| OLD | NEW |
| 1 [Created by: generate-intermediate-lacks-signing-key-usage.py] | 1 [Created by: generate-chains.py] |
| 2 | 2 |
| 3 Certificate chain with 1 intermediate and a trusted root. The intermediate | 3 Certificate chain with 1 intermediate and a trusted root. The intermediate |
| 4 contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit. | 4 contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit. |
| 5 Hence validation is expected to fail. | 5 Hence validation is expected to fail. |
| 6 | 6 |
| 7 Certificate: | 7 Certificate: |
| 8 Data: | 8 Data: |
| 9 Version: 3 (0x2) | 9 Version: 3 (0x2) |
| 10 Serial Number: 1 (0x1) | 10 Serial Number: 1 (0x1) |
| 11 Signature Algorithm: sha256WithRSAEncryption | 11 Signature Algorithm: sha256WithRSAEncryption |
| (...skipping 231 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 243 75:0b:39:6f:bb:bd:0f:18:7d:f7:8e:34:e9:c3:4c:30:7b:ae: | 243 75:0b:39:6f:bb:bd:0f:18:7d:f7:8e:34:e9:c3:4c:30:7b:ae: |
| 244 2f:b5:06:9a:c1:a7:ec:bd:87:13:f7:27:00:89:c7:b6:e4:f1: | 244 2f:b5:06:9a:c1:a7:ec:bd:87:13:f7:27:00:89:c7:b6:e4:f1: |
| 245 6b:76:52:7d:75:c1:7b:58:67:10:5b:96:83:b4:ab:13:ad:8a: | 245 6b:76:52:7d:75:c1:7b:58:67:10:5b:96:83:b4:ab:13:ad:8a: |
| 246 af:16:b2:88:78:85:9e:86:89:f6:6b:02:4b:23:38:66:8b:39: | 246 af:16:b2:88:78:85:9e:86:89:f6:6b:02:4b:23:38:66:8b:39: |
| 247 ad:29:a6:ff:68:8d:62:a3:b0:46:e9:2e:e7:d9:01:c0:52:59: | 247 ad:29:a6:ff:68:8d:62:a3:b0:46:e9:2e:e7:d9:01:c0:52:59: |
| 248 02:7d:d1:53:b9:8f:38:4a:f9:56:16:3e:0a:5b:b1:32:d0:2e: | 248 02:7d:d1:53:b9:8f:38:4a:f9:56:16:3e:0a:5b:b1:32:d0:2e: |
| 249 a4:75:3f:ee:fc:65:60:c0:5f:ac:81:b8:e4:dd:c6:df:87:8a: | 249 a4:75:3f:ee:fc:65:60:c0:5f:ac:81:b8:e4:dd:c6:df:87:8a: |
| 250 4a:ad:4d:30:a4:59:bb:ed:66:fa:c5:e5:b8:a3:7d:4c:eb:a3: | 250 4a:ad:4d:30:a4:59:bb:ed:66:fa:c5:e5:b8:a3:7d:4c:eb:a3: |
| 251 90:e0:03:b1:ae:35:5a:f8:29:56:9f:d7:b9:ae:79:20:4a:75: | 251 90:e0:03:b1:ae:35:5a:f8:29:56:9f:d7:b9:ae:79:20:4a:75: |
| 252 bc:4d:9f:c8 | 252 bc:4d:9f:c8 |
| 253 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- | 253 -----BEGIN CERTIFICATE----- |
| 254 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 254 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| 255 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | 255 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| 256 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu4Qe7V2tJF1klgIBT7 | 256 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu4Qe7V2tJF1klgIBT7 |
| 257 LKnel1COHC+CwPWtrljKRsvlzBlP408Vf0HUtzTzPdqGbRrQq/B2guql2/vC41as | 257 LKnel1COHC+CwPWtrljKRsvlzBlP408Vf0HUtzTzPdqGbRrQq/B2guql2/vC41as |
| 258 SvAzV9WCnnLbLDajG9mx5iccmH5CN7YhvVoYYbxvd9cMBxM5cKFGCJ8SBcmspFd4 | 258 SvAzV9WCnnLbLDajG9mx5iccmH5CN7YhvVoYYbxvd9cMBxM5cKFGCJ8SBcmspFd4 |
