OLD | NEW |
| (Empty) |
1 [Created by: generate-serverauth-ec-ku-keyencipherment.py] | |
2 | |
3 Certificate chain with 1 intermediate, a trusted root, and a target | |
4 certificate for serverAuth that has only keyEncipherment. | |
5 | |
6 Certificate: | |
7 Data: | |
8 Version: 3 (0x2) | |
9 Serial Number: 1 (0x1) | |
10 Signature Algorithm: sha256WithRSAEncryption | |
11 Issuer: CN=Intermediate | |
12 Validity | |
13 Not Before: Jan 1 12:00:00 2015 GMT | |
14 Not After : Jan 1 12:00:00 2016 GMT | |
15 Subject: CN=Target | |
16 Subject Public Key Info: | |
17 Public Key Algorithm: id-ecPublicKey | |
18 Public-Key: (384 bit) | |
19 pub: | |
20 04:47:90:06:cd:32:f1:43:64:8a:0f:a9:27:ad:8b: | |
21 72:b6:90:bf:9c:56:4f:6f:ed:bc:5a:26:81:6e:ab: | |
22 99:f5:97:cc:65:87:04:c5:9b:c7:ed:e7:d2:ec:80: | |
23 e5:8a:da:07:88:55:63:25:9b:5d:92:c4:db:2c:35: | |
24 f3:32:be:41:4e:6c:8e:53:54:eb:cf:a2:4a:0c:c4: | |
25 f8:2e:fd:0d:df:7b:13:07:28:c9:51:98:e7:22:29: | |
26 0e:cc:29:3f:d8:8e:b2 | |
27 ASN1 OID: secp384r1 | |
28 X509v3 extensions: | |
29 X509v3 Subject Key Identifier: | |
30 64:0B:31:C2:E5:A0:D5:B2:25:96:45:10:1E:24:89:74:CB:06:32:B9 | |
31 X509v3 Authority Key Identifier: | |
32 keyid:78:6F:0B:E8:82:18:AD:46:6F:21:C7:AB:0A:A3:98:2A:16:B3:57:6
7 | |
33 | |
34 Authority Information Access: | |
35 CA Issuers - URI:http://url-for-aia/Intermediate.cer | |
36 | |
37 X509v3 CRL Distribution Points: | |
38 | |
39 Full Name: | |
40 URI:http://url-for-crl/Intermediate.crl | |
41 | |
42 X509v3 Key Usage: critical | |
43 Key Encipherment | |
44 X509v3 Extended Key Usage: | |
45 TLS Web Server Authentication | |
46 Signature Algorithm: sha256WithRSAEncryption | |
47 f5:75:6a:2b:db:65:7f:aa:b0:9b:75:b5:c0:bd:36:9e:0a:77: | |
48 f7:ba:f3:a0:61:66:12:88:15:72:16:34:a4:dd:4e:bb:18:9a: | |
49 4b:b7:50:9b:3d:1d:de:78:4d:48:08:bf:d9:a4:f2:17:fb:35: | |
50 f2:00:1c:f1:62:bf:29:75:4d:84:60:60:40:ef:97:a8:67:d5: | |
51 23:fa:51:af:d3:bb:1a:84:a3:18:b2:0f:42:5e:18:98:b5:b4: | |
52 e1:68:b4:8b:32:df:bc:24:f5:b1:54:a8:a2:2e:6d:46:1d:f8: | |
53 55:68:c5:cd:a1:ff:3d:1d:29:b3:26:61:db:24:08:8e:4e:50: | |
54 fe:63:36:c1:be:72:90:a8:0e:36:50:b1:38:f1:df:07:ec:b3: | |
55 74:ff:9d:04:6e:f9:e2:bc:36:88:d5:7c:96:00:9a:e6:68:48: | |
56 ab:f9:2f:9c:83:45:18:21:62:2f:15:da:31:46:3a:85:11:32: | |
57 72:32:21:46:c5:b2:df:cb:fc:85:73:21:7c:09:b8:78:f7:eb: | |
58 8a:03:48:d0:ba:0d:a0:bc:da:a0:cf:cc:d9:4f:7e:5e:f0:a1: | |
59 a0:59:93:c5:22:34:95:7c:f4:79:29:be:6d:3d:03:ab:2e:90: | |
60 e8:a8:15:19:2c:d6:ba:61:6b:21:e1:16:62:1e:68:be:ed:f6: | |
61 bf:63:e9:0d | |
