ee444d779a8c4b516ee552b3e7a535c50f0a762b - chromium/src
373 views
Skip to first unread message
ero...@chromium.org
Jul 8, 2016, 8:41:46 PM7/8/16
to chromium...@chromium.org
commit ee444d779a8c4b516ee552b3e7a535c50f0a762b
Author: eroman <ero...@chromium.org>
AuthorDate: Sat Jul 09 00:38:59 2016
Commit: Commit bot <commi...@chromium.org>
CommitDate: Sat Jul 09 00:40:46 2016
Cleanup: Rename "intermediary" --> "intermediate"
Mechanically generated CL that does these replacements:
intermediary --> intermediate
intermediaries --> intermediates
Intermediary --> Intermediate
Intermediaries --> Intermediates
Review-Url: https://codereview.chromium.org/2130283003
Cr-Commit-Position: refs/heads/master@{#404545}
diff --git a/net/cert/internal/verify_certificate_chain.cc b/net/cert/internal/verify_certificate_chain.cc
index baef57a..ee379fd 100644
--- a/net/cert/internal/verify_certificate_chain.cc
+++ b/net/cert/internal/verify_certificate_chain.cc
@@ -169,7 +169,7 @@
}
// This function corresponds to RFC 5280 section 6.1.4's "Preparation for
-// Certificate i+1" procedure. |cert| is expected to be an intermediary.
+// Certificate i+1" procedure. |cert| is expected to be an intermediate.
WARN_UNUSED_RESULT bool PrepareForNextCertificate(
const ParsedCertificate& cert,
size_t* max_path_length_ptr,
@@ -211,7 +211,7 @@
// choose to reject all version 1 and version 2 intermediate
// certificates.)
//
- // This code implicitly rejects non version 3 intermediaries, since they
+ // This code implicitly rejects non version 3 intermediates, since they
// can't contain a BasicConstraints extension.
if (!cert.has_basic_constraints() || !cert.basic_constraints().is_ca)
return false;
diff --git a/net/cert/internal/verify_certificate_chain_typed_unittest.h b/net/cert/internal/verify_certificate_chain_typed_unittest.h
index 1ddd464..b4990a3 100644
--- a/net/cert/internal/verify_certificate_chain_typed_unittest.h
+++ b/net/cert/internal/verify_certificate_chain_typed_unittest.h
@@ -118,38 +118,38 @@
TYPED_TEST_CASE_P(VerifyCertificateChainSingleRootTest);
-TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetAndIntermediary) {
- this->RunTest("target-and-intermediary.pem");
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetAndIntermediate) {
+ this->RunTest("target-and-intermediate.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryLacksBasicConstraints) {
- this->RunTest("intermediary-lacks-basic-constraints.pem");
+ IntermediateLacksBasicConstraints) {
+ this->RunTest("intermediate-lacks-basic-constraints.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryBasicConstraintsCaFalse) {
- this->RunTest("intermediary-basic-constraints-ca-false.pem");
+ IntermediateBasicConstraintsCaFalse) {
+ this->RunTest("intermediate-basic-constraints-ca-false.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryBasicConstraintsNotCritical) {
- this->RunTest("intermediary-basic-constraints-not-critical.pem");
+ IntermediateBasicConstraintsNotCritical) {
+ this->RunTest("intermediate-basic-constraints-not-critical.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryLacksSigningKeyUsage) {
- this->RunTest("intermediary-lacks-signing-key-usage.pem");
+ IntermediateLacksSigningKeyUsage) {
+ this->RunTest("intermediate-lacks-signing-key-usage.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryUnknownCriticalExtension) {
- this->RunTest("intermediary-unknown-critical-extension.pem");
+ IntermediateUnknownCriticalExtension) {
+ this->RunTest("intermediate-unknown-critical-extension.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryUnknownNonCriticalExtension) {
- this->RunTest("intermediary-unknown-non-critical-extension.pem");
+ IntermediateUnknownNonCriticalExtension) {
+ this->RunTest("intermediate-unknown-non-critical-extension.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
@@ -166,8 +166,8 @@
this->RunTest("target-signed-with-md5.pem");
}
-TYPED_TEST_P(VerifyCertificateChainSingleRootTest, IntermediarySignedWithMd5) {
- this->RunTest("intermediary-signed-with-md5.pem");
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, IntermediateSignedWithMd5) {
+ this->RunTest("intermediate-signed-with-md5.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetWrongSignature) {
@@ -182,8 +182,8 @@
this->RunTest("target-signed-using-ecdsa.pem");
}
-TYPED_TEST_P(VerifyCertificateChainSingleRootTest, ExpiredIntermediary) {
- this->RunTest("expired-intermediary.pem");
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, ExpiredIntermediate) {
+ this->RunTest("expired-intermediate.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest, ExpiredTarget) {
@@ -255,21 +255,21 @@
// ordinal not in range, like "March 39, 2016" are rejected.
REGISTER_TYPED_TEST_CASE_P(VerifyCertificateChainSingleRootTest,
- TargetAndIntermediary,
- IntermediaryLacksBasicConstraints,
- IntermediaryBasicConstraintsCaFalse,
- IntermediaryBasicConstraintsNotCritical,
- IntermediaryLacksSigningKeyUsage,
- IntermediaryUnknownCriticalExtension,
- IntermediaryUnknownNonCriticalExtension,
+ TargetAndIntermediate,
+ IntermediateLacksBasicConstraints,
+ IntermediateBasicConstraintsCaFalse,
+ IntermediateBasicConstraintsNotCritical,
+ IntermediateLacksSigningKeyUsage,
+ IntermediateUnknownCriticalExtension,
+ IntermediateUnknownNonCriticalExtension,
ViolatesBasicConstraintsPathlen0,
BasicConstraintsPathlen0SelfIssued,
TargetSignedWithMd5,
- IntermediarySignedWithMd5,
+ IntermediateSignedWithMd5,
TargetWrongSignature,
TargetSignedBy512bitRsa,
TargetSignedUsingEcdsa,
- ExpiredIntermediary,
+ ExpiredIntermediate,
ExpiredTarget,
ExpiredTargetNotBefore,
ExpiredRoot,
diff --git a/net/data/cert_issuer_source_aia_unittest/generate-certs.py b/net/data/cert_issuer_source_aia_unittest/generate-certs.py
index 534d498..e854c13 100755
--- a/net/data/cert_issuer_source_aia_unittest/generate-certs.py
+++ b/net/data/cert_issuer_source_aia_unittest/generate-certs.py
@@ -15,39 +15,39 @@
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificates. All have the same subject and key.
-i_base = common.create_intermediary_certificate('I', root)
+# Intermediate certificates. All have the same subject and key.
+i_base = common.create_intermediate_certificate('I', root)
common.write_string_to_file(i_base.get_cert_pem(), 'i.pem')
-i2 = common.create_intermediary_certificate('I', root)
+i2 = common.create_intermediate_certificate('I', root)
i2.set_key_path(i_base.get_key_path())
common.write_string_to_file(i2.get_cert_pem(), 'i2.pem')
-i3 = common.create_intermediary_certificate('I', root)
+i3 = common.create_intermediate_certificate('I', root)
i3.set_key_path(i_base.get_key_path())
common.write_string_to_file(i3.get_cert_pem(), 'i3.pem')
-# More Intermediary certificates, which are just to generate the proper config
+# More Intermediate certificates, which are just to generate the proper config
# files so the target certs will have the desired Authority Information Access
# values. These ones aren't saved to files.
-i_no_aia = common.create_intermediary_certificate('I', root)
+i_no_aia = common.create_intermediate_certificate('I', root)
i_no_aia.set_key_path(i_base.get_key_path())
section = i_no_aia.config.get_section('signing_ca_ext')
section.set_property('authorityInfoAccess', None)
-i_two_aia = common.create_intermediary_certificate('I', root)
+i_two_aia = common.create_intermediate_certificate('I', root)
i_two_aia.set_key_path(i_base.get_key_path())
section = i_two_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.1', 'http://url-for-aia2/I2.foo')
-i_three_aia = common.create_intermediary_certificate('I', root)
+i_three_aia = common.create_intermediate_certificate('I', root)
i_three_aia.set_key_path(i_base.get_key_path())
section = i_three_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.1', 'http://url-for-aia2/I2.foo')
section.set_property('caIssuers;URI.2', 'http://url-for-aia3/I3.foo')
-i_six_aia = common.create_intermediary_certificate('I', root)
+i_six_aia = common.create_intermediate_certificate('I', root)
i_six_aia.set_key_path(i_base.get_key_path())
section = i_six_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.1', 'http://url-for-aia2/I2.foo')
@@ -56,23 +56,23 @@
section.set_property('caIssuers;URI.4', 'http://url-for-aia5/I5.foo')
section.set_property('caIssuers;URI.5', 'http://url-for-aia6/I6.foo')
-i_file_aia = common.create_intermediary_certificate('I', root)
+i_file_aia = common.create_intermediate_certificate('I', root)
i_file_aia.set_key_path(i_base.get_key_path())
section = i_file_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.0', 'file:///dev/null')
-i_invalid_url_aia = common.create_intermediary_certificate('I', root)
+i_invalid_url_aia = common.create_intermediate_certificate('I', root)
i_invalid_url_aia.set_key_path(i_base.get_key_path())
section = i_invalid_url_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.0', 'foobar')
-i_file_and_http_aia = common.create_intermediary_certificate('I', root)
+i_file_and_http_aia = common.create_intermediate_certificate('I', root)
i_file_and_http_aia.set_key_path(i_base.get_key_path())
section = i_file_and_http_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.0', 'file:///dev/null')
section.set_property('caIssuers;URI.1', 'http://url-for-aia2/I2.foo')
-i_invalid_and_http_aia = common.create_intermediary_certificate('I', root)
+i_invalid_and_http_aia = common.create_intermediate_certificate('I', root)
i_invalid_and_http_aia.set_key_path(i_base.get_key_path())
section = i_invalid_and_http_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.0', 'foobar')
diff --git a/net/data/cert_issuer_source_static_unittest/generate-certs.py b/net/data/cert_issuer_source_static_unittest/generate-certs.py
index c67cc81..e15fd91 100755
--- a/net/data/cert_issuer_source_static_unittest/generate-certs.py
+++ b/net/data/cert_issuer_source_static_unittest/generate-certs.py
@@ -47,16 +47,16 @@
write_cert_to_file(root, 'root.pem')
-# Intermediary certificates
-i1_1 = common.create_intermediary_certificate('I1', root)
+# Intermediate certificates
+i1_1 = common.create_intermediate_certificate('I1', root)
write_cert_to_file(i1_1, 'i1_1.pem')
# same name (after normalization), different key
-i1_2 = common.create_intermediary_certificate('i1', root)
+i1_2 = common.create_intermediate_certificate('i1', root)
write_cert_to_file(i1_2, 'i1_2.pem')
# different name
-i2 = common.create_intermediary_certificate('I2', root)
+i2 = common.create_intermediate_certificate('I2', root)
write_cert_to_file(i2, 'i2.pem')
diff --git a/net/data/verify_certificate_chain_unittest/README b/net/data/verify_certificate_chain_unittest/README
index 11cc4cb..5c7019d 100644
--- a/net/data/verify_certificate_chain_unittest/README
+++ b/net/data/verify_certificate_chain_unittest/README
@@ -24,6 +24,6 @@
The input file is a PEM file with blocks for:
* The trust store
- * The certificate chain (target certificate and all intermediaries)
+ * The certificate chain (target certificate and all intermediates)
* The timestamp to use when verifying
* The expected result of verification (success or fail)
diff --git a/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem b/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
index 5ed1126..53f7de92 100644
--- a/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
+++ b/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
@@ -1,6 +1,6 @@
[Created by: generate-basic-constraints-pathlen-0-self-issued.py]
-Certificate chain with 2 intermediaries. The first intermediary has a basic
+Certificate chain with 2 intermediates. The first intermediate has a basic
constraints path length of 0. The second one is self-issued so does not count
against the path length.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cc:d5:1f:2f:97:16:d6:23:ca:d5:a1:c1:97:42:
- 2b:7e:3e:7f:45:44:70:b9:8d:81:76:be:b4:69:56:
- 78:a9:14:10:69:ad:60:8e:ed:80:b2:a2:f9:85:d6:
- fe:4c:81:d0:30:8e:c8:75:48:29:48:b9:ad:9f:a9:
- 83:b6:4f:c7:ba:40:f9:d5:66:9f:f9:51:48:72:0d:
- 95:38:65:da:41:8a:91:4a:e1:34:d6:1c:a0:0b:ee:
- 4d:07:69:0c:74:87:58:79:1b:e5:7b:51:ae:19:36:
- b2:6a:a6:89:81:30:bd:51:c1:7f:99:86:63:78:48:
- a6:8e:74:f6:5f:cc:fb:3f:12:ac:2e:e7:a8:75:15:
- b7:5b:37:dd:ce:54:68:ae:0d:ad:80:13:b5:d7:06:
- 98:39:a9:67:f9:fb:c1:7f:e0:f6:6b:14:f3:d3:b4:
- f4:33:2c:41:9e:69:63:de:b3:f9:cd:4e:f8:58:98:
- dd:6f:9b:9a:b7:82:19:c1:01:c9:2d:fb:d3:5a:48:
- 5f:e4:e5:c5:6e:5f:b1:3b:31:49:65:f0:0d:46:a5:
- 33:fb:57:23:fc:ca:17:51:72:fc:5a:f7:7c:44:74:
- 24:3b:cc:54:2c:e3:d4:8b:e9:9c:13:da:78:58:a1:
- d8:00:19:30:ee:3d:29:fb:2b:7a:79:b8:69:f2:3b:
- d3:19
+ 00:ce:da:bc:23:ea:7f:3b:c7:c0:83:35:31:8c:8a:
+ d4:32:e0:e8:ff:6e:80:4c:38:d5:60:3c:cf:dc:bb:
+ 6a:76:d6:7a:4b:03:29:21:5b:4c:51:8d:2d:82:7c:
+ 65:8f:c0:ca:c4:07:57:63:29:81:19:63:06:09:4d:
+ 91:c0:22:c6:29:ec:79:e7:e5:f1:aa:22:52:0b:73:
+ 8d:60:ef:47:bb:f6:b7:7a:5a:87:c0:d4:2c:ac:95:
+ a2:17:6f:31:19:cc:92:ca:ca:b0:e3:74:b3:a5:26:
+ 06:fd:ba:28:3d:1a:69:9d:d3:b5:da:f5:98:22:ed:
+ da:60:29:92:ec:df:76:98:7b:2b:4b:47:ca:65:32:
+ 09:24:4c:27:be:3c:94:c1:45:f6:f7:67:72:62:62:
+ 60:e4:82:fe:74:fe:b1:7b:bd:4c:24:36:7d:0c:4d:
+ 1d:b1:91:58:6b:01:ba:89:3a:e3:60:86:e4:68:1e:
+ 7a:28:7c:4c:a4:c2:50:73:fa:2e:21:62:71:36:6b:
+ 82:50:c2:12:3c:f0:70:83:ed:98:7c:f0:16:08:81:
+ d8:b3:4e:85:4b:31:a5:ce:ed:89:82:01:4f:c6:ca:
+ b3:29:0d:fb:e7:54:79:84:51:d6:ef:ef:98:6c:c6:
+ 66:8c:2c:d5:33:9d:37:37:8d:f2:f2:36:66:ac:1d:
+ f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 6D:49:C7:0A:DE:44:7C:B7:07:ED:87:EF:41:DE:5D:12:91:28:3D:1C
+ A4:2C:1E:6A:EA:E4:DB:1A:EA:98:3A:F3:38:7B:5D:F4:8F:24:DA:3A
X509v3 Authority Key Identifier:
- keyid:31:9F:A3:DB:EA:90:94:EB:3D:93:39:9F:BA:8A:05:7E:2C:94:23:9B
+ keyid:8C:6F:A0:45:A9:77:60:30:97:AA:87:1F:96:34:1D:3B:7A:C6:40:5E
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 34:51:df:38:e9:c2:df:c6:2c:01:00:7e:a1:4b:5e:d1:43:8a:
- d7:4e:ff:49:5d:17:e7:bd:e2:3c:cd:43:63:4d:a9:05:97:bf:
- 76:e2:8d:90:d2:dd:ea:6b:4c:e3:1e:c1:7b:8b:35:5a:24:cc:
- d8:b2:9a:12:07:d2:66:fa:fd:3c:79:b4:a7:d7:cb:69:af:07:
- f7:9d:66:34:ee:ed:22:1f:7d:58:9e:e1:49:90:88:95:1e:27:
- 2a:3d:dc:a9:b9:1d:2b:1f:88:b9:0c:89:a1:bc:dd:25:97:b9:
- 32:0e:02:86:fa:a3:2c:cd:8e:29:e5:68:12:3b:5b:bf:0e:cc:
- 25:ad:06:ef:77:26:d7:b4:84:cf:ba:00:55:c4:f0:95:39:88:
- ff:22:f8:a5:89:8a:d2:31:aa:e7:98:76:02:19:bd:04:bc:5c:
- 26:be:5e:eb:96:2b:f6:a2:cf:13:3e:a1:82:92:63:c0:13:bc:
- b6:f9:06:fb:77:c3:0f:cd:39:b1:af:43:b5:9d:fc:64:d4:bd:
- d0:81:5c:06:fb:8b:0e:c5:59:0b:07:d6:a7:8b:a9:8e:b3:6b:
- f5:ed:9b:ea:ea:f7:6f:ea:2b:02:df:62:92:ae:98:fb:45:ca:
- bc:1c:6b:eb:6d:33:e3:0e:32:0f:0d:e3:7f:5c:ef:e3:1b:c2:
- f6:fc:99:a4
+ 51:ba:35:03:2c:20:55:1a:24:3e:11:c6:13:29:e3:98:58:fa:
+ 09:b7:3b:47:45:4a:32:c5:85:3a:64:d9:d3:ff:f8:fb:f8:eb:
+ 1d:88:22:29:b9:38:31:8f:de:12:da:c9:c3:93:de:5a:4e:25:
+ 89:11:8b:a9:0c:3a:1f:ce:0b:8a:0b:ec:e4:e6:4b:b6:c9:ae:
+ 63:0e:89:72:64:ee:9c:fd:1a:88:59:49:96:0c:0f:14:db:be:
+ 5e:37:02:2e:af:f0:da:04:c0:29:e5:3a:96:b2:a4:6b:cc:a6:
+ be:63:5a:d2:61:58:23:96:fe:15:a5:2a:46:15:5d:13:76:0a:
+ 07:59:b9:ed:41:79:db:c7:1b:a9:6d:99:d1:3e:1c:93:97:c8:
+ b7:40:6e:4b:d0:31:d6:7b:e3:9d:c8:f9:04:0d:1c:d7:f8:d4:
+ a8:85:ba:be:90:95:7c:b3:d7:85:74:14:fd:50:6e:93:80:96:
+ fe:09:24:83:b7:f8:f2:08:bc:c2:1a:b3:92:af:0e:a9:d6:32:
+ 0f:a0:86:fc:f7:95:6d:5b:07:a6:83:0d:2b:67:05:c1:2f:90:
+ a0:b0:02:ba:57:64:10:97:52:d8:67:ff:39:c0:3c:d0:c7:90:
+ 76:2f:e0:42:37:ec:50:85:55:78:1e:34:88:63:4f:73:d0:7b:
+ 7d:d1:20:85
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1R8v
-lxbWI8rVocGXQit+Pn9FRHC5jYF2vrRpVnipFBBprWCO7YCyovmF1v5MgdAwjsh1
-SClIua2fqYO2T8e6QPnVZp/5UUhyDZU4ZdpBipFK4TTWHKAL7k0HaQx0h1h5G+V7
-Ua4ZNrJqpomBML1RwX+ZhmN4SKaOdPZfzPs/Eqwu56h1FbdbN93OVGiuDa2AE7XX
-Bpg5qWf5+8F/4PZrFPPTtPQzLEGeaWPes/nNTvhYmN1vm5q3ghnBAckt+9NaSF/k
-5cVuX7E7MUll8A1GpTP7VyP8yhdRcvxa93xEdCQ7zFQs49SL6ZwT2nhYodgAGTDu
-PSn7K3p5uGnyO9MZAgMBAAGjgekwgeYwHQYDVR0OBBYEFG1JxwreRHy3B+2H70He
-XRKRKD0cMB8GA1UdIwQYMBaAFDGfo9vqkJTrPZM5n7qKBX4slCObMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEANFHfOOnC38YsAQB+oUte
-0UOK107/SV0X573iPM1DY02pBZe/duKNkNLd6mtM4x7Be4s1WiTM2LKaEgfSZvr9
-PHm0p9fLaa8H951mNO7tIh99WJ7hSZCIlR4nKj3cqbkdKx+IuQyJobzdJZe5Mg4C
-hvqjLM2OKeVoEjtbvw7MJa0G73cm17SEz7oAVcTwlTmI/yL4pYmK0jGq55h2Ahm9
-BLxcJr5e65Yr9qLPEz6hgpJjwBO8tvkG+3fDD805sa9DtZ38ZNS90IFcBvuLDsVZ
-CwfWp4upjrNr9e2b6ur3b+orAt9ikq6Y+0XKvBxr620z4w4yDw3jf1zv4xvC9vyZ
-pA==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-----END CERTIFICATE-----
Certificate:
@@ -99,88 +99,88 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:e6:56:91:e6:27:53:a1:d7:64:56:d8:c8:57:b7:
- 55:7c:89:a2:b4:9d:ab:72:f0:bc:03:35:16:53:77:
- 7e:ef:bf:0b:f5:91:d5:de:ae:bb:ae:ae:3a:53:00:
- ec:80:3b:a0:2b:d3:6a:ae:0c:d0:4c:a1:24:b2:b4:
- 77:de:ad:81:0f:70:f8:f4:dc:f8:c7:6e:f8:54:29:
- 84:3a:b8:83:f4:95:22:80:ae:71:b0:dd:4e:ba:82:
- 87:80:d1:c7:f3:ad:a7:45:c5:db:47:3c:8e:84:31:
- bc:c6:bd:29:77:70:39:78:f4:3b:5e:ae:8f:d9:44:
- 6b:1a:1d:cb:f9:7b:84:14:7c:5b:b8:82:3c:ed:47:
- 16:c6:4e:2b:75:5a:1b:b4:5d:0c:0a:2f:55:b6:48:
- 87:a1:25:a2:a9:5b:e4:a8:f9:bc:70:24:92:07:7f:
- 5b:94:83:3b:44:78:65:cb:62:0c:30:fa:cf:f1:f7:
- 20:9e:76:c8:52:78:8b:f8:30:62:f0:66:28:8a:7f:
- ba:74:12:f8:05:ef:29:d8:17:cb:8a:95:61:fc:af:
- 58:d2:e2:86:d7:8c:fb:3b:56:28:8d:e4:d9:27:48:
- b6:c1:fc:9a:4e:d4:24:b8:68:c3:32:5d:65:30:6e:
- a3:9e:b9:bf:6e:a7:3b:b4:3d:2e:5d:13:a1:28:4e:
- a4:0d
+ 00:b6:ad:89:87:ed:48:f8:65:a1:8e:48:22:2d:af:
+ 1e:0c:0b:e0:4c:5c:7a:0d:25:c1:a4:91:9a:b3:cc:
+ 1f:78:07:40:c7:05:97:71:d2:94:bc:ce:0c:27:b2:
+ c9:57:7a:44:49:32:26:02:72:c6:f3:f7:18:ca:35:
+ 2c:25:ba:17:a4:a4:68:92:ea:68:d8:50:17:21:65:
+ 2e:94:db:56:47:96:53:c8:d3:96:c0:34:55:12:8d:
+ a1:0c:2d:dd:f9:3c:34:78:5a:ee:32:63:e3:34:8c:
+ 44:4c:67:c4:c4:31:42:35:ba:07:6e:70:c3:9e:73:
+ da:dc:08:1c:2f:d4:c6:32:42:62:67:55:ac:f4:4a:
+ a1:29:cf:ba:c3:2a:74:b3:e6:eb:a8:df:c8:79:0e:
+ 86:55:1d:dd:c4:61:63:f1:39:ca:ae:0b:a0:d4:81:
+ 69:69:6b:ca:72:9a:79:9b:eb:d0:b4:0a:63:b5:ec:
+ dc:a0:ce:5f:10:e3:e7:1c:f5:71:3e:01:8e:09:fc:
+ cc:80:92:ed:92:7e:68:ac:2d:9f:49:63:56:0e:61:
+ a6:44:75:99:14:68:97:24:42:a1:16:47:1d:c9:42:
+ 1f:74:d2:f3:7e:11:4b:b0:7b:73:5f:20:5d:3a:e4:
+ 74:71:34:25:d3:2d:77:9c:5f:06:4d:f7:15:fc:74:
+ 24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 31:9F:A3:DB:EA:90:94:EB:3D:93:39:9F:BA:8A:05:7E:2C:94:23:9B
+ 8C:6F:A0:45:A9:77:60:30:97:AA:87:1F:96:34:1D:3B:7A:C6:40:5E
X509v3 Authority Key Identifier:
- keyid:73:4C:95:45:4C:3B:F6:7E:7B:92:30:C9:AC:30:51:E7:7D:21:D2:BF
+ keyid:BD:54:1F:A6:8B:24:E6:BD:59:FD:50:9F:2B:A8:54:7F:F2:7B:B1:3E
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha256WithRSAEncryption
- 0d:7d:a3:df:40:cd:02:79:b5:69:5d:c5:a7:eb:bc:87:95:c3:
- 17:fc:73:dd:59:a8:c2:d3:67:71:15:09:7a:9b:f8:01:5d:a0:
- d2:a3:e5:37:1d:f5:f3:2c:fd:8d:8e:e7:6c:ca:01:2a:83:a8:
- 00:c9:65:26:8e:ab:0b:13:91:9c:00:9a:a3:60:44:8c:82:0f:
- 04:1e:74:b1:c6:4f:a6:da:37:70:16:35:03:92:f2:04:ab:c8:
- 21:97:a8:b4:e3:bf:bf:67:9e:ce:c3:24:df:6a:cc:43:d6:ea:
- 59:89:b7:3e:1c:de:ed:ab:99:ec:26:60:3b:b7:84:4b:e0:1a:
- b7:be:6d:20:7b:f4:88:a2:bf:95:3f:6e:7a:fa:ea:e1:55:72:
- 88:ae:67:b3:13:1a:3a:1f:07:16:1d:84:fd:e5:e3:1e:90:ec:
- dc:d2:ce:73:c0:50:19:69:10:dc:c7:db:91:46:f4:50:52:87:
- 94:6e:ce:ef:a6:20:57:d2:ad:36:95:1e:94:7f:a3:8f:d9:0d:
- 99:dd:8f:e3:2a:b2:2b:69:a0:f7:26:4e:cd:f2:f1:cf:05:14:
- 31:3d:aa:71:01:dd:42:24:19:62:5c:00:1b:98:ac:7d:45:f2:
- e6:14:dd:2e:10:06:74:39:61:6d:b9:3c:68:c1:e7:3d:b6:3d:
- e1:75:c9:fd
+ 8b:7a:66:86:f1:9f:ae:f1:75:5b:70:2c:c7:d9:97:29:08:f7:
+ b8:8a:6b:98:b8:81:eb:e9:99:bc:63:55:ab:b1:09:7b:06:f2:
+ 39:be:5c:7d:2f:ab:30:9b:11:dc:79:d3:67:e0:20:70:9f:01:
+ 2c:da:35:59:e1:2b:f6:1d:15:94:cd:12:db:99:05:89:69:a8:
+ 03:09:99:1b:e4:42:3d:55:f5:0d:92:78:1d:4b:99:0f:c4:ca:
+ 3a:bb:c5:33:d4:5c:bd:8e:24:81:db:51:1d:22:6f:1b:89:3d:
+ ea:a0:7d:e0:b3:ee:9b:eb:c4:48:b3:ad:7d:68:4a:a6:64:ec:
+ 08:d4:0d:28:3a:65:9e:cc:e4:42:35:95:48:87:e4:85:01:57:
+ 6e:f2:60:cf:50:1e:ca:7f:d8:c4:fa:60:ee:b0:94:52:2e:b6:
+ e6:e4:45:d0:b6:8c:e1:c0:34:7c:6f:ee:ad:a2:a3:e0:a1:fa:
+ 2e:5f:27:b5:c2:26:20:46:19:b7:a8:5a:c1:1d:8f:ab:42:1e:
+ 40:cf:ab:4c:ce:10:54:55:d3:10:af:32:14:80:b7:34:bb:72:
+ 96:97:df:40:a7:70:f2:be:47:43:be:83:2f:a9:47:e8:ce:50:
+ ee:e4:8e:a1:ff:fd:28:13:7d:ba:7e:ca:35:5d:67:e3:8e:0e:
+ 31:0f:b4:8f
-----BEGIN CERTIFICATE-----
MIIDiDCCAnCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjAXMRUwEwYD
-VQQDDAxJbnRlcm1lZGlhcnkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
-AQDmVpHmJ1Oh12RW2MhXt1V8iaK0naty8LwDNRZTd37vvwv1kdXerruurjpTAOyA
-O6Ar02quDNBMoSSytHferYEPcPj03PjHbvhUKYQ6uIP0lSKArnGw3U66goeA0cfz
-radFxdtHPI6EMbzGvSl3cDl49Dtero/ZRGsaHcv5e4QUfFu4gjztRxbGTit1Whu0
-XQwKL1W2SIehJaKpW+So+bxwJJIHf1uUgztEeGXLYgww+s/x9yCedshSeIv4MGLw
-ZiiKf7p0EvgF7ynYF8uKlWH8r1jS4obXjPs7ViiN5NknSLbB/JpO1CS4aMMyXWUw
-bqOeub9upzu0PS5dE6EoTqQNAgMBAAGjgd4wgdswHQYDVR0OBBYEFDGfo9vqkJTr
-PZM5n7qKBX4slCObMB8GA1UdIwQYMBaAFHNMlUVMO/Z+e5IwyawwUed9IdK/MD8G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-dGVybWVkaWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3It
-Y3JsL0ludGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQI
-MAYBAf8CAQAwDQYJKoZIhvcNAQELBQADggEBAA19o99AzQJ5tWldxafrvIeVwxf8
-c91ZqMLTZ3EVCXqb+AFdoNKj5Tcd9fMs/Y2O52zKASqDqADJZSaOqwsTkZwAmqNg
-RIyCDwQedLHGT6baN3AWNQOS8gSryCGXqLTjv79nns7DJN9qzEPW6lmJtz4c3u2r
-mewmYDu3hEvgGre+bSB79Iiiv5U/bnr66uFVcoiuZ7MTGjofBxYdhP3l4x6Q7NzS
-znPAUBlpENzH25FG9FBSh5Ruzu+mIFfSrTaVHpR/o4/ZDZndj+MqsitpoPcmTs3y
-8c8FFDE9qnEB3UIkGWJcABuYrH1F8uYU3S4QBnQ5YW25PGjB5z22PeF1yf0=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=
-----END CERTIFICATE-----
Certificate:
@@ -192,35 +192,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c9:30:53:c1:b9:0f:27:7a:39:3d:39:c4:a3:7c:
- 96:bb:0e:e4:d9:fd:10:76:98:36:62:fc:33:7c:02:
- 47:6c:6f:2e:d2:61:aa:d5:e3:86:67:a2:ef:93:a3:
- fd:15:83:1c:27:90:f3:81:4a:41:f2:e6:e6:be:26:
- 9a:b0:77:1d:e5:8a:97:2d:a7:87:6b:80:49:26:0e:
- da:48:36:ba:eb:71:6a:cb:b4:82:66:42:fd:58:5f:
- bc:c9:18:30:ee:2f:0c:28:81:e7:36:b9:76:da:55:
- 8c:7a:cf:a9:1f:04:c6:6e:42:ea:d3:83:c6:8d:04:
- 26:9e:11:8a:c6:cd:25:c7:4a:58:d1:98:86:b5:37:
- 9c:3e:68:2e:17:4d:81:85:f3:d4:7d:65:e7:0f:86:
- 8a:c9:d0:2d:fc:4f:c7:40:2a:ef:48:ab:2e:4c:2e:
- b6:1c:81:4e:73:73:e9:cc:d4:ef:94:b1:17:2c:70:
- 64:b0:4c:ad:87:cf:45:13:c2:67:46:d1:c6:b3:61:
- 8d:77:af:4f:1c:b6:4f:b6:d9:2b:3c:4c:5f:72:23:
- 77:c7:85:65:1d:85:48:28:06:34:b4:f0:bd:a9:76:
- 7a:65:60:59:d6:f6:26:f6:85:99:7b:84:16:5e:91:
- 8d:f9:90:b8:75:d3:4a:77:6a:1f:f8:ed:66:67:22:
- 64:4b
+ 00:9e:e2:7c:00:e0:00:2f:08:6e:14:3a:5f:e0:de:
+ 0a:c0:4d:af:11:e7:87:5b:6a:b8:d9:0e:c0:86:bb:
+ f2:aa:2f:7d:c0:81:ee:58:36:2b:e7:61:57:45:4b:
+ 2c:0d:12:71:f2:ce:ee:bb:28:30:40:fc:d9:f4:9b:
+ 91:72:0b:99:e0:af:83:84:18:f1:17:c9:fb:ca:56:
+ 67:89:08:05:39:13:a2:48:7f:95:33:3d:ae:b9:c2:
+ 9d:4a:94:7c:b5:f0:b3:0c:a7:ba:ac:78:a3:06:7b:
+ 2a:11:00:02:bf:b5:05:c4:82:70:c4:57:6e:4f:19:
+ 51:84:0e:f5:26:04:f9:4d:64:7b:59:97:b1:97:a1:
+ 28:f0:86:07:5b:53:5d:42:fb:ee:c0:a8:9b:ce:f2:
+ f4:eb:e5:9e:fa:81:a1:c0:5c:46:b5:80:a5:9a:8d:
+ 31:7d:0b:c3:b9:cb:1d:92:62:66:42:fd:e9:d1:f2:
+ 45:e2:a5:aa:ea:f8:01:2b:16:7f:1c:38:c2:8c:66:
+ 24:0c:d3:83:c6:da:b5:17:a5:1f:bd:47:73:53:68:
+ 5b:7b:d5:b4:25:b7:48:3c:c5:25:42:5f:e9:84:90:
+ 64:e9:e2:cb:27:0a:43:d8:f0:36:16:39:db:46:e5:
+ fa:8f:67:db:ba:d6:2c:05:a4:43:dd:1b:d7:29:ac:
+ f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 73:4C:95:45:4C:3B:F6:7E:7B:92:30:C9:AC:30:51:E7:7D:21:D2:BF
+ BD:54:1F:A6:8B:24:E6:BD:59:FD:50:9F:2B:A8:54:7F:F2:7B:B1:3E
X509v3 Authority Key Identifier:
- keyid:DE:10:87:7A:48:75:9E:50:89:F1:AE:40:E0:BF:BA:5F:D8:63:77:9B
+ keyid:1A:ED:F5:14:E8:2E:82:B7:0E:5A:25:9D:2F:88:BE:43:75:E1:76:F9
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -235,41 +235,41 @@
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha256WithRSAEncryption
- 3f:40:c5:c8:06:d9:35:27:63:63:e7:9c:08:1d:ee:ef:e3:b6:
- 11:a7:a2:4f:b0:bf:8b:14:2f:16:6f:47:f5:0b:d8:3d:98:7a:
- 03:7d:30:0c:85:11:80:a6:ff:fc:99:dd:a0:31:d6:fb:bf:4f:
- 09:49:64:ca:8a:34:3d:56:c3:72:b0:08:e2:b8:12:95:1e:70:
- 4f:3f:5b:1e:70:6f:06:f0:78:77:90:3b:d1:54:83:f2:b1:8e:
- 7e:25:d3:f7:21:66:8b:a9:c4:f7:f6:bb:a9:7a:3b:e0:99:4c:
- 94:b7:45:3a:fe:61:74:0a:70:de:a0:d6:c1:c4:dd:59:0e:cc:
- 81:d1:ad:da:99:1d:83:b3:e2:3a:7b:8f:5c:3a:25:52:3e:40:
- 5a:96:00:71:e6:f3:5d:9c:6a:54:be:0f:24:8e:8b:3a:14:37:
- 6a:72:0b:41:e6:06:d1:b2:3d:f9:a2:bb:d7:6e:f1:ac:70:08:
- 62:e7:f2:82:df:fb:85:e4:99:b9:cf:84:9a:34:55:e5:e8:39:
- a9:e7:e3:79:54:07:c9:6b:1d:33:aa:30:d3:ea:7b:32:07:0f:
- 23:34:10:fa:58:17:ad:e0:62:c8:ce:d6:0f:db:34:0c:a3:a9:
- f9:09:05:c6:25:d9:ce:e5:52:0a:5c:8a:f3:c9:44:72:45:71:
- 6d:5c:fc:d1
+ cc:05:72:82:a4:23:cc:ad:29:af:c0:b7:b5:25:d8:0d:a0:7e:
+ 6e:38:bd:7d:5a:6e:39:a9:c0:1c:c6:21:89:74:b1:83:9e:46:
+ 55:5a:e7:c5:ae:d7:e0:6f:c5:f5:95:a2:17:69:02:30:8a:9b:
+ 46:6e:43:b4:ba:2c:34:5b:55:fc:12:90:38:2b:16:94:56:10:
+ 4a:09:14:e3:77:ca:12:aa:12:30:60:06:ac:7a:fa:92:ed:1f:
+ d7:b3:08:83:c4:e7:a8:00:f0:fc:02:aa:9e:0d:f1:fa:0e:3a:
+ 17:05:9f:a0:2d:45:d3:78:2b:49:93:fa:c0:2b:e4:e2:77:07:
+ e5:8c:00:a4:89:c0:25:17:6d:3a:a9:4b:db:f5:f6:d6:e3:4f:
+ 5f:50:1d:3c:d9:00:69:9c:b5:ee:3f:cc:8b:ae:61:8d:c4:57:
+ d4:76:f0:97:2f:0c:a2:13:1a:29:1b:98:05:56:89:f8:55:b9:
+ 56:d2:11:d2:b7:dc:aa:24:88:a9:6c:2c:af:9e:85:8a:b1:c5:
+ 4d:8f:6f:36:b6:b7:60:cc:42:ee:fc:14:75:3c:25:b2:99:fb:
+ 36:86:54:f5:27:df:06:09:32:94:c9:84:43:83:6e:09:14:2d:
+ 61:2c:d5:8e:7f:ae:a0:21:ed:f4:52:ec:2c:a8:98:dc:85:1e:
+ 30:61:23:b5
-----BEGIN CERTIFICATE-----
MIIDcDCCAligAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTBTwbkP
-J3o5PTnEo3yWuw7k2f0Qdpg2YvwzfAJHbG8u0mGq1eOGZ6Lvk6P9FYMcJ5DzgUpB
-8ubmviaasHcd5YqXLaeHa4BJJg7aSDa663Fqy7SCZkL9WF+8yRgw7i8MKIHnNrl2
-2lWMes+pHwTGbkLq04PGjQQmnhGKxs0lx0pY0ZiGtTecPmguF02BhfPUfWXnD4aK
-ydAt/E/HQCrvSKsuTC62HIFOc3PpzNTvlLEXLHBksEyth89FE8JnRtHGs2GNd69P
-HLZPttkrPExfciN3x4VlHYVIKAY0tPC9qXZ6ZWBZ1vYm9oWZe4QWXpGN+ZC4ddNK
-d2of+O1mZyJkSwIDAQABo4HOMIHLMB0GA1UdDgQWBBRzTJVFTDv2fnuSMMmsMFHn
-fSHSvzAfBgNVHSMEGDAWgBTeEId6SHWeUInxrkDgv7pf2GN3mzA3BggrBgEFBQcB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-ggEBAD9AxcgG2TUnY2PnnAgd7u/jthGnok+wv4sULxZvR/UL2D2YegN9MAyFEYCm
-//yZ3aAx1vu/TwlJZMqKND1Ww3KwCOK4EpUecE8/Wx5wbwbweHeQO9FUg/Kxjn4l
-0/chZoupxPf2u6l6O+CZTJS3RTr+YXQKcN6g1sHE3VkOzIHRrdqZHYOz4jp7j1w6
-JVI+QFqWAHHm812calS+DySOizoUN2pyC0HmBtGyPfmiu9du8axwCGLn8oLf+4Xk
-mbnPhJo0VeXoOann43lUB8lrHTOqMNPqezIHDyM0EPpYF63gYsjO1g/bNAyjqfkJ
-BcYl2c7lUgpcivPJRHJFcW1c/NE=
+ggEBAMwFcoKkI8ytKa/At7Ul2A2gfm44vX1abjmpwBzGIYl0sYOeRlVa58Wu1+Bv
+xfWVohdpAjCKm0ZuQ7S6LDRbVfwSkDgrFpRWEEoJFON3yhKqEjBgBqx6+pLtH9ez
+CIPE56gA8PwCqp4N8foOOhcFn6AtRdN4K0mT+sAr5OJ3B+WMAKSJwCUXbTqpS9v1
+9tbjT19QHTzZAGmcte4/zIuuYY3EV9R28JcvDKITGikbmAVWifhVuVbSEdK33Kok
+iKlsLK+ehYqxxU2Pbza2t2DMQu78FHU8JbKZ+zaGVPUn3wYJMpTJhEODbgkULWEs
+1Y5/rqAh7fRS7CyomNyFHjBhI7U=
-----END CERTIFICATE-----
Certificate:
@@ -286,30 +286,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a8:11:83:b7:cc:88:e9:4c:69:28:ad:6a:95:83:
- 6a:1c:28:52:d2:02:21:00:93:f0:82:8e:fc:b8:fb:
- b9:44:e2:43:e9:fe:3f:7e:0c:01:a6:9f:12:fc:09:
- fc:66:44:03:b4:66:78:3c:36:05:37:00:6e:87:54:
- ff:61:95:ab:37:88:a0:6e:f7:8f:c2:ea:8d:e5:bf:
- 4c:21:21:1d:74:22:dd:93:52:b3:66:d7:97:33:b9:
- cb:ab:8e:38:59:52:e7:f0:5c:09:50:ad:c9:e0:e1:
- 18:d7:cc:4a:d7:2b:41:cd:91:8c:a2:b0:25:d6:6c:
- d2:7d:e8:fa:20:3f:c8:aa:15:b9:77:b6:da:ac:86:
- f8:21:52:2e:f9:e7:b6:d5:65:fd:23:ba:2f:5b:1b:
- c6:62:76:00:f1:74:4b:e2:d9:9a:d3:67:03:71:d4:
- 93:af:93:4d:4f:82:da:1c:ba:a5:a9:0f:25:6b:54:
- dd:63:8c:3e:34:75:32:9e:c8:99:44:fd:f0:47:6d:
- 98:45:3c:75:b5:ac:0b:eb:d6:30:6a:a1:6c:67:14:
- ee:62:72:93:fe:bc:4c:e8:10:a2:3c:66:33:1c:49:
- e8:dc:2f:c9:a4:64:17:88:a0:1c:a4:b0:ff:9c:8f:
- c4:c6:18:1d:0c:55:62:a9:3b:f6:bc:53:16:62:82:
- 49:c5
+ 00:e3:4b:ce:a5:cb:b1:d2:1e:51:45:de:74:b2:98:
+ c6:35:8a:93:f3:07:cf:90:e9:e2:13:d4:2d:da:6d:
+ 1f:17:ba:d4:24:8f:f1:ba:3e:62:75:1f:6f:23:69:
+ e3:eb:c6:b3:37:e2:fa:7a:70:a9:f2:c1:ae:b5:bf:
+ 3d:12:b5:66:05:24:8e:0f:85:a4:4f:b9:bb:d0:d4:
+ 7a:86:fd:57:be:fa:c3:dc:bc:db:ba:04:19:b4:4d:
+ 3e:30:a0:cd:6e:07:a6:31:d5:e0:47:c4:c9:d3:2e:
+ 91:78:3a:22:3a:4e:7d:8a:d3:94:90:1f:57:b8:c3:
+ f3:6d:44:06:28:99:d4:eb:7e:98:3a:2d:3b:49:04:
+ 54:41:0c:50:ff:8b:ea:5e:31:a7:b1:c0:76:cd:22:
+ 09:e6:6c:d8:19:fb:34:eb:50:c5:f5:0f:76:86:6a:
+ d5:ce:75:bd:5f:fc:8f:e3:97:6d:20:fb:d5:c0:0e:
+ cd:18:fd:7c:f9:43:c8:74:24:2f:dc:82:57:b6:4e:
+ 6b:a3:d2:77:17:28:27:42:9e:b1:94:49:24:a5:84:
+ 34:fc:4b:9a:0b:84:cc:08:52:08:18:23:ee:72:02:
+ 95:64:e9:4f:f6:f0:09:c5:8d:a4:84:21:99:e8:9a:
+ d3:df:d5:c3:2d:3c:ee:0c:11:22:eb:a7:7d:6c:32:
+ 05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- DE:10:87:7A:48:75:9E:50:89:F1:AE:40:E0:BF:BA:5F:D8:63:77:9B
+ 1A:ED:F5:14:E8:2E:82:B7:0E:5A:25:9D:2F:88:BE:43:75:E1:76:F9
X509v3 Authority Key Identifier:
- keyid:DE:10:87:7A:48:75:9E:50:89:F1:AE:40:E0:BF:BA:5F:D8:63:77:9B
+ keyid:1A:ED:F5:14:E8:2E:82:B7:0E:5A:25:9D:2F:88:BE:43:75:E1:76:F9
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -324,41 +324,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 27:c0:50:82:2b:1b:71:84:c6:12:ea:45:ed:21:b8:fd:7c:08:
- 68:ec:de:4a:1b:98:3b:ce:e9:a1:9e:42:9a:e0:f4:e2:09:a6:
- 5c:98:33:16:5b:65:6b:fc:b9:9b:26:90:e1:86:58:1f:0a:7e:
- 7e:0d:7d:4e:0e:8b:93:04:b9:84:f0:e8:a3:7f:34:e2:ab:f5:
- d5:bb:46:b7:df:a0:3a:81:8c:56:48:02:95:8f:06:cb:f2:cd:
- 2a:39:c6:12:5a:9d:62:e9:a9:49:55:4d:e9:17:c2:97:3d:81:
- 12:76:d8:68:18:f6:7e:a6:c4:52:a9:85:4c:83:38:94:2b:df:
- dd:39:bb:cf:e1:9e:4e:e1:a0:eb:63:8a:c0:6e:99:01:65:78:
- b5:ca:ab:2a:90:86:c5:5e:53:62:57:89:14:c1:41:8f:e6:9a:
- 60:97:e4:5c:5b:fa:28:9c:9f:e3:55:ed:42:36:b6:d0:8d:f3:
- 0c:cf:6e:87:38:aa:98:91:a9:1f:48:2a:c7:27:49:04:d6:d6:
- f8:33:c9:d0:e2:b7:87:00:9a:1f:63:af:5b:ac:70:7e:96:9f:
- b0:3b:e5:a3:f8:04:b6:f8:2c:38:54:21:06:51:33:32:78:80:
- 17:59:83:95:66:65:1d:b5:5b:f2:1b:3e:6d:9e:98:c2:09:f3:
- ec:52:20:5b
+ 02:89:3f:e5:42:09:a5:9a:63:2f:54:2d:67:51:ab:bf:e0:9e:
+ 5c:76:a0:fb:19:f2:49:74:c6:65:ac:46:48:de:b8:52:58:60:
+ ee:6f:0b:04:dd:b8:b1:89:a1:cb:db:1e:28:5f:20:fb:d3:ef:
+ 8f:5c:28:a5:02:f6:13:7e:20:9a:e9:cd:9a:91:b0:00:2f:3c:
+ 6c:3e:84:3b:b2:33:4f:8b:b3:3f:62:6d:d5:f9:89:f5:c3:63:
+ 37:52:7b:4f:a3:20:e4:eb:25:bb:c0:a0:f9:d1:e8:d0:fa:53:
+ 55:d4:1f:2c:d5:e2:2e:b0:fe:4c:95:c9:9c:0d:99:24:af:b5:
+ f7:c8:ff:dc:f4:63:bd:bd:65:97:a1:b9:26:d8:51:d6:96:65:
+ f7:c7:6a:32:ec:23:59:37:8c:53:30:d6:f6:93:70:76:c3:8a:
+ 3d:5e:74:13:59:36:d7:0d:18:75:06:e5:1f:fc:c0:aa:b4:c8:
+ 93:0a:4c:f0:fc:d0:e9:1e:23:7e:6e:17:86:c7:1f:8e:a3:5a:
+ 12:82:8f:35:a3:d2:69:b2:f8:9d:7a:88:75:e6:84:05:ea:34:
+ 1e:e0:0c:bc:e9:6e:f3:37:eb:5d:08:a2:fb:d8:d2:69:5d:f8:
+ ab:8a:4b:23:0c:9e:6a:44:83:16:7a:94:65:b3:dd:61:1c:28:
+ 31:1f:75:f1
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKgRg7fMiOlMaSitapWD
-ahwoUtICIQCT8IKO/Lj7uUTiQ+n+P34MAaafEvwJ/GZEA7RmeDw2BTcAbodU/2GV
-qzeIoG73j8LqjeW/TCEhHXQi3ZNSs2bXlzO5y6uOOFlS5/BcCVCtyeDhGNfMStcr
-Qc2RjKKwJdZs0n3o+iA/yKoVuXe22qyG+CFSLvnnttVl/SO6L1sbxmJ2APF0S+LZ
-mtNnA3HUk6+TTU+C2hy6pakPJWtU3WOMPjR1Mp7ImUT98EdtmEU8dbWsC+vWMGqh
-bGcU7mJyk/68TOgQojxmMxxJ6NwvyaRkF4igHKSw/5yPxMYYHQxVYqk79rxTFmKC
-ScUCAwEAAaOByzCByDAdBgNVHQ4EFgQU3hCHekh1nlCJ8a5A4L+6X9hjd5swHwYD
-VR0jBBgwFoAU3hCHekh1nlCJ8a5A4L+6X9hjd5swNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAONLzqXLsdIeUUXedLKY
+xjWKk/MHz5Dp4hPULdptHxe61CSP8bo+YnUfbyNp4+vGszfi+npwqfLBrrW/PRK1
+ZgUkjg+FpE+5u9DUeob9V776w9y827oEGbRNPjCgzW4HpjHV4EfEydMukXg6IjpO
+fYrTlJAfV7jD821EBiiZ1Ot+mDotO0kEVEEMUP+L6l4xp7HAds0iCeZs2Bn7NOtQ
+xfUPdoZq1c51vV/8j+OXbSD71cAOzRj9fPlDyHQkL9yCV7ZOa6PSdxcoJ0KesZRJ
+JKWENPxLmguEzAhSCBgj7nIClWTpT/bwCcWNpIQhmeia09/Vwy087gwRIuunfWwy
+BTECAwEAAaOByzCByDAdBgNVHQ4EFgQUGu31FOgugrcOWiWdL4i+Q3XhdvkwHwYD
+VR0jBBgwFoAUGu31FOgugrcOWiWdL4i+Q3XhdvkwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAnwFCCKxtx
-hMYS6kXtIbj9fAho7N5KG5g7zumhnkKa4PTiCaZcmDMWW2Vr/LmbJpDhhlgfCn5+
-DX1ODouTBLmE8OijfzTiq/XVu0a336A6gYxWSAKVjwbL8s0qOcYSWp1i6alJVU3p
-F8KXPYESdthoGPZ+psRSqYVMgziUK9/dObvP4Z5O4aDrY4rAbpkBZXi1yqsqkIbF
-XlNiV4kUwUGP5ppgl+RcW/oonJ/jVe1CNrbQjfMMz26HOKqYkakfSCrHJ0kE1tb4
-M8nQ4reHAJofY69brHB+lp+wO+Wj+AS2+Cw4VCEGUTMyeIAXWYOVZmUdtVvyGz5t
-npjCCfPsUiBb
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQACiT/lQgml
+mmMvVC1nUau/4J5cdqD7GfJJdMZlrEZI3rhSWGDubwsE3bixiaHL2x4oXyD70++P
+XCilAvYTfiCa6c2akbAALzxsPoQ7sjNPi7M/Ym3V+Yn1w2M3UntPoyDk6yW7wKD5
+0ejQ+lNV1B8s1eIusP5MlcmcDZkkr7X3yP/c9GO9vWWXobkm2FHWlmX3x2oy7CNZ
+N4xTMNb2k3B2w4o9XnQTWTbXDRh1BuUf/MCqtMiTCkzw/NDpHiN+bheGxx+Oo1oS
+go81o9Jpsvideoh15oQF6jQe4Ay86W7zN+tdCKL72NJpXfiriksjDJ5qRIMWepRl
+s91hHCgxH3Xx
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/common.py b/net/data/verify_certificate_chain_unittest/common.py
index 0174ec1..6bfefbf 100755
--- a/net/data/verify_certificate_chain_unittest/common.py
+++ b/net/data/verify_certificate_chain_unittest/common.py
@@ -426,7 +426,7 @@
return Certificate(name, TYPE_CA, None)
-def create_intermediary_certificate(name, issuer):
+def create_intermediate_certificate(name, issuer):
return Certificate(name, TYPE_CA, issuer)
diff --git a/net/data/verify_certificate_chain_unittest/expired-intermediary.pem b/net/data/verify_certificate_chain_unittest/expired-intermediary.pem
deleted file mode 100644
index f3f2054..0000000
--- a/net/data/verify_certificate_chain_unittest/expired-intermediary.pem
+++ /dev/null
@@ -1,280 +0,0 @@
-[Created by: generate-expired-intermediary.py]
-
-Certificate chain with 1 intermediary, where the intermediary is expired
-(violates validity.notAfter). Verification is expected to fail.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:aa:15:ea:8b:25:e9:de:1a:5f:39:89:dd:71:6d:
- 30:a6:24:ca:59:9b:63:ab:c2:18:2d:d4:80:ea:63:
- 71:70:2e:fe:ac:c0:7d:01:b1:35:06:7c:ad:a8:8c:
- 18:5f:34:16:23:07:78:07:f1:ee:92:08:39:68:1b:
- 08:53:c0:4e:68:62:01:e3:5e:3f:6f:bf:84:18:06:
- a8:59:8d:81:cc:39:71:b9:49:a8:19:2e:44:49:7b:
- 8c:a6:71:15:2c:2a:3d:69:b9:42:5f:48:3c:1b:37:
- c0:c0:fa:11:a8:d2:5a:bc:70:43:e3:b5:04:62:42:
- 40:bc:5a:8d:f6:bb:27:7a:70:34:9b:dc:a8:12:75:
- 0d:1b:5c:1e:81:44:41:7f:57:6e:c6:40:78:f6:a6:
- 5b:98:93:61:4d:e6:dd:bd:49:8f:ba:1e:c5:ac:e9:
- 3f:b3:d1:c5:c9:dd:db:88:f0:47:5a:fc:fc:ec:b3:
- 87:2f:7f:f0:e1:a0:69:05:48:21:58:18:4b:79:e9:
- de:92:9c:5f:89:79:68:f7:5e:59:58:9c:09:88:5e:
- 7e:1c:6d:1e:ad:41:4d:f2:b9:9f:ef:9a:9b:57:8e:
- ff:35:c3:69:2c:35:eb:30:f0:e4:07:94:09:87:a6:
- ef:f4:1b:4b:61:47:64:d1:c9:8b:ba:08:e3:9a:01:
- 99:43
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 40:79:FB:A7:C3:78:BA:A4:08:EC:1C:B2:14:21:D9:DD:6A:9E:B5:29
- X509v3 Authority Key Identifier:
- keyid:6D:48:EB:C2:7F:9A:86:86:39:A3:39:79:C1:5B:A7:BD:A9:4E:23:00
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 5d:d4:68:d4:44:96:48:60:17:d4:88:12:43:df:6b:f0:b3:4c:
- b2:ab:70:57:bc:d3:98:ae:34:d2:ab:e9:a3:b7:ae:76:9b:49:
- e5:c5:bd:45:33:6a:19:e2:58:96:c7:49:98:24:0b:c1:57:5e:
- 64:a7:2d:7a:c6:1f:fb:9d:ba:a9:19:6e:25:31:2a:b1:82:41:
- 47:d4:02:47:ba:03:c3:43:d1:6b:05:10:b0:25:30:5c:0c:17:
- 3c:a6:7c:4e:6d:94:35:b4:65:e6:67:32:9a:9b:df:26:fa:c6:
- f6:f9:c0:47:62:64:a9:95:02:a3:aa:70:82:38:c3:6d:b3:cd:
- 75:37:bd:4e:c5:91:bc:a1:48:7e:47:a1:bb:39:c4:7d:06:ef:
- dc:c1:28:6b:6e:c6:d5:a3:e1:a0:d5:ec:c3:0a:ae:e5:5b:da:
- 67:14:af:f5:6e:6a:06:72:2e:0d:61:31:31:b7:d4:a4:7b:45:
- 21:50:cb:2d:30:c4:1f:c5:55:5c:e2:50:ce:35:cc:23:35:b0:
- c2:92:ae:89:16:93:66:94:36:43:ff:30:79:b1:28:4d:6f:d1:
- 01:83:a4:e5:fd:d2:d8:6f:c0:0e:e2:d1:85:e8:56:ea:a7:9a:
- d3:ec:f6:96:fc:d2:0c:ec:61:78:97:c8:2a:6d:49:67:ac:66:
- 19:37:0a:f1
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFeqL
-JeneGl85id1xbTCmJMpZm2Orwhgt1IDqY3FwLv6swH0BsTUGfK2ojBhfNBYjB3gH
-8e6SCDloGwhTwE5oYgHjXj9vv4QYBqhZjYHMOXG5SagZLkRJe4ymcRUsKj1puUJf
