e4:7f:0f:4d:22:d3:cf:30:ce:d0:cd:3b:fb:
+                    a2:dd:39:0e:bb:71:19:d5:93:2e:9c:2b:d1:d0:2b:
+                    2f:05
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                99:D8:C1:91:A6:13:EB:0F:B4:6F:F2:B0:C4:0C:D9:0A:25:8E:53:10
+                01:F7:E1:07:3C:38:BF:84:61:21:DB:33:07:81:43:0E:50:9C:D5:5C
             X509v3 Authority Key Identifier: 
-                keyid:5B:9F:DF:D5:C6:FF:4F:39:52:EA:EF:97:5B:C1:ED:E1:CC:44:4E:B6
+                keyid:33:20:9D:8B:1C:46:DB:58:8D:CB:59:57:17:C8:F8:9F:35:AB:BE:99
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
             X509v3 Basic Constraints: critical
                 CA:FALSE, pathlen:1
     Signature Algorithm: sha256WithRSAEncryption
-         70:43:96:4c:98:6f:28:18:8a:59:39:82:cc:24:47:f8:58:f8:
-         f8:43:04:09:1e:a6:51:59:bc:60:36:ff:a1:41:51:e1:4c:40:
-         6b:5e:8b:73:3c:c4:37:65:f4:b0:57:01:8f:c6:ba:0c:5b:97:
-         a1:6b:3a:ea:53:79:8f:9a:99:f8:ca:01:a5:15:ac:60:4c:a7:
-         a7:68:07:72:3c:ed:06:70:d8:a4:d0:c0:5f:88:f2:6a:c0:a1:
-         2b:e7:58:68:23:d3:7e:f0:98:99:7d:3d:91:25:e3:84:4f:ef:
-         55:a4:ee:f7:1f:dc:f2:af:a8:74:96:6c:26:c4:d8:b6:84:dc:
-         b7:e7:7d:9d:2b:7b:3b:e6:e4:ad:76:e0:aa:ea:a4:26:97:4b:
-         20:cd:b1:bd:a8:6e:b3:08:47:31:a2:01:7b:b5:6c:72:d0:f0:
-         12:ac:bd:4f:be:de:23:cb:34:14:d2:11:42:3f:d5:70:76:4c:
-         99:db:ce:bc:0e:d5:2e:4b:6f:c3:1b:5d:c6:58:89:74:5f:1d:
-         62:cf:df:1e:4c:13:08:88:cb:66:6f:00:c2:c5:6f:bb:b4:9e:
-         1f:8a:7d:9d:0b:a6:11:6f:28:bb:5e:46:ab:71:d4:eb:00:8c:
-         71:6b:32:85:3d:17:ca:d0:15:90:66:7a:b2:96:0c:c1:9d:2e:
-         53:36:97:5b
+         3e:03:4f:21:11:cc:df:a5:0d:c1:00:85:8f:5b:47:06:b0:e6:
+         58:c3:31:64:93:70:86:5a:a3:d2:f7:24:e6:75:8e:15:cd:f6:
+         7b:46:b1:44:70:06:7c:4d:ef:e6:38:cc:28:d2:c5:9a:36:d2:
+         77:ea:fc:b5:c0:7b:cd:37:ca:99:07:dc:fb:45:f5:42:2f:31:
+         64:99:da:c2:76:d8:43:c2:f5:8d:0b:64:53:bb:bb:4f:73:3b:
+         b8:ac:e3:1e:21:75:99:dc:7c:69:8e:46:a7:38:54:7b:32:98:
+         bd:6a:87:4e:47:47:04:90:ff:02:63:81:1c:14:3b:73:b4:89:
+         ee:20:3e:72:79:68:33:a1:a2:34:be:5f:a4:74:4c:59:ea:e3:
+         2d:b8:f4:f5:f3:57:51:30:86:b5:2e:d6:53:01:04:78:37:1c:
+         23:45:59:95:f5:0f:55:b4:38:6f:1c:82:a7:20:03:c4:b0:5c:
+         bd:df:57:bb:3e:a7:9b:c4:92:b4:58:5a:e7:94:98:69:b9:00:
+         82:93:f2:89:a0:c1:b6:79:6b:0b:f5:81:b7:14:8d:70:1b:ef:
+         a2:a9:6f:ea:ed:a3:76:12:2b:09:7a:c9:0a:b4:8a:42:03:12:
+         df:a7:38:ee:38:10:49:04:d5:e6:6a:59:bf:60:a1:d3:4a:f7:
+         7f:9a:4c:f9
 -----BEGIN CERTIFICATE-----
 MIIDnjCCAoagAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKc/nF
-y8YsJgeFj0ukrFIYhELKyzRZklrY9x/fUe1q1eLh3Ab7cg3z5584DUb0GXcxM0xb
-rN1sjAZoTEiE4scXKKkLTgcHtnvMqe9sriJuA9bUW/HZqp5hVMcUecvWwo/ah+iu
-0rNmT9NMVrjggPhFtxE1U+zUSfgFcPNbVrIFbT5G+L5ncUimZd1VYqMjsJTh8jsX
-VEDMN5DZeFrYKZk/AhaoW15k9PKErSXGzyxb52y/iGMMipv72bEwWiF0H+RaVCM6
-oQI0lyyirwgF8NtSWH+GgBKj+XjArdaLElNyVSTKPnDyf3iPt6Ey8Sx/I9t7znnP
-zG3Y9xRUXODbfWCzAgMBAAGjgfowgfcwHQYDVR0OBBYEFJnYwZGmE+sPtG/ysMQM
-2QoljlMQMB8GA1UdIwQYMBaAFFuf39XG/085Uurvl1vB7eHMRE62MD8GCCsGAQUF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 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
 BwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAgEBMA0GCSqGSIb3DQEBCwUAA4IB
-AQBwQ5ZMmG8oGIpZOYLMJEf4WPj4QwQJHqZRWbxgNv+hQVHhTEBrXotzPMQ3ZfSw
-VwGPxroMW5ehazrqU3mPmpn4ygGlFaxgTKenaAdyPO0GcNik0MBfiPJqwKEr51ho
-I9N+8JiZfT2RJeOET+9VpO73H9zyr6h0lmwmxNi2hNy3532dK3s75uStduCq6qQm
-l0sgzbG9qG6zCEcxogF7tWxy0PASrL1Pvt4jyzQU0hFCP9VwdkyZ2868DtUuS2/D
-G13GWIl0Xx1iz98eTBMIiMtmbwDCxW+7tJ4fin2dC6YRbyi7XkarcdTrAIxxazKF
-PRfK0BWQZnqylgzBnS5TNpdb
+AQA+A08hEczfpQ3BAIWPW0cGsOZYwzFkk3CGWqPS9yTmdY4VzfZ7RrFEcAZ8Te/m
+OMwo0sWaNtJ36vy1wHvNN8qZB9z7RfVCLzFkmdrCdthDwvWNC2RTu7tPczu4rOMe
+IXWZ3HxpjkanOFR7Mpi9aodOR0cEkP8CY4EcFDtztInuID5yeWgzoaI0vl+kdExZ
+6uMtuPT181dRMIa1LtZTAQR4NxwjRVmV9Q9VtDhvHIKnIAPEsFy931e7PqebxJK0
+WFrnlJhpuQCCk/KJoMG2eWsL9YG3FI1wG++iqW/q7aN2EisJeskKtIpCAxLfpzju
+OBBJBNXmalm/YKHTSvd/mkz5
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Intermediate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c8:43:a7:fe:04:ff:78:d4:be:60:bd:16:7d:46:
-                    a2:cf:a8:74:42:6b:2b:49:13:61:2e:78:e7:7c:49:
-                    52:0b:df:bf:b0:e1:5e:dd:f5:39:99:11:ff:d2:14:
-                    8f:db:de:10:55:90:29:05:b3:49:db:80:87:d1:82:
-                    6b:15:97:4b:da:5e:d7:da:11:0c:84:1e:db:d9:57:
-                    4d:52:cf:31:a0:1f:bd:4f:79:22:7a:ee:5a:ae:9d:
-                    22:df:71:d3:20:12:e5:c8:7e:1e:76:d3:6f:07:6e:
-                    5c:c3:89:11:a2:35:50:05:4d:6f:30:d8:3c:ef:38:
-                    80:51:e3:ee:7d:66:81:7f:7c:c4:e7:d0:d4:53:1d:
-                    00:3d:03:cb:87:f4:3d:b9:13:cd:16:ef:b2:51:3f:
-                    1c:96:0a:71:90:ca:25:c4:10:71:aa:ba:27:c8:67:
-                    94:af:63:7c:29:2a:2e:a8:4e:03:7e:6c:5c:2f:96:
-                    8d:9d:ca:c5:6f:f1:e7:8d:92:a9:ed:aa:87:3a:74:
-                    12:c7:ea:3f:ad:a2:6a:76:d8:f6:c9:96:27:6e:8b:
-                    a3:b8:cc:d4:2b:9b:61:be:2b:11:c5:bb:da:ef:14:
-                    23:5d:5d:96:69:c0:a7:7a:16:db:3a:4e:e4:22:84:
-                    55:02:26:7b:a5:8e:84:12:e4:36:fc:c5:07:d9:ee:
-                    c5:19
+                    00:b6:71:f4:27:39:eb:53:1f:5a:56:ca:0b:d1:43:
+                    c5:55:d1:c2:7a:28:b8:34:d9:7e:4e:16:01:77:90:
+                    ba:ae:85:ca:22:43:c4:d9:ca:5b:86:87:c0:f5:b6:
+                    c6:41:75:ae:97:3f:f6:4d:24:7d:0c:b4:ac:e7:a0:
+                    89:61:b9:08:c8:81:3d:b3:d1:3a:8c:44:35:fb:b1:
+                    c3:73:89:39:cc:7b:b7:a7:c2:31:cb:12:a0:52:59:
+                    91:0e:c5:83:ad:5a:0c:fa:1c:64:39:e0:ce:b4:cf:
+                    31:db:e0:36:bd:11:88:ae:56:36:e0:fa:70:ba:ad:
+                    53:34:2c:4d:7d:f0:74:f9:7d:82:2c:46:4a:39:1b:
+                    d3:8f:8b:85:b9:3d:53:36:8f:d6:5a:2f:57:bd:e5:
+                    10:76:ec:90:26:79:cd:f2:9f:cb:9d:e5:d7:10:46:
+                    63:f2:b7:58:7f:10:3b:ed:02:9c:2a:dd:38:87:7a:
+                    32:de:d5:9b:96:e2:54:5a:9c:ac:97:07:96:9b:eb:
+                    21:40:96:b4:bf:bb:91:77:db:8d:40:66:2d:81:d1:
+                    90:30:42:86:55:e9:f1:51:bc:ce:9e:27:71:9a:07:
+                    e6:ce:b0:43:82:b9:4e:81:2b:40:79:35:a8:99:80:
+                    27:af:30:e7:85:fb:ba:6c:3a:f5:94:c0:09:85:08:
+                    26:cf
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                5B:9F:DF:D5:C6:FF:4F:39:52:EA:EF:97:5B:C1:ED:E1:CC:44:4E:B6
+                33:20:9D:8B:1C:46:DB:58:8D:CB:59:57:17:C8:F8:9F:35:AB:BE:99
             X509v3 Authority Key Identifier: 
-                keyid:8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
+                keyid:B6:A7:01:A0:0E:41:B3:BB:1A:67:83:71:F1:6A:17:D0:64:9C:68:BF
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         14:37:73:58:3c:37:40:b3:ff:a3:e4:f3:2d:f1:26:6b:c9:82:
-         17:c5:97:4d:bd:84:6a:19:25:08:20:a9:7d:38:fb:3d:a4:7f:
-         06:80:7e:fb:6e:7e:bf:26:90:4b:96:ab:a7:f9:49:a5:d6:77:
-         67:b5:ab:bb:ad:ea:84:5a:43:13:f9:b3:1a:80:b1:59:cc:d4:
-         1d:33:e8:0d:b0:af:9a:80:44:0e:a6:01:f3:a4:e2:87:2b:db:
-         47:be:0f:28:08:d9:ab:7c:d9:4c:86:d0:ba:bc:1b:dc:99:9b:
-         33:ea:a7:3e:ef:52:b8:70:a8:27:e7:83:59:cd:57:38:7f:a1:
-         36:53:4f:a0:1b:69:7d:e4:fa:9f:2b:52:50:09:23:62:c6:c0:
-         01:a6:85:76:45:80:6a:b6:54:bd:60:5d:5a:3a:04:92:ab:e3:
-         bd:0c:94:7f:5f:79:9c:3f:6e:12:c3:96:b0:78:44:9b:03:1e:
-         79:11:fb:8d:a5:1d:55:c9:b3:e5:a0:26:18:10:68:92:b8:54:
-         68:d0:2d:e1:99:0c:08:9c:cc:40:50:34:69:9f:13:e6:d7:87:
-         85:e7:57:63:3e:17:0f:ce:02:7b:78:e5:18:ef:1a:55:b1:6a:
-         55:f8:44:3e:92:1d:08:a1:7d:bb:fc:00:be:e3:1b:83:aa:b8:
-         75:f0:05:45
+         cf:16:2a:e7:82:dd:17:0f:54:74:e5:31:4e:d7:d1:52:1f:b2:
+         97:17:4f:f7:0e:68:07:a5:74:93:dc:45:c8:81:60:e9:6a:d8:
+         16:dd:99:65:66:09:48:1c:93:45:8c:ed:48:a3:16:63:50:0c:
+         6c:0f:dc:ad:7a:50:20:05:64:68:fa:70:37:af:7e:0b:88:e5:
+         61:8f:8d:93:88:9e:45:09:95:75:21:42:af:6a:79:40:56:c9:
+         f8:9b:5a:b5:c3:77:44:d5:1b:28:cb:3f:2f:59:84:21:ae:c2:
+         34:25:48:6d:ed:3e:7d:40:9c:eb:bd:3f:3e:5e:34:de:f7:eb:
+         b6:66:26:4e:05:49:00:13:a1:93:ad:fa:5f:8b:77:86:d7:1b:
+         27:da:49:83:b4:3e:df:dc:d0:0d:bb:75:a3:ff:f5:2a:f4:62:
+         f8:da:8a:ab:f0:38:ce:a4:34:f0:9a:9e:2e:de:aa:9a:db:cf:
+         47:ec:ec:12:00:3d:57:bf:d3:17:c6:f9:b4:52:4e:22:45:3f:
+         64:15:c8:f3:ad:74:58:a1:7f:b4:e0:0e:d7:6a:7f:c4:e8:ff:
+         51:5b:b4:e8:81:e7:21:63:cd:57:f1:0d:39:58:ea:17:9e:3e:
+         2e:91:94:c8:df:44:57:77:7e:a5:83:e2:d4:2e:80:42:89:c8:
+         33:37:04:f9
 -----BEGIN CERTIFICATE-----
 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEOn/gT/
-eNS+YL0WfUaiz6h0QmsrSRNhLnjnfElSC9+/sOFe3fU5mRH/0hSP294QVZApBbNJ
-24CH0YJrFZdL2l7X2hEMhB7b2VdNUs8xoB+9T3kieu5arp0i33HTIBLlyH4edtNv
-B25cw4kRojVQBU1vMNg87ziAUePufWaBf3zE59DUUx0APQPLh/Q9uRPNFu+yUT8c
-lgpxkMolxBBxqronyGeUr2N8KSouqE4DfmxcL5aNncrFb/HnjZKp7aqHOnQSx+o/
-raJqdtj2yZYnboujuMzUK5thvisRxbva7xQjXV2WacCnehbbOk7kIoRVAiZ7pY6E
-EuQ2/MUH2e7FGQIDAQABo4HLMIHIMB0GA1UdDgQWBBRbn9/Vxv9POVLq75dbwe3h
-zEROtjAfBgNVHSMEGDAWgBSKhc5+3K8VtwHCXIE/PRRJ0jgIqzA3BggrBgEFBQcB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 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-ABQ3c1g8N0Cz/6Pk8y3xJmvJghfFl029hGoZJQggqX04+z2kfwaAfvtufr8mkEuW
-q6f5SaXWd2e1q7ut6oRaQxP5sxqAsVnM1B0z6A2wr5qARA6mAfOk4ocr20e+DygI
-2at82UyG0Lq8G9yZmzPqpz7vUrhwqCfng1nNVzh/oTZTT6AbaX3k+p8rUlAJI2LG
-wAGmhXZFgGq2VL1gXVo6BJKr470MlH9feZw/bhLDlrB4RJsDHnkR+42lHVXJs+Wg
-JhgQaJK4VGjQLeGZDAiczEBQNGmfE+bXh4XnV2M+Fw/OAnt45RjvGlWxalX4RD6S
-HQihfbv8AL7jG4OquHXwBUU=
