Refactor VerifyCertificateChain test data to include a key purpose

net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem

 [Created by: generate-target-unknown-critical-extension.py]
 
 Certificate chain with 1 intermediate and a trusted root. The target
 certificate has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as
 critical. Verifying this certificate chain is expected to fail because there is
 an unrecognized critical extension.
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Target
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:d5:9d:3b:85:e5:81:69:52:70:67:33:4a:2b:76:
-                    6a:e5:61:db:af:e5:32:74:85:dd:54:d2:c7:76:5a:
-                    5c:38:d8:46:fc:b4:33:f5:9d:8e:80:83:ab:31:96:
-                    41:c4:c2:52:af:8c:4d:0e:5c:69:c5:5d:cc:b4:1b:
-                    ef:de:61:58:88:e2:c4:bf:6a:cb:74:bd:f5:bd:61:
-                    57:1c:22:9f:6d:e8:38:c6:70:b8:1e:a5:2b:4f:35:
-                    9f:65:fc:c1:36:17:3e:d7:fa:33:21:70:fb:e0:ce:
-                    ab:23:41:3f:fc:7b:74:1d:6b:ba:21:b7:5b:fd:a1:
-                    77:11:1a:8d:5b:2a:be:38:2e:79:a0:b7:2d:45:5c:
-                    d7:32:fd:4c:70:f1:95:1c:38:a3:15:4f:57:f3:75:
-                    59:fe:75:14:39:ea:44:16:b9:2e:06:df:67:30:dd:
-                    5a:b1:7e:95:09:fd:12:cc:87:b1:66:fa:7e:b9:e5:
-                    b5:38:0a:46:73:53:1a:b2:aa:12:e3:6d:99:56:e8:
-                    c7:cc:eb:6b:00:9b:c1:ba:02:23:2b:32:be:9b:f8:
-                    ab:b2:b5:be:50:f6:7f:95:b6:6b:1c:e6:ad:f1:69:
-                    5a:e0:41:1e:85:64:91:37:7b:9a:28:43:a5:ee:33:
-                    25:ab:82:97:03:07:94:b8:d3:34:95:bf:33:d2:14:
-                    b1:61
+                    00:dd:69:8a:f3:e3:97:bd:3b:1b:fc:95:d2:0f:29:
+                    bb:4b:ab:e6:66:cf:66:d9:fd:68:55:d8:22:d5:d9:
+                    ce:bf:d9:fa:b0:23:0a:e8:bb:c1:fa:0b:aa:6a:18:
+                    2a:a5:5c:a3:57:c4:d5:4c:29:bb:64:ee:51:f7:41:
+                    fd:26:93:b7:e3:21:12:8e:a3:76:18:2b:f3:40:7d:
+                    bc:c7:56:52:0a:42:a6:42:dc:ea:93:b6:b0:09:44:
+                    e7:52:ce:ce:41:da:24:fa:fb:35:57:77:7a:2e:d8:
+                    72:7b:26:f7:e7:e8:17:db:52:bf:7a:83:30:15:d0:
+                    28:44:5f:87:76:7e:19:32:b3:5a:7d:ff:88:3a:d5:
+                    cd:4f:19:45:20:9d:66:73:d9:4a:70:b0:cf:0b:d6:
+                    8c:d3:4b:52:a4:ef:eb:12:47:dc:e6:18:8c:af:54:
+                    74:67:f4:54:c7:5a:65:3d:4d:a0:31:0d:d6:70:52:
+                    d4:df:e8:35:d7:60:ca:ce:0b:d7:b9:e2:01:36:36:
+                    ad:b1:8b:30:67:cb:f6:0b:ad:0e:0d:a9:c7:ee:96:
+                    5e:8d:01:44:d4:85:22:1b:94:bb:62:ca:c1:9d:c3:
+                    05:fe:87:81:cb:f7:4f:96:e9:06:cc:81:3a:3d:4d:
+                    54:b3:59:2c:fc:07:11:9c:89:0a:ad:af:15:f4:74:
+                    ce:39
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                B3:FD:B6:08:AB:82:83:50:E7:F0:85:51:1C:CC:78:E5:22:50:91:60
+                83:C0:D7:EE:36:B8:BA:F9:1D:4E:73:EF:5D:E5:24:D7:9D:2D:61:F8
             X509v3 Authority Key Identifier: 
-                keyid:5B:B2:D8:DC:1B:60:39:B5:6B:10:A5:70:37:93:E7:3C:F5:52:46:C8
+                keyid:2A:B8:2E:F5:10:55:C6:E6:3E:CD:B1:E3:17:07:C7:B1:24:01:62:BD
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
             1.2.3.4: critical
                 ....
