Refactor how net/data/verify_certificate_chain_unittest/*

net/data/verify_certificate_chain_unittest/intermediate-restricts-eku-ok.pem

-[Created by: generate-intermediate-restricts-eku-ok.py]
-
-Certificate chain with 1 intermediate and a trusted root. The intermediate
-restricts the EKU to serverAuth, and the target has serverAuth +
-clientAuth. Verification is expected to succeed as this is consistent with
-the requested key purpose.
-
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: CN=Intermediate
-        Validity
-            Not Before: Jan  1 12:00:00 2015 GMT
-            Not After : Jan  1 12:00:00 2016 GMT
-        Subject: CN=Target
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:b2:4d:55:36:b9:dd:25:6c:a3:e3:5c:2f:95:97:
-                    ac:3a:df:2d:6a:63:03:f7:e9:b2:a7:4d:f3:7d:21:
-                    78:af:80:cf:34:6a:47:ba:05:0d:90:ad:5d:5a:86:
-                    9d:c2:5b:7f:47:8c:0a:44:b6:de:d7:c1:17:e7:0f:
-                    44:ea:88:05:70:5d:81:95:81:44:24:b3:70:38:fc:
-                    ab:53:1e:41:75:0e:72:4d:3c:89:16:3e:b9:bf:e5:
-                    9d:5e:af:56:ef:50:a0:e0:da:bd:94:c0:39:07:52:
-                    b4:fb:3d:6a:4f:71:0e:4d:55:bb:69:4a:31:5b:4a:
-                    16:60:fa:fd:40:34:30:70:eb:12:d0:33:0a:9d:27:
-                    68:ba:2f:bf:51:7c:5f:fb:04:fd:c6:08:25:1c:44:
-                    a0:a8:4b:02:7c:fc:8c:ab:b4:e9:8c:c9:bc:ab:13:
-                    3c:1e:75:0d:09:cf:c9:56:db:2a:12:5c:e0:e1:58:
-                    70:95:df:99:9e:c9:21:b3:ba:3c:50:5a:26:a2:95:
-                    12:8b:9f:8e:f1:76:ea:85:94:ac:ef:14:44:b4:d9:
-                    44:28:a3:f1:60:c0:7b:e8:1f:01:bd:f7:78:bf:ef:
-                    cd:75:ee:dd:2d:e8:7d:5e:97:3c:b7:06:b0:16:6c:
-                    2d:0b:f2:07:7f:d9:43:f0:79:58:fe:53:41:c2:89:
-                    f6:9d
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Subject Key Identifier: 
-                D5:E6:09:2D:66:DD:8D:8F:23:BF:FA:0F:9A:19:29:A4:B0:3B:CA:25
-            X509v3 Authority Key Identifier: 
-                keyid:A8:E7:C3:7D:1D:87:34:60:3C:F6:5E:AD:96:99:05:CF:A2:06:2F:65
-
-            Authority Information Access: 
-                CA Issuers - URI:http://url-for-aia/Intermediate.cer
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://url-for-crl/Intermediate.crl
-
-            X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-    Signature Algorithm: sha256WithRSAEncryption
-         0e:b4:d0:41:86:b0:77:cb:da:ba:08:9c:cf:73:a1:4f:d0:0e:
-         62:29:a4:88:05:10:f1:e4:96:22:b5:80:47:56:5b:3e:52:69:
-         7b:ae:82:cb:cd:00:10:f0:ea:88:49:3e:2d:e7:8e:a8:47:7f:
-         af:af:69:2a:7e:69:12:55:48:40:88:31:04:0f:b6:85:69:db:
-         7a:ce:06:a4:7c:bd:f0:36:0b:3c:1c:19:d3:76:ec:77:51:cc:
-         ec:72:21:ed:d8:fb:44:2f:6d:fd:1f:ec:ef:6d:87:c9:87:e2:
-         97:6d:f8:7b:10:6d:1c:ad:be:07:7e:d4:b9:10:47:99:9e:f7:
-         bf:e6:13:c2:b3:55:5e:52:5e:62:a6:3d:4d:c2:5a:b6:f7:24:
-         dc:d3:19:eb:9b:52:7b:36:87:33:c1:eb:b7:da:94:d7:09:b4:
-         e8:9c:fd:19:b8:ab:ff:be:2d:20:06:11:52:ae:c9:30:12:43:
-         20:50:6c:b5:d0:cc:2e:85:ed:81:c8:cd:a7:be:f2:95:1c:c8:
-         36:ea:4e:37:a9:b0:41:68:e2:a7:46:b2:d5:f8:95:94:85:12:
-         98:a0:da:a9:12:8b:bf:2c:65:2c:48:b3:11:ca:69:b0:e3:80:
-         9b:36:c1:82:33:51:a2:8c:71:ec:9b:83:cf:4f:bf:23:d4:a5:
-         41:63:f5:40
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTVU2
-ud0lbKPjXC+Vl6w63y1qYwP36bKnTfN9IXivgM80ake6BQ2QrV1ahp3CW39HjApE
-tt7XwRfnD0TqiAVwXYGVgUQks3A4/KtTHkF1DnJNPIkWPrm/5Z1er1bvUKDg2r2U
-wDkHUrT7PWpPcQ5NVbtpSjFbShZg+v1ANDBw6xLQMwqdJ2i6L79RfF/7BP3GCCUc
-RKCoSwJ8/IyrtOmMybyrEzwedQ0Jz8lW2yoSXODhWHCV35meySGzujxQWiailRKL
-n47xduqFlKzvFES02UQoo/FgwHvoHwG993i/78117t0t6H1elzy3BrAWbC0L8gd/
-2UPweVj+U0HCifadAgMBAAGjgekwgeYwHQYDVR0OBBYEFNXmCS1m3Y2PI7/6D5oZ
-KaSwO8olMB8GA1UdIwQYMBaAFKjnw30dhzRgPPZerZaZBc+iBi9lMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEADrTQQYawd8vaugicz3Oh
-T9AOYimkiAUQ8eSWIrWAR1ZbPlJpe66Cy80AEPDqiEk+LeeOqEd/r69pKn5pElVI
-QIgxBA+2hWnbes4GpHy98DYLPBwZ03bsd1HM7HIh7dj7RC9t/R/s722HyYfil234
-exBtHK2+B37UuRBHmZ73v+YTwrNVXlJeYqY9TcJatvck3NMZ65tSezaHM8Hrt9qU
-1wm06Jz9Gbir/74tIAYRUq7JMBJDIFBstdDMLoXtgcjNp77ylRzINupON6mwQWji
-p0ay1fiVlIUSmKDaqRKLvyxlLEizEcppsOOAmzbBgjNRooxx7JuDz0+/I9SlQWP1
-QA==
------END CERTIFICATE-----
-
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 2 (0x2)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: CN=Root
-        Validity
-            Not Before: Jan  1 12:00:00 2015 GMT
-            Not After : Jan  1 12:00:00 2016 GMT
-        Subject: CN=Intermediate
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:c7:a6:98:a9:bd:8e:27:ab:e7:f5:9e:36:a4:a4:
-                    f7:b7:59:0f:02:0a:5a:a7:0a:04:d9:d2:df:43:e4:
-                    13:61:c7:41:33:cf:1b:3e:e5:f6:74:36:6b:db:27:
-                    c5:cf:00:3d:c6:dd:2a:dd:1b:1b:ca:fd:d0:4b:a3:
-                    90:92:66:19:36:4b:bb:9b:dc:74:a6:fb:23:d2:8f:
-                    6e:74:35:1a:df:13:7a:40:df:a1:12:f3:09:a2:70:
-                    39:a0:e2:5c:0e:b6:9a:4c:53:f8:2e:12:fb:ea:db:
-                    9d:6a:6e:0e:41:2a:3d:b3:da:3e:7e:9b:2a:1a:2a:
-                    e5:70:1b:19:b2:10:d1:12:3d:e1:9c:f3:b0:05:40:
-                    79:c3:fb:44:41:80:01:10:2e:99:72:5f:f5:39:1e:
-                    5d:f4:2c:22:b5:c1:9b:ec:21:29:50:f9:36:3b:0e:
-                    8a:a9:0b:d2:e7:ce:74:16:10:74:4e:f7:f5:bc:14:
-                    ae:af:79:4a:82:f5:2a:e2:2a:e4:f1:e1:2c:e7:91:
-                    04:fd:a5:38:09:f6:21:ce:62:2e:65:0d:1f:30:3c:
-                    11:fe:e5:79:85:51:18:95:e6:9d:15:82:f5:22:d1:
-                    77:b5:4d:64:82:86:84:8c:59:90:86:b4:64:1e:a6:
-                    cc:20:d8:9b:09:b9:4f:7d:57:52:b6:00:9f:b6:d2:
-                    b3:ef
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Subject Key Identifier: 
-                A8:E7:C3:7D:1D:87:34:60:3C:F6:5E:AD:96:99:05:CF:A2:06:2F:65
-            X509v3 Authority Key Identifier: 
-                keyid:A1:4F:77:20:47:E0:DD:E5:33:AF:6C:77:9A:CF:33:CA:99:39:B9:BB
-
-            Authority Information Access: 
-                CA Issuers - URI:http://url-for-aia/Root.cer
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://url-for-crl/Root.crl
-
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication
-    Signature Algorithm: sha256WithRSAEncryption
-         86:0d:ee:57:98:f7:94:52:50:89:78:60:a9:5b:8c:f4:de:a9:
-         67:0d:af:b2:85:c7:73:97:c1:fe:62:a6:50:26:05:23:db:5d:
-         16:87:79:ae:10:d7:5c:cf:56:a3:ba:e3:ad:7c:7a:75:5d:0a:
-         00:66:d1:d2:25:1e:13:4e:87:96:11:a2:04:7c:77:90:35:8a:
-         21:28:71:82:62:1f:00:4e:d0:44:57:ac:0d:33:64:65:fd:27:
-         61:5c:53:ee:22:21:cf:1e:92:a0:4a:ad:aa:87:2e:c9:65:8f:
-         c3:ec:b1:6e:5e:82:a9:60:a0:7c:74:c6:93:6a:16:c0:76:32:
-         51:60:ab:83:1e:8a:ba:af:80:51:67:15:9f:6c:8b:65:0f:95:
-         44:60:fb:34:af:06:ab:48:2c:78:9f:6b:2f:fb:af:a8:cf:8e:
-         b4:b2:81:d4:e2:bc:bf:84:b9:2e:45:74:58:f9:b1:9d:b9:06:
-         b2:00:09:e9:8d:26:58:06:a7:09:c0:ba:bd:39:ea:83:2d:2c:
-         65:e1:44:19:67:f5:55:bc:81:eb:87:91:cf:1b:5b:24:6b:f3:
-         a9:2a:b4:b3:40:13:3a:2f:ee:53:04:09:de:a7:98:54:2b:77:
-         fc:78:14:8e:1d:6a:a7:db:18:a9:42:d4:a8:23:22:9a:d5:2a:
-         b9:d4:70:36
------BEGIN CERTIFICATE-----
-MIIDgjCCAmqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6aYqb2O
-J6vn9Z42pKT3t1kPAgpapwoE2dLfQ+QTYcdBM88bPuX2dDZr2yfFzwA9xt0q3Rsb
-yv3QS6OQkmYZNku7m9x0pvsj0o9udDUa3xN6QN+hEvMJonA5oOJcDraaTFP4LhL7
-6tudam4OQSo9s9o+fpsqGirlcBsZshDREj3hnPOwBUB5w/tEQYABEC6Zcl/1OR5d
-9CwitcGb7CEpUPk2Ow6KqQvS5850FhB0Tvf1vBSur3lKgvUq4irk8eEs55EE/aU4
-CfYhzmIuZQ0fMDwR/uV5hVEYleadFYL1ItF3tU1kgoaEjFmQhrRkHqbMINibCblP
-fVdStgCfttKz7wIDAQABo4HgMIHdMB0GA1UdDgQWBBSo58N9HYc0YDz2Xq2WmQXP
-ogYvZTAfBgNVHSMEGDAWgBShT3cgR+Dd5TOvbHeazzPKmTm5uzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wEwYDVR0lBAwwCgYIKwYBBQUH
-AwEwDQYJKoZIhvcNAQELBQADggEBAIYN7leY95RSUIl4YKlbjPTeqWcNr7KFx3OX
-wf5iplAmBSPbXRaHea4Q11zPVqO64618enVdCgBm0dIlHhNOh5YRogR8d5A1iiEo
-cYJiHwBO0ERXrA0zZGX9J2FcU+4iIc8ekqBKraqHLsllj8PssW5egqlgoHx0xpNq
-FsB2MlFgq4MeirqvgFFnFZ9si2UPlURg+zSvBqtILHifay/7r6jPjrSygdTivL+E
-uS5FdFj5sZ25BrIACemNJlgGpwnAur056oMtLGXhRBln9VW8geuHkc8bWyRr86kq
-tLNAEzov7lMECd6nmFQrd/x4FI4daqfbGKlC1KgjIprVKrnUcDY=
------END CERTIFICATE-----
-
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: CN=Root
-        Validity
-            Not Before: Jan  1 12:00:00 2015 GMT
-            Not After : Jan  1 12:00:00 2016 GMT
-        Subject: CN=Root
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:b3:35:83:74:7b:e7:c4:56:bb:33:c3:b5:19:86:
-                    79:48:54:e0:02:be:10:8a:d4:74:9c:51:31:1a:7c:
-                    5c:bd:c7:29:4c:e7:65:2e:f4:41:7d:b9:02:10:38:
-                    9c:4d:dc:3e:47:bc:76:50:bc:12:16:ca:d6:97:e9:
-                    35:1c:88:f6:92:8a:66:2f:7f:8a:dd:8d:9b:2b:55:
-                    cd:5c:d3:18:b6:2f:3e:c2:a1:59:8f:cb:18:ad:c8:
-                    aa:a3:ae:d2:98:92:a0:50:44:f0:7b:13:73:47:69:
-                    7d:f3:1a:49:37:29:9f:4a:40:1f:1b:28:00:82:f8:
-                    9d:80:02:fd:e6:37:d8:a9:6b:5a:3b:e2:ce:d8:a0:
-                    40:7a:27:30:4c:eb:0a:42:a6:1a:bc:20:bf:3f:3a:
-                    b0:ab:ee:38:7b:c9:07:c2:6b:87:54:cb:9e:1c:60:
-                    36:a5:dc:01:d1:44:0d:e2:ff:23:1d:47:d7:17:89:
-                    1e:38:fa:09:30:f4:19:a0:be:60:4a:a9:f8:62:4a:
-                    bf:f1:ca:01:33:17:f0:78:f3:fa:19:58:11:cb:ef:
-                    f5:20:2e:91:80:85:11:ec:ac:55:51:9f:64:6a:87:
-                    68:0d:9f:d7:93:0a:7a:8a:1c:7d:67:10:73:91:f2:
-                    0c:81:c6:e8:93:5a:d7:b1:65:2c:e9:54:33:5e:39:
-                    b7:9d
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Subject Key Identifier: 
-                A1:4F:77:20:47:E0:DD:E5:33:AF:6C:77:9A:CF:33:CA:99:39:B9:BB
-            X509v3 Authority Key Identifier: 
-                keyid:A1:4F:77:20:47:E0:DD:E5:33:AF:6C:77:9A:CF:33:CA:99:39:B9:BB
-
-            Authority Information Access: 
-                CA Issuers - URI:http://url-for-aia/Root.cer
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://url-for-crl/Root.crl
-
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-    Signature Algorithm: sha256WithRSAEncryption
-         64:60:7d:50:48:0f:3b:0d:00:93:1f:a8:95:5b:0b:55:7e:1c:
-         bd:76:cd:f8:26:49:ec:e5:e2:16:08:29:ef:cd:0d:57:c0:f7:
-         26:a3:80:cd:0d:61:8d:31:98:25:f3:8c:9a:e0:0d:d7:eb:bb:
-         aa:94:13:99:7c:8c:fc:ff:ea:b6:bc:66:36:9f:d8:50:ee:e1:
-         f6:75:a9:e0:30:12:38:70:a6:ca:72:15:46:d0:70:0c:92:f7:
-         8d:5e:ab:32:ef:76:cd:33:ed:a9:b2:1e:7c:da:ad:c3:43:70:
-         2b:6a:20:aa:47:89:9a:05:31:bc:13:e4:8e:56:1c:99:27:85:
-         2b:98:08:ec:54:3f:e9:4b:50:b0:b9:d3:86:2f:c3:8f:a3:61:
-         d4:0a:39:ae:55:0f:d1:57:22:05:53:46:88:68:92:22:f7:6b:
-         e4:62:98:ad:7b:37:e4:ce:5e:ac:97:11:93:69:ad:d3:3c:db:
-         ed:dc:e9:3e:82:14:0c:1f:55:79:5f:78:82:0f:c8:72:2a:19:
-         3b:92:a7:80:bd:4d:c7:d7:d2:be:36:e9:d2:56:17:e7:8e:71:
-         25:4c:97:03:62:78:45:f4:ba:6a:e5:61:e9:a6:13:26:3d:f9:
-         14:90:7f:2d:83:70:bd:58:20:a9:40:a0:a5:81:55:40:d0:ce:
-         f0:81:b5:23
------BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALM1g3R758RWuzPDtRmG
-eUhU4AK+EIrUdJxRMRp8XL3HKUznZS70QX25AhA4nE3cPke8dlC8EhbK1pfpNRyI
-9pKKZi9/it2NmytVzVzTGLYvPsKhWY/LGK3IqqOu0piSoFBE8HsTc0dpffMaSTcp
-n0pAHxsoAIL4nYAC/eY32KlrWjviztigQHonMEzrCkKmGrwgvz86sKvuOHvJB8Jr
-h1TLnhxgNqXcAdFEDeL/Ix1H1xeJHjj6CTD0GaC+YEqp+GJKv/HKATMX8Hjz+hlY
-Ecvv9SAukYCFEeysVVGfZGqHaA2f15MKeoocfWcQc5HyDIHG6JNa17FlLOlUM145
-t50CAwEAAaOByzCByDAdBgNVHQ4EFgQUoU93IEfg3eUzr2x3ms8zypk5ubswHwYD
-VR0jBBgwFoAUoU93IEfg3eUzr2x3ms8zypk5ubswNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBkYH1QSA87
-DQCTH6iVWwtVfhy9ds34Jkns5eIWCCnvzQ1XwPcmo4DNDWGNMZgl84ya4A3X67uq
-lBOZfIz8/+q2vGY2n9hQ7uH2dangMBI4cKbKchVG0HAMkveNXqsy73bNM+2psh58
-2q3DQ3AraiCqR4maBTG8E+SOVhyZJ4UrmAjsVD/pS1CwudOGL8OPo2HUCjmuVQ/R
-VyIFU0aIaJIi92vkYpitezfkzl6slxGTaa3TPNvt3Ok+ghQMH1V5X3iCD8hyKhk7
-kqeAvU3H19K+NunSVhfnjnElTJcDYnhF9Lpq5WHpphMmPfkUkH8tg3C9WCCpQKCl
-gVVA0M7wgbUj
------END TRUST_ANCHOR_UNCONSTRAINED-----
-
-150302120000Z
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
-SUCCESS
------BEGIN VERIFY_RESULT-----
-U1VDQ0VTUw==
------END VERIFY_RESULT-----
-
-serverAuth
------BEGIN KEY_PURPOSE-----
-c2VydmVyQXV0aA==
------END KEY_PURPOSE-----