62 -----BEGIN CERTIFICATE----- | |
63 MIIC1TCCAb2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl | |
64 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD | |
65 VQQDDAZUYXJnZXQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARHkAbNMvFDZIoPqSet | |
66 i3K2kL+cVk9v7bxaJoFuq5n1l8xlhwTFm8ft59LsgOWK2geIVWMlm12SxNssNfMy | |
67 vkFObI5TVOvPokoMxPgu/Q3fexMHKMlRmOciKQ7MKT/YjrKjgd8wgdwwHQYDVR0O | |
68 BBYEFGQLMcLloNWyJZZFEB4kiXTLBjK5MB8GA1UdIwQYMBaAFHhvC+iCGK1GbyHH | |
69 qwqjmCoWs1dnMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3Vy | |
70 bC1mb3ItYWlhL0ludGVybWVkaWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0 | |
71 cDovL3VybC1mb3ItY3JsL0ludGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgUg | |
72 MBMGA1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4IBAQD1dWor22V/ | |
73 qrCbdbXAvTaeCnf3uvOgYWYSiBVyFjSk3U67GJpLt1CbPR3eeE1ICL/ZpPIX+zXy | |
74 ABzxYr8pdU2EYGBA75eoZ9Uj+lGv07sahKMYsg9CXhiYtbThaLSLMt+8JPWxVKii | |
75 Lm1GHfhVaMXNof89HSmzJmHbJAiOTlD+YzbBvnKQqA42ULE48d8H7LN0/50Ebvni | |
76 vDaI1XyWAJrmaEir+S+cg0UYIWIvFdoxRjqFETJyMiFGxbLfy/yFcyF8Cbh49+uK | |
77 A0jQug2gvNqgz8zZT35e8KGgWZPFIjSVfPR5Kb5tPQOrLpDoqBUZLNa6YWsh4RZi | |
78 Hmi+7fa/Y+kN | |
79 -----END CERTIFICATE----- | |
80 | |
81 Certificate: | |
82 Data: | |
83 Version: 3 (0x2) | |
84 Serial Number: 2 (0x2) | |
85 Signature Algorithm: sha256WithRSAEncryption | |
86 Issuer: CN=Root | |
87 Validity | |
88 Not Before: Jan 1 12:00:00 2015 GMT | |
89 Not After : Jan 1 12:00:00 2016 GMT | |
90 Subject: CN=Intermediate | |
91 Subject Public Key Info: | |
92 Public Key Algorithm: rsaEncryption | |
93 Public-Key: (2048 bit) | |
94 Modulus: | |
95 00:fa:3b:f0:7b:b9:5d:60:5f:1c:c9:b0:87:60:45: | |
96 41:1e:6c:d1:54:34:1c:ff:42:50:3f:a3:6f:38:f8: | |
97 20:50:d5:81:a4:39:98:3c:72:e6:54:98:64:46:ad: | |
98 b0:cc:0d:a8:9e:be:eb:dd:04:cc:aa:1b:54:8b:c4: | |
99 2b:c0:1f:4b:ed:59:d0:1d:0b:3d:9e:c1:dc:42:a5: | |
100 11:97:12:2b:27:1a:93:1e:46:f2:9f:8e:62:ff:1e: | |
101 5f:19:8a:39:f5:13:bc:ca:39:c3:22:d7:3a:8a:7b: | |
102 39:f4:bf:af:36:90:e1:eb:be:09:f2:3c:00:b0:96: | |
103 97:03:67:7f:c8:3d:db:0e:a8:e7:e6:06:04:98:b3: | |
104 03:f5:c8:a4:c8:59:ed:59:3d:08:24:5d:27:54:2d: | |
105 db:ad:87:ff:c5:d0:ca:cc:d8:76:9a:0b:4a:43:61: | |
106 29:6f:06:e5:3a:a5:2e:2a:bd:f6:67:c8:03:4b:96: | |
107 2a:0f:c8:33:db:71:0d:ef:71:51:ba:7c:fa:4f:96: | |
108 71:b9:0a:9d:f3:67:72:79:cf:7e:c6:89:b3:6b:b3: | |
109 06:af:1a:bf:7d:9b:86:90:bf:f6:b7:45:9a:d6:3b: | |
110 67:9b:82:38:15:f8:2b:9a:36:f6:56:66:1a:1e:7c: | |
111 c0:1d:f7:c1:6f:5d:17:4b:86:89:89:6e:5c:e5:51: | |