     Signature Algorithm: sha256WithRSAEncryption
-         39:19:04:31:e9:20:03:1b:e9:d3:91:25:94:68:4f:8d:07:16:
-         08:e8:7f:99:01:37:56:8d:f4:15:6b:a8:7c:e4:3d:32:ad:3d:
-         62:0f:5e:93:6f:b9:21:ba:e8:c3:48:13:e5:eb:ad:26:f0:9b:
-         4c:fe:76:8e:73:a2:be:01:b5:48:7c:11:7e:cc:47:4b:0c:0c:
-         17:65:54:ab:0e:79:6c:e5:75:67:52:ab:f7:26:97:36:3d:71:
-         6d:88:54:b9:ef:b1:00:42:56:64:88:db:0f:9c:be:25:e0:6e:
-         2b:df:c6:55:3a:89:af:92:1c:21:71:6e:22:ab:5a:b8:de:53:
-         a1:8d:84:0f:0e:55:43:08:45:0b:fd:4a:6f:fa:e4:89:55:a0:
-         8d:10:c0:3a:06:42:7c:f1:b8:7a:19:a7:61:cc:c0:b1:e2:f1:
-         14:d5:bd:ff:41:a5:50:f6:ac:a4:3f:ec:6a:6a:3e:7b:60:29:
-         f4:9d:c8:57:81:12:59:7b:0f:b2:2a:43:29:03:a5:eb:e7:e8:
-         cd:15:fe:53:07:e0:12:0a:35:29:e8:fe:7f:51:ae:19:98:d5:
-         89:9c:05:0a:ba:51:89:0f:1f:3c:8e:2a:eb:e7:93:0a:fd:c1:
-         f3:0e:ce:67:5b:f2:73:dc:e6:2e:db:2b:88:11:3b:07:d8:ff:
-         79:0c:6a:e1
+         16:87:37:58:5d:aa:0e:d8:d7:5a:cd:b0:8a:89:85:f2:2e:f3:
+         ca:04:e9:e0:df:09:0c:48:89:21:a8:72:1f:95:9d:6b:d2:65:
+         28:5f:41:9b:e2:4f:1e:19:e9:b9:a1:76:69:93:bb:a0:56:85:
+         b5:4c:b1:ff:35:66:81:fe:21:db:4d:b1:6b:ba:eb:d4:4c:7d:
+         25:64:58:bc:82:26:8b:06:1f:7f:e6:d1:44:67:7d:ff:92:bc:
+         12:13:aa:42:53:7d:08:58:e6:c9:af:02:ba:1c:d3:cc:9f:04:
+         ba:36:14:13:a5:34:de:62:10:62:70:3c:3b:3f:4b:4b:ed:cc:
+         1c:33:21:a0:05:f0:a0:06:0b:5b:1f:c9:6e:ba:00:b6:c6:b9:
+         64:6d:99:35:c9:fb:3e:12:aa:b4:67:32:d7:e2:c4:62:6d:54:
+         65:67:17:e1:70:52:10:11:14:0d:a5:6e:0b:ec:9f:68:9f:1d:
+         62:13:3b:38:4c:09:73:bb:45:3c:d6:ce:20:9d:17:96:38:e1:
+         8a:ba:14:4b:ed:35:55:d6:03:a1:6a:7f:f3:00:c3:44:7d:03:
+         64:ef:25:04:ac:66:a2:01:9f:ba:e1:d4:80:37:ac:1f:a3:7c:
+         85:be:4e:da:90:06:e9:c2:d3:6f:77:ae:43:73:b8:83:0a:e1:
+         7e:b9:e0:f9
 -----BEGIN CERTIFICATE-----
 MIIDnTCCAoWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnTuF
-5YFpUnBnM0ordmrlYduv5TJ0hd1U0sd2Wlw42Eb8tDP1nY6Ag6sxlkHEwlKvjE0O
-XGnFXcy0G+/eYViI4sS/ast0vfW9YVccIp9t6DjGcLgepStPNZ9l/ME2Fz7X+jMh
-cPvgzqsjQT/8e3Qda7oht1v9oXcRGo1bKr44Lnmgty1FXNcy/Uxw8ZUcOKMVT1fz
-dVn+dRQ56kQWuS4G32cw3VqxfpUJ/RLMh7Fm+n655bU4CkZzUxqyqhLjbZlW6MfM