-SDwbN8DA+hGo0lq8cEPjtQRiQkC8Wo32uyd6cDSb3KgSdQ0bXB6BREF/V27GQHj2
-pluYk2FN5t29SY+6HsWs6T+z0cXJ3duI8Eda/Pzss4cvf/DhoGkFSCFYGEt56d6S
-nF+JeWj3XllYnAmIXn4cbR6tQU3yuZ/vmptXjv81w2ksNesw8OQHlAmHpu/0G0th
-R2TRyYu6COOaAZlDAgMBAAGjgekwgeYwHQYDVR0OBBYEFEB5+6fDeLqkCOwcshQh
-2d1qnrUpMB8GA1UdIwQYMBaAFG1I68J/moaGOaM5ecFbp72pTiMAMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAXdRo1ESWSGAX1IgSQ99r
-8LNMsqtwV7zTmK400qvpo7eudptJ5cW9RTNqGeJYlsdJmCQLwVdeZKctesYf+526
-qRluJTEqsYJBR9QCR7oDw0PRawUQsCUwXAwXPKZ8Tm2UNbRl5mcympvfJvrG9vnA
-R2JkqZUCo6pwgjjDbbPNdTe9TsWRvKFIfkehuznEfQbv3MEoa27G1aPhoNXswwqu
-5VvaZxSv9W5qBnIuDWExMbfUpHtFIVDLLTDEH8VVXOJQzjXMIzWwwpKuiRaTZpQ2
-Q/8webEoTW/RAYOk5f3S2G/ADuLRhehW6qea0+z2lvzSDOxheJfIKm1JZ6xmGTcK
-8Q==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Mar 1 12:00:00 2015 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b5:a7:f6:93:6b:28:98:90:c6:36:f3:31:5e:b2:
- 6d:43:8a:03:c7:8d:9a:04:1a:23:9d:07:ee:5c:47:
- 26:da:31:7e:96:34:7e:9d:d8:29:ff:56:2c:05:f9:
- d9:ff:e9:10:26:9e:53:12:4b:cb:9d:b6:2f:9d:87:
- 33:9c:91:7e:d4:81:c7:63:cf:3a:52:b7:62:18:bb:
- b5:47:c4:ba:80:79:71:30:31:ed:08:e6:c5:85:03:
- d1:e7:05:24:bf:8b:24:f0:2d:44:3c:80:eb:da:75:
- f5:8f:a7:6e:dc:1c:46:b8:c6:bf:76:7b:20:e6:f5:
- 3d:0a:c1:32:54:c6:f1:e6:34:6c:18:c6:11:a5:16:
- 5b:29:24:75:fa:d3:ee:b9:91:56:80:88:df:fe:7f:
- 6b:fa:07:49:95:46:b0:0e:61:ce:8d:f0:a7:64:d5:
- e5:05:7a:c1:9a:6f:e9:e0:44:05:f8:75:ea:d9:64:
- c9:20:98:28:11:d0:c4:fe:31:2f:9b:a5:79:42:2c:
- ee:95:6b:7c:34:d4:15:5c:f8:68:e9:de:5c:b7:c8:
- 1c:33:aa:24:3d:29:60:6e:18:e8:c8:cb:6a:a6:ad:
- 3c:eb:36:0f:1a:81:aa:0b:8a:0e:fd:7b:e5:8b:12:
- 7b:76:04:56:7e:b7:1d:cf:cf:65:77:03:fe:a2:6d:
- 02:29
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 6D:48:EB:C2:7F:9A:86:86:39:A3:39:79:C1:5B:A7:BD:A9:4E:23:00
- X509v3 Authority Key Identifier:
- keyid:7A:B1:AA:9D:A5:49:7E:15:F6:31:BC:33:C7:B6:57:F7:FD:13:5C:CF
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 1f:03:06:d7:ad:e1:fb:5a:3f:20:60:5d:d0:db:54:2b:b7:52:
- 1a:67:c1:06:75:a7:48:d0:de:14:02:e2:6b:c6:71:d0:da:41:
- 8e:59:c9:17:8e:c5:1e:27:2e:4a:16:2c:7c:77:1e:d4:1c:14:
- 84:85:22:b2:d4:49:90:ab:c3:86:a6:b5:52:97:53:1e:1f:2e:
- e4:ff:60:42:53:03:bb:59:e2:7e:f0:59:a6:4e:04:e6:73:3e:
- d3:2a:c3:ff:1f:69:cd:29:4b:ce:39:aa:93:b9:97:d6:f0:e6:
- e4:52:ca:30:5f:7f:2d:60:6f:93:20:ec:74:dc:d6:65:0d:5d:
- bc:49:cd:ee:56:29:4f:34:8f:9f:5d:54:b6:2b:df:7b:33:8b:
- 2a:b8:7d:f4:39:f3:e1:02:95:3f:e4:28:14:73:58:7d:88:2b:
- e5:1b:e5:0a:9e:eb:b2:e7:7c:bf:e7:1a:70:5f:0f:3d:50:d9:
- 8c:ea:4b:0a:e9:03:8e:5b:84:68:af:5f:72:6d:96:62:b3:90:
- de:f7:be:8d:95:cb:59:5e:d8:7b:41:3e:32:3a:76:a6:01:45:
- 54:9c:d5:98:78:f0:f7:bf:6b:00:4f:0e:c6:05:8b:0f:64:6a:
- ca:0d:fc:ff:db:08:d4:20:11:5e:2b:70:59:bb:5d:46:da:07:
- 94:12:e6:c7
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE1MDMwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaf2k2so
-mJDGNvMxXrJtQ4oDx42aBBojnQfuXEcm2jF+ljR+ndgp/1YsBfnZ/+kQJp5TEkvL
-nbYvnYcznJF+1IHHY886UrdiGLu1R8S6gHlxMDHtCObFhQPR5wUkv4sk8C1EPIDr
-2nX1j6du3BxGuMa/dnsg5vU9CsEyVMbx5jRsGMYRpRZbKSR1+tPuuZFWgIjf/n9r
-+gdJlUawDmHOjfCnZNXlBXrBmm/p4EQF+HXq2WTJIJgoEdDE/jEvm6V5QizulWt8
-NNQVXPho6d5ct8gcM6okPSlgbhjoyMtqpq086zYPGoGqC4oO/XvlixJ7dgRWfrcd
-z89ldwP+om0CKQIDAQABo4HLMIHIMB0GA1UdDgQWBBRtSOvCf5qGhjmjOXnBW6e9
-qU4jADAfBgNVHSMEGDAWgBR6saqdpUl+FfYxvDPHtlf3/RNczzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AB8DBtet4ftaPyBgXdDbVCu3UhpnwQZ1p0jQ3hQC4mvGcdDaQY5ZyReOxR4nLkoW
-LHx3HtQcFISFIrLUSZCrw4amtVKXUx4fLuT/YEJTA7tZ4n7wWaZOBOZzPtMqw/8f
-ac0pS845qpO5l9bw5uRSyjBffy1gb5Mg7HTc1mUNXbxJze5WKU80j59dVLYr33sz
-iyq4ffQ58+EClT/kKBRzWH2IK+Ub5Qqe67LnfL/nGnBfDz1Q2YzqSwrpA45bhGiv
-X3JtlmKzkN73vo2Vy1le2HtBPjI6dqYBRVSc1Zh48Pe/awBPDsYFiw9kasoN/P/b
-CNQgEV4rcFm7XUbaB5QS5sc=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:ea:ec:57:02:47:92:bc:08:b2:1a:2b:0d:03:36:
- e3:2c:b0:4a:52:00:ed:12:f6:5d:39:61:ba:1c:fc:
- 06:9c:11:13:b6:97:b1:ae:bc:66:4c:8a:05:03:29:
- 4c:8a:59:cb:27:86:96:98:ce:5c:35:17:74:ba:ad:
- 1f:14:00:2c:84:cf:cf:2c:fa:5e:a4:70:e5:66:e1:
- 28:79:be:5a:39:42:ad:a5:bb:66:ca:f2:59:d2:cc:
- 22:30:c7:bd:aa:19:e2:ed:be:4f:67:05:26:71:a1:
- 39:96:52:e1:42:cf:fe:83:d2:87:00:e2:96:7b:34:
- 64:cb:a7:76:ed:cf:79:ca:0f:1d:44:49:9e:7c:0a:
- cb:3f:f4:f2:95:1f:07:23:12:75:0c:f7:f4:55:4e:
- 3c:39:ac:0b:93:a4:33:76:27:82:d7:fa:9e:41:17:
- d6:98:e5:c9:a8:0d:40:62:b6:80:36:e7:35:71:6a:
- aa:bb:ae:25:0d:12:b1:c7:f2:18:e6:05:3f:43:df:
- 37:0b:92:30:1c:1f:7c:55:36:01:35:0b:8b:f0:19:
- 81:39:52:70:c6:e8:51:14:41:ae:e8:90:e0:ce:78:
- 31:98:8a:ed:0c:c7:24:bb:1a:3f:ef:78:80:0e:35:
- 19:e2:57:f7:3e:f6:ca:03:c2:f5:46:25:80:32:c7:
- 44:39
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 7A:B1:AA:9D:A5:49:7E:15:F6:31:BC:33:C7:B6:57:F7:FD:13:5C:CF
- X509v3 Authority Key Identifier:
- keyid:7A:B1:AA:9D:A5:49:7E:15:F6:31:BC:33:C7:B6:57:F7:FD:13:5C:CF
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- a2:db:fb:36:6b:24:df:02:28:0c:ba:9d:88:82:7b:e7:e0:87:
- 58:75:70:78:40:3d:f6:53:b9:57:0f:a3:01:b6:aa:3e:80:34:
- 2f:b5:dc:9b:30:3e:43:44:79:70:22:48:0a:33:28:87:6d:09:
- 90:92:d8:41:d5:ca:18:72:ba:65:5d:cb:b2:25:50:1c:07:f7:
- b7:b7:23:93:2c:da:61:b4:c8:15:66:17:17:b4:d3:a8:4a:cd:
- b6:01:bf:4c:e5:84:5d:b2:fb:fe:24:98:44:e8:84:16:6b:f4:
- 04:f9:88:50:ec:42:1c:31:4b:87:1b:67:76:63:01:8f:46:0b:
- 66:1b:59:a6:83:43:ed:33:4f:f8:74:74:2e:fe:8d:2c:f4:55:
- 9f:c5:f9:c1:eb:44:9b:5b:aa:bd:98:5e:36:87:0f:c8:8e:f3:
- f7:e3:ef:08:72:a8:f6:d0:f9:86:fa:58:1e:fb:73:43:b0:ba:
- f9:8d:b0:f5:29:da:64:be:d8:e2:94:88:75:25:54:ce:e6:4d:
- 80:33:be:bc:c0:7e:76:fc:65:2e:dc:74:d7:86:64:08:47:f0:
- 6c:a1:dc:ae:69:2e:71:23:56:eb:a0:6c:f6:2a:15:2c:a7:a5:
- 05:92:68:56:16:07:cd:82:62:02:e8:77:1f:0f:85:31:02:0c:
- c0:9a:56:cd
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOrsVwJHkrwIshorDQM2
-4yywSlIA7RL2XTlhuhz8BpwRE7aXsa68ZkyKBQMpTIpZyyeGlpjOXDUXdLqtHxQA
-LITPzyz6XqRw5WbhKHm+WjlCraW7ZsryWdLMIjDHvaoZ4u2+T2cFJnGhOZZS4ULP
-/oPShwDilns0ZMundu3PecoPHURJnnwKyz/08pUfByMSdQz39FVOPDmsC5OkM3Yn
-gtf6nkEX1pjlyagNQGK2gDbnNXFqqruuJQ0SscfyGOYFP0PfNwuSMBwffFU2ATUL
-i/AZgTlScMboURRBruiQ4M54MZiK7QzHJLsaP+94gA41GeJX9z72ygPC9UYlgDLH
-RDkCAwEAAaOByzCByDAdBgNVHQ4EFgQUerGqnaVJfhX2Mbwzx7ZX9/0TXM8wHwYD
-VR0jBBgwFoAUerGqnaVJfhX2Mbwzx7ZX9/0TXM8wNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCi2/s2ayTf
-AigMup2Ignvn4IdYdXB4QD32U7lXD6MBtqo+gDQvtdybMD5DRHlwIkgKMyiHbQmQ
-kthB1coYcrplXcuyJVAcB/e3tyOTLNphtMgVZhcXtNOoSs22Ab9M5YRdsvv+JJhE
-6IQWa/QE+YhQ7EIcMUuHG2d2YwGPRgtmG1mmg0PtM0/4dHQu/o0s9FWfxfnB60Sb
-W6q9mF42hw/IjvP34+8Icqj20PmG+lge+3NDsLr5jbD1KdpkvtjilIh1JVTO5k2A
-M768wH52/GUu3HTXhmQIR/BsodyuaS5xI1broGz2KhUsp6UFkmhWFgfNgmIC6Hcf
-D4UxAgzAmlbN
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/expired-intermediate.pem b/net/data/verify_certificate_chain_unittest/expired-intermediate.pem
new file mode 100644
index 0000000..6ca87fd
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/expired-intermediate.pem
@@ -0,0 +1,280 @@
+[Created by: generate-expired-intermediate.py]
+
+Certificate chain with 1 intermediate, where the intermediate is expired
+(violates validity.notAfter). Verification is expected to fail.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c0:b3:a7:c8:34:e7:e2:df:55:43:80:00:33:96:
+ 78:2c:3a:ac:7e:79:5d:86:9f:df:7e:9b:7a:30:d0:
+ 5b:30:2b:26:cc:06:e7:1f:13:6c:80:36:59:ec:1c:
+ 4b:c9:70:c2:79:14:f4:83:2f:cf:39:a2:9d:96:5c:
+ f2:91:90:ae:8f:f6:63:f6:cc:fb:1b:eb:fe:53:9b:
+ b6:27:8b:52:bb:bb:94:1b:8b:e5:76:cc:5a:4d:d7:
+ 9c:96:05:62:f4:c8:bf:87:cf:a7:6e:55:fd:b5:ab:
+ 28:ae:08:c3:cd:5f:72:77:e3:d8:8d:de:1b:cb:17:
+ bb:4c:b3:3d:6d:f2:84:22:5c:fb:84:31:46:68:3e:
+ bd:b5:83:81:24:01:80:7d:eb:76:8e:1f:7b:8f:e7:
+ 77:cb:8f:ca:69:77:5a:7a:56:f3:1c:3c:16:bf:00:
+ 2b:9f:2d:f5:3a:59:e0:f5:84:91:d3:7a:3e:90:39:
+ 44:5a:65:36:ab:5f:25:5d:9b:57:1e:13:91:97:88:
+ cb:36:39:d3:10:ee:2c:54:4d:6c:d7:22:92:37:0b:
+ 04:05:8f:1d:c3:58:b4:87:7c:db:17:2b:fc:db:00:
+ eb:0f:8c:75:96:e5:12:96:37:fe:b2:d5:68:1c:67:
+ fe:fb:60:c2:30:85:ae:0d:9b:62:50:6f:32:ae:fc:
+ 85:77
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ FC:25:45:D2:F9:2D:71:1C:EA:7B:79:2C:C5:C7:37:5F:9E:2A:5F:5D
+ X509v3 Authority Key Identifier:
+ keyid:4C:33:3C:86:48:60:C6:50:02:47:AF:DE:60:2F:A0:5C:96:EE:70:7B
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 46:d0:27:3e:e6:49:d1:48:c4:0e:d3:0e:d0:3e:be:44:7f:0e:
+ a0:38:92:84:c4:ed:60:65:1c:26:3f:12:dd:d8:e3:49:c6:c8:
+ 42:86:67:95:6c:61:e7:61:8c:da:0a:db:90:d0:6f:e7:9f:05:
+ 38:a5:4a:4e:c3:40:f8:2b:ff:67:ad:9f:70:27:10:8d:68:f2:
+ ee:78:d5:a7:83:2f:e3:67:b3:47:8c:39:c9:29:97:f0:77:b7:
+ fe:7f:c7:6b:aa:6d:4c:83:39:e3:dc:bd:c3:18:e3:d8:d3:50:
+ 8a:97:d3:ee:59:3a:62:20:5b:e7:99:77:e6:d1:d2:d3:d0:d5:
+ 04:7d:86:8e:26:30:05:d1:0e:0f:d6:d2:1e:49:42:67:61:81:
+ 3d:10:75:d6:ba:c4:07:bb:e7:43:c8:a6:f7:56:e3:2b:d4:35:
+ d1:56:94:5c:0b:b6:25:02:d7:cd:74:e7:4d:1d:02:d3:43:ab:
+ dd:50:9f:c4:cf:15:4c:77:87:48:1e:57:3f:3d:7e:7e:67:9b:
+ ae:2f:79:ea:16:a9:cd:c6:76:cb:3c:75:75:a7:78:22:af:a9:
+ b4:83:d3:b2:72:e8:43:cc:4a:8d:ee:b4:5a:ac:b2:30:96:52:
+ 91:26:4b:17:29:4e:53:b4:58:df:f9:1d:53:2c:66:3d:c5:d7:
+ 11:99:b6:f5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Mar 1 12:00:00 2015 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:ae:f8:c2:3a:71:85:a2:bd:ca:2c:30:b7:22:3a:
+ f3:c9:24:7e:74:86:98:af:cd:13:0a:c1:4c:52:56:
+ f6:03:19:af:7d:67:73:2e:e2:99:e4:3b:f7:7a:7c:
+ dc:8d:83:61:36:c4:89:bc:14:aa:11:8d:e7:fe:3d:
+ 61:e5:1a:78:88:9b:af:63:05:30:78:f8:1e:f5:92:
+ e5:2d:02:d4:b4:cb:a4:44:a4:cc:1b:38:52:fb:55:
+ 4a:b9:37:d4:bb:d0:13:20:69:cb:1f:34:4c:d0:ca:
+ 32:04:23:f3:52:1f:39:e8:90:a3:3d:68:f5:a9:e3:
+ fc:e3:f1:e2:c3:47:55:68:ab:7e:90:77:87:90:00:
+ e9:30:05:ea:30:07:6d:66:d6:c8:98:bd:8b:81:18:
+ c6:c5:45:26:30:ce:c8:61:6a:dc:70:7a:23:8a:4d:
+ b8:ca:94:68:a7:48:ba:d6:fb:10:89:a9:9d:5e:1c:
+ 43:10:b5:de:33:68:a3:2c:91:2b:70:da:be:bd:1e:
+ b2:30:2e:b9:f7:57:fc:d9:d1:4a:92:78:34:93:df:
+ 89:6a:85:1c:df:23:f3:30:fb:7d:9f:7b:b3:cc:9d:
+ 85:98:f8:64:7a:34:ba:7a:51:80:01:eb:91:77:7f:
+ 77:f6:65:86:9e:51:5e:4e:20:6f:c9:ed:3c:50:1c:
+ cd:8f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 4C:33:3C:86:48:60:C6:50:02:47:AF:DE:60:2F:A0:5C:96:EE:70:7B
+ X509v3 Authority Key Identifier:
+ keyid:FB:59:3E:CC:A2:42:62:72:9F:53:96:95:3A:48:EA:16:80:C8:42:40
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 4f:a5:3b:98:b8:a9:83:3a:35:3d:75:a8:f6:e8:59:43:95:3a:
+ 0b:37:dc:ac:d0:12:82:31:2a:64:c8:64:81:f4:f8:d7:28:2c:
+ bf:6f:81:79:a8:21:7b:70:62:4b:7f:c8:b1:bf:69:8b:38:14:
+ e8:78:aa:61:f1:6f:6b:1a:81:93:e7:c4:7b:9f:99:75:2c:90:
+ e9:8d:3a:7e:4e:2f:09:f9:0a:20:04:cb:3e:c6:ed:59:f5:2e:
+ 2e:be:73:b4:40:4f:9d:96:f0:8c:b8:01:88:fa:bf:7a:ed:f6:
+ cc:46:c5:62:1b:bb:f3:1d:3a:4b:02:7c:aa:6e:61:1f:5b:4e:
+ 0e:d5:3f:c3:5c:c0:5f:1a:aa:fb:bb:4f:4d:a4:45:4c:2a:cd:
+ c0:c2:29:3d:1f:31:2b:0d:80:45:c7:5f:4b:09:96:88:a6:4a:
+ b0:fb:66:3f:4b:41:c3:5b:a7:f7:7f:ce:cb:b5:c9:54:62:66:
+ 61:d1:20:73:f6:c2:e0:81:11:20:b1:a0:a5:44:3f:52:4a:77:
+ 9d:b9:b9:99:e7:73:a8:23:1f:02:91:03:e5:90:ad:23:00:2a:
+ 08:99:37:16:df:ca:70:bf:da:e9:50:1d:c5:94:81:57:97:7d:
+ 3f:d2:4f:91:74:94:90:2e:5c:dd:33:13:a0:83:25:4d:c0:7e:
+ 19:97:e3:d6
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c9:53:af:4f:d1:35:5f:3e:69:08:13:28:41:5b:
+ 69:25:b0:ee:39:75:73:4c:63:c4:08:42:0c:5e:04:
+ 04:62:21:1a:92:5d:c8:6d:e8:44:6a:3b:3e:c5:6a:
+ 22:56:86:db:cb:38:c8:c7:55:ed:2c:dc:bc:36:39:
+ 76:96:3f:6a:5f:3d:12:43:60:b1:94:13:75:94:02:
+ 8b:ad:f4:be:85:5b:ed:f1:c5:03:2c:3c:0c:e3:eb:
+ 7f:ab:94:4a:79:8b:48:fd:ad:7a:c3:e0:a8:de:40:
+ ea:f0:a7:87:54:40:6e:f4:74:88:aa:2b:bb:21:bf:
+ d6:7f:da:bc:cf:52:48:3d:b6:75:0d:e2:6b:ea:03:
+ 0a:d7:39:f5:78:45:63:05:1a:4b:99:40:5e:97:08:
+ 0a:5d:34:63:fa:ba:de:a7:f5:1c:e8:b2:26:96:0f:
+ c9:c1:ac:6d:ef:05:8d:1c:dc:09:0b:bc:d3:f3:fb:
+ 10:43:2f:b2:36:3e:cf:84:1a:37:1e:fc:81:67:c6:
+ 14:87:bb:87:33:16:2a:95:cf:e7:0a:b7:52:00:05:
+ 09:08:a9:a5:97:5d:be:ed:19:92:4e:6c:4f:94:7f:
+ e5:1a:34:c0:dc:3f:02:8e:ae:77:fc:b6:27:77:78:
+ 48:e7:ca:a1:bd:27:1d:3c:a3:2d:8d:46:d5:a6:9d:
+ 53:cd
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ FB:59:3E:CC:A2:42:62:72:9F:53:96:95:3A:48:EA:16:80:C8:42:40
+ X509v3 Authority Key Identifier:
+ keyid:FB:59:3E:CC:A2:42:62:72:9F:53:96:95:3A:48:EA:16:80:C8:42:40
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 34:3c:af:58:31:78:ea:c0:32:23:d8:b0:8e:84:44:9c:a3:b7:
+ 0b:b5:a4:4b:3d:21:d2:8a:02:ec:4c:ed:ab:c3:0a:17:89:50:
+ 45:fc:43:0b:db:6c:e6:69:56:3c:41:b0:c9:2d:12:19:bd:a1:
+ b6:a7:fa:25:a4:73:6f:32:06:b7:f5:ac:64:b3:b9:b6:44:65:
+ 83:b2:48:cc:3c:68:69:ae:16:0a:c0:c5:57:39:00:51:16:97:
+ 0e:03:7d:e7:02:65:f2:84:de:e9:a6:9d:d5:83:73:37:9d:f5:
+ bc:d8:ef:dc:6f:1b:48:db:f6:ca:a0:00:d5:e6:c0:f6:94:2d:
+ a9:4e:b4:4d:cf:49:7d:c4:4d:3a:68:a2:b2:d8:e8:67:77:98:
+ 6f:1c:2d:4a:74:13:2b:24:04:67:50:38:7e:e9:cb:0c:94:0d:
+ d0:07:50:52:a5:03:10:07:6a:04:ef:33:ea:b0:70:9f:27:34:
+ 47:b0:f8:41:81:7e:f2:93:0b:c0:cf:c3:d7:06:59:f1:24:2a:
+ 61:64:7f:38:f0:4f:77:d3:92:e4:1f:e4:44:a4:b6:85:40:59:
+ 3d:df:f2:cc:57:ea:1a:58:1d:f8:90:d4:2d:53:67:56:c3:88:
+ 9d:17:0f:19:19:fc:ed:4e:cc:b9:76:fa:fc:93:e5:bf:08:e7:
+ a9:d6:46:0f
+-----BEGIN TRUSTED_CERTIFICATE-----
+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMlTr0/RNV8+aQgTKEFb
+aSWw7jl1c0xjxAhCDF4EBGIhGpJdyG3oRGo7PsVqIlaG28s4yMdV7SzcvDY5dpY/
+al89EkNgsZQTdZQCi630voVb7fHFAyw8DOPrf6uUSnmLSP2tesPgqN5A6vCnh1RA
+bvR0iKoruyG/1n/avM9SSD22dQ3ia+oDCtc59XhFYwUaS5lAXpcICl00Y/q63qf1
+HOiyJpYPycGsbe8FjRzcCQu80/P7EEMvsjY+z4QaNx78gWfGFIe7hzMWKpXP5wq3
+UgAFCQippZddvu0Zkk5sT5R/5Ro0wNw/Ao6ud/y2J3d4SOfKob0nHTyjLY1G1aad
+U80CAwEAAaOByzCByDAdBgNVHQ4EFgQU+1k+zKJCYnKfU5aVOkjqFoDIQkAwHwYD
+VR0jBBgwFoAU+1k+zKJCYnKfU5aVOkjqFoDIQkAwNwYIKwYBBQUHAQEEKzApMCcG
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA0PK9YMXjq
+wDIj2LCOhESco7cLtaRLPSHSigLsTO2rwwoXiVBF/EML22zmaVY8QbDJLRIZvaG2
+p/olpHNvMga39axks7m2RGWDskjMPGhprhYKwMVXOQBRFpcOA33nAmXyhN7ppp3V
+g3M3nfW82O/cbxtI2/bKoADV5sD2lC2pTrRNz0l9xE06aKKy2Ohnd5hvHC1KdBMr
+JARnUDh+6csMlA3QB1BSpQMQB2oE7zPqsHCfJzRHsPhBgX7ykwvAz8PXBlnxJCph
+ZH848E9305LkH+REpLaFQFk93/LMV+oaWB34kNQtU2dWw4idFw8ZGfztTsy5dvr8
+k+W/COep1kYP
+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/expired-root.pem b/net/data/verify_certificate_chain_unittest/expired-root.pem
index 5e9ffcf..57b0b7b 100644
--- a/net/data/verify_certificate_chain_unittest/expired-root.pem
+++ b/net/data/verify_certificate_chain_unittest/expired-root.pem
@@ -1,6 +1,6 @@
[Created by: generate-expired-root.py]
-Certificate chain with 1 intermediary, where the root certificate is expired
+Certificate chain with 1 intermediate, where the root certificate is expired
(violates validity.notAfter). Verification is expected to fail.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c2:5a:d7:49:58:e0:e3:06:4c:d0:8d:83:ad:7a:
- ff:86:7c:0e:00:26:64:44:8a:cb:38:bd:95:8e:b1:
- 7f:7c:48:7f:02:ef:7d:f9:b4:76:76:eb:5a:1d:71:
- 99:3a:c8:66:1a:c8:fb:24:d3:e8:9c:af:3b:5c:b5:
- 10:f0:32:7c:46:87:9a:3f:f6:57:6a:45:5c:18:6e:
- 92:54:54:16:4e:17:79:1c:a1:05:7c:21:3c:dc:89:
- 23:5d:aa:f9:1e:a1:8c:9b:9f:d7:a0:f3:c3:23:f0:
- f4:b5:12:ac:d3:57:cb:bb:f9:8e:0d:d8:e9:d5:bd:
- 71:2b:3e:38:d1:fe:f0:17:cb:f0:ce:23:8f:8a:ee:
- 56:4d:94:18:31:c3:1d:74:07:57:a4:f7:07:e8:b3:
- a4:60:53:38:96:83:f7:59:cf:03:f9:38:3c:35:87:
- 6a:71:92:8a:1b:4f:7e:f0:49:76:ba:65:42:87:fe:
- b2:21:e1:17:d6:98:50:36:5a:7f:fe:8d:f6:bf:ab:
- 46:63:fc:57:e8:57:c5:90:9b:27:07:30:fa:26:1d:
- 13:eb:f2:e1:b0:99:f9:55:39:76:0f:ca:a4:31:85:
- c6:62:df:53:cd:3e:df:bf:83:1d:a9:07:b1:a2:8a:
- be:43:f2:05:1e:f9:ca:28:2e:81:39:fa:2c:74:c5:
- 7c:b1
+ 00:de:6b:17:fa:9d:bf:8d:97:11:c1:2b:af:53:67:
+ 89:b2:bb:1b:7c:25:a6:ba:81:f9:43:3f:15:51:06:
+ 24:11:3c:3c:d1:28:16:86:53:15:fb:e6:99:67:08:
+ d7:2a:74:2d:ba:f2:72:55:ec:8e:7b:13:30:f8:31:
+ dc:16:a2:7f:7a:83:9c:26:ee:cb:5a:49:68:75:7e:
+ 97:a9:04:e5:2a:dc:e7:5d:9d:60:22:7f:b5:b3:d5:
+ 13:7c:64:3b:75:a5:b8:92:8f:67:7e:de:7e:42:13:
+ 7a:d2:e1:da:c5:f5:a7:bb:db:57:db:e5:09:d8:37:
+ 6f:80:c0:06:52:c5:ea:33:1b:35:ba:21:de:6c:a0:
+ e2:c8:19:b4:cc:3e:3c:0e:af:f1:a8:c6:01:f7:d8:
+ 7a:dc:83:4a:e8:9f:dc:30:f7:c8:a4:19:c4:89:45:
+ 69:60:3b:ca:a0:f8:86:09:56:1e:0f:55:c4:32:8f:
+ 95:fd:02:ee:e6:76:d5:bc:4a:6c:8f:b4:47:3f:04:
+ e4:0c:45:16:a3:04:3b:73:f2:5e:2e:6b:62:9e:25:
+ e9:46:2c:ee:b9:3a:6b:a9:84:63:d2:aa:a6:73:66:
+ 61:77:90:e2:7b:1e:d0:c3:3c:7d:23:40:cb:9d:a4:
+ 53:ab:bb:9d:57:b8:dd:30:f4:89:cd:be:40:0f:8c:
+ fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 14:B3:FA:87:AB:1D:54:2D:2B:B8:C4:5D:33:57:C5:52:F4:15:B8:20
+ E1:00:21:A7:60:75:C5:70:AE:67:AA:A2:C0:27:3E:1D:88:0B:8F:3A
X509v3 Authority Key Identifier:
- keyid:ED:CC:99:FA:9D:D2:85:7E:0E:02:42:8E:72:48:C3:F4:29:4B:95:D2
+ keyid:63:74:44:85:E8:82:EC:BA:73:D2:A8:F4:8D:AF:0B:B0:37:F6:14:DD
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 42:13:4f:10:c0:69:c9:ad:88:94:2d:df:24:e6:47:6c:d3:07:
- 33:75:77:ba:c8:40:f4:28:1f:7a:0a:49:14:93:5f:d7:6e:91:
- 49:22:a3:cb:f0:52:f9:d6:22:90:ef:62:79:3d:cc:e5:2f:d0:
- c9:c3:0e:b0:54:06:6c:31:7e:f3:9e:48:be:02:c8:f3:60:cb:
- d7:5b:65:f6:82:41:fa:b4:19:34:e2:82:9c:0a:02:ee:ec:2a:
- 53:6d:25:49:19:9a:ce:1a:6c:c4:49:e2:3b:08:fb:6f:05:00:
- 65:d6:64:29:a9:c5:9f:83:27:af:49:a8:b8:14:de:e0:43:c6:
- b4:c2:ad:49:55:d5:58:42:50:cb:20:54:df:1e:9b:0a:9d:d3:
- a0:85:4d:a2:5c:cb:07:24:1c:f0:91:d2:89:54:d1:69:7a:68:
- 05:6a:3c:80:00:e5:7d:6d:9a:0b:37:0d:d0:6b:5e:61:d4:04:
- 37:73:41:ae:48:10:0a:3b:b1:d4:67:31:19:19:43:d2:22:f4:
- 29:72:cd:8d:97:5b:f8:11:09:5b:32:07:56:fb:f4:d7:66:cc:
- 72:e4:db:f6:1d:53:70:0e:bf:4c:c2:0f:61:07:a9:f3:1d:5f:
- 03:f9:1e:9c:96:f6:49:1a:b8:51:1d:16:22:1a:f5:2b:ac:da:
- ce:5a:a6:38
+ a0:85:7a:3a:fd:63:12:8f:fa:ea:aa:a0:17:37:a9:ee:2d:a1:
+ 98:e4:4e:c0:5a:8f:42:1e:f7:09:c9:36:0e:8e:7c:0f:00:20:
+ f8:73:5b:7c:e2:f0:ea:45:35:0e:70:b3:a7:65:d6:8e:ad:02:
+ 2b:04:79:c0:0b:e3:3e:57:da:ab:7a:e5:78:6e:91:fd:0c:bf:
+ 3a:22:14:16:c1:42:e1:8c:f9:92:1c:7d:74:b3:72:b6:18:42:
+ 1f:30:c1:f1:05:f2:7e:9e:71:f8:a7:e1:e4:6d:9b:a4:8a:29:
+ f0:ae:73:c3:b9:7d:93:5f:4c:b4:7e:4e:fb:6d:3f:4d:85:46:
+ ea:31:32:01:92:50:10:c7:81:82:d3:86:75:8b:47:c3:e7:e9:
+ 17:0c:42:d2:e4:70:66:eb:07:e7:6e:1a:12:b2:c9:8a:62:b0:
+ 0e:8e:27:f1:90:9e:82:10:96:92:c9:9f:31:e1:50:21:e8:39:
+ c3:d8:26:2a:f9:36:21:02:e7:ac:a7:0c:81:a1:35:1c:7c:33:
+ e8:84:26:9a:41:a7:07:d0:ff:d5:18:b9:b8:2c:46:47:3a:1b:
+ 22:c4:35:f7:ab:86:98:63:cf:8a:d1:94:be:5b:59:a3:4b:6a:
+ 01:1f:df:27:cb:09:d3:98:43:88:80:9c:ed:ca:73:60:41:e0:
+ 77:8d:e4:ab
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWtdJ
-WODjBkzQjYOtev+GfA4AJmREiss4vZWOsX98SH8C7335tHZ261odcZk6yGYayPsk
-0+icrztctRDwMnxGh5o/9ldqRVwYbpJUVBZOF3kcoQV8ITzciSNdqvkeoYybn9eg
-88Mj8PS1EqzTV8u7+Y4N2OnVvXErPjjR/vAXy/DOI4+K7lZNlBgxwx10B1ek9wfo
-s6RgUziWg/dZzwP5ODw1h2pxkoobT37wSXa6ZUKH/rIh4RfWmFA2Wn/+jfa/q0Zj
-/FfoV8WQmycHMPomHRPr8uGwmflVOXYPyqQxhcZi31PNPt+/gx2pB7Giir5D8gUe
-+cooLoE5+ix0xXyxAgMBAAGjgekwgeYwHQYDVR0OBBYEFBSz+oerHVQtK7jEXTNX
-xVL0FbggMB8GA1UdIwQYMBaAFO3Mmfqd0oV+DgJCjnJIw/QpS5XSMD8GCCsGAQUF
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeaxf6
+nb+NlxHBK69TZ4myuxt8Jaa6gflDPxVRBiQRPDzRKBaGUxX75plnCNcqdC268nJV
+7I57EzD4MdwWon96g5wm7staSWh1fpepBOUq3OddnWAif7Wz1RN8ZDt1pbiSj2d+
+3n5CE3rS4drF9ae721fb5QnYN2+AwAZSxeozGzW6Id5soOLIGbTMPjwOr/GoxgH3
+2Hrcg0ron9ww98ikGcSJRWlgO8qg+IYJVh4PVcQyj5X9Au7mdtW8SmyPtEc/BOQM
+RRajBDtz8l4ua2KeJelGLO65OmuphGPSqqZzZmF3kOJ7HtDDPH0jQMudpFOru51X
+uN0w9InNvkAPjP5FAgMBAAGjgekwgeYwHQYDVR0OBBYEFOEAIadgdcVwrmeqosAn
+Ph2IC486MB8GA1UdIwQYMBaAFGN0RIXoguy6c9Ko9I2vC7A39hTdMD8GCCsGAQUF
BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAQhNPEMBpya2IlC3fJOZH
-bNMHM3V3ushA9CgfegpJFJNf126RSSKjy/BS+dYikO9ieT3M5S/QycMOsFQGbDF+
-855IvgLI82DL11tl9oJB+rQZNOKCnAoC7uwqU20lSRmazhpsxEniOwj7bwUAZdZk
-KanFn4Mnr0mouBTe4EPGtMKtSVXVWEJQyyBU3x6bCp3ToIVNolzLByQc8JHSiVTR
-aXpoBWo8gADlfW2aCzcN0GteYdQEN3NBrkgQCjux1GcxGRlD0iL0KXLNjZdb+BEJ
-WzIHVvv012bMcuTb9h1TcA6/TMIPYQep8x1fA/kenJb2SRq4UR0WIhr1K6zazlqm
-OA==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-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b0:4e:34:a2:37:40:52:cd:58:5e:d8:18:40:f2:
- 23:9e:a8:78:10:18:db:5b:87:a3:e2:e3:c8:a5:50:
- b7:c3:1c:fa:e5:77:7f:93:b3:44:2a:90:60:39:81:
- a4:c4:63:e0:3d:8a:d8:36:c8:5d:df:04:01:c1:f1:
- b5:65:12:3d:f5:22:f9:f5:ff:c5:60:2a:48:39:90:
- 69:df:08:9f:bc:07:6c:c6:ab:3f:e4:2d:05:b5:b3:
- 11:9e:4d:5a:8d:3c:64:3f:1e:7d:df:05:1c:e2:e4:
- b7:d9:42:36:cb:86:df:53:2a:ea:51:2b:53:f8:3a:
- 07:5a:08:8b:df:fb:9d:2f:1f:94:a9:fb:07:93:87:
- 20:ee:e6:ae:d9:a5:2e:1a:eb:d9:67:0e:ce:8f:7e:
- 0b:be:3a:ca:b2:9c:40:38:54:5c:35:99:ac:07:12:
- 3e:00:a3:39:07:76:e1:fa:df:7b:81:59:0b:a3:8e:
- 4e:42:b7:1e:09:04:e2:0c:ea:eb:d5:c0:da:dd:6f:
- f0:6e:6a:34:2a:38:ae:4f:b4:f3:4f:06:17:c3:83:
- 0a:66:e8:c6:8a:54:71:86:0b:8b:39:3b:73:07:d2:
- 0b:dc:4c:86:79:da:86:44:25:3d:dc:f1:38:eb:22:
- ce:92:df:8b:9b:ff:47:eb:7a:28:0a:91:cd:ba:30:
- 77:7d
+ 00:d6:9b:b6:c4:fd:a9:f3:0d:77:4f:26:65:7d:54:
+ f5:19:ab:7a:49:c0:8a:90:ee:86:43:c4:1f:52:f8:
+ af:1c:47:f7:88:0d:19:df:2f:5d:b1:c2:3c:5d:1d:
+ 9e:54:cd:e0:22:6a:6b:b4:8f:f9:38:0b:ef:b2:81:
+ 80:ee:22:83:5b:3e:2e:b7:b0:cd:4f:2f:78:be:d4:
+ 40:3f:c9:d9:4b:f6:39:6c:63:94:a4:c2:1b:97:01:
+ a2:a6:9b:5c:11:f8:40:c4:25:64:6a:9a:17:fb:43:
+ ab:d4:42:cd:d3:6e:23:68:90:3e:c0:54:0f:73:58:
+ 13:c2:70:9f:c6:76:a4:c3:94:e8:b2:5f:16:e3:a9:
+ f7:87:56:06:85:d9:ca:2c:09:01:39:97:c0:f2:36:
+ e1:90:97:c1:78:9f:99:86:03:e6:00:6a:ea:2c:60:
+ b0:ae:08:04:e8:11:bd:7e:e5:4e:e6:b1:9b:d0:1c:
+ 09:ff:ea:68:1b:c0:54:4a:c5:ad:d9:bd:25:e9:b3:
+ 7a:66:7f:98:50:9e:a7:c4:1b:ed:fa:2a:cc:94:9e:
+ bd:4b:11:b4:03:7c:6e:8e:5e:db:46:b1:59:2f:b2:
+ 18:fc:2f:83:ef:e3:d1:24:3a:c0:60:ae:dd:ab:a6:
+ 93:07:27:cb:d9:7f:1b:75:f2:1a:82:35:e5:1b:e6:
+ 27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- ED:CC:99:FA:9D:D2:85:7E:0E:02:42:8E:72:48:C3:F4:29:4B:95:D2
+ 63:74:44:85:E8:82:EC:BA:73:D2:A8:F4:8D:AF:0B:B0:37:F6:14:DD
X509v3 Authority Key Identifier:
- keyid:62:81:A1:85:84:13:F2:70:79:BD:48:5B:29:88:E0:F1:27:35:41:F7
+ keyid:01:34:E7:14:1F:DF:2E:D5:19:18:06:94:60:42:D1:A8:FC:16:E0:61
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 02:82:8b:cf:81:89:f2:15:d3:a7:a6:30:c8:2a:c8:32:c5:95:
- 7c:18:60:2e:51:48:c5:26:47:b8:5e:49:17:b4:aa:87:f7:8b:
- 22:73:2a:81:20:1d:1c:54:b7:7b:91:e1:48:40:7a:19:13:05:
- 05:6e:e4:21:75:d7:a7:a0:54:bf:da:18:a1:52:08:95:0a:c5:
- e0:36:f3:6d:ab:ed:21:69:e1:e7:4d:8f:85:85:22:ac:7b:b3:
- 7f:3f:1a:7e:44:be:06:ee:0b:f5:89:53:e3:d1:fa:f7:51:00:
- 7c:61:d2:5e:48:ab:4c:bb:47:03:a2:d4:6a:78:02:7e:33:5a:
- b9:7c:14:12:5a:c2:bb:66:91:4f:21:cb:c0:b7:80:72:4b:28:
- 6c:d9:7b:02:fa:04:26:f2:de:2a:54:7d:69:89:88:f3:b9:10:
- ab:0a:07:fa:f8:7c:1e:bb:45:0f:4f:de:2e:36:3e:a4:63:b0:
- 71:a1:be:2b:dd:0c:fa:0b:97:f0:ad:56:b0:dd:76:51:e7:45:
- aa:a3:82:cd:77:5a:07:3a:e5:bc:fd:37:8f:52:ee:e0:de:ac:
- 99:44:94:65:7d:b1:30:89:4d:12:da:73:29:06:a9:28:42:5d:
- 1f:1a:a7:44:f3:77:5b:99:4a:ca:a6:dd:3a:cd:a1:16:76:11:
- 16:44:34:c0
+ 33:28:d1:77:84:d7:9e:51:7e:ce:85:49:35:ee:e8:f3:fb:d6:
+ 4f:fa:6c:00:0b:90:a1:f1:37:4b:d0:3e:9d:82:2d:e0:96:d8:
+ 72:fb:61:96:d6:36:a2:1a:ca:62:44:c3:a3:14:c5:0b:e0:de:
+ 39:a9:c9:75:a4:9f:2c:54:0d:fa:61:5c:fa:6e:66:0f:71:0e:
+ 58:12:d4:1a:c6:c0:ca:33:f7:8f:0f:2a:8f:a1:2d:c1:a8:64:
+ 2e:52:23:ac:fe:9b:04:90:84:13:44:40:e8:4b:bf:53:30:72:
+ ff:5c:7e:8c:62:87:c5:03:a8:84:8c:7c:4d:fb:d6:8c:8c:35:
+ 56:9b:0f:01:e3:81:9b:6c:36:e2:f1:88:06:16:75:2f:6e:cc:
+ 70:30:67:c9:6c:3c:28:49:72:0d:11:6b:1d:73:ae:d9:bf:e6:
+ 6c:63:c4:70:df:18:8c:fc:d0:03:01:c5:8a:22:4e:b1:c5:03:
+ dc:36:9a:22:08:ab:46:88:d6:93:2c:6c:1b:05:b1:60:69:be:
+ ad:97:d1:a8:e4:a1:70:5a:ab:84:87:72:75:13:50:95:58:b1:
+ 80:27:50:60:9b:b1:da:7e:18:b8:f0:bd:f3:54:89:04:32:ff:
+ b1:f2:be:a8:09:14:b1:74:30:a8:95:8e:59:ed:8a:63:28:ce:
+ 55:68:d8:e2
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE40ojdA
-Us1YXtgYQPIjnqh4EBjbW4ej4uPIpVC3wxz65Xd/k7NEKpBgOYGkxGPgPYrYNshd
-3wQBwfG1ZRI99SL59f/FYCpIOZBp3wifvAdsxqs/5C0FtbMRnk1ajTxkPx593wUc
-4uS32UI2y4bfUyrqUStT+DoHWgiL3/udLx+UqfsHk4cg7uau2aUuGuvZZw7Oj34L
-vjrKspxAOFRcNZmsBxI+AKM5B3bh+t97gVkLo45OQrceCQTiDOrr1cDa3W/wbmo0
-KjiuT7TzTwYXw4MKZujGilRxhguLOTtzB9IL3EyGedqGRCU93PE46yLOkt+Lm/9H
-63ooCpHNujB3fQIDAQABo4HLMIHIMB0GA1UdDgQWBBTtzJn6ndKFfg4CQo5ySMP0
-KUuV0jAfBgNVHSMEGDAWgBRigaGFhBPycHm9SFspiODxJzVB9zA3BggrBgEFBQcB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-AAKCi8+BifIV06emMMgqyDLFlXwYYC5RSMUmR7heSRe0qof3iyJzKoEgHRxUt3uR
-4UhAehkTBQVu5CF116egVL/aGKFSCJUKxeA2822r7SFp4edNj4WFIqx7s38/Gn5E
-vgbuC/WJU+PR+vdRAHxh0l5Iq0y7RwOi1Gp4An4zWrl8FBJawrtmkU8hy8C3gHJL
-KGzZewL6BCby3ipUfWmJiPO5EKsKB/r4fB67RQ9P3i42PqRjsHGhvivdDPoLl/Ct
-VrDddlHnRaqjgs13Wgc65bz9N49S7uDerJlElGV9sTCJTRLacykGqShCXR8ap0Tz
-d1uZSsqm3TrNoRZ2ERZENMA=
+ADMo0XeE155Rfs6FSTXu6PP71k/6bAALkKHxN0vQPp2CLeCW2HL7YZbWNqIaymJE
+w6MUxQvg3jmpyXWknyxUDfphXPpuZg9xDlgS1BrGwMoz948PKo+hLcGoZC5SI6z+
+mwSQhBNEQOhLv1Mwcv9cfoxih8UDqISMfE371oyMNVabDwHjgZtsNuLxiAYWdS9u
+zHAwZ8lsPChJcg0Rax1zrtm/5mxjxHDfGIz80AMBxYoiTrHFA9w2miIIq0aI1pMs
+bBsFsWBpvq2X0ajkoXBaq4SHcnUTUJVYsYAnUGCbsdp+GLjwvfNUiQQy/7HyvqgJ
+FLF0MKiVjlntimMozlVo2OI=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b5:79:69:47:50:a7:53:24:79:a6:6a:35:e8:33:
- 74:57:45:da:2c:69:13:1f:76:f9:51:ce:b4:47:ad:
- a3:c3:58:50:d1:5f:d6:34:5b:3a:62:f0:6c:ea:e7:
- 86:c2:09:78:b3:53:0d:7f:45:cb:2b:8e:2e:1f:9b:
- c0:7e:47:90:e3:7b:20:cc:01:ed:b6:c3:c6:40:69:
- 74:2b:f1:db:a5:f8:f4:5b:fd:e9:84:db:1a:fc:4f:
- 91:4b:e7:f5:2e:99:d0:c9:69:f5:48:5b:8b:19:ca:
- dc:5c:0d:3d:15:25:56:77:86:b6:54:fc:d3:1d:8e:
- f8:ea:f5:ec:de:30:38:93:28:37:7c:d4:b7:29:26:
- 6f:2a:4a:56:c3:12:91:18:d6:77:cf:4f:31:4e:13:
- b3:8f:ca:bc:7b:a7:7f:f1:af:db:77:80:51:8c:42:
- 1c:27:37:18:ac:6c:45:8e:d5:21:25:16:09:fb:3b:
- 0c:84:a8:60:ea:8a:03:65:94:f5:5c:d6:62:36:ae:
- b4:de:a3:b1:ee:1b:85:12:8c:6e:ba:ee:14:94:b9:
- c7:cb:a3:f1:d1:96:ed:81:79:71:27:d0:d8:26:b4:
- 80:54:c8:07:a9:34:71:a2:a9:04:33:d6:58:02:59:
- f9:14:97:5e:a9:2b:8c:41:2a:5c:3e:ac:30:b8:63:
- 52:35
+ 00:cc:3f:3d:39:6a:1a:de:64:b7:11:19:82:b6:ed:
+ b9:47:d8:67:22:83:07:f7:a1:de:70:05:e1:83:f2:
+ 06:8d:ea:b0:19:95:27:f4:19:c8:b9:53:91:35:0a:
+ 50:2c:26:7c:77:9f:fb:d5:36:19:f3:91:67:8d:2a:
+ ea:0c:81:ab:f6:dd:8a:32:e9:e9:71:71:57:ea:3c:
+ 5f:e8:b8:9b:60:6a:7d:2a:8c:54:66:ad:5a:b5:e0:
+ c0:0e:a1:0b:2f:00:b3:f9:e3:82:16:4f:8c:a9:4c:
+ 89:72:88:ba:2c:60:04:29:09:7c:bc:9e:d4:81:62:
+ 22:ed:3d:2f:00:5a:71:7d:db:87:54:83:8d:43:49:
+ db:6d:53:59:36:81:d4:ef:8f:e6:fa:d8:9b:a2:f0:
+ e6:1c:32:26:8c:f6:d5:57:4e:bb:dc:6e:f4:fd:24:
+ b4:3a:75:91:3b:9d:72:78:1f:06:7d:05:88:72:eb:
+ d7:4a:d1:22:97:19:90:90:d8:e0:d5:03:4c:be:8e:
+ 04:9b:b0:4d:8d:1b:dd:96:91:7e:90:16:7b:5d:32:
+ 3d:f5:c3:a9:1c:62:07:17:55:56:4b:08:75:5b:fc:
+ 11:57:39:52:81:08:2e:31:b3:ee:7c:38:e0:62:dd:
+ cc:47:b1:fb:c7:45:47:aa:b7:c6:c1:20:ba:b0:13:
+ 63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 62:81:A1:85:84:13:F2:70:79:BD:48:5B:29:88:E0:F1:27:35:41:F7
+ 01:34:E7:14:1F:DF:2E:D5:19:18:06:94:60:42:D1:A8:FC:16:E0:61
X509v3 Authority Key Identifier:
- keyid:62:81:A1:85:84:13:F2:70:79:BD:48:5B:29:88:E0:F1:27:35:41:F7
+ keyid:01:34:E7:14:1F:DF:2E:D5:19:18:06:94:60:42:D1:A8:FC:16:E0:61
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 47:20:58:cf:09:e0:8c:35:aa:91:d7:be:d1:6a:dc:06:11:ef:
- 4a:b2:f1:94:41:3b:b4:00:d5:d3:be:cb:4b:ef:67:e0:1b:91:
- 8b:c3:4f:42:92:9a:5b:8f:84:b1:8e:86:f8:9a:f8:aa:d2:66:
- 34:76:e5:bb:6f:95:4c:f4:23:e4:71:53:6a:02:8d:e4:ad:7f:
- c3:6c:77:a0:8d:00:80:c9:cf:e3:d0:96:e2:5a:1c:b6:66:96:
- 0d:2a:43:58:66:c8:53:b8:7a:6e:c2:c4:2b:c6:54:33:40:b3:
- f3:07:67:37:51:92:b2:7f:9a:e3:c1:79:36:4b:d8:9f:e9:6e:
- 04:c6:49:19:51:fd:6f:21:86:09:9a:00:76:e0:5e:73:b0:57:
- 00:25:c5:2a:12:b3:bd:9a:8b:1b:ff:46:90:47:20:76:2b:bf:
- 8e:94:7d:1a:7c:56:f6:0a:03:7b:5a:42:97:76:77:2e:a5:0c:
- 2e:a0:03:13:a8:39:79:82:a0:98:8c:da:bd:1e:7e:af:56:21:
- 95:14:26:ef:06:07:d7:ec:42:6b:2f:b1:e6:f7:97:88:30:5f:
- 79:50:99:92:b4:9e:20:d0:c2:95:8e:f7:61:64:99:c3:13:da:
- 46:a1:63:73:0b:23:e8:d7:e7:97:36:82:2b:2a:12:8e:b8:a9:
- 2d:3c:35:b3
+ 79:96:30:f1:a6:30:2b:c8:b8:51:8f:17:03:6c:ca:26:30:f8:
+ 2e:40:ff:ea:d3:3a:b6:80:db:d6:cc:ec:83:75:84:65:47:8b:
+ fc:0e:b4:13:b2:68:41:2e:ab:83:0d:4a:d0:d1:16:ab:f3:5c:
+ 80:a0:60:f0:08:c9:b3:56:26:c3:08:d1:37:0c:66:fa:11:ce:
+ 93:74:d1:ed:a7:5c:34:d4:31:d4:ba:af:81:d4:ca:85:93:27:
+ cc:c1:8f:97:06:51:61:94:1f:e9:3a:90:e7:39:c8:0e:f0:08:
+ 97:bd:ff:b4:2d:b6:20:9f:78:7b:7c:c0:25:ea:3b:2e:9d:66:
+ 84:f9:2a:f3:7e:54:20:1c:d9:fa:5f:0c:4a:c1:ea:36:8c:ae:
+ 43:c5:26:b6:99:f4:bd:2d:da:ff:96:f3:a9:1d:03:4a:50:44:
+ 2a:0c:bb:42:fb:b2:e4:44:f5:c2:06:1a:10:e7:cb:32:d6:40:
+ b9:eb:85:d1:79:0e:f5:6a:1b:2b:fe:3e:01:c6:2d:a5:e4:bd:
+ b0:46:76:a3:50:07:42:9d:18:76:3f:c2:29:1b:03:94:c2:d1:
+ 14:4d:47:cd:44:63:e0:d4:30:b9:e5:05:03:88:ca:a5:a8:0e:
+ 01:15:02:d8:cc:8c:91:87:56:d6:20:00:58:73:db:2e:10:86:
+ 41:63:5e:35
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE1MDMwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALV5aUdQp1MkeaZqNegz
-dFdF2ixpEx92+VHOtEeto8NYUNFf1jRbOmLwbOrnhsIJeLNTDX9FyyuOLh+bwH5H
-kON7IMwB7bbDxkBpdCvx26X49Fv96YTbGvxPkUvn9S6Z0Mlp9UhbixnK3FwNPRUl
-VneGtlT80x2O+Or17N4wOJMoN3zUtykmbypKVsMSkRjWd89PMU4Ts4/KvHunf/Gv
-23eAUYxCHCc3GKxsRY7VISUWCfs7DISoYOqKA2WU9VzWYjautN6jse4bhRKMbrru
-FJS5x8uj8dGW7YF5cSfQ2Ca0gFTIB6k0caKpBDPWWAJZ+RSXXqkrjEEqXD6sMLhj
-UjUCAwEAAaOByzCByDAdBgNVHQ4EFgQUYoGhhYQT8nB5vUhbKYjg8Sc1QfcwHwYD
-VR0jBBgwFoAUYoGhhYQT8nB5vUhbKYjg8Sc1QfcwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBHIFjPCeCM
-NaqR177RatwGEe9KsvGUQTu0ANXTvstL72fgG5GLw09Ckppbj4Sxjob4mviq0mY0
-duW7b5VM9CPkcVNqAo3krX/DbHegjQCAyc/j0JbiWhy2ZpYNKkNYZshTuHpuwsQr
-xlQzQLPzB2c3UZKyf5rjwXk2S9if6W4ExkkZUf1vIYYJmgB24F5zsFcAJcUqErO9
-mosb/0aQRyB2K7+OlH0afFb2CgN7WkKXdncupQwuoAMTqDl5gqCYjNq9Hn6vViGV
-FCbvBgfX7EJrL7Hm95eIMF95UJmStJ4g0MKVjvdhZJnDE9pGoWNzCyPo1+eXNoIr
-KhKOuKktPDWz
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB5ljDxpjAr
+yLhRjxcDbMomMPguQP/q0zq2gNvWzOyDdYRlR4v8DrQTsmhBLquDDUrQ0Rar81yA
+oGDwCMmzVibDCNE3DGb6Ec6TdNHtp1w01DHUuq+B1MqFkyfMwY+XBlFhlB/pOpDn
+OcgO8AiXvf+0LbYgn3h7fMAl6jsunWaE+SrzflQgHNn6XwxKweo2jK5DxSa2mfS9
+Ldr/lvOpHQNKUEQqDLtC+7LkRPXCBhoQ58sy1kC564XReQ71ahsr/j4Bxi2l5L2w
+RnajUAdCnRh2P8IpGwOUwtEUTUfNRGPg1DC55QUDiMqlqA4BFQLYzIyRh1bWIABY
+c9suEIZBY141
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem b/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem
index 3a1096d..5f480a7 100644
--- a/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem
+++ b/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem
@@ -1,6 +1,6 @@
[Created by: generate-expired-target-notBefore.py]
-Certificate chain with 1 intermediary, where the target is expired (violates
+Certificate chain with 1 intermediate, where the target is expired (violates
validity.notBefore). Verification is expected to fail.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Mar 2 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b8:1e:b0:de:22:2f:b4:13:ca:c4:72:10:b9:bd:
- 4c:80:81:be:17:f2:45:bb:5a:d2:b4:a1:f6:3e:1c:
- 50:00:d5:8d:fe:27:5b:a2:21:07:8b:1a:de:56:56:
- 58:88:25:41:09:4e:fd:04:bb:6c:75:c7:48:3f:98:
- 6b:4c:54:8a:22:26:28:f3:c6:76:5f:e8:bf:ad:bf:
- 4f:ad:6d:1a:1d:ba:5e:fc:0d:2f:92:b2:4f:f7:bb:
- e5:fd:3a:ff:8d:fb:f1:9f:96:90:18:46:2c:cf:7b:
- 62:75:b8:c5:e9:40:ce:67:21:e0:4b:9e:78:65:9b:
- 9e:71:50:bd:33:12:53:78:7f:ad:fd:bf:e0:ae:d2:
- 72:51:c1:18:d0:96:71:78:23:ff:a6:55:39:d5:9a:
- 89:3e:21:72:cd:9d:13:fa:04:9f:08:6f:c0:d0:c5:
- ab:b2:27:b5:b8:e2:2d:ab:31:a3:7a:c1:94:56:8b:
- 35:9c:b8:46:71:1c:d6:69:95:c1:0a:98:e4:14:96:
- 3c:2f:cb:12:ac:71:88:a4:aa:d0:c8:0e:51:98:47:
- 71:e8:0e:a0:e7:7e:01:95:b3:73:3f:9b:c4:8b:9d:
- d0:dc:17:a9:53:35:99:29:67:f3:28:d2:7f:1e:0d:
- 17:6b:5d:56:c9:91:a6:ae:e8:07:a6:76:d6:8e:2a:
- 48:47
+ 00:d8:d8:32:e7:2a:be:55:8d:e7:e8:ae:ee:1d:c6:
+ f5:3b:0c:6d:25:d9:53:8e:4a:84:0c:1e:7b:cb:30:
+ 2f:5f:1f:85:a3:e7:e0:92:79:b4:a2:35:fe:b7:71:
+ b4:a3:c0:79:dd:50:e5:e4:b0:61:b5:2c:97:2e:e6:
+ 4a:bc:c6:3c:c7:20:f3:87:20:4e:27:d8:8a:f6:0d:
+ a9:ac:0a:57:9a:53:03:9e:5f:32:ef:07:18:0a:ab:
+ f6:a7:42:4e:ef:36:9a:10:4a:db:d3:9f:49:d7:04:
+ 3a:95:61:77:ba:5e:d2:84:cb:57:ec:45:91:d0:fd:
+ be:5b:8b:4d:2f:0b:21:ab:89:ab:92:d9:fc:18:0c:
+ 44:bb:54:0a:94:5d:bd:ee:ac:a9:ee:f2:27:a8:3f:
+ 30:b1:e7:f6:fd:1a:05:86:56:db:22:de:bd:e5:a6:
+ d2:50:2d:4c:0c:ab:1c:b2:49:6c:23:9a:46:d8:f5:
+ 53:f4:9d:52:2c:f0:25:e3:a8:e7:99:d3:6d:ec:f0:
+ 0c:d1:bd:1e:73:c6:8f:5d:11:50:88:b3:63:bc:c7:
+ c5:eb:36:74:8f:03:fe:1a:36:d7:ac:5f:18:ae:73:
+ 11:7f:dc:81:dc:7c:77:17:ec:2c:91:c5:db:cc:2d:
+ 1a:a0:f1:ad:aa:d4:b6:1d:22:ee:22:bd:48:c9:f0:
+ df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 27:06:C6:75:1B:30:9B:E0:78:6C:9C:9B:F1:E1:29:B7:11:41:6D:BD
+ E6:C3:54:85:55:F1:44:F6:4B:55:D3:EA:09:69:E3:95:F6:DA:2A:FA
X509v3 Authority Key Identifier:
- keyid:7A:68:26:1F:EE:59:FA:52:EB:B0:98:D1:5D:F6:19:9F:8D:1C:F5:FB
+ keyid:EC:3F:B7:92:DD:EA:7D:97:A5:77:22:28:E9:98:4D:0D:07:69:C4:86
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 4e:c4:5a:b3:1f:31:4c:04:75:f8:bb:7d:7b:ed:93:07:81:e3:
- 41:b9:50:b0:c4:01:06:7d:64:f3:c5:d8:5b:96:0e:b6:c2:fa:
- 66:50:25:79:c8:6f:6c:03:f1:7b:e6:73:60:cc:68:42:0e:43:
- 85:58:46:c2:51:27:73:dd:f1:6d:9d:d1:7a:80:97:e5:cf:0c:
- 9a:85:a1:92:ed:26:3a:d6:10:fd:19:c8:f2:fb:b9:47:ee:a9:
- 63:1c:52:c5:97:1a:6b:2f:f4:dc:9c:cb:74:86:6a:48:2a:87:
- ac:24:d5:cc:8c:2b:12:9d:6d:bc:7e:be:95:3f:88:83:18:68:
- 75:59:db:79:fb:f0:c7:38:7b:8f:a3:16:e0:44:4c:19:e3:cd:
- 36:98:fb:fd:c9:17:5e:2f:9c:0c:e1:ba:f2:6e:c0:6e:91:9d:
- 5e:c0:0b:95:d8:62:7e:2e:8a:2d:4c:f9:b4:ca:17:0d:f0:d2:
- 71:b0:4d:15:79:b0:8b:9e:96:cf:2e:44:1a:84:a7:4f:61:38:
- 67:61:1c:a1:70:a0:a4:02:5b:42:f5:a0:09:95:cc:22:89:0d:
- 4e:e2:1b:dd:1d:fe:ae:d7:84:58:db:dd:07:1d:96:6b:32:11:
- da:c6:56:d9:cd:69:10:25:62:fd:91:2d:63:0f:8c:82:fe:00:
- 8a:eb:87:4f
+ 27:8e:41:9c:f0:5c:4a:e0:b0:63:c7:fa:cc:1f:d4:21:35:33:
+ 87:13:68:b7:18:08:0e:ba:22:a1:51:1a:d9:ba:31:a7:35:80:
+ c7:75:35:a4:68:c8:3e:91:79:55:e3:60:34:79:a1:0f:a9:cc:
+ 05:92:61:40:b0:66:2b:fe:c7:29:a2:54:f3:7c:71:b6:36:fe:
+ a9:fd:7b:79:ea:66:19:c0:2f:d2:56:97:2f:ca:12:a3:96:6b:
+ b3:57:c8:06:58:6f:de:53:d7:63:ee:93:d6:b2:f2:11:9c:8a:
+ a1:00:26:6c:9a:bd:dd:da:97:ea:07:61:5e:48:8e:dd:3f:10:
+ 4b:39:d1:9a:ba:8f:14:30:b3:36:3c:9f:a7:2c:68:b4:3c:da:
+ f2:90:24:4a:03:19:38:24:73:b5:72:b3:ae:31:b3:44:96:36:
+ 3d:38:c5:c7:07:62:78:06:d8:5d:01:07:d9:b3:2d:be:0f:46:
+ 13:8c:25:f9:d7:e0:84:5d:a4:62:a7:5d:3b:22:cf:e6:95:97:
+ 20:d3:24:40:cc:cf:3d:72:17:f9:c1:8e:ee:15:6f:99:8f:24:
+ d1:83:6b:f9:fe:6b:94:3a:9c:2c:02:5c:1d:70:d6:f8:d6:69:
+ 0d:99:f5:53:89:4f:21:7b:a6:34:dd:ce:27:ef:45:a5:e0:c6:
+ e5:f5:fc:5f
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMzAyMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HrDe
-Ii+0E8rEchC5vUyAgb4X8kW7WtK0ofY+HFAA1Y3+J1uiIQeLGt5WVliIJUEJTv0E
-u2x1x0g/mGtMVIoiJijzxnZf6L+tv0+tbRodul78DS+Ssk/3u+X9Ov+N+/GflpAY
-RizPe2J1uMXpQM5nIeBLnnhlm55xUL0zElN4f639v+Cu0nJRwRjQlnF4I/+mVTnV
-mok+IXLNnRP6BJ8Ib8DQxauyJ7W44i2rMaN6wZRWizWcuEZxHNZplcEKmOQUljwv
-yxKscYikqtDIDlGYR3HoDqDnfgGVs3M/m8SLndDcF6lTNZkpZ/Mo0n8eDRdrXVbJ
-kaau6AemdtaOKkhHAgMBAAGjgekwgeYwHQYDVR0OBBYEFCcGxnUbMJvgeGycm/Hh
-KbcRQW29MB8GA1UdIwQYMBaAFHpoJh/uWfpS67CY0V32GZ+NHPX7MD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEATsRasx8xTAR1+Lt9e+2T
-B4HjQblQsMQBBn1k88XYW5YOtsL6ZlAlechvbAPxe+ZzYMxoQg5DhVhGwlEnc93x
-bZ3ReoCX5c8MmoWhku0mOtYQ/RnI8vu5R+6pYxxSxZcaay/03JzLdIZqSCqHrCTV
-zIwrEp1tvH6+lT+IgxhodVnbefvwxzh7j6MW4ERMGePNNpj7/ckXXi+cDOG68m7A
-bpGdXsALldhifi6KLUz5tMoXDfDScbBNFXmwi56Wzy5EGoSnT2E4Z2EcoXCgpAJb
-QvWgCZXMIokNTuIb3R3+rteEWNvdBx2WazIR2sZW2c1pECVi/ZEtYw+Mgv4AiuuH
-Tw==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-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c0:6b:09:c5:84:c2:5f:1b:c6:98:31:2d:a2:3e:
- 03:a9:13:4d:b8:4b:03:a6:1d:0a:e4:e1:ba:81:31:
- 2b:dd:92:7c:6b:81:85:c4:d4:cf:73:30:33:b2:8d:
- 9f:d9:0b:48:a0:70:51:88:93:d5:f1:ef:bd:14:6e:
- 7b:da:b6:a4:c5:a9:ca:cd:27:90:38:c8:5e:12:68:
- f8:f2:70:01:8a:da:e3:6c:2f:62:c4:67:40:e2:92:
- 20:fe:77:d9:91:f4:6b:02:0c:40:d6:b5:ef:98:85:
- 36:58:59:ec:e7:17:c8:72:53:8a:fc:2e:fa:08:70:
- ba:ab:ea:42:40:50:e0:6b:14:04:73:78:34:96:db:
- 8a:c9:22:21:f1:c1:1b:81:7c:95:c6:83:f8:d1:40:
- 1f:5d:ec:bc:d0:4e:30:7f:b2:07:b4:e2:be:3f:f7:
- 28:ab:a2:61:fd:98:3b:5a:1c:c9:61:30:13:ea:7c:
- 7d:13:99:a0:9a:a5:a5:72:3f:a7:e7:7d:3b:a6:b7:
- 09:6c:48:5c:ec:a3:d6:4c:2e:eb:21:e8:97:aa:44:
- 32:23:03:dd:24:8d:08:b4:94:df:65:5b:7c:45:59:
- 11:4b:ce:1f:78:e5:c4:bc:87:00:bb:c4:69:d7:3b:
- ae:a6:b7:80:df:4c:e2:0d:be:a4:0e:1c:05:5d:cf:
- dc:c9
+ 00:e4:7c:a3:bb:4c:6d:c3:5e:ae:62:cd:af:18:39:
+ c5:4b:6a:a3:fd:85:d0:ed:8b:25:93:bd:2b:06:22:
+ b2:6b:c1:ff:73:c9:26:dd:d6:eb:eb:ee:93:4a:6d:
+ df:10:02:b8:c5:72:d4:2f:c7:b4:1a:06:e9:38:b4:
+ 90:ae:9f:5f:69:45:47:07:68:17:b2:84:8a:65:b8:
+ 1e:ef:de:f1:b4:8a:6b:ab:de:55:79:5d:f5:2e:96:
+ 46:5b:5c:87:0b:4a:a8:53:70:4f:6f:f3:9e:9d:f4:
+ f8:38:fa:1f:a6:5f:a3:25:08:f2:e9:63:fc:3c:98:
+ 4d:91:df:77:60:e7:e2:bd:af:bb:d9:23:38:2d:6e:
+ 07:07:0c:1a:59:5e:8a:43:c7:da:b2:ce:39:3a:80:
+ c6:72:60:1f:d3:93:45:cd:63:b8:8b:96:bf:30:cd:
+ b1:f6:56:d7:a9:de:14:42:ae:42:40:f8:e9:7b:47:
+ a3:63:a1:5d:b9:2b:c0:3b:2b:81:56:11:54:ce:96:
+ 85:e6:3a:8c:66:ff:42:9f:ce:e4:a4:80:f5:59:8a:
+ 4b:ae:b2:37:c2:1f:45:9b:49:cd:db:0f:8b:a7:37:
+ 31:20:19:b4:42:20:aa:e9:e4:af:13:5a:b9:ea:d2:
+ 2c:9a:15:48:af:8d:ed:d0:fe:02:c0:a2:c6:47:bd:
+ dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 7A:68:26:1F:EE:59:FA:52:EB:B0:98:D1:5D:F6:19:9F:8D:1C:F5:FB
+ EC:3F:B7:92:DD:EA:7D:97:A5:77:22:28:E9:98:4D:0D:07:69:C4:86
X509v3 Authority Key Identifier:
- keyid:66:52:63:09:9B:DD:07:2A:2D:E0:F3:6C:29:FB:D9:74:87:F5:02:6A
+ keyid:44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- b2:03:09:bd:ed:73:cd:8d:d6:d0:f4:86:40:00:10:eb:b9:37:
- 74:1d:f2:b3:dc:2d:df:a4:75:77:f1:62:23:b8:2d:70:14:af:
- 33:4e:0c:8f:6d:13:db:d4:dc:92:04:8d:0e:b6:14:98:07:f6:
- 80:cb:9a:8d:d3:0e:9d:6d:13:12:c1:01:f0:14:9d:a3:c1:05:
- 45:3c:26:16:d2:39:3f:ed:3c:6c:ab:c0:2b:b2:21:29:dc:4b:
- 6b:51:cf:e9:99:ef:fa:14:3a:c4:f1:77:c0:83:f5:7f:af:11:
- 40:db:f3:3f:7c:18:26:79:e9:15:c0:62:79:06:85:15:8a:53:
- 03:be:2f:e9:5c:69:7c:c7:d7:47:6a:7b:00:c8:d8:4f:55:ce:
- d1:64:58:0f:87:ef:27:b2:7b:59:20:04:7d:4f:16:08:c7:d0:
- f0:c1:aa:b6:a9:ae:aa:fd:a7:98:2c:40:28:bb:e5:d7:91:e5:
- 72:c9:ab:0a:92:0e:b0:d5:ff:9c:db:73:5d:e1:9d:a5:fd:89:
- 4e:c8:26:8d:f8:76:0b:7e:7f:94:70:73:e4:22:b4:fb:2f:bc:
- 06:84:73:b1:99:78:fa:5f:e8:d7:20:8f:b9:cb:d9:a4:99:7e:
- be:b9:89:1c:07:0a:19:cb:0c:f0:15:70:81:51:ee:d7:8e:e8:
- f7:21:3f:fd
+ 40:21:7c:15:90:68:e9:aa:b0:ab:21:63:e7:21:f1:92:5b:75:
+ 02:34:b4:cd:06:b3:45:f4:93:07:d1:0f:f2:bc:92:ac:75:94:
+ 43:ad:a8:4f:91:6a:28:0c:cd:47:8d:01:de:54:51:aa:14:e3:
+ 35:f8:eb:d8:d4:59:f5:86:ef:55:e6:6f:54:17:47:c1:5f:e8:
+ be:0d:7f:34:d2:88:2d:b5:04:29:25:11:cc:a3:d7:0e:49:b2:
+ 9a:e3:01:1d:3f:15:89:68:41:19:4d:ee:8d:12:0e:96:ce:5e:
+ e5:08:31:64:4f:89:e0:91:1b:a9:b0:3c:4e:50:cb:83:a0:df:
+ d0:d3:df:af:53:d5:99:6b:88:dd:9c:4f:98:f1:0d:1d:f5:29:
+ f6:c5:be:18:84:4f:1f:76:ce:6f:c8:08:a0:f4:58:af:a3:ff:
+ cb:44:55:ad:2e:6e:e0:44:07:f4:a3:d4:08:9c:d1:0e:04:29:
+ 34:54:1b:bd:e8:e3:b4:56:e1:0b:05:bd:ee:6d:47:fb:10:42:
+ d2:14:12:e4:15:29:bd:06:13:7d:12:41:fa:5f:5d:01:27:69:
+ 99:76:ff:76:74:c8:c8:fe:11:c5:2e:67:44:d3:32:6d:8f:45:
+ e4:0a:5a:73:ef:74:75:6a:6c:d6:c2:c5:e8:73:bc:be:29:b3:
+ 3a:01:cf:02
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGsJxYTC
-XxvGmDEtoj4DqRNNuEsDph0K5OG6gTEr3ZJ8a4GFxNTPczAzso2f2QtIoHBRiJPV
-8e+9FG572rakxanKzSeQOMheEmj48nABitrjbC9ixGdA4pIg/nfZkfRrAgxA1rXv
-mIU2WFns5xfIclOK/C76CHC6q+pCQFDgaxQEc3g0ltuKySIh8cEbgXyVxoP40UAf
-Xey80E4wf7IHtOK+P/coq6Jh/Zg7WhzJYTAT6nx9E5mgmqWlcj+n5307prcJbEhc
-7KPWTC7rIeiXqkQyIwPdJI0ItJTfZVt8RVkRS84feOXEvIcAu8Rp1zuupreA30zi
-Db6kDhwFXc/cyQIDAQABo4HLMIHIMB0GA1UdDgQWBBR6aCYf7ln6UuuwmNFd9hmf
-jRz1+zAfBgNVHSMEGDAWgBRmUmMJm90HKi3g82wp+9l0h/UCajA3BggrBgEFBQcB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-ALIDCb3tc82N1tD0hkAAEOu5N3Qd8rPcLd+kdXfxYiO4LXAUrzNODI9tE9vU3JIE
-jQ62FJgH9oDLmo3TDp1tExLBAfAUnaPBBUU8JhbSOT/tPGyrwCuyISncS2tRz+mZ
-7/oUOsTxd8CD9X+vEUDb8z98GCZ56RXAYnkGhRWKUwO+L+lcaXzH10dqewDI2E9V
-ztFkWA+H7yeye1kgBH1PFgjH0PDBqraprqr9p5gsQCi75deR5XLJqwqSDrDV/5zb
-c13hnaX9iU7IJo34dgt+f5Rwc+QitPsvvAaEc7GZePpf6Ncgj7nL2aSZfr65iRwH
-ChnLDPAVcIFR7teO6PchP/0=
+AEAhfBWQaOmqsKshY+ch8ZJbdQI0tM0Gs0X0kwfRD/K8kqx1lEOtqE+RaigMzUeN
+Ad5UUaoU4zX469jUWfWG71Xmb1QXR8Ff6L4NfzTSiC21BCklEcyj1w5JsprjAR0/
+FYloQRlN7o0SDpbOXuUIMWRPieCRG6mwPE5Qy4Og39DT369T1ZlriN2cT5jxDR31
+KfbFvhiETx92zm/ICKD0WK+j/8tEVa0ubuBEB/Sj1Aic0Q4EKTRUG73o47RW4QsF
+ve5tR/sQQtIUEuQVKb0GE30SQfpfXQEnaZl2/3Z0yMj+EcUuZ0TTMm2PReQKWnPv
+dHVqbNbCxehzvL4pszoBzwI=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:bb:61:9d:50:28:51:f7:22:01:45:32:28:d0:d0:
- b2:c3:41:a4:3a:1f:8b:9a:b0:eb:61:31:39:1a:87:
- 5b:03:fb:02:82:15:8f:7f:d7:bb:4e:89:ae:08:df:
- 7e:6f:2f:66:87:8f:57:ab:a0:61:79:25:64:eb:20:
- 5d:e7:92:17:bd:c4:1b:e0:ea:27:e2:7b:b8:6e:05:
- 08:07:54:3d:4e:d6:80:8b:b9:50:d0:75:23:93:c3:
- e2:1b:de:f7:20:24:35:0f:d4:c3:dd:cf:07:19:29:
- 6f:08:08:a6:b3:9f:6d:2a:8b:3c:b7:6f:32:fe:81:
- 6d:1b:ad:88:96:c5:1f:a4:7a:a4:81:b5:e4:b3:9a:
- bc:42:b0:40:e5:77:8d:12:32:cc:d9:05:12:6a:47:
- 62:2b:22:5b:a8:48:fe:14:1a:a1:2f:03:34:f1:2b:
- 8f:d5:bf:3c:18:ae:f1:67:79:c8:a3:8d:29:d0:ce:
- 23:03:6f:ee:14:5e:97:dd:4d:c8:f5:1f:c4:1d:49:
- 08:b5:9c:7d:fa:e1:79:08:27:83:2d:8a:f4:43:d6:
- d6:6b:78:f4:0e:4c:42:57:72:03:61:73:b5:82:23:
- 98:2a:a9:06:f9:b3:95:cd:01:66:c2:3e:96:da:02:
- 13:95:e1:e6:51:94:67:2d:37:a5:cf:c1:18:62:fb:
- 56:15
+ 00:a0:21:1c:d1:00:97:80:26:4c:59:fe:1f:73:23:
+ 48:97:10:b0:7f:bb:bb:34:00:76:fb:5d:e6:1f:59:
+ ed:24:d9:25:9c:16:06:50:8e:83:da:d6:93:22:80:
+ 34:69:d3:d2:ee:98:9b:51:09:02:25:e4:04:fa:cc:
+ de:4f:f6:3d:9c:65:80:b3:83:19:dd:74:b7:3f:84:
+ 86:7f:77:f9:5b:bc:c9:5c:0d:98:3e:77:df:3b:f1:
+ 43:cd:3d:4a:88:81:76:08:cb:56:25:5f:ff:56:7e:
+ e1:e2:ab:41:60:9a:89:32:cf:9b:5e:3f:95:17:04:
+ 75:2d:a2:b7:e8:02:ea:6e:a0:2f:69:9f:30:a7:cd:
+ 7b:e6:e5:3d:98:01:51:b4:3e:c2:cf:87:f9:a1:e8:
+ 9d:69:43:91:37:58:b9:ec:2e:64:5f:76:21:e5:09:
+ 8c:6e:72:31:f4:c5:79:2f:14:1f:84:17:10:e3:50:
+ 0f:5d:d2:dd:f1:33:cb:57:f2:19:8c:04:96:e8:a7:
+ 3b:77:51:3a:6e:03:2b:29:2a:db:40:da:fb:41:f2:
+ bc:37:ef:31:5c:2b:0f:b2:f4:58:27:b6:0f:24:4d:
+ 1d:97:ca:bd:00:c8:5f:eb:c4:3d:5d:b7:9e:d6:58:
+ 45:8a:20:af:2f:16:fc:51:6c:55:66:24:19:21:66:
+ 38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 66:52:63:09:9B:DD:07:2A:2D:E0:F3:6C:29:FB:D9:74:87:F5:02:6A
+ 44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45
X509v3 Authority Key Identifier:
- keyid:66:52:63:09:9B:DD:07:2A:2D:E0:F3:6C:29:FB:D9:74:87:F5:02:6A
+ keyid:44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 09:c6:5a:c2:9c:aa:78:6d:66:79:43:2a:1c:a4:0b:04:42:8c:
- 54:6c:89:d7:ce:e0:fd:8e:33:5b:6c:2b:a2:ed:05:de:ea:3b:
- 11:21:bd:e9:23:45:bd:0f:e0:5c:fe:1b:11:8b:46:75:c1:24:
- 84:5a:95:15:a5:b3:73:86:6b:aa:8f:dc:46:3c:64:d9:60:9e:
- c1:7a:63:a3:d5:d6:b4:27:ed:c3:77:ea:5d:59:e7:93:05:df:
- be:58:4c:a5:92:52:61:11:d1:7f:27:e6:9b:29:3c:b8:9d:a0:
- 5c:d0:98:5f:a7:ed:39:14:f4:30:81:f6:0d:3b:cd:96:d6:dd:
- 7a:e2:b0:55:7c:ab:87:10:54:a6:5d:ac:27:5b:a6:a1:1e:ee:
- e7:26:cb:44:1d:fe:84:85:54:e0:cb:62:1b:5a:bb:ed:38:c0:
- f4:bd:1e:5d:ee:c6:d7:6e:b3:27:56:5c:8d:1f:dd:70:52:35:
- 8a:bc:07:0a:97:99:10:80:16:5b:a3:d1:de:f9:97:59:ca:5f:
- 42:10:c0:26:3e:6e:92:a9:6d:e5:09:1e:4c:92:4b:2e:a7:e8:
- 81:7f:e4:bb:b3:44:3c:71:e3:0c:ba:66:30:4a:fc:30:40:ce:
- 50:98:1b:61:52:91:02:84:ff:a1:a3:09:ad:1b:68:db:52:a6:
- cf:18:79:af
+ 94:de:4b:73:02:e3:22:7f:1e:82:0c:64:a8:de:79:70:34:96:
+ 9d:b5:e9:a0:51:bc:5c:3a:b1:97:7e:a4:0a:04:60:5a:3b:3a:
+ 88:7e:ff:67:1a:19:7f:61:c0:6a:f9:73:14:b4:6b:be:21:fd:
+ f3:e2:7a:61:56:73:15:9e:8d:c5:bb:21:47:8a:1f:fa:03:0d:
+ 0a:90:20:37:69:49:0b:2e:6a:9c:64:5b:e8:f0:ed:29:32:5f:
+ bc:f8:59:81:ad:d8:d9:71:ef:8d:bd:9c:ed:2e:c3:53:4f:12:
+ ec:f3:83:24:36:30:b1:c6:59:a7:2c:a8:6d:62:30:bc:a3:28:
+ 13:0a:09:ed:47:a9:f5:68:e9:97:33:b2:e7:e7:5c:f9:bb:c1:
+ 4b:7b:63:62:0a:0f:31:58:7e:24:88:30:f5:42:cf:3e:86:ca:
+ 48:5b:83:44:b0:04:fa:0b:e2:9c:8b:5f:9c:68:77:23:79:40:
+ 29:95:0d:6e:32:bf:ab:b4:ae:8a:2a:ca:f2:2a:92:a7:0d:b4:
+ 80:5d:ce:be:f8:68:24:00:d9:30:9c:de:ba:35:d4:22:b5:dd:
+ 15:37:70:bd:2e:7c:53:65:db:6f:1d:47:fa:53:56:dd:d0:9f:
+ e7:d5:d5:27:7f:c7:2e:9b:55:c2:70:1f:5e:66:b8:d1:2e:ac:
+ c6:e9:de:aa
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALthnVAoUfciAUUyKNDQ
-ssNBpDofi5qw62ExORqHWwP7AoIVj3/Xu06Jrgjffm8vZoePV6ugYXklZOsgXeeS
-F73EG+DqJ+J7uG4FCAdUPU7WgIu5UNB1I5PD4hve9yAkNQ/Uw93PBxkpbwgIprOf
-bSqLPLdvMv6BbRutiJbFH6R6pIG15LOavEKwQOV3jRIyzNkFEmpHYisiW6hI/hQa
-oS8DNPErj9W/PBiu8Wd5yKONKdDOIwNv7hRel91NyPUfxB1JCLWcffrheQgngy2K
-9EPW1mt49A5MQldyA2FztYIjmCqpBvmzlc0BZsI+ltoCE5Xh5lGUZy03pc/BGGL7
-VhUCAwEAAaOByzCByDAdBgNVHQ4EFgQUZlJjCZvdByot4PNsKfvZdIf1AmowHwYD
-VR0jBBgwFoAUZlJjCZvdByot4PNsKfvZdIf1AmowNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKAhHNEAl4AmTFn+H3Mj
+SJcQsH+7uzQAdvtd5h9Z7STZJZwWBlCOg9rWkyKANGnT0u6Ym1EJAiXkBPrM3k/2
+PZxlgLODGd10tz+Ehn93+Vu8yVwNmD533zvxQ809SoiBdgjLViVf/1Z+4eKrQWCa
+iTLPm14/lRcEdS2it+gC6m6gL2mfMKfNe+blPZgBUbQ+ws+H+aHonWlDkTdYuewu
+ZF92IeUJjG5yMfTFeS8UH4QXEONQD13S3fEzy1fyGYwEluinO3dROm4DKykq20Da
++0HyvDfvMVwrD7L0WCe2DyRNHZfKvQDIX+vEPV23ntZYRYogry8W/FFsVWYkGSFm
+OJ8CAwEAAaOByzCByDAdBgNVHQ4EFgQURPyd8FHyI5n+pHbLy1w5vfxoOEUwHwYD
+VR0jBBgwFoAURPyd8FHyI5n+pHbLy1w5vfxoOEUwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAJxlrCnKp4
-bWZ5QyocpAsEQoxUbInXzuD9jjNbbCui7QXe6jsRIb3pI0W9D+Bc/hsRi0Z1wSSE
-WpUVpbNzhmuqj9xGPGTZYJ7BemOj1da0J+3Dd+pdWeeTBd++WEylklJhEdF/J+ab
-KTy4naBc0Jhfp+05FPQwgfYNO82W1t164rBVfKuHEFSmXawnW6ahHu7nJstEHf6E
-hVTgy2IbWrvtOMD0vR5d7sbXbrMnVlyNH91wUjWKvAcKl5kQgBZbo9He+ZdZyl9C
-EMAmPm6SqW3lCR5Mkksup+iBf+S7s0Q8ceMMumYwSvwwQM5QmBthUpEChP+howmt
-G2jbUqbPGHmv
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCU3ktzAuMi
+fx6CDGSo3nlwNJadtemgUbxcOrGXfqQKBGBaOzqIfv9nGhl/YcBq+XMUtGu+If3z
+4nphVnMVno3FuyFHih/6Aw0KkCA3aUkLLmqcZFvo8O0pMl+8+FmBrdjZce+NvZzt
+LsNTTxLs84MkNjCxxlmnLKhtYjC8oygTCgntR6n1aOmXM7Ln51z5u8FLe2NiCg8x
+WH4kiDD1Qs8+hspIW4NEsAT6C+Kci1+caHcjeUAplQ1uMr+rtK6KKsryKpKnDbSA
+Xc6++GgkANkwnN66NdQitd0VN3C9LnxTZdtvHUf6U1bd0J/n1dUnf8cum1XCcB9e
+ZrjRLqzG6d6q
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/expired-target.pem b/net/data/verify_certificate_chain_unittest/expired-target.pem
index 8afcd0f..2919474 100644
--- a/net/data/verify_certificate_chain_unittest/expired-target.pem
+++ b/net/data/verify_certificate_chain_unittest/expired-target.pem
@@ -1,6 +1,6 @@
[Created by: generate-expired-target.py]
-Certificate chain with 1 intermediary, where the target is expired (violates
+Certificate chain with 1 intermediate, where the target is expired (violates
validity.notAfter). Verification is expected to fail.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Mar 1 12:00:00 2015 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:e3:02:17:8f:16:37:b7:e0:0b:44:86:f7:4f:de:
- 18:39:31:91:ed:11:80:67:c4:e0:18:7e:42:8e:be:
- dd:a9:0e:e7:ff:47:f2:1d:eb:a8:53:21:5b:c0:3e:
- 32:59:cf:31:24:e3:0f:00:4a:d2:f7:9a:77:31:10:
- 45:89:e3:e8:62:9c:c7:06:31:d0:c8:86:2b:3d:a7:
- 71:83:82:fa:c1:c2:cb:84:74:48:ad:c9:8a:4d:27:
- 1e:75:bb:4e:ce:54:3c:c1:b5:25:e5:02:d0:b3:8c:
- 14:f3:f5:9e:f8:30:20:ec:c6:d9:c4:a2:aa:06:f9:
- dc:ca:53:2f:76:cf:32:42:fd:7a:1a:c3:da:4a:d3:
- 82:30:84:f5:fb:02:82:f6:db:6e:87:fc:e8:69:14:
- a0:9f:2d:07:c4:ac:64:86:f5:ac:4b:22:f1:b0:d1:
- 91:2e:29:f7:cf:e0:10:aa:5d:cd:df:d7:a7:b9:9d:
- 72:cc:fd:16:d5:11:97:90:75:dc:5e:02:ab:7f:d3:
- dd:0a:a8:bc:5a:34:c6:8d:bb:8f:7a:04:d5:b6:99:
- 20:a4:72:c9:ba:00:cf:69:5e:e5:dd:bf:47:b3:3c:
- be:83:0d:4b:95:be:91:58:a4:a4:33:2e:3b:b8:da:
- 85:3d:74:66:8f:f9:0b:be:8e:9d:3e:b6:ca:8b:9b:
- 7e:19
+ 00:df:82:6a:2a:fe:30:47:00:84:06:de:48:a1:fc:
+ a5:d9:2c:d5:7d:e2:71:eb:ff:b5:7b:da:8c:c7:fc:
+ 38:8a:a3:64:5a:f8:01:70:e0:c0:26:d4:70:2c:08:
+ da:6b:5c:b4:40:41:aa:9e:b4:1d:05:9b:54:7c:54:
+ a4:b8:07:03:b0:69:95:98:c5:e6:7a:7f:71:6f:07:
+ dd:a5:21:59:79:7c:58:7c:00:0d:9d:18:6b:c0:3d:
+ 2d:fe:c6:63:58:c6:5f:29:47:01:b6:a2:dd:bb:f4:
+ 8a:8b:d0:15:3e:0b:01:18:34:0a:d4:a1:d3:e9:7a:
+ c3:5d:97:2b:c7:53:ff:49:81:34:fc:16:b4:02:f8:
+ 7c:55:6e:fa:9b:4f:cd:31:1a:f5:d2:5c:8f:92:d7:
+ bd:48:50:a9:b1:c4:89:cd:6d:c8:1d:99:77:34:d1:
+ d3:61:8f:b9:f8:3b:3e:c6:b3:2e:5f:3c:d0:f7:04:
+ 34:51:9f:83:4e:7b:1d:c9:59:53:81:6e:d9:f7:4b:
+ 36:dc:80:9e:b4:a4:cb:5d:18:1d:d3:52:3e:d8:b3:
+ 4e:28:c5:ba:2c:bd:dc:d1:e2:4a:21:e5:2a:ed:6f:
+ 97:84:a9:01:89:eb:2e:21:9e:b9:4a:6a:9b:c5:fe:
+ b0:5a:34:cf:25:0f:55:53:41:be:94:b9:8d:81:44:
+ fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 1C:D2:85:3D:00:41:91:25:0B:8B:C2:CB:0E:D7:97:F1:14:8E:DE:01
+ A1:54:DE:B4:8A:C7:C9:C4:33:C6:9B:40:BF:3D:6E:CF:DB:47:EC:8C
X509v3 Authority Key Identifier:
- keyid:90:4B:3E:89:21:25:2A:3C:CA:35:BF:D9:A6:B1:CF:BC:1F:9D:3A:2F
+ keyid:13:F7:B3:D5:1C:C9:63:BD:3A:24:01:43:AE:4A:26:96:46:55:F5:F0
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 6d:36:b8:bc:75:67:0d:8a:5b:00:51:3b:06:31:af:83:23:80:
- a0:4f:eb:05:d6:5c:15:20:a3:10:7b:3e:31:0a:ba:45:b5:6b:
- 21:2b:02:bf:83:73:2c:cd:81:85:a0:38:ed:4e:bd:b7:36:dc:
- b6:69:bb:81:7b:75:74:3c:ac:5a:c2:59:74:6d:d9:64:8e:5b:
- 16:19:25:44:98:cb:9d:cd:a0:d4:6f:7f:d2:a3:11:cd:94:aa:
- b0:74:ee:c2:a3:3b:aa:98:e0:c5:0d:01:a4:f8:a2:84:ab:d0:
- db:19:9d:4d:ce:84:89:50:e8:3a:44:fb:e5:06:f3:d8:e9:d5:
- aa:81:69:af:2a:f2:9e:58:35:d5:3d:97:44:3a:79:47:22:d6:
- 9c:1b:b9:93:ea:3f:44:ac:cf:2a:54:52:86:0b:db:17:9d:f9:
- 4d:54:46:4d:af:21:92:cf:8a:01:52:14:07:96:c7:48:75:3c:
- 66:4d:74:fb:44:06:eb:a9:ab:12:2e:91:80:de:02:c1:12:5b:
- 32:76:36:46:13:16:00:31:76:c9:ee:64:e6:75:03:49:7d:63:
- d6:bf:f1:90:1f:b6:49:38:e5:af:37:63:46:e2:4d:d1:29:b8:
- b3:24:ec:f5:f8:32:c3:03:fa:1a:ad:30:1a:db:41:4d:5e:43:
- 46:ae:6d:4e
+ aa:f9:d5:79:52:fa:99:3e:d8:cd:ab:c3:e4:05:a9:85:c5:bf:
+ 78:3b:d6:14:0b:06:f4:62:77:8e:70:40:a5:b9:b4:46:52:5d:
+ 86:ad:52:52:f7:c3:1f:e9:e8:8a:e2:5b:23:63:bf:e8:5c:d8:
+ a6:11:ad:02:94:09:04:3b:67:cb:62:a3:09:67:eb:b3:68:0f:
+ 81:6d:0f:d6:4e:6c:d8:a3:e5:85:8f:8f:7e:65:a4:c7:d9:ba:
+ a8:05:22:2c:94:9d:8f:e4:d1:a5:5c:7e:c0:0f:39:3e:d7:b4:
+ 2c:df:d7:c1:ab:9e:5d:8d:28:51:d5:fa:2f:c6:fa:85:17:d4:
+ 05:d5:4d:d8:ee:6a:14:23:da:a0:cc:43:7b:65:54:71:e1:e1:
+ 79:b0:62:0a:a3:70:56:9b:53:5d:70:b7:78:6f:fd:ba:13:a7:
+ 99:0a:0a:b3:46:2a:7b:48:26:31:b2:50:aa:5e:29:d9:1b:55:
+ 1f:cb:de:2a:17:4d:ee:0d:67:2b:4e:dd:f6:54:d0:72:ec:e3:
+ 53:4e:24:26:a6:1e:17:e8:94:ca:a8:4a:3a:af:b8:48:51:1a:
+ 76:38:bd:bf:cb:c5:56:e4:a8:e4:f8:cb:cb:e9:97:ed:4e:b9:
+ af:fb:e7:92:d3:b7:ba:81:a0:13:e8:09:31:f3:45:91:2a:5c:
+ 93:12:a9:99
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTUwMzAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjAheP
-Fje34AtEhvdP3hg5MZHtEYBnxOAYfkKOvt2pDuf/R/Id66hTIVvAPjJZzzEk4w8A
-StL3mncxEEWJ4+hinMcGMdDIhis9p3GDgvrBwsuEdEityYpNJx51u07OVDzBtSXl
-AtCzjBTz9Z74MCDsxtnEoqoG+dzKUy92zzJC/Xoaw9pK04IwhPX7AoL2226H/Ohp
-FKCfLQfErGSG9axLIvGw0ZEuKffP4BCqXc3f16e5nXLM/RbVEZeQddxeAqt/090K
-qLxaNMaNu496BNW2mSCkcsm6AM9pXuXdv0ezPL6DDUuVvpFYpKQzLju42oU9dGaP
-+Qu+jp0+tsqLm34ZAgMBAAGjgekwgeYwHQYDVR0OBBYEFBzShT0AQZElC4vCyw7X
-l/EUjt4BMB8GA1UdIwQYMBaAFJBLPokhJSo8yjW/2aaxz7wfnTovMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAbTa4vHVnDYpbAFE7BjGv
-gyOAoE/rBdZcFSCjEHs+MQq6RbVrISsCv4NzLM2BhaA47U69tzbctmm7gXt1dDys
-WsJZdG3ZZI5bFhklRJjLnc2g1G9/0qMRzZSqsHTuwqM7qpjgxQ0BpPiihKvQ2xmd
-Tc6EiVDoOkT75Qbz2OnVqoFpryrynlg11T2XRDp5RyLWnBu5k+o/RKzPKlRShgvb
-F535TVRGTa8hks+KAVIUB5bHSHU8Zk10+0QG66mrEi6RgN4CwRJbMnY2RhMWADF2
-ye5k5nUDSX1j1r/xkB+2STjlrzdjRuJN0Sm4syTs9fgywwP6Gq0wGttBTV5DRq5t
-Tg==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-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c1:92:e2:bf:d0:e9:8f:c6:45:f0:c9:ef:51:cc:
- 97:cc:cb:80:ac:c1:7c:da:7e:28:12:0c:84:45:6b:
- db:fb:4f:ba:16:3e:33:8b:a1:14:70:42:99:ca:4e:
- 8e:55:ac:13:e5:ac:d4:30:9e:25:dc:19:d9:b9:de:
- 46:7a:84:80:29:bd:a1:11:f8:f2:af:ce:c1:0c:73:
- 43:29:37:c3:76:61:32:70:6d:e7:29:bf:dd:9f:68:
- ed:9e:c2:b9:8c:f6:16:7c:b9:06:4b:65:ff:57:26:
- 9d:62:48:ee:0b:0f:4c:5e:fb:d7:a9:e3:d8:4b:a9:
- 0c:01:b6:00:f8:48:27:64:03:b6:73:d0:85:10:92:
- 4c:50:f8:f4:33:95:ea:52:30:72:b0:c1:e1:d3:1e:
- 8e:67:2a:64:42:c8:61:b8:3f:76:d2:01:1d:e6:dc:
- d2:66:09:41:24:c3:22:b4:55:3a:f0:5e:3d:82:af:
- 5d:0d:b7:d7:96:02:dc:94:e4:d2:24:dc:49:f8:d3:
- dc:b9:78:0e:ce:cf:8f:1a:3f:06:8b:57:e4:51:91:
- 7f:64:1b:cd:db:4d:80:88:26:21:dc:da:64:ae:64:
- bb:03:21:1c:de:ce:44:eb:a7:b4:43:50:51:cc:67:
- da:16:91:93:94:e4:d0:ed:28:dc:8a:16:8b:3d:d8:
- cd:19
+ 00:ba:33:55:c9:1e:c0:91:17:3a:eb:30:8c:ed:23:
+ cc:1d:6d:1e:e7:6e:4e:ac:23:63:23:ae:48:87:13:
+ 61:0f:0c:0b:ee:72:f7:c2:7b:95:2e:7b:25:34:08:
+ b6:e1:f5:ae:50:bf:8f:cf:81:6e:e6:26:9f:92:61:
+ c4:fb:44:9e:23:09:df:13:80:bc:38:5b:db:08:6c:
+ 68:60:46:d4:e3:e0:41:91:c4:42:d5:d9:75:d2:c4:
+ df:29:b8:04:bb:96:dc:9d:e4:0b:f7:de:ab:cf:90:
+ ad:22:c8:ab:56:65:84:00:3b:b9:e6:29:b5:e2:96:
+ 88:bd:95:e5:10:6d:57:ab:be:d1:f4:61:bb:1d:b4:
+ 7f:f9:02:db:48:d3:21:9d:f1:03:77:bf:f9:ca:f3:
+ 4e:2d:44:1c:28:1d:c5:4f:30:1b:0a:8b:71:0e:5f:
+ 86:0a:3f:97:7f:47:a6:a2:3c:60:02:c6:e8:bd:e9:
+ 52:b1:0b:cb:53:d4:09:f4:b6:20:23:b4:89:09:ff:
+ 1a:61:e8:dd:ac:19:4d:be:94:1e:60:24:d4:6c:89:
+ 03:3a:c4:44:5b:dd:7c:59:37:b7:0c:83:40:24:0e:
+ ed:ab:02:cf:cd:93:d2:3d:5d:e0:c6:c4:c5:1d:1a:
+ 01:d1:e1:77:58:62:90:e1:83:af:d2:ee:31:f3:29:
+ 0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 90:4B:3E:89:21:25:2A:3C:CA:35:BF:D9:A6:B1:CF:BC:1F:9D:3A:2F
+ 13:F7:B3:D5:1C:C9:63:BD:3A:24:01:43:AE:4A:26:96:46:55:F5:F0
X509v3 Authority Key Identifier:
- keyid:C3:6A:BF:B8:BB:62:64:F0:4C:4C:28:47:94:45:0F:15:0D:DC:CD:5A
+ keyid:5F:B1:E2:C5:58:EB:EF:73:DC:15:A3:0F:8E:24:0C:6C:67:65:00:04
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- bd:cb:4f:22:e2:7a:50:05:dd:e3:d6:41:19:2b:6d:4a:3e:a8:
- 90:27:4f:ce:eb:ee:83:4f:d5:b6:ea:a5:18:1c:00:83:84:76:
- 92:76:a7:2c:54:5f:94:a7:fc:4c:2f:38:08:c5:24:3f:95:57:
- e4:55:e2:a5:96:b7:c0:7b:cc:8f:ce:a1:81:e2:d2:51:17:d3:
- 7f:6b:76:ed:f5:41:2a:7a:56:e2:d1:ed:55:94:38:2e:9f:cb:
- 9b:a3:8b:d8:d7:42:24:81:55:97:82:a1:77:52:7c:1f:70:db:
- 0b:bf:a5:eb:96:2e:d4:fb:9c:d5:6a:6e:9b:60:75:01:e1:fe:
- f1:14:64:42:82:2a:f5:ea:b3:e1:2e:40:fe:b2:af:9f:c5:66:
- 25:d8:7d:8c:5f:00:3d:04:b4:02:8c:c7:99:30:d0:c0:02:e4:
- 5f:3b:75:01:59:76:1c:3c:95:5b:28:49:90:2f:c0:af:45:f0:
- 4c:62:ca:40:66:80:7e:25:89:ab:91:55:ee:41:71:af:05:4c:
- 7e:31:2c:99:24:50:c9:dd:97:79:73:97:f9:5a:79:79:05:ff:
- c6:83:b7:e3:4d:86:b6:a3:60:1d:7c:e6:89:80:a3:50:8f:b1:
- 4a:43:d2:a9:89:92:8b:38:20:71:64:0a:41:8b:fd:2f:4b:ab:
- 3c:45:99:0f
+ a5:43:87:2e:d0:2c:51:df:a7:aa:48:b4:38:fc:1d:6f:c9:db:
+ 23:32:75:f2:d1:52:45:ea:4a:89:1f:e9:10:0c:22:0d:70:3e:
+ f0:c1:cf:b7:a8:cd:af:d4:33:99:14:6e:62:b9:a8:0f:a6:2c:
+ 75:dd:d8:79:88:fc:cb:c4:7e:64:b1:2f:7a:0b:b2:a4:6c:82:
+ 29:7d:23:32:d3:de:a8:90:a8:77:f8:33:13:e9:3e:42:0b:32:
+ e8:50:e0:af:31:2f:b9:e5:be:b7:c7:16:ca:a7:96:9e:95:24:
+ d2:c1:b3:df:70:5f:7b:8a:33:6b:55:76:e8:18:32:66:0e:9a:
+ 60:cf:dc:30:1e:38:15:05:6e:cc:4a:1e:e7:2e:e0:5a:de:ea:
+ 84:a1:ce:04:fd:db:74:d6:fe:b6:4d:6b:86:38:22:78:f1:3e:
+ ba:dc:8b:85:a6:2f:56:10:1f:7d:b8:96:00:4c:d6:a3:fa:93:
+ fd:1b:29:64:40:7c:f8:65:3f:73:8a:7e:3e:72:c7:ce:19:74:
+ 51:21:26:5d:2d:41:a0:95:c9:8f:70:fd:2a:60:7a:b0:fc:e5:
+ 14:65:9a:3e:68:2c:4a:47:1b:5a:97:8a:31:a9:1a:1a:c9:fc:
+ e3:be:c9:dd:65:0f:33:2b:f9:d9:68:5b:54:22:c4:dc:a6:21:
+ 42:6c:ec:64
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZLiv9Dp
-j8ZF8MnvUcyXzMuArMF82n4oEgyERWvb+0+6Fj4zi6EUcEKZyk6OVawT5azUMJ4l
-3BnZud5GeoSAKb2hEfjyr87BDHNDKTfDdmEycG3nKb/dn2jtnsK5jPYWfLkGS2X/
-VyadYkjuCw9MXvvXqePYS6kMAbYA+EgnZAO2c9CFEJJMUPj0M5XqUjBysMHh0x6O
-ZypkQshhuD920gEd5tzSZglBJMMitFU68F49gq9dDbfXlgLclOTSJNxJ+NPcuXgO
-zs+PGj8Gi1fkUZF/ZBvN202AiCYh3NpkrmS7AyEc3s5E66e0Q1BRzGfaFpGTlOTQ
-7SjcihaLPdjNGQIDAQABo4HLMIHIMB0GA1UdDgQWBBSQSz6JISUqPMo1v9mmsc+8
-H506LzAfBgNVHSMEGDAWgBTDar+4u2Jk8ExMKEeURQ8VDdzNWjA3BggrBgEFBQcB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-AL3LTyLielAF3ePWQRkrbUo+qJAnT87r7oNP1bbqpRgcAIOEdpJ2pyxUX5Sn/Ewv
-OAjFJD+VV+RV4qWWt8B7zI/OoYHi0lEX039rdu31QSp6VuLR7VWUOC6fy5uji9jX
-QiSBVZeCoXdSfB9w2wu/peuWLtT7nNVqbptgdQHh/vEUZEKCKvXqs+EuQP6yr5/F
-ZiXYfYxfAD0EtAKMx5kw0MAC5F87dQFZdhw8lVsoSZAvwK9F8ExiykBmgH4liauR
-Ve5Bca8FTH4xLJkkUMndl3lzl/laeXkF/8aDt+NNhrajYB185omAo1CPsUpD0qmJ
-kos4IHFkCkGL/S9LqzxFmQ8=
+AKVDhy7QLFHfp6pItDj8HW/J2yMydfLRUkXqSokf6RAMIg1wPvDBz7eoza/UM5kU
+bmK5qA+mLHXd2HmI/MvEfmSxL3oLsqRsgil9IzLT3qiQqHf4MxPpPkILMuhQ4K8x
+L7nlvrfHFsqnlp6VJNLBs99wX3uKM2tVdugYMmYOmmDP3DAeOBUFbsxKHucu4Fre
+6oShzgT923TW/rZNa4Y4InjxPrrci4WmL1YQH324lgBM1qP6k/0bKWRAfPhlP3OK
+fj5yx84ZdFEhJl0tQaCVyY9w/SpgerD85RRlmj5oLEpHG1qXijGpGhrJ/OO+yd1l
+DzMr+dloW1QixNymIUJs7GQ=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:fa:da:12:88:da:6c:4d:a4:17:2e:e6:c7:c7:f6:
- fc:0b:41:94:b9:ad:5e:72:7f:53:82:c3:9b:bd:f0:
- 39:fd:6c:be:42:2f:28:fe:76:7e:e6:24:f7:6b:32:
- 42:c7:0e:6f:b3:9b:4d:61:ab:f3:f1:76:67:29:77:
- a5:6a:b9:64:65:40:42:0a:ad:dc:27:16:7a:94:ae:
- 8f:f0:d2:db:e7:7c:71:21:c9:ca:f0:64:94:58:32:
- b7:fa:d3:27:bc:84:95:ce:d2:81:43:dc:7d:b3:e8:
- 76:aa:eb:0a:a6:c1:03:1f:ae:19:db:8a:c4:ef:a1:
- bd:f3:d6:e9:e7:20:a8:83:1c:78:d5:85:c2:be:9f:
- c9:e2:4e:ab:e6:a8:53:6b:c7:5d:d6:57:6f:4f:2d:
- db:75:89:c6:10:a3:96:36:22:8d:c3:0a:20:7b:5f:
- 75:04:a6:4a:8d:24:d3:21:0b:16:fe:70:ae:34:d4:
- bd:33:27:86:cb:b3:c8:b8:9a:80:70:0c:01:38:af:
- e8:dc:0a:32:ca:a8:da:6c:a7:0a:2d:f3:b6:f7:cb:
- 7f:ea:59:38:66:ce:9d:93:f2:75:89:d3:5f:43:5c:
- 9b:29:1c:d4:e9:37:6d:7c:79:ee:ad:c9:70:62:58:
- 4f:25:f6:21:20:44:a8:0b:c6:52:9d:2f:ea:a5:f8:
- b3:cf
+ 00:df:9c:45:02:46:38:eb:d4:64:cd:8e:95:65:63:
+ d5:e6:71:8b:67:13:d8:bc:6d:64:73:d7:40:17:79:
+ 80:a4:8d:8e:5f:bf:5e:48:b0:2f:bc:49:08:71:b4:
+ 80:38:00:cd:e9:ee:2e:6e:73:8a:77:56:b4:b3:d0:
+ e3:0c:40:c9:ca:1f:9b:a0:89:68:07:34:cd:f4:f4:
+ b9:a2:c1:ca:42:0e:da:90:cf:95:89:3a:3c:de:ad:
+ a6:ff:49:6c:e2:5e:f5:0b:ff:be:06:ee:ab:e1:81:
+ e9:da:a3:b8:d5:63:af:5e:10:63:49:23:0a:1d:ca:
+ 3e:bc:96:6e:82:5c:4f:ce:56:a7:8f:53:34:65:cb:
+ 47:88:3e:38:4d:71:b6:8a:06:e4:ed:4f:d2:df:59:
+ 3e:a7:03:a7:be:c2:14:a6:cf:9e:4b:c8:a3:25:21:
+ b2:3e:f8:cd:65:de:fc:0e:52:fd:fa:cf:d3:07:af:
+ 79:53:11:bf:e6:77:ce:d8:1a:4b:4f:cb:d2:35:28:
+ f8:5a:4b:05:a2:dd:88:e1:54:ac:1a:15:8d:54:a2:
+ b7:ac:66:7a:f8:4a:2a:75:94:15:b3:44:c2:05:ff:
+ e3:a0:34:40:84:00:39:6d:6d:e1:8e:16:f3:d3:60:
+ 2b:95:2f:fc:74:6e:b1:83:b7:0b:9d:9e:d8:34:45:
+ 21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C3:6A:BF:B8:BB:62:64:F0:4C:4C:28:47:94:45:0F:15:0D:DC:CD:5A
+ 5F:B1:E2:C5:58:EB:EF:73:DC:15:A3:0F:8E:24:0C:6C:67:65:00:04
X509v3 Authority Key Identifier:
- keyid:C3:6A:BF:B8:BB:62:64:F0:4C:4C:28:47:94:45:0F:15:0D:DC:CD:5A
+ keyid:5F:B1:E2:C5:58:EB:EF:73:DC:15:A3:0F:8E:24:0C:6C:67:65:00:04
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 48:d9:ed:17:dd:a3:7c:5f:6b:aa:90:6d:f5:d4:61:a3:27:8e:
- 83:92:15:7a:6c:d7:87:71:95:6a:e4:e0:d9:11:4e:2a:af:14:
- 5c:11:ba:a0:2e:15:bd:f0:c6:2d:72:0a:17:ce:02:1a:3b:61:
- 16:5d:1a:ff:e8:45:4d:d6:f2:93:9d:09:ce:e6:ec:a8:c8:de:
- e6:40:dc:26:cc:15:89:38:b9:59:06:27:d0:93:af:0e:83:08:
- 9f:c3:50:1c:b1:e0:88:69:b2:43:61:c3:4c:bc:d9:19:d7:87:
- 57:c3:e6:99:7b:f0:02:09:ac:e1:f0:a1:55:d5:53:0c:fc:c4:
- b3:3c:49:67:30:70:d5:c7:cd:94:a6:07:f0:cd:89:fd:68:b4:
- 29:9d:63:91:f6:bf:79:da:6a:93:6d:b5:52:57:d8:1a:62:18:
- 9f:ed:71:5c:d2:5d:53:0b:04:56:5c:05:81:6b:16:9a:dd:ff:
- fe:5d:98:32:97:07:c1:7b:9c:d5:08:07:2e:b9:17:ab:1e:a3:
- ea:64:b1:02:1b:04:ca:5f:4c:fd:1f:45:91:d9:f6:de:c7:78:
- 9d:aa:5d:b7:cc:6f:58:7f:2d:71:cc:5c:3a:8c:e5:db:51:3e:
- af:77:1f:d1:e1:81:cb:74:c0:36:46:be:51:4e:55:94:98:65:
- 7d:33:c0:5e
+ 98:24:67:cd:0c:c3:0f:c5:09:c1:b3:b2:c3:eb:90:d5:1b:7e:
+ ce:45:7e:e8:f9:ae:bd:54:46:58:4e:0f:b3:65:30:45:98:3e:
+ 02:bf:a0:a9:e6:9c:69:f7:94:c8:bc:3d:33:ed:ac:52:5e:65:
+ 58:f1:ef:4d:bd:bf:39:65:62:e1:75:35:b2:27:92:fa:9b:3d:
+ 92:ed:51:f3:73:9a:73:2f:2f:61:2a:1d:34:e0:a1:fa:fc:b3:
+ dc:24:40:af:14:fd:d5:26:d0:5e:cb:fd:05:8b:88:f5:5c:0f:
+ 6f:75:68:c5:32:f1:1d:cd:a2:be:b2:66:0c:1a:4c:d6:df:1b:
+ e4:09:b9:bf:32:41:59:ca:bc:48:33:b1:ec:6a:fa:4d:dc:72:
+ ae:96:15:29:35:78:85:96:f9:64:05:75:50:b3:3e:b0:f8:15:
+ 7c:06:54:ff:36:98:2a:6d:4f:33:b0:78:1c:d3:be:12:2d:5b:
+ b4:37:2b:04:1b:d8:ce:28:db:9c:6d:49:e8:6f:f6:45:75:0a:
+ fb:69:dc:71:63:cd:c6:17:84:4b:8a:14:a0:ef:42:6a:6f:f2:
+ a8:76:e9:c6:4b:94:d2:24:f5:aa:80:d2:b6:81:17:c6:7d:7d:
+ 88:36:fe:26:44:cf:36:5a:5e:de:c4:34:da:54:1e:89:1f:d6:
+ 98:9e:3c:f7
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPraEojabE2kFy7mx8f2
-/AtBlLmtXnJ/U4LDm73wOf1svkIvKP52fuYk92syQscOb7ObTWGr8/F2Zyl3pWq5
-ZGVAQgqt3CcWepSuj/DS2+d8cSHJyvBklFgyt/rTJ7yElc7SgUPcfbPodqrrCqbB
-Ax+uGduKxO+hvfPW6ecgqIMceNWFwr6fyeJOq+aoU2vHXdZXb08t23WJxhCjljYi
-jcMKIHtfdQSmSo0k0yELFv5wrjTUvTMnhsuzyLiagHAMATiv6NwKMsqo2mynCi3z
-tvfLf+pZOGbOnZPydYnTX0Ncmykc1Ok3bXx57q3JcGJYTyX2ISBEqAvGUp0v6qX4
-s88CAwEAAaOByzCByDAdBgNVHQ4EFgQUw2q/uLtiZPBMTChHlEUPFQ3czVowHwYD
-VR0jBBgwFoAUw2q/uLtiZPBMTChHlEUPFQ3czVowNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBI2e0X3aN8
-X2uqkG311GGjJ46DkhV6bNeHcZVq5ODZEU4qrxRcEbqgLhW98MYtcgoXzgIaO2EW
-XRr/6EVN1vKTnQnO5uyoyN7mQNwmzBWJOLlZBifQk68Ogwifw1AcseCIabJDYcNM
-vNkZ14dXw+aZe/ACCazh8KFV1VMM/MSzPElnMHDVx82UpgfwzYn9aLQpnWOR9r95
-2mqTbbVSV9gaYhif7XFc0l1TCwRWXAWBaxaa3f/+XZgylwfBe5zVCAcuuRerHqPq
-ZLECGwTKX0z9H0WR2fbex3idql23zG9Yfy1xzFw6jOXbUT6vdx/R4YHLdMA2Rr5R
-TlWUmGV9M8Be
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCYJGfNDMMP
+xQnBs7LD65DVG37ORX7o+a69VEZYTg+zZTBFmD4Cv6Cp5pxp95TIvD0z7axSXmVY
+8e9Nvb85ZWLhdTWyJ5L6mz2S7VHzc5pzLy9hKh004KH6/LPcJECvFP3VJtBey/0F
+i4j1XA9vdWjFMvEdzaK+smYMGkzW3xvkCbm/MkFZyrxIM7HsavpN3HKulhUpNXiF
+lvlkBXVQsz6w+BV8BlT/NpgqbU8zsHgc074SLVu0NysEG9jOKNucbUnob/ZFdQr7
+adxxY83GF4RLihSg70Jqb/KodunGS5TSJPWqgNK2gRfGfX2INv4mRM82Wl7exDTa
+VB6JH9aYnjz3
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py b/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py
index 03c6eb5..55f649f 100755
--- a/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py
+++ b/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 2 intermediaries. The first intermediary has a basic
+"""Certificate chain with 2 intermediates. The first intermediate has a basic
constraints path length of 0. The second one is self-issued so does not count
against the path length."""
@@ -12,22 +12,22 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with pathlen 0
-intermediary1 = common.create_intermediary_certificate('Intermediary', root)
-intermediary1.get_extensions().set_property('basicConstraints',
+# Intermediate with pathlen 0
+intermediate1 = common.create_intermediate_certificate('Intermediate', root)
+intermediate1.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:0')
-# Another intermediary (with the same pathlen restriction).
+# Another intermediate (with the same pathlen restriction).
# Note that this is self-issued but NOT self-signed.
-intermediary2 = common.create_intermediary_certificate('Intermediary',
- intermediary1)
-intermediary2.get_extensions().set_property('basicConstraints',
+intermediate2 = common.create_intermediate_certificate('Intermediate',
+ intermediate1)
+intermediate2.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:0')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary2)
+target = common.create_end_entity_certificate('Target', intermediate2)
-chain = [target, intermediary2, intermediary1]
+chain = [target, intermediate2, intermediate1]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-expired-intermediary.py b/net/data/verify_certificate_chain_unittest/generate-expired-intermediate.py
similarity index 74%
rename from net/data/verify_certificate_chain_unittest/generate-expired-intermediary.py
rename to net/data/verify_certificate_chain_unittest/generate-expired-intermediate.py
index 463a37b..708d734 100755
--- a/net/data/verify_certificate_chain_unittest/generate-expired-intermediary.py
+++ b/net/data/verify_certificate_chain_unittest/generate-expired-intermediate.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, where the intermediary is expired
+"""Certificate chain with 1 intermediate, where the intermediate is expired
(violates validity.notAfter). Verification is expected to fail."""
import common
@@ -12,20 +12,20 @@
root = common.create_self_signed_root_certificate('Root')
root.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_validity_range(common.JANUARY_1_2015_UTC,
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.MARCH_1_2015_UTC)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
# Both the root and target are valid at this time, however the
-# intermediary certificate is not.
+# intermediate certificate is not.
time = common.MARCH_2_2015_UTC
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-expired-root.py b/net/data/verify_certificate_chain_unittest/generate-expired-root.py
index 83f7917..328edcc 100755
--- a/net/data/verify_certificate_chain_unittest/generate-expired-root.py
+++ b/net/data/verify_certificate_chain_unittest/generate-expired-root.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, where the root certificate is expired
+"""Certificate chain with 1 intermediate, where the root certificate is expired
(violates validity.notAfter). Verification is expected to fail."""
import common
@@ -12,19 +12,19 @@
root = common.create_self_signed_root_certificate('Root')
root.set_validity_range(common.JANUARY_1_2015_UTC, common.MARCH_1_2015_UTC)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_validity_range(common.JANUARY_1_2015_UTC,
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.JANUARY_1_2016_UTC)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
-# Both the target and intermediary are valid at this time, however the
+# Both the target and intermediate are valid at this time, however the
# root is not.
time = common.MARCH_2_2015_UTC
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py b/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py
index fae1831..209154d 100755
--- a/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py
+++ b/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, where the target is expired (violates
+"""Certificate chain with 1 intermediate, where the target is expired (violates
validity.notBefore). Verification is expected to fail."""
import common
@@ -12,19 +12,19 @@
root = common.create_self_signed_root_certificate('Root')
root.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_validity_range(common.JANUARY_1_2015_UTC,
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.JANUARY_1_2016_UTC)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_validity_range(common.MARCH_2_2015_UTC, common.JANUARY_1_2016_UTC)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
-# Both the root and intermediary are valid at this time, however the
+# Both the root and intermediate are valid at this time, however the
# target is not.
time = common.MARCH_1_2015_UTC
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-expired-target.py b/net/data/verify_certificate_chain_unittest/generate-expired-target.py
index eaa94d3..d75fa5a 100755
--- a/net/data/verify_certificate_chain_unittest/generate-expired-target.py
+++ b/net/data/verify_certificate_chain_unittest/generate-expired-target.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, where the target is expired (violates
+"""Certificate chain with 1 intermediate, where the target is expired (violates
validity.notAfter). Verification is expected to fail."""
import common
@@ -12,19 +12,19 @@
root = common.create_self_signed_root_certificate('Root')
root.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_validity_range(common.JANUARY_1_2015_UTC,
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.JANUARY_1_2016_UTC)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_validity_range(common.JANUARY_1_2015_UTC, common.MARCH_1_2015_UTC)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
-# Both the root and intermediary are valid at this time, however the
+# Both the root and intermediate are valid at this time, however the
# target is not.
time = common.MARCH_2_2015_UTC
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-ca-false.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-ca-false.py
similarity index 70%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-ca-false.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-ca-false.py
index 4375f0e..5d15191 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-ca-false.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-ca-false.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
has a basic constraints extension that indicates it is NOT a CA. Verification
is expected to fail."""
@@ -12,15 +12,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with incorrect basic constraints.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().set_property('basicConstraints',
+# Intermediate with incorrect basic constraints.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().set_property('basicConstraints',
'critical,CA:false')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-not-critical.py
similarity index 70%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-not-critical.py
index 284354f..9a409fc 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-not-critical.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
has a basic constraints extension but does not mark it as critical.
Verification is expected to succeed, since although not critical, the
basicConstraints indicates CA=true as expected."""
@@ -13,14 +13,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with non-critical basic constarints.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().set_property('basicConstraints', 'CA:true')
+# Intermediate with non-critical basic constarints.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().set_property('basicConstraints', 'CA:true')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-basic-constraints.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-basic-constraints.py
similarity index 69%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-basic-constraints.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-basic-constraints.py
index 1faced5..db91ff72 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-basic-constraints.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-basic-constraints.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
lacks the basic constraints extension, and hence is expected to fail validation
(RFC 5280 requires v3 signing certificates have a BasicConstaints)."""
@@ -12,14 +12,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary that lacks basic constraints.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().remove_property('basicConstraints')
+# Intermediate that lacks basic constraints.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().remove_property('basicConstraints')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-signing-key-usage.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-signing-key-usage.py
similarity index 71%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-signing-key-usage.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-signing-key-usage.py
index 4c3d8e8..5a3c5e1 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-signing-key-usage.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-signing-key-usage.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit.
Hence validation is expected to fail."""