112 da:89 | |
113 Exponent: 65537 (0x10001) | |
114 X509v3 extensions: | |
115 X509v3 Subject Key Identifier: | |
116 78:6F:0B:E8:82:18:AD:46:6F:21:C7:AB:0A:A3:98:2A:16:B3:57:67 | |
117 X509v3 Authority Key Identifier: | |
118 keyid:C7:D0:B8:B7:D7:AF:1F:1D:B1:72:B5:63:B4:2A:1A:1B:6F:06:04:4
2 | |
119 | |
120 Authority Information Access: | |
121 CA Issuers - URI:http://url-for-aia/Root.cer | |
122 | |
123 X509v3 CRL Distribution Points: | |
124 | |
125 Full Name: | |
126 URI:http://url-for-crl/Root.crl | |
127 | |
128 X509v3 Key Usage: critical | |
129 Certificate Sign, CRL Sign | |
130 X509v3 Basic Constraints: critical | |
131 CA:TRUE | |
132 Signature Algorithm: sha256WithRSAEncryption | |
133 91:35:d8:89:1a:7b:ca:4f:ad:9b:ad:f4:4f:c3:7a:b3:fa:43: | |
134 73:f8:e0:55:ae:37:8b:0d:5a:8f:e9:a6:37:ea:d0:59:8b:b1: | |
135 fb:67:fe:4d:91:34:11:3f:54:a2:bd:8b:75:68:0c:0f:a7:db: | |
136 3a:dd:dd:85:b2:4e:b9:e2:91:1f:f7:71:3d:be:84:4f:27:a6: | |
137 82:d6:5d:c0:ef:e2:70:22:82:ac:73:21:2d:df:a5:30:2f:96: | |
138 67:8a:38:15:5d:13:50:2f:f4:eb:55:79:18:88:8c:08:46:ce: | |
139 bd:17:1f:6c:5e:b6:1d:77:1b:11:e2:a5:1b:44:ae:e1:2b:8f: | |
140 78:c6:b9:96:44:6a:eb:32:6d:a8:7a:1b:db:f8:a9:cc:00:f9: | |
141 49:bc:31:84:a8:62:bf:d0:d7:e9:98:15:d5:1d:fa:b0:4a:4c: | |
142 3b:0a:c3:ca:ff:eb:18:03:c7:a8:82:f7:1c:e5:c9:5d:21:8e: | |
143 b1:38:41:54:ed:26:0a:43:98:29:e0:2a:b4:61:56:8b:57:66: | |
144 5e:e3:cb:22:ce:1e:b6:28:b3:2d:04:03:cf:ed:86:55:34:92: | |
145 5e:d8:38:6f:ae:29:c3:d6:d2:a0:16:71:e7:82:b3:1c:18:67: | |
146 ef:4a:5e:65:1f:62:5c:73:a6:44:e3:96:b8:6f:af:1d:3e:7f: | |
147 90:bc:e1:12 | |
148 -----BEGIN CERTIFICATE----- | |
149 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | |
150 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 | |
151 ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jvwe7ld | |
152 YF8cybCHYEVBHmzRVDQc/0JQP6NvOPggUNWBpDmYPHLmVJhkRq2wzA2onr7r3QTM | |
153 qhtUi8QrwB9L7VnQHQs9nsHcQqURlxIrJxqTHkbyn45i/x5fGYo59RO8yjnDItc6 | |
154 ins59L+vNpDh674J8jwAsJaXA2d/yD3bDqjn5gYEmLMD9cikyFntWT0IJF0nVC3b | |
155 rYf/xdDKzNh2mgtKQ2EpbwblOqUuKr32Z8gDS5YqD8gz23EN73FRunz6T5ZxuQqd | |
156 82dyec9+xomza7MGrxq/fZuGkL/2t0Wa1jtnm4I4Ffgrmjb2VmYaHnzAHffBb10X | |
157 S4aJiW5c5VHaiQIDAQABo4HLMIHIMB0GA1UdDgQWBBR4bwvoghitRm8hx6sKo5gq | |
158 FrNXZzAfBgNVHSMEGDAWgBTH0Li3168fHbFytWO0KhobbwYEQjA3BggrBgEFBQcB | |
159 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs | |
160 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD | |
161 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB | |
162 AJE12Ikae8pPrZut9E/DerP6Q3P44FWuN4sNWo/ppjfq0FmLsftn/k2RNBE/VKK9 | |
163 i3VoDA+n2zrd3YWyTrnikR/3cT2+hE8npoLWXcDv4nAigqxzIS3fpTAvlmeKOBVd | |
164 E1Av9OtVeRiIjAhGzr0XH2xeth13GxHipRtEruErj3jGuZZEausybah6G9v4qcwA | |
165 +Um8MYSoYr/Q1+mYFdUd+rBKTDsKw8r/6xgDx6iC9xzlyV0hjrE4QVTtJgpDmCng | |
166 KrRhVotXZl7jyyLOHrYosy0EA8/thlU0kl7YOG+uKcPW0qAWceeCsxwYZ+9KXmUf | |
167 YlxzpkTjlrhvrx0+f5C84RI= | |
168 -----END CERTIFICATE----- | |
169 | |
170 Certificate: | |
171 Data: | |
172 Version: 3 (0x2) | |
173 Serial Number: 1 (0x1) | |
174 Signature Algorithm: sha256WithRSAEncryption | |
175 Issuer: CN=Root | |
176 Validity | |
177 Not Before: Jan 1 12:00:00 2015 GMT | |
178 Not After : Jan 1 12:00:00 2016 GMT | |
179 Subject: CN=Root | |
180 Subject Public Key Info: | |
181 Public Key Algorithm: rsaEncryption | |
182 Public-Key: (2048 bit) | |
183 Modulus: | |
184 00:d6:29:78:82:63:a2:61:61:53:72:81:0c:e6:16: | |
185 4c:54:d9:ff:5f:4f:30:a3:9f:b2:e1:62:ec:90:e1: | |
186 80:3b:95:c4:17:95:ea:37:96:a7:6c:90:4d:ac:08: | |
187 2e:e4:52:d7:7f:e3:eb:54:4b:32:95:8c:fd:de:f0: | |
188 5b:8d:eb:1a:a3:8a:be:49:a1:8a:e6:9c:4b:b2:6b: | |
189 f7:0d:8a:3f:88:f9:02:cb:07:64:f1:2f:c3:a8:8e: | |
190 06:a6:e7:bc:e9:20:0d:73:a3:95:05:a5:e6:5b:7e: | |
191 07:b3:41:e1:0e:25:41:ba:39:ec:89:3a:1c:96:8b: | |
192 9d:4d:b8:94:aa:b3:2f:91:ab:21:85:de:89:ee:f9: | |
193 4e:18:88:41:69:93:ab:87:68:4f:77:2f:ac:33:f3: | |
194 68:67:36:3c:f3:85:84:7f:77:1d:7a:2c:8a:a6:f2: | |
195 4e:5f:52:9b:0b:35:8c:f6:46:61:68:3b:3a:2e:26: | |
196 8a:d3:24:14:31:6f:f8:43:62:d2:5b:44:18:9d:47: | |
197 c7:57:b3:b5:da:b3:7d:b0:29:48:3b:e5:27:4c:52: | |
198 fa:1f:33:26:34:0b:5c:a8:6b:a5:02:eb:96:a8:f1: | |
199 c9:67:b4:0e:9d:12:6e:1c:44:57:cf:bf:75:ad:5e: | |
200 54:d2:18:13:ea:ee:45:4d:94:3b:58:7d:20:9d:d2: | |
201 40:85 | |
202 Exponent: 65537 (0x10001) | |
203 X509v3 extensions: | |
204 X509v3 Subject Key Identifier: | |
205 C7:D0:B8:B7:D7:AF:1F:1D:B1:72:B5:63:B4:2A:1A:1B:6F:06:04:42 | |
206 X509v3 Authority Key Identifier: | |
207 keyid:C7:D0:B8:B7:D7:AF:1F:1D:B1:72:B5:63:B4:2A:1A:1B:6F:06:04:4
2 | |
208 | |
209 Authority Information Access: | |
210 CA Issuers - URI:http://url-for-aia/Root.cer | |
211 | |
212 X509v3 CRL Distribution Points: | |
213 | |
214 Full Name: | |
215 URI:http://url-for-crl/Root.crl | |
216 | |
217 X509v3 Key Usage: critical | |
218 Certificate Sign, CRL Sign | |
219 X509v3 Basic Constraints: critical | |
220 CA:TRUE | |
221 Signature Algorithm: sha256WithRSAEncryption | |
222 7e:be:c2:56:a4:f6:74:c1:6a:97:11:04:6b:8a:50:c2:74:4b: | |
223 e0:01:6d:bf:72:c2:6e:4c:14:c1:15:ef:92:5f:44:4d:23:99: | |