-62sAm8G6AiMrMr6b+Kuytb5Q9n+Vtmsc5q3xaVrgQR6FZJE3e5ooQ6XuMyWrgpcD
-B5S40zSVvzPSFLFhAgMBAAGjgfkwgfYwHQYDVR0OBBYEFLP9tgirgoNQ5/CFURzM
-eOUiUJFgMB8GA1UdIwQYMBaAFFuy2NwbYDm1axClcDeT5zz1UkbIMD8GCCsGAQUF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 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
 BwMBBggrBgEFBQcDAjAOBgMqAwQBAf8EBAECAwQwDQYJKoZIhvcNAQELBQADggEB
-ADkZBDHpIAMb6dORJZRoT40HFgjof5kBN1aN9BVrqHzkPTKtPWIPXpNvuSG66MNI
-E+XrrSbwm0z+do5zor4BtUh8EX7MR0sMDBdlVKsOeWzldWdSq/cmlzY9cW2IVLnv
-sQBCVmSI2w+cviXgbivfxlU6ia+SHCFxbiKrWrjeU6GNhA8OVUMIRQv9Sm/65IlV
-oI0QwDoGQnzxuHoZp2HMwLHi8RTVvf9BpVD2rKQ/7GpqPntgKfSdyFeBEll7D7Iq
-QykDpevn6M0V/lMH4BIKNSno/n9RrhmY1YmcBQq6UYkPHzyOKuvnkwr9wfMOzmdb
-8nPc5i7bK4gROwfY/3kMauE=
+ABaHN1hdqg7Y11rNsIqJhfIu88oE6eDfCQxIiSGoch+VnWvSZShfQZviTx4Z6bmh
+dmmTu6BWhbVMsf81ZoH+IdtNsWu669RMfSVkWLyCJosGH3/m0URnff+SvBITqkJT
+fQhY5smvAroc08yfBLo2FBOlNN5iEGJwPDs/S0vtzBwzIaAF8KAGC1sfyW66ALbG
+uWRtmTXJ+z4SqrRnMtfixGJtVGVnF+FwUhARFA2lbgvsn2ifHWITOzhMCXO7RTzW
+ziCdF5Y44Yq6FEvtNVXWA6Fqf/MAw0R9A2TvJQSsZqIBn7rh1IA3rB+jfIW+TtqQ
+BunC0293rkNzuIMK4X654Pk=
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Intermediate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:b9:ec:7c:da:f2:c7:b4:02:ee:82:a9:58:98:60:
-                    67:07:a2:c2:9d:2c:a1:76:50:f7:4a:0a:04:80:45:
-                    7b:3d:f6:31:fe:1d:e9:45:40:76:1d:38:df:c9:e1:
-                    42:df:13:7e:16:26:2b:41:14:6b:6e:5e:f3:39:4e:
-                    61:9d:fd:5f:bf:2a:f9:b7:cf:3f:af:34:b1:17:ef:
-                    97:1f:bf:3d:4c:0a:93:91:bd:ee:11:7a:64:ee:69:
-                    22:75:60:8b:c3:10:cd:9e:91:8a:d8:54:c7:43:f4:
-                    fb:88:db:09:7a:22:5d:26:58:ab:7d:d0:41:11:47:
-                    10:62:ed:cc:e6:bb:d2:da:a4:7c:e9:0a:39:5b:9f:
-                    93:b0:06:27:50:38:ea:63:e2:6b:a0:eb:c5:d3:7f:
-                    87:71:d8:08:64:d5:87:0a:6e:59:99:d7:74:7c:da:
-                    eb:30:68:9d:f8:09:31:c7:66:5f:9a:fb:2d:9b:f1:
-                    c1:ff:cb:57:67:46:03:99:a3:4b:e0:bc:2b:17:f4:
-                    0b:7b:61:3f:5e:cf:c9:41:9b:15:ee:f9:90:46:ad:
-                    b4:a2:86:3f:87:3c:dd:7e:97:6f:97:30:88:f8:e6:
-                    88:83:15:ad:77:6a:fd:1e:f1:ae:88:a2:f5:52:6d:
-                    6e:d9:5d:5d:c1:1b:0a:49:10:f4:5a:e8:42:53:67:
-                    d1:cd