@@ -12,15 +12,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary that is missing keyCertSign.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().set_property('keyUsage',
+# Intermediate that is missing keyCertSign.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().set_property('keyUsage',
'critical,digitalSignature,keyEncipherment')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-signed-with-md5.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-signed-with-md5.py
similarity index 72%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-signed-with-md5.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-signed-with-md5.py
index 8a59e65..5dec9d1 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-signed-with-md5.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-signed-with-md5.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
however is signed using the MD5 hash. Verification is expected to fail because
MD5 is too weak."""
@@ -12,14 +12,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_signature_hash('md5')
+# Intermediate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_signature_hash('md5')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-critical-extension.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-critical-extension.py
similarity index 72%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-critical-extension.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-critical-extension.py
index 39c0597..b4bffa1 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-critical-extension.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-critical-extension.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as critical.
Verifying this certificate chain is expected to fail because there is an
unrecognized critical extension."""
@@ -13,15 +13,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary that has an unknown critical extension.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().add_property('1.2.3.4',
+# Intermediate that has an unknown critical extension.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().add_property('1.2.3.4',
'critical,DER:01:02:03:04')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-non-critical-extension.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-non-critical-extension.py
similarity index 69%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-non-critical-extension.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-non-critical-extension.py
index 874a658..b4bbb9e 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-non-critical-extension.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-non-critical-extension.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
has an unknown X.509v3 extension that is marked as non-critical. Verification
is expected to succeed because although unrecognized, the extension is not
critical."""
@@ -12,15 +12,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+intermediate = common.create_intermediate_certificate('Intermediate', root)
-# Intermediary that has an unknown non-critical extension.
-intermediary.get_extensions().add_property('1.2.3.4', 'DER:01:02:03:04')
+# Intermediate that has an unknown non-critical extension.
+intermediate.get_extensions().add_property('1.2.3.4', 'DER:01:02:03:04')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-key-rollover.py b/net/data/verify_certificate_chain_unittest/generate-key-rollover.py
index e06b452..01deacb 100755
--- a/net/data/verify_certificate_chain_unittest/generate-key-rollover.py
+++ b/net/data/verify_certificate_chain_unittest/generate-key-rollover.py
@@ -49,18 +49,18 @@
newroot = common.create_self_signed_root_certificate('Root')
newroot.set_validity_range(JANUARY_2_2015_UTC, common.JANUARY_1_2016_UTC)
# Root with the new key signed by the old key.
-newrootrollover = common.create_intermediary_certificate('Root', oldroot)
+newrootrollover = common.create_intermediate_certificate('Root', oldroot)
newrootrollover.set_key_path(newroot.get_key_path())
newrootrollover.set_validity_range(JANUARY_2_2015_UTC,
common.JANUARY_1_2016_UTC)
# Intermediate signed by oldroot.
-oldintermediate = common.create_intermediary_certificate('Intermediate',
+oldintermediate = common.create_intermediate_certificate('Intermediate',
oldroot)
oldintermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.JANUARY_1_2016_UTC)
# Intermediate signed by newroot. Same key as oldintermediate.
-newintermediate = common.create_intermediary_certificate('Intermediate',
+newintermediate = common.create_intermediate_certificate('Intermediate',
newroot)
newintermediate.set_key_path(oldintermediate.get_key_path())
newintermediate.set_validity_range(JANUARY_2_2015_UTC,
diff --git a/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py b/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py
index 355f61e..1a64171 100755
--- a/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py
+++ b/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The trusted root
+"""Certificate chain with 1 intermediate and a trusted root. The trusted root
is NOT self signed, however its issuer is not included in the chain or root
store. Verification is expected to succeed since the root is trusted."""
@@ -12,15 +12,15 @@
shadow_root = common.create_self_signed_root_certificate('ShadowRoot')
# Non-self-signed root (part of trust store).
-root = common.create_intermediary_certificate('Root', shadow_root)
+root = common.create_intermediate_certificate('Root', shadow_root)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-and-intermediary.py b/net/data/verify_certificate_chain_unittest/generate-target-and-intermediate.py
similarity index 73%
rename from net/data/verify_certificate_chain_unittest/generate-target-and-intermediary.py
rename to net/data/verify_certificate_chain_unittest/generate-target-and-intermediate.py
index 94525cc..f198774 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-and-intermediary.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-and-intermediate.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. Verification is
+"""Certificate chain with 1 intermediate and a trusted root. Verification is
expected to succeed."""
import common
@@ -11,13 +11,13 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py b/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py
index fa3cafb..bd19047 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, a trusted root, and a target
+"""Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is not a CA, and yet has the keyCertSign bit set. Verification
is expected to fail, since keyCertSign should only be asserted when CA is
true."""
@@ -13,16 +13,16 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate (end entity but has keyCertSign bit set).
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.get_extensions().set_property('keyUsage',
'critical,digitalSignature,keyEncipherment,keyCertSign')
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py b/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py
index 5d29739..558e98c 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, a trusted root, and a target
+"""Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is not a CA, and yet has a pathlen set. Verification is
expected to fail, since pathlen should only be set for CAs."""
@@ -12,16 +12,16 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate (end entity, but has pathlen set).
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.get_extensions().set_property('basicConstraints',
'critical,CA:false,pathlen:1')
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py b/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py
index 83573ad..65423d5d 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, a trusted root, and a target
+"""Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is also a CA. Verification is expected to succeed, as the test
code accepts any target certificate."""
@@ -12,13 +12,13 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate (is also a CA)
-target = common.create_intermediary_certificate('Target', intermediary)
+target = common.create_intermediate_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py b/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
index 75144a0..e8550d6 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The target
+"""Certificate chain with 1 intermediate and a trusted root. The target
certificate is signed using a weak RSA key (512-bit modulus), and so
verification is expected to fail."""
@@ -12,14 +12,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with a very weak key size (512-bit RSA).
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.generate_rsa_key(512)
+# Intermediate with a very weak key size (512-bit RSA).
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.generate_rsa_key(512)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py b/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py
index 562ebb1..d052c54 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with a trusted root using RSA, and intermediary using EC,
+"""Certificate chain with a trusted root using RSA, and intermediate using EC,
and a target certificate using RSA. Verification is expected to succeed."""
import common
@@ -11,14 +11,14 @@
# Self-signed root certificate (part of trust store), using RSA.
root = common.create_self_signed_root_certificate('Root')
-# Intermediary using an EC key for the P-384 curve.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.generate_ec_key('secp384r1')
+# Intermediate using an EC key for the P-384 curve.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.generate_ec_key('secp384r1')
# Target certificate contains an RSA key (but is signed using ECDSA).
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py b/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py
index 743ad25..28a2d83 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with an intermediary that uses MD5 to sign the target
+"""Certificate chain with an intermediate that uses MD5 to sign the target
certificate. This is expected to fail because MD5 is too weak."""
import common
@@ -11,14 +11,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_signature_hash('md5')
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py b/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py
index 7254299..4c0e19c 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The target
+"""Certificate chain with 1 intermediate and a trusted root. The target
certificate has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as
critical. Verifying this certificate chain is expected to fail because there is
an unrecognized critical extension."""
@@ -13,15 +13,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate (has unknown critical extension).
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.get_extensions().add_property('1.2.3.4',
'critical,DER:01:02:03:04')
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py b/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py
index 162f716..d941b18 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py
@@ -12,19 +12,19 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate to include in the certificate chain.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate to include in the certificate chain.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Actual intermediate that was used to sign the target certificate. It has the
# same subject as expected, but a different RSA key from the certificate
# included in the actual chain.
-wrong_intermediary = common.create_intermediary_certificate('Intermediary',
+wrong_intermediate = common.create_intermediate_certificate('Intermediate',
root)
-# Target certificate, signed using |wrong_intermediary| NOT |intermediary|.
-target = common.create_end_entity_certificate('Target', wrong_intermediary)
+# Target certificate, signed using |wrong_intermediate| NOT |intermediate|.
+target = common.create_end_entity_certificate('Target', wrong_intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-unknown-root.py b/net/data/verify_certificate_chain_unittest/generate-unknown-root.py
index 4f0b5f5..523b590 100755
--- a/net/data/verify_certificate_chain_unittest/generate-unknown-root.py
+++ b/net/data/verify_certificate_chain_unittest/generate-unknown-root.py
@@ -3,8 +3,8 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, but the root is not in trust store.
-Verification is expected to fail because the final intermediary (Intermediary)
+"""Certificate chain with 1 intermediate, but the root is not in trust store.
+Verification is expected to fail because the final intermediate (Intermediate)
does not chain to a known root."""
import common
@@ -12,13 +12,13 @@
# Self-signed root certificate, which is NOT added to the trust store.
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [] # Note that this lacks |root|
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py b/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py
index 0298956..02599ff 100755
--- a/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py
+++ b/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py
@@ -3,30 +3,30 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 2 intermediaries. The first intermediary has a basic
+"""Certificate chain with 2 intermediates. The first intermediate has a basic
constraints path length of 0, so it is a violation for it to have a subordinate
-intermediary."""
+intermediate."""
import common
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with pathlen 0
-intermediary1 = common.create_intermediary_certificate('Intermediary1', root)
-intermediary1.get_extensions().set_property('basicConstraints',
+# Intermediate with pathlen 0
+intermediate1 = common.create_intermediate_certificate('Intermediate1', root)
+intermediate1.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:0')
-# Another intermediary (with the same pathlen restriction)
-intermediary2 = common.create_intermediary_certificate('Intermediary2',
- intermediary1)
-intermediary2.get_extensions().set_property('basicConstraints',
+# Another intermediate (with the same pathlen restriction)
+intermediate2 = common.create_intermediate_certificate('Intermediate2',
+ intermediate1)
+intermediate2.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:0')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary2)
+target = common.create_end_entity_certificate('Target', intermediate2)
-chain = [target, intermediary2, intermediary1]
+chain = [target, intermediate2, intermediate1]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-root.py b/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-root.py
index bda9c25..149c000 100755
--- a/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-root.py
+++ b/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-root.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 2 intermediaries and one end entity certificate. The
+"""Certificate chain with 2 intermediates and one end entity certificate. The
root certificate has a pathlen:1 restriction so this is an invalid chain."""
import common
@@ -13,17 +13,17 @@
root.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:1')
-# Intermediary 1 (no pathlen restriction).
-intermediary1 = common.create_intermediary_certificate('Intermediary1', root)
+# Intermediate 1 (no pathlen restriction).
+intermediate1 = common.create_intermediate_certificate('Intermediate1', root)
-# Intermediary 2 (no pathlen restriction).
-intermediary2 = common.create_intermediary_certificate('Intermediary2',
- intermediary1)
+# Intermediate 2 (no pathlen restriction).
+intermediate2 = common.create_intermediate_certificate('Intermediate2',
+ intermediate1)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary2)
+target = common.create_end_entity_certificate('Target', intermediate2)
-chain = [target, intermediary2, intermediary1]
+chain = [target, intermediate2, intermediate1]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem b/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem
deleted file mode 100644
index 04bbffe..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem
+++ /dev/null
@@ -1,281 +0,0 @@
-[Created by: generate-intermediary-basic-constraints-ca-false.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has a basic constraints extension that indicates it is NOT a CA. Verification
-is expected to fail.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:d7:2c:b6:2c:cc:74:93:54:76:43:6a:c8:78:5d:
- c4:cc:30:ab:d1:16:46:84:b6:d8:28:13:74:4f:7f:
- 6c:e1:ef:0c:12:07:c8:f5:2b:bd:98:3e:5f:ec:3c:
- 6b:96:6b:7d:42:d1:a0:1c:e3:9a:c5:04:10:9f:f6:
- d8:d2:e9:0b:98:3b:40:f1:3d:9f:39:fd:70:7b:d3:
- f6:af:83:14:48:89:1c:87:aa:f1:21:fc:ab:f4:1e:
- b3:66:3b:1e:ae:f9:9b:5d:9b:6d:6c:19:14:e2:38:
- 09:36:99:be:b6:c0:27:50:91:33:c5:8d:11:4b:83:
- 95:db:21:d6:3b:a8:7c:d9:a7:6b:04:cc:d4:81:28:
- 8e:bb:57:76:2a:d9:d9:fa:31:07:62:dc:34:af:2d:
- ec:7d:2f:8c:73:b9:57:44:cc:86:3b:49:d5:45:df:
- bd:11:97:4e:b5:d2:07:17:71:39:0c:54:5b:c7:76:
- db:69:64:e6:0d:3d:a2:c8:bc:45:35:06:f4:6f:fb:
- ff:e5:23:53:9d:36:92:b5:15:2e:c7:62:62:22:69:
- 66:62:2c:51:ee:1c:b7:2e:10:82:14:e2:ff:3f:f9:
- 4e:a5:ad:70:fe:c8:26:d3:99:fb:ee:ea:67:f9:8a:
- 06:b8:a1:60:99:4f:ef:95:0e:96:3a:c2:35:11:e9:
- 4e:7d
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 34:A4:95:47:59:7D:2A:43:E3:DD:5F:55:F7:D0:F4:C0:25:E5:AD:8E
- X509v3 Authority Key Identifier:
- keyid:9F:6B:93:D1:46:61:07:80:55:0A:40:C8:FE:A8:D8:DD:8E:B1:EF:DD
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 75:a4:8c:02:02:da:03:71:90:d9:46:cc:6a:21:36:ef:86:21:
- 68:60:4a:a9:ce:af:f6:49:cf:f4:6b:b0:96:42:60:d5:02:91:
- 62:93:01:8b:cb:0b:eb:a5:b0:b8:49:6c:8e:54:84:c2:53:d4:
- 46:09:d6:db:29:96:a0:45:e5:09:5b:c1:b7:ba:be:8a:43:62:
- f9:8b:e4:47:d5:a9:d9:03:0e:83:86:78:19:81:c8:3b:20:86:
- 1d:72:98:cd:06:73:fa:b1:e4:df:fd:08:9c:52:bb:f6:48:61:
- bc:6f:3f:1e:1c:ef:f5:4e:94:5b:ee:e7:96:44:ff:1a:8d:6c:
- a6:9c:d1:77:17:1f:c7:e1:53:d5:5e:a5:d8:55:c8:36:48:f6:
- 8c:25:c3:1b:27:09:58:8e:30:6a:ad:ad:5e:0a:2e:5f:6f:5a:
- cb:1a:fb:fe:c9:03:1f:bf:37:9c:b5:c3:93:b7:4c:a2:d5:e2:
- ac:af:94:91:85:22:8c:c7:8b:b0:39:4a:67:f0:82:dc:db:fe:
- 39:3c:1d:50:4c:70:44:7e:aa:73:e4:fd:51:48:12:ea:9c:18:
- b1:27:6b:96:e7:aa:cf:f6:58:bf:05:d0:a4:51:71:27:b6:2c:
- 3d:a7:50:4d:93:1a:8d:04:84:7e:d3:9f:0d:b5:a5:6b:d3:db:
- d4:3a:03:fb
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLLYs
-zHSTVHZDash4XcTMMKvRFkaEttgoE3RPf2zh7wwSB8j1K72YPl/sPGuWa31C0aAc
-45rFBBCf9tjS6QuYO0DxPZ85/XB70/avgxRIiRyHqvEh/Kv0HrNmOx6u+Ztdm21s
-GRTiOAk2mb62wCdQkTPFjRFLg5XbIdY7qHzZp2sEzNSBKI67V3Yq2dn6MQdi3DSv
-Lex9L4xzuVdEzIY7SdVF370Rl0610gcXcTkMVFvHdttpZOYNPaLIvEU1BvRv+//l
-I1OdNpK1FS7HYmIiaWZiLFHuHLcuEIIU4v8/+U6lrXD+yCbTmfvu6mf5iga4oWCZ
-T++VDpY6wjUR6U59AgMBAAGjgekwgeYwHQYDVR0OBBYEFDSklUdZfSpD491fVffQ
-9MAl5a2OMB8GA1UdIwQYMBaAFJ9rk9FGYQeAVQpAyP6o2N2Ose/dMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdaSMAgLaA3GQ2UbMaiE2
-74YhaGBKqc6v9knP9GuwlkJg1QKRYpMBi8sL66WwuElsjlSEwlPURgnW2ymWoEXl
-CVvBt7q+ikNi+YvkR9Wp2QMOg4Z4GYHIOyCGHXKYzQZz+rHk3/0InFK79khhvG8/
-Hhzv9U6UW+7nlkT/Go1sppzRdxcfx+FT1V6l2FXINkj2jCXDGycJWI4waq2tXgou
-X29ayxr7/skDH783nLXDk7dMotXirK+UkYUijMeLsDlKZ/CC3Nv+OTwdUExwRH6q
-c+T9UUgS6pwYsSdrlueqz/ZYvwXQpFFxJ7YsPadQTZMajQSEftOfDbWla9Pb1DoD
-+w==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b6:2b:92:72:9f:d2:59:95:3f:16:fd:eb:d3:37:
- 3e:4d:fa:bf:05:3a:e3:8b:b5:32:90:42:9c:d7:69:
- c5:30:e6:0f:d3:6d:fb:93:c0:0e:30:f2:9f:42:8d:
- 83:17:62:e0:ac:41:c4:2b:29:4f:e6:c7:64:27:a8:
- ca:c0:46:16:50:ba:e1:de:3a:ed:4b:1e:49:84:cf:
- 16:2c:5d:84:0c:8e:0d:42:c0:d2:01:e3:94:2a:79:
- d7:da:d7:a6:51:75:fe:a3:e5:1a:95:f5:38:a3:5b:
- f8:5c:8a:a9:90:f1:f9:83:4a:13:25:61:bc:33:fb:
- 19:69:71:c1:c1:a6:45:4a:bd:7f:3f:a6:92:43:fe:
- db:88:a2:15:a9:41:cf:9d:62:9b:b4:fc:71:8f:4f:
- be:5d:4a:48:8a:7a:de:57:11:82:44:49:a6:5c:25:
- a0:8c:0b:f0:ec:74:51:76:ae:f4:5c:14:c6:d0:90:
- b9:93:64:93:f8:04:82:99:28:98:fa:c8:a2:e8:98:
- 20:2d:7d:cd:d9:99:ef:74:eb:7a:63:06:4c:7a:86:
- 1e:e8:4b:8f:d0:8d:ab:d9:3a:8e:bc:ec:f2:2a:0d:
- e1:5f:89:54:0f:ef:b8:28:ff:d5:f6:ef:a7:14:94:
- 52:72:48:50:29:85:5b:d9:fd:1e:14:59:c8:69:df:
- 89:47
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 9F:6B:93:D1:46:61:07:80:55:0A:40:C8:FE:A8:D8:DD:8E:B1:EF:DD
- X509v3 Authority Key Identifier:
- keyid:D8:01:99:4C:28:49:4B:7F:FB:30:0A:92:A8:90:6F:8B:9C:45:05:7F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:FALSE
- Signature Algorithm: sha256WithRSAEncryption
- 7f:36:da:7c:f5:4a:3b:37:53:82:b4:98:99:0b:d7:c0:73:b9:
- 05:89:75:fa:97:e4:cc:9d:73:61:18:ad:f2:bd:57:3f:6b:d0:
- 45:a2:45:2a:27:68:13:f1:a3:80:15:85:13:52:4b:c6:8f:12:
- 78:ba:21:51:fb:9d:1c:88:5d:5c:f5:0b:e5:66:ef:b4:72:67:
- 16:cb:3d:79:83:56:9b:90:50:91:fe:f2:0c:f9:36:88:dd:14:
- ef:b7:d2:1e:a3:54:d3:67:9f:3e:bc:7b:8c:45:be:12:c0:a9:
- 21:cf:b7:ea:e9:9e:ec:e8:79:02:a0:48:3e:a8:b9:fc:62:9d:
- a3:ab:74:b6:22:97:ab:78:7f:60:8e:67:96:02:ff:13:6d:66:
- b9:df:a4:55:c7:e4:82:a9:f7:0d:30:d4:e9:6b:a9:25:68:f8:
- 3c:2f:73:38:cf:07:af:b5:ef:82:5a:5f:34:0c:d9:0a:56:ad:
- 30:c4:8a:2a:90:5c:92:e6:01:f5:49:4e:58:a0:13:0c:81:46:
- ef:01:bc:8f:48:15:49:da:5d:20:28:a7:2a:b9:2b:85:9c:f8:
- c4:5e:76:6f:ff:67:c0:2a:ee:96:91:2e:8d:b3:be:6b:66:51:
- 0e:d5:7f:c9:21:c0:af:79:cc:07:0a:cc:dc:85:00:85:cf:74:
- 9e:6f:2f:31
------BEGIN CERTIFICATE-----
-MIIDajCCAlKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiuScp/S
-WZU/Fv3r0zc+Tfq/BTrji7UykEKc12nFMOYP0237k8AOMPKfQo2DF2LgrEHEKylP
-5sdkJ6jKwEYWULrh3jrtSx5JhM8WLF2EDI4NQsDSAeOUKnnX2temUXX+o+UalfU4
-o1v4XIqpkPH5g0oTJWG8M/sZaXHBwaZFSr1/P6aSQ/7biKIVqUHPnWKbtPxxj0++
-XUpIinreVxGCREmmXCWgjAvw7HRRdq70XBTG0JC5k2ST+ASCmSiY+sii6JggLX3N
-2ZnvdOt6YwZMeoYe6EuP0I2r2TqOvOzyKg3hX4lUD++4KP/V9u+nFJRSckhQKYVb
-2f0eFFnIad+JRwIDAQABo4HIMIHFMB0GA1UdDgQWBBSfa5PRRmEHgFUKQMj+qNjd
-jrHv3TAfBgNVHSMEGDAWgBTYAZlMKElLf/swCpKokG+LnEUFfzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAH82
-2nz1Sjs3U4K0mJkL18BzuQWJdfqX5Mydc2EYrfK9Vz9r0EWiRSonaBPxo4AVhRNS
-S8aPEni6IVH7nRyIXVz1C+Vm77RyZxbLPXmDVpuQUJH+8gz5NojdFO+30h6jVNNn
-nz68e4xFvhLAqSHPt+rpnuzoeQKgSD6oufxinaOrdLYil6t4f2COZ5YC/xNtZrnf
-pFXH5IKp9w0w1OlrqSVo+DwvczjPB6+174JaXzQM2QpWrTDEiiqQXJLmAfVJTlig
-EwyBRu8BvI9IFUnaXSAopyq5K4Wc+MRedm//Z8Aq7paRLo2zvmtmUQ7Vf8khwK95
-zAcKzNyFAIXPdJ5vLzE=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:a6:91:a5:68:ad:ba:89:8f:b6:5c:19:a1:3d:10:
- ad:55:97:10:17:06:9a:7d:59:e7:7c:56:3d:1d:5f:
- 17:c7:a2:e5:e7:80:52:a8:cd:ef:ca:82:4a:77:e4:
- ac:77:7c:35:f1:1b:b3:7a:9a:58:78:9e:1c:00:c9:
- 67:9d:4d:d0:f4:92:f1:0a:82:8a:f0:d4:57:04:04:
- cc:12:e4:86:95:93:12:a7:9b:ee:6f:d2:85:5d:63:
- 3c:5c:94:91:db:d0:3c:f1:a8:ca:05:19:22:98:e0:
- ef:29:22:35:40:3c:7c:c4:74:5c:df:24:2b:e4:b8:
- bc:23:ba:db:aa:6b:ef:ba:bb:aa:c2:ab:ce:9f:07:
- 2e:36:da:21:67:4d:80:71:ba:4a:7b:62:16:08:51:
- 29:35:dd:c8:1d:8c:60:d8:8c:05:a2:ec:f0:5e:af:
- f4:f2:e8:95:03:c1:79:77:3e:ff:f4:31:ed:ab:cc:
- 1b:dd:7e:f6:2c:71:3a:1c:e3:ab:ab:a4:ab:79:12:
- 59:a5:f6:84:00:83:ff:8c:e5:3b:a0:4f:37:2a:b1:
- c4:a5:19:69:46:2c:87:bc:a5:0e:ee:31:13:2e:0e:
- ed:d2:e2:19:be:d0:14:b3:68:b5:34:c6:3f:6e:95:
- da:eb:2c:55:30:92:3d:f8:93:df:4e:ec:85:a7:b3:
- 06:71
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- D8:01:99:4C:28:49:4B:7F:FB:30:0A:92:A8:90:6F:8B:9C:45:05:7F
- X509v3 Authority Key Identifier:
- keyid:D8:01:99:4C:28:49:4B:7F:FB:30:0A:92:A8:90:6F:8B:9C:45:05:7F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 38:6a:c5:72:2a:2b:2b:2c:d4:6f:07:a5:14:46:10:e5:3b:68:
- 80:3c:d9:60:ef:12:ed:e6:1a:c0:76:4a:3d:9c:e1:86:71:b5:
- 15:de:eb:47:51:d6:85:3e:14:ef:18:e6:b0:3c:ac:6b:0b:48:
- 42:0f:76:3d:59:89:84:63:61:fe:6a:a0:47:0a:75:1a:64:92:
- e3:09:14:12:d9:af:36:ec:f4:c5:79:37:22:cd:88:b8:f8:3c:
- 55:0a:28:2e:21:26:45:cf:95:41:e4:6c:5a:ad:23:0a:cc:fd:
- 83:71:76:7d:63:e2:9f:6c:f2:07:ee:6e:e3:fd:dd:87:f0:23:
- 9c:04:5e:19:b2:67:38:00:91:ea:05:4c:3c:db:cd:19:d3:f6:
- 7c:fd:fa:1d:86:fc:49:fe:45:ac:99:28:b1:a6:e7:fb:90:a2:
- 98:59:a7:12:bc:26:ce:6d:b5:0f:62:19:40:a4:67:45:06:ec:
- 18:1e:c5:83:e4:a1:fb:e6:58:3c:6c:a3:12:29:46:22:0d:8a:
- 07:75:72:ab:6a:a9:c3:1c:0c:d3:a3:0b:fd:50:af:37:89:0b:
- f6:70:57:1c:fb:d6:e7:0f:e6:52:5e:f6:1f:02:1c:73:bb:2b:
- eb:21:1e:f0:aa:fe:b1:50:c0:12:fc:76:8c:d0:94:0a:ab:3b:
- a8:0a:6c:28
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKaRpWituomPtlwZoT0Q
-rVWXEBcGmn1Z53xWPR1fF8ei5eeAUqjN78qCSnfkrHd8NfEbs3qaWHieHADJZ51N
-0PSS8QqCivDUVwQEzBLkhpWTEqeb7m/ShV1jPFyUkdvQPPGoygUZIpjg7ykiNUA8
-fMR0XN8kK+S4vCO626pr77q7qsKrzp8HLjbaIWdNgHG6SntiFghRKTXdyB2MYNiM
-BaLs8F6v9PLolQPBeXc+//Qx7avMG91+9ixxOhzjq6ukq3kSWaX2hACD/4zlO6BP
-NyqxxKUZaUYsh7ylDu4xEy4O7dLiGb7QFLNotTTGP26V2ussVTCSPfiT307shaez
-BnECAwEAAaOByzCByDAdBgNVHQ4EFgQU2AGZTChJS3/7MAqSqJBvi5xFBX8wHwYD
-VR0jBBgwFoAU2AGZTChJS3/7MAqSqJBvi5xFBX8wNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA4asVyKisr
-LNRvB6UURhDlO2iAPNlg7xLt5hrAdko9nOGGcbUV3utHUdaFPhTvGOawPKxrC0hC
-D3Y9WYmEY2H+aqBHCnUaZJLjCRQS2a827PTFeTcizYi4+DxVCiguISZFz5VB5Gxa
-rSMKzP2DcXZ9Y+KfbPIH7m7j/d2H8COcBF4Zsmc4AJHqBUw8280Z0/Z8/fodhvxJ
-/kWsmSixpuf7kKKYWacSvCbObbUPYhlApGdFBuwYHsWD5KH75lg8bKMSKUYiDYoH
-dXKraqnDHAzTowv9UK83iQv2cFcc+9bnD+ZSXvYfAhxzuyvrIR7wqv6xUMAS/HaM
-0JQKqzuoCmwo
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem b/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem
deleted file mode 100644
index 3ff3682..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem
+++ /dev/null
@@ -1,282 +0,0 @@
-[Created by: generate-intermediary-basic-constraints-not-critical.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has a basic constraints extension but does not mark it as critical.
-Verification is expected to succeed, since although not critical, the
-basicConstraints indicates CA=true as expected.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:d2:25:d5:a0:7a:94:e6:21:0b:8b:e5:68:21:06:
- c4:a7:fe:fd:de:97:31:a6:80:a2:3d:be:f0:03:c2:
- de:d5:a1:a6:3f:6e:19:3b:fe:f4:66:8f:8f:c8:d3:
- e4:7f:73:fc:e7:1c:2f:b4:9f:5e:bf:25:71:2d:d0:
- 65:60:76:0d:a6:be:af:1a:1f:3c:00:bf:cd:8e:de:
- 04:6f:6c:8d:25:c5:7a:64:71:31:d7:4a:e9:bd:5f:
- fa:e6:b8:e8:55:a2:c7:2b:b4:7d:4e:e3:bc:23:c9:
- 0f:79:29:86:dd:4d:b3:dd:12:c5:1a:d3:fc:4a:31:
- 54:47:7b:62:20:f5:bb:7c:47:6d:7f:67:d5:69:4b:
- f8:99:4f:dd:13:56:a4:9d:0a:fc:d0:da:b5:bd:e0:
- 0c:c8:50:d6:e1:73:d8:59:37:95:99:70:31:3d:46:
- 44:d5:68:7b:45:4b:9e:4a:fd:25:33:05:7c:24:05:
- 0f:6c:00:4b:3e:0c:cf:56:e8:88:ef:67:bc:bd:66:
- b4:7c:bc:db:c6:4e:8b:44:0b:65:8f:c6:a9:57:d7:
- b0:8e:88:19:fc:d6:b7:02:b9:50:a0:e2:06:61:1d:
- d1:03:7a:ce:75:09:d2:64:d5:c6:61:3b:f1:28:5b:
- 4b:de:08:2f:b9:96:55:d9:4c:8c:48:d0:c6:2b:ee:
- 59:33
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- F9:45:14:0B:10:A3:AC:77:3B:19:DE:FB:66:FE:CF:E3:9A:F4:57:1A
- X509v3 Authority Key Identifier:
- keyid:73:DC:40:FE:F8:8F:F4:BD:DE:B0:63:30:AF:05:0B:6C:4E:99:54:7F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 41:3c:ca:d6:88:67:86:f8:dc:35:ab:37:d0:40:96:7b:4e:70:
- 2a:6b:cc:15:31:fd:06:87:ac:81:6d:89:ce:66:b2:26:73:bc:
- 71:3e:af:be:b2:ba:d5:bc:a5:b7:64:0c:7d:31:9b:0c:e1:0c:
- 73:14:0c:e0:fe:95:d3:ca:1d:d1:51:8a:fb:b1:e1:8d:68:58:
- 30:51:a6:2f:86:57:61:a6:20:7c:1f:0c:7f:14:c7:fe:fa:88:
- 14:7b:d9:41:5c:20:da:16:3c:ce:77:b8:ee:7c:33:d8:cf:2e:
- 6e:e3:43:01:00:0a:c0:1c:a0:eb:6b:36:a0:d6:bd:6e:91:a9:
- e1:8d:8d:b2:4e:12:d3:fa:56:84:be:eb:65:d8:9d:e2:c7:d4:
- 36:a2:7e:b8:b2:d4:5c:2f:c2:47:1e:ca:7a:fd:b4:30:3a:59:
- 19:8d:ca:7e:44:65:86:97:2d:f4:65:3b:f0:12:4b:d0:74:48:
- f9:dd:d3:d3:89:97:83:c6:4c:bb:da:e7:ce:e7:5e:93:f3:51:
- 4c:22:95:31:59:a9:3d:82:ec:8d:4c:8e:44:42:5f:13:d0:56:
- c2:35:e1:07:11:6d:23:92:3c:de:b1:3e:1c:4e:0e:e3:c6:06:
- 09:e1:dc:b8:4c:89:82:35:3c:51:60:1f:06:65:11:39:8b:b4:
- 20:04:f0:90
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJdWg
-epTmIQuL5WghBsSn/v3elzGmgKI9vvADwt7VoaY/bhk7/vRmj4/I0+R/c/znHC+0
-n16/JXEt0GVgdg2mvq8aHzwAv82O3gRvbI0lxXpkcTHXSum9X/rmuOhVoscrtH1O
-47wjyQ95KYbdTbPdEsUa0/xKMVRHe2Ig9bt8R21/Z9VpS/iZT90TVqSdCvzQ2rW9
-4AzIUNbhc9hZN5WZcDE9RkTVaHtFS55K/SUzBXwkBQ9sAEs+DM9W6IjvZ7y9ZrR8
-vNvGTotEC2WPxqlX17COiBn81rcCuVCg4gZhHdEDes51CdJk1cZhO/EoW0veCC+5
-llXZTIxI0MYr7lkzAgMBAAGjgekwgeYwHQYDVR0OBBYEFPlFFAsQo6x3Oxne+2b+
-z+Oa9FcaMB8GA1UdIwQYMBaAFHPcQP74j/S93rBjMK8FC2xOmVR/MD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAQTzK1ohnhvjcNas30ECW
-e05wKmvMFTH9BoesgW2JzmayJnO8cT6vvrK61bylt2QMfTGbDOEMcxQM4P6V08od
-0VGK+7HhjWhYMFGmL4ZXYaYgfB8MfxTH/vqIFHvZQVwg2hY8zne47nwz2M8ubuND
-AQAKwByg62s2oNa9bpGp4Y2Nsk4S0/pWhL7rZdid4sfUNqJ+uLLUXC/CRx7Kev20
-MDpZGY3KfkRlhpct9GU78BJL0HRI+d3T04mXg8ZMu9rnzudek/NRTCKVMVmpPYLs
-jUyOREJfE9BWwjXhBxFtI5I83rE+HE4O48YGCeHcuEyJgjU8UWAfBmUROYu0IATw
-kA==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:d5:4a:96:98:34:e1:a8:92:88:9a:0c:d0:b7:e3:
- a0:dc:71:4b:32:cd:59:a1:b9:9c:d5:e5:30:1b:ad:
- 7e:41:7f:e7:39:81:25:d1:e7:66:c2:5f:79:80:ea:
- ff:6b:ef:b9:95:9e:8b:a0:0c:6a:b6:c8:4b:50:2c:
- 7d:f1:ad:46:ed:9a:7c:7d:6a:65:70:de:c2:45:7e:
- 1b:28:af:dc:eb:3d:bb:4c:98:a9:8c:b3:a3:35:a1:
- 2b:cd:bb:8e:2a:2b:74:6d:0c:91:72:36:c2:2f:0e:
- 46:2a:77:34:ab:98:f8:28:c9:02:42:78:2f:b2:e0:
- 9a:0d:ae:03:94:c0:31:79:1e:72:ce:8b:7c:21:c8:
- d5:1c:9b:94:04:29:ce:1c:5f:22:e3:f0:20:62:2b:
- 7d:7d:c2:fa:29:5c:8b:2a:dd:0f:08:31:49:58:7d:
- 85:76:21:b4:46:0e:d8:26:dc:26:f9:0a:9b:58:a2:
- b8:29:b4:df:c0:4e:10:56:28:96:02:54:7c:e9:a3:
- 3f:84:12:6a:89:ed:f0:0d:a0:03:54:0c:b2:33:6d:
- 1b:a7:84:f2:a0:b0:57:5e:4b:c1:2f:6d:e9:22:52:
- 50:b1:3b:a7:7d:ee:a7:dc:6e:6a:bd:b6:a6:ea:66:
- f8:1f:30:60:18:d8:5b:a6:dd:9d:9b:d3:4e:2b:0a:
- c4:0b
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 73:DC:40:FE:F8:8F:F4:BD:DE:B0:63:30:AF:05:0B:6C:4E:99:54:7F
- X509v3 Authority Key Identifier:
- keyid:6C:05:B0:A0:A8:03:A4:A1:90:D1:A5:74:D2:13:D9:2E:57:83:36:73
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints:
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 81:08:b8:48:94:05:02:aa:61:ea:32:48:55:02:31:f6:e0:5d:
- 05:6f:32:9b:6a:a0:3b:6f:0e:1d:2a:01:1a:14:20:a2:1e:23:
- b4:70:61:86:55:b5:4c:5b:61:3f:dd:1e:38:a4:98:3f:bd:61:
- e4:1e:56:54:ed:0e:51:65:6c:73:af:99:86:fc:a7:50:48:87:
- 95:6f:5a:93:0d:c9:7a:ff:fb:39:d1:f4:40:2c:fe:1f:28:aa:
- 85:cf:12:bd:7b:df:2b:12:56:4a:91:4e:e4:80:00:52:4c:bb:
- b2:e6:05:27:47:e2:3f:bb:a4:d7:cc:92:c2:27:02:10:50:10:
- 0c:f8:ee:4c:93:90:89:8d:db:8a:f9:05:f1:ec:d7:cf:67:20:
- a4:da:90:e0:38:34:fd:79:9b:6b:04:a8:bd:6f:e8:82:4a:d9:
- 37:49:b3:10:50:e6:c5:56:d9:ac:9b:e8:97:52:41:a1:66:be:
- cb:64:1d:12:0d:86:8b:34:42:26:9a:ad:c3:8a:14:ff:35:0d:
- 82:8f:96:e0:af:b7:e7:20:30:3e:b3:fe:57:4a:80:5e:53:8b:
- ec:15:ca:a8:db:b7:c6:87:b7:ab:81:8b:42:23:4a:74:9c:9e:
- 59:b8:3c:8d:0e:d2:f3:9d:79:45:9a:0e:fd:8c:6b:9e:b5:c8:
- e7:03:64:79
------BEGIN CERTIFICATE-----
-MIIDajCCAlKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UqWmDTh
-qJKImgzQt+Og3HFLMs1Zobmc1eUwG61+QX/nOYEl0edmwl95gOr/a++5lZ6LoAxq
-tshLUCx98a1G7Zp8fWplcN7CRX4bKK/c6z27TJipjLOjNaErzbuOKit0bQyRcjbC
-Lw5GKnc0q5j4KMkCQngvsuCaDa4DlMAxeR5yzot8IcjVHJuUBCnOHF8i4/AgYit9
-fcL6KVyLKt0PCDFJWH2FdiG0Rg7YJtwm+QqbWKK4KbTfwE4QViiWAlR86aM/hBJq
-ie3wDaADVAyyM20bp4TyoLBXXkvBL23pIlJQsTunfe6n3G5qvbam6mb4HzBgGNhb
-pt2dm9NOKwrECwIDAQABo4HIMIHFMB0GA1UdDgQWBBRz3ED++I/0vd6wYzCvBQts
-TplUfzAfBgNVHSMEGDAWgBRsBbCgqAOkoZDRpXTSE9kuV4M2czA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAIEI
-uEiUBQKqYeoySFUCMfbgXQVvMptqoDtvDh0qARoUIKIeI7RwYYZVtUxbYT/dHjik
-mD+9YeQeVlTtDlFlbHOvmYb8p1BIh5VvWpMNyXr/+znR9EAs/h8oqoXPEr173ysS
-VkqRTuSAAFJMu7LmBSdH4j+7pNfMksInAhBQEAz47kyTkImN24r5BfHs189nIKTa
-kOA4NP15m2sEqL1v6IJK2TdJsxBQ5sVW2ayb6JdSQaFmvstkHRINhos0QiaarcOK
-FP81DYKPluCvt+cgMD6z/ldKgF5Ti+wVyqjbt8aHt6uBi0IjSnScnlm4PI0O0vOd
-eUWaDv2Ma561yOcDZHk=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b6:f1:d2:f8:c9:10:d5:cf:0c:55:ce:8c:38:a2:
- 8f:f5:f1:cf:20:85:56:92:df:42:8c:5c:1a:db:8e:
- 1d:2e:b4:b3:95:72:e4:67:76:7c:c5:61:62:2b:cf:
- 97:f7:84:29:80:ff:df:e8:e7:da:f6:05:11:1d:40:
- 1e:73:76:ff:e4:eb:fa:45:59:20:d9:35:cb:c7:4f:
- 2b:49:2a:61:7c:45:a1:fe:da:8c:89:05:38:84:ab:
- cb:0b:c9:36:3b:e5:3e:31:5e:0b:a6:27:63:b1:c2:
- 34:88:3a:e5:e3:43:93:0b:46:69:03:dd:31:16:65:
- 18:6e:64:4c:84:e4:a1:37:6b:15:ef:f3:8f:57:e8:
- 57:f6:a8:86:62:9b:92:d0:67:d3:ed:0f:89:d3:4e:
- 09:aa:e8:74:ab:ce:4b:51:63:52:55:f1:24:9d:42:
- 70:cb:14:0f:e3:b4:7f:ba:6a:3c:87:27:eb:3b:82:
- 64:99:6a:f9:be:20:5a:9e:b9:8a:8b:ab:94:ed:f3:
- 33:eb:ea:42:5c:7e:20:df:f4:9d:82:8f:ac:8e:52:
- 99:06:db:d0:9f:01:38:e7:b9:0c:d2:b4:ca:7f:74:
- 03:e2:f7:0b:0e:a9:40:14:6c:7f:1b:15:00:77:0a:
- 98:76:ee:bd:62:24:f6:a7:8b:d4:7e:4b:8d:c9:eb:
- 04:a7
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 6C:05:B0:A0:A8:03:A4:A1:90:D1:A5:74:D2:13:D9:2E:57:83:36:73
- X509v3 Authority Key Identifier:
- keyid:6C:05:B0:A0:A8:03:A4:A1:90:D1:A5:74:D2:13:D9:2E:57:83:36:73
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 52:82:fe:3f:2b:71:41:fd:4c:9b:db:c5:b1:60:72:a7:cf:f4:
- 29:91:36:0f:ce:92:72:95:3e:34:ab:84:0c:af:23:e8:e1:28:
- 35:29:c9:c8:78:9a:12:d7:f1:22:1c:21:e1:b0:b4:df:af:36:
- c4:ca:71:2a:6e:6f:4a:d5:65:58:31:7a:c2:d1:30:66:e0:0a:
- 61:54:e0:61:97:7b:41:72:58:d9:02:da:22:8b:21:e6:d5:31:
- 4c:d2:3c:11:d8:0d:12:f0:dc:eb:e0:1d:16:3a:74:de:9c:b4:
- b2:bb:69:ed:e1:53:14:9e:1c:06:3f:ff:e7:2f:8a:d1:f6:37:
- 89:76:b2:61:60:5f:48:ce:a3:8f:e0:b5:6f:92:18:21:e4:a8:
- 1f:12:70:86:54:2a:da:78:3d:5d:3c:13:b8:b4:7f:a5:81:f0:
- 55:cf:ea:56:b4:0a:8a:ca:2b:ca:be:08:9e:a6:4c:12:99:5f:
- 23:93:08:58:70:8f:c8:fb:88:11:fe:d6:16:c7:a3:3b:1f:6b:
- 78:b0:05:29:9f:7d:4c:01:ba:ed:8a:5f:a8:38:e9:a4:c2:44:
- ce:e8:37:1d:d8:1f:16:e4:ef:84:bb:1f:4b:3a:b0:9a:00:57:
- aa:ba:52:1c:f4:da:f7:69:5d:ef:8d:35:ef:5c:03:fa:8d:87:
- fc:92:60:28
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbx0vjJENXPDFXOjDii
-j/XxzyCFVpLfQoxcGtuOHS60s5Vy5Gd2fMVhYivPl/eEKYD/3+jn2vYFER1AHnN2
-/+Tr+kVZINk1y8dPK0kqYXxFof7ajIkFOISrywvJNjvlPjFeC6YnY7HCNIg65eND
-kwtGaQPdMRZlGG5kTITkoTdrFe/zj1foV/aohmKbktBn0+0PidNOCarodKvOS1Fj
-UlXxJJ1CcMsUD+O0f7pqPIcn6zuCZJlq+b4gWp65iourlO3zM+vqQlx+IN/0nYKP
-rI5SmQbb0J8BOOe5DNK0yn90A+L3Cw6pQBRsfxsVAHcKmHbuvWIk9qeL1H5Ljcnr
-BKcCAwEAAaOByzCByDAdBgNVHQ4EFgQUbAWwoKgDpKGQ0aV00hPZLleDNnMwHwYD
-VR0jBBgwFoAUbAWwoKgDpKGQ0aV00hPZLleDNnMwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBSgv4/K3FB
-/Uyb28WxYHKnz/QpkTYPzpJylT40q4QMryPo4Sg1KcnIeJoS1/EiHCHhsLTfrzbE
-ynEqbm9K1WVYMXrC0TBm4AphVOBhl3tBcljZAtoiiyHm1TFM0jwR2A0S8Nzr4B0W
-OnTenLSyu2nt4VMUnhwGP//nL4rR9jeJdrJhYF9IzqOP4LVvkhgh5KgfEnCGVCra
-eD1dPBO4tH+lgfBVz+pWtAqKyivKvgiepkwSmV8jkwhYcI/I+4gR/tYWx6M7H2t4
-sAUpn31MAbrtil+oOOmkwkTO6Dcd2B8W5O+Eux9LOrCaAFequlIc9Nr3aV3vjTXv
-XAP6jYf8kmAo
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-U1VDQ0VTUw==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem b/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem
deleted file mode 100644
index 016f94e..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem
+++ /dev/null
@@ -1,278 +0,0 @@
-[Created by: generate-intermediary-lacks-basic-constraints.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-lacks the basic constraints extension, and hence is expected to fail validation
-(RFC 5280 requires v3 signing certificates have a BasicConstaints).
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:f3:d6:19:96:48:0c:01:e2:21:3d:98:21:52:df:
- 5a:79:95:01:e5:c2:ab:77:e4:7b:10:17:64:75:a4:
- ca:b6:69:cc:a9:4a:1d:b6:7f:a0:16:89:32:21:c2:
- 2a:c2:58:28:d2:f3:ef:a5:2d:81:92:47:17:d5:61:
- 65:ab:43:22:ce:59:5b:20:31:be:6e:84:23:19:d5:
- 7e:a8:70:50:6c:de:06:b8:58:09:97:fd:02:98:31:
- 2d:3b:ab:1b:4a:82:6c:28:ab:c5:a3:6b:ea:40:2b:
- 48:02:73:e4:ce:ea:f6:3b:6a:80:1f:5b:59:30:86:
- 1b:5e:64:61:b5:94:d2:f0:c8:bb:88:b1:90:05:1a:
- e8:e6:97:dc:7d:e8:53:c8:9f:88:09:69:82:1f:1e:
- e2:d1:70:f3:85:06:63:18:0a:d2:f1:71:a3:25:a3:
- 42:76:3a:5e:02:78:e6:7a:c6:a4:82:dd:79:35:5a:
- da:8e:37:92:82:bf:01:13:1b:6e:52:97:97:32:f1:
- b2:4e:95:bc:55:89:61:61:73:b4:64:30:b1:89:87:
- 51:17:29:f3:67:de:5b:99:ee:47:71:07:8c:d5:17:
- 55:e0:70:bc:b6:06:6e:eb:7a:c6:69:69:97:e1:3d:
- 1d:be:93:da:a0:fa:cb:2f:f0:ed:5c:da:18:0e:67:
- 89:8d
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- FD:C8:4E:91:CD:73:65:1D:13:F9:EC:F0:91:13:F1:D0:01:AD:1E:7C
- X509v3 Authority Key Identifier:
- keyid:60:E7:1E:8E:53:95:1F:8F:00:D1:F7:9F:36:01:26:15:86:53:0E:F2
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 88:1d:e7:e6:1e:4b:93:a9:79:59:0e:10:43:1e:f7:79:a4:c7:
- 68:55:81:b6:b4:6d:b0:5b:b6:46:13:8b:4e:1c:d4:79:17:b1:
- 71:46:b6:69:21:92:fa:bf:bd:76:cc:6c:b1:04:58:28:41:79:
- 34:4f:09:e7:17:5c:d0:ac:fc:c5:2e:1e:5c:31:ca:ed:55:ea:
- df:4a:43:9a:72:37:0a:8a:69:dd:4e:e9:a3:ef:dd:48:45:41:
- 7b:55:e3:d1:98:69:a5:ec:0b:43:32:24:da:33:cd:fd:35:74:
- 17:81:b1:61:37:b1:12:5d:51:86:e6:a2:08:e5:c7:99:aa:f7:
- 23:c4:5f:83:c0:59:9c:36:f9:a0:4c:03:f7:40:42:fb:90:39:
- 5a:45:e5:e2:94:a3:58:c2:a1:d8:c9:aa:3e:83:98:b0:32:a1:
- 85:9a:b1:34:c7:67:a4:03:67:6e:5b:d7:83:b8:92:0f:af:81:
- b5:00:50:c4:0f:f6:bb:cd:7d:0f:a8:cd:28:bb:48:b8:32:82:
- ef:d1:cf:96:74:e4:25:74:ce:5e:4c:75:d2:80:55:a3:6b:a6:
- 76:eb:aa:3e:2b:55:d3:c9:bd:2b:32:d3:1d:01:00:cb:8d:c4:
- c0:b9:29:0b:10:e5:ab:34:2f:30:63:29:df:a8:4f:b3:28:dd:
- 0b:8c:ea:14
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz1hmW
-SAwB4iE9mCFS31p5lQHlwqt35HsQF2R1pMq2acypSh22f6AWiTIhwirCWCjS8++l
-LYGSRxfVYWWrQyLOWVsgMb5uhCMZ1X6ocFBs3ga4WAmX/QKYMS07qxtKgmwoq8Wj
-a+pAK0gCc+TO6vY7aoAfW1kwhhteZGG1lNLwyLuIsZAFGujml9x96FPIn4gJaYIf
-HuLRcPOFBmMYCtLxcaMlo0J2Ol4CeOZ6xqSC3Xk1WtqON5KCvwETG25Sl5cy8bJO
-lbxViWFhc7RkMLGJh1EXKfNn3luZ7kdxB4zVF1XgcLy2Bm7resZpaZfhPR2+k9qg
-+ssv8O1c2hgOZ4mNAgMBAAGjgekwgeYwHQYDVR0OBBYEFP3ITpHNc2UdE/ns8JET
-8dABrR58MB8GA1UdIwQYMBaAFGDnHo5TlR+PANH3nzYBJhWGUw7yMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAiB3n5h5Lk6l5WQ4QQx73
-eaTHaFWBtrRtsFu2RhOLThzUeRexcUa2aSGS+r+9dsxssQRYKEF5NE8J5xdc0Kz8
-xS4eXDHK7VXq30pDmnI3Copp3U7po+/dSEVBe1Xj0ZhppewLQzIk2jPN/TV0F4Gx
-YTexEl1RhuaiCOXHmar3I8Rfg8BZnDb5oEwD90BC+5A5WkXl4pSjWMKh2MmqPoOY
-sDKhhZqxNMdnpANnblvXg7iSD6+BtQBQxA/2u819D6jNKLtIuDKC79HPlnTkJXTO
-Xkx10oBVo2umduuqPitV08m9KzLTHQEAy43EwLkpCxDlqzQvMGMp36hPsyjdC4zq
-FA==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:a0:8f:6c:dd:c5:0d:76:a9:8a:da:5d:9f:94:cf:
- 9a:18:cd:32:ee:e1:c3:88:29:0d:40:7d:8b:37:9c:
- 18:b9:ed:11:81:5b:cc:8c:7c:4a:f3:e2:b9:eb:f7:
- 3c:74:5a:5c:78:37:e3:7e:a8:b9:34:d7:da:d2:dc:
- 52:de:c6:bb:ca:cd:39:c3:ea:8e:84:1b:e5:ad:4b:
- 67:1b:70:bd:70:0e:5e:20:95:37:bf:ae:d1:f4:b0:
- 97:c0:8a:d3:e5:2a:04:d8:eb:1d:c8:f0:95:1b:25:
- d4:49:ae:d4:5f:d9:bc:ea:19:2d:38:d3:d2:c4:8b:
- 77:37:45:ae:f9:70:b2:43:93:85:06:58:e0:3e:38:
- 11:32:d2:bc:a5:d4:df:09:2d:e9:c4:16:a7:f9:5b:
- 25:8d:57:f7:bf:01:4e:c8:25:b4:f8:5d:33:1d:7a:
- 04:4b:9d:fe:71:d4:65:78:4b:8d:52:ef:04:80:d4:
- 45:18:1d:d8:53:8e:2a:e8:23:3f:14:a4:b4:f1:00:
- ff:30:be:06:c5:61:ac:13:e8:cb:4c:ef:77:f7:6b:
- 1d:da:5a:d4:7f:f8:5a:87:cb:4b:45:05:8c:06:73:
- 7b:65:d5:71:c9:35:c7:6e:07:ce:0b:e2:54:e1:43:
- f0:da:a9:51:b8:ad:fe:da:de:29:8c:5f:2d:40:06:
- 7f:39
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 60:E7:1E:8E:53:95:1F:8F:00:D1:F7:9F:36:01:26:15:86:53:0E:F2
- X509v3 Authority Key Identifier:
- keyid:73:D9:03:F6:54:EA:FC:42:DA:77:EC:19:89:AD:6D:D2:A3:3E:E9:FD
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- Signature Algorithm: sha256WithRSAEncryption
- 43:31:7d:91:39:1d:8a:88:6c:d2:2d:36:b1:92:53:1d:18:24:
- e9:42:27:c3:d3:f1:77:69:6f:67:7b:39:46:32:fb:36:a1:8d:
- 07:ee:16:6b:ac:09:e3:78:38:7a:a7:4b:fe:3f:81:eb:f2:85:
- aa:d6:3e:5a:68:57:e3:98:0d:ae:ee:45:84:d1:ed:6d:9c:78:
- fe:63:50:94:55:5e:b5:41:ef:c9:16:ed:4f:38:03:cb:73:3c:
- 79:c1:c4:0c:c1:95:43:11:49:c0:bc:7e:9a:6a:05:d2:43:c4:
- 66:72:66:57:69:46:ed:a7:10:af:bf:e9:bb:48:72:4b:00:a2:
- 46:78:38:68:dd:6b:a9:ac:62:70:4b:0b:f3:29:fa:a7:a2:42:
- 4b:d7:88:1f:97:1f:71:60:20:82:89:d6:3a:60:d5:4b:08:28:
- 6a:6a:97:2e:c9:93:d8:a7:32:b7:e1:68:be:07:7a:3c:76:3b:
- 2c:1b:10:17:4c:c9:ea:ee:48:c9:ad:ac:2e:61:dd:16:eb:62:
- 1e:33:1d:6c:8a:b4:56:0f:3d:04:35:f3:8f:d0:12:f9:66:8d:
- 39:95:e9:44:41:32:7e:f3:17:2e:58:c9:0c:23:b1:e3:db:f7:
- ed:da:bd:94:0e:00:27:34:3d:3d:c6:48:d8:e4:a3:66:57:d9:
- 5e:13:3e:59
------BEGIN CERTIFICATE-----
-MIIDXDCCAkSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI9s3cUN
-dqmK2l2flM+aGM0y7uHDiCkNQH2LN5wYue0RgVvMjHxK8+K56/c8dFpceDfjfqi5
-NNfa0txS3sa7ys05w+qOhBvlrUtnG3C9cA5eIJU3v67R9LCXwIrT5SoE2OsdyPCV
-GyXUSa7UX9m86hktONPSxIt3N0Wu+XCyQ5OFBljgPjgRMtK8pdTfCS3pxBan+Vsl
-jVf3vwFOyCW0+F0zHXoES53+cdRleEuNUu8EgNRFGB3YU44q6CM/FKS08QD/ML4G
-xWGsE+jLTO9392sd2lrUf/hah8tLRQWMBnN7ZdVxyTXHbgfOC+JU4UPw2qlRuK3+
-2t4pjF8tQAZ/OQIDAQABo4G6MIG3MB0GA1UdDgQWBBRg5x6OU5UfjwDR9582ASYV
-hlMO8jAfBgNVHSMEGDAWgBRz2QP2VOr8Qtp37BmJrW3Soz7p/TA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IBAQBDMX2ROR2KiGzSLTaxklMd
-GCTpQifD0/F3aW9nezlGMvs2oY0H7hZrrAnjeDh6p0v+P4Hr8oWq1j5aaFfjmA2u
-7kWE0e1tnHj+Y1CUVV61Qe/JFu1POAPLczx5wcQMwZVDEUnAvH6aagXSQ8RmcmZX
-aUbtpxCvv+m7SHJLAKJGeDho3WuprGJwSwvzKfqnokJL14gflx9xYCCCidY6YNVL
-CChqapcuyZPYpzK34Wi+B3o8djssGxAXTMnq7kjJrawuYd0W62IeMx1sirRWDz0E
-NfOP0BL5Zo05lelEQTJ+8xcuWMkMI7Hj2/ft2r2UDgAnND09xkjY5KNmV9leEz5Z
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:ea:c6:b8:66:62:c2:1a:2a:7d:83:ca:b2:7b:11:
- e4:92:4a:b8:3a:39:35:73:aa:89:55:7d:f4:ec:40:
- 4b:2c:c7:56:58:ac:9d:25:ef:c3:26:86:98:c4:74:
- a4:3a:94:36:d8:78:7c:1a:f4:f7:5c:a0:56:69:fc:
- 23:c0:a4:06:5f:5b:ce:ea:cb:32:9b:c3:21:89:fd:
- 9f:4e:38:a2:b9:f4:de:af:44:1e:53:02:09:41:44:
- 92:bc:a5:4f:70:86:23:85:48:2a:51:01:70:ab:b0:
- c4:bd:97:3c:2f:d0:2c:3e:9c:be:40:2e:ee:be:f8:
- ed:63:a2:1b:fd:e2:0f:d1:b2:3b:b3:ce:da:84:59:
- 56:bb:77:17:93:ef:c0:b7:b4:11:db:b9:6e:b0:4a:
- 28:55:fb:56:4e:ed:22:b6:e3:4d:5b:ad:6a:af:ff:
- df:33:f9:18:a6:91:0a:b8:89:d3:28:55:18:c7:71:
- 19:32:bc:88:a8:ee:5b:c8:34:84:e5:f5:fe:6e:5e:
- c0:3b:73:9b:a4:bc:4c:6a:8a:5a:31:c0:34:f3:c3:
- 89:e0:57:97:64:01:dd:c2:9f:75:8e:e3:fd:b3:58:
- b5:0b:e3:4d:8f:94:e8:9b:0c:c2:12:af:13:31:30:
- d1:a6:1c:2c:f1:0a:7a:a4:17:e2:2f:6f:73:cb:22:
- 15:67
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 73:D9:03:F6:54:EA:FC:42:DA:77:EC:19:89:AD:6D:D2:A3:3E:E9:FD
- X509v3 Authority Key Identifier:
- keyid:73:D9:03:F6:54:EA:FC:42:DA:77:EC:19:89:AD:6D:D2:A3:3E:E9:FD
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- e0:b7:24:3a:ee:4c:8d:42:9f:b9:52:2b:7d:21:c5:7b:dd:2b:
- bc:6a:5d:86:57:ee:d5:1f:27:e6:e1:08:e3:72:a3:10:2b:97:
- 1b:98:b9:39:18:6e:7f:b8:b0:1c:f1:f5:d9:7e:1d:05:3f:5b:
- f4:cd:1e:66:7f:77:ed:ab:d0:51:b6:ad:6c:a6:66:ab:fc:31:
- a1:ac:ee:66:ae:3b:af:4e:3c:c6:29:07:dc:1a:ac:b5:10:3f:
- 3f:ad:27:1b:bc:32:19:ab:b3:75:62:47:23:d1:b8:60:78:ac:
- 96:0c:4f:b8:31:7b:40:7e:f3:f7:ba:a9:ae:9b:65:ef:c5:e3:
- fc:c8:28:c6:c0:74:48:00:33:48:a4:e6:3c:0c:5b:a0:1e:c2:
- 57:c5:0c:24:34:c3:36:c0:8a:f3:a6:c3:16:24:32:c3:dc:81:
- 76:54:3e:00:68:c8:6a:b6:ee:9f:ab:44:64:64:37:54:ff:1b:
- b9:a5:c2:bf:ff:a5:68:b3:5a:ef:d7:bc:64:39:24:2e:ad:c7:
- a3:9c:ef:60:cb:ab:de:45:f1:40:65:95:01:0c:52:ea:a8:d6:
- 8b:77:e0:2e:1f:2b:4f:a3:bc:b8:80:6b:8d:92:42:66:17:10:
- 4b:d4:b0:2d:8d:4c:77:50:74:83:0e:9a:4c:0d:3b:6b:3d:c6:
- 0a:2e:f6:5c
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOrGuGZiwhoqfYPKsnsR
-5JJKuDo5NXOqiVV99OxASyzHVlisnSXvwyaGmMR0pDqUNth4fBr091ygVmn8I8Ck
-Bl9bzurLMpvDIYn9n044orn03q9EHlMCCUFEkrylT3CGI4VIKlEBcKuwxL2XPC/Q
-LD6cvkAu7r747WOiG/3iD9GyO7PO2oRZVrt3F5PvwLe0Edu5brBKKFX7Vk7tIrbj
-TVutaq//3zP5GKaRCriJ0yhVGMdxGTK8iKjuW8g0hOX1/m5ewDtzm6S8TGqKWjHA
-NPPDieBXl2QB3cKfdY7j/bNYtQvjTY+U6JsMwhKvEzEw0aYcLPEKeqQX4i9vc8si
-FWcCAwEAAaOByzCByDAdBgNVHQ4EFgQUc9kD9lTq/ELad+wZia1t0qM+6f0wHwYD
-VR0jBBgwFoAUc9kD9lTq/ELad+wZia1t0qM+6f0wNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQDgtyQ67kyN
-Qp+5Uit9IcV73Su8al2GV+7VHyfm4QjjcqMQK5cbmLk5GG5/uLAc8fXZfh0FP1v0
-zR5mf3ftq9BRtq1spmar/DGhrO5mrjuvTjzGKQfcGqy1ED8/rScbvDIZq7N1Ykcj
-0bhgeKyWDE+4MXtAfvP3uqmum2XvxeP8yCjGwHRIADNIpOY8DFugHsJXxQwkNMM2
-wIrzpsMWJDLD3IF2VD4AaMhqtu6fq0RkZDdU/xu5pcK//6Vos1rv17xkOSQurcej
-nO9gy6veRfFAZZUBDFLqqNaLd+AuHytPo7y4gGuNkkJmFxBL1LAtjUx3UHSDDppM
-DTtrPcYKLvZc
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem b/net/data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem
deleted file mode 100644
index 6327545..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem
+++ /dev/null
@@ -1,281 +0,0 @@
-[Created by: generate-intermediary-lacks-signing-key-usage.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit.