| 259 tY+8bcqysCT//ZxhnygvfrvS4yqB7fW3hMm++gQ8KegfymhECCfj/LrOdBlZxc2e | 259 tY+8bcqysCT//ZxhnygvfrvS4yqB7fW3hMm++gQ8KegfymhECCfj/LrOdBlZxc2e |
| 260 y6NK5Q/ZeDi0jMhfppNIE4PMqdJgRWENACKEiOrj3drwBcgJOrI+W24+xhhH/xhU | 260 y6NK5Q/ZeDi0jMhfppNIE4PMqdJgRWENACKEiOrj3drwBcgJOrI+W24+xhhH/xhU |
| 261 tsBu/N91Sy8jMKGO4kuLY/yAg2LryaX+7SY3rVnveWotZ9b5XIheGWIFVZom5WGz | 261 tsBu/N91Sy8jMKGO4kuLY/yAg2LryaX+7SY3rVnveWotZ9b5XIheGWIFVZom5WGz |
| 262 9mUCAwEAAaOByzCByDAdBgNVHQ4EFgQUzJRBz6n3x1h8N+PFNymbErPf1TswHwYD | 262 9mUCAwEAAaOByzCByDAdBgNVHQ4EFgQUzJRBz6n3x1h8N+PFNymbErPf1TswHwYD |
| 263 VR0jBBgwFoAUzJRBz6n3x1h8N+PFNymbErPf1TswNwYIKwYBBQUHAQEEKzApMCcG | 263 VR0jBBgwFoAUzJRBz6n3x1h8N+PFNymbErPf1TswNwYIKwYBBQUHAQEEKzApMCcG |
| 264 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 264 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| 265 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 265 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| 266 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAzUs22ZW4c | 266 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAzUs22ZW4c |
| 267 BH2foXwTIJq/xMnP9g/BvR2mpmFVFz0AgB4mUZc1p+HFopQrqHjA0Ae5B6ufgKOi | 267 BH2foXwTIJq/xMnP9g/BvR2mpmFVFz0AgB4mUZc1p+HFopQrqHjA0Ae5B6ufgKOi |
| 268 eY8Iwz06pAD1agZMMzTUMjXN2XCtkYYAUMAXpM4X+LeEAr11Czlvu70PGH33jjTp | 268 eY8Iwz06pAD1agZMMzTUMjXN2XCtkYYAUMAXpM4X+LeEAr11Czlvu70PGH33jjTp |
| 269 w0wwe64vtQaawafsvYcT9ycAice25PFrdlJ9dcF7WGcQW5aDtKsTrYqvFrKIeIWe | 269 w0wwe64vtQaawafsvYcT9ycAice25PFrdlJ9dcF7WGcQW5aDtKsTrYqvFrKIeIWe |
| 270 hon2awJLIzhmizmtKab/aI1io7BG6S7n2QHAUlkCfdFTuY84SvlWFj4KW7Ey0C6k | 270 hon2awJLIzhmizmtKab/aI1io7BG6S7n2QHAUlkCfdFTuY84SvlWFj4KW7Ey0C6k |
| 271 dT/u/GVgwF+sgbjk3cbfh4pKrU0wpFm77Wb6xeW4o31M66OQ4AOxrjVa+ClWn9e5 | 271 dT/u/GVgwF+sgbjk3cbfh4pKrU0wpFm77Wb6xeW4o31M66OQ4AOxrjVa+ClWn9e5 |
| 272 rnkgSnW8TZ/I | 272 rnkgSnW8TZ/I |
| 273 -----END TRUST_ANCHOR_UNCONSTRAINED----- | 273 -----END CERTIFICATE----- |
| 274 | |
| 275 150302120000Z | |
| 276 -----BEGIN TIME----- | |
| 277 MTUwMzAyMTIwMDAwWg== | |
| 278 -----END TIME----- | |
| 279 | |
| 280 FAIL | |
| 281 -----BEGIN VERIFY_RESULT----- | |
| 282 RkFJTA== | |
| 283 -----END VERIFY_RESULT----- | |
| 284 | |
| 285 serverAuth | |
| 286 -----BEGIN KEY_PURPOSE----- | |
| 287 c2VydmVyQXV0aA== | |
| 288 -----END KEY_PURPOSE----- | |
| 289 | |
| 290 ----- Certificate i=1 (CN=Intermediate) ----- | |
| 291 ERROR: keyCertSign bit is not set | |
| 292 | |
| 293 | |
| 294 -----BEGIN ERRORS----- | |
| 295 LS0tLS0gQ2VydGlmaWNhdGUgaT0xIChDTj1JbnRlcm1lZGlhdGUpIC0tLS0tCkVSUk9SOiBrZXlDZXJ0
U2lnbiBiaXQgaXMgbm90IHNldAoK | |
| 296 -----END ERRORS----- | |
| OLD | NEW |