+                    00:b5:92:c1:f9:71:4d:e8:71:f3:2c:f7:fa:6c:c6:
+                    aa:34:f3:ce:ed:86:32:24:d6:51:c9:3f:e4:19:3e:
+                    06:49:6f:fc:ae:ab:9e:73:54:33:95:78:3e:f3:56:
+                    56:15:a5:1a:62:bc:97:af:41:f2:b7:fd:fd:a9:4e:
+                    b0:a5:db:18:1e:65:ee:9d:15:71:3e:45:d5:47:fe:
+                    75:d5:4e:4d:8e:72:ea:b3:bc:b7:77:6c:0b:75:72:
+                    86:d2:49:ed:4a:ea:89:da:da:35:bd:2d:8c:dd:53:
+                    29:a9:46:be:43:57:59:4f:63:34:08:c2:cf:a3:76:
+                    86:d2:79:2f:8c:01:97:12:d0:6b:b6:3f:aa:dd:e5:
+                    c9:17:9d:94:16:a1:46:ec:63:02:fd:e2:96:dc:85:
+                    ce:95:e6:64:37:f7:d0:96:5e:b1:ba:96:f0:18:11:
+                    cd:01:13:57:96:ce:a4:2a:54:93:7d:9d:c9:6a:98:
+                    6b:39:0f:cc:e6:29:0f:8d:8d:cc:ea:5e:49:74:45:
+                    89:1b:72:15:d4:7e:1f:9d:3f:e2:91:04:ec:88:55:
+                    da:62:1a:49:bf:11:71:55:94:7b:a5:15:31:60:d3:
+                    53:b7:f0:81:c1:1d:ec:11:00:d6:5a:97:e6:5b:cb:
+                    e7:9d:6c:8f:28:77:10:7d:ac:d7:e7:6f:6d:b2:e7:
+                    8e:4b
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                5B:B2:D8:DC:1B:60:39:B5:6B:10:A5:70:37:93:E7:3C:F5:52:46:C8
+                2A:B8:2E:F5:10:55:C6:E6:3E:CD:B1:E3:17:07:C7:B1:24:01:62:BD
             X509v3 Authority Key Identifier: 
-                keyid:50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
+                keyid:46:1A:32:F4:32:C8:48:51:31:04:50:C8:62:8A:10:81:A5:C5:50:0F
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         12:72:ee:b6:62:1b:0d:70:52:a6:02:3c:13:2a:88:cf:cb:9a:
-         e2:07:5f:cf:3e:be:75:d3:f9:a6:23:47:ca:fb:88:87:bd:e1:
-         52:8e:8b:fe:e9:c1:7a:8c:30:91:c5:0c:fe:9d:31:fa:fc:c0:
-         d7:fe:7a:7a:18:6f:3c:67:50:b0:22:b2:09:48:ca:dc:d7:d3:
-         29:86:eb:f4:cf:e0:3e:6e:d1:88:fa:20:93:b3:05:4c:c6:29:
-         06:df:4a:8b:72:3e:c8:3c:2b:33:56:26:de:91:1a:11:bc:21:
-         7b:b8:b5:b6:7c:ca:0d:f7:d6:e8:b0:a8:99:e8:7a:2b:f0:c4:
-         78:e5:54:9e:3f:73:dc:85:41:97:11:36:45:73:b9:f2:49:8d:
-         d7:83:cf:b4:1a:ed:33:dc:0b:cd:7e:83:77:ce:aa:2f:0e:1f:
-         4d:e0:19:96:cd:74:79:de:18:8b:ad:9f:0c:96:20:14:63:5e:
-         e2:58:8e:4a:d8:fd:59:0d:a6:a4:02:85:ac:23:d4:43:b2:da:
-         2d:6b:87:79:9e:2e:1e:f4:d3:95:ef:3d:91:7a:f7:17:16:c7:
-         9f:1f:b7:42:7e:f4:fa:d9:81:18:26:23:03:1e:86:99:7d:28:
-         ef:a3:ac:be:bb:55:fa:38:62:3c:e6:6e:47:4b:f1:45:ef:de:
-         38:ea:c3:a3
+         a0:5d:d6:8e:13:70:92:0a:04:7b:e6:b5:5c:e2:b5:79:ed:60:
+         83:4c:60:ea:8c:d3:3c:0a:c2:cb:e7:ca:82:e2:6c:51:6e:98:
+         91:fd:99:00:36:91:a7:99:61:52:dd:a7:d2:ec:6b:c9:cc:99:
+         77:3a:8a:d0:ed:f3:4c:e7:dc:99:54:f3:d7:ba:73:13:39:f5:
+         bd:8c:8f:80:97:0e:23:8b:c1:51:e5:7d:d0:80:4f:2c:50:e1:
+         2a:d8:cb:cb:44:4f:a2:e2:8c:61:09:f0:27:44:ad:81:0b:31:
+         42:c4:4f:69:02:41:a7:e0:56:06:3f:c3:87:5e:29:d8:c4:ba:
+         32:5f:ad:2f:65:c6:34:77:77:3f:1a:99:a3:ee:27:a9:b9:bc:
+         37:9f:6a:f0:81:f5:35:06:eb:79:60:b1:8d:a8:64:e7:54:0f:
+         0c:aa:b1:bb:31:5c:03:0b:c4:1a:00:eb:dc:d4:d5:ed:fe:60:
+         10:b1:c4:ef:a4:dc:79:61:41:69:3f:eb:e0:21:57:06:b7:61:
+         de:15:f1:1c:06:b5:2a:91:fd:cb:5d:b4:e4:c2:60:0a:8f:7f:
+         0a:17:6a:ee:aa:26:76:b1:dd:60:13:df:78:d1:65:4f:0a:77:
+         cd:e5:41:8a:7b:72:d2:14:ad:c3:54:b0:64:2f:b7:5d:9a:23:
+         97:31:ad:67
 -----BEGIN CERTIFICATE-----
 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuex82vLH
-tALugqlYmGBnB6LCnSyhdlD3SgoEgEV7PfYx/h3pRUB2HTjfyeFC3xN+FiYrQRRr
-bl7zOU5hnf1fvyr5t88/rzSxF++XH789TAqTkb3uEXpk7mkidWCLwxDNnpGK2FTH
-Q/T7iNsJeiJdJlirfdBBEUcQYu3M5rvS2qR86Qo5W5+TsAYnUDjqY+JroOvF03+H
-cdgIZNWHCm5Zmdd0fNrrMGid+Akxx2Zfmvstm/HB/8tXZ0YDmaNL4LwrF/QLe2E/
-Xs/JQZsV7vmQRq20ooY/hzzdfpdvlzCI+OaIgxWtd2r9HvGuiKL1Um1u2V1dwRsK
-SRD0WuhCU2fRzQIDAQABo4HLMIHIMB0GA1UdDgQWBBRbstjcG2A5tWsQpXA3k+c8
-9VJGyDAfBgNVHSMEGDAWgBRQJQe+EsiiGC8yIVnMK1qnThldVTA3BggrBgEFBQcB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 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-ABJy7rZiGw1wUqYCPBMqiM/LmuIHX88+vnXT+aYjR8r7iIe94VKOi/7pwXqMMJHF
-DP6dMfr8wNf+enoYbzxnULAisglIytzX0ymG6/TP4D5u0Yj6IJOzBUzGKQbfSoty
-Psg8KzNWJt6RGhG8IXu4tbZ8yg331uiwqJnoeivwxHjlVJ4/c9yFQZcRNkVzufJJ
-jdeDz7Qa7TPcC81+g3fOqi8OH03gGZbNdHneGIutnwyWIBRjXuJYjkrY/VkNpqQC
-hawj1EOy2i1rh3meLh7005XvPZF69xcWx58ft0J+9PrZgRgmIwMehpl9KO+jrL67
-Vfo4YjzmbkdL8UXv3jjqw6M=
+AKBd1o4TcJIKBHvmtVzitXntYINMYOqM0zwKwsvnyoLibFFumJH9mQA2kaeZYVLd