-Hence validation is expected to fail.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b6:80:03:5a:ee:21:94:59:e3:bf:eb:26:bb:b5:
- 2e:39:80:35:38:e7:7e:1d:e6:17:d2:fb:50:be:d2:
- 03:33:14:ee:1f:a2:f8:78:bb:d0:60:e2:0c:ff:59:
- 80:52:fb:5a:3d:38:2d:26:9e:d6:af:df:f2:ff:49:
- f7:ec:8a:02:2b:51:02:d3:53:f9:6e:2b:ed:68:5e:
- 90:54:03:7b:f7:0c:08:93:59:9f:41:2c:27:05:6c:
- dd:dc:f8:a8:ea:78:c0:6d:a1:c8:11:cd:e8:40:cc:
- 6c:65:db:16:50:20:07:68:00:c0:7f:c5:89:fe:e8:
- 6a:0c:36:6a:ad:5a:ab:40:8e:4c:0e:e9:51:a0:6b:
- 28:b8:df:c0:7c:3c:6c:a7:b8:8b:9e:07:1f:e5:29:
- 01:5b:81:76:ca:53:80:b8:a4:8f:1a:35:66:b7:96:
- 24:ac:fb:44:a1:4c:71:c6:28:6d:91:75:59:1a:bf:
- e4:8e:15:71:43:3f:24:3f:b4:db:a0:2c:5e:af:46:
- 16:65:7e:25:0c:90:5e:16:7b:e3:a6:47:0f:03:fe:
- 31:cc:06:dc:ba:0e:0b:fa:6b:e5:4a:53:11:c4:00:
- 54:d5:76:09:97:12:38:31:12:9d:27:49:e8:4d:01:
- 18:0c:54:b3:c7:a8:c3:fc:60:3f:92:0b:ef:9f:72:
- 8e:59
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 76:E3:64:67:6F:B9:A6:B7:6E:DC:62:12:09:FE:30:0A:19:F4:BF:B3
- X509v3 Authority Key Identifier:
- keyid:5A:C6:0B:DA:37:A3:BB:21:85:17:C5:EF:0C:FA:BF:A9:79:B1:FE:29
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 92:d5:77:f8:65:61:e9:66:0d:f7:00:9b:46:28:26:52:37:9f:
- 3c:15:33:01:95:61:b9:0c:a1:c3:e7:f5:09:6a:4c:ba:0f:3b:
- 80:3a:65:c3:22:e7:9d:e7:4d:c3:ca:3a:bc:88:98:6c:a3:8e:
- 56:4e:64:98:b7:85:a7:aa:d3:e8:9a:b3:e4:2f:7d:18:bf:74:
- c7:29:d9:51:a7:39:4a:4b:e1:94:14:0b:f9:af:e9:89:26:98:
- cb:b2:b7:64:d4:ab:42:f5:68:cb:40:78:72:91:02:13:fe:05:
- 41:68:42:c2:e0:d5:ea:bd:56:52:6f:76:b3:20:f4:e6:39:2a:
- 83:ea:7a:c9:d2:37:4a:45:c4:ad:ac:6a:24:38:6e:fd:d6:ed:
- 4c:42:cf:87:2c:7d:21:e5:18:ee:3a:c0:1e:83:ac:25:70:9a:
- f5:fd:e7:4e:ab:67:0e:5d:00:9f:44:e4:e5:d6:d9:02:43:05:
- 91:c3:66:a6:1f:8a:ce:ae:c8:2b:4d:c6:0e:9e:5f:d7:ff:e7:
- b6:39:a7:f1:19:b0:3a:59:33:6a:72:a6:03:6b:42:e7:f8:07:
- a3:0d:2d:f7:31:c3:f4:e5:cf:8b:24:42:0c:29:40:5a:7d:df:
- 65:81:8c:0f:cb:86:e6:2b:39:26:58:0b:18:b8:4c:87:6c:10:
- 03:0b:7c:c4
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gANa
-7iGUWeO/6ya7tS45gDU4534d5hfS+1C+0gMzFO4fovh4u9Bg4gz/WYBS+1o9OC0m
-ntav3/L/SffsigIrUQLTU/luK+1oXpBUA3v3DAiTWZ9BLCcFbN3c+KjqeMBtocgR
-zehAzGxl2xZQIAdoAMB/xYn+6GoMNmqtWqtAjkwO6VGgayi438B8PGynuIueBx/l
-KQFbgXbKU4C4pI8aNWa3liSs+0ShTHHGKG2RdVkav+SOFXFDPyQ/tNugLF6vRhZl
-fiUMkF4We+OmRw8D/jHMBty6Dgv6a+VKUxHEAFTVdgmXEjgxEp0nSehNARgMVLPH
-qMP8YD+SC++fco5ZAgMBAAGjgekwgeYwHQYDVR0OBBYEFHbjZGdvuaa3btxiEgn+
-MAoZ9L+zMB8GA1UdIwQYMBaAFFrGC9o3o7shhRfF7wz6v6l5sf4pMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAktV3+GVh6WYN9wCbRigm
-UjefPBUzAZVhuQyhw+f1CWpMug87gDplwyLnnedNw8o6vIiYbKOOVk5kmLeFp6rT
-6Jqz5C99GL90xynZUac5SkvhlBQL+a/piSaYy7K3ZNSrQvVoy0B4cpECE/4FQWhC
-wuDV6r1WUm92syD05jkqg+p6ydI3SkXEraxqJDhu/dbtTELPhyx9IeUY7jrAHoOs
-JXCa9f3nTqtnDl0An0Tk5dbZAkMFkcNmph+Kzq7IK03GDp5f1//ntjmn8RmwOlkz
-anKmA2tC5/gHow0t9zHD9OXPiyRCDClAWn3fZYGMD8uG5is5JlgLGLhMh2wQAwt8
-xA==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:9b:71:4d:95:69:ff:1c:81:da:58:66:90:29:ae:
- 15:48:a6:43:09:a2:05:75:ca:16:d1:a5:69:e0:77:
- c8:c1:f4:e5:e2:4d:97:c6:09:e4:e0:98:64:c2:b7:
- 7f:11:5a:ee:7a:3e:c5:d8:24:b0:b8:a2:98:ac:05:
- bd:71:07:71:6a:11:67:17:55:5c:2d:d3:fe:4b:d0:
- e1:f3:d5:08:de:7e:c2:56:ff:e6:95:6f:11:7f:5a:
- 34:e7:0c:1c:e3:82:f6:f4:e1:ed:4e:ce:60:2f:f7:
- 5d:b8:b1:54:f0:c8:aa:28:5d:56:90:24:7b:cf:a7:
- 01:de:d9:63:16:a3:7b:5e:34:c9:8c:35:50:57:fc:
- be:6c:48:70:83:7a:52:d9:19:f8:e8:a2:91:f3:23:
- 34:f3:14:b6:3d:59:e6:86:05:9b:26:ec:14:fa:78:
- d3:91:a4:af:f7:c5:01:15:c0:3c:84:b8:5f:09:62:
- ab:c3:b3:51:df:14:20:47:ee:0b:5f:85:06:42:4d:
- b3:5a:e0:08:14:32:d8:0a:8b:7a:41:f5:0e:34:cc:
- 4a:a3:79:be:6d:b5:cd:d1:b8:e0:71:2a:81:e1:22:
- bc:6c:fe:89:59:97:ee:71:ad:d7:e1:d4:ea:01:85:
- 0a:ae:83:a1:09:65:3c:2e:68:29:e1:3f:b0:c2:c7:
- 90:85
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 5A:C6:0B:DA:37:A3:BB:21:85:17:C5:EF:0C:FA:BF:A9:79:B1:FE:29
- X509v3 Authority Key Identifier:
- keyid:D3:3B:10:26:28:99:EC:09:2A:08:9C:53:7D:24:9F:B1:F1:04:0B:B5
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 53:21:fb:72:d3:86:6c:af:f6:75:07:5c:bc:0c:7a:97:8f:05:
- b8:86:af:ee:af:ca:9b:c0:89:2f:28:cd:79:a7:a3:70:04:37:
- 8b:ca:4d:84:3a:72:d5:9a:2e:f9:85:64:59:5b:7f:7e:b4:bf:
- 09:74:af:fe:f1:d1:8c:47:3a:1b:87:9d:73:ce:a1:de:8f:33:
- f7:ad:b4:7d:83:d5:e2:60:ff:f4:b2:79:ee:6b:fb:db:ae:c5:
- f5:1c:e9:20:9a:b9:71:31:c9:55:02:a1:e1:9b:a6:b7:dd:c0:
- cc:e1:66:02:91:fe:a1:59:67:bf:3b:45:32:20:08:a0:08:66:
- eb:47:2d:db:24:6f:ab:3c:53:9b:96:81:5f:61:4a:fa:bb:70:
- 2a:31:a1:2b:ff:cc:ae:1c:c9:be:e5:a6:f1:6a:6e:b1:3f:4b:
- 30:59:e3:a7:9f:f2:6e:6d:9d:ed:5f:b9:cf:b2:07:66:84:63:
- 53:f4:64:c7:d1:b2:62:63:c6:ec:a2:09:89:c5:bc:75:96:bc:
- d2:a5:86:f7:9c:28:1c:47:45:30:e6:90:87:c6:e3:2b:be:d3:
- 8e:b7:89:30:f3:f3:83:14:f6:56:be:0c:e7:34:6e:6f:b4:f3:
- 0c:17:87:dd:a8:e2:8b:ec:34:24:dc:0c:16:dc:e4:c4:21:da:
- dc:ba:9d:a6
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3FNlWn/
-HIHaWGaQKa4VSKZDCaIFdcoW0aVp4HfIwfTl4k2Xxgnk4Jhkwrd/EVruej7F2CSw
-uKKYrAW9cQdxahFnF1VcLdP+S9Dh89UI3n7CVv/mlW8Rf1o05wwc44L29OHtTs5g
-L/dduLFU8MiqKF1WkCR7z6cB3tljFqN7XjTJjDVQV/y+bEhwg3pS2Rn46KKR8yM0
-8xS2PVnmhgWbJuwU+njTkaSv98UBFcA8hLhfCWKrw7NR3xQgR+4LX4UGQk2zWuAI
-FDLYCot6QfUONMxKo3m+bbXN0bjgcSqB4SK8bP6JWZfuca3X4dTqAYUKroOhCWU8
-Lmgp4T+wwseQhQIDAQABo4HLMIHIMB0GA1UdDgQWBBRaxgvaN6O7IYUXxe8M+r+p
-ebH+KTAfBgNVHSMEGDAWgBTTOxAmKJnsCSoInFN9JJ+x8QQLtTA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgWgMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AFMh+3LThmyv9nUHXLwMepePBbiGr+6vypvAiS8ozXmno3AEN4vKTYQ6ctWaLvmF
-ZFlbf360vwl0r/7x0YxHOhuHnXPOod6PM/ettH2D1eJg//Syee5r+9uuxfUc6SCa
-uXExyVUCoeGbprfdwMzhZgKR/qFZZ787RTIgCKAIZutHLdskb6s8U5uWgV9hSvq7
-cCoxoSv/zK4cyb7lpvFqbrE/SzBZ46ef8m5tne1fuc+yB2aEY1P0ZMfRsmJjxuyi
-CYnFvHWWvNKlhvecKBxHRTDmkIfG4yu+0463iTDz84MU9la+DOc0bm+08wwXh92o
-4ovsNCTcDBbc5MQh2ty6naY=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:99:27:87:07:8d:52:53:4f:bc:b6:55:16:e3:64:
- 12:13:89:32:c4:f9:6f:a2:9c:93:06:fc:4c:a9:4d:
- 09:1a:04:8a:24:58:74:7a:53:ad:d6:c6:29:0e:19:
- f2:cc:1e:02:72:2d:7f:52:4c:3a:88:dd:35:fc:c5:
- e6:d4:41:1a:b0:76:a7:b9:c1:db:d9:7a:a0:56:d8:
- e7:4c:a6:ed:45:ca:99:eb:4c:dd:44:5b:52:79:00:
- 1b:f0:ca:fc:19:c9:39:d7:1c:24:e5:90:f8:77:f7:
- 4a:cd:0c:ec:dc:c5:15:6d:43:de:43:b4:f9:03:b9:
- fa:b9:8f:4f:b4:e2:9f:dd:e8:d5:af:9f:ab:79:ce:
- 32:2f:be:04:85:e8:2f:5e:91:26:b5:08:a1:ef:11:
- f5:20:28:8d:09:9f:4e:b9:5a:ef:cf:45:b3:aa:6e:
- 14:1b:fe:1e:c3:4b:39:ad:76:9a:58:b5:be:c4:ae:
- ce:0e:03:ef:8e:5d:a7:03:00:e7:ed:88:0e:97:8e:
- 2d:bd:82:6e:d8:39:7f:c0:7e:4e:c8:1e:eb:60:cb:
- f7:97:dd:fb:79:ee:a8:00:4a:40:b7:1c:2f:1a:59:
- 5a:51:36:a9:aa:0b:97:a0:d0:d5:87:5e:b9:36:73:
- 5c:31:fc:b6:8c:ef:f1:2a:f5:ea:6d:2b:05:d2:8c:
- 60:87
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- D3:3B:10:26:28:99:EC:09:2A:08:9C:53:7D:24:9F:B1:F1:04:0B:B5
- X509v3 Authority Key Identifier:
- keyid:D3:3B:10:26:28:99:EC:09:2A:08:9C:53:7D:24:9F:B1:F1:04:0B:B5
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 2e:84:d8:57:d4:09:e8:0e:8f:b5:9c:8f:48:ef:62:40:49:3e:
- 9a:2e:b9:85:1c:77:f6:94:f3:73:0e:06:58:d4:63:5d:20:90:
- e4:4b:c8:39:64:ca:ec:04:8c:bb:dd:b2:58:81:3e:89:05:1d:
- 42:19:f9:d4:92:24:de:03:6c:69:36:74:95:65:b3:a4:06:83:
- 2b:9f:93:72:57:dc:53:09:be:d2:fb:23:39:df:85:73:9a:c2:
- c4:2d:7e:aa:36:01:dd:4e:a6:4f:fe:61:99:21:9c:89:a4:e7:
- f8:8e:03:92:f6:cc:24:08:db:c8:59:41:6e:ea:c2:c3:4a:54:
- d6:93:e5:3d:17:ff:24:a4:f7:55:2b:3c:d2:40:a7:2a:67:df:
- 67:66:f5:37:ef:aa:20:d2:5a:da:d1:19:08:43:be:ae:11:f3:
- 43:80:8a:ce:15:af:04:c5:b5:10:21:7c:f6:5e:7a:68:8e:59:
- 40:ca:4b:be:c7:59:1b:48:a4:a1:ee:ef:57:b4:5b:d9:93:3b:
- a2:36:3b:b6:f2:54:1e:c8:97:7e:5c:62:99:6c:f6:b0:bf:df:
- af:5a:52:64:99:39:93:20:dc:4f:5e:a6:fe:8d:19:e2:21:1f:
- 95:9d:7c:e8:8e:05:eb:74:ed:60:8e:ee:76:17:a8:40:56:36:
- ac:bf:61:b9
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJknhweNUlNPvLZVFuNk
-EhOJMsT5b6Kckwb8TKlNCRoEiiRYdHpTrdbGKQ4Z8sweAnItf1JMOojdNfzF5tRB
-GrB2p7nB29l6oFbY50ym7UXKmetM3URbUnkAG/DK/BnJOdccJOWQ+Hf3Ss0M7NzF
-FW1D3kO0+QO5+rmPT7Tin93o1a+fq3nOMi++BIXoL16RJrUIoe8R9SAojQmfTrla
-789Fs6puFBv+HsNLOa12mli1vsSuzg4D745dpwMA5+2IDpeOLb2Cbtg5f8B+Tsge
-62DL95fd+3nuqABKQLccLxpZWlE2qaoLl6DQ1YdeuTZzXDH8tozv8Sr16m0rBdKM
-YIcCAwEAAaOByzCByDAdBgNVHQ4EFgQU0zsQJiiZ7AkqCJxTfSSfsfEEC7UwHwYD
-VR0jBBgwFoAU0zsQJiiZ7AkqCJxTfSSfsfEEC7UwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAuhNhX1Ano
-Do+1nI9I72JAST6aLrmFHHf2lPNzDgZY1GNdIJDkS8g5ZMrsBIy73bJYgT6JBR1C
-GfnUkiTeA2xpNnSVZbOkBoMrn5NyV9xTCb7S+yM534VzmsLELX6qNgHdTqZP/mGZ
-IZyJpOf4jgOS9swkCNvIWUFu6sLDSlTWk+U9F/8kpPdVKzzSQKcqZ99nZvU376og
-0lra0RkIQ76uEfNDgIrOFa8ExbUQIXz2XnpojllAyku+x1kbSKSh7u9XtFvZkzui
-Nju28lQeyJd+XGKZbPawv9+vWlJkmTmTINxPXqb+jRniIR+VnXzojgXrdO1gju52
-F6hAVjasv2G5
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem b/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem
deleted file mode 100644
index d1544816..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem
+++ /dev/null
@@ -1,281 +0,0 @@
-[Created by: generate-intermediary-signed-with-md5.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-however is signed using the MD5 hash. Verification is expected to fail because
-MD5 is too weak.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:e9:b3:cb:c4:9b:c5:59:0a:ca:5e:ca:b3:7b:e1:
- bb:ec:3d:4b:10:7b:d4:ee:71:92:1c:c0:24:af:0b:
- c4:5e:55:3b:af:aa:e3:43:a3:d3:ae:1c:db:7b:fe:
- 2a:35:d0:d8:49:77:09:f5:5d:65:9b:84:42:93:da:
- 64:a4:12:f7:f5:6d:91:2f:7c:96:aa:7b:50:09:67:
- 1d:f6:76:a2:4f:64:6c:d7:78:c6:78:f4:5c:83:3a:
- 01:64:3c:15:37:4e:2a:b9:48:2a:ce:42:36:35:59:
- b0:b0:f6:4c:db:21:59:14:87:91:09:d8:18:76:b8:
- fb:0c:b4:e4:ab:5a:24:27:e5:47:9c:c7:eb:d0:74:
- 17:5b:13:9a:f7:96:b7:1d:de:84:8c:6a:fd:c7:92:
- 53:09:72:31:66:aa:54:07:3d:1c:2c:86:e9:68:d8:
- 12:f6:22:ec:37:b5:58:6c:26:fe:79:c5:d0:f7:42:
- 79:f9:ad:7a:3a:f4:0a:52:3e:5a:5b:45:d9:a8:d1:
- 18:35:db:9d:56:81:11:49:f9:77:0d:ff:a7:1e:39:
- 63:14:3b:64:3d:d0:2f:1b:47:c6:ad:6a:a8:d8:c9:
- 09:cd:58:0b:5d:de:ad:aa:56:38:bd:42:0f:f9:c6:
- 9d:c0:da:b0:06:03:a5:3f:43:5f:e1:83:74:cc:a7:
- ab:9f
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- E8:2D:DF:58:DB:57:BD:6D:98:31:15:C9:58:49:E0:02:47:79:10:9D
- X509v3 Authority Key Identifier:
- keyid:0E:AF:B4:0B:04:28:C3:55:B4:F8:2D:EB:A1:62:49:26:60:A2:A7:D8
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- a2:d6:e1:fe:94:8d:78:bc:5b:9e:53:1a:b9:6b:76:32:2e:66:
- 0b:b3:ce:8f:96:9a:33:37:b6:e2:fb:99:56:2e:3b:cb:3d:d3:
- 96:c7:b8:05:9a:00:e4:f4:72:f6:97:b2:b3:72:08:3d:17:59:
- af:98:b3:16:a2:cb:e7:b8:bf:c1:5b:49:92:28:9c:47:bd:29:
- 9e:56:f8:52:67:eb:de:23:69:52:79:32:1f:ba:b5:58:d3:b6:
- 19:58:ac:62:04:a5:29:9a:7b:df:90:ad:c1:b1:42:c4:6c:a6:
- 16:db:af:5e:ee:85:83:9e:c9:02:ba:c6:3c:63:55:93:58:36:
- b4:86:b8:fa:e4:09:6f:98:6f:23:2a:2c:98:04:e4:2c:fd:69:
- 61:b2:36:88:8f:a2:70:ec:2a:47:6d:e0:cb:f8:5c:07:25:71:
- f4:f6:af:50:a7:d7:49:d8:c8:08:4a:09:12:8c:21:bc:d7:54:
- f2:04:fc:f0:33:2f:aa:b1:a7:d3:0a:d0:96:0f:69:7c:a4:a8:
- cd:a5:a6:d3:d2:6a:b1:f2:b1:0a:81:18:68:18:23:c1:6f:9c:
- 40:9f:d2:2d:6d:e2:52:36:05:4e:99:ae:b2:e1:b3:da:40:99:
- 1f:c6:9f:ae:9b:43:1d:e3:db:58:7c:96:b5:b8:cc:b6:b7:e9:
- 1b:57:a0:61
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDps8vE
-m8VZCspeyrN74bvsPUsQe9TucZIcwCSvC8ReVTuvquNDo9OuHNt7/io10NhJdwn1
-XWWbhEKT2mSkEvf1bZEvfJaqe1AJZx32dqJPZGzXeMZ49FyDOgFkPBU3Tiq5SCrO
-QjY1WbCw9kzbIVkUh5EJ2Bh2uPsMtOSrWiQn5Uecx+vQdBdbE5r3lrcd3oSMav3H
-klMJcjFmqlQHPRwshulo2BL2Iuw3tVhsJv55xdD3Qnn5rXo69ApSPlpbRdmo0Rg1
-251WgRFJ+XcN/6ceOWMUO2Q90C8bR8ataqjYyQnNWAtd3q2qVji9Qg/5xp3A2rAG
-A6U/Q1/hg3TMp6ufAgMBAAGjgekwgeYwHQYDVR0OBBYEFOgt31jbV71tmDEVyVhJ
-4AJHeRCdMB8GA1UdIwQYMBaAFA6vtAsEKMNVtPgt66FiSSZgoqfYMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAotbh/pSNeLxbnlMauWt2
-Mi5mC7POj5aaMze24vuZVi47yz3Tlse4BZoA5PRy9peys3IIPRdZr5izFqLL57i/
-wVtJkiicR70pnlb4Umfr3iNpUnkyH7q1WNO2GVisYgSlKZp735CtwbFCxGymFtuv
-Xu6Fg57JArrGPGNVk1g2tIa4+uQJb5hvIyosmATkLP1pYbI2iI+icOwqR23gy/hc
-ByVx9PavUKfXSdjICEoJEowhvNdU8gT88DMvqrGn0wrQlg9pfKSozaWm09JqsfKx
-CoEYaBgjwW+cQJ/SLW3iUjYFTpmusuGz2kCZH8afrptDHePbWHyWtbjMtrfpG1eg
-YQ==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: md5WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:e9:c2:e1:d4:1c:a8:bf:ff:07:7f:17:bf:a4:f7:
- f5:bc:e3:1f:76:32:e2:a3:e4:5c:a2:5d:83:a4:ad:
- c7:19:12:8a:20:dc:5c:d3:db:22:97:e5:59:09:d8:
- 7f:95:bc:79:61:c2:66:d1:69:02:fc:98:02:12:8e:
- f4:4e:63:4d:1f:d0:df:f9:25:f0:86:f0:17:ba:3d:
- 1c:5c:7d:7c:0a:f5:fc:f5:f3:a1:1f:44:45:30:e5:
- f2:02:b8:e2:04:69:50:f7:b8:10:1d:35:92:56:3b:
- 06:42:fc:a7:e5:45:40:b0:0c:2f:2c:61:dd:0e:55:
- cb:23:7d:8b:48:b6:ac:68:b3:e3:3b:fc:07:a4:89:
- 17:3e:e3:fc:74:12:e6:2f:15:b8:78:dc:a2:6b:6b:
- 98:e2:36:f6:69:26:71:21:20:d1:60:4d:44:ea:32:
- fd:54:64:4a:f1:6a:94:f3:51:43:e8:f9:5f:68:9e:
- 03:a8:a8:6c:a2:0e:55:e5:d8:87:ad:62:db:61:5b:
- a8:4b:1a:dc:f3:14:9f:97:24:5c:32:98:e4:9b:8b:
- 1e:32:d4:12:d0:5b:a1:c1:f6:2e:85:42:c4:dc:60:
- 8f:b1:b2:8b:7a:63:3e:ad:95:62:60:2a:0e:88:dc:
- 5c:10:c6:90:ab:6b:75:d2:42:f4:b2:a9:81:5a:d8:
- 0e:41
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 0E:AF:B4:0B:04:28:C3:55:B4:F8:2D:EB:A1:62:49:26:60:A2:A7:D8
- X509v3 Authority Key Identifier:
- keyid:DE:7E:F6:82:CA:37:00:C9:C3:30:07:35:D1:BA:48:C5:9B:B6:2D:A7
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: md5WithRSAEncryption
- 03:a2:90:68:d8:0d:83:e4:1c:83:20:2e:0b:ff:60:1c:01:a9:
- ec:66:71:cd:3b:61:2c:10:95:ab:42:4e:fc:05:bb:40:d3:8c:
- 00:34:72:b3:8f:74:de:21:67:0a:e8:b4:93:3d:c3:a2:a0:a0:
- f0:4b:d9:7d:c6:2b:4f:dd:31:12:ad:72:3c:54:58:5c:21:3f:
- 75:39:46:80:da:f3:20:1d:93:a3:ef:bb:00:91:bd:8d:22:16:
- d9:5e:c7:a1:45:39:1a:76:d9:7d:e6:86:6c:65:0e:29:50:4b:
- 5f:40:ec:79:9c:9a:d0:d9:fa:6a:6a:90:62:db:fa:9e:28:1a:
- 40:e4:b3:45:90:41:26:09:d4:7c:f7:5c:58:ce:c5:67:6a:d1:
- 41:86:73:df:6e:cb:79:70:75:5f:d2:54:53:07:e0:53:d1:45:
- d9:4b:e7:f6:2b:60:fb:56:b4:17:79:be:2a:7e:98:0d:ad:ea:
- d1:79:5d:87:80:65:84:15:61:d8:dd:a8:3c:5f:f0:90:a6:0b:
- d8:c5:ca:d8:8d:fb:2f:1b:f8:a2:4d:ea:33:71:c2:30:a5:3b:
- 56:a4:73:79:51:b7:7a:e7:6c:f7:23:52:48:61:1c:82:54:97:
- 0d:54:e5:80:07:bb:84:d7:ee:90:ee:4d:85:df:f7:34:fb:d3:
- d8:bf:19:7f
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQQFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cLh1Byo
-v/8Hfxe/pPf1vOMfdjLio+Rcol2DpK3HGRKKINxc09sil+VZCdh/lbx5YcJm0WkC
-/JgCEo70TmNNH9Df+SXwhvAXuj0cXH18CvX89fOhH0RFMOXyArjiBGlQ97gQHTWS
-VjsGQvyn5UVAsAwvLGHdDlXLI32LSLasaLPjO/wHpIkXPuP8dBLmLxW4eNyia2uY
-4jb2aSZxISDRYE1E6jL9VGRK8WqU81FD6PlfaJ4DqKhsog5V5diHrWLbYVuoSxrc
-8xSflyRcMpjkm4seMtQS0FuhwfYuhULE3GCPsbKLemM+rZViYCoOiNxcEMaQq2t1
-0kL0sqmBWtgOQQIDAQABo4HLMIHIMB0GA1UdDgQWBBQOr7QLBCjDVbT4LeuhYkkm
-YKKn2DAfBgNVHSMEGDAWgBTefvaCyjcAycMwBzXRukjFm7YtpzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEEBQADggEB
-AAOikGjYDYPkHIMgLgv/YBwBqexmcc07YSwQlatCTvwFu0DTjAA0crOPdN4hZwro
-tJM9w6KgoPBL2X3GK0/dMRKtcjxUWFwhP3U5RoDa8yAdk6PvuwCRvY0iFtlex6FF
-ORp22X3mhmxlDilQS19A7HmcmtDZ+mpqkGLb+p4oGkDks0WQQSYJ1Hz3XFjOxWdq
-0UGGc99uy3lwdV/SVFMH4FPRRdlL5/YrYPtWtBd5vip+mA2t6tF5XYeAZYQVYdjd
-qDxf8JCmC9jFytiN+y8b+KJN6jNxwjClO1akc3lRt3rnbPcjUkhhHIJUlw1U5YAH
-u4TX7pDuTYXf9zT709i/GX8=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:c6:d0:57:18:e0:d7:81:35:67:b0:a4:a1:5b:fd:
- 8f:32:51:4f:d9:76:67:02:84:59:10:4d:4a:b9:ed:
- 1d:ef:fe:5e:d4:69:c1:24:e3:1f:91:08:d8:15:de:
- 68:ca:dc:c7:fc:ea:6f:27:a5:60:45:af:0f:f1:44:
- b8:d7:c7:96:70:d9:e1:dd:84:aa:ea:65:52:62:67:
- e1:06:cd:d9:18:ad:eb:a3:0a:60:4b:cd:76:71:44:
- 26:3c:22:c7:44:74:77:31:50:a5:b3:c4:ef:ac:14:
- 1e:ea:ff:74:a0:7b:e4:7a:ca:87:dd:45:0b:bc:75:
- 4b:92:44:0f:e8:f3:d2:6d:3e:47:4b:cf:77:a2:e9:
- ff:f9:e2:79:9f:88:d7:ff:e5:cc:93:91:91:24:e1:
- 9f:ef:a4:13:15:cc:03:3e:06:ba:9d:4c:de:52:b9:
- de:c6:57:af:76:d8:9e:4b:37:11:1d:52:57:fe:af:
- 8e:11:1d:fd:a8:55:3b:84:c9:10:ac:dc:51:62:e8:
- c8:54:5b:3d:60:0b:8e:ad:66:2a:26:92:81:c6:a1:
- be:31:51:d3:28:b1:9e:86:67:ca:c4:f2:88:47:1c:
- 03:c9:f8:ee:f8:87:4c:b4:9e:24:9d:c0:48:d8:ec:
- a7:8b:52:7a:d0:65:cf:06:2a:63:7f:1c:c9:15:44:
- 48:01
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- DE:7E:F6:82:CA:37:00:C9:C3:30:07:35:D1:BA:48:C5:9B:B6:2D:A7
- X509v3 Authority Key Identifier:
- keyid:DE:7E:F6:82:CA:37:00:C9:C3:30:07:35:D1:BA:48:C5:9B:B6:2D:A7
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 8c:97:4a:f9:c2:c2:57:2a:4b:a1:69:03:9e:c1:17:fb:4c:f2:
- 8e:36:0f:e2:c4:f6:4d:42:9c:ac:7f:67:7b:fd:7e:fd:14:3b:
- fb:df:08:3d:0e:23:fa:d1:47:d5:68:14:b2:1f:5c:40:db:fe:
- 8d:e6:fc:17:3a:c6:2f:5e:96:1a:3c:32:fa:63:c5:e5:cf:fc:
- db:6b:59:71:b8:f7:d2:70:78:cc:7f:8c:54:5f:c6:69:ba:98:
- 77:92:32:b3:a1:18:84:ed:3c:93:3f:12:93:64:e6:7f:92:8a:
- 4f:db:42:1d:c0:7c:0d:4a:d6:ef:ca:05:a3:5b:26:47:79:7e:
- 91:b0:e6:35:92:91:e2:2f:4d:18:17:44:b5:a7:de:8a:92:86:
- 4c:0c:de:0e:23:53:c0:30:1f:7a:c5:70:59:94:19:02:8a:f1:
- 23:f9:88:fb:09:af:b8:90:d6:c6:d5:46:92:74:44:8b:8e:66:
- b1:79:cb:82:3d:80:cc:cf:d9:03:5a:a3:71:a6:f5:f0:75:9f:
- 79:38:f0:fe:66:e5:d1:a1:9d:0a:48:e1:45:a1:42:fb:d3:16:
- 53:91:b9:c9:0d:27:8a:34:e0:59:8d:4f:e0:e7:7d:7d:0c:e6:
- ec:a1:ea:66:23:77:55:fc:f1:d0:13:32:1d:9e:0c:fd:3b:38:
- 1d:dc:2c:2b
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbQVxjg14E1Z7CkoVv9
-jzJRT9l2ZwKEWRBNSrntHe/+XtRpwSTjH5EI2BXeaMrcx/zqbyelYEWvD/FEuNfH
-lnDZ4d2EquplUmJn4QbN2Rit66MKYEvNdnFEJjwix0R0dzFQpbPE76wUHur/dKB7
-5HrKh91FC7x1S5JED+jz0m0+R0vPd6Lp//nieZ+I1//lzJORkSThn++kExXMAz4G
-up1M3lK53sZXr3bYnks3ER1SV/6vjhEd/ahVO4TJEKzcUWLoyFRbPWALjq1mKiaS
-gcahvjFR0yixnoZnysTyiEccA8n47viHTLSeJJ3ASNjsp4tSetBlzwYqY38cyRVE
-SAECAwEAAaOByzCByDAdBgNVHQ4EFgQU3n72gso3AMnDMAc10bpIxZu2LacwHwYD
-VR0jBBgwFoAU3n72gso3AMnDMAc10bpIxZu2LacwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCMl0r5wsJX
-KkuhaQOewRf7TPKONg/ixPZNQpysf2d7/X79FDv73wg9DiP60UfVaBSyH1xA2/6N
-5vwXOsYvXpYaPDL6Y8Xlz/zba1lxuPfScHjMf4xUX8Zpuph3kjKzoRiE7TyTPxKT
-ZOZ/kopP20IdwHwNStbvygWjWyZHeX6RsOY1kpHiL00YF0S1p96KkoZMDN4OI1PA
-MB96xXBZlBkCivEj+Yj7Ca+4kNbG1UaSdESLjmaxecuCPYDMz9kDWqNxpvXwdZ95
-OPD+ZuXRoZ0KSOFFoUL70xZTkbnJDSeKNOBZjU/g5319DObsoepmI3dV/PHQEzId
-ngz9Ozgd3Cwr
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem
deleted file mode 100644
index 7e7045c..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem
+++ /dev/null
@@ -1,284 +0,0 @@
-[Created by: generate-intermediary-unknown-critical-extension.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as critical.
-Verifying this certificate chain is expected to fail because there is an
-unrecognized critical extension.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:cf:51:a6:c4:9e:d4:eb:c4:eb:d6:57:2b:80:e5:
- da:cd:db:3a:cf:b0:43:c5:18:9c:4e:b7:c4:9c:18:
- 73:e6:85:e6:00:00:76:25:9f:5d:8f:28:19:f2:05:
- 02:a9:5c:75:65:12:38:d7:7a:eb:e3:46:42:07:3d:
- 3b:c4:5d:32:7b:26:fb:1e:69:cb:36:ca:c2:da:2f:
- b4:ec:e3:bf:5e:9a:d3:8a:6d:3e:f2:53:dc:da:40:
- 3c:fe:fd:02:36:32:f5:b2:17:bf:05:97:f0:3e:8b:
- b7:15:a2:10:be:27:79:62:30:82:3e:57:60:60:13:
- 8e:fc:33:8e:72:cd:d9:d9:50:e9:62:04:8c:e4:db:
- f8:cf:1b:da:a2:f7:ee:4c:b8:7f:b2:bf:92:c9:2c:
- 44:a7:b5:ad:b9:75:06:c0:24:5a:0b:44:ca:4f:af:
- f6:2f:c2:00:12:bb:7b:0c:c4:54:47:f1:73:53:64:
- 72:40:9d:51:40:b3:21:73:ce:82:c5:f3:b7:14:ef:
- 31:50:5b:d5:0b:b7:92:0e:08:5c:ea:ed:73:86:e3:
- b1:6d:63:7f:56:7d:74:3e:3b:90:8c:2f:a2:6e:65:
- b9:4e:38:a3:54:fb:7b:de:69:6f:c0:57:ea:51:c0:
- 09:83:b4:a8:4d:ec:74:a6:ea:31:97:0c:9a:66:b7:
- 58:0f
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 89:EB:AF:F5:F3:C7:53:ED:03:95:5A:DB:94:4A:E0:BF:C3:D2:CE:FA
- X509v3 Authority Key Identifier:
- keyid:21:32:55:0D:16:9C:AD:C4:16:5D:BE:40:67:0D:B6:40:4E:E2:75:60
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 17:7b:87:2f:11:ac:6d:68:03:d3:07:31:20:18:b7:d4:9d:98:
- e4:aa:10:6d:f2:41:2f:3e:cf:1f:50:f9:f9:3f:6e:61:c2:b7:
- dd:e0:f6:5a:d6:66:bb:2d:31:98:6a:12:0a:17:e8:a1:4e:cd:
- fd:c4:ed:3e:01:a3:1c:ef:18:9e:fb:f8:46:c6:1b:ad:a4:ce:
- ba:84:79:a6:84:f0:2c:84:d4:6c:3f:f9:ff:f8:66:f1:9b:82:
- 8c:83:c8:79:5b:bd:f0:dd:e0:e5:76:55:92:97:d2:46:64:ea:
- 3e:99:bc:9d:b8:8f:15:41:f8:3f:1b:c0:df:cd:d5:01:88:74:
- 37:8e:58:f8:ad:7d:75:70:59:98:cc:c4:bd:fc:b9:bd:f5:69:
- fe:09:08:be:ea:e8:f3:ee:53:d8:05:4f:d5:d1:85:dc:7e:58:
- 64:cf:d4:41:c1:d0:ec:c4:2a:ca:ae:39:8e:57:63:e3:03:ff:
- 4f:d4:42:92:ec:ac:e8:f6:83:e5:51:0e:32:2c:6f:2d:15:72:
- 21:37:f0:18:77:3b:97:f5:71:84:1f:07:e0:76:b6:a0:f4:34:
- 16:b9:53:e2:4f:48:45:b6:7d:b3:0f:30:06:e6:89:89:a4:3f:
- e8:4c:2a:9c:1f:9c:91:c9:66:4e:28:39:3d:5b:21:19:03:dc:
- 02:56:69:e9
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUabE
-ntTrxOvWVyuA5drN2zrPsEPFGJxOt8ScGHPmheYAAHYln12PKBnyBQKpXHVlEjjX
-euvjRkIHPTvEXTJ7Jvseacs2ysLaL7Ts479emtOKbT7yU9zaQDz+/QI2MvWyF78F
-l/A+i7cVohC+J3liMII+V2BgE478M45yzdnZUOliBIzk2/jPG9qi9+5MuH+yv5LJ
-LESnta25dQbAJFoLRMpPr/YvwgASu3sMxFRH8XNTZHJAnVFAsyFzzoLF87cU7zFQ
-W9ULt5IOCFzq7XOG47FtY39WfXQ+O5CML6JuZblOOKNU+3veaW/AV+pRwAmDtKhN
-7HSm6jGXDJpmt1gPAgMBAAGjgekwgeYwHQYDVR0OBBYEFInrr/Xzx1PtA5Va25RK
-4L/D0s76MB8GA1UdIwQYMBaAFCEyVQ0WnK3EFl2+QGcNtkBO4nVgMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAF3uHLxGsbWgD0wcxIBi3
-1J2Y5KoQbfJBLz7PH1D5+T9uYcK33eD2WtZmuy0xmGoSChfooU7N/cTtPgGjHO8Y
-nvv4RsYbraTOuoR5poTwLITUbD/5//hm8ZuCjIPIeVu98N3g5XZVkpfSRmTqPpm8
-nbiPFUH4PxvA383VAYh0N45Y+K19dXBZmMzEvfy5vfVp/gkIvuro8+5T2AVP1dGF
-3H5YZM/UQcHQ7MQqyq45jldj4wP/T9RCkuys6PaD5VEOMixvLRVyITfwGHc7l/Vx
-hB8H4Ha2oPQ0FrlT4k9IRbZ9sw8wBuaJiaQ/6EwqnB+ckclmTig5PVshGQPcAlZp
-6Q==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:c7:80:3b:a7:4e:4e:fa:0a:39:4f:5b:5c:af:ba:
- 84:27:6a:8d:34:95:5e:91:93:c8:d0:1f:64:84:5f:
- 25:d9:3b:5d:f9:31:5f:4f:6f:04:be:50:35:09:5e:
- 78:f3:9a:15:b5:27:fa:24:70:04:26:29:08:95:a5:
- dd:b1:ee:4f:ee:d8:a0:59:51:ab:75:70:c2:7b:42:
- 06:e2:4d:d7:91:ec:e5:e7:f8:34:1e:01:63:45:11:
- 6a:fe:45:3e:e7:16:59:86:e7:4b:91:67:ec:1f:c1:
- 13:a4:62:cb:f6:0d:9b:2b:e5:1e:df:c4:35:f3:94:
- 60:9b:99:e1:54:ce:ff:7d:92:f1:9d:d4:f6:0e:99:
- 8c:dc:7b:b1:95:54:04:6f:40:1c:23:42:50:ab:96:
- f5:9e:93:27:f1:5c:e5:97:9c:c1:e4:ae:a8:cb:f9:
- 42:7e:14:02:e1:32:4b:4d:03:2d:2a:a6:7e:a1:77:
- c3:4e:4e:46:18:1a:95:d7:0d:48:8d:a1:d3:bb:b7:
- 55:07:01:d9:c0:27:fd:f7:ec:61:3a:57:84:b6:91:
- 78:dc:a9:19:a6:d4:83:c5:57:67:bd:b7:a0:6a:ec:
- 7b:83:1e:d9:bf:2f:b7:bf:d6:ce:18:5a:54:cf:8b:
- 1a:fc:5a:03:63:bc:d2:3a:01:db:91:e0:ce:96:19:
- 55:19
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 21:32:55:0D:16:9C:AD:C4:16:5D:BE:40:67:0D:B6:40:4E:E2:75:60
- X509v3 Authority Key Identifier:
- keyid:BA:1F:26:2C:E0:77:F2:16:78:6D:83:49:A1:30:9E:B4:AB:10:6A:22
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- 1.2.3.4: critical
- ....
- Signature Algorithm: sha256WithRSAEncryption
- 02:57:1a:5a:82:9a:29:1e:39:b4:aa:c4:e3:04:2b:6f:1c:0a:
- 79:df:d3:f8:c9:9f:94:b6:c1:7e:e5:47:8d:35:72:e2:09:ce:
- 6f:61:f1:7e:93:f3:37:11:0d:c0:28:05:bc:8d:dc:f8:2a:22:
- 0e:dc:79:b9:71:99:38:f5:c2:81:ac:0b:47:c2:39:96:2e:2b:
- 35:0a:fe:80:fe:50:da:74:03:1c:4b:36:be:4b:23:70:4f:a1:
- 1f:c8:3b:9a:6b:92:3d:61:9b:67:9a:8b:ea:0b:b0:8c:aa:6a:
- 02:fd:27:6f:a8:be:8f:d0:78:f2:84:76:da:e2:c5:10:3c:9f:
- 61:c4:3f:50:8e:40:ac:d8:aa:87:b6:7c:da:42:c5:05:c0:82:
- bc:9f:35:ae:22:34:32:11:71:ab:fd:27:af:ef:42:ec:cd:b7:
- d1:66:14:5f:f1:e5:10:c2:1f:ac:e4:96:1f:a9:9c:5a:ad:97:
- 4d:90:40:df:cb:77:15:ba:d5:f4:76:94:9f:d6:c2:4f:53:60:
- 3b:c3:a3:9c:02:4d:03:28:32:58:3d:0f:62:36:a9:7b:70:d9:
- f8:2b:05:cd:ca:c7:17:68:76:6b:cd:ad:7f:f1:65:a6:d1:be:
- b7:4c:83:bb:0d:5d:98:6e:02:d3:b6:ea:82:b6:44:0d:a1:b2:
- 37:4b:a0:a3
------BEGIN CERTIFICATE-----
-MIIDfTCCAmWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4A7p05O
-+go5T1tcr7qEJ2qNNJVekZPI0B9khF8l2Ttd+TFfT28EvlA1CV5485oVtSf6JHAE
-JikIlaXdse5P7tigWVGrdXDCe0IG4k3Xkezl5/g0HgFjRRFq/kU+5xZZhudLkWfs
-H8ETpGLL9g2bK+Ue38Q185Rgm5nhVM7/fZLxndT2DpmM3HuxlVQEb0AcI0JQq5b1
-npMn8Vzll5zB5K6oy/lCfhQC4TJLTQMtKqZ+oXfDTk5GGBqV1w1IjaHTu7dVBwHZ
-wCf99+xhOleEtpF43KkZptSDxVdnvbegaux7gx7Zvy+3v9bOGFpUz4sa/FoDY7zS
-OgHbkeDOlhlVGQIDAQABo4HbMIHYMB0GA1UdDgQWBBQhMlUNFpytxBZdvkBnDbZA
-TuJ1YDAfBgNVHSMEGDAWgBS6HyYs4HfyFnhtg0mhMJ60qxBqIjA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDgYDKgMEAQH/BAQBAgMEMA0G
-CSqGSIb3DQEBCwUAA4IBAQACVxpagpopHjm0qsTjBCtvHAp539P4yZ+UtsF+5UeN
-NXLiCc5vYfF+k/M3EQ3AKAW8jdz4KiIO3Hm5cZk49cKBrAtHwjmWLis1Cv6A/lDa
-dAMcSza+SyNwT6EfyDuaa5I9YZtnmovqC7CMqmoC/SdvqL6P0HjyhHba4sUQPJ9h
-xD9QjkCs2KqHtnzaQsUFwIK8nzWuIjQyEXGr/Sev70LszbfRZhRf8eUQwh+s5JYf
-qZxarZdNkEDfy3cVutX0dpSf1sJPU2A7w6OcAk0DKDJYPQ9iNql7cNn4KwXNyscX
-aHZrza1/8WWm0b63TIO7DV2YbgLTtuqCtkQNobI3S6Cj
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:9f:42:45:62:cb:c5:f3:07:65:8a:9b:4c:d4:91:
- 4a:66:e6:89:24:24:6f:91:3e:4a:50:63:42:47:e3:
- 67:10:71:ac:f3:81:82:3b:9f:56:7c:6a:36:a6:87:
- be:d5:e6:03:4b:bb:d3:c8:90:6a:6b:1d:4c:16:a1:
- c3:98:58:f7:39:de:90:27:df:40:c5:03:10:b2:b4:
- 1b:cb:28:5d:80:a4:83:60:f2:c0:ac:f5:1f:81:4d:
- 31:84:6f:04:96:7b:26:bf:b6:55:78:33:06:23:65:
- 1c:bc:65:ac:a3:31:27:49:38:ce:92:73:87:a7:b4:
- 53:4b:85:71:29:7a:f5:09:fc:03:9a:90:56:14:b1:
- b7:89:03:c4:61:b6:49:fc:3d:30:62:84:a2:46:66:
- 22:37:32:fd:a3:62:bb:99:62:53:ca:fc:1f:e9:29:
- c6:d4:8c:09:6f:02:d5:de:7c:de:12:d8:00:dd:df:
- 04:94:d4:36:b5:f6:d9:fe:a7:ff:46:e7:07:da:3e:
- d0:e3:ea:90:4c:7c:b7:ff:bc:85:99:d5:1f:46:f5:
- ac:57:e9:09:03:61:8c:0b:9d:a8:82:9c:17:43:27:
- de:80:d2:59:e3:ca:ed:23:41:1a:32:48:83:ca:bd:
- 8e:cb:bf:9c:f0:03:7d:e0:41:ce:72:05:27:59:3c:
- 10:5b
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- BA:1F:26:2C:E0:77:F2:16:78:6D:83:49:A1:30:9E:B4:AB:10:6A:22
- X509v3 Authority Key Identifier:
- keyid:BA:1F:26:2C:E0:77:F2:16:78:6D:83:49:A1:30:9E:B4:AB:10:6A:22
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 70:b4:15:ff:b7:d9:b7:51:10:ce:fa:e5:61:0e:f6:c7:b6:d7:
- be:59:ed:07:d5:77:95:e1:ef:3f:80:9e:99:d2:2c:1b:9a:a7:
- 35:1c:ec:84:9e:ce:27:52:3a:2c:00:06:4d:60:62:aa:4b:a7:
- 61:32:e3:64:f1:96:c7:d2:3f:fe:78:bc:f4:da:76:f9:44:d2:
- 9b:1a:94:1f:44:9a:49:c9:c0:1c:de:a9:63:d0:23:4a:c3:fb:
- 60:45:76:dd:12:ef:c1:95:4f:8e:bd:48:56:b8:f9:74:e2:5c:
- ae:90:5a:19:9e:90:13:0b:97:ff:cd:a9:45:54:68:aa:fa:f6:
- ea:3f:2e:fa:2a:40:48:42:cd:10:cc:c8:e6:a4:34:9d:8f:1c:
- 74:55:58:b2:99:cf:35:40:23:bf:90:5f:4c:60:30:5f:a0:b4:
- d6:0f:4f:42:03:71:82:f7:d3:f5:72:bb:a8:cf:24:ab:10:7e:
- c5:e1:84:a9:7e:25:b1:8a:80:db:ae:0e:49:f1:03:fb:11:1a:
- 63:58:42:7f:73:9b:f3:f8:d6:ae:81:0b:59:ca:98:ec:3d:9c:
- 85:6b:7d:70:e8:c2:04:47:f0:b6:7e:4a:96:70:c9:a8:11:b7:
- 23:54:55:d3:57:c3:7e:47:66:35:91:26:56:fd:37:14:35:a4:
- 6b:29:38:ee
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9CRWLLxfMHZYqbTNSR
-SmbmiSQkb5E+SlBjQkfjZxBxrPOBgjufVnxqNqaHvtXmA0u708iQamsdTBahw5hY
-9znekCffQMUDELK0G8soXYCkg2DywKz1H4FNMYRvBJZ7Jr+2VXgzBiNlHLxlrKMx
-J0k4zpJzh6e0U0uFcSl69Qn8A5qQVhSxt4kDxGG2Sfw9MGKEokZmIjcy/aNiu5li
-U8r8H+kpxtSMCW8C1d583hLYAN3fBJTUNrX22f6n/0bnB9o+0OPqkEx8t/+8hZnV
-H0b1rFfpCQNhjAudqIKcF0Mn3oDSWePK7SNBGjJIg8q9jsu/nPADfeBBznIFJ1k8
-EFsCAwEAAaOByzCByDAdBgNVHQ4EFgQUuh8mLOB38hZ4bYNJoTCetKsQaiIwHwYD
-VR0jBBgwFoAUuh8mLOB38hZ4bYNJoTCetKsQaiIwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBwtBX/t9m3
-URDO+uVhDvbHtte+We0H1XeV4e8/gJ6Z0iwbmqc1HOyEns4nUjosAAZNYGKqS6dh
-MuNk8ZbH0j/+eLz02nb5RNKbGpQfRJpJycAc3qlj0CNKw/tgRXbdEu/BlU+OvUhW
-uPl04lyukFoZnpATC5f/zalFVGiq+vbqPy76KkBIQs0QzMjmpDSdjxx0VViymc81
-QCO/kF9MYDBfoLTWD09CA3GC99P1cruozySrEH7F4YSpfiWxioDbrg5J8QP7ERpj
-WEJ/c5vz+NaugQtZypjsPZyFa31w6MIER/C2fkqWcMmoEbcjVFXTV8N+R2Y1kSZW
-/TcUNaRrKTju
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem
deleted file mode 100644
index dffed19..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem
+++ /dev/null
@@ -1,284 +0,0 @@
-[Created by: generate-intermediary-unknown-non-critical-extension.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has an unknown X.509v3 extension that is marked as non-critical. Verification
-is expected to succeed because although unrecognized, the extension is not
-critical.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:e2:f4:a3:48:79:59:87:08:4d:c1:84:b4:97:67:
- 5d:f6:24:2b:74:f1:f0:1a:13:e0:a5:28:30:1f:c6:
- 04:fc:ce:9b:73:4a:95:1f:56:a0:9d:26:07:97:8f:
- 7c:06:c7:a2:fb:5f:85:41:d3:bd:50:83:61:72:5e:
- a0:f9:e1:39:c6:ae:77:05:8c:f7:8e:6f:ae:5d:14:
- 69:97:12:4a:c7:40:de:e7:ab:7a:83:9b:b3:e8:15:
- 90:ab:52:3a:ee:c4:36:9b:58:eb:51:c3:1d:c5:c8:
- eb:f7:65:e9:15:56:93:e4:55:37:97:29:f1:88:da:
- fc:1c:53:5f:24:07:f9:3e:14:86:b3:50:c6:94:06:
- 8e:b1:b1:ab:32:d4:f3:98:ee:f8:42:ed:65:43:36:
- bb:4f:59:a0:4d:77:a5:9e:a9:c2:40:40:df:cc:3c:
- d7:dc:56:bd:d4:2c:fe:b5:20:d6:a8:74:cd:99:4f:
- bf:eb:71:0b:20:95:f2:c3:21:92:42:d7:e6:ff:5b:
- 87:0b:c2:89:5c:e7:d6:30:77:cd:8d:c7:92:0d:74:
- 6f:88:d6:81:49:e8:f6:25:de:6d:51:3e:db:cd:e4:
- 91:99:98:5a:ff:7a:61:46:da:7a:ec:9b:22:a5:5f:
- 16:6e:cd:7a:ec:3b:b0:aa:1b:af:65:a6:3a:85:fc:
- a6:e9
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 82:EC:E0:87:C2:A2:2A:EF:4B:E0:B5:F8:75:6A:18:32:51:B4:0D:54
- X509v3 Authority Key Identifier:
- keyid:60:BD:98:38:CE:C3:01:40:CA:86:14:C7:F4:E4:D5:72:BA:ED:80:31
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 89:1e:64:8c:61:b5:87:aa:76:6d:f6:ef:87:b6:ca:3b:0f:47:
- a9:bb:9a:91:7f:7a:d8:65:e9:c7:b1:1a:ea:13:fb:9c:79:5e:
- df:33:f5:d9:bc:f1:f8:89:bc:59:31:27:c2:2d:3e:47:e9:13:
- 27:65:c8:cb:ba:e1:da:51:60:7a:93:aa:28:92:d5:81:89:09:
- b7:22:e7:4b:4f:82:0e:fb:2f:62:19:b4:ea:f5:47:34:fd:60:
- 7e:4c:e6:be:08:8e:f8:fd:89:62:ff:97:89:27:69:37:7f:e3:
- 76:ea:72:30:ca:de:73:bb:c7:65:1c:6d:5e:ab:f8:ba:da:57:
- 7d:28:1f:6a:64:76:aa:89:6b:ac:57:a3:e9:e2:c1:ca:f8:4b:
- 7c:0b:21:57:cc:71:c8:9b:7f:25:8f:09:61:6e:5c:a8:9b:0b:
- 79:98:7a:1e:82:95:22:fd:9e:9c:cd:20:73:0d:0e:d9:21:cb:
- 67:3d:e9:1e:24:ae:4f:84:1f:de:3e:27:ee:54:41:66:71:9c:
- b6:6b:08:7a:16:e7:c1:c7:7a:71:24:ed:c0:2a:d9:fd:2b:ff:
- e6:41:c9:63:93:90:52:35:21:4a:72:be:f9:9c:27:49:0d:b7:
- 01:af:cb:5f:53:ee:ef:58:69:16:ba:e6:5b:12:45:e0:d4:3d:
- ea:58:fe:a5
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9KNI
-eVmHCE3BhLSXZ132JCt08fAaE+ClKDAfxgT8zptzSpUfVqCdJgeXj3wGx6L7X4VB
-071Qg2FyXqD54TnGrncFjPeOb65dFGmXEkrHQN7nq3qDm7PoFZCrUjruxDabWOtR
-wx3FyOv3ZekVVpPkVTeXKfGI2vwcU18kB/k+FIazUMaUBo6xsasy1POY7vhC7WVD
-NrtPWaBNd6WeqcJAQN/MPNfcVr3ULP61INaodM2ZT7/rcQsglfLDIZJC1+b/W4cL
-wolc59Ywd82Nx5INdG+I1oFJ6PYl3m1RPtvN5JGZmFr/emFG2nrsmyKlXxZuzXrs
-O7CqG69lpjqF/KbpAgMBAAGjgekwgeYwHQYDVR0OBBYEFILs4IfCoirvS+C1+HVq
-GDJRtA1UMB8GA1UdIwQYMBaAFGC9mDjOwwFAyoYUx/Tk1XK67YAxMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAiR5kjGG1h6p2bfbvh7bK
-Ow9HqbuakX962GXpx7Ea6hP7nHle3zP12bzx+Im8WTEnwi0+R+kTJ2XIy7rh2lFg
-epOqKJLVgYkJtyLnS0+CDvsvYhm06vVHNP1gfkzmvgiO+P2JYv+XiSdpN3/jdupy
-MMrec7vHZRxtXqv4utpXfSgfamR2qolrrFej6eLByvhLfAshV8xxyJt/JY8JYW5c
-qJsLeZh6HoKVIv2enM0gcw0O2SHLZz3pHiSuT4Qf3j4n7lRBZnGctmsIehbnwcd6
-cSTtwCrZ/Sv/5kHJY5OQUjUhSnK++ZwnSQ23Aa/LX1Pu71hpFrrmWxJF4NQ96lj+
-pQ==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:de:7c:cd:1c:92:c3:9a:ff:be:f3:03:37:c7:6a:
- 3a:d4:ac:56:50:3a:b1:17:0d:73:09:ef:d9:16:4b:
- 38:de:a4:82:46:61:a8:ed:f8:b9:a0:21:7e:3c:26:
- f6:a8:c5:d3:34:99:9c:58:c6:e1:de:f6:1c:eb:49:
- a3:34:65:71:29:95:3a:2e:b4:5f:33:dd:2a:0b:5f:
- 7a:e0:47:3f:bc:00:15:a1:24:26:9f:c6:c7:d7:eb:
- e3:f3:37:19:d5:30:48:f2:7d:c5:77:11:cc:cc:17:
- 7e:91:c4:20:f8:a6:c3:28:00:ec:23:53:40:7b:0e:
- dc:14:6e:57:a5:ca:52:9f:2b:3b:34:ea:e4:ae:5c:
- ed:b4:8d:25:9a:08:00:26:d0:e4:34:d2:94:36:8c:
- e1:df:ef:31:f8:18:5b:ed:80:57:44:77:94:a2:fa:
- ae:5c:e0:ea:e1:30:e3:24:03:da:7c:5b:66:90:c7:
- 01:f1:f8:8d:ca:bc:d7:e3:25:35:28:3c:f6:f4:83:
- 13:2a:73:d0:f7:c2:69:11:b1:ed:43:6d:71:28:7e:
- 43:8d:f5:f0:78:e2:5a:31:39:38:ae:92:05:29:e0:
- 1f:04:6f:9d:a0:a1:b4:29:80:af:87:1c:0c:e5:7d:
- 6d:11:59:63:43:af:7f:a4:32:fa:0a:d1:7e:88:86:
- cd:61
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 60:BD:98:38:CE:C3:01:40:CA:86:14:C7:F4:E4:D5:72:BA:ED:80:31
- X509v3 Authority Key Identifier:
- keyid:B2:41:26:7A:EF:3A:C9:BF:FE:6A:E7:7F:04:60:B0:34:62:08:E3:93
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- 1.2.3.4:
- ....
