OLD | NEW |
1 [Created by: generate-intermediate-lacks-signing-key-usage.py] | 1 [Created by: generate-chains.py] |
2 | 2 |
3 Certificate chain with 1 intermediate and a trusted root. The intermediate | 3 Certificate chain with 1 intermediate and a trusted root. The intermediate |
4 contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit. | 4 contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit. |
5 Hence validation is expected to fail. | 5 Hence validation is expected to fail. |
6 | 6 |
7 Certificate: | 7 Certificate: |
8 Data: | 8 Data: |
9 Version: 3 (0x2) | 9 Version: 3 (0x2) |
10 Serial Number: 1 (0x1) | 10 Serial Number: 1 (0x1) |
11 Signature Algorithm: sha256WithRSAEncryption | 11 Signature Algorithm: sha256WithRSAEncryption |
(...skipping 231 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
243 75:0b:39:6f:bb:bd:0f:18:7d:f7:8e:34:e9:c3:4c:30:7b:ae: | 243 75:0b:39:6f:bb:bd:0f:18:7d:f7:8e:34:e9:c3:4c:30:7b:ae: |
244 2f:b5:06:9a:c1:a7:ec:bd:87:13:f7:27:00:89:c7:b6:e4:f1: | 244 2f:b5:06:9a:c1:a7:ec:bd:87:13:f7:27:00:89:c7:b6:e4:f1: |
245 6b:76:52:7d:75:c1:7b:58:67:10:5b:96:83:b4:ab:13:ad:8a: | 245 6b:76:52:7d:75:c1:7b:58:67:10:5b:96:83:b4:ab:13:ad:8a: |
246 af:16:b2:88:78:85:9e:86:89:f6:6b:02:4b:23:38:66:8b:39: | 246 af:16:b2:88:78:85:9e:86:89:f6:6b:02:4b:23:38:66:8b:39: |
247 ad:29:a6:ff:68:8d:62:a3:b0:46:e9:2e:e7:d9:01:c0:52:59: | 247 ad:29:a6:ff:68:8d:62:a3:b0:46:e9:2e:e7:d9:01:c0:52:59: |
248 02:7d:d1:53:b9:8f:38:4a:f9:56:16:3e:0a:5b:b1:32:d0:2e: | 248 02:7d:d1:53:b9:8f:38:4a:f9:56:16:3e:0a:5b:b1:32:d0:2e: |
249 a4:75:3f:ee:fc:65:60:c0:5f:ac:81:b8:e4:dd:c6:df:87:8a: | 249 a4:75:3f:ee:fc:65:60:c0:5f:ac:81:b8:e4:dd:c6:df:87:8a: |
250 4a:ad:4d:30:a4:59:bb:ed:66:fa:c5:e5:b8:a3:7d:4c:eb:a3: | 250 4a:ad:4d:30:a4:59:bb:ed:66:fa:c5:e5:b8:a3:7d:4c:eb:a3: |
251 90:e0:03:b1:ae:35:5a:f8:29:56:9f:d7:b9:ae:79:20:4a:75: | 251 90:e0:03:b1:ae:35:5a:f8:29:56:9f:d7:b9:ae:79:20:4a:75: |
252 bc:4d:9f:c8 | 252 bc:4d:9f:c8 |
253 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- | 253 -----BEGIN CERTIFICATE----- |
254 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | 254 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
255 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | 255 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
256 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu4Qe7V2tJF1klgIBT7 | 256 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu4Qe7V2tJF1klgIBT7 |
257 LKnel1COHC+CwPWtrljKRsvlzBlP408Vf0HUtzTzPdqGbRrQq/B2guql2/vC41as | 257 LKnel1COHC+CwPWtrljKRsvlzBlP408Vf0HUtzTzPdqGbRrQq/B2guql2/vC41as |