+p9Lsa8nMmXc6itDt80zn3JlU89e6cxM59b2Mj4CXDiOLwVHlfdCATyxQ4SrYy8tE
+T6LijGEJ8CdErYELMULET2kCQafgVgY/w4deKdjEujJfrS9lxjR3dz8amaPuJ6m5
+vDefavCB9TUG63lgsY2oZOdUDwyqsbsxXAMLxBoA69zU1e3+YBCxxO+k3HlhQWk/
+6+AhVwa3Yd4V8RwGtSqR/ctdtOTCYAqPfwoXau6qJnax3WAT33jRZU8Kd83lQYp7
+ctIUrcNUsGQvt12aI5cxrWc=
 -----END CERTIFICATE-----
 
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:a9:09:72:27:8b:f5:e4:bb:33:ee:14:1d:da:11:
-                    7c:b1:f1:53:3a:a3:77:3f:b2:f5:1f:b6:23:a3:69:
-                    f8:9d:52:97:4c:92:af:07:46:c5:82:3f:97:a5:b2:
-                    fc:e0:b3:3e:29:53:e5:75:07:04:30:7b:bb:55:a3:
-                    af:ec:c3:bd:a0:c5:f1:58:4b:a8:5a:77:49:c7:fc:
-                    a2:13:97:5c:3a:95:58:9b:95:4c:a0:18:b3:3a:18:
-                    1d:fe:5f:c1:c7:9b:d3:9a:0d:f3:4c:a6:3d:28:21:
-                    50:9d:ae:90:ae:aa:96:23:d6:4f:9b:ec:ff:59:67:
-                    0a:ff:8a:89:df:bc:99:ff:f6:75:b5:da:c7:79:d8:
-                    54:c8:f3:96:3a:c6:e9:60:0c:ee:9e:52:e1:e9:5f:
-                    58:1e:29:a3:1a:c3:4f:91:8c:2e:85:33:87:f0:c7:
-                    c6:74:91:cc:fb:dd:ca:1e:71:6f:e2:c1:41:bc:ef:
-                    e8:7f:48:07:a9:5c:aa:21:60:43:fd:3e:98:8b:4c:
-                    8d:95:55:48:3b:35:1a:2a:f4:e3:ef:85:01:11:c4:
-                    f4:a3:15:e3:68:df:bb:94:f9:26:10:35:83:96:83:
-                    00:ce:cf:71:d4:e9:01:18:80:c2:dd:f0:9d:52:f6:
-                    fa:11:de:a1:7f:79:d9:13:a6:eb:33:3e:04:57:b6:
-                    75:b9
+                    00:d8:21:ff:fb:05:2b:4b:26:71:df:17:ad:e2:0a:
+                    91:07:9e:26:8b:20:f8:6a:92:11:14:f0:85:25:d2:
+                    30:1f:6a:9b:e5:3f:6a:c7:59:5f:b6:02:e2:f5:4f:
+                    cc:db:a6:da:db:9d:e0:76:c7:2b:a1:ad:c6:5e:ad:
+                    b6:4b:b0:01:e6:e3:7a:8e:7f:01:7f:96:4c:80:61:
+                    c3:30:42:6a:c5:85:20:17:be:4e:59:9b:73:6d:7a:
+                    2b:80:f8:8a:78:f5:de:ac:05:cd:7e:e8:bd:c6:8f:
+                    fc:9f:48:66:9a:c1:0f:41:bc:7f:e3:aa:b3:33:a1:
+                    8b:b1:cb:db:f9:04:04:14:9b:80:c2:cb:76:67:f8:
+                    21:09:84:b5:f5:43:a6:f1:50:2f:34:df:a3:bc:96:
+                    a6:23:d7:ba:83:a0:6e:c2:c7:b5:c8:8d:2a:ea:86:
+                    69:18:72:3f:1d:41:be:54:ff:25:ba:5d:42:99:ae:
+                    3a:38:50:45:7a:be:20:56:6a:03:f8:e6:d0:df:bc:
+                    05:b8:7f:3b:5b:af:71:f0:36:7d:dd:f4:f0:35:b1:
+                    1a:31:52:e4:62:a1:0a:64:cf:af:47:80:26:58:db:
+                    5f:65:79:a3:37:17:42:b7:ce:c4:d2:2c:d4:df:06:
+                    da:be:8b:73:f6:59:d2:2a:2a:90:08:24:01:40:5d:
+                    4a:f3
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
+                46:1A:32:F4:32:C8:48:51:31:04:50:C8:62:8A:10:81:A5:C5:50:0F
             X509v3 Authority Key Identifier: 
-                keyid:50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
+                keyid:46:1A:32:F4:32:C8:48:51:31:04:50:C8:62:8A:10:81:A5:C5:50:0F
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         3d:e1:85:32:4c:43:1e:f2:0d:ff:d3:ec:90:97:7d:8f:9c:16:
-         b1:6e:cb:55:f1:4f:d9:46:1c:c8:d7:3c:3e:8c:2c:8a:21:b8:
-         38:a4:a9:a8:ac:69:51:32:3c:99:57:f8:73:2a:56:4a:ba:6e:
-         6a:a8:89:f0:03:14:d2:7f:d2:22:55:84:47:e7:05:9c:3b:72:
-         5d:39:02:b0:fc:68:90:14:02:12:d8:9b:85:1c:cf:77:92:c7:
-         73:80:38:e4:f4:f9:72:b7:dd:ca:0f:3d:f2:1c:6a:82:1f:21:
-         90:d3:e3:77:e5:ee:e9:0e:23:9e:69:f6:29:38:51:4f:e9:73:
-         7d:3d:32:54:b2:96:04:9b:62:36:99:8b:ea:9c:3f:87:7f:5e:
-         e8:ed:28:c8:15:ac:59:f8:f5:d9:3b:b3:fd:d4:a9:e4:55:1b:
-         07:ee:d9:18:77:d4:68:8d:b0:ce:a3:60:fe:60:2c:ca:b4:2f:
-         08:8a:19:1a:fc:a3:6b:1b:b4:72:28:7a:63:cc:cc:cd:18:ae:
-         99:86:4d:67:12:48:a6:33:f3:19:ce:fa:5a:a5:d7:0d:4d:50:
-         c6:1f:f2:d9:e6:41:d6:29:4a:a6:3c:ff:80:4f:e6:e8:90:f5:
-         ab:cb:bf:93:3b:90:da:e6:fb:d5:59:c3:9f:ec:91:bf:3e:0a:
-         a3:23:ef:ee
+         73:94:b4:6a:84:52:2d:22:d3:93:bf:69:87:be:34:56:5f:7c:
+         21:54:08:3c:38:54:5e:90:1a:76:da:8c:9d:3f:5a:64:6a:5e:
+         96:0e:bc:a6:6c:22:13:22:7d:64:a5:12:a9:eb:15:53:70:74:
+         f6:7e:60:84:3e:60:4c:b5:04:8f:ba:36:69:87:7b:55:c6:52:
+         48:62:9a:aa:0b:c5:1e:17:6b:ca:b2:46:04:34:e7:be:71:f5:
+         50:a3:70:e9:2d:f3:d6:3d:b0:49:3e:aa:d6:3b:10:4e:95:e1:
+         a6:dc:99:b6:bc:c2:d9:d0:93:60:99:d1:82:6b:2d:88:3b:1f:
+         7c:f4:32:2a:47:02:4c:2b:18:e6:62:e4:6e:ba:cc:37:24:61:
+         2e:8a:44:17:3d:f6:22:62:ce:c1:1c:e8:98:82:3a:e5:32:9f:
+         56:69:1b:4c:cf:bd:0d:4c:cc:ed:46:2f:72:1b:cd:c9:40:94:
+         86:91:ee:ff:64:5e:79:d7:c4:32:2a:84:ff:31:ec:c4:c9:ef:
+         0e:93:23:f7:ce:e5:bb:97:c1:9f:88:c8:c2:95:3f:1b:bf:29:
+         d9:92:76:aa:5e:ed:2c:aa:d4:f7:c5:32:70:ee:2c:2d:f8:46:
+         36:ed:40:43:51:fb:18:10:bf:8f:cd:c4:d0:b2:10:66:08:78:
+         71:b0:dd:41
 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkJcieL9eS7M+4UHdoR
-fLHxUzqjdz+y9R+2I6Np+J1Sl0ySrwdGxYI/l6Wy/OCzPilT5XUHBDB7u1Wjr+zD
-vaDF8VhLqFp3Scf8ohOXXDqVWJuVTKAYszoYHf5fwceb05oN80ymPSghUJ2ukK6q
-liPWT5vs/1lnCv+Kid+8mf/2dbXax3nYVMjzljrG6WAM7p5S4elfWB4poxrDT5GM
-LoUzh/DHxnSRzPvdyh5xb+LBQbzv6H9IB6lcqiFgQ/0+mItMjZVVSDs1Gir04++F
-ARHE9KMV42jfu5T5JhA1g5aDAM7PcdTpARiAwt3wnVL2+hHeoX952ROm6zM+BFe2
-dbkCAwEAAaOByzCByDAdBgNVHQ4EFgQUUCUHvhLIohgvMiFZzCtap04ZXVUwHwYD
-VR0jBBgwFoAUUCUHvhLIohgvMiFZzCtap04ZXVUwNwYIKwYBBQUHAQEEKzApMCcG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 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA94YUyTEMe
-8g3/0+yQl32PnBaxbstV8U/ZRhzI1zw+jCyKIbg4pKmorGlRMjyZV/hzKlZKum5q
-qInwAxTSf9IiVYRH5wWcO3JdOQKw/GiQFAIS2JuFHM93ksdzgDjk9Plyt93KDz3y
-HGqCHyGQ0+N35e7pDiOeafYpOFFP6XN9PTJUspYEm2I2mYvqnD+Hf17o7SjIFaxZ
-+PXZO7P91KnkVRsH7tkYd9RojbDOo2D+YCzKtC8Iihka/KNrG7RyKHpjzMzNGK6Z
-hk1nEkimM/MZzvpapdcNTVDGH/LZ5kHWKUqmPP+AT+bokPWry7+TO5Da5vvVWcOf
-7JG/PgqjI+/u
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBzlLRqhFIt
+ItOTv2mHvjRWX3whVAg8OFRekBp22oydP1pkal6WDrymbCITIn1kpRKp6xVTcHT2
+fmCEPmBMtQSPujZph3tVxlJIYpqqC8UeF2vKskYENOe+cfVQo3DpLfPWPbBJPqrW
+OxBOleGm3Jm2vMLZ0JNgmdGCay2IOx989DIqRwJMKxjmYuRuusw3JGEuikQXPfYi
+Ys7BHOiYgjrlMp9WaRtMz70NTMztRi9yG83JQJSGke7/ZF5518QyKoT/MezEye8O
+kyP3zuW7l8GfiMjClT8bvynZknaqXu0sqtT3xTJw7iwt+EY27UBDUfsYEL+PzcTQ
+shBmCHhxsN1B
 -----END TRUST_ANCHOR_UNCONSTRAINED-----
 
 150302120000Z
 -----BEGIN TIME-----
 MTUwMzAyMTIwMDAwWg==
 -----END TIME-----
 
 FAIL
 -----BEGIN VERIFY_RESULT-----
 RkFJTA==
 -----END VERIFY_RESULT-----
 
+serverAuth
+-----BEGIN KEY_PURPOSE-----
+c2VydmVyQXV0aA==
+-----END KEY_PURPOSE-----
+
 ----- Certificate i=0 (CN=Target) -----
 ERROR: Unconsumed critical extension
   oid: 2A0304
   value: 01020304
 
 
 -----BEGIN ERRORS-----
 LS0tLS0gQ2VydGlmaWNhdGUgaT0wIChDTj1UYXJnZXQpIC0tLS0tCkVSUk9SOiBVbmNvbnN1bWVkIGNyaXRpY2FsIGV4dGVuc2lvbgogIG9pZDogMkEwMzA0CiAgdmFsdWU6IDAxMDIwMzA0Cgo=
 -----END ERRORS-----