- Signature Algorithm: sha256WithRSAEncryption
- 68:5c:74:6c:fd:93:14:86:9f:d9:3a:4b:67:1d:6e:2b:78:2f:
- 89:b4:b0:76:ac:3f:aa:ea:4a:ea:42:04:40:96:09:1a:b7:b7:
- 01:93:fb:55:0d:44:30:0e:16:b3:e8:bb:b2:77:17:79:93:37:
- 17:b5:62:c9:5b:15:76:90:2d:74:3d:1f:7e:59:61:59:e2:61:
- 81:18:46:6b:94:42:be:be:d3:1e:37:16:68:49:db:9e:f0:f1:
- 24:bb:e0:00:e0:57:e0:27:3f:59:e9:a8:92:31:80:2a:7a:cc:
- b1:47:5b:8d:3b:55:f5:5a:f0:9a:56:90:1a:8e:d2:ab:51:e2:
- 15:ca:9f:cb:a9:ec:10:f1:5d:58:72:84:75:63:bd:a7:7c:bf:
- 5b:80:65:d6:97:77:e2:8a:89:8a:ea:5b:1f:da:55:5e:7b:33:
- 37:e2:60:09:02:13:89:a3:ca:0f:bf:17:8e:47:fb:c1:8d:a8:
- fb:9f:20:64:a6:a4:a0:86:da:fa:7f:6a:e1:50:10:41:9b:21:
- e6:8e:9f:29:9c:cc:0b:83:a3:65:47:2a:15:8b:47:6a:48:89:
- e4:2c:97:d7:81:51:bb:bb:e0:db:22:e2:be:bf:53:63:26:77:
- 08:c3:b6:04:c7:9b:9c:03:91:00:63:bd:70:cb:e2:6c:c8:a7:
- 2c:5b:f6:28
------BEGIN CERTIFICATE-----
-MIIDejCCAmKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nzNHJLD
-mv++8wM3x2o61KxWUDqxFw1zCe/ZFks43qSCRmGo7fi5oCF+PCb2qMXTNJmcWMbh
-3vYc60mjNGVxKZU6LrRfM90qC1964Ec/vAAVoSQmn8bH1+vj8zcZ1TBI8n3FdxHM
-zBd+kcQg+KbDKADsI1NAew7cFG5XpcpSnys7NOrkrlzttI0lmggAJtDkNNKUNozh
-3+8x+Bhb7YBXRHeUovquXODq4TDjJAPafFtmkMcB8fiNyrzX4yU1KDz29IMTKnPQ
-98JpEbHtQ21xKH5DjfXweOJaMTk4rpIFKeAfBG+doKG0KYCvhxwM5X1tEVljQ69/
-pDL6CtF+iIbNYQIDAQABo4HYMIHVMB0GA1UdDgQWBBRgvZg4zsMBQMqGFMf05NVy
-uu2AMTAfBgNVHSMEGDAWgBSyQSZ67zrJv/5q538EYLA0YgjjkzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wCwYDKgMEBAQBAgMEMA0GCSqG
-SIb3DQEBCwUAA4IBAQBoXHRs/ZMUhp/ZOktnHW4reC+JtLB2rD+q6krqQgRAlgka
-t7cBk/tVDUQwDhaz6Luydxd5kzcXtWLJWxV2kC10PR9+WWFZ4mGBGEZrlEK+vtMe
-NxZoSdue8PEku+AA4FfgJz9Z6aiSMYAqesyxR1uNO1X1WvCaVpAajtKrUeIVyp/L
-qewQ8V1YcoR1Y72nfL9bgGXWl3fiiomK6lsf2lVeezM34mAJAhOJo8oPvxeOR/vB
-jaj7nyBkpqSghtr6f2rhUBBBmyHmjp8pnMwLg6NlRyoVi0dqSInkLJfXgVG7u+Db
-IuK+v1NjJncIw7YEx5ucA5EAY71wy+JsyKcsW/Yo
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:a8:e9:07:4a:9e:20:9a:c5:14:9a:16:49:17:bf:
- 0b:c1:7d:b6:91:54:cd:60:e6:df:bf:81:e1:bb:24:
- 47:df:ea:c8:27:93:bb:49:b7:b7:e6:48:ff:11:43:
- c1:8d:cb:54:f8:0d:49:05:e7:4b:a9:0d:cb:79:b8:
- 49:26:6b:1c:ad:7d:2c:e5:a3:0a:1b:ad:99:9c:d4:
- c2:d6:2c:de:ae:74:42:b7:06:ca:e0:57:06:e6:46:
- 5a:80:70:6f:f7:0c:76:c5:8f:de:cc:35:85:bf:f5:
- 79:29:63:79:22:fd:c0:48:1e:a0:4f:86:6b:2f:07:
- 72:55:1f:96:dc:81:c7:19:8d:bf:7f:56:21:fc:05:
- 6e:1a:3d:6d:f2:a7:37:6f:8d:c9:f5:5e:79:3a:89:
- 6b:b5:6b:d4:14:eb:c4:de:3d:68:8c:e6:f8:96:e3:
- b3:cb:73:09:6a:d1:8d:46:9e:c6:9f:1d:01:30:69:
- ea:a4:2a:3c:90:fe:40:92:9d:61:81:88:96:67:cb:
- ae:4c:f5:3d:31:37:8b:31:0a:a0:cf:87:80:f7:50:
- eb:93:32:bf:64:13:3e:0a:d8:98:80:4b:b7:b1:a9:
- 87:fe:b8:d3:d2:3b:a2:7d:20:cb:ff:6b:4e:67:88:
- 52:03:4c:a2:2a:81:0d:63:4e:d0:f8:2e:f6:38:c9:
- 9b:03
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- B2:41:26:7A:EF:3A:C9:BF:FE:6A:E7:7F:04:60:B0:34:62:08:E3:93
- X509v3 Authority Key Identifier:
- keyid:B2:41:26:7A:EF:3A:C9:BF:FE:6A:E7:7F:04:60:B0:34:62:08:E3:93
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 91:be:af:fa:3e:50:a9:b4:7e:d5:c6:a9:91:2f:d3:63:11:bc:
- 07:35:35:31:76:8e:69:e4:39:7d:82:65:be:6b:b0:9e:42:ce:
- 0c:02:5a:0d:73:93:ce:89:c1:c7:27:cb:19:26:a0:77:85:53:
- b5:1e:a8:60:9f:0c:b9:b4:fa:34:9f:4f:3a:0e:d6:ab:d3:a6:
- 47:32:d8:ec:c9:80:90:2e:7c:fa:5f:16:96:f6:ba:fd:13:10:
- 73:ec:3e:b0:3c:f5:7a:e1:8f:e3:32:59:d2:f1:3c:36:8c:92:
- 21:a1:29:21:39:1c:08:b1:f6:85:35:ab:36:97:56:fc:4c:85:
- 11:bc:69:72:05:f6:21:b8:85:bb:1e:cf:69:1a:3c:98:dd:93:
- 58:53:e0:f1:ce:d0:2a:68:d9:b3:b9:26:71:d9:61:01:a8:cd:
- bb:53:48:06:a5:c4:3f:d6:3b:aa:01:4d:01:fc:f2:79:96:a9:
- 13:d3:ba:25:2c:2a:3d:e5:bd:e1:f7:ae:f9:3a:ea:59:77:8c:
- 27:3c:f5:a4:01:f8:08:97:1b:28:1a:81:cb:ce:36:6b:2f:1e:
- 41:05:f6:d6:d9:4d:84:87:16:61:e4:34:4c:06:7e:a8:2b:2b:
- b5:a1:93:de:ca:52:f7:74:d9:ce:f7:f7:2b:0f:5d:f8:b6:9f:
- 93:34:b2:00
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjpB0qeIJrFFJoWSRe/
-C8F9tpFUzWDm37+B4bskR9/qyCeTu0m3t+ZI/xFDwY3LVPgNSQXnS6kNy3m4SSZr
-HK19LOWjChutmZzUwtYs3q50QrcGyuBXBuZGWoBwb/cMdsWP3sw1hb/1eSljeSL9
-wEgeoE+Gay8HclUfltyBxxmNv39WIfwFbho9bfKnN2+NyfVeeTqJa7Vr1BTrxN49
-aIzm+Jbjs8tzCWrRjUaexp8dATBp6qQqPJD+QJKdYYGIlmfLrkz1PTE3izEKoM+H
-gPdQ65Myv2QTPgrYmIBLt7Gph/6409I7on0gy/9rTmeIUgNMoiqBDWNO0Pgu9jjJ
-mwMCAwEAAaOByzCByDAdBgNVHQ4EFgQUskEmeu86yb/+aud/BGCwNGII45MwHwYD
-VR0jBBgwFoAUskEmeu86yb/+aud/BGCwNGII45MwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCRvq/6PlCp
-tH7VxqmRL9NjEbwHNTUxdo5p5Dl9gmW+a7CeQs4MAloNc5POicHHJ8sZJqB3hVO1
-Hqhgnwy5tPo0n086Dtar06ZHMtjsyYCQLnz6XxaW9rr9ExBz7D6wPPV64Y/jMlnS
-8Tw2jJIhoSkhORwIsfaFNas2l1b8TIURvGlyBfYhuIW7Hs9pGjyY3ZNYU+DxztAq
-aNmzuSZx2WEBqM27U0gGpcQ/1juqAU0B/PJ5lqkT07olLCo95b3h9675OupZd4wn
-PPWkAfgIlxsoGoHLzjZrLx5BBfbW2U2EhxZh5DRMBn6oKyu1oZPeylL3dNnO9/cr
-D134tp+TNLIA
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-U1VDQ0VTUw==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem
new file mode 100644
index 0000000..a2a73ca
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem
@@ -0,0 +1,281 @@
+[Created by: generate-intermediate-basic-constraints-ca-false.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+has a basic constraints extension that indicates it is NOT a CA. Verification
+is expected to fail.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:b7:1c:6d:3b:54:28:d0:fa:14:25:fe:22:77:55:
+ 16:d3:25:34:af:cd:e7:5a:8a:38:4b:82:99:95:6d:
+ e1:99:f7:f3:1d:53:2d:8e:90:b2:d5:4e:7e:e7:0c:
+ 9d:73:98:5e:3b:ed:bc:4f:fe:c7:38:f7:8a:ce:b7:
+ 08:0f:bd:78:18:9a:ec:f2:21:9e:25:ba:bc:24:3f:
+ 22:73:60:f7:2c:fa:9a:e9:aa:f8:75:65:4e:af:4e:
+ d9:01:f3:27:3e:c8:f5:b5:27:98:bd:a2:f6:34:ad:
+ 70:c8:5e:fb:3f:87:08:dc:d0:a6:30:c1:35:ee:95:
+ 7b:f2:7a:59:03:7e:03:39:fb:51:be:b3:13:54:cc:
+ 15:68:e1:b7:97:40:cf:e4:ff:84:a2:10:75:6d:d5:
+ 29:f8:91:8d:38:0a:92:c6:34:89:89:c2:d4:49:84:
+ 35:94:f9:08:ad:8c:44:10:3e:49:40:21:53:bb:6e:
+ 1b:20:1c:ce:e3:c8:a7:c7:e9:ab:4f:3f:f2:21:47:
+ 3a:d5:0a:59:6f:a9:59:42:ff:c5:7c:6a:c5:fc:79:
+ 29:05:a0:07:47:64:39:d0:bc:a1:86:64:c8:4c:08:
+ ec:f2:03:47:7c:00:ce:02:ff:5a:02:59:d3:ee:2c:
+ db:35:32:e9:24:a2:c2:f8:50:c8:3e:10:b1:dd:0a:
+ 5d:1b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 03:34:C9:78:9C:53:67:7A:2C:96:D9:3F:63:F2:18:3D:49:A8:44:87
+ X509v3 Authority Key Identifier:
+ keyid:9C:93:40:54:48:97:2B:0C:3B:AF:CE:5C:79:97:26:EC:32:33:4C:FB
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 72:78:37:46:b3:e3:d4:01:73:3a:59:1c:5f:13:27:10:46:dd:
+ ec:b1:9e:7c:6d:d8:a7:ac:b1:62:36:57:2a:44:17:d4:64:22:
+ 18:67:ae:84:0b:6b:53:49:76:15:a3:d3:7e:69:ae:d4:54:5d:
+ 46:11:0a:15:1c:ee:91:ab:da:6a:88:24:b0:ae:21:ee:a2:e6:
+ de:c4:cb:79:93:62:18:7d:4e:ee:d8:83:7d:65:63:f3:9c:08:
+ ca:28:5c:af:51:9f:36:b2:c3:06:3c:ec:cf:35:84:c5:9e:bc:
+ 75:03:be:e5:23:4e:7f:67:7d:86:14:df:21:4d:5e:d3:b7:86:
+ d6:14:cd:84:3a:3d:29:4f:de:e5:db:ac:96:a9:58:cf:02:e4:
+ c4:b1:26:08:34:f5:a4:3f:47:a1:0f:b3:0b:69:29:78:50:ba:
+ a9:eb:4a:44:fc:e7:bf:e9:ce:ba:8b:dc:b9:6a:25:c6:11:32:
+ 24:a0:59:7c:6e:4d:6c:cf:1b:f2:06:0f:5f:d7:4d:35:b1:f9:
+ a2:f7:c4:b0:b4:bb:ab:58:b5:ba:09:39:0d:50:d9:c2:a4:eb:
+ d9:79:23:40:ed:51:97:75:de:f5:14:c0:dc:ea:9f:6a:80:70:
+ ef:4e:b8:52:26:46:fc:70:e8:83:9c:2c:e8:63:b0:7f:81:a3:
+ 4e:91:35:02
+-----BEGIN CERTIFICATE-----
+MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HG07
+VCjQ+hQl/iJ3VRbTJTSvzedaijhLgpmVbeGZ9/MdUy2OkLLVTn7nDJ1zmF477bxP
+/sc494rOtwgPvXgYmuzyIZ4lurwkPyJzYPcs+prpqvh1ZU6vTtkB8yc+yPW1J5i9
+ovY0rXDIXvs/hwjc0KYwwTXulXvyelkDfgM5+1G+sxNUzBVo4beXQM/k/4SiEHVt
+1Sn4kY04CpLGNImJwtRJhDWU+QitjEQQPklAIVO7bhsgHM7jyKfH6atPP/IhRzrV
+CllvqVlC/8V8asX8eSkFoAdHZDnQvKGGZMhMCOzyA0d8AM4C/1oCWdPuLNs1Mukk
+osL4UMg+ELHdCl0bAgMBAAGjgekwgeYwHQYDVR0OBBYEFAM0yXicU2d6LJbZP2Py
+GD1JqESHMB8GA1UdIwQYMBaAFJyTQFRIlysMO6/OXHmXJuwyM0z7MD8GCCsGAQUF
+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAcng3RrPj1AFzOlkcXxMn
+EEbd7LGefG3Yp6yxYjZXKkQX1GQiGGeuhAtrU0l2FaPTfmmu1FRdRhEKFRzukava
+aogksK4h7qLm3sTLeZNiGH1O7tiDfWVj85wIyihcr1GfNrLDBjzszzWExZ68dQO+
+5SNOf2d9hhTfIU1e07eG1hTNhDo9KU/e5duslqlYzwLkxLEmCDT1pD9HoQ+zC2kp
+eFC6qetKRPznv+nOuovcuWolxhEyJKBZfG5NbM8b8gYPX9dNNbH5ovfEsLS7q1i1
+ugk5DVDZwqTr2XkjQO1Rl3Xe9RTA3OqfaoBw7064UiZG/HDog5ws6GOwf4GjTpE1
+Ag==
+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c6:22:75:92:c4:7c:6f:77:4d:46:f7:17:84:1b:
+ e2:08:1f:ff:71:7e:4d:6d:a4:e7:0f:58:46:84:61:
+ 22:02:70:4e:b8:45:3a:e2:10:d1:cf:ff:91:7c:12:
+ 8e:7d:19:ab:0a:46:ac:1b:d6:d6:05:b6:99:43:9b:
+ ab:e5:cf:ee:62:e9:94:21:84:72:5b:63:6e:5a:e1:
+ 25:42:c3:b7:ee:31:5f:e0:e7:69:19:01:a2:d5:54:
+ 70:f8:aa:aa:24:5b:3b:4d:2b:cd:2f:e4:2a:a4:be:
+ ba:2f:ab:a2:b6:f8:84:71:f3:23:bc:12:68:26:1e:
+ 49:d0:87:3e:46:46:33:47:70:f2:42:d4:3f:ba:9c:
+ 89:7d:4f:6e:a5:35:cf:d9:46:a8:63:c4:35:4a:e7:
+ 4f:f2:e0:51:90:8e:08:ed:2e:ae:18:ac:5d:16:44:
+ 25:32:fa:1b:3c:14:e9:37:69:9f:72:48:01:a5:1b:
+ f3:e1:e7:75:ec:ca:92:83:48:a4:67:e1:8d:c1:dd:
+ 15:02:e4:4a:82:93:d3:f3:27:9e:66:ce:a8:3a:17:
+ d2:c6:a7:08:31:ba:d2:e8:e7:fa:53:b6:4f:09:d8:
+ 7e:e4:53:b2:f1:03:d9:c4:31:0c:6d:32:a0:9d:08:
+ d3:c4:bb:db:45:11:68:80:ba:f8:52:dc:19:9e:67:
+ 68:99
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 9C:93:40:54:48:97:2B:0C:3B:AF:CE:5C:79:97:26:EC:32:33:4C:FB
+ X509v3 Authority Key Identifier:
+ keyid:6F:25:CD:4D:1F:09:D0:5A:D5:3A:23:08:72:F1:9D:08:8A:1D:CA:34
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:FALSE
+ Signature Algorithm: sha256WithRSAEncryption
+ 14:4a:f9:6f:29:a6:a1:1b:2b:d7:3d:5d:14:83:05:1a:46:ac:
+ 73:64:d5:b7:09:87:0f:08:1d:b2:ac:1c:db:79:05:e4:62:fa:
+ 37:7d:78:82:c9:7c:44:f3:01:9a:a6:31:78:ac:af:1e:53:9e:
+ 84:ab:95:f0:2e:48:62:d6:3e:a3:95:35:1e:18:c6:9e:0d:15:
+ 9e:94:0f:bd:8c:1b:f6:de:48:d8:cd:7c:9b:23:4d:bb:d0:f6:
+ df:bb:27:a6:55:82:07:3e:27:2e:80:6e:b3:67:06:67:6d:b6:
+ f8:5f:60:58:ab:d8:9d:f6:4b:6b:a8:9a:be:9e:c3:69:e8:15:
+ 00:61:9f:b2:24:6d:bd:d5:e3:7e:c7:83:66:4e:12:58:b7:c1:
+ c1:0e:de:1a:dc:ae:4d:19:78:b8:6c:48:fb:5b:fc:a2:86:0b:
+ 60:77:d7:cb:d6:e6:c9:13:5f:cf:d6:98:6c:ab:9e:9b:9d:99:
+ 4c:87:91:3e:d1:4a:ad:ef:84:f6:45:cc:da:99:fa:ff:57:df:
+ be:44:70:f9:0c:38:63:c0:31:44:45:05:46:9a:63:db:dd:a0:
+ f5:dc:1b:f8:51:d8:30:e5:47:23:29:d1:79:a5:e6:1e:87:2b:
+ c3:f8:0e:fe:de:13:bb:cd:a5:14:f3:d8:0b:34:73:47:68:07:
+ 8a:ac:e0:65
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c4:3e:31:36:4f:df:d0:36:0e:06:5c:89:2c:c8:
+ 01:c6:18:a4:e7:1f:82:11:af:30:66:28:7c:c3:14:
+ b2:ff:a4:6c:6a:c0:f4:ae:58:82:5f:91:e6:78:19:
+ d7:d2:87:5c:9e:75:3a:af:c0:fd:e8:18:c4:81:b4:
+ 51:be:f7:c3:0d:74:d7:8a:53:01:28:c9:da:93:f4:
+ a6:da:51:6a:d1:23:78:1b:ab:17:46:e6:bb:71:4e:
+ 33:8b:9d:e1:75:7e:56:3b:00:02:74:fe:1f:49:01:
+ 81:0f:59:05:d6:2a:a0:48:db:9f:fc:29:6e:77:6e:
+ e3:78:63:4d:12:9f:f5:54:63:a5:1e:b2:c4:83:62:
+ ac:79:76:bd:80:d9:4c:dd:99:44:91:c3:31:fd:0f:
+ 3a:d8:13:6d:3c:4f:98:5b:50:e0:1a:84:b5:3b:e2:
+ 0f:52:89:7f:b0:de:97:e2:f9:e5:0b:2c:c4:61:9a:
+ f3:4b:15:e3:f2:a3:30:44:b0:d4:a6:1a:dd:60:c0:
+ 85:21:30:ed:b5:1e:6f:9f:50:db:ad:42:a6:3a:04:
+ 7c:3f:ae:94:ed:eb:43:2a:d9:85:c8:1d:72:f4:61:
+ d5:27:7a:a4:62:93:56:37:4b:4e:d5:44:02:f0:29:
+ 1f:70:2c:76:fb:2f:5b:d4:dc:86:09:03:fe:d9:13:
+ 5f:27
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 6F:25:CD:4D:1F:09:D0:5A:D5:3A:23:08:72:F1:9D:08:8A:1D:CA:34
+ X509v3 Authority Key Identifier:
+ keyid:6F:25:CD:4D:1F:09:D0:5A:D5:3A:23:08:72:F1:9D:08:8A:1D:CA:34
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 5e:dc:6f:dc:d9:7f:6f:75:c7:c8:27:62:2f:02:7c:c2:26:35:
+ 82:6c:5e:93:88:34:9b:e2:fc:8a:89:9e:0a:a0:89:aa:08:e4:
+ 1c:59:38:4b:c7:5c:ba:92:d5:ce:1a:b0:30:25:ba:69:c9:52:
+ 6e:29:78:31:d6:49:c5:b3:64:e3:49:28:2d:3c:41:8a:10:c4:
+ 77:f1:a8:77:37:50:52:ec:ed:bb:1a:61:3f:29:ad:3e:1a:56:
+ 06:48:a0:89:17:91:77:67:bc:4d:68:9a:ac:a8:a8:ad:4a:05:
+ 2a:33:18:7a:5e:b9:32:f5:c4:7b:c0:23:90:fb:78:9a:0a:18:
+ f3:9b:46:f1:3c:c5:f0:3c:1b:06:56:39:3b:ba:da:5e:7e:5f:
+ 42:47:bc:fd:a6:bb:64:2d:db:9a:5b:60:61:e6:9d:a6:ac:c9:
+ 24:20:ff:cd:b7:5d:ee:8e:04:92:a1:10:34:26:48:b2:b6:3a:
+ c7:9a:66:2e:f0:64:f0:61:64:ef:28:85:c9:94:46:6b:fb:c5:
+ 0f:b9:f5:ef:51:5a:61:be:27:39:00:4c:00:7f:8a:49:14:7b:
+ 1a:40:e5:e7:fe:d6:d0:a7:df:33:5c:86:1e:e5:4a:64:ff:e8:
+ 8f:1f:9e:3c:d8:a9:a2:d2:0b:c3:53:b7:cf:f6:d1:92:84:be:
+ d9:e6:67:06
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem
new file mode 100644
index 0000000..60d7b29
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem
@@ -0,0 +1,282 @@
+[Created by: generate-intermediate-basic-constraints-not-critical.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+has a basic constraints extension but does not mark it as critical.
+Verification is expected to succeed, since although not critical, the
+basicConstraints indicates CA=true as expected.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:9f:2f:38:1d:84:e6:1c:ed:c4:47:2b:63:0b:41:
+ 73:dd:fe:74:c7:1a:d2:c8:7f:c1:90:ae:bf:6b:82:
+ a1:17:93:80:a1:92:39:52:66:81:93:90:e6:15:d7:
+ d6:bc:a4:03:eb:fc:50:b2:dc:f6:29:f7:a9:32:b6:
+ 23:6c:d4:d0:3e:d9:56:6e:9d:a0:91:10:2c:8a:1e:
+ 93:8d:38:37:ef:3e:7d:7a:de:15:07:c2:6c:62:1c:
+ 76:81:ce:a7:9e:be:44:57:1b:77:77:ed:fa:2f:e1:
+ c5:53:83:65:74:c6:11:3c:f2:4d:84:89:1d:3b:54:
+ 93:5e:38:44:f1:d4:03:ad:03:69:fd:eb:da:02:aa:
+ cf:6f:04:ea:22:0a:3f:a1:68:bc:56:a4:51:aa:93:
+ 8a:f2:22:47:42:04:98:48:68:40:2e:f6:a6:8d:38:
+ 84:ba:1a:56:0c:bc:53:85:77:b4:ba:e2:03:ac:10:
+ 0f:1d:52:64:ad:f5:92:20:38:dc:fa:dd:8b:c6:8d:
+ 96:30:ea:72:e2:aa:ff:5d:c3:fc:dc:1a:43:c6:da:
+ 48:56:f6:4c:d4:8d:00:da:28:5f:01:23:9b:b1:eb:
+ b7:92:b7:35:43:5e:c0:21:96:22:b6:bd:c6:5f:1b:
+ 0b:58:88:44:a5:ee:90:f4:e6:d0:94:41:2c:44:8c:
+ af:e9
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 05:31:5F:95:5B:3C:43:02:74:27:C6:2E:06:50:92:FF:5C:54:AE:73
+ X509v3 Authority Key Identifier:
+ keyid:77:27:6B:15:A8:06:86:AD:0D:67:E0:D6:5B:82:3A:F8:6B:00:A3:A7
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 00:ba:cd:3c:7b:0f:eb:b3:b1:5f:5b:0a:83:12:4d:d6:28:7e:
+ ff:d9:65:2c:23:f8:d2:68:cc:25:14:0c:6e:9b:37:bb:72:66:
+ 13:54:ff:b9:2f:f4:c8:9e:77:5b:31:2b:93:e6:94:cf:e9:bd:
+ 43:1a:e8:f6:c3:c5:61:fa:ff:a7:72:09:ba:2b:08:02:e4:a5:
+ 62:24:b1:b1:3b:0a:c0:bb:72:19:af:73:2d:9a:66:8e:f7:0f:
+ 30:9f:49:0f:aa:83:87:ed:45:9e:75:3a:50:32:d6:c4:cf:20:
+ a0:31:73:16:98:69:e9:d7:16:5b:6f:6f:0a:d8:96:82:a3:d6:
+ a8:a4:84:d7:1a:50:22:bd:14:d7:61:d9:43:a9:58:cf:46:e8:
+ 64:e9:1c:a9:d6:d3:49:45:1e:53:16:71:05:a7:0b:ae:d7:c0:
+ 43:8c:24:02:07:6f:99:ed:4b:f6:89:a8:31:f5:ba:56:e3:db:
+ 00:10:7e:0d:e0:46:96:b2:27:be:60:29:e8:91:e9:55:43:b1:
+ e6:74:e9:17:4e:bd:db:32:ec:61:7e:b0:d1:17:27:90:29:d9:
+ 2e:53:6a:8f:de:77:ae:f4:ff:f4:96:84:e6:8d:37:43:63:17:
+ 87:6a:8c:55:bd:ea:fd:2c:b2:83:10:3c:d7:f0:bd:21:45:ad:
+ ba:36:6d:43
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:94:4c:ba:e4:24:50:f0:02:98:a7:42:66:d3:d6:
+ 53:4d:ad:3f:76:fa:4f:72:61:fd:79:cc:43:e2:d6:
+ 2f:d9:99:84:0b:da:34:6f:65:ca:78:2b:a9:22:98:
+ 04:ba:93:89:e9:8c:d0:71:62:cd:a4:3a:35:e2:8c:
+ 2d:8a:48:36:2b:d1:99:52:27:c7:44:34:30:2c:87:
+ a7:47:e3:df:74:a3:6c:c6:3c:d2:ba:5c:3c:04:79:
+ 1f:11:36:58:7a:86:65:60:cc:a1:4c:ba:f9:72:7e:
+ 80:d3:1b:12:18:8a:44:b3:f3:fa:20:f8:8c:3d:63:
+ e3:96:0a:6b:0a:32:a1:f1:75:7c:6b:76:5f:1b:ef:
+ bd:64:c3:34:fd:2e:27:89:dd:ef:e5:74:08:08:a4:
+ 96:92:7b:f3:4b:f5:ee:eb:91:0b:bb:ca:53:e8:ed:
+ 48:a8:bb:7c:f8:9f:30:f7:15:05:32:7d:73:62:37:
+ 4f:f7:a1:d4:de:45:e2:f7:49:86:b9:c9:f8:84:cc:
+ 67:b2:f0:34:48:e6:54:e4:5d:1f:fb:03:fc:d8:15:
+ a1:17:0e:53:0d:c8:c9:a6:99:bf:f8:93:df:af:35:
+ e3:10:91:91:24:f3:eb:88:0b:d8:4f:16:36:a3:28:
+ ad:21:bd:22:bf:46:59:0a:ea:f0:fb:fc:01:c3:ba:
+ 42:e9
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 77:27:6B:15:A8:06:86:AD:0D:67:E0:D6:5B:82:3A:F8:6B:00:A3:A7
+ X509v3 Authority Key Identifier:
+ keyid:6C:17:23:18:CA:A6:A4:28:C6:08:4C:AA:9A:3F:18:FB:7B:67:B2:36
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints:
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ af:80:f1:f7:93:98:cd:84:13:e3:eb:ab:2d:ff:91:4c:72:5d:
+ d9:a9:b7:96:e8:bc:e9:f3:31:a0:46:7c:0d:49:a3:1f:5a:6a:
+ aa:82:9a:c2:1f:37:7a:9a:37:1a:96:fb:8e:fa:28:e1:eb:b8:
+ a3:d0:66:2d:9e:6e:ff:8e:c3:0a:17:23:ae:60:d5:9b:d2:fb:
+ 23:2b:a9:b0:22:cb:e6:85:29:11:d3:b5:71:3e:30:9a:9c:60:
+ 24:c5:a8:42:66:4f:5c:10:8b:fa:61:ad:d7:14:2b:51:0e:53:
+ 24:1a:c7:5f:d9:12:97:6a:8c:da:d5:f9:35:41:4c:d4:0e:a8:
+ 98:c6:e8:61:db:7b:95:d5:ca:26:ff:60:01:e2:c6:4e:f7:67:
+ ee:36:1f:2b:71:82:46:f5:11:44:ce:7b:ac:85:06:f1:09:35:
+ 07:62:08:36:ad:b6:5b:c6:70:a0:bb:f0:5b:2e:47:09:a2:69:
+ 79:a6:f1:77:fd:3c:b9:57:f4:c7:e6:f8:80:18:ba:d0:a0:c1:
+ b1:6f:b9:c8:3b:a2:c1:83:5c:e7:3a:05:19:36:c5:ae:54:dc:
+ df:1d:ad:18:e0:52:dd:71:ba:53:3e:2c:7d:eb:09:3a:cb:25:
+ 10:b3:52:50:7f:42:2b:a8:2c:a7:cc:02:8e:17:99:af:7e:d2:
+ 75:f4:15:f1
+-----BEGIN CERTIFICATE-----
+MIIDajCCAlKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEy65CRQ
+8AKYp0Jm09ZTTa0/dvpPcmH9ecxD4tYv2ZmEC9o0b2XKeCupIpgEupOJ6YzQcWLN
+pDo14owtikg2K9GZUifHRDQwLIenR+PfdKNsxjzSulw8BHkfETZYeoZlYMyhTLr5
+cn6A0xsSGIpEs/P6IPiMPWPjlgprCjKh8XV8a3ZfG++9ZMM0/S4nid3v5XQICKSW
+knvzS/Xu65ELu8pT6O1IqLt8+J8w9xUFMn1zYjdP96HU3kXi90mGucn4hMxnsvA0
+SOZU5F0f+wP82BWhFw5TDcjJppm/+JPfrzXjEJGRJPPriAvYTxY2oyitIb0iv0ZZ
+Curw+/wBw7pC6QIDAQABo4HIMIHFMB0GA1UdDgQWBBR3J2sVqAaGrQ1n4NZbgjr4
+awCjpzAfBgNVHSMEGDAWgBRsFyMYyqakKMYITKqaPxj7e2eyNjA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAK+A
+8feTmM2EE+Prqy3/kUxyXdmpt5bovOnzMaBGfA1Jox9aaqqCmsIfN3qaNxqW+476
+KOHruKPQZi2ebv+OwwoXI65g1ZvS+yMrqbAiy+aFKRHTtXE+MJqcYCTFqEJmT1wQ
+i/phrdcUK1EOUyQax1/ZEpdqjNrV+TVBTNQOqJjG6GHbe5XVyib/YAHixk73Z+42
+Hytxgkb1EUTOe6yFBvEJNQdiCDattlvGcKC78FsuRwmiaXmm8Xf9PLlX9Mfm+IAY
+utCgwbFvucg7osGDXOc6BRk2xa5U3N8drRjgUt1xulM+LH3rCTrLJRCzUlB/Qiuo
+LKfMAo4Xma9+0nX0FfE=
+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:e2:4c:a9:08:30:3f:0e:6a:ec:ec:80:8e:07:cb:
+ fa:9b:01:b9:8a:37:f0:b1:f2:c2:43:79:90:7e:70:
+ 76:ac:5c:41:60:55:66:fb:4f:e6:79:c8:18:01:7f:
+ d5:bd:9a:d5:58:5a:00:bf:81:86:37:1e:68:1a:92:
+ da:dd:e8:20:1a:47:43:78:bb:7e:5c:82:c6:59:1b:
+ 37:c9:99:b2:ac:bb:d2:c0:cf:58:5a:25:13:a6:6b:
+ 9a:79:be:dc:f6:6f:6c:80:5d:58:c2:b5:67:ae:09:
+ 1b:ba:2a:f3:2a:00:d2:43:b6:59:df:38:7c:ef:c1:
+ be:1b:a1:e0:7d:9b:20:27:04:67:94:45:b3:2d:f6:
+ 77:91:3c:c4:94:5f:78:7a:79:2c:4b:21:23:8b:f4:
+ d3:60:73:10:59:c7:a1:84:3f:5a:4e:82:43:90:68:
+ 77:2a:f6:b1:d2:d4:cc:cd:76:36:13:95:c5:a7:f4:
+ 46:d8:b7:ee:ef:59:07:2c:69:4d:9c:22:e4:2d:f1:
+ a9:2c:50:35:50:c2:91:ea:37:d9:6c:b6:f2:ff:cd:
+ 7e:00:ae:51:e3:b4:10:5f:87:e3:92:fe:9e:62:a5:
+ 34:fe:15:c4:19:20:3a:68:fd:3c:be:ae:aa:a3:52:
+ 48:d3:05:95:99:f8:38:18:c5:44:d6:71:c4:bf:34:
+ e5:c7
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 6C:17:23:18:CA:A6:A4:28:C6:08:4C:AA:9A:3F:18:FB:7B:67:B2:36
+ X509v3 Authority Key Identifier:
+ keyid:6C:17:23:18:CA:A6:A4:28:C6:08:4C:AA:9A:3F:18:FB:7B:67:B2:36
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ d2:00:6a:7a:21:40:79:ad:84:23:e8:62:29:b5:47:0a:7a:91:
+ 08:3d:f3:af:0a:14:e9:93:08:7a:81:bf:44:6f:e9:59:5b:d6:
+ 8f:e1:bd:cd:9f:46:94:2e:7e:79:df:53:9e:85:e3:86:e0:15:
+ 65:e4:fd:b9:10:f7:19:6c:f1:ba:39:3b:2e:49:97:18:7d:95:
+ a9:e5:14:49:65:44:31:39:5b:75:c7:09:75:1f:b3:5a:5b:fe:
+ 09:1a:4a:af:ec:6b:58:5a:7b:ef:44:58:37:ab:23:72:bd:97:
+ 7b:02:63:65:cf:3d:f6:13:62:44:49:04:dc:85:fc:6f:31:80:
+ c7:e0:1e:5b:77:90:29:cb:06:67:4e:99:41:b1:66:d7:4b:a3:
+ fa:85:5c:bc:2e:c5:fa:a0:a1:8d:07:ba:52:31:cf:5e:2a:98:
+ f1:ba:dc:56:4b:b3:cc:11:b2:d1:2d:0a:eb:75:a8:fe:f6:02:
+ d8:9b:0f:5b:7e:11:50:b1:51:b9:31:11:c5:4b:fa:bf:34:4d:
+ 46:e9:27:39:61:ca:09:41:b2:67:fc:54:8a:38:0b:50:7d:f0:
+ e4:7a:a4:30:08:12:86:b3:fc:d2:43:0c:b5:50:4b:45:ee:cf:
+ 90:5b:3e:39:47:11:b6:6b:a6:24:fe:02:17:07:7c:06:15:23:
+ 0f:d8:0e:7b
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem b/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem
new file mode 100644
index 0000000..9027634
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem
@@ -0,0 +1,278 @@
+[Created by: generate-intermediate-lacks-basic-constraints.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+lacks the basic constraints extension, and hence is expected to fail validation
+(RFC 5280 requires v3 signing certificates have a BasicConstaints).
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:ac:3c:48:cb:8e:9b:00:37:e3:06:36:23:5e:3c:
+ 24:0b:d2:57:0e:52:8f:53:d0:48:ca:38:67:91:a7:
+ 10:d3:35:2d:67:f4:ad:2c:9e:c1:ee:f5:6b:62:23:
+ 34:03:32:76:29:96:fd:db:cc:a4:9a:d8:b6:97:c4:
+ a9:73:c1:a1:57:2f:cd:80:d1:d9:db:39:82:11:bb:
+ 95:3e:1b:b3:1e:ac:e7:c0:67:f3:1e:cb:4f:d4:a6:
+ c7:01:32:c5:45:ca:53:ff:cf:46:e1:b3:4f:55:01:
+ ef:76:44:92:55:55:d8:a4:db:5c:80:8f:48:51:86:
+ 6c:d9:b6:b7:5c:74:56:06:00:38:3f:d9:ee:c3:ae:
+ 78:a0:57:ff:fa:41:02:14:63:00:bb:1f:98:9a:f5:
+ 39:50:51:50:78:03:5d:13:a2:fd:a3:08:b0:ff:69:
+ ee:60:c8:af:1c:1e:8a:13:4b:0e:b9:48:29:92:f2:
+ 95:0a:d9:85:2f:ff:17:ab:c7:6f:e0:32:d1:16:9e:
+ 66:ae:81:87:b8:7e:70:ac:73:8c:67:de:dd:1a:e0:
+ 0e:0e:bb:ab:bc:f5:ef:38:d9:37:49:71:d1:7c:e6:
+ 64:f7:00:10:e4:83:ed:1e:58:05:44:89:f2:a9:a2:
+ 1d:57:5c:b5:db:bc:55:39:35:d7:f3:a5:b8:28:d1:
+ 45:5d
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 9E:25:C3:B0:61:AE:69:26:DE:05:F4:15:3C:58:B0:7C:6D:91:5C:5B
+ X509v3 Authority Key Identifier:
+ keyid:E5:AE:8F:CC:87:F7:B5:85:86:1E:4B:A6:CF:FC:B9:CA:10:C8:79:90
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ c5:3c:97:21:6a:dc:f8:0c:23:76:c2:4e:33:63:f4:7e:d1:61:
+ bd:f8:cf:6d:b5:ef:d6:f1:96:a0:84:07:42:ab:e2:34:90:3a:
+ 95:2a:db:f6:19:28:bd:19:22:65:20:b0:25:b0:f0:ca:d0:d3:
+ 44:41:fe:03:f2:9f:0c:df:02:dc:64:c6:47:13:1e:26:dd:6a:
+ 5d:52:8a:fe:d3:0a:9a:d1:8c:a5:93:ec:1a:d4:d5:ad:ba:cd:
+ 6b:c2:99:6b:04:b7:06:98:a8:53:dc:d9:97:97:da:ac:29:bb:
+ 09:4a:25:ca:08:83:eb:ed:1f:a7:ae:28:fc:51:09:a9:e4:95:
+ f2:66:97:f2:97:48:9e:01:44:40:5b:4a:91:a5:ed:f9:86:6b:
+ fb:e2:47:c8:47:aa:ad:8d:aa:79:30:fb:4f:f1:a7:7c:c3:23:
+ b3:23:4d:15:a3:04:67:ff:26:b1:50:c0:5a:13:f4:8a:61:da:
+ 98:a2:35:0e:ec:4f:2b:e7:e0:dc:29:0a:07:20:e4:22:97:b1:
+ da:0d:73:6f:32:03:f1:cd:4b:a2:7b:9b:c3:62:a8:dd:55:02:
+ 57:6b:2f:a4:d6:46:20:bc:bd:f7:52:e7:44:8e:3d:2c:73:05:
+ 55:ac:35:8b:af:39:32:a1:07:da:fd:bb:8c:bb:35:e0:e6:bb:
+ 0c:49:1a:e4
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c5:bf:ce:e4:8e:d2:b9:92:d9:78:eb:36:78:b0:
+ d4:2b:a9:22:cd:83:57:58:a2:0f:5b:e5:c8:e4:f4:
+ d6:41:2c:1f:5a:08:6b:12:7b:f6:8f:39:44:0f:f4:
+ d2:3e:56:cd:63:87:13:b1:88:1a:da:f1:13:2f:4a:
+ d0:76:78:61:6f:71:08:e0:0c:a2:9a:6a:6b:c7:8c:
+ 81:6f:e1:ea:22:09:83:fd:09:53:78:f0:1d:4e:f7:
+ b3:17:17:7e:fc:dc:a5:21:83:7f:46:8c:81:af:07:
+ 68:91:14:54:43:bf:d2:85:fa:58:91:61:cc:87:bc:
+ 8d:b3:97:c1:a5:42:de:73:49:29:c9:0c:48:92:15:
+ d9:0e:6b:3d:4a:4c:50:c6:8b:a5:69:6c:b2:2f:02:
+ 9e:0a:4f:27:1a:d0:1c:0e:b8:d9:fc:a7:62:92:69:
+ 0c:40:ec:49:3b:59:a5:38:fc:8e:cb:2f:91:9f:09:
+ 76:2c:b8:d4:25:7e:83:71:56:89:29:2c:a3:d8:bf:
+ 95:70:99:f5:cb:20:df:fa:fd:b8:89:e6:42:82:a9:
+ 01:d8:e0:42:f2:d2:c3:78:26:cc:fb:05:30:90:a0:
+ 83:bd:ce:b3:6d:bb:01:ae:84:aa:71:4f:d9:37:38:
+ 7e:07:35:6f:ed:88:c7:52:17:38:ac:c6:44:b5:fe:
+ 4a:b3
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ E5:AE:8F:CC:87:F7:B5:85:86:1E:4B:A6:CF:FC:B9:CA:10:C8:79:90
+ X509v3 Authority Key Identifier:
+ keyid:0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Signature Algorithm: sha256WithRSAEncryption
+ 12:11:99:0b:59:f6:cd:61:bf:99:bc:25:83:b2:e7:4b:42:ec:
+ ee:1d:03:3b:cf:5d:76:95:19:2c:d1:41:d0:f6:5c:08:9d:6f:
+ 66:50:07:ea:07:fa:88:01:96:05:39:8d:6a:e0:34:27:1e:a2:
+ 80:c2:9b:91:ba:17:35:49:ef:8c:42:9d:59:ac:42:3f:52:fa:
+ ef:5f:51:aa:3a:dc:b6:ee:d6:8c:20:89:de:36:7d:a2:e2:ff:
+ eb:13:9d:dc:99:d1:62:33:c5:82:19:12:18:d4:94:5b:5f:c4:
+ f7:74:55:f0:be:fa:0e:4d:7a:01:7e:53:b3:2d:4d:09:b6:7b:
+ 8e:0a:7c:3e:b9:39:a1:ee:b6:3d:3f:e8:4a:b0:1d:e4:ee:7b:
+ 96:75:19:b5:71:6a:ae:e0:af:14:59:9f:fc:2b:13:dd:70:c9:
+ da:dd:a9:3c:14:3e:f1:69:3b:ce:42:b4:c5:3f:12:f8:37:eb:
+ bf:0c:9d:48:a4:6e:4c:9f:e7:3c:4f:a5:91:32:8b:7f:2e:5f:
+ e7:bf:bc:f4:a0:5f:43:f7:3a:1f:78:a3:0e:8e:c0:46:16:9e:
+ 58:6a:0f:7e:e0:69:af:94:ec:bc:3a:7f:8b:44:ef:19:f8:14:
+ 16:a4:1d:bd:49:c6:96:da:ba:11:a8:bc:36:11:c7:ad:ab:e0:
+ a5:e2:05:77
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c3:da:da:10:95:78:5c:73:c8:43:66:41:23:8e:
+ 3e:3f:a1:00:57:de:60:d9:2a:84:57:85:08:c6:60:
+ 79:65:2d:51:c9:93:c1:e7:fa:5b:1a:eb:6f:79:44:
+ d5:71:f6:bd:f4:8c:86:0b:d9:e3:49:dd:a6:f3:5d:
+ 48:8a:25:4a:2a:20:80:c1:83:da:b8:c5:e0:20:de:
+ 40:67:bc:22:38:51:72:df:e3:b7:82:aa:47:ed:c9:
+ 74:a0:82:97:71:35:a8:2f:73:01:86:56:43:e8:88:
+ 42:f9:cc:9b:69:71:09:45:8c:39:82:14:db:2e:08:
+ 17:85:96:c5:69:46:73:55:9b:d8:12:4b:5f:32:70:
+ cc:52:4e:7e:77:94:78:0e:f4:dd:40:ff:d7:3b:cc:
+ f7:df:a9:a7:a1:a3:a3:4e:25:c8:e4:68:1c:e3:90:
+ c2:c5:bb:66:3a:c1:8b:e3:1b:df:b9:8c:0c:9a:3a:
+ 6a:a9:8e:8d:b3:54:49:14:af:28:51:29:b2:5b:7b:
+ 68:34:4c:f3:bb:a5:5d:51:0b:99:6b:b1:fe:b3:16:
+ d1:ef:2f:18:ee:8a:f8:05:9b:df:0d:92:3a:e0:62:
+ 7b:1d:bc:fb:60:45:ce:f9:e0:46:f6:16:39:08:a7:
+ 68:b5:da:e5:9f:7c:db:07:15:dc:47:e6:5d:a3:8c:
+ 06:7b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+ X509v3 Authority Key Identifier:
+ keyid:0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 3e:f9:8e:c2:1a:d7:ea:b1:71:03:6d:6d:a9:de:e9:45:1d:ab:
+ a3:26:4c:95:4b:15:ad:9d:be:94:aa:20:57:83:b2:32:96:06:
+ c1:37:9a:6a:18:41:ad:13:3b:52:23:a1:0a:1f:fc:8c:fa:3b:
+ 88:43:d1:5e:1e:59:80:06:a5:0a:5e:95:66:3d:3d:cb:4a:b4:
+ 38:77:a6:fa:04:29:e8:c1:b8:b5:f7:49:07:ae:53:dd:62:64:
+ 3c:70:4c:64:b5:54:84:4d:04:3f:6d:86:80:9d:e2:2b:a4:88:
+ 1c:38:74:fc:83:c3:60:c8:86:64:f5:d7:29:f7:e4:8e:02:a9:
+ 47:a6:e1:46:0f:c4:b5:22:59:f1:a7:1b:ae:86:7c:70:32:d4:
+ 8c:19:7f:a7:6d:82:0b:f3:42:37:02:b5:3d:f3:41:d5:7d:67:
+ 97:80:78:9a:e2:06:54:18:bc:b0:7f:5d:77:15:bb:89:cb:4d:
+ 29:0c:02:ab:b3:b7:40:44:3a:2c:4a:2e:54:43:7f:ff:b0:5f:
+ da:c5:5f:38:0e:ce:4e:18:ed:f3:f9:99:f0:7c:01:69:ca:0e:
+ 15:85:1e:ff:b7:2d:04:6c:3b:5b:f9:7f:70:bc:0c:ac:16:b7:
+ d1:b4:f1:74:84:ad:73:e7:9f:c7:c9:ea:93:d9:f1:c6:a7:59:
+ bf:92:4e:ec
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem b/net/data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem
new file mode 100644
index 0000000..536c478
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem
@@ -0,0 +1,281 @@
+[Created by: generate-intermediate-lacks-signing-key-usage.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit.
+Hence validation is expected to fail.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:a3:21:17:35:c0:77:f1:a3:51:77:11:45:3e:92:
+ 5f:97:65:eb:99:cc:26:e2:8c:f8:4a:d8:3d:71:17:
+ a2:eb:6a:cf:2f:07:a8:fa:27:c1:f8:c5:50:22:42:
+ a2:6f:92:4b:67:c3:0c:a7:ec:35:87:05:ac:eb:e3:
+ 27:cd:62:3d:c4:2e:80:f6:2a:af:31:05:c7:1b:0f:
+ 3b:71:6d:90:77:0d:b4:48:e7:26:2e:4a:44:af:bb:
+ 76:e0:62:ec:e6:61:cc:5b:61:ea:03:ce:4d:46:d0:
+ 96:e2:d5:d9:67:6f:0c:f2:06:e3:9a:14:04:68:82:
+ 88:d6:8b:c1:7f:fb:81:8c:e6:dc:88:20:f7:53:ef:
+ d5:56:5b:5e:00:b3:5b:e8:ce:d0:d2:6a:ed:b8:4a:
+ f2:4b:56:fb:63:75:d4:6b:a3:8a:d4:3f:e6:9e:29:
+ 1b:a7:23:61:ba:f0:d6:19:fb:8c:ad:40:2f:7c:14:
+ 36:0f:4b:f1:6e:f0:b8:6e:7d:cc:82:11:63:48:15:
+ 2f:34:00:99:cd:be:b4:1a:be:d8:73:38:00:ac:c1:
+ 09:41:a2:c4:ec:74:69:15:52:c4:45:2d:20:ff:b5:
+ ce:d0:41:be:a2:b2:4d:ef:a7:3b:f1:df:9d:78:1a:
+ 9d:2c:6c:61:26:2e:f7:82:ab:50:76:6d:a3:d3:33:
+ 46:07
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 95:3C:F4:24:9F:9C:4A:CB:16:AA:A4:8A:AB:DF:D7:9D:6D:BA:AC:FA
+ X509v3 Authority Key Identifier:
+ keyid:29:73:E8:7F:69:DE:63:14:43:C6:6D:55:6C:C2:AE:84:FA:D5:FC:8C
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ a7:dc:31:88:64:26:72:62:34:8d:3a:75:7a:71:d4:ae:7a:2c:
+ f4:2d:44:e9:e9:e8:c5:4d:79:b2:dc:12:ea:75:60:44:cb:6e:
+ df:22:47:d5:ae:f6:03:dc:c4:6b:cf:90:75:29:49:50:04:e0:
+ 94:2a:b3:bf:d4:ae:e2:08:ad:52:22:65:91:33:09:79:cf:c9:
+ 27:9b:52:dd:a8:0d:f5:21:b6:58:c4:5f:1b:79:72:69:7a:7b:
+ 49:7d:64:67:d0:d6:1c:21:fe:e9:ae:39:1c:b4:3f:f2:f6:6d:
+ 7e:30:15:76:a3:af:eb:43:c0:ed:f3:8a:bc:48:5c:47:fc:44:
+ 09:da:7d:9a:20:f1:e2:1d:4d:40:34:0c:e1:68:16:9e:47:57:
+ 1a:6a:19:e4:b2:6e:dd:7c:69:5f:b8:2b:bd:e7:cb:e4:9c:9c:
+ 79:e1:a5:b3:82:a1:c9:5b:fd:73:d6:a8:1d:1d:d8:31:d6:37:
+ 00:e9:7a:d2:a2:ee:c0:42:21:22:da:70:6e:a8:8c:fa:0c:24:
+ c9:70:4b:49:0a:c1:db:35:f2:71:d7:30:41:a7:6b:05:92:c6:
+ cd:8c:d4:de:c2:6b:aa:b8:70:d2:fa:cf:9a:01:af:34:80:95:
+ ad:ab:59:86:f2:56:6d:d8:43:95:24:e3:f7:7b:b9:83:89:ed:
+ e7:7a:2f:35
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:cf:bd:56:f0:dc:36:bc:a8:05:9b:fd:e3:c1:86:
+ da:96:c5:0b:b0:7f:fd:e5:6d:f4:df:44:46:82:ed:
+ 45:60:4b:5d:c6:27:5a:d8:f1:3c:28:a5:eb:3f:a9:
+ 5f:bc:b2:a9:20:fe:09:fa:39:76:5f:2a:91:b2:ef:
+ c9:47:70:c9:d0:ce:66:57:25:d0:72:12:c5:2a:ab:
+ 5c:bc:b3:9a:ba:c8:e9:cb:81:6a:16:f1:7d:a9:9f:
+ e8:9a:0a:47:29:53:34:f7:99:70:14:c6:63:4c:aa:
+ ba:96:7c:78:c4:11:d1:cc:3b:35:56:e8:7f:41:9c:
+ 41:69:d2:b0:dd:36:00:ed:dd:a2:bd:e2:56:29:c5:
+ 8d:4e:7b:71:fb:f5:a1:7b:37:df:d2:66:d4:fe:c8:
+ 24:6d:a3:c4:43:e9:d3:3e:e3:08:78:95:e9:86:e3:
+ 73:09:f9:04:fe:1a:25:19:5b:7c:a8:da:62:05:aa:
+ 56:1b:2a:d4:33:ff:4f:a2:fe:34:90:ec:e9:94:f5:
+ 0a:92:e9:b3:bf:c4:d3:78:80:0a:5e:4e:11:58:94:
+ 66:a8:52:b8:6e:49:64:cb:45:ee:7c:46:80:d7:3d:
+ 40:df:9e:69:54:ce:a5:7f:db:6b:73:42:c5:9c:6e:
+ 7c:b6:9f:ac:b9:8c:cd:7f:da:00:7b:3b:c2:dd:4d:
+ 44:c7
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 29:73:E8:7F:69:DE:63:14:43:C6:6D:55:6C:C2:AE:84:FA:D5:FC:8C
+ X509v3 Authority Key Identifier:
+ keyid:77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ ad:b2:08:36:77:a1:da:aa:e4:31:7d:a8:61:03:be:0a:86:a2:
+ 15:3b:08:bb:c8:86:eb:f8:52:c0:63:27:db:5c:25:16:98:05:
+ b1:84:dc:12:74:ce:25:a6:2e:be:32:2c:1f:0a:04:4e:9e:bb:
+ a1:b6:34:ef:20:2d:a3:fe:cc:b3:40:2e:75:9c:2d:c3:c0:e7:
+ 8e:aa:9f:18:60:a9:61:18:4f:a5:d8:3d:c7:d3:09:62:6c:b8:
+ 5a:99:3b:34:70:7b:7d:61:cc:f8:c9:71:97:2c:59:96:d2:1a:
+ c5:4e:ce:df:65:cf:18:05:bd:9f:bc:86:ba:16:55:79:58:d8:
+ f7:32:44:b6:59:32:9f:5d:ef:04:25:2a:2d:54:36:9e:62:0f:
+ c4:df:1c:10:64:02:ba:64:f2:ea:3d:cc:5c:ea:2e:4d:72:fa:
+ e9:72:0f:77:af:5d:1e:32:b9:64:7c:c5:b2:77:36:64:e5:ba:
+ d0:a0:8c:97:7d:b3:76:6c:c1:15:70:f8:0c:50:b8:3c:d4:6c:
+ 4f:33:32:f2:c8:b8:35:cd:80:a2:3a:49:55:ba:2e:5b:c9:9a:
+ b6:77:fb:0f:01:2e:72:21:bc:88:f6:e3:71:8c:68:59:f3:1b:
+ d8:e1:d3:e3:6c:15:5d:8d:82:a3:db:84:44:58:3e:2f:a9:88:
+ 56:2a:a6:4b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:b3:13:19:f8:ad:c0:ff:5e:86:19:9a:3c:7f:0c:
+ 04:81:2c:bd:c4:ee:fe:6c:bb:b5:a2:ee:08:10:bd:
+ bb:b6:d1:6c:0d:e7:49:6a:45:0f:0f:46:2b:b6:49:
+ 49:92:7d:c8:b8:81:c1:3f:70:80:39:8a:29:de:77:
+ f0:a3:3e:ef:8f:8d:9c:74:ca:05:c6:5f:12:fc:d4:
+ 4f:47:64:5d:ea:4d:84:af:f0:d0:88:ff:58:98:ad:
+ 7f:6f:c0:22:bc:8e:a4:44:7b:2c:d3:3e:08:45:2a:
+ 13:20:90:1d:b6:0b:2c:4e:a4:40:c3:76:66:6f:eb:
+ 5c:49:fc:1d:81:8e:a7:cc:a3:91:bd:6f:fa:22:73:
+ 84:35:99:08:2c:3e:8e:0b:74:a6:16:79:b3:37:2f:
+ 66:5c:b1:4c:55:76:af:65:9c:cc:e6:af:b0:8c:c3:
+ 28:24:c9:a0:f2:b4:d0:74:d3:e0:72:af:0d:86:f0:
+ 21:4a:9e:4a:9f:95:7b:7a:73:4c:a9:b5:0a:ac:23:
+ f7:63:64:88:fc:00:9b:69:23:33:1a:75:bd:6d:f6:
+ f2:62:c7:68:19:d0:d1:55:2c:6d:f4:41:d8:3b:79:
+ 41:5f:44:97:b9:8f:5a:b4:0a:12:b9:94:0e:34:c7:
+ a7:93:cf:dd:f1:3d:bb:0f:11:33:fc:c8:c4:76:2d:
+ 9e:cd
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+ X509v3 Authority Key Identifier:
+ keyid:77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 5d:bb:5a:36:f5:74:9c:51:8c:7c:b3:e0:71:91:0d:51:59:45:
+ 92:b8:3c:f1:0a:42:ac:c3:c7:9f:4e:2a:61:09:7d:46:27:c7:
+ a6:23:09:39:39:18:9e:78:3f:94:cf:d6:44:5e:8e:9f:c4:4e:
+ fd:b4:ab:4f:56:ea:90:6d:4d:51:88:55:e2:56:c0:03:14:a2:
+ 99:d2:1d:67:03:75:6d:5c:a0:c5:5c:78:a6:c5:8e:96:6e:7a:
+ 4f:a1:b0:4e:29:62:92:bc:44:88:a4:72:8d:64:16:da:ff:c4:
+ e8:4c:d3:eb:a6:03:85:eb:a8:42:ee:ae:c0:87:f2:43:41:05:
+ 43:e2:d5:ad:b6:59:dd:59:51:6c:2b:77:f3:51:a9:e0:9b:3e:
+ ba:04:64:d3:f3:ce:59:5a:ad:b1:56:da:91:80:89:d9:62:81:
+ 99:9c:a4:49:24:7a:bc:91:4e:ab:86:e6:0b:76:0d:34:2d:75:
+ fa:7b:13:f5:b3:52:22:c1:57:7c:cd:79:0c:2b:ba:8b:87:83:
+ 52:59:5b:69:55:9d:c4:0a:98:b0:b0:dd:88:86:8c:28:c3:b2:
+ bd:35:85:b1:f0:78:6a:99:ac:63:52:08:5b:69:97:55:c0:87:
+ 81:be:bd:09:7f:eb:56:a9:84:9f:f6:9c:df:f2:19:41:60:f1:
+ 06:d1:77:38
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem b/net/data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem
new file mode 100644
index 0000000..f3104f8
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem
@@ -0,0 +1,281 @@
+[Created by: generate-intermediate-signed-with-md5.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+however is signed using the MD5 hash. Verification is expected to fail because
+MD5 is too weak.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:bf:20:16:45:28:21:d2:a5:63:de:24:67:38:92:
+ 4c:f1:a4:c8:45:30:94:b8:aa:5f:7c:1a:3f:6c:28:
+ 2f:31:7e:a6:bb:af:45:46:68:a2:f2:5d:a4:94:4b:
+ 9b:c9:4c:e0:5d:be:ce:34:5e:08:df:a7:50:c0:30:
+ 94:98:0f:52:ec:ec:91:23:91:bc:24:60:65:9d:b7:
+ 74:38:7f:9d:d4:20:94:5c:1b:6f:71:82:e1:b5:98:
+ 95:3c:33:48:7e:6a:c6:e0:59:e6:a2:c5:0b:95:78:
+ 0e:7e:e3:a8:16:93:0a:43:df:ec:d7:03:c0:f1:60:
+ 13:45:9d:52:b5:37:66:03:79:78:8f:d6:53:87:7c:
+ dd:50:8a:16:54:33:bb:62:f2:42:a0:fa:49:c3:c1:
+ e2:c4:c8:d7:db:49:16:43:c8:69:0e:88:e2:f1:2d:
+ c6:59:c6:5a:e3:d8:57:e9:a7:10:48:73:c8:c8:f7:
+ a1:6d:57:25:b3:04:43:05:6a:90:1d:87:36:67:7f:
+ 3e:97:eb:5b:66:03:3a:10:56:32:1d:04:cc:43:90:
+ 82:9c:ed:d2:b4:4d:ba:d0:ac:23:26:f9:25:5e:63:
+ 6c:e1:83:07:2b:ec:38:9a:d1:82:bc:38:a0:64:58:
+ 19:c2:77:3c:e9:bd:20:d5:45:43:8d:ee:51:ba:98:
+ 95:65
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 7E:D1:A4:40:CE:81:CA:14:BD:C9:25:39:E5:F7:21:B6:24:90:61:1D
+ X509v3 Authority Key Identifier:
+ keyid:60:72:15:4D:8C:1A:E1:CD:8F:EF:00:AA:9B:37:4C:00:57:29:66:15
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 6f:98:46:c6:44:e8:ba:f3:06:49:81:74:87:9e:d5:a1:0c:54:
+ 66:56:88:7d:89:5e:cd:2f:1a:06:af:d8:c7:ed:9e:ad:8c:7a:
+ b0:3d:eb:93:3a:59:49:89:ba:ec:27:15:0e:08:d0:cd:ff:40:
+ 57:3f:c2:77:c1:08:cb:5d:4f:40:ec:20:b3:96:9b:43:fa:96:
+ 00:42:cd:dc:db:27:3e:98:fd:8a:45:80:ef:5c:86:20:12:a5:
+ 83:b3:74:66:09:57:1c:4d:7e:0e:00:c4:57:dc:86:c0:2b:db:
+ fb:3a:77:1c:5f:7d:8f:ae:47:16:96:85:48:a7:95:4c:bc:b1:
+ 18:09:34:c4:78:76:57:46:db:1e:b7:12:16:78:54:ec:2d:eb:
+ 44:00:54:48:1d:6b:b0:d1:98:a8:58:ab:3d:f2:f2:5b:06:44:
+ d1:d5:d6:f5:d1:f2:c4:46:93:9a:9b:29:a8:9f:91:3d:e5:16:
+ d6:d6:ba:55:76:1c:2d:90:76:2f:92:a1:e4:52:a4:f3:f3:2a:
+ 3c:b3:11:78:f6:9a:ce:17:c3:8f:da:57:fc:a2:02:06:59:9f:
+ 18:10:ba:45:b4:0d:3d:64:aa:6c:ae:5b:a6:c8:f3:8b:d0:b0:
+ b6:1b:4a:cc:6c:fe:f9:d6:e4:15:da:28:1b:22:b3:ce:b4:6f:
+ bf:39:9b:34
+-----BEGIN CERTIFICATE-----
+MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IBZF
+KCHSpWPeJGc4kkzxpMhFMJS4ql98Gj9sKC8xfqa7r0VGaKLyXaSUS5vJTOBdvs40
+Xgjfp1DAMJSYD1Ls7JEjkbwkYGWdt3Q4f53UIJRcG29xguG1mJU8M0h+asbgWeai
+xQuVeA5+46gWkwpD3+zXA8DxYBNFnVK1N2YDeXiP1lOHfN1QihZUM7ti8kKg+knD
+weLEyNfbSRZDyGkOiOLxLcZZxlrj2FfppxBIc8jI96FtVyWzBEMFapAdhzZnfz6X
+61tmAzoQVjIdBMxDkIKc7dK0TbrQrCMm+SVeY2zhgwcr7Dia0YK8OKBkWBnCdzzp
+vSDVRUON7lG6mJVlAgMBAAGjgekwgeYwHQYDVR0OBBYEFH7RpEDOgcoUvcklOeX3
+IbYkkGEdMB8GA1UdIwQYMBaAFGByFU2MGuHNj+8Aqps3TABXKWYVMD8GCCsGAQUF
+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAb5hGxkTouvMGSYF0h57V
+oQxUZlaIfYlezS8aBq/Yx+2erYx6sD3rkzpZSYm67CcVDgjQzf9AVz/Cd8EIy11P
+QOwgs5abQ/qWAELN3NsnPpj9ikWA71yGIBKlg7N0ZglXHE1+DgDEV9yGwCvb+zp3
+HF99j65HFpaFSKeVTLyxGAk0xHh2V0bbHrcSFnhU7C3rRABUSB1rsNGYqFirPfLy
+WwZE0dXW9dHyxEaTmpspqJ+RPeUW1ta6VXYcLZB2L5Kh5FKk8/MqPLMRePaazhfD
+j9pX/KICBlmfGBC6RbQNPWSqbK5bpsjzi9CwthtKzGz++dbkFdooGyKzzrRvvzmb
+NA==
+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: md5WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c7:04:ea:a3:74:51:66:9f:f2:6b:5d:9a:3d:96:
+ bd:5c:b3:9e:9c:df:64:42:c7:85:1e:56:7a:3e:d5:
+ 3d:c9:f3:17:46:a3:a0:98:f6:80:df:f4:54:ca:e2:
+ d5:e9:15:b8:3a:19:4e:1e:26:67:00:80:96:d5:bc:
+ 1e:af:a4:f3:23:de:15:72:89:1f:50:3f:8c:e1:62:
+ 6d:e1:0d:42:9f:67:76:aa:f5:20:b4:4d:58:fd:3d:
+ 63:57:bc:9c:23:fa:db:31:0c:09:37:0d:7c:f4:d1:
+ 06:c4:7f:b1:22:d1:df:05:43:a4:12:94:e2:02:ee:
+ b7:ae:cd:48:04:00:39:4f:dc:40:f7:62:a7:d9:3e:
+ 81:9c:5d:98:6f:8d:0f:da:b6:0e:ad:1d:5b:ff:b6:
+ 50:90:ab:55:c7:2a:db:d8:67:6c:0f:87:68:8a:2a:
+ 79:24:a7:64:d8:c1:72:15:ff:6e:ca:31:f1:92:42:
+ 2e:78:a5:ce:2b:07:8a:4b:a0:80:88:14:76:d6:e1:
+ ad:b2:75:9d:79:9b:d6:c2:cc:ac:74:67:d2:5b:90:
+ 6f:c4:8f:50:4c:ce:50:89:a4:69:ab:ca:d4:d1:a4:
+ 47:ae:0d:46:f3:5f:28:91:66:27:02:f0:7a:da:aa:
+ 80:be:c2:e7:83:89:06:49:de:9d:60:03:a3:fc:11:
+ e2:2b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 60:72:15:4D:8C:1A:E1:CD:8F:EF:00:AA:9B:37:4C:00:57:29:66:15
+ X509v3 Authority Key Identifier:
+ keyid:60:B4:95:7F:EA:F1:29:B2:E9:9D:64:83:A9:C8:A3:49:6F:3E:18:53
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: md5WithRSAEncryption
+ 0b:ea:a8:1e:f0:70:66:9b:e0:48:9a:fa:62:3b:80:b0:9f:41:
+ e3:60:35:9c:b4:6e:0c:32:17:9d:38:72:b3:de:69:45:69:b1:
+ 4b:87:2a:e1:68:59:d6:b9:03:c4:88:7e:e0:77:26:3d:c5:ad:
+ 55:3f:13:bc:13:42:0f:9c:be:f7:70:3e:19:79:96:3b:b8:12:
+ d6:8a:a2:04:d2:17:ee:bd:78:db:cc:9f:54:87:26:89:61:c9:
+ f1:3e:8f:2f:19:55:49:05:c0:35:b2:ea:c4:ec:9a:11:d6:88:
+ f2:4b:ad:68:0a:32:75:42:42:a0:6a:51:cb:0f:63:32:20:4a:
+ 59:89:e5:f9:61:ee:63:80:e0:71:03:d1:58:ea:d6:31:24:11:
+ ef:03:44:02:76:86:67:99:a5:71:18:a8:4e:be:fe:78:63:20:
+ 67:b1:5a:1d:52:2a:48:fb:8a:ee:99:af:8f:57:37:43:67:1c:
+ 54:00:d0:50:8c:ce:18:e0:ef:7b:cc:e1:13:d1:cc:3f:ea:3c:
+ ce:cf:07:fc:6e:4a:09:b1:1c:54:70:a4:21:47:5d:70:7d:b4:
+ 04:3e:30:50:1d:86:2a:a6:67:3f:bd:b0:cb:57:e0:26:81:45:
+ c0:9a:86:8c:e6:ab:d0:87:9a:05:ee:2c:c5:eb:c6:c7:c0:94:
+ 68:4a:48:20
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:d3:ee:d0:8d:92:7d:ce:5f:4e:f2:0c:55:4d:bd:
+ 2f:b3:ff:6a:ab:2c:28:5e:c6:bd:49:ae:80:f0:e6:
+ 2c:30:e8:0a:e7:2b:3f:d7:1e:a8:6d:f1:c4:46:0e:
+ f5:1d:3c:e1:05:5d:a9:91:69:57:43:22:33:bc:c1:
+ 18:6e:b1:48:1f:13:64:18:03:c1:63:14:97:21:5a:
+ 65:49:52:6a:57:9d:ad:7b:f6:06:6e:f0:af:a0:6d:
+ 2c:6d:53:9a:ad:82:56:2a:95:e1:a7:5a:a3:b4:77:
+ c7:d7:97:39:73:c8:de:a8:19:09:ba:69:69:01:25:
+ e6:68:e3:d0:5a:84:5d:3e:f0:8a:3b:c6:31:26:34:
+ 38:ed:8d:40:80:0f:5f:84:d7:e5:4f:24:ca:ff:c1:
+ 48:f5:74:3a:b3:1e:9f:b5:ef:bb:24:cb:91:f3:81:
+ 47:bd:80:eb:ef:dd:45:39:fd:d2:c3:be:3e:ba:e6:
+ 5b:09:e0:88:98:27:91:e5:9a:5b:88:d6:5e:17:7f:
+ 08:e2:2d:f4:3c:3f:08:54:7b:10:53:f4:7d:ef:67:
+ 04:6f:d6:74:08:d1:b9:03:2d:89:5d:ca:cf:de:3d:
+ d0:e5:e2:e5:2a:7f:21:29:23:7e:b2:75:d9:ea:5c:
+ 73:45:7e:33:83:b6:62:5e:01:3b:dd:11:99:c7:c5:
+ 7b:65
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 60:B4:95:7F:EA:F1:29:B2:E9:9D:64:83:A9:C8:A3:49:6F:3E:18:53
+ X509v3 Authority Key Identifier:
+ keyid:60:B4:95:7F:EA:F1:29:B2:E9:9D:64:83:A9:C8:A3:49:6F:3E:18:53
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 49:67:dc:58:22:e3:ee:0a:e8:1a:3d:38:1a:13:dd:d7:e0:45:
+ 67:69:b1:44:49:e2:96:15:86:94:8b:d4:fb:8a:94:d5:22:39:
+ 20:48:97:d2:09:a7:16:4b:40:f3:3c:37:3e:e8:81:28:08:cf:
+ 4a:2c:3e:79:d0:0d:90:4d:63:a5:63:ce:24:75:03:41:7f:79:
+ 17:3f:4d:df:60:98:a5:a3:c1:39:14:4b:7e:b7:0d:8a:9f:d6:
+ a4:0b:0c:34:c9:fe:3b:c0:89:9e:5e:27:3d:d8:3d:d5:28:46:
+ e4:b9:f5:28:39:b4:cf:1a:ea:fd:d3:14:bd:8b:87:78:35:80:
+ a1:bb:4e:59:cc:2a:f7:f7:40:bc:b7:75:cc:35:f5:3d:95:bb:
+ 32:7a:0c:9d:67:c7:ff:b0:da:e6:05:e6:12:d5:1e:19:3c:69:
+ 5d:d8:08:5e:bc:fe:df:ab:36:a4:70:3f:2c:6c:1c:8e:e3:f1:
+ 0b:b3:22:e4:5b:fd:86:23:7a:bd:9b:b9:56:08:e3:a2:6d:2b:
+ e3:cb:42:93:6f:c8:5f:57:bd:66:41:51:8a:5d:4b:7e:0f:36:
+ 82:61:8e:e0:4e:2c:9a:7a:45:e3:21:1c:b8:86:cf:a0:35:1b:
+ bf:55:36:86:05:1c:df:b0:e2:85:3b:a4:c7:7c:69:f9:56:b3:
+ 20:28:e4:c2
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem
new file mode 100644
index 0000000..49aa20d
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem
@@ -0,0 +1,284 @@
+[Created by: generate-intermediate-unknown-critical-extension.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as critical.