+AM8WKueC3RcPVHTlMU7X0VIfspcXT/cOaAeldJPcRciBYOlq2BbdmWVmCUgck0WM
+7UijFmNQDGwP3K16UCAFZGj6cDevfguI5WGPjZOInkUJlXUhQq9qeUBWyfibWrXD
+d0TVGyjLPy9ZhCGuwjQlSG3tPn1AnOu9Pz5eNN7367ZmJk4FSQAToZOt+l+Ld4bX
+GyfaSYO0Pt/c0A27daP/9Sr0YvjaiqvwOM6kNPCani7eqprbz0fs7BIAPVe/0xfG
++bRSTiJFP2QVyPOtdFihf7TgDtdqf8To/1FbtOiB5yFjzVfxDTlY6heePi6RlMjf
+RFd3fqWD4tQugEKJyDM3BPk=
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:d3:fa:b1:7f:2b:e4:ff:ad:10:e9:54:54:ef:6a:
-                    81:02:0b:b6:83:70:89:ae:d9:4d:54:ea:95:99:88:
-                    3d:59:7d:97:1e:fd:b9:9b:53:8b:14:1e:a4:68:07:
-                    ed:68:65:68:7d:4f:ba:28:38:ff:87:33:98:2c:32:
-                    d0:e5:00:78:0f:6a:20:32:7d:9e:7d:9b:af:e9:39:
-                    fe:5c:bc:04:1c:06:1a:11:1a:46:24:34:f7:e3:af:
-                    56:6d:38:8f:46:39:a6:01:fa:56:f9:d7:9e:73:35:
-                    1a:23:94:12:0f:0d:d3:ec:fe:09:57:f6:a0:9c:18:
-                    a7:ba:4b:c9:37:a3:0c:60:77:4b:77:5f:c8:9c:7e:
-                    b1:5c:b3:43:72:da:c9:6c:c8:71:24:ab:2f:c4:83:
-                    bd:b0:4f:60:af:46:0d:7b:34:8f:e9:70:a2:85:ed:
-                    6e:05:df:e3:c1:40:3d:17:b1:f0:a3:7d:e2:17:6f:
-                    3d:fe:11:81:90:1f:c2:f8:bc:2c:d5:9c:fc:04:47:
-                    24:c4:5e:cf:20:0f:31:e8:7d:ea:b5:69:b8:0f:35:
-                    19:5d:13:08:db:d6:a2:dc:7a:33:92:b3:9c:fc:35:
-                    de:cf:55:96:f7:52:6e:a9:e2:93:b0:52:07:8d:0f:
-                    95:9c:0e:0d:1b:48:0e:b8:41:4f:eb:68:da:e5:6d:
-                    a1:63
+                    00:f9:ba:6f:a7:d8:e8:a7:e1:04:56:72:f9:21:45:
+                    73:22:1e:f9:fc:2e:33:d8:ef:57:7b:23:fe:3f:61:
+                    c7:c9:b8:16:67:dd:1c:78:f1:d0:64:df:a7:88:af:
+                    f6:ab:f7:a7:38:84:3f:20:e5:37:42:6f:f5:37:c4:
+                    63:cf:68:4a:35:e0:05:da:8c:95:83:a9:98:f9:e5:
+                    7f:03:45:5c:e5:39:70:61:d6:ee:09:da:30:24:6d:
+                    7f:3c:c9:ff:d1:65:c9:20:06:77:7d:91:e0:4a:00:
+                    8d:c4:2d:23:f6:03:c5:8c:c7:b6:af:3f:8b:fd:3f:
+                    12:e3:36:1b:81:eb:61:8f:ab:20:19:c1:52:f4:8e:
+                    83:97:06:29:35:be:ab:cc:a6:bd:10:fb:35:aa:70:
+                    09:bb:a9:4b:91:ab:5b:e7:c2:84:73:05:6f:c6:c8:
+                    e6:8b:aa:95:0a:ed:3c:42:84:24:11:23:c0:85:1b:
+                    be:2c:37:61:01:62:65:d8:3f:6f:06:b2:06:e7:c0:
+                    57:10:46:42:2e:4b:70:a1:43:95:85:54:48:40:0d:
+                    08:0b:0d:b9:3d:db:0b:45:af:88:60:2c:e5:a7:e5:
+                    7d:8a:b3:a8:3a:8e:c0:22:05:ae:fb:99:e5:47:72:
+                    10:ca:7e:5d:de:75:b1:fd:25:b0:2d:c4:42:c5:b7:
+                    2c:c7
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
+                B6:A7:01:A0:0E:41:B3:BB:1A:67:83:71:F1:6A:17:D0:64:9C:68:BF
             X509v3 Authority Key Identifier: 
-                keyid:8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
+                keyid:B6:A7:01:A0:0E:41:B3:BB:1A:67:83:71:F1:6A:17:D0:64:9C:68:BF
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         3b:f2:cd:03:ef:d9:61:67:ea:7b:dd:e9:88:13:07:8d:94:51:
-         62:bb:56:d6:c1:be:8a:d0:a0:81:fe:1d:90:6d:85:94:2c:ac:
-         33:fb:5d:f6:c9:74:72:7b:f7:5a:b8:e4:b6:dd:30:bb:93:3b:
-         74:22:e9:fe:e9:5c:b2:8b:d4:a1:21:0c:e6:3c:ee:86:ae:9e:
-         8a:fd:88:bb:a7:fd:20:bb:9c:ff:d4:ca:6f:66:60:19:14:d1:
-         d1:f2:d6:f3:b2:58:c8:4d:15:30:e1:e0:fc:40:ad:55:25:ba:
-         8d:25:68:26:c4:64:68:7e:94:e6:f4:96:5a:c4:e6:ba:85:5b:
-         b2:32:d1:82:32:8b:f4:3f:6f:4e:d5:de:2e:d7:09:3c:1f:7e:
-         93:3a:22:d8:ef:40:41:47:28:80:03:77:0d:f9:51:28:28:b6:
-         53:24:66:f7:3b:56:6c:53:58:55:b2:49:7c:c4:1a:3d:a1:37:
-         29:19:8a:9a:99:84:7f:63:ac:21:85:f5:02:5a:5a:1c:7c:0a:
-         8b:bc:83:ff:80:57:2e:ce:62:c5:79:58:24:12:e8:af:a4:6c:
-         ce:a8:92:2b:25:c4:e3:b6:27:f7:d5:dd:e6:fa:cc:91:6c:59:
-         5e:f5:a4:e2:4f:0b:18:fa:4e:9c:88:66:20:25:af:87:14:01:
-         27:08:89:6a
+         47:75:3e:74:30:6f:a8:e6:a2:f7:15:42:c3:8a:00:e4:68:a8:
+         86:bf:7d:22:18:e7:1c:cb:a6:b1:94:46:50:85:c8:e5:aa:99:
+         7e:03:96:56:4a:44:99:18:e1:c4:a9:3a:b0:1e:7b:46:e1:8d:
+         91:e4:f7:b2:2c:a3:dd:26:00:eb:f5:cf:cd:b6:65:54:c1:fd:
+         22:b0:66:80:d0:7d:bc:bd:b7:7a:c2:5b:df:ce:00:a3:94:b2:
+         c0:ed:73:28:5e:41:c7:1c:25:2b:a0:98:ec:62:fc:46:f9:f0:
+         19:d7:2f:7b:d5:12:f6:a4:97:b2:97:c1:e3:27:6a:9b:f9:91:
+         52:c7:0b:0f:a6:68:e4:62:90:c9:e2:82:49:e3:44:cf:e6:14:
+         ca:b7:ae:79:5a:b1:03:bc:68:fc:65:4d:28:a8:91:41:89:53:
+         85:ef:66:b8:5c:4b:68:10:1d:0c:07:9f:21:3c:93:19:97:72:
+         78:7f:53:7d:b7:68:c1:2a:cf:d2:a7:c8:63:08:27:ec:23:81:
+         9d:b9:d3:1a:2b:68:86:36:dc:1a:96:c1:c9:bf:4e:e0:3c:de:
+         84:9c:ae:5b:9b:ac:5c:fd:41:b2:cb:07:bc:29:4b:49:8e:da:
+         40:bc:71:4d:b4:50:94:d2:db:09:4f:28:ba:d8:5e:52:93:a1:
+         33:e1:ae:0c
 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANP6sX8r5P+tEOlUVO9q
-gQILtoNwia7ZTVTqlZmIPVl9lx79uZtTixQepGgH7WhlaH1Puig4/4czmCwy0OUA
-eA9qIDJ9nn2br+k5/ly8BBwGGhEaRiQ09+OvVm04j0Y5pgH6VvnXnnM1GiOUEg8N
-0+z+CVf2oJwYp7pLyTejDGB3S3dfyJx+sVyzQ3LayWzIcSSrL8SDvbBPYK9GDXs0
-j+lwooXtbgXf48FAPRex8KN94hdvPf4RgZAfwvi8LNWc/ARHJMRezyAPMeh96rVp
-uA81GV0TCNvWotx6M5KznPw13s9VlvdSbqnik7BSB40PlZwODRtIDrhBT+to2uVt
-oWMCAwEAAaOByzCByDAdBgNVHQ4EFgQUioXOftyvFbcBwlyBPz0USdI4CKswHwYD
-VR0jBBgwFoAUioXOftyvFbcBwlyBPz0USdI4CKswNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPm6b6fY6KfhBFZy+SFF
+cyIe+fwuM9jvV3sj/j9hx8m4FmfdHHjx0GTfp4iv9qv3pziEPyDlN0Jv9TfEY89o
+SjXgBdqMlYOpmPnlfwNFXOU5cGHW7gnaMCRtfzzJ/9FlySAGd32R4EoAjcQtI/YD
+xYzHtq8/i/0/EuM2G4HrYY+rIBnBUvSOg5cGKTW+q8ymvRD7NapwCbupS5GrW+fC
+hHMFb8bI5ouqlQrtPEKEJBEjwIUbviw3YQFiZdg/bwayBufAVxBGQi5LcKFDlYVU
+SEANCAsNuT3bC0WviGAs5aflfYqzqDqOwCIFrvuZ5UdyEMp+Xd51sf0lsC3EQsW3
+LMcCAwEAAaOByzCByDAdBgNVHQ4EFgQUtqcBoA5Bs7saZ4Nx8WoX0GScaL8wHwYD
+VR0jBBgwFoAUtqcBoA5Bs7saZ4Nx8WoX0GScaL8wNwYIKwYBBQUHAQEEKzApMCcG
 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA78s0D79lh
-Z+p73emIEweNlFFiu1bWwb6K0KCB/h2QbYWULKwz+132yXRye/dauOS23TC7kzt0
-Iun+6Vyyi9ShIQzmPO6Grp6K/Yi7p/0gu5z/1MpvZmAZFNHR8tbzsljITRUw4eD8
-QK1VJbqNJWgmxGRofpTm9JZaxOa6hVuyMtGCMov0P29O1d4u1wk8H36TOiLY70BB
-RyiAA3cN+VEoKLZTJGb3O1ZsU1hVskl8xBo9oTcpGYqamYR/Y6whhfUCWlocfAqL
-vIP/gFcuzmLFeVgkEuivpGzOqJIrJcTjtif31d3m+syRbFle9aTiTwsY+k6ciGYg
-Ja+HFAEnCIlq
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBHdT50MG+o
+5qL3FULDigDkaKiGv30iGOccy6axlEZQhcjlqpl+A5ZWSkSZGOHEqTqwHntG4Y2R
+5PeyLKPdJgDr9c/NtmVUwf0isGaA0H28vbd6wlvfzgCjlLLA7XMoXkHHHCUroJjs
+YvxG+fAZ1y971RL2pJeyl8HjJ2qb+ZFSxwsPpmjkYpDJ4oJJ40TP5hTKt655WrED
+vGj8ZU0oqJFBiVOF72a4XEtoEB0MB58hPJMZl3J4f1N9t2jBKs/Sp8hjCCfsI4Gd
+udMaK2iGNtwalsHJv07gPN6EnK5bm6xc/UGyywe8KUtJjtpAvHFNtFCU0tsJTyi6
+2F5Sk6Ez4a4M
 -----END TRUST_ANCHOR_UNCONSTRAINED-----
 
 150302120000Z
 -----BEGIN TIME-----
 MTUwMzAyMTIwMDAwWg==
 -----END TIME-----
 
 FAIL
 -----BEGIN VERIFY_RESULT-----
 RkFJTA==
 -----END VERIFY_RESULT-----
 
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----
+
 ----- Certificate i=0 (CN=Target) -----
 ERROR: Target certificate looks like a CA but does not set all CA properties
 
 
 -----BEGIN ERRORS-----
 LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBUYXJnZXQgY2VydGlmaWNhdGUgbG9va3MgbGlrZSBhIENBIGJ1dCBkb2VzIG5vdCBzZXQgYWxsIENBIHByb3BlcnRpZXMKCg==
 -----END ERRORS-----