258 SvAzV9WCnnLbLDajG9mx5iccmH5CN7YhvVoYYbxvd9cMBxM5cKFGCJ8SBcmspFd4 | 258 SvAzV9WCnnLbLDajG9mx5iccmH5CN7YhvVoYYbxvd9cMBxM5cKFGCJ8SBcmspFd4 |
259 tY+8bcqysCT//ZxhnygvfrvS4yqB7fW3hMm++gQ8KegfymhECCfj/LrOdBlZxc2e | 259 tY+8bcqysCT//ZxhnygvfrvS4yqB7fW3hMm++gQ8KegfymhECCfj/LrOdBlZxc2e |
260 y6NK5Q/ZeDi0jMhfppNIE4PMqdJgRWENACKEiOrj3drwBcgJOrI+W24+xhhH/xhU | 260 y6NK5Q/ZeDi0jMhfppNIE4PMqdJgRWENACKEiOrj3drwBcgJOrI+W24+xhhH/xhU |
261 tsBu/N91Sy8jMKGO4kuLY/yAg2LryaX+7SY3rVnveWotZ9b5XIheGWIFVZom5WGz | 261 tsBu/N91Sy8jMKGO4kuLY/yAg2LryaX+7SY3rVnveWotZ9b5XIheGWIFVZom5WGz |
262 9mUCAwEAAaOByzCByDAdBgNVHQ4EFgQUzJRBz6n3x1h8N+PFNymbErPf1TswHwYD | 262 9mUCAwEAAaOByzCByDAdBgNVHQ4EFgQUzJRBz6n3x1h8N+PFNymbErPf1TswHwYD |
263 VR0jBBgwFoAUzJRBz6n3x1h8N+PFNymbErPf1TswNwYIKwYBBQUHAQEEKzApMCcG | 263 VR0jBBgwFoAUzJRBz6n3x1h8N+PFNymbErPf1TswNwYIKwYBBQUHAQEEKzApMCcG |
264 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | 264 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
265 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | 265 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
266 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAzUs22ZW4c | 266 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAzUs22ZW4c |
267 BH2foXwTIJq/xMnP9g/BvR2mpmFVFz0AgB4mUZc1p+HFopQrqHjA0Ae5B6ufgKOi | 267 BH2foXwTIJq/xMnP9g/BvR2mpmFVFz0AgB4mUZc1p+HFopQrqHjA0Ae5B6ufgKOi |
268 eY8Iwz06pAD1agZMMzTUMjXN2XCtkYYAUMAXpM4X+LeEAr11Czlvu70PGH33jjTp | 268 eY8Iwz06pAD1agZMMzTUMjXN2XCtkYYAUMAXpM4X+LeEAr11Czlvu70PGH33jjTp |
269 w0wwe64vtQaawafsvYcT9ycAice25PFrdlJ9dcF7WGcQW5aDtKsTrYqvFrKIeIWe | 269 w0wwe64vtQaawafsvYcT9ycAice25PFrdlJ9dcF7WGcQW5aDtKsTrYqvFrKIeIWe |
270 hon2awJLIzhmizmtKab/aI1io7BG6S7n2QHAUlkCfdFTuY84SvlWFj4KW7Ey0C6k | 270 hon2awJLIzhmizmtKab/aI1io7BG6S7n2QHAUlkCfdFTuY84SvlWFj4KW7Ey0C6k |
271 dT/u/GVgwF+sgbjk3cbfh4pKrU0wpFm77Wb6xeW4o31M66OQ4AOxrjVa+ClWn9e5 | 271 dT/u/GVgwF+sgbjk3cbfh4pKrU0wpFm77Wb6xeW4o31M66OQ4AOxrjVa+ClWn9e5 |
272 rnkgSnW8TZ/I | 272 rnkgSnW8TZ/I |
273 -----END TRUST_ANCHOR_UNCONSTRAINED----- | 273 -----END CERTIFICATE----- |
274 | |
275 150302120000Z | |
276 -----BEGIN TIME----- | |
277 MTUwMzAyMTIwMDAwWg== | |
278 -----END TIME----- | |
279 | |
280 FAIL | |
281 -----BEGIN VERIFY_RESULT----- | |
282 RkFJTA== | |
283 -----END VERIFY_RESULT----- | |
284 | |
285 serverAuth | |
286 -----BEGIN KEY_PURPOSE----- | |
287 c2VydmVyQXV0aA== | |
288 -----END KEY_PURPOSE----- | |
289 | |
290 ----- Certificate i=1 (CN=Intermediate) ----- | |
291 ERROR: keyCertSign bit is not set | |
292 | |
293 | |
294 -----BEGIN ERRORS----- | |
295 LS0tLS0gQ2VydGlmaWNhdGUgaT0xIChDTj1JbnRlcm1lZGlhdGUpIC0tLS0tCkVSUk9SOiBrZXlDZXJ0
U2lnbiBiaXQgaXMgbm90IHNldAoK | |
296 -----END ERRORS----- | |
OLD | NEW |