+Verifying this certificate chain is expected to fail because there is an
+unrecognized critical extension.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c7:8a:82:ba:91:ca:1e:03:94:8f:9d:68:98:8b:
+ 95:3b:c1:e3:d1:5b:82:45:bf:72:24:cb:6f:de:91:
+ 2e:e3:49:ba:31:7b:57:db:90:36:32:e6:b4:41:8f:
+ 38:89:c6:6b:82:60:dc:98:e7:4b:06:55:41:db:9c:
+ a8:e0:97:15:5a:3c:06:ac:37:89:f5:9b:65:b6:93:
+ a7:2e:45:f3:b3:15:59:a7:6d:64:d5:cb:93:da:46:
+ b1:97:8a:79:f6:48:4b:4c:18:d6:38:cf:55:5b:6b:
+ 78:c2:f5:f0:37:54:67:8d:90:43:81:ec:15:1e:e7:
+ 75:55:57:7e:6a:74:71:73:6d:b4:d5:37:b5:28:40:
+ 2e:6f:a6:64:b8:77:fd:2c:6c:25:2c:27:cf:db:fa:
+ b4:c9:39:c2:d1:1e:e2:a1:73:bb:ec:81:dc:c3:ec:
+ d0:a0:08:1e:81:53:88:51:d2:83:d2:ba:33:3f:79:
+ 1e:2a:6f:80:7b:21:d8:bb:80:93:68:ea:f4:a9:d5:
+ 88:b8:ac:0b:ff:90:bd:cc:8a:6b:e7:e5:27:47:d9:
+ a0:68:5d:38:3c:b0:a3:4a:ae:5a:d9:a6:f8:51:61:
+ 28:fb:21:5c:01:aa:72:76:60:f6:e0:88:a1:44:b5:
+ fa:85:27:45:67:0f:c6:b1:11:00:81:23:3c:aa:a1:
+ 58:65
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 94:30:C8:2B:C4:EC:EB:81:5B:D2:2B:62:ED:34:29:BB:3C:40:FD:4B
+ X509v3 Authority Key Identifier:
+ keyid:C8:5D:13:08:EB:15:BB:7B:35:8E:74:DF:D3:C3:55:51:78:E1:4A:D3
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ ca:46:c4:08:c9:4e:1b:3f:96:fd:d7:9c:89:d6:ea:7f:76:53:
+ ac:03:55:eb:9a:d5:86:f8:66:cd:39:54:f0:7b:d1:74:62:83:
+ c7:58:46:b1:ad:da:b7:fd:03:94:3b:b8:a5:4a:01:45:53:2c:
+ c6:ae:55:52:08:78:de:66:49:a0:40:eb:7d:43:03:00:46:03:
+ 1d:6d:c5:83:57:f6:92:a5:c6:04:76:f1:de:bf:ec:90:8b:3b:
+ 99:70:80:41:10:93:07:2c:eb:cd:5b:b5:e6:12:76:41:db:81:
+ ab:f5:6a:a5:e4:67:45:39:fa:14:bf:0d:e7:e4:a9:f3:9a:57:
+ 4c:20:4e:68:fd:1a:35:00:66:b7:c6:fd:2f:14:db:7b:28:3a:
+ 59:31:5a:9d:96:d1:2e:27:d1:7a:c3:eb:b4:28:f1:e2:9a:d1:
+ 1d:be:6b:9d:81:4e:4c:7f:5d:fe:5f:20:8f:bb:f0:85:ee:bb:
+ 2d:66:40:bb:ec:40:c1:51:4f:f9:1d:24:4e:64:ad:64:1c:e5:
+ 68:3f:cb:b2:6c:c5:82:c9:e7:5d:7d:73:8d:ec:d9:b7:af:06:
+ 71:53:92:dd:aa:23:28:38:f0:06:d6:64:cb:f5:ac:f2:4c:e2:
+ 5a:55:c3:a6:d7:7e:32:21:19:54:c4:aa:cd:21:60:fd:b7:45:
+ 81:a1:53:ae
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:da:1c:0d:74:40:2d:01:10:9c:e0:0c:aa:01:c7:
+ ed:a4:03:b5:a0:b0:1d:c0:70:70:9a:76:6d:5d:4d:
+ 16:ed:39:87:76:43:e1:c1:3f:b9:f8:20:63:40:02:
+ d4:0f:f4:f5:4a:97:eb:46:ad:8c:29:cb:45:a7:33:
+ 16:b0:10:b3:bc:f6:9e:fb:e6:61:d5:7d:43:ce:27:
+ 43:ae:4f:b1:d1:47:6b:13:e5:20:66:09:b9:10:83:
+ a3:d4:40:6d:cc:fb:cb:28:1e:6e:bc:75:46:7b:9d:
+ f9:b4:5f:c9:43:24:d6:d7:c1:a8:6b:d6:52:1e:6d:
+ 9d:89:d6:41:eb:9f:db:32:e3:05:21:b1:b7:77:78:
+ e1:d4:f9:95:c5:84:63:91:88:ce:31:66:2c:51:89:
+ f3:a4:a3:0d:11:b2:a2:45:fd:59:1b:09:a9:bc:48:
+ 38:0d:25:c7:dd:c9:6a:15:5f:c5:5f:60:5e:c0:28:
+ 5d:19:ff:51:17:86:ea:b5:56:f6:1e:cc:ee:80:93:
+ f2:82:7b:2f:fa:96:1f:4b:15:b0:34:23:81:bb:b9:
+ a4:83:1a:2f:e0:6d:ee:48:96:4d:f1:7b:09:3e:1f:
+ 43:c6:76:8f:56:fd:1e:5f:21:6f:6f:49:b0:94:fa:
+ c9:be:76:61:f6:f8:51:72:40:99:d5:f2:f6:09:f7:
+ d9:8b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ C8:5D:13:08:EB:15:BB:7B:35:8E:74:DF:D3:C3:55:51:78:E1:4A:D3
+ X509v3 Authority Key Identifier:
+ keyid:3F:B3:AA:13:E1:86:96:B3:E3:8D:20:EC:BE:70:71:D0:1B:F8:67:9A
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ 1.2.3.4: critical
+ ....
+ Signature Algorithm: sha256WithRSAEncryption
+ dc:d2:aa:62:74:fa:cf:eb:4f:b3:cd:aa:a9:52:b0:fe:7a:0d:
+ 96:e4:07:8f:b6:d4:6d:ad:33:a6:4e:ad:2f:a5:ff:83:a0:75:
+ d1:ed:fc:c0:80:a6:73:73:49:6d:0d:3f:84:b5:d4:cf:07:74:
+ 3e:aa:bf:38:59:e4:fa:b6:d2:45:07:b3:a6:0b:b0:43:47:03:
+ 7e:45:c1:7b:f1:84:10:c3:0b:d7:2f:c9:be:ff:96:da:1b:4b:
+ cb:fa:05:ca:22:d2:e4:f0:f7:32:91:4f:95:05:6c:5d:be:6c:
+ 64:7b:cb:6d:a1:a9:d0:9c:5b:1d:3a:bd:4a:50:69:e2:06:fa:
+ 89:2b:3b:2e:12:f6:3f:d7:79:f1:36:ec:e3:6c:12:67:b2:a3:
+ b0:89:16:8c:2c:02:04:0d:89:e1:ca:69:d0:86:7e:fd:14:9d:
+ c8:ef:06:42:fc:46:b9:88:25:e2:b5:b7:8a:6b:ab:d6:1f:ec:
+ d1:12:b3:28:cd:9e:9f:56:8d:7c:49:6c:06:96:93:66:25:43:
+ b0:76:b0:9a:59:f8:9c:35:29:8c:db:a7:74:d7:ac:e7:99:ea:
+ 11:34:0b:6f:cf:bb:5e:28:2a:ab:9a:13:83:44:d7:01:3c:61:
+ c8:10:dd:0d:ef:66:3d:be:ee:72:70:d3:27:a2:b0:f7:f1:bc:
+ 50:e1:ac:3e
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:e7:de:8d:6f:81:af:35:2d:99:eb:62:b4:41:d8:
+ dd:55:5f:5a:12:02:46:8f:41:14:fe:f5:b0:32:ab:
+ fa:96:2a:e2:ba:e6:3a:1d:89:80:8f:20:6a:40:4a:
+ 5f:97:d3:5d:7f:e8:eb:26:f1:f9:1b:a2:a7:cd:54:
+ c0:d9:64:77:dc:ba:90:a4:b7:86:3f:8c:72:c2:ad:
+ 96:6c:f0:c0:30:d8:e0:71:f5:ff:f3:8c:18:34:3a:
+ 07:b2:79:32:92:91:d4:51:95:c4:bb:62:78:2e:30:
+ f8:b5:f1:91:26:9a:28:07:27:cc:57:d5:a2:1c:e9:
+ 20:ac:fa:3d:db:3b:70:81:17:3d:4b:54:a8:fe:2f:
+ 18:f7:7f:de:cb:4f:ec:70:c8:fa:a9:ed:64:41:36:
+ c2:74:a7:dd:e6:27:2b:af:79:ce:76:86:57:3a:2c:
+ d9:52:b8:bf:87:de:f1:5e:80:81:70:10:78:e7:89:
+ 0a:d1:14:74:f4:f0:93:cf:89:68:66:8f:d4:2a:8a:
+ c8:ff:96:fb:f6:cc:ee:dd:a6:62:f0:73:43:a6:29:
+ 7a:51:7e:63:e1:8f:d9:83:10:23:ed:1b:d4:26:2d:
+ 40:62:c5:ed:c5:af:4f:d9:9b:87:5b:3a:7e:2c:43:
+ 59:e3:f4:91:2f:ab:d0:04:a3:5e:da:ac:b0:c1:e2:
+ 15:99
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 3F:B3:AA:13:E1:86:96:B3:E3:8D:20:EC:BE:70:71:D0:1B:F8:67:9A
+ X509v3 Authority Key Identifier:
+ keyid:3F:B3:AA:13:E1:86:96:B3:E3:8D:20:EC:BE:70:71:D0:1B:F8:67:9A
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 84:9a:7d:63:f9:44:d8:2c:4e:b0:24:86:af:0c:ba:0e:29:33:
+ 67:68:7d:a2:1d:46:99:b0:fb:9d:65:69:da:f8:46:67:d9:c4:
+ 30:72:eb:57:79:4a:e8:2d:7b:57:d4:c2:18:13:19:d1:36:8c:
+ 45:9f:49:1e:a6:83:c5:41:41:fd:29:ac:a0:12:c7:0f:6e:a6:
+ 45:70:64:c3:9d:b0:22:2e:ed:c0:8d:6c:68:c0:94:d9:ba:e0:
+ 2f:5a:1c:29:ed:d0:d6:ec:0e:bb:41:ce:1e:e3:93:c4:85:80:
+ aa:a1:67:31:76:80:24:a4:70:ec:f3:6e:a3:63:8c:71:fd:38:
+ 65:1f:56:e9:75:74:15:3c:69:f3:e3:d3:9d:9a:9c:7d:f6:00:
+ 71:98:61:68:13:7c:23:79:e1:84:68:a6:3d:ce:19:1c:0a:62:
+ 48:d9:f9:4c:92:ff:b7:5b:e8:1d:e4:66:00:50:4d:38:c8:3a:
+ e3:e1:8e:ae:aa:32:30:65:78:25:b3:d0:eb:4f:de:ab:9d:51:
+ 40:7e:6f:d4:15:87:cf:41:7d:be:3d:32:45:a2:f1:a8:7c:11:
+ 97:90:a4:ea:d8:aa:c2:b7:08:34:a3:62:23:4b:a5:e3:9e:4d:
+ 90:7f:d7:4c:dc:4f:c8:ac:b2:b6:de:42:fd:05:98:f6:33:90:
+ 54:c3:6a:3f
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem
new file mode 100644
index 0000000..c7892e9
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem
@@ -0,0 +1,284 @@
+[Created by: generate-intermediate-unknown-non-critical-extension.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+has an unknown X.509v3 extension that is marked as non-critical. Verification
+is expected to succeed because although unrecognized, the extension is not
+critical.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:b6:04:af:e9:58:68:65:f6:6e:cd:e3:fe:93:35:
+ d3:c0:06:53:75:df:15:59:23:d3:fd:42:8c:36:a1:
+ df:6b:35:3f:7d:63:57:e4:17:d9:2a:63:77:7f:d6:
+ f5:b0:85:00:70:ab:f9:5e:f3:00:4d:0f:5e:28:b8:
+ 56:7b:15:f1:4e:eb:32:e0:bf:e4:83:2b:49:ff:ac:
+ 3e:09:38:40:75:73:11:ee:0c:8c:d9:e6:c6:d2:44:
+ ce:99:74:78:8b:90:19:b5:32:75:45:ba:e0:76:55:
+ 5f:c9:44:27:e2:91:8e:9a:21:aa:3d:be:e7:cf:1e:
+ af:08:4b:b0:cc:03:b8:c6:2b:92:ae:d6:1e:61:fa:
+ 18:4e:b5:98:cc:0b:55:16:77:4c:9c:26:99:0f:3b:
+ 91:22:87:19:36:b9:4f:72:c9:40:bb:d0:2b:8e:d7:
+ c3:1b:eb:2e:e4:82:a8:0e:7d:45:a1:c7:6a:e9:db:
+ d2:f7:30:9b:ad:4f:a7:04:17:2b:78:85:15:1a:8f:
+ f1:77:6c:51:c0:a8:fc:53:70:f0:32:8c:86:09:8b:
+ 00:9c:3f:32:ff:cc:86:4f:4c:32:6a:f9:53:5d:36:
+ f9:55:34:8c:e4:0e:56:af:bf:f6:92:25:8a:4e:d5:
+ 66:53:66:7b:b0:16:08:04:d2:56:de:c6:b0:75:2c:
+ b5:d5
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ A7:25:2F:78:CA:01:CA:68:1D:8F:FF:93:D6:FA:FA:A3:9C:BB:C8:0E
+ X509v3 Authority Key Identifier:
+ keyid:D5:16:02:7F:4F:D3:7F:21:1A:9D:CC:55:09:30:CF:EF:6C:08:1F:53
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 6a:e8:e9:eb:26:54:d4:51:72:d0:4d:a3:7c:e4:5e:8d:bd:c7:
+ 5e:0a:ab:46:a0:88:20:15:68:56:3f:43:0d:13:60:30:eb:65:
+ 86:45:5b:0d:8b:c4:b0:7f:2f:18:fe:27:a7:6e:4b:10:99:05:
+ 25:f8:4b:9a:80:a3:36:f6:35:5e:0a:dc:0a:81:3c:fc:be:32:
+ 71:fc:ed:8c:d9:77:ce:25:3c:74:af:b7:ad:50:ee:dc:fe:35:
+ 91:15:cc:79:91:f0:48:74:68:8b:a0:e2:70:95:df:1d:b3:e5:
+ c5:48:bc:9c:c3:4c:95:50:94:8d:3c:42:9a:13:e3:03:b3:df:
+ 43:32:bf:0f:cd:50:d9:2c:52:1c:30:9e:5f:30:02:69:66:bc:
+ e5:92:63:43:ca:62:e8:d2:ae:dd:2a:e1:ac:ce:00:f0:d7:54:
+ 81:6b:b8:1f:b1:0e:e7:57:2b:71:17:50:4b:fb:e4:f0:37:2a:
+ da:37:e2:80:4a:87:9b:d6:d5:6d:6b:b4:af:4b:43:c9:08:9d:
+ 57:f1:98:3c:2a:b6:58:7d:a8:83:d3:f0:b1:df:c5:bd:8b:0c:
+ a8:48:91:0c:c8:eb:29:f8:54:70:b0:49:b7:f4:e3:80:cc:2e:
+ 37:23:23:f4:49:21:8d:22:12:8c:3e:24:a2:11:66:15:cd:68:
+ 96:19:3b:5f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:94:b0:d4:b6:63:20:79:6f:d7:5f:3e:0a:32:b1:
+ 79:0a:be:db:d4:86:23:8d:f8:17:0d:3e:b8:49:ed:
+ d3:6a:39:db:e4:16:6b:f6:c9:03:d6:0f:60:a0:ae:
+ 6c:86:18:2d:50:06:70:48:5f:9b:14:17:4d:2b:d5:
+ e4:e9:8c:19:0b:78:19:0e:d9:82:39:8f:92:f8:bc:
+ 7f:cc:7a:6e:06:7c:75:e3:7e:7e:24:71:7e:19:ba:
+ 64:2f:7b:60:e5:ab:c0:1a:9a:44:9d:a4:db:eb:d5:
+ 5b:69:31:ab:9f:86:9c:ec:90:2f:c2:29:ea:19:15:
+ fb:85:50:89:71:67:28:70:46:f7:e4:1e:6d:e6:81:
+ 49:15:7e:e9:2e:9f:14:d6:f9:02:c9:91:8f:d1:a9:
+ 65:8a:cc:29:57:7b:e5:a8:08:db:19:a6:27:2f:89:
+ 4b:e1:ca:3e:1e:c4:f6:65:4f:b0:26:c4:29:13:44:
+ 3f:6c:49:ba:b7:99:2c:70:0c:54:7b:c2:9a:06:ce:
+ 95:51:62:16:a3:0c:9e:2c:34:d0:04:65:32:41:d7:
+ db:6e:38:e9:12:8c:91:a5:0d:fe:b2:c6:b7:74:f4:
+ 23:65:d9:ae:88:af:0f:12:6a:28:f0:7b:db:2b:e4:
+ 6d:1b:74:de:93:e9:f6:72:f1:1c:28:8f:8a:32:37:
+ a2:65
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ D5:16:02:7F:4F:D3:7F:21:1A:9D:CC:55:09:30:CF:EF:6C:08:1F:53
+ X509v3 Authority Key Identifier:
+ keyid:99:38:AC:DE:DD:17:19:E4:9D:92:02:FD:01:4D:40:C5:2C:4E:B7:4A
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ 1.2.3.4:
+ ....
+ Signature Algorithm: sha256WithRSAEncryption
+ 0b:1e:08:36:25:d9:1b:97:a3:07:63:ca:17:a1:df:42:14:a5:
+ 6d:75:63:a8:ba:b5:94:b1:59:0b:5c:18:a7:e2:8f:a7:8b:40:
+ f0:0f:cf:4d:8d:87:a0:77:44:b3:0a:b6:b2:a2:aa:25:0e:a5:
+ cf:4b:6b:77:6e:e1:e2:06:19:0d:97:d9:a9:95:72:26:24:07:
+ e5:cd:8c:c8:e1:c5:1f:6c:8e:42:dd:93:da:4c:6e:07:e5:6e:
+ b2:e0:e6:c2:04:1d:1f:e0:4f:f0:5d:00:63:2c:ea:35:e3:dc:
+ c3:14:6d:8f:86:23:ab:a8:d1:29:81:98:1e:b7:fb:34:4c:65:
+ 18:27:fa:f5:5e:54:e6:3e:1e:b9:24:4c:86:cd:94:81:8d:60:
+ 49:d7:a7:a7:de:a5:4d:30:32:88:0a:95:a9:36:01:51:20:1e:
+ 2f:e2:1f:b8:fb:fb:14:77:9a:37:c3:96:21:e5:8b:96:a9:a0:
+ 97:24:b8:1c:f5:dd:a2:1b:bb:04:c4:f3:b0:22:56:38:cc:20:
+ e1:5b:51:90:7c:14:5c:5e:ce:df:b1:a9:57:a2:3b:d6:0f:56:
+ 3b:96:94:7e:c5:c7:a8:6e:eb:77:fe:50:1e:21:c8:0b:c2:3f:
+ 6f:48:d0:dd:d4:f5:29:39:3f:e1:a7:bd:c8:ba:35:d3:28:72:
+ 92:d4:e6:33
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:a3:83:87:29:55:0b:8e:0a:7e:d7:d3:74:4f:6c:
+ 58:a6:8c:5c:09:8d:13:65:8b:94:04:8e:52:13:93:
+ 9e:8c:75:2b:37:f7:9f:ca:64:92:f2:42:e9:8d:d6:
+ 36:19:ab:14:e4:f3:76:16:65:68:3d:3b:51:eb:e5:
+ d0:33:af:8e:26:5b:f2:5c:4e:3d:7e:11:46:b6:2a:
+ 6d:fd:3a:54:57:91:8b:6c:e1:fb:8b:08:b8:80:d3:
+ 0d:2d:d0:b8:2e:1e:f0:b3:33:c5:15:0b:b0:ad:de:
+ 27:68:a4:3d:3b:6c:8d:4c:a6:d0:5c:7e:58:52:01:
+ 8f:fe:fb:86:5e:ce:ea:fc:33:77:28:c5:4c:ee:d0:
+ 0b:cb:a7:97:7f:05:70:53:a3:61:06:fa:b3:9d:7e:
+ d5:dd:3f:ef:58:04:f8:3c:91:fc:8d:fa:ca:cd:97:
+ a4:3b:44:ac:dd:64:a7:32:08:87:0f:73:36:d7:14:
+ e0:1d:b8:29:11:97:cb:9d:79:1f:bc:c8:cc:28:ae:
+ 8e:9a:2f:39:62:1f:28:aa:b9:c7:81:7c:34:96:44:
+ 39:e6:00:4b:5b:0e:4b:7a:fd:ca:bf:5d:67:50:91:
+ 3a:59:89:1b:3a:12:7c:7e:b9:58:54:e5:4f:97:00:
+ 35:c8:a7:b9:fd:3f:5e:08:5e:ac:0c:ba:61:e8:42:
+ 34:33
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 99:38:AC:DE:DD:17:19:E4:9D:92:02:FD:01:4D:40:C5:2C:4E:B7:4A
+ X509v3 Authority Key Identifier:
+ keyid:99:38:AC:DE:DD:17:19:E4:9D:92:02:FD:01:4D:40:C5:2C:4E:B7:4A
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 47:a7:24:e7:1f:29:34:d7:8e:3a:e1:af:aa:d3:3b:32:f4:d6:
+ 7d:ec:ab:7c:34:59:0b:b1:33:80:6a:d4:36:4a:78:d3:3a:d6:
+ 97:0d:8b:81:54:09:91:b5:30:79:78:e7:52:11:ba:e8:57:af:
+ f3:f8:f0:ff:17:9a:e3:d0:a0:89:81:50:e8:67:47:9b:b5:68:
+ ed:99:10:1b:d6:31:58:24:dd:74:3c:8b:76:77:46:a3:b9:ca:
+ b6:4b:3d:ca:b9:5b:ac:e7:92:8c:d3:f2:4a:ba:4b:2f:c6:11:
+ cf:38:15:59:5a:fa:2d:d2:72:31:8f:54:a4:7e:44:a7:26:9d:
+ 1b:38:e0:ac:75:72:9c:71:4c:78:54:80:8f:74:b7:11:b0:5c:
+ c7:69:a5:03:1e:cd:5e:c5:cd:60:0e:80:32:19:02:e0:8c:b4:
+ 76:e7:00:a1:e5:bc:29:31:61:a6:55:f0:72:92:78:69:6f:26:
+ 08:96:71:b9:42:a9:eb:cc:54:8e:d6:55:1a:26:2c:a0:b5:a6:
+ df:52:86:a1:df:26:da:26:86:d5:17:5b:c9:9b:90:c0:6c:ab:
+ 23:1a:82:2d:ff:b6:83:ae:3c:c1:c3:85:5e:49:aa:d6:ef:fd:
+ f4:4a:22:7c:90:b8:46:2e:15:63:93:0c:c5:2d:9e:f6:32:03:
+ 53:10:30:36
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
index fcd63fa..23a69d8 100644
--- a/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
@@ -1,4 +1,4 @@
-[Created by: ./generate-key-rollover.py]
+[Created by: generate-key-rollover.py]
A certificate tree with two self-signed root certificates(oldroot, newroot),
and a third root certificate (newrootrollover) which has the same key as newroot
@@ -48,30 +48,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:be:12:1c:48:e4:73:1f:5c:d2:54:a9:7b:58:1c:
- 37:73:c2:49:26:3e:ed:b5:6b:55:17:c9:4c:52:34:
- ce:d9:76:86:32:74:74:ae:11:b2:99:1b:51:a0:33:
- 48:34:2f:b9:d3:2b:06:c2:5c:29:53:35:ce:7c:a6:
- 67:b2:6a:d4:33:c3:13:62:30:a1:53:5f:45:78:5b:
- bb:47:ad:07:a4:98:9a:e9:e3:b1:3b:e6:33:c2:c1:
- 5c:95:d7:c8:b9:a6:72:27:7a:79:da:c4:c8:5a:1a:
- 3e:5e:5e:a6:62:64:c6:72:86:b1:78:98:5b:63:27:
- 70:15:04:6b:b1:0f:11:9c:4d:3b:5c:e7:8d:c0:be:
- d5:84:46:6c:bd:11:1e:21:c1:82:9c:d0:aa:2d:2f:
- f8:2a:e9:3b:e4:35:15:6d:c7:4a:dd:a8:65:69:b8:
- 16:a1:8a:04:a2:44:68:40:b6:99:ae:61:df:9f:6c:
- 40:ef:79:c9:a3:6d:e4:2d:07:01:68:f1:21:4e:0e:
- 28:a7:fd:2f:ad:ee:7d:65:cf:36:fd:4f:1b:ba:10:
- 8e:86:fd:ec:37:67:0c:20:71:66:48:64:f3:82:af:
- f5:e1:73:c9:09:36:03:3f:c2:47:7a:f2:33:b9:f9:
- 9f:53:9b:24:5e:c3:cc:05:d9:a9:ed:d7:b2:2a:c5:
- b7:39
+ 00:ab:ca:16:55:35:25:9b:de:8e:fc:e9:5a:f9:04:
+ 3e:0e:6c:06:1e:1c:86:20:18:4f:41:da:3a:6d:16:
+ 9e:4e:3c:9b:11:67:bc:5a:3d:84:b2:79:05:d2:25:
+ 9a:6a:a8:80:6c:55:28:f2:5a:43:5f:c5:ef:e9:e3:
+ 1a:64:24:7e:57:4d:11:60:d7:e6:a9:2b:73:c7:93:
+ bb:67:b1:41:d5:df:21:5c:bd:98:93:a3:7d:0d:b0:
+ 86:5f:87:a9:d9:ab:ad:97:89:c5:12:c4:0f:71:d3:
+ 5b:79:18:53:64:7f:0a:a1:36:5e:00:5c:b9:ee:5e:
+ 14:10:17:f2:2a:60:0f:f7:ec:aa:d7:ad:d3:dc:8a:
+ 44:59:cf:c8:11:e7:42:1c:88:30:d7:1e:37:86:91:
+ 6b:ce:2a:bc:bb:f5:4a:cc:72:1a:9d:4f:5f:0e:c4:
+ c5:f7:b6:24:09:1c:22:f8:f7:a2:3d:45:c2:29:4d:
+ a3:f3:db:7a:a4:93:a2:48:d6:2b:90:da:0c:2b:d9:
+ 96:f0:d6:c7:eb:d0:eb:a8:08:72:55:a8:10:65:8f:
+ 38:6a:22:0c:9c:3d:68:1a:cd:16:da:73:24:2e:14:
+ 5d:08:05:fb:07:d1:52:53:4e:51:e4:b2:f3:17:4d:
+ f1:d0:c3:23:51:86:fb:a4:b9:09:37:9c:13:69:65:
+ 51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C9:45:0B:2A:F2:D8:8D:2A:D7:CE:AF:56:BF:82:B0:84:0C:C8:2E:F4
+ 90:8D:89:42:17:BF:F6:98:D1:AA:8C:BF:AF:C2:74:60:AB:ED:90:0F
X509v3 Authority Key Identifier:
- keyid:B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ keyid:A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
@@ -86,42 +86,42 @@
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 63:66:9e:6c:34:8c:5d:74:ae:90:25:55:ae:86:49:b9:3d:fd:
- 27:bc:4f:69:7b:70:cb:25:0e:a3:8c:7a:7d:9c:4f:0b:7c:f2:
- 85:a5:ea:82:d2:37:c2:74:a2:ae:a8:bf:62:f4:5f:d4:c6:41:
- 45:0c:cc:27:53:aa:8f:66:58:e9:b0:de:ae:98:14:bd:92:df:
- 9b:0f:f2:c5:3b:d2:bc:1c:3e:80:b4:09:0f:c1:9f:d6:3a:29:
- 52:71:b6:1a:92:95:5a:18:dc:b4:30:dc:61:61:93:54:d1:55:
- 83:92:5d:c0:c7:dc:ab:d7:08:dd:8a:44:cf:92:f9:4d:86:25:
- aa:ac:52:f6:0e:17:99:0b:31:d2:75:5e:33:f9:f5:b6:77:42:
- 07:62:a9:53:cc:f3:79:84:57:d9:14:3f:ab:4c:8b:ae:c7:9f:
- cf:7a:1f:bf:7e:1d:44:bd:76:b4:cd:8d:c8:1d:75:f7:3b:b5:
- bc:35:8b:3f:29:b1:cb:67:a4:17:af:a4:ca:9f:2b:e7:15:66:
- e4:c8:c1:7c:08:78:9e:5d:4b:c3:c6:58:66:96:42:e8:e6:40:
- fd:dc:24:ce:3b:58:11:38:40:0e:fc:a9:c0:2c:0f:e5:cc:bb:
- 02:32:31:b9:bc:6f:2d:1d:f6:2b:7c:d3:f8:24:f6:60:38:8a:
- 1f:dd:e1:50
+ 74:15:69:e0:48:a6:e3:fa:20:b6:3f:90:d7:61:d3:ea:b7:47:
+ 61:c7:81:6b:42:95:44:ac:1e:6f:3d:df:ad:2c:33:0d:e8:94:
+ 5b:d1:24:89:56:27:76:e4:6c:09:26:a7:e5:62:c9:96:83:ce:
+ 9d:08:f5:ee:c4:3d:fe:77:29:ae:8d:9f:7f:d5:81:b6:5d:b5:
+ 54:a0:1f:6c:54:1e:dd:a7:4e:78:e0:6c:60:1d:e8:1f:97:77:
+ 67:8d:57:80:00:17:80:cd:ab:ce:31:87:6e:9e:bf:3f:38:b9:
+ da:96:a3:d2:22:63:43:dd:5c:e8:42:ea:2d:eb:ab:81:33:e5:
+ 95:36:46:3c:dd:8e:ad:e2:43:40:6f:3c:ce:73:4d:52:71:9d:
+ 54:59:f4:73:a2:5a:48:a5:c7:bc:dd:f9:9f:91:39:b1:bc:ad:
+ 9a:59:ea:f6:33:42:72:66:2f:e9:78:8f:b6:09:15:35:d8:e6:
+ 70:0d:d3:da:a7:7e:55:d9:05:88:47:16:1d:cd:54:1c:15:11:
+ a6:d3:35:2a:4e:c5:0f:f7:b0:98:24:bf:7e:78:3e:5f:56:0c:
+ 87:72:c2:d1:7d:3e:3c:c6:98:50:a9:c7:cd:6f:0e:12:b4:32:
+ 7a:b8:01:6c:88:1c:8a:c2:19:24:1e:34:9b:da:45:eb:0a:f9:
+ 99:6e:54:c6
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EhxI
-5HMfXNJUqXtYHDdzwkkmPu21a1UXyUxSNM7ZdoYydHSuEbKZG1GgM0g0L7nTKwbC
-XClTNc58pmeyatQzwxNiMKFTX0V4W7tHrQekmJrp47E75jPCwVyV18i5pnInenna
-xMhaGj5eXqZiZMZyhrF4mFtjJ3AVBGuxDxGcTTtc543AvtWERmy9ER4hwYKc0Kot
-L/gq6TvkNRVtx0rdqGVpuBahigSiRGhAtpmuYd+fbEDvecmjbeQtBwFo8SFODiin
-/S+t7n1lzzb9Txu6EI6G/ew3ZwwgcWZIZPOCr/Xhc8kJNgM/wkd68jO5+Z9TmyRe
-w8wF2ant17Iqxbc5AgMBAAGjgekwgeYwHQYDVR0OBBYEFMlFCyry2I0q186vVr+C
-sIQMyC70MB8GA1UdIwQYMBaAFLE5eRM10ANr6cRjK8zWYcOC7BTBMD8GCCsGAQUF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-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAY2aebDSMXXSukCVVroZJ
-uT39J7xPaXtwyyUOo4x6fZxPC3zyhaXqgtI3wnSirqi/YvRf1MZBRQzMJ1Oqj2ZY
-6bDerpgUvZLfmw/yxTvSvBw+gLQJD8Gf1jopUnG2GpKVWhjctDDcYWGTVNFVg5Jd
-wMfcq9cI3YpEz5L5TYYlqqxS9g4XmQsx0nVeM/n1tndCB2KpU8zzeYRX2RQ/q0yL
-rsefz3ofv34dRL12tM2NyB119zu1vDWLPymxy2ekF6+kyp8r5xVm5MjBfAh4nl1L
-w8ZYZpZC6OZA/dwkzjtYEThADvypwCwP5cy7AjIxubxvLR32K3zT+CT2YDiKH93h
-UA==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdBVp4Eim4/ogtj+Q12HT
+6rdHYceBa0KVRKwebz3frSwzDeiUW9EkiVYnduRsCSan5WLJloPOnQj17sQ9/ncp
+ro2ff9WBtl21VKAfbFQe3adOeOBsYB3oH5d3Z41XgAAXgM2rzjGHbp6/Pzi52paj
+0iJjQ91c6ELqLeurgTPllTZGPN2OreJDQG88znNNUnGdVFn0c6JaSKXHvN35n5E5
+sbytmlnq9jNCcmYv6XiPtgkVNdjmcA3T2qd+VdkFiEcWHc1UHBURptM1Kk7FD/ew
+mCS/fng+X1YMh3LC0X0+PMaYUKnHzW8OErQyergBbIgcisIZJB40m9pF6wr5mW5U
+xg==
-----END CERTIFICATE-----
Certificate:
@@ -138,30 +138,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9c:d0:2e:3b:06:d6:ea:65:bd:dd:b2:d3:e8:88:
- ea:08:73:01:42:ac:ca:38:28:17:32:93:5e:16:a8:
- c1:79:44:9a:db:24:08:ba:81:52:63:9c:b4:ed:57:
- d4:b2:ac:54:64:3b:70:39:7e:37:da:11:e1:8c:ba:
- 09:bc:1a:9b:e7:fe:6d:75:f8:71:31:f0:ca:52:89:
- 2a:9e:d5:53:db:b8:c0:76:cf:bf:58:58:e1:bb:81:
- de:62:bb:06:58:1f:9b:64:03:75:7d:ee:76:6f:39:
- 47:cb:8e:34:32:07:83:89:b0:83:2a:78:d0:ac:e2:
- 86:0a:a8:ab:3b:97:81:de:9d:36:b4:03:b7:d5:06:
- 05:53:d7:80:03:44:86:53:72:db:7a:5f:c5:20:dd:
- c7:44:58:3b:40:7f:0e:39:bc:be:0d:ca:6a:f6:82:
- a2:97:a2:17:79:51:6f:42:5d:0d:6a:b7:a0:de:5f:
- 6a:00:be:e7:5a:b7:91:e9:fc:77:fd:75:88:8d:52:
- 76:3d:0e:91:4b:c7:db:96:a4:5f:39:59:55:62:65:
- 3b:15:7a:bc:7b:09:9f:3e:75:d9:9e:c5:00:b3:19:
- d4:26:7e:eb:db:62:07:c2:f5:b6:4e:87:2d:eb:56:
- 8b:5a:68:6c:85:2f:b4:3e:1d:dd:5d:31:49:98:8b:
- 06:55
+ 00:ad:d7:63:a2:51:33:32:fd:aa:73:2c:32:30:ac:
+ 2f:8d:37:5f:08:b2:9b:02:1a:f7:3c:eb:c2:9e:82:
+ d9:a2:0e:02:14:28:bc:18:e2:92:8e:db:66:14:36:
+ 3f:ef:43:47:ac:b4:e2:be:92:82:14:9a:bd:97:d7:
+ 19:6f:88:29:b1:85:68:bd:13:d5:93:2c:a0:c8:bb:
+ 76:9d:ad:f5:da:e8:55:ca:87:6d:07:20:f4:22:cf:
+ 5a:51:ea:e1:7b:c3:7e:f9:a8:85:95:c5:e9:88:bf:
+ 7b:5e:fd:49:d4:c4:ed:ce:b7:d2:71:23:59:00:a7:
+ 6f:85:40:a0:38:c6:2b:88:99:68:e9:97:7e:2f:92:
+ 97:18:0a:19:c2:4e:0a:28:2c:b3:b4:67:26:eb:1d:
+ 03:f6:16:58:20:88:81:ee:a8:ea:19:ae:25:e9:34:
+ 8d:87:f3:d2:3b:0e:b2:d8:31:14:ee:bd:c6:01:ec:
+ d4:41:f0:06:7b:3e:20:7b:06:88:86:29:d1:77:9a:
+ c0:bc:69:63:3f:2b:20:ac:aa:17:33:29:78:0a:11:
+ ff:92:f2:b3:4a:58:29:96:d3:f4:4f:70:ef:9c:81:
+ 55:1c:21:20:bf:54:5a:dd:60:b7:6e:53:41:a2:19:
+ 55:b5:f9:b8:6e:63:37:73:a0:b8:d4:c5:c1:a2:4e:
+ 0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -176,41 +176,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- a8:ad:48:d8:6e:1d:24:09:d2:b3:29:3c:48:60:27:7f:37:64:
- d5:f1:3b:b3:5c:43:de:7c:b4:5f:ee:3a:f2:1a:25:24:0a:8a:
- 25:6d:19:5b:dc:0c:4e:48:61:2f:60:d3:6b:f3:9c:03:2c:d3:
- fa:c8:9b:99:e7:2e:c5:43:c0:5f:14:cd:8b:92:62:4f:e5:3a:
- cd:b5:0a:d8:b2:01:c7:44:b4:3a:86:66:bf:fa:11:a5:f8:24:
- 3f:d1:1a:e8:eb:1e:ad:f0:70:31:6f:bc:21:cf:db:ce:63:4e:
- 84:e9:52:9e:bb:1b:c4:72:ae:e0:6c:88:9e:99:dc:79:d9:fd:
- 83:26:8e:f6:19:70:d9:5e:fc:f4:0c:d1:17:6f:af:10:f6:64:
- 16:08:d8:72:ba:3a:2d:66:28:5a:41:0d:f3:47:87:a7:9c:78:
- c6:cd:5e:25:71:0b:f2:93:b8:26:17:b2:19:17:cc:03:ed:c0:
- 6e:06:e2:4b:4a:57:5f:23:02:2a:69:06:7a:c4:b7:3e:2f:e8:
- f0:03:ae:b8:2d:df:63:22:20:73:23:75:d9:3c:d7:22:e4:b4:
- 65:65:ed:b9:e6:02:1d:b5:51:11:9c:db:92:e4:fe:8c:1d:bb:
- c5:95:87:5b:38:ee:ff:e4:01:d1:5d:84:b9:73:d3:da:23:ca:
- 5e:05:d3:7d
+ 7f:a1:7c:8f:ea:d9:b9:63:e1:b0:31:0a:2e:1c:8e:e9:d0:23:
+ ee:3e:8e:50:55:db:ba:10:93:a4:93:0b:bb:c1:a5:3d:32:90:
+ ee:40:bf:0f:df:25:f1:65:b3:30:6d:39:9b:d2:c1:b8:b7:a8:
+ 7e:23:dc:6a:c3:5a:9e:53:d7:86:4c:82:de:98:23:1a:6f:f9:
+ 0d:6d:b9:35:55:b9:94:03:8d:b7:6c:2e:64:79:ea:85:84:7e:
+ 51:18:37:42:80:f5:d4:16:3f:a0:a9:6b:bf:17:d1:19:99:ea:
+ 8d:5a:c9:30:b0:ca:c8:2c:17:ce:14:75:b3:c9:19:df:16:1b:
+ 9a:97:ae:50:69:a5:6c:02:57:84:f4:7f:30:90:ed:89:bb:0e:
+ c9:7b:34:d0:41:58:00:20:29:6b:f0:e8:97:81:92:3d:ba:e0:
+ 65:e9:7c:cb:5c:7b:50:c8:0f:d3:20:ab:42:2f:0d:44:6d:99:
+ c2:1d:42:e8:b2:10:82:9b:86:ba:a8:45:d2:2c:13:53:cf:ad:
+ 37:ac:ce:f3:e7:49:fe:59:d5:b6:5f:8b:6b:fd:5f:e0:f2:91:
+ ef:e3:f7:e0:b6:ee:e7:ae:77:0e:66:12:40:55:75:77:2a:05:
+ d4:bd:ab:7e:5a:67:d8:81:8b:15:fd:4c:60:63:c7:f7:5f:fa:
+ d4:d8:d9:d2
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAuOwbW
-6mW93bLT6IjqCHMBQqzKOCgXMpNeFqjBeUSa2yQIuoFSY5y07VfUsqxUZDtwOX43
-2hHhjLoJvBqb5/5tdfhxMfDKUokqntVT27jAds+/WFjhu4HeYrsGWB+bZAN1fe52
-bzlHy440MgeDibCDKnjQrOKGCqirO5eB3p02tAO31QYFU9eAA0SGU3Lbel/FIN3H
-RFg7QH8OOby+Dcpq9oKil6IXeVFvQl0Nareg3l9qAL7nWreR6fx3/XWIjVJ2PQ6R
-S8fblqRfOVlVYmU7FXq8ewmfPnXZnsUAsxnUJn7r22IHwvW2Toct61aLWmhshS+0
-Ph3dXTFJmIsGVQIDAQABo4HLMIHIMB0GA1UdDgQWBBSxOXkTNdADa+nEYyvM1mHD
-guwUwTAfBgNVHSMEGDAWgBQVnqat9Z+KocEImb9mb8/Kcs0MNDA3BggrBgEFBQcB
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArddjolEz
+Mv2qcywyMKwvjTdfCLKbAhr3POvCnoLZog4CFCi8GOKSjttmFDY/70NHrLTivpKC
+FJq9l9cZb4gpsYVovRPVkyygyLt2na312uhVyodtByD0Is9aUerhe8N++aiFlcXp
+iL97Xv1J1MTtzrfScSNZAKdvhUCgOMYriJlo6Zd+L5KXGAoZwk4KKCyztGcm6x0D
+9hZYIIiB7qjqGa4l6TSNh/PSOw6y2DEU7r3GAezUQfAGez4gewaIhinRd5rAvGlj
+PysgrKoXMyl4ChH/kvKzSlgpltP0T3DvnIFVHCEgv1Ra3WC3blNBohlVtfm4bmM3
+c6C41MXBok4OEQIDAQABo4HLMIHIMB0GA1UdDgQWBBSlJY7DFJyGGTD1BcWqyDcS
+9pRKRjAfBgNVHSMEGDAWgBSD+ZPVKfnEuqFf5Ml0GODfDhcYUDA3BggrBgEFBQcB
AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AKitSNhuHSQJ0rMpPEhgJ383ZNXxO7NcQ958tF/uOvIaJSQKiiVtGVvcDE5IYS9g
-02vznAMs0/rIm5nnLsVDwF8UzYuSYk/lOs21CtiyAcdEtDqGZr/6EaX4JD/RGujr
-Hq3wcDFvvCHP285jToTpUp67G8RyruBsiJ6Z3HnZ/YMmjvYZcNle/PQM0RdvrxD2
-ZBYI2HK6Oi1mKFpBDfNHh6eceMbNXiVxC/KTuCYXshkXzAPtwG4G4ktKV18jAipp
-BnrEtz4v6PADrrgt32MiIHMjddk81yLktGVl7bnmAh21URGc25Lk/owdu8WVh1s4
-7v/kAdFdhLlz09ojyl4F030=
+AH+hfI/q2blj4bAxCi4cjunQI+4+jlBV27oQk6STC7vBpT0ykO5Avw/fJfFlszBt
+OZvSwbi3qH4j3GrDWp5T14ZMgt6YIxpv+Q1tuTVVuZQDjbdsLmR56oWEflEYN0KA
+9dQWP6Cpa78X0RmZ6o1ayTCwysgsF84UdbPJGd8WG5qXrlBppWwCV4T0fzCQ7Ym7
+Dsl7NNBBWAAgKWvw6JeBkj264GXpfMtce1DID9Mgq0IvDURtmcIdQuiyEIKbhrqo
+RdIsE1PPrTeszvPnSf5Z1bZfi2v9X+Dyke/j9+C27ueudw5mEkBVdXcqBdS9q35a
+Z9iBixX9TGBjx/df+tTY2dI=
-----END CERTIFICATE-----
Certificate:
@@ -227,30 +227,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ae:ea:3b:3f:b6:e9:3d:ea:eb:3d:dd:e8:4d:45:
- 83:63:78:ea:07:90:3a:3c:4f:92:54:2b:2d:02:1b:
- eb:9e:81:72:68:2e:73:f8:4a:a1:de:0c:d6:f0:c2:
- 61:26:90:0b:48:59:ab:23:25:8f:e4:4a:6b:c9:2d:
- ba:a7:35:c4:22:df:76:99:d8:7b:f7:6d:ca:9b:da:
- d2:ed:7e:c8:93:b2:a7:f6:f0:05:6a:5d:c6:e1:79:
- d0:25:59:a9:50:1e:65:eb:1c:c9:cd:4e:6a:3a:2a:
- a4:1a:fa:81:a3:e7:ae:d7:de:43:d9:e8:0b:5c:b0:
- 6b:46:39:c5:9c:4a:6d:59:bf:da:70:2e:80:ac:c8:
- 80:e3:83:d1:71:7b:a7:0b:92:bf:a8:81:ad:5c:b2:
- d5:e9:b9:5f:b5:4f:93:43:67:72:36:b3:f7:17:b9:
- 1b:da:2a:13:83:70:36:ae:59:03:3d:f0:71:de:a2:
- 7a:41:ad:b5:e9:a2:51:e4:18:ec:88:ad:48:f1:df:
- 17:04:43:54:2a:af:3c:c0:f5:84:39:43:d1:a7:d2:
- 52:0f:3c:dd:ef:13:58:8c:1d:d4:dd:2e:6d:1a:e7:
- 73:9b:8b:f3:41:7b:9a:53:4e:0d:92:d3:5d:3f:fc:
- c3:61:dc:5f:a0:93:3c:08:cc:b4:9b:ce:9d:78:e3:
- 77:c9
+ 00:c8:01:d6:aa:f0:22:fa:55:68:e4:56:fa:87:9f:
+ 03:a4:78:36:40:64:b2:60:f7:20:25:47:92:b0:cb:
+ c7:9d:4c:c6:4d:78:0f:91:9e:a8:f1:0b:84:58:b1:
+ a9:06:2d:7d:09:82:f4:1a:60:67:7b:c3:47:69:05:
+ b5:59:90:02:2a:53:27:25:21:4d:9a:5f:b6:7b:58:
+ 25:77:b3:46:64:fc:ed:04:c0:e2:62:e5:96:f9:8a:
+ 8d:9a:e8:8d:bf:d9:19:38:97:52:ab:31:3c:1c:a2:
+ b9:21:ec:5f:aa:8c:21:44:c6:73:7f:0b:72:c9:61:
+ 1c:a7:cd:46:bb:da:5b:a7:1b:e2:18:fb:ff:18:81:
+ 5f:fb:75:29:21:9c:92:e0:d3:03:f5:b8:58:94:36:
+ 32:7a:9a:a7:ec:49:ab:ef:d4:8c:c4:65:aa:23:40:
+ 96:76:47:4b:06:0b:21:c4:44:9f:8d:12:ab:05:05:
+ e7:97:d9:9d:c0:f9:4d:77:14:0b:c5:d5:82:0c:d7:
+ 14:54:fa:07:dd:a3:78:30:5d:95:83:e4:1c:7f:c2:
+ 13:c6:b1:8b:10:87:9b:e9:3e:4f:d6:b6:b9:a8:9f:
+ 4c:47:f8:40:67:7d:4e:9b:87:4a:b6:92:eb:33:f1:
+ 73:a3:70:d6:fc:37:32:2a:b4:b8:56:90:63:5e:ec:
+ b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ 83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -265,41 +265,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 58:4b:60:7e:0b:c2:3d:20:f3:49:34:91:55:d3:5f:5b:ce:81:
- 31:da:71:9f:72:d7:f4:cc:be:cf:58:b8:97:aa:99:87:3d:34:
- 12:ac:40:1c:8e:02:46:83:ee:04:e1:7e:5e:57:ca:a4:ae:e1:
- d0:b4:12:e9:65:33:f5:4e:c4:f6:49:00:7f:83:6d:75:67:84:
- b2:db:52:5a:a2:3e:5d:2d:5c:f3:45:fe:6a:d3:c4:0a:76:52:
- c6:9b:b0:89:01:b9:b6:be:30:60:d9:b4:2e:1d:1e:bf:ef:d8:
- 12:90:9f:cb:67:29:20:61:9f:1a:67:64:88:4c:43:ec:10:7d:
- 87:11:00:44:6a:ce:37:af:73:f4:fa:d2:22:2f:24:3a:6f:79:
- 09:6c:8d:de:b5:71:0e:6e:b7:64:a9:be:73:a8:c1:c8:50:74:
- d2:c4:2b:ef:4f:25:20:8f:41:f0:1f:6e:52:77:eb:a0:1a:94:
- 87:7c:35:11:37:5c:33:f5:83:47:e0:f2:0e:97:af:23:61:23:
- 25:0b:92:6c:3b:30:a1:aa:c6:dc:4a:05:6e:43:76:58:82:66:
- cd:f6:d6:ef:9b:80:36:d6:95:b7:d1:ec:5c:53:f7:78:84:ef:
- 48:6a:2c:f7:93:97:f2:7a:ce:ec:f3:eb:63:e1:5a:e0:69:02:
- 5d:34:36:93
+ a9:e8:26:5f:c8:9e:6b:fc:cd:4d:d2:9e:de:f5:f1:08:04:66:
+ 23:6a:7e:ee:92:9f:eb:71:53:ea:97:8e:db:e4:47:72:7a:08:
+ 17:1c:72:4a:37:00:f5:e3:a8:77:d2:b1:d4:89:45:b2:e9:ba:
+ 00:61:6e:cb:03:b4:21:aa:ec:e4:f3:a4:41:b7:90:41:08:0f:
+ 0d:90:bd:55:4a:bc:1c:7f:2e:c1:97:6d:34:d1:8d:da:39:46:
+ 55:49:97:4c:f7:eb:29:62:b3:ed:ad:24:d8:05:9a:93:82:f2:
+ 12:34:24:78:60:a4:7b:a9:94:97:75:10:20:57:42:83:32:0d:
+ 19:d0:15:3b:55:84:d8:49:9b:a4:66:14:c9:90:f4:89:bc:23:
+ 2a:45:dd:19:25:68:6e:fe:44:60:c0:19:75:61:3f:85:4b:90:
+ 8c:45:3b:2e:9b:41:12:43:ee:2f:61:96:ff:af:4b:11:fe:af:
+ 02:af:0d:69:0d:ae:11:bc:eb:34:de:ac:24:3b:08:6e:b3:b2:
+ 1a:8e:46:d9:6b:91:08:4e:c3:5b:f6:3c:3f:90:8d:95:01:b9:
+ d9:30:aa:2d:79:00:bb:99:a1:ed:0a:1c:28:fc:5c:12:1c:3d:
+ 53:33:c8:ca:b1:9c:13:a2:2a:c7:1d:ce:b7:1e:2c:35:37:e8:
+ 10:af:0c:e6
-----BEGIN CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7qOz+26T3q6z3d6E1F
-g2N46geQOjxPklQrLQIb656Bcmguc/hKod4M1vDCYSaQC0hZqyMlj+RKa8ktuqc1
-xCLfdpnYe/dtypva0u1+yJOyp/bwBWpdxuF50CVZqVAeZescyc1OajoqpBr6gaPn
-rtfeQ9noC1ywa0Y5xZxKbVm/2nAugKzIgOOD0XF7pwuSv6iBrVyy1em5X7VPk0Nn
-cjaz9xe5G9oqE4NwNq5ZAz3wcd6iekGttemiUeQY7IitSPHfFwRDVCqvPMD1hDlD
-0afSUg883e8TWIwd1N0ubRrnc5uL80F7mlNODZLTXT/8w2HcX6CTPAjMtJvOnXjj
-d8kCAwEAAaOByzCByDAdBgNVHQ4EFgQUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwHwYD
-VR0jBBgwFoAUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgB1qrwIvpVaORW+oef
+A6R4NkBksmD3ICVHkrDLx51Mxk14D5GeqPELhFixqQYtfQmC9BpgZ3vDR2kFtVmQ
+AipTJyUhTZpftntYJXezRmT87QTA4mLllvmKjZrojb/ZGTiXUqsxPByiuSHsX6qM
+IUTGc38LcslhHKfNRrvaW6cb4hj7/xiBX/t1KSGckuDTA/W4WJQ2Mnqap+xJq+/U
+jMRlqiNAlnZHSwYLIcREn40SqwUF55fZncD5TXcUC8XVggzXFFT6B92jeDBdlYPk
+HH/CE8axixCHm+k+T9a2uaifTEf4QGd9TpuHSraS6zPxc6Nw1vw3Miq0uFaQY17s
+t7cCAwEAAaOByzCByDAdBgNVHQ4EFgQUg/mT1Sn5xLqhX+TJdBjg3w4XGFAwHwYD
+VR0jBBgwFoAUg/mT1Sn5xLqhX+TJdBjg3w4XGFAwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBYS2B+C8I9
-IPNJNJFV019bzoEx2nGfctf0zL7PWLiXqpmHPTQSrEAcjgJGg+4E4X5eV8qkruHQ
-tBLpZTP1TsT2SQB/g211Z4Sy21Jaoj5dLVzzRf5q08QKdlLGm7CJAbm2vjBg2bQu
-HR6/79gSkJ/LZykgYZ8aZ2SITEPsEH2HEQBEas43r3P0+tIiLyQ6b3kJbI3etXEO
-brdkqb5zqMHIUHTSxCvvTyUgj0HwH25Sd+ugGpSHfDURN1wz9YNH4PIOl68jYSMl
-C5JsOzChqsbcSgVuQ3ZYgmbN9tbvm4A21pW30excU/d4hO9Iaiz3k5fyes7s8+tj
-4VrgaQJdNDaT
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCp6CZfyJ5r
+/M1N0p7e9fEIBGYjan7ukp/rcVPql47b5EdyeggXHHJKNwD146h30rHUiUWy6boA
+YW7LA7Qhquzk86RBt5BBCA8NkL1VSrwcfy7Bl2000Y3aOUZVSZdM9+spYrPtrSTY