224 ac:88:c2:c9:40:95:82:7d:b1:40:0d:4e:96:2e:1b:3f:5d:22: | |
225 23:0e:92:e7:56:c0:33:21:f3:e2:39:41:b0:39:c6:27:29:1f: | |
226 72:ac:58:73:0a:b2:13:bb:83:6a:6f:d9:4b:08:71:95:07:28: | |
227 51:2a:a9:a5:d9:ab:02:78:62:fa:78:1a:1f:22:cb:80:5c:5e: | |
228 79:81:fa:82:38:30:ba:eb:d3:a8:90:f4:47:aa:09:a8:c5:f8: | |
229 20:58:fe:4d:82:47:2f:41:e6:7b:44:6b:5d:ee:ca:f9:2d:48: | |
230 1f:76:e2:db:f0:3e:4d:de:85:d2:63:a3:e6:61:db:28:69:75: | |
231 74:61:a0:ee:c3:e8:6f:c4:ce:a3:31:3c:48:9d:34:84:fe:83: | |
232 7e:7d:be:2f:ca:bd:f8:f2:39:1c:0e:b2:3c:c2:4a:f2:3f:fe: | |
233 63:2c:53:7b:1e:e7:64:e0:97:05:46:64:60:a0:35:54:5f:44: | |
234 31:9a:a2:b7:72:7d:4a:90:90:9c:dd:d0:cd:89:b5:90:32:b2: | |
235 2d:e2:4f:3c:b4:ae:46:00:96:72:6f:8e:bc:d3:59:e5:08:57: | |
236 b9:3f:f6:b2 | |
237 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- | |
238 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 | |
239 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v | |
240 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANYpeIJjomFhU3KBDOYW | |
241 TFTZ/19PMKOfsuFi7JDhgDuVxBeV6jeWp2yQTawILuRS13/j61RLMpWM/d7wW43r | |
242 GqOKvkmhiuacS7Jr9w2KP4j5AssHZPEvw6iOBqbnvOkgDXOjlQWl5lt+B7NB4Q4l | |
243 Qbo57Ik6HJaLnU24lKqzL5GrIYXeie75ThiIQWmTq4doT3cvrDPzaGc2PPOFhH93 | |
244 HXosiqbyTl9Smws1jPZGYWg7Oi4mitMkFDFv+ENi0ltEGJ1Hx1eztdqzfbApSDvl | |
245 J0xS+h8zJjQLXKhrpQLrlqjxyWe0Dp0SbhxEV8+/da1eVNIYE+ruRU2UO1h9IJ3S | |
246 QIUCAwEAAaOByzCByDAdBgNVHQ4EFgQUx9C4t9evHx2xcrVjtCoaG28GBEIwHwYD | |
247 VR0jBBgwFoAUx9C4t9evHx2xcrVjtCoaG28GBEIwNwYIKwYBBQUHAQEEKzApMCcG | |
248 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw | |
249 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE | |
250 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB+vsJWpPZ0 | |
251 wWqXEQRrilDCdEvgAW2/csJuTBTBFe+SX0RNI5msiMLJQJWCfbFADU6WLhs/XSIj | |
252 DpLnVsAzIfPiOUGwOcYnKR9yrFhzCrITu4Nqb9lLCHGVByhRKqml2asCeGL6eBof | |
253 IsuAXF55gfqCODC669OokPRHqgmoxfggWP5NgkcvQeZ7RGtd7sr5LUgfduLb8D5N | |
254 3oXSY6PmYdsoaXV0YaDuw+hvxM6jMTxInTSE/oN+fb4vyr348jkcDrI8wkryP/5j | |
255 LFN7Hudk4JcFRmRgoDVUX0QxmqK3cn1KkJCc3dDNibWQMrIt4k88tK5GAJZyb468 | |
256 01nlCFe5P/ay | |
257 -----END TRUST_ANCHOR_UNCONSTRAINED----- | |
258 | |
259 150302120000Z | |
260 -----BEGIN TIME----- | |
261 MTUwMzAyMTIwMDAwWg== | |
262 -----END TIME----- | |
263 | |
264 SUCCESS | |
265 -----BEGIN VERIFY_RESULT----- | |
266 U1VDQ0VTUw== | |
267 -----END VERIFY_RESULT----- | |
268 | |
269 serverAuth | |
270 -----BEGIN KEY_PURPOSE----- | |
271 c2VydmVyQXV0aA== | |
272 -----END KEY_PURPOSE----- | |
OLD | NEW |