Refactor VerifyCertificateChain test data to include a key purpose

net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem

 [Created by: generate-target-signed-by-512bit-rsa.py]
 
 Certificate chain with 1 intermediate and a trusted root. The target
 certificate is signed using a weak RSA key (512-bit modulus), and so
 verification is expected to fail.
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Target
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:b8:8a:4e:71:4c:e6:58:02:9d:bc:08:20:2d:8d:
-                    74:e3:04:2f:59:9e:43:73:e0:ca:83:1b:3a:e2:30:
-                    78:de:f8:07:a1:17:62:5d:4e:35:e8:03:40:2a:1e:
-                    2e:8e:91:a4:96:bf:a7:34:45:13:19:b2:d7:b0:72:
-                    d0:10:e2:ad:ab:a8:f8:41:c5:ec:ee:1c:14:cb:cf:
-                    4f:cd:37:71:bd:2d:11:8d:95:e4:fa:2b:16:8c:bf:
-                    82:1c:22:85:25:4a:88:01:af:1e:fe:e7:53:d5:03:
-                    d4:36:14:ae:81:d2:3d:73:6c:96:e0:e7:d2:a4:fb:
-                    17:1d:df:6a:93:68:b5:f8:a8:70:df:d0:b6:9d:fb:
-                    e5:80:a3:a8:85:df:82:f3:05:23:9f:b6:62:89:b7:
-                    72:0c:99:49:5b:07:bd:c5:fb:4c:f4:32:83:a5:3c:
-                    c6:8c:6b:c1:a1:c0:ab:73:68:fb:91:14:12:3a:c5:
-                    31:89:ac:a2:4b:b6:20:3b:03:1f:50:48:ff:7b:3b:
-                    be:53:e5:46:e2:ad:18:7a:d3:3e:f9:bb:d0:0b:ac:
-                    0c:23:d8:9c:92:07:6c:ee:a6:64:0d:77:ef:aa:f4:
-                    64:5a:aa:ed:52:cb:20:9a:57:d5:ab:be:8c:07:71:
-                    b3:a4:43:8b:d9:7e:6f:46:2c:70:9f:c0:e3:68:89:
-                    e5:2b
+                    00:e6:5f:a8:d2:f3:bc:ce:7c:a1:a7:97:8a:a5:bb:
+                    3a:24:dd:5b:87:a1:3c:71:b1:e3:14:2e:72:39:ec:
+                    7b:1b:b6:a4:05:b5:4b:82:29:40:ef:1e:5a:2b:b5:
+                    f0:62:b2:2e:f2:2d:cd:a4:fe:2f:a4:5a:b6:6a:8c:
+                    b0:2f:46:f7:bc:f0:6e:71:1f:56:2f:6e:0d:5f:7d:
+                    15:24:76:d7:8a:b7:66:8f:b8:25:70:ba:3f:fa:ac:
+                    2b:81:99:85:49:53:ae:a5:4c:27:d9:63:d3:67:6d:
+                    6a:dc:c0:84:01:5f:35:49:3c:6a:21:76:7c:1e:e0:
+                    f0:f4:8d:ed:31:a8:e8:f8:0b:a1:ae:e4:d6:79:18:
+                    21:51:3a:08:98:30:6b:94:54:fe:e5:92:98:2d:e8:
+                    ee:12:05:53:96:21:9a:d3:cb:fc:8b:dd:0b:10:63:
+                    c2:e3:de:69:f8:3a:04:db:dc:ee:07:95:19:3b:32:
+                    fb:a7:5a:39:60:71:63:af:78:1d:dd:f5:5a:77:99:
+                    23:76:a8:e9:1e:6f:e2:50:3c:4c:b8:fa:58:83:26:
+                    1a:ee:63:7e:cb:2d:93:2c:f6:19:aa:b3:4a:57:81:
+                    6a:db:d7:59:44:29:a4:e0:71:5d:07:00:6b:83:99:
+                    49:3b:bc:f8:ab:d8:fe:7d:5d:ba:b4:02:f5:95:e9:
+                    90:65
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                3D:5B:07:9A:2F:A5:14:87:32:C3:F8:54:71:62:3F:A1:E6:60:7F:D0
+                4A:CE:67:BF:3B:63:C0:09:D1:FF:FF:E6:FE:83:5A:03:0F:C3:43:10
             X509v3 Authority Key Identifier: 
-                keyid:7C:0E:01:A5:04:38:CE:0F:6A:AB:34:B2:CD:77:19:DB:84:C1:EC:44
+                keyid:77:0D:A9:84:E8:2A:53:B8:C9:BB:D7:0F:D7:D0:85:E8:98:1A:E3:68
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         6a:f4:be:75:7e:66:b3:42:6e:fb:64:ed:d2:a1:d8:3d:08:04:
-         bf:93:17:0b:9b:79:df:ca:73:95:b4:5a:78:e3:96:d0:7f:5e:
-         3c:2c:df:00:da:37:fc:61:22:9a:81:d1:bb:5d:13:6a:e4:21:
-         18:bf:dc:49:36:4e:7a:aa:b8:6f
+         65:fb:6d:6c:1a:df:48:9c:d1:36:07:e3:94:7b:d9:ea:36:84:
+         37:f2:c2:03:53:74:4b:f9:a3:91:75:f4:bf:11:14:86:b5:34:
+         8e:24:3d:9a:37:25:c2:27:19:48:f3:f0:a3:a6:51:e6:61:4a:
+         77:db:7a:1e:ae:f1:94:ad:de:93
 -----BEGIN CERTIFICATE-----
 MIICyzCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ik5x
-TOZYAp28CCAtjXTjBC9ZnkNz4MqDGzriMHje+AehF2JdTjXoA0AqHi6OkaSWv6c0
-RRMZstewctAQ4q2rqPhBxezuHBTLz0/NN3G9LRGNleT6KxaMv4IcIoUlSogBrx7+
-51PVA9Q2FK6B0j1zbJbg59Kk+xcd32qTaLX4qHDf0Lad++WAo6iF34LzBSOftmKJ
-t3IMmUlbB73F+0z0MoOlPMaMa8GhwKtzaPuRFBI6xTGJrKJLtiA7Ax9QSP97O75T
-5UbirRh60z75u9ALrAwj2JySB2zupmQNd++q9GRaqu1SyyCaV9WrvowHcbOkQ4vZ
-fm9GLHCfwONoieUrAgMBAAGjgekwgeYwHQYDVR0OBBYEFD1bB5ovpRSHMsP4VHFi
-P6HmYH/QMB8GA1UdIwQYMBaAFHwOAaUEOM4Paqs0ss13GduEwexEMD8GCCsGAQUF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 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBAGr0vnV+ZrNCbvtk7dKh2D0I
-BL+TFwubed/Kc5W0WnjjltB/Xjws3wDaN/xhIpqB0btdE2rkIRi/3Ek2TnqquG8=
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBAGX7bWwa30ic0TYH45R72eo2
+hDfywgNTdEv5o5F19L8RFIa1NI4kPZo3JcInGUjz8KOmUeZhSnfbeh6u8ZSt3pM=
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Intermediate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (512 bit)
                 Modulus:
-                    00:ba:89:53:56:03:c7:9f:d6:cc:d0:48:7d:3b:52:
-                    02:ee:7e:58:eb:d8:9c:8e:3c:d6:65:b2:8d:94:0d:
-                    87:48:e1:65:65:56:91:5b:1a:52:3a:84:96:46:2a:
-                    8b:1b:7d:0c:43:57:04:0d:38:55:21:5b:0b:45:06:
-                    a6:1e:67:ca:5b
+                    00:9e:57:91:28:65:2e:3a:22:df:b6:61:df:cb:09:
+                    a2:92:53:3b:bc:7a:20:99:41:d7:1e:fd:da:08:98:
+                    2d:dd:12:82:3c:c5:29:51:95:eb:cb:50:c0:ca:5c:
+                    76:06:df:b1:b6:48:bd:87:d2:71:6f:ee:21:78:0d:
+                    ca:4e:2b:f6:c7
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                7C:0E:01:A5:04:38:CE:0F:6A:AB:34:B2:CD:77:19:DB:84:C1:EC:44
+                77:0D:A9:84:E8:2A:53:B8:C9:BB:D7:0F:D7:D0:85:E8:98:1A:E3:68
             X509v3 Authority Key Identifier: 
-                keyid:71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
+                keyid:68:01:72:7E:35:BD:80:A0:AE:59:5C:D2:1E:21:52:72:04:31:4C:E0
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         8e:cc:d3:f3:5a:fb:ca:83:4e:55:e3:ae:2a:b7:b7:ac:9e:87:
-         f0:62:58:23:29:3d:63:7e:8d:42:60:ea:dc:3e:ec:66:19:4b:
-         e6:d6:a7:b7:e1:ea:33:88:3c:ea:8b:87:b9:e7:64:0d:35:b3:
-         0e:ab:81:71:0c:1c:0a:f3:0a:49:23:4e:d6:21:de:7f:e5:fd:
-         6d:8b:7a:33:2f:a6:ab:4e:b8:02:cc:01:1e:18:9a:90:f3:56:
-         f8:8a:b5:2f:68:12:c6:83:b2:91:59:00:51:86:75:68:45:3b:
-         27:c4:e0:0d:ed:e7:51:2d:47:60:26:19:02:fd:43:27:81:ad:
-         33:cb:eb:98:9a:a1:2e:81:d3:81:52:4a:1d:19:e9:30:f9:fc:
-         6b:e7:26:c8:c1:6c:65:e4:66:d4:cc:82:16:0a:a6:b9:68:3a:
-         eb:ee:cd:86:aa:a7:80:ed:4f:77:47:d2:c6:1b:eb:53:de:f3:
-         eb:24:60:41:ac:77:08:43:1b:76:ce:a6:4b:f1:4e:1d:32:2b:
-         31:bd:59:52:f1:60:e7:f5:db:6d:bf:be:af:55:9b:11:63:f7:
-         6e:19:2c:17:4b:db:fe:40:27:ae:02:f5:c2:17:62:21:7b:ac:
-         38:d6:17:3e:5c:80:61:6d:95:63:e4:64:d3:07:23:9f:14:bb:
-         df:b2:eb:c2
+         ad:f2:3c:b7:fe:59:a6:08:95:6f:a2:3a:b8:84:05:b2:5b:94:
+         1a:c0:36:8f:c2:9e:31:92:16:1a:de:e8:0b:d8:77:6a:5e:39:
+         93:91:77:20:e0:93:75:be:09:65:ea:03:3c:02:f3:5f:be:14:
+         40:c9:8f:e6:17:9d:bd:bd:2d:91:c2:cd:cd:f3:fe:06:a0:21:
+         e5:19:a3:95:d5:77:a1:b7:c3:0b:c8:a1:b9:0e:3c:77:e0:fc:
+         1c:66:dd:48:49:fd:41:74:b8:55:e3:51:16:13:3b:7c:c6:d7:
+         48:65:ea:1d:6c:5d:a8:02:fb:f9:dc:74:a5:79:ee:e0:20:8a:
+         14:84:d6:af:18:b5:5e:32:2d:f7:8d:e9:17:3c:50:af:cf:1c:
+         3e:0c:b1:71:d4:4c:67:fe:b9:75:8a:65:72:95:0a:36:06:19:
+         46:15:3c:90:a0:8e:8c:b1:cd:25:9d:06:04:98:8a:c6:f3:38:
+         5e:f9:ac:45:ee:ca:1b:84:c5:59:9f:55:58:7a:01:c3:9e:ca:
+         33:68:fd:bc:a3:94:46:85:d9:5a:6b:60:d9:d7:cb:47:c9:61:
+         7f:dd:97:11:75:55:b9:72:3a:61:3d:dc:52:fb:29:04:f3:22:
+         86:40:b8:fc:1f:cb:7b:35:3f:56:11:e7:7d:91:01:9a:13:89:
+         bc:3a:2e:b9
 -----BEGIN CERTIFICATE-----
 MIICpTCCAY2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALqJU1YDx5/WzNBIfTtS
-Au5+WOvYnI481mWyjZQNh0jhZWVWkVsaUjqElkYqixt9DENXBA04VSFbC0UGph5n
-ylsCAwEAAaOByzCByDAdBgNVHQ4EFgQUfA4BpQQ4zg9qqzSyzXcZ24TB7EQwHwYD
-VR0jBBgwFoAUcVlJTaVDScUO5HjpXLdOgKiju14wNwYIKwYBBQUHAQEEKzApMCcG
+ZXJtZWRpYXRlMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJ5XkShlLjoi37Zh38sJ
+opJTO7x6IJlB1x792giYLd0SgjzFKVGV68tQwMpcdgbfsbZIvYfScW/uIXgNyk4r
+9scCAwEAAaOByzCByDAdBgNVHQ4EFgQUdw2phOgqU7jJu9cP19CF6Jga42gwHwYD
+VR0jBBgwFoAUaAFyfjW9gKCuWVzSHiFScgQxTOAwNwYIKwYBBQUHAQEEKzApMCcG
 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCOzNPzWvvK
-g05V464qt7esnofwYlgjKT1jfo1CYOrcPuxmGUvm1qe34eoziDzqi4e552QNNbMO
-q4FxDBwK8wpJI07WId5/5f1ti3ozL6arTrgCzAEeGJqQ81b4irUvaBLGg7KRWQBR
-hnVoRTsnxOAN7edRLUdgJhkC/UMnga0zy+uYmqEugdOBUkodGekw+fxr5ybIwWxl
-5GbUzIIWCqa5aDrr7s2GqqeA7U93R9LGG+tT3vPrJGBBrHcIQxt2zqZL8U4dMisx
-vVlS8WDn9dttv76vVZsRY/duGSwXS9v+QCeuAvXCF2Ihe6w41hc+XIBhbZVj5GTT
-ByOfFLvfsuvC
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCt8jy3/lmm
+CJVvojq4hAWyW5QawDaPwp4xkhYa3ugL2HdqXjmTkXcg4JN1vgll6gM8AvNfvhRA
+yY/mF529vS2Rws3N8/4GoCHlGaOV1Xeht8MLyKG5Djx34PwcZt1ISf1BdLhV41EW
+Ezt8xtdIZeodbF2oAvv53HSlee7gIIoUhNavGLVeMi33jekXPFCvzxw+DLFx1Exn
+/rl1imVylQo2BhlGFTyQoI6Msc0lnQYEmIrG8zhe+axF7sobhMVZn1VYegHDnsoz
+aP28o5RGhdlaa2DZ18tHyWF/3ZcRdVW5cjphPdxS+ykE8yKGQLj8H8t7NT9WEed9
+kQGaE4m8Oi65
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:ca:5e:08:17:b7:7c:c4:55:39:a2:1c:7f:97:49:
-                    b0:bb:88:3e:9e:ed:46:36:41:c2:a7:5e:2b:ce:bb:
-                    7b:d2:d2:a8:3b:a3:53:27:39:ac:3a:76:48:a2:85:
-                    97:3f:ba:98:9f:14:f9:b9:31:64:e5:27:a8:9a:23:
-                    ae:7d:12:39:65:c0:10:f3:6d:2d:a3:45:3d:c3:69:
-                    e6:cf:3e:4d:8a:5c:37:a5:6c:32:17:7c:ab:8f:62:
-                    0e:e4:57:6b:e1:64:22:8d:3b:ad:c6:93:60:4a:c4:
-                    32:6d:be:c4:6b:06:e1:4b:e0:89:3c:ef:ad:78:94:
-                    bd:3d:d1:bb:19:1a:86:98:43:0e:84:bb:68:11:47:
-                    9a:06:49:33:e9:48:e6:f2:00:0e:ef:e7:4d:2a:1b:
-                    b2:aa:5b:a8:8d:59:ac:b7:c8:77:5d:c9:9f:d3:e8:
-                    c7:f2:88:0a:ce:6e:34:b5:8f:5a:63:24:68:42:2f:
-                    60:2c:a5:82:44:e9:12:1f:c3:7a:01:c3:e7:e3:24:
-                    97:0b:bc:5e:48:e1:33:4b:a0:cd:fa:ce:75:90:97:
-                    20:f4:0b:4c:8e:69:c5:8b:cd:1c:ac:8a:7f:d4:18:
-                    22:c7:10:09:52:dc:3a:17:3d:3a:5c:03:99:ee:f8:
-                    9d:a0:bf:ef:72:33:df:43:8d:9f:1b:1c:e3:22:24:
-                    73:99
+                    00:c4:1c:75:6c:84:a2:59:08:8c:30:5b:1f:63:1a:
+                    b7:80:76:db:e1:82:28:60:f8:b5:dc:6b:b0:92:43:
+                    d4:c9:3c:ee:8d:0c:e1:04:14:9e:2a:03:24:02:fb:
+                    3c:7a:cb:d2:42:4a:9f:36:5c:a7:7e:e4:c8:3d:2c:
+                    34:0a:9e:0b:43:07:87:69:0a:9d:dc:40:39:66:31:
+                    71:f0:51:b8:d2:24:2e:ad:8d:3d:f6:72:40:ba:a3:
+                    d8:12:fd:f6:2d:ab:23:41:3d:32:76:1d:e2:77:e2:
+                    2e:0b:5d:f8:05:12:d9:08:aa:49:18:52:41:01:43:
+                    f4:da:b1:a5:c9:06:2f:d7:52:b3:1b:dd:ee:16:46:
+                    8b:e4:ef:f8:12:52:7d:05:29:cf:a2:b2:4b:33:66:
+                    18:27:18:3a:ba:16:0f:62:7b:c2:d3:d5:19:62:1d:
+                    da:6a:84:a0:2e:e3:d1:71:91:3c:91:68:c0:40:22:
+                    4b:fb:0d:b6:68:80:d8:b8:f8:a0:11:f4:d9:6f:f9:
+                    50:cc:76:ff:af:1c:bf:4e:12:76:d1:ea:3c:96:85:
+                    76:c2:30:07:03:92:53:35:fd:26:66:7c:ea:48:ad:
+                    97:e7:25:16:83:6d:84:01:cf:9f:06:0b:d7:37:79:
+                    8e:68:25:44:88:72:a7:9d:2b:7c:57:24:6b:72:15:
+                    a5:ed
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
+                68:01:72:7E:35:BD:80:A0:AE:59:5C:D2:1E:21:52:72:04:31:4C:E0
             X509v3 Authority Key Identifier: 
-                keyid:71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
+                keyid:68:01:72:7E:35:BD:80:A0:AE:59:5C:D2:1E:21:52:72:04:31:4C:E0
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         20:51:cc:39:0f:3c:0c:67:47:0c:73:f0:00:0d:57:fb:6f:fe:
-         4c:e3:c1:d1:a6:f7:40:54:4c:91:0f:ca:e1:eb:b3:7a:44:0e:
-         57:f5:81:1f:9a:4f:81:57:d8:91:01:7b:09:6a:61:19:04:8f:
-         00:7a:d1:5b:3f:cb:1b:c0:53:a4:da:dc:40:a5:ef:9b:59:1a:
-         fc:99:b2:0d:66:22:ee:d7:da:69:72:4d:b1:44:e9:2d:57:84:
-         52:d5:2b:c5:77:ac:a7:d0:f2:27:12:6b:5c:42:7a:3d:fc:e8:
-         04:91:98:aa:1d:3f:40:9d:9b:e2:43:24:47:7b:b8:24:23:a3:
-         47:24:cd:9a:44:87:f8:a7:c4:07:90:9a:73:60:e1:0e:7b:82:
-         a1:ef:73:4e:02:46:6d:06:e2:58:8f:79:47:79:a6:59:75:cf:
-         ac:5d:e2:37:6c:88:3f:bf:57:00:f5:fb:09:53:f4:5f:06:42:
-         58:5e:75:48:96:7d:4f:dd:3b:45:d3:7c:61:8f:75:20:17:a0:
-         2e:1c:08:4b:22:3f:37:be:d7:43:89:da:59:ac:79:87:1e:6a:
-         cc:53:4d:5b:e9:0a:d6:40:a5:a0:28:99:57:44:5d:d2:7b:bf:
-         02:38:a3:c4:df:14:a9:c1:b2:ec:15:21:7b:84:a1:a1:56:f8:
-         b9:45:42:cd
+         3b:71:85:c5:bf:83:55:c7:84:5e:51:cc:4b:00:35:82:f5:90:
+         c0:7b:95:f5:c4:f0:ff:5b:8a:ba:83:8a:42:3a:bb:0b:5d:e6:
+         0a:3a:91:2c:99:28:40:d3:49:6e:34:57:7b:de:1f:bd:d9:2c:
+         b4:95:69:eb:e7:79:01:6c:ec:a9:e0:78:82:8e:68:33:56:a7:
+         58:99:d4:4a:97:73:b1:bd:d7:ee:bd:07:18:a8:47:d3:28:5d:
+         23:07:59:21:2a:b1:e0:3a:f0:21:24:1d:44:66:dd:29:ea:02:
+         f8:17:7d:2b:b3:f8:15:3a:0d:60:42:d3:7d:f0:1d:59:30:99:
+         ae:36:24:bc:c7:d1:97:4f:44:67:19:b9:ea:33:0d:e7:57:81:
+         88:6e:35:3d:47:84:43:f7:f7:43:1a:dc:67:21:2e:a3:97:78:
+         bc:06:46:69:04:20:8b:e8:94:4b:a8:82:c3:2a:a4:ac:59:60:
+         4e:59:46:e4:7f:cc:59:21:b4:73:9e:29:51:a9:48:71:e6:f6:
+         5e:ec:25:f0:8e:87:4c:b4:4d:62:12:14:65:49:a3:4c:fd:59:
+         80:39:97:2a:57:f0:6f:9a:fa:cd:d0:a7:db:35:60:81:23:13:
+         be:a4:29:00:bd:58:e8:e2:e1:90:24:fd:f7:4e:fe:4d:fb:c7:
+         a9:2a:e8:24
 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMpeCBe3fMRVOaIcf5dJ
-sLuIPp7tRjZBwqdeK867e9LSqDujUyc5rDp2SKKFlz+6mJ8U+bkxZOUnqJojrn0S
-OWXAEPNtLaNFPcNp5s8+TYpcN6VsMhd8q49iDuRXa+FkIo07rcaTYErEMm2+xGsG
-4UvgiTzvrXiUvT3RuxkahphDDoS7aBFHmgZJM+lI5vIADu/nTSobsqpbqI1ZrLfI
-d13Jn9Pox/KICs5uNLWPWmMkaEIvYCylgkTpEh/DegHD5+Mklwu8XkjhM0ugzfrO
-dZCXIPQLTI5pxYvNHKyKf9QYIscQCVLcOhc9OlwDme74naC/73Iz30ONnxsc4yIk
-c5kCAwEAAaOByzCByDAdBgNVHQ4EFgQUcVlJTaVDScUO5HjpXLdOgKiju14wHwYD
-VR0jBBgwFoAUcVlJTaVDScUO5HjpXLdOgKiju14wNwYIKwYBBQUHAQEEKzApMCcG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 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAgUcw5DzwM
-Z0cMc/AADVf7b/5M48HRpvdAVEyRD8rh67N6RA5X9YEfmk+BV9iRAXsJamEZBI8A
-etFbP8sbwFOk2txApe+bWRr8mbINZiLu19ppck2xROktV4RS1SvFd6yn0PInEmtc
-Qno9/OgEkZiqHT9AnZviQyRHe7gkI6NHJM2aRIf4p8QHkJpzYOEOe4Kh73NOAkZt
-BuJYj3lHeaZZdc+sXeI3bIg/v1cA9fsJU/RfBkJYXnVIln1P3TtF03xhj3UgF6Au
-HAhLIj83vtdDidpZrHmHHmrMU01b6QrWQKWgKJlXRF3Se78COKPE3xSpwbLsFSF7
-hKGhVvi5RULN
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA7cYXFv4NV
+x4ReUcxLADWC9ZDAe5X1xPD/W4q6g4pCOrsLXeYKOpEsmShA00luNFd73h+92Sy0
+lWnr53kBbOyp4HiCjmgzVqdYmdRKl3OxvdfuvQcYqEfTKF0jB1khKrHgOvAhJB1E
+Zt0p6gL4F30rs/gVOg1gQtN98B1ZMJmuNiS8x9GXT0RnGbnqMw3nV4GIbjU9R4RD
+9/dDGtxnIS6jl3i8BkZpBCCL6JRLqILDKqSsWWBOWUbkf8xZIbRznilRqUhx5vZe
+7CXwjodMtE1iEhRlSaNM/VmAOZcqV/BvmvrN0KfbNWCBIxO+pCkAvVjo4uGQJP33
+Tv5N+8epKugk
 -----END TRUST_ANCHOR_UNCONSTRAINED-----
 
 150302120000Z
 -----BEGIN TIME-----
 MTUwMzAyMTIwMDAwWg==
 -----END TIME-----
 
 FAIL
 -----BEGIN VERIFY_RESULT-----
 RkFJTA==
 -----END VERIFY_RESULT-----
 
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----
+
 ----- Certificate i=0 (CN=Target) -----
 ERROR: RSA modulus too small
   actual: 512
   minimum: 1024
 ERROR: Unacceptable modulus length for RSA key
 ERROR: VerifySignedData failed
 
 
 -----BEGIN ERRORS-----
 LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBSU0EgbW9kdWx1cyB0b28gc21hbGwKICBhY3R1YWw6IDUxMgogIG1pbmltdW06IDEwMjQKRVJST1I6IFVuYWNjZXB0YWJsZSBtb2R1bHVzIGxlbmd0aCBmb3IgUlNBIGtleQpFUlJPUjogVmVyaWZ5U2lnbmVkRGF0YSBmYWlsZWQKCg==
 -----END ERRORS-----