+BZqTgvISNCR4YKR7qZSXdRAgV0KDMg0Z0BU7VYTYSZukZhTJkPSJvCMqRd0ZJWhu
+/kRgwBl1YT+FS5CMRTsum0ESQ+4vYZb/r0sR/q8Crw1pDa4RvOs03qwkOwhus7Ia
+jkbZa5EITsNb9jw/kI2VAbnZMKoteQC7maHtChwo/FwSHD1TM8jKsZwToirHHc63
+Hiw1N+gQrwzm
-----END CERTIFICATE-----
Certificate:
@@ -316,30 +316,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ae:ea:3b:3f:b6:e9:3d:ea:eb:3d:dd:e8:4d:45:
- 83:63:78:ea:07:90:3a:3c:4f:92:54:2b:2d:02:1b:
- eb:9e:81:72:68:2e:73:f8:4a:a1:de:0c:d6:f0:c2:
- 61:26:90:0b:48:59:ab:23:25:8f:e4:4a:6b:c9:2d:
- ba:a7:35:c4:22:df:76:99:d8:7b:f7:6d:ca:9b:da:
- d2:ed:7e:c8:93:b2:a7:f6:f0:05:6a:5d:c6:e1:79:
- d0:25:59:a9:50:1e:65:eb:1c:c9:cd:4e:6a:3a:2a:
- a4:1a:fa:81:a3:e7:ae:d7:de:43:d9:e8:0b:5c:b0:
- 6b:46:39:c5:9c:4a:6d:59:bf:da:70:2e:80:ac:c8:
- 80:e3:83:d1:71:7b:a7:0b:92:bf:a8:81:ad:5c:b2:
- d5:e9:b9:5f:b5:4f:93:43:67:72:36:b3:f7:17:b9:
- 1b:da:2a:13:83:70:36:ae:59:03:3d:f0:71:de:a2:
- 7a:41:ad:b5:e9:a2:51:e4:18:ec:88:ad:48:f1:df:
- 17:04:43:54:2a:af:3c:c0:f5:84:39:43:d1:a7:d2:
- 52:0f:3c:dd:ef:13:58:8c:1d:d4:dd:2e:6d:1a:e7:
- 73:9b:8b:f3:41:7b:9a:53:4e:0d:92:d3:5d:3f:fc:
- c3:61:dc:5f:a0:93:3c:08:cc:b4:9b:ce:9d:78:e3:
- 77:c9
+ 00:c8:01:d6:aa:f0:22:fa:55:68:e4:56:fa:87:9f:
+ 03:a4:78:36:40:64:b2:60:f7:20:25:47:92:b0:cb:
+ c7:9d:4c:c6:4d:78:0f:91:9e:a8:f1:0b:84:58:b1:
+ a9:06:2d:7d:09:82:f4:1a:60:67:7b:c3:47:69:05:
+ b5:59:90:02:2a:53:27:25:21:4d:9a:5f:b6:7b:58:
+ 25:77:b3:46:64:fc:ed:04:c0:e2:62:e5:96:f9:8a:
+ 8d:9a:e8:8d:bf:d9:19:38:97:52:ab:31:3c:1c:a2:
+ b9:21:ec:5f:aa:8c:21:44:c6:73:7f:0b:72:c9:61:
+ 1c:a7:cd:46:bb:da:5b:a7:1b:e2:18:fb:ff:18:81:
+ 5f:fb:75:29:21:9c:92:e0:d3:03:f5:b8:58:94:36:
+ 32:7a:9a:a7:ec:49:ab:ef:d4:8c:c4:65:aa:23:40:
+ 96:76:47:4b:06:0b:21:c4:44:9f:8d:12:ab:05:05:
+ e7:97:d9:9d:c0:f9:4d:77:14:0b:c5:d5:82:0c:d7:
+ 14:54:fa:07:dd:a3:78:30:5d:95:83:e4:1c:7f:c2:
+ 13:c6:b1:8b:10:87:9b:e9:3e:4f:d6:b6:b9:a8:9f:
+ 4c:47:f8:40:67:7d:4e:9b:87:4a:b6:92:eb:33:f1:
+ 73:a3:70:d6:fc:37:32:2a:b4:b8:56:90:63:5e:ec:
+ b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ 83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -354,41 +354,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 51:9b:dd:56:f2:b1:2b:e5:36:c8:2f:1d:a9:53:1f:89:e1:24:
- 33:bd:ac:56:c1:c3:1a:38:a6:7e:fc:61:9a:ae:7c:1f:13:3e:
- 37:e4:e6:a9:11:9e:2b:6e:ce:dd:12:0c:c1:b2:b7:eb:48:0e:
- c7:a5:65:f0:86:49:8a:dc:cf:1b:6d:33:af:af:96:51:49:01:
- e4:82:d6:e6:5a:d0:41:c7:05:9f:16:eb:06:bd:bc:ab:fe:a0:
- d7:ac:de:62:d1:71:7e:69:82:31:03:e3:60:28:e6:18:3b:e5:
- 93:2b:58:ee:d5:0b:7b:b6:af:f2:4f:22:eb:4d:b7:a6:74:68:
- b7:82:68:7f:a9:b6:ee:a0:20:d7:c6:16:0e:9c:1c:39:ea:24:
- 5e:60:12:fc:39:60:0d:54:3e:aa:b3:43:e1:0f:ef:d7:8f:3e:
- 09:a9:55:95:e9:3d:0c:4f:ad:cb:c2:f3:2c:10:43:67:54:f9:
- 66:54:81:ff:62:61:94:05:b0:42:af:f0:c5:ac:00:91:28:5c:
- aa:a3:61:44:ba:c2:a6:ab:f8:1d:7e:02:69:33:48:fe:ac:93:
- 7f:4c:99:91:d9:18:37:f9:70:3f:56:2a:ee:4a:e0:4d:f3:60:
- 12:5d:30:d8:37:bf:ca:40:85:29:0c:a7:8f:ab:ad:03:6d:7b:
- ba:62:7f:58
+ a4:6f:3a:2b:4c:55:63:68:09:a1:73:eb:b1:b6:69:07:de:8a:
+ 44:7d:10:bd:05:bf:a9:ef:06:af:c1:90:a6:75:1d:a8:51:e2:
+ f7:9a:4e:d7:23:6b:c1:34:83:64:9c:6d:15:0a:cc:b0:99:13:
+ 53:1f:0b:ef:23:82:6d:32:e1:ea:08:ce:65:21:d4:09:6a:6a:
+ d4:05:1b:96:2b:34:44:89:31:4e:14:11:b2:ff:ae:cf:60:56:
+ 2a:37:2f:18:2b:ae:aa:74:bb:d5:88:fb:3f:d4:ee:4c:f5:f3:
+ 4a:fa:6f:34:78:b7:bd:b1:d0:77:da:86:02:ce:a7:c3:11:f2:
+ 09:bf:3c:17:61:d2:4c:c5:26:07:ec:92:0a:ab:9e:6a:ae:72:
+ 66:34:a3:45:94:76:8c:e7:7c:f8:d3:43:41:b0:70:57:78:56:
+ ee:bc:54:8f:ba:ac:07:dd:cb:3d:a0:1a:79:cb:5b:20:4a:9b:
+ 1a:8d:93:3a:5e:38:11:ae:60:dd:1c:5f:63:5a:dd:06:a6:c3:
+ a1:20:4d:1e:a1:6a:a6:92:7c:1e:b4:01:a7:e3:6c:94:c8:30:
+ a6:bb:a7:2e:d7:66:2b:7f:a6:0b:3f:44:b5:62:2e:32:44:12:
+ 96:f0:bb:49:8a:49:f6:78:05:60:ed:64:13:93:67:35:4f:c8:
+ 38:98:2f:e5
-----BEGIN CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7qOz+26T3q6z3d6E1F
-g2N46geQOjxPklQrLQIb656Bcmguc/hKod4M1vDCYSaQC0hZqyMlj+RKa8ktuqc1
-xCLfdpnYe/dtypva0u1+yJOyp/bwBWpdxuF50CVZqVAeZescyc1OajoqpBr6gaPn
-rtfeQ9noC1ywa0Y5xZxKbVm/2nAugKzIgOOD0XF7pwuSv6iBrVyy1em5X7VPk0Nn
-cjaz9xe5G9oqE4NwNq5ZAz3wcd6iekGttemiUeQY7IitSPHfFwRDVCqvPMD1hDlD
-0afSUg883e8TWIwd1N0ubRrnc5uL80F7mlNODZLTXT/8w2HcX6CTPAjMtJvOnXjj
-d8kCAwEAAaOByzCByDAdBgNVHQ4EFgQUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBRm91W8rEr
-5TbILx2pUx+J4SQzvaxWwcMaOKZ+/GGarnwfEz435OapEZ4rbs7dEgzBsrfrSA7H
-pWXwhkmK3M8bbTOvr5ZRSQHkgtbmWtBBxwWfFusGvbyr/qDXrN5i0XF+aYIxA+Ng
-KOYYO+WTK1ju1Qt7tq/yTyLrTbemdGi3gmh/qbbuoCDXxhYOnBw56iReYBL8OWAN
-VD6qs0PhD+/Xjz4JqVWV6T0MT63LwvMsEENnVPlmVIH/YmGUBbBCr/DFrACRKFyq
-o2FEusKmq/gdfgJpM0j+rJN/TJmR2Rg3+XA/ViruSuBN82ASXTDYN7/KQIUpDKeP
-q60DbXu6Yn9Y
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCkbzorTFVj
+aAmhc+uxtmkH3opEfRC9Bb+p7wavwZCmdR2oUeL3mk7XI2vBNINknG0VCsywmRNT
+HwvvI4JtMuHqCM5lIdQJamrUBRuWKzREiTFOFBGy/67PYFYqNy8YK66qdLvViPs/
+1O5M9fNK+m80eLe9sdB32oYCzqfDEfIJvzwXYdJMxSYH7JIKq55qrnJmNKNFlHaM
+53z400NBsHBXeFbuvFSPuqwH3cs9oBp5y1sgSpsajZM6XjgRrmDdHF9jWt0GpsOh
+IE0eoWqmknwetAGn42yUyDCmu6cu12Yrf6YLP0S1Yi4yRBKW8LtJikn2eAVg7WQT
+k2c1T8g4mC/l
-----END CERTIFICATE-----
Certificate:
@@ -405,30 +405,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:44:ec:a7:15:00:1f:89:ac:91:f8:ec:7b:03:
- 46:0b:53:15:ed:23:40:35:94:f3:96:80:27:d3:4a:
- 84:92:68:c9:0c:e0:14:32:c7:31:67:49:29:58:77:
- ea:ce:8a:72:5b:93:b1:a0:a8:e5:84:c6:52:9d:5a:
- c0:41:bf:98:5f:18:5d:aa:d1:65:79:fb:e9:b0:84:
- 92:9d:2c:58:bc:f1:c4:29:59:ed:bc:ac:85:ce:d7:
- 0e:aa:08:e8:2d:90:25:cb:91:9d:7d:91:74:42:a0:
- ae:77:d2:11:7b:57:49:04:24:c0:94:f4:20:54:60:
- d9:1b:76:76:0b:2c:23:3c:67:90:8c:06:ed:4e:df:
- ac:24:22:26:f7:26:8f:5a:d2:5b:79:8a:6f:6e:53:
- 27:60:10:cb:c7:b4:9f:60:2d:8f:32:69:4b:01:d1:
- f0:6d:69:1a:22:14:06:66:63:97:e8:fc:79:41:8d:
- 15:44:44:d1:43:2a:37:5e:77:e4:06:e6:a9:85:13:
- e9:24:63:9d:09:d0:f5:13:d5:ba:59:2e:1c:d2:70:
- 06:b1:80:f7:57:d7:30:f7:14:f3:18:06:7f:84:38:
- b6:81:46:9f:a2:36:87:0e:5f:1a:45:38:b7:20:16:
- b7:c6:e1:91:3b:0e:0c:ab:b7:4e:3d:a4:6d:66:d8:
- 85:fb
+ 00:ef:e6:e9:e0:b4:83:30:dc:21:a0:1f:9d:c3:81:
+ 9d:a2:a1:ce:e5:ef:1f:94:e3:f0:14:05:12:2a:97:
+ 5e:00:ba:6a:c3:09:b3:06:a1:9e:da:6f:9d:f8:45:
+ a2:6c:1e:7d:a3:10:d2:db:38:24:ed:80:25:36:9c:
+ db:d3:07:af:39:f8:82:48:a3:cd:7f:f3:57:dd:f9:
+ fd:7c:03:d5:8e:5d:35:ae:ed:af:c6:a1:89:ca:2e:
+ 2e:cf:77:5a:26:c6:e4:1d:9d:97:c7:a7:cf:93:aa:
+ 24:22:d9:82:d5:98:47:c9:33:ba:77:7e:6a:a3:35:
+ 43:1c:56:a5:94:2d:48:0f:47:2d:33:cd:c4:46:2d:
+ 54:61:dd:b8:bc:8d:1c:97:7d:4b:f4:fc:6b:3e:4d:
+ 28:17:7f:9a:e9:e5:6d:6f:c4:1c:75:8d:a6:0d:b7:
+ 5e:37:de:e1:1a:b2:e5:a6:d6:79:e4:df:1f:d3:f6:
+ 68:ed:30:a3:9e:8d:ed:8b:55:3d:12:3f:0f:3f:90:
+ 4f:b5:74:02:b0:1f:40:ae:32:d9:8e:a5:3b:74:e0:
+ f3:1e:4e:4c:63:fd:37:4b:b8:2f:70:41:64:4f:ee:
+ 6b:2f:33:40:2f:8a:c6:5f:e3:6a:e4:a0:62:53:99:
+ de:8c:ca:b5:34:ca:c0:20:9e:16:73:13:e1:c9:dc:
+ 22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -443,41 +443,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 0e:00:56:5c:72:31:88:bd:95:13:f7:64:96:1c:63:c2:1c:11:
- 60:04:d2:c3:5f:7c:a2:d7:d1:33:6d:51:6b:77:61:78:a8:70:
- 2e:50:97:5d:c1:e8:9b:dd:c6:61:a7:d3:e1:2c:83:07:85:5c:
- c9:d7:1e:22:c2:5f:76:83:19:d7:de:4a:5e:82:0f:43:80:45:
- 02:d7:d0:3d:ca:c3:c0:fc:04:c8:f6:89:32:d7:47:c6:bf:1f:
- c6:bd:71:e1:07:00:90:12:ec:61:63:1b:6c:e9:58:2c:fc:4c:
- a9:8f:58:e1:b1:6e:a5:ca:4d:be:7e:32:16:74:5f:fd:35:e4:
- 37:aa:1a:c5:33:21:20:8a:3e:1c:af:da:f3:c7:a2:22:d3:93:
- 6c:5e:ac:0a:65:d5:db:e4:8b:11:5e:ca:eb:8f:da:c4:5d:2f:
- 7a:98:e8:3c:d1:89:15:05:02:86:ef:eb:17:18:81:28:ca:d6:
- 58:87:bd:d4:e2:50:41:92:d9:7f:b1:f7:53:8f:f3:cc:f3:1e:
- 1d:e4:5a:c2:60:1b:17:42:78:53:e9:2d:5d:bb:f9:21:50:ff:
- 87:53:be:5f:e6:d4:8f:25:7f:d7:83:d7:f8:4d:c1:7c:7a:40:
- 0b:11:f1:d9:c6:eb:97:45:00:d6:6b:84:1c:4f:fc:8e:1f:5b:
- b5:3d:60:0c
+ 0b:b4:ba:9b:02:15:72:58:48:09:c8:66:c4:7c:6e:07:5e:bf:
+ e1:a5:97:42:fd:5f:8f:5f:35:e7:60:78:73:a8:18:f8:c2:91:
+ b1:d4:1b:cb:11:17:e0:d5:30:69:90:b8:9a:f9:a1:95:47:c9:
+ 85:dd:6d:b9:56:a2:fb:16:2f:09:8c:c0:66:6d:af:7b:f2:42:
+ 67:0f:a3:b9:e8:69:36:89:92:1e:c8:54:11:fe:39:3f:71:85:
+ d9:65:30:0c:2a:b1:a6:b8:df:b0:40:7b:56:98:3d:c3:66:76:
+ be:85:ec:f2:6c:30:de:ce:b3:84:70:74:83:2b:20:42:5a:f0:
+ 9b:31:98:81:16:71:cf:cf:66:57:36:dd:13:cd:f0:74:0c:2f:
+ a1:26:71:1e:50:ce:57:c9:85:71:47:08:b2:a6:b4:2a:2f:6b:
+ 5f:1f:80:09:3d:b1:5e:ab:aa:e7:08:86:c7:75:2d:36:b1:f3:
+ 2c:e1:91:8c:1c:6b:0a:fe:80:38:34:61:f8:a2:ee:3e:9a:e4:
+ 38:95:dd:3d:21:1e:61:5c:53:a7:30:b8:2b:10:72:d8:5d:54:
+ a3:47:9c:6c:69:d6:42:a6:56:f2:b3:3e:98:22:c2:b0:6b:2e:
+ f3:3a:b8:71:52:53:b5:32:a5:a4:38:35:fc:f2:ed:9a:e3:52:
+ 57:75:df:07
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZE7KcVAB+JrJH47HsD
-RgtTFe0jQDWU85aAJ9NKhJJoyQzgFDLHMWdJKVh36s6KcluTsaCo5YTGUp1awEG/
-mF8YXarRZXn76bCEkp0sWLzxxClZ7byshc7XDqoI6C2QJcuRnX2RdEKgrnfSEXtX
-SQQkwJT0IFRg2Rt2dgssIzxnkIwG7U7frCQiJvcmj1rSW3mKb25TJ2AQy8e0n2At
-jzJpSwHR8G1pGiIUBmZjl+j8eUGNFURE0UMqN1535AbmqYUT6SRjnQnQ9RPVulku
-HNJwBrGA91fXMPcU8xgGf4Q4toFGn6I2hw5fGkU4tyAWt8bhkTsODKu3Tj2kbWbY
-hfsCAwEAAaOByzCByDAdBgNVHQ4EFgQUAs72rBo5HoXoctGKxh3oeo+dFWswHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAOAFZccjGI
-vZUT92SWHGPCHBFgBNLDX3yi19EzbVFrd2F4qHAuUJddweib3cZhp9PhLIMHhVzJ
-1x4iwl92gxnX3kpegg9DgEUC19A9ysPA/ATI9oky10fGvx/GvXHhBwCQEuxhYxts
-6Vgs/Eypj1jhsW6lyk2+fjIWdF/9NeQ3qhrFMyEgij4cr9rzx6Ii05NsXqwKZdXb
-5IsRXsrrj9rEXS96mOg80YkVBQKG7+sXGIEoytZYh73U4lBBktl/sfdTj/PM8x4d
-5FrCYBsXQnhT6S1du/khUP+HU75f5tSPJX/Xg9f4TcF8ekALEfHZxuuXRQDWa4Qc
-T/yOH1u1PWAM
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQALtLqbAhVy
+WEgJyGbEfG4HXr/hpZdC/V+PXzXnYHhzqBj4wpGx1BvLERfg1TBpkLia+aGVR8mF
+3W25VqL7Fi8JjMBmba978kJnD6O56Gk2iZIeyFQR/jk/cYXZZTAMKrGmuN+wQHtW
+mD3DZna+hezybDDezrOEcHSDKyBCWvCbMZiBFnHPz2ZXNt0TzfB0DC+hJnEeUM5X
+yYVxRwiyprQqL2tfH4AJPbFeq6rnCIbHdS02sfMs4ZGMHGsK/oA4NGH4ou4+muQ4
+ld09IR5hXFOnMLgrEHLYXVSjR5xsadZCplbysz6YIsKway7zOrhxUlO1MqWkODX8
+8u2a41JXdd8H
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
index 97d5674..b5b54e7 100644
--- a/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
@@ -1,4 +1,4 @@
-[Created by: ./generate-key-rollover.py]
+[Created by: generate-key-rollover.py]
A certificate tree with two self-signed root certificates(oldroot, newroot),
and a third root certificate (newrootrollover) which has the same key as newroot
@@ -48,30 +48,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:be:12:1c:48:e4:73:1f:5c:d2:54:a9:7b:58:1c:
- 37:73:c2:49:26:3e:ed:b5:6b:55:17:c9:4c:52:34:
- ce:d9:76:86:32:74:74:ae:11:b2:99:1b:51:a0:33:
- 48:34:2f:b9:d3:2b:06:c2:5c:29:53:35:ce:7c:a6:
- 67:b2:6a:d4:33:c3:13:62:30:a1:53:5f:45:78:5b:
- bb:47:ad:07:a4:98:9a:e9:e3:b1:3b:e6:33:c2:c1:
- 5c:95:d7:c8:b9:a6:72:27:7a:79:da:c4:c8:5a:1a:
- 3e:5e:5e:a6:62:64:c6:72:86:b1:78:98:5b:63:27:
- 70:15:04:6b:b1:0f:11:9c:4d:3b:5c:e7:8d:c0:be:
- d5:84:46:6c:bd:11:1e:21:c1:82:9c:d0:aa:2d:2f:
- f8:2a:e9:3b:e4:35:15:6d:c7:4a:dd:a8:65:69:b8:
- 16:a1:8a:04:a2:44:68:40:b6:99:ae:61:df:9f:6c:
- 40:ef:79:c9:a3:6d:e4:2d:07:01:68:f1:21:4e:0e:
- 28:a7:fd:2f:ad:ee:7d:65:cf:36:fd:4f:1b:ba:10:
- 8e:86:fd:ec:37:67:0c:20:71:66:48:64:f3:82:af:
- f5:e1:73:c9:09:36:03:3f:c2:47:7a:f2:33:b9:f9:
- 9f:53:9b:24:5e:c3:cc:05:d9:a9:ed:d7:b2:2a:c5:
- b7:39
+ 00:ab:ca:16:55:35:25:9b:de:8e:fc:e9:5a:f9:04:
+ 3e:0e:6c:06:1e:1c:86:20:18:4f:41:da:3a:6d:16:
+ 9e:4e:3c:9b:11:67:bc:5a:3d:84:b2:79:05:d2:25:
+ 9a:6a:a8:80:6c:55:28:f2:5a:43:5f:c5:ef:e9:e3:
+ 1a:64:24:7e:57:4d:11:60:d7:e6:a9:2b:73:c7:93:
+ bb:67:b1:41:d5:df:21:5c:bd:98:93:a3:7d:0d:b0:
+ 86:5f:87:a9:d9:ab:ad:97:89:c5:12:c4:0f:71:d3:
+ 5b:79:18:53:64:7f:0a:a1:36:5e:00:5c:b9:ee:5e:
+ 14:10:17:f2:2a:60:0f:f7:ec:aa:d7:ad:d3:dc:8a:
+ 44:59:cf:c8:11:e7:42:1c:88:30:d7:1e:37:86:91:
+ 6b:ce:2a:bc:bb:f5:4a:cc:72:1a:9d:4f:5f:0e:c4:
+ c5:f7:b6:24:09:1c:22:f8:f7:a2:3d:45:c2:29:4d:
+ a3:f3:db:7a:a4:93:a2:48:d6:2b:90:da:0c:2b:d9:
+ 96:f0:d6:c7:eb:d0:eb:a8:08:72:55:a8:10:65:8f:
+ 38:6a:22:0c:9c:3d:68:1a:cd:16:da:73:24:2e:14:
+ 5d:08:05:fb:07:d1:52:53:4e:51:e4:b2:f3:17:4d:
+ f1:d0:c3:23:51:86:fb:a4:b9:09:37:9c:13:69:65:
+ 51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C9:45:0B:2A:F2:D8:8D:2A:D7:CE:AF:56:BF:82:B0:84:0C:C8:2E:F4
+ 90:8D:89:42:17:BF:F6:98:D1:AA:8C:BF:AF:C2:74:60:AB:ED:90:0F
X509v3 Authority Key Identifier:
- keyid:B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ keyid:A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
@@ -86,42 +86,42 @@
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 63:66:9e:6c:34:8c:5d:74:ae:90:25:55:ae:86:49:b9:3d:fd:
- 27:bc:4f:69:7b:70:cb:25:0e:a3:8c:7a:7d:9c:4f:0b:7c:f2:
- 85:a5:ea:82:d2:37:c2:74:a2:ae:a8:bf:62:f4:5f:d4:c6:41:
- 45:0c:cc:27:53:aa:8f:66:58:e9:b0:de:ae:98:14:bd:92:df:
- 9b:0f:f2:c5:3b:d2:bc:1c:3e:80:b4:09:0f:c1:9f:d6:3a:29:
- 52:71:b6:1a:92:95:5a:18:dc:b4:30:dc:61:61:93:54:d1:55:
- 83:92:5d:c0:c7:dc:ab:d7:08:dd:8a:44:cf:92:f9:4d:86:25:
- aa:ac:52:f6:0e:17:99:0b:31:d2:75:5e:33:f9:f5:b6:77:42:
- 07:62:a9:53:cc:f3:79:84:57:d9:14:3f:ab:4c:8b:ae:c7:9f:
- cf:7a:1f:bf:7e:1d:44:bd:76:b4:cd:8d:c8:1d:75:f7:3b:b5:
- bc:35:8b:3f:29:b1:cb:67:a4:17:af:a4:ca:9f:2b:e7:15:66:
- e4:c8:c1:7c:08:78:9e:5d:4b:c3:c6:58:66:96:42:e8:e6:40:
- fd:dc:24:ce:3b:58:11:38:40:0e:fc:a9:c0:2c:0f:e5:cc:bb:
- 02:32:31:b9:bc:6f:2d:1d:f6:2b:7c:d3:f8:24:f6:60:38:8a:
- 1f:dd:e1:50
+ 74:15:69:e0:48:a6:e3:fa:20:b6:3f:90:d7:61:d3:ea:b7:47:
+ 61:c7:81:6b:42:95:44:ac:1e:6f:3d:df:ad:2c:33:0d:e8:94:
+ 5b:d1:24:89:56:27:76:e4:6c:09:26:a7:e5:62:c9:96:83:ce:
+ 9d:08:f5:ee:c4:3d:fe:77:29:ae:8d:9f:7f:d5:81:b6:5d:b5:
+ 54:a0:1f:6c:54:1e:dd:a7:4e:78:e0:6c:60:1d:e8:1f:97:77:
+ 67:8d:57:80:00:17:80:cd:ab:ce:31:87:6e:9e:bf:3f:38:b9:
+ da:96:a3:d2:22:63:43:dd:5c:e8:42:ea:2d:eb:ab:81:33:e5:
+ 95:36:46:3c:dd:8e:ad:e2:43:40:6f:3c:ce:73:4d:52:71:9d:
+ 54:59:f4:73:a2:5a:48:a5:c7:bc:dd:f9:9f:91:39:b1:bc:ad:
+ 9a:59:ea:f6:33:42:72:66:2f:e9:78:8f:b6:09:15:35:d8:e6:
+ 70:0d:d3:da:a7:7e:55:d9:05:88:47:16:1d:cd:54:1c:15:11:
+ a6:d3:35:2a:4e:c5:0f:f7:b0:98:24:bf:7e:78:3e:5f:56:0c:
+ 87:72:c2:d1:7d:3e:3c:c6:98:50:a9:c7:cd:6f:0e:12:b4:32:
+ 7a:b8:01:6c:88:1c:8a:c2:19:24:1e:34:9b:da:45:eb:0a:f9:
+ 99:6e:54:c6
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EhxI
-5HMfXNJUqXtYHDdzwkkmPu21a1UXyUxSNM7ZdoYydHSuEbKZG1GgM0g0L7nTKwbC
-XClTNc58pmeyatQzwxNiMKFTX0V4W7tHrQekmJrp47E75jPCwVyV18i5pnInenna
-xMhaGj5eXqZiZMZyhrF4mFtjJ3AVBGuxDxGcTTtc543AvtWERmy9ER4hwYKc0Kot
-L/gq6TvkNRVtx0rdqGVpuBahigSiRGhAtpmuYd+fbEDvecmjbeQtBwFo8SFODiin
-/S+t7n1lzzb9Txu6EI6G/ew3ZwwgcWZIZPOCr/Xhc8kJNgM/wkd68jO5+Z9TmyRe
-w8wF2ant17Iqxbc5AgMBAAGjgekwgeYwHQYDVR0OBBYEFMlFCyry2I0q186vVr+C
-sIQMyC70MB8GA1UdIwQYMBaAFLE5eRM10ANr6cRjK8zWYcOC7BTBMD8GCCsGAQUF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-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAY2aebDSMXXSukCVVroZJ
-uT39J7xPaXtwyyUOo4x6fZxPC3zyhaXqgtI3wnSirqi/YvRf1MZBRQzMJ1Oqj2ZY
-6bDerpgUvZLfmw/yxTvSvBw+gLQJD8Gf1jopUnG2GpKVWhjctDDcYWGTVNFVg5Jd
-wMfcq9cI3YpEz5L5TYYlqqxS9g4XmQsx0nVeM/n1tndCB2KpU8zzeYRX2RQ/q0yL
-rsefz3ofv34dRL12tM2NyB119zu1vDWLPymxy2ekF6+kyp8r5xVm5MjBfAh4nl1L
-w8ZYZpZC6OZA/dwkzjtYEThADvypwCwP5cy7AjIxubxvLR32K3zT+CT2YDiKH93h
-UA==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdBVp4Eim4/ogtj+Q12HT
+6rdHYceBa0KVRKwebz3frSwzDeiUW9EkiVYnduRsCSan5WLJloPOnQj17sQ9/ncp
+ro2ff9WBtl21VKAfbFQe3adOeOBsYB3oH5d3Z41XgAAXgM2rzjGHbp6/Pzi52paj
+0iJjQ91c6ELqLeurgTPllTZGPN2OreJDQG88znNNUnGdVFn0c6JaSKXHvN35n5E5
+sbytmlnq9jNCcmYv6XiPtgkVNdjmcA3T2qd+VdkFiEcWHc1UHBURptM1Kk7FD/ew
+mCS/fng+X1YMh3LC0X0+PMaYUKnHzW8OErQyergBbIgcisIZJB40m9pF6wr5mW5U
+xg==
-----END CERTIFICATE-----
Certificate:
@@ -138,30 +138,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9c:d0:2e:3b:06:d6:ea:65:bd:dd:b2:d3:e8:88:
- ea:08:73:01:42:ac:ca:38:28:17:32:93:5e:16:a8:
- c1:79:44:9a:db:24:08:ba:81:52:63:9c:b4:ed:57:
- d4:b2:ac:54:64:3b:70:39:7e:37:da:11:e1:8c:ba:
- 09:bc:1a:9b:e7:fe:6d:75:f8:71:31:f0:ca:52:89:
- 2a:9e:d5:53:db:b8:c0:76:cf:bf:58:58:e1:bb:81:
- de:62:bb:06:58:1f:9b:64:03:75:7d:ee:76:6f:39:
- 47:cb:8e:34:32:07:83:89:b0:83:2a:78:d0:ac:e2:
- 86:0a:a8:ab:3b:97:81:de:9d:36:b4:03:b7:d5:06:
- 05:53:d7:80:03:44:86:53:72:db:7a:5f:c5:20:dd:
- c7:44:58:3b:40:7f:0e:39:bc:be:0d:ca:6a:f6:82:
- a2:97:a2:17:79:51:6f:42:5d:0d:6a:b7:a0:de:5f:
- 6a:00:be:e7:5a:b7:91:e9:fc:77:fd:75:88:8d:52:
- 76:3d:0e:91:4b:c7:db:96:a4:5f:39:59:55:62:65:
- 3b:15:7a:bc:7b:09:9f:3e:75:d9:9e:c5:00:b3:19:
- d4:26:7e:eb:db:62:07:c2:f5:b6:4e:87:2d:eb:56:
- 8b:5a:68:6c:85:2f:b4:3e:1d:dd:5d:31:49:98:8b:
- 06:55
+ 00:ad:d7:63:a2:51:33:32:fd:aa:73:2c:32:30:ac:
+ 2f:8d:37:5f:08:b2:9b:02:1a:f7:3c:eb:c2:9e:82:
+ d9:a2:0e:02:14:28:bc:18:e2:92:8e:db:66:14:36:
+ 3f:ef:43:47:ac:b4:e2:be:92:82:14:9a:bd:97:d7:
+ 19:6f:88:29:b1:85:68:bd:13:d5:93:2c:a0:c8:bb:
+ 76:9d:ad:f5:da:e8:55:ca:87:6d:07:20:f4:22:cf:
+ 5a:51:ea:e1:7b:c3:7e:f9:a8:85:95:c5:e9:88:bf:
+ 7b:5e:fd:49:d4:c4:ed:ce:b7:d2:71:23:59:00:a7:
+ 6f:85:40:a0:38:c6:2b:88:99:68:e9:97:7e:2f:92:
+ 97:18:0a:19:c2:4e:0a:28:2c:b3:b4:67:26:eb:1d:
+ 03:f6:16:58:20:88:81:ee:a8:ea:19:ae:25:e9:34:
+ 8d:87:f3:d2:3b:0e:b2:d8:31:14:ee:bd:c6:01:ec:
+ d4:41:f0:06:7b:3e:20:7b:06:88:86:29:d1:77:9a:
+ c0:bc:69:63:3f:2b:20:ac:aa:17:33:29:78:0a:11:
+ ff:92:f2:b3:4a:58:29:96:d3:f4:4f:70:ef:9c:81:
+ 55:1c:21:20:bf:54:5a:dd:60:b7:6e:53:41:a2:19:
+ 55:b5:f9:b8:6e:63:37:73:a0:b8:d4:c5:c1:a2:4e:
+ 0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -176,41 +176,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- a8:ad:48:d8:6e:1d:24:09:d2:b3:29:3c:48:60:27:7f:37:64:
- d5:f1:3b:b3:5c:43:de:7c:b4:5f:ee:3a:f2:1a:25:24:0a:8a:
- 25:6d:19:5b:dc:0c:4e:48:61:2f:60:d3:6b:f3:9c:03:2c:d3:
- fa:c8:9b:99:e7:2e:c5:43:c0:5f:14:cd:8b:92:62:4f:e5:3a:
- cd:b5:0a:d8:b2:01:c7:44:b4:3a:86:66:bf:fa:11:a5:f8:24:
- 3f:d1:1a:e8:eb:1e:ad:f0:70:31:6f:bc:21:cf:db:ce:63:4e:
- 84:e9:52:9e:bb:1b:c4:72:ae:e0:6c:88:9e:99:dc:79:d9:fd:
- 83:26:8e:f6:19:70:d9:5e:fc:f4:0c:d1:17:6f:af:10:f6:64:
- 16:08:d8:72:ba:3a:2d:66:28:5a:41:0d:f3:47:87:a7:9c:78:
- c6:cd:5e:25:71:0b:f2:93:b8:26:17:b2:19:17:cc:03:ed:c0:
- 6e:06:e2:4b:4a:57:5f:23:02:2a:69:06:7a:c4:b7:3e:2f:e8:
- f0:03:ae:b8:2d:df:63:22:20:73:23:75:d9:3c:d7:22:e4:b4:
- 65:65:ed:b9:e6:02:1d:b5:51:11:9c:db:92:e4:fe:8c:1d:bb:
- c5:95:87:5b:38:ee:ff:e4:01:d1:5d:84:b9:73:d3:da:23:ca:
- 5e:05:d3:7d
+ 7f:a1:7c:8f:ea:d9:b9:63:e1:b0:31:0a:2e:1c:8e:e9:d0:23:
+ ee:3e:8e:50:55:db:ba:10:93:a4:93:0b:bb:c1:a5:3d:32:90:
+ ee:40:bf:0f:df:25:f1:65:b3:30:6d:39:9b:d2:c1:b8:b7:a8:
+ 7e:23:dc:6a:c3:5a:9e:53:d7:86:4c:82:de:98:23:1a:6f:f9:
+ 0d:6d:b9:35:55:b9:94:03:8d:b7:6c:2e:64:79:ea:85:84:7e:
+ 51:18:37:42:80:f5:d4:16:3f:a0:a9:6b:bf:17:d1:19:99:ea:
+ 8d:5a:c9:30:b0:ca:c8:2c:17:ce:14:75:b3:c9:19:df:16:1b:
+ 9a:97:ae:50:69:a5:6c:02:57:84:f4:7f:30:90:ed:89:bb:0e:
+ c9:7b:34:d0:41:58:00:20:29:6b:f0:e8:97:81:92:3d:ba:e0:
+ 65:e9:7c:cb:5c:7b:50:c8:0f:d3:20:ab:42:2f:0d:44:6d:99:
+ c2:1d:42:e8:b2:10:82:9b:86:ba:a8:45:d2:2c:13:53:cf:ad:
+ 37:ac:ce:f3:e7:49:fe:59:d5:b6:5f:8b:6b:fd:5f:e0:f2:91:
+ ef:e3:f7:e0:b6:ee:e7:ae:77:0e:66:12:40:55:75:77:2a:05:
+ d4:bd:ab:7e:5a:67:d8:81:8b:15:fd:4c:60:63:c7:f7:5f:fa:
+ d4:d8:d9:d2
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAuOwbW
-6mW93bLT6IjqCHMBQqzKOCgXMpNeFqjBeUSa2yQIuoFSY5y07VfUsqxUZDtwOX43
-2hHhjLoJvBqb5/5tdfhxMfDKUokqntVT27jAds+/WFjhu4HeYrsGWB+bZAN1fe52
-bzlHy440MgeDibCDKnjQrOKGCqirO5eB3p02tAO31QYFU9eAA0SGU3Lbel/FIN3H
-RFg7QH8OOby+Dcpq9oKil6IXeVFvQl0Nareg3l9qAL7nWreR6fx3/XWIjVJ2PQ6R
-S8fblqRfOVlVYmU7FXq8ewmfPnXZnsUAsxnUJn7r22IHwvW2Toct61aLWmhshS+0
-Ph3dXTFJmIsGVQIDAQABo4HLMIHIMB0GA1UdDgQWBBSxOXkTNdADa+nEYyvM1mHD
-guwUwTAfBgNVHSMEGDAWgBQVnqat9Z+KocEImb9mb8/Kcs0MNDA3BggrBgEFBQcB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-AKitSNhuHSQJ0rMpPEhgJ383ZNXxO7NcQ958tF/uOvIaJSQKiiVtGVvcDE5IYS9g
-02vznAMs0/rIm5nnLsVDwF8UzYuSYk/lOs21CtiyAcdEtDqGZr/6EaX4JD/RGujr
-Hq3wcDFvvCHP285jToTpUp67G8RyruBsiJ6Z3HnZ/YMmjvYZcNle/PQM0RdvrxD2
-ZBYI2HK6Oi1mKFpBDfNHh6eceMbNXiVxC/KTuCYXshkXzAPtwG4G4ktKV18jAipp
-BnrEtz4v6PADrrgt32MiIHMjddk81yLktGVl7bnmAh21URGc25Lk/owdu8WVh1s4
-7v/kAdFdhLlz09ojyl4F030=
+AH+hfI/q2blj4bAxCi4cjunQI+4+jlBV27oQk6STC7vBpT0ykO5Avw/fJfFlszBt
+OZvSwbi3qH4j3GrDWp5T14ZMgt6YIxpv+Q1tuTVVuZQDjbdsLmR56oWEflEYN0KA
+9dQWP6Cpa78X0RmZ6o1ayTCwysgsF84UdbPJGd8WG5qXrlBppWwCV4T0fzCQ7Ym7
+Dsl7NNBBWAAgKWvw6JeBkj264GXpfMtce1DID9Mgq0IvDURtmcIdQuiyEIKbhrqo
+RdIsE1PPrTeszvPnSf5Z1bZfi2v9X+Dyke/j9+C27ueudw5mEkBVdXcqBdS9q35a
+Z9iBixX9TGBjx/df+tTY2dI=
-----END CERTIFICATE-----
Certificate:
@@ -227,30 +227,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ae:ea:3b:3f:b6:e9:3d:ea:eb:3d:dd:e8:4d:45:
- 83:63:78:ea:07:90:3a:3c:4f:92:54:2b:2d:02:1b:
- eb:9e:81:72:68:2e:73:f8:4a:a1:de:0c:d6:f0:c2:
- 61:26:90:0b:48:59:ab:23:25:8f:e4:4a:6b:c9:2d:
- ba:a7:35:c4:22:df:76:99:d8:7b:f7:6d:ca:9b:da:
- d2:ed:7e:c8:93:b2:a7:f6:f0:05:6a:5d:c6:e1:79:
- d0:25:59:a9:50:1e:65:eb:1c:c9:cd:4e:6a:3a:2a:
- a4:1a:fa:81:a3:e7:ae:d7:de:43:d9:e8:0b:5c:b0:
- 6b:46:39:c5:9c:4a:6d:59:bf:da:70:2e:80:ac:c8:
- 80:e3:83:d1:71:7b:a7:0b:92:bf:a8:81:ad:5c:b2:
- d5:e9:b9:5f:b5:4f:93:43:67:72:36:b3:f7:17:b9:
- 1b:da:2a:13:83:70:36:ae:59:03:3d:f0:71:de:a2:
- 7a:41:ad:b5:e9:a2:51:e4:18:ec:88:ad:48:f1:df:
- 17:04:43:54:2a:af:3c:c0:f5:84:39:43:d1:a7:d2:
- 52:0f:3c:dd:ef:13:58:8c:1d:d4:dd:2e:6d:1a:e7:
- 73:9b:8b:f3:41:7b:9a:53:4e:0d:92:d3:5d:3f:fc:
- c3:61:dc:5f:a0:93:3c:08:cc:b4:9b:ce:9d:78:e3:
- 77:c9
+ 00:c8:01:d6:aa:f0:22:fa:55:68:e4:56:fa:87:9f:
+ 03:a4:78:36:40:64:b2:60:f7:20:25:47:92:b0:cb:
+ c7:9d:4c:c6:4d:78:0f:91:9e:a8:f1:0b:84:58:b1:
+ a9:06:2d:7d:09:82:f4:1a:60:67:7b:c3:47:69:05:
+ b5:59:90:02:2a:53:27:25:21:4d:9a:5f:b6:7b:58:
+ 25:77:b3:46:64:fc:ed:04:c0:e2:62:e5:96:f9:8a:
+ 8d:9a:e8:8d:bf:d9:19:38:97:52:ab:31:3c:1c:a2:
+ b9:21:ec:5f:aa:8c:21:44:c6:73:7f:0b:72:c9:61:
+ 1c:a7:cd:46:bb:da:5b:a7:1b:e2:18:fb:ff:18:81:
+ 5f:fb:75:29:21:9c:92:e0:d3:03:f5:b8:58:94:36:
+ 32:7a:9a:a7:ec:49:ab:ef:d4:8c:c4:65:aa:23:40:
+ 96:76:47:4b:06:0b:21:c4:44:9f:8d:12:ab:05:05:
+ e7:97:d9:9d:c0:f9:4d:77:14:0b:c5:d5:82:0c:d7:
+ 14:54:fa:07:dd:a3:78:30:5d:95:83:e4:1c:7f:c2:
+ 13:c6:b1:8b:10:87:9b:e9:3e:4f:d6:b6:b9:a8:9f:
+ 4c:47:f8:40:67:7d:4e:9b:87:4a:b6:92:eb:33:f1:
+ 73:a3:70:d6:fc:37:32:2a:b4:b8:56:90:63:5e:ec:
+ b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ 83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -265,41 +265,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 58:4b:60:7e:0b:c2:3d:20:f3:49:34:91:55:d3:5f:5b:ce:81:
- 31:da:71:9f:72:d7:f4:cc:be:cf:58:b8:97:aa:99:87:3d:34:
- 12:ac:40:1c:8e:02:46:83:ee:04:e1:7e:5e:57:ca:a4:ae:e1:
- d0:b4:12:e9:65:33:f5:4e:c4:f6:49:00:7f:83:6d:75:67:84:
- b2:db:52:5a:a2:3e:5d:2d:5c:f3:45:fe:6a:d3:c4:0a:76:52:
- c6:9b:b0:89:01:b9:b6:be:30:60:d9:b4:2e:1d:1e:bf:ef:d8:
- 12:90:9f:cb:67:29:20:61:9f:1a:67:64:88:4c:43:ec:10:7d:
- 87:11:00:44:6a:ce:37:af:73:f4:fa:d2:22:2f:24:3a:6f:79:
- 09:6c:8d:de:b5:71:0e:6e:b7:64:a9:be:73:a8:c1:c8:50:74:
- d2:c4:2b:ef:4f:25:20:8f:41:f0:1f:6e:52:77:eb:a0:1a:94:
- 87:7c:35:11:37:5c:33:f5:83:47:e0:f2:0e:97:af:23:61:23:
- 25:0b:92:6c:3b:30:a1:aa:c6:dc:4a:05:6e:43:76:58:82:66:
- cd:f6:d6:ef:9b:80:36:d6:95:b7:d1:ec:5c:53:f7:78:84:ef:
- 48:6a:2c:f7:93:97:f2:7a:ce:ec:f3:eb:63:e1:5a:e0:69:02:
- 5d:34:36:93
+ a9:e8:26:5f:c8:9e:6b:fc:cd:4d:d2:9e:de:f5:f1:08:04:66:
+ 23:6a:7e:ee:92:9f:eb:71:53:ea:97:8e:db:e4:47:72:7a:08:
+ 17:1c:72:4a:37:00:f5:e3:a8:77:d2:b1:d4:89:45:b2:e9:ba:
+ 00:61:6e:cb:03:b4:21:aa:ec:e4:f3:a4:41:b7:90:41:08:0f:
+ 0d:90:bd:55:4a:bc:1c:7f:2e:c1:97:6d:34:d1:8d:da:39:46:
+ 55:49:97:4c:f7:eb:29:62:b3:ed:ad:24:d8:05:9a:93:82:f2:
+ 12:34:24:78:60:a4:7b:a9:94:97:75:10:20:57:42:83:32:0d:
+ 19:d0:15:3b:55:84:d8:49:9b:a4:66:14:c9:90:f4:89:bc:23:
+ 2a:45:dd:19:25:68:6e:fe:44:60:c0:19:75:61:3f:85:4b:90:
+ 8c:45:3b:2e:9b:41:12:43:ee:2f:61:96:ff:af:4b:11:fe:af:
+ 02:af:0d:69:0d:ae:11:bc:eb:34:de:ac:24:3b:08:6e:b3:b2:
+ 1a:8e:46:d9:6b:91:08:4e:c3:5b:f6:3c:3f:90:8d:95:01:b9:
+ d9:30:aa:2d:79:00:bb:99:a1:ed:0a:1c:28:fc:5c:12:1c:3d:
+ 53:33:c8:ca:b1:9c:13:a2:2a:c7:1d:ce:b7:1e:2c:35:37:e8:
+ 10:af:0c:e6
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7qOz+26T3q6z3d6E1F
-g2N46geQOjxPklQrLQIb656Bcmguc/hKod4M1vDCYSaQC0hZqyMlj+RKa8ktuqc1
-xCLfdpnYe/dtypva0u1+yJOyp/bwBWpdxuF50CVZqVAeZescyc1OajoqpBr6gaPn
-rtfeQ9noC1ywa0Y5xZxKbVm/2nAugKzIgOOD0XF7pwuSv6iBrVyy1em5X7VPk0Nn
-cjaz9xe5G9oqE4NwNq5ZAz3wcd6iekGttemiUeQY7IitSPHfFwRDVCqvPMD1hDlD
-0afSUg883e8TWIwd1N0ubRrnc5uL80F7mlNODZLTXT/8w2HcX6CTPAjMtJvOnXjj
-d8kCAwEAAaOByzCByDAdBgNVHQ4EFgQUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwHwYD
-VR0jBBgwFoAUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgB1qrwIvpVaORW+oef
+A6R4NkBksmD3ICVHkrDLx51Mxk14D5GeqPELhFixqQYtfQmC9BpgZ3vDR2kFtVmQ
+AipTJyUhTZpftntYJXezRmT87QTA4mLllvmKjZrojb/ZGTiXUqsxPByiuSHsX6qM
+IUTGc38LcslhHKfNRrvaW6cb4hj7/xiBX/t1KSGckuDTA/W4WJQ2Mnqap+xJq+/U
+jMRlqiNAlnZHSwYLIcREn40SqwUF55fZncD5TXcUC8XVggzXFFT6B92jeDBdlYPk
+HH/CE8axixCHm+k+T9a2uaifTEf4QGd9TpuHSraS6zPxc6Nw1vw3Miq0uFaQY17s
+t7cCAwEAAaOByzCByDAdBgNVHQ4EFgQUg/mT1Sn5xLqhX+TJdBjg3w4XGFAwHwYD
+VR0jBBgwFoAUg/mT1Sn5xLqhX+TJdBjg3w4XGFAwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBYS2B+C8I9
-IPNJNJFV019bzoEx2nGfctf0zL7PWLiXqpmHPTQSrEAcjgJGg+4E4X5eV8qkruHQ
-tBLpZTP1TsT2SQB/g211Z4Sy21Jaoj5dLVzzRf5q08QKdlLGm7CJAbm2vjBg2bQu
-HR6/79gSkJ/LZykgYZ8aZ2SITEPsEH2HEQBEas43r3P0+tIiLyQ6b3kJbI3etXEO
-brdkqb5zqMHIUHTSxCvvTyUgj0HwH25Sd+ugGpSHfDURN1wz9YNH4PIOl68jYSMl
-C5JsOzChqsbcSgVuQ3ZYgmbN9tbvm4A21pW30excU/d4hO9Iaiz3k5fyes7s8+tj
-4VrgaQJdNDaT
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCp6CZfyJ5r
+/M1N0p7e9fEIBGYjan7ukp/rcVPql47b5EdyeggXHHJKNwD146h30rHUiUWy6boA
+YW7LA7Qhquzk86RBt5BBCA8NkL1VSrwcfy7Bl2000Y3aOUZVSZdM9+spYrPtrSTY
+BZqTgvISNCR4YKR7qZSXdRAgV0KDMg0Z0BU7VYTYSZukZhTJkPSJvCMqRd0ZJWhu
+/kRgwBl1YT+FS5CMRTsum0ESQ+4vYZb/r0sR/q8Crw1pDa4RvOs03qwkOwhus7Ia
+jkbZa5EITsNb9jw/kI2VAbnZMKoteQC7maHtChwo/FwSHD1TM8jKsZwToirHHc63
+Hiw1N+gQrwzm
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem
index 6669c2a..f262083 100644
--- a/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem
@@ -1,4 +1,4 @@
-[Created by: ./generate-key-rollover.py]
+[Created by: generate-key-rollover.py]
A certificate tree with two self-signed root certificates(oldroot, newroot),
and a third root certificate (newrootrollover) which has the same key as newroot
@@ -48,30 +48,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:be:12:1c:48:e4:73:1f:5c:d2:54:a9:7b:58:1c:
- 37:73:c2:49:26:3e:ed:b5:6b:55:17:c9:4c:52:34:
- ce:d9:76:86:32:74:74:ae:11:b2:99:1b:51:a0:33:
- 48:34:2f:b9:d3:2b:06:c2:5c:29:53:35:ce:7c:a6:
- 67:b2:6a:d4:33:c3:13:62:30:a1:53:5f:45:78:5b:
- bb:47:ad:07:a4:98:9a:e9:e3:b1:3b:e6:33:c2:c1:
- 5c:95:d7:c8:b9:a6:72:27:7a:79:da:c4:c8:5a:1a:
- 3e:5e:5e:a6:62:64:c6:72:86:b1:78:98:5b:63:27:
- 70:15:04:6b:b1:0f:11:9c:4d:3b:5c:e7:8d:c0:be:
- d5:84:46:6c:bd:11:1e:21:c1:82:9c:d0:aa:2d:2f:
- f8:2a:e9:3b:e4:35:15:6d:c7:4a:dd:a8:65:69:b8:
- 16:a1:8a:04:a2:44:68:40:b6:99:ae:61:df:9f:6c:
- 40:ef:79:c9:a3:6d:e4:2d:07:01:68:f1:21:4e:0e:
- 28:a7:fd:2f:ad:ee:7d:65:cf:36:fd:4f:1b:ba:10:
- 8e:86:fd:ec:37:67:0c:20:71:66:48:64:f3:82:af:
- f5:e1:73:c9:09:36:03:3f:c2:47:7a:f2:33:b9:f9:
- 9f:53:9b:24:5e:c3:cc:05:d9:a9:ed:d7:b2:2a:c5:
- b7:39
+ 00:ab:ca:16:55:35:25:9b:de:8e:fc:e9:5a:f9:04:
+ 3e:0e:6c:06:1e:1c:86:20:18:4f:41:da:3a:6d:16:
+ 9e:4e:3c:9b:11:67:bc:5a:3d:84:b2:79:05:d2:25:
+ 9a:6a:a8:80:6c:55:28:f2:5a:43:5f:c5:ef:e9:e3:
+ 1a:64:24:7e:57:4d:11:60:d7:e6:a9:2b:73:c7:93:
+ bb:67:b1:41:d5:df:21:5c:bd:98:93:a3:7d:0d:b0:
+ 86:5f:87:a9:d9:ab:ad:97:89:c5:12:c4:0f:71:d3:
+ 5b:79:18:53:64:7f:0a:a1:36:5e:00:5c:b9:ee:5e:
+ 14:10:17:f2:2a:60:0f:f7:ec:aa:d7:ad:d3:dc:8a:
+ 44:59:cf:c8:11:e7:42:1c:88:30:d7:1e:37:86:91:
+ 6b:ce:2a:bc:bb:f5:4a:cc:72:1a:9d:4f:5f:0e:c4:
+ c5:f7:b6:24:09:1c:22:f8:f7:a2:3d:45:c2:29:4d:
+ a3:f3:db:7a:a4:93:a2:48:d6:2b:90:da:0c:2b:d9:
+ 96:f0:d6:c7:eb:d0:eb:a8:08:72:55:a8:10:65:8f:
+ 38:6a:22:0c:9c:3d:68:1a:cd:16:da:73:24:2e:14:
+ 5d:08:05:fb:07:d1:52:53:4e:51:e4:b2:f3:17:4d:
+ f1:d0:c3:23:51:86:fb:a4:b9:09:37:9c:13:69:65:
+ 51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C9:45:0B:2A:F2:D8:8D:2A:D7:CE:AF:56:BF:82:B0:84:0C:C8:2E:F4
+ 90:8D:89:42:17:BF:F6:98:D1:AA:8C:BF:AF:C2:74:60:AB:ED:90:0F
X509v3 Authority Key Identifier:
- keyid:B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ keyid:A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
@@ -86,42 +86,42 @@
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 63:66:9e:6c:34:8c:5d:74:ae:90:25:55:ae:86:49:b9:3d:fd:
- 27:bc:4f:69:7b:70:cb:25:0e:a3:8c:7a:7d:9c:4f:0b:7c:f2:
- 85:a5:ea:82:d2:37:c2:74:a2:ae:a8:bf:62:f4:5f:d4:c6:41:
- 45:0c:cc:27:53:aa:8f:66:58:e9:b0:de:ae:98:14:bd:92:df:
- 9b:0f:f2:c5:3b:d2:bc:1c:3e:80:b4:09:0f:c1:9f:d6:3a:29:
- 52:71:b6:1a:92:95:5a:18:dc:b4:30:dc:61:61:93:54:d1:55:
- 83:92:5d:c0:c7:dc:ab:d7:08:dd:8a:44:cf:92:f9:4d:86:25:
- aa:ac:52:f6:0e:17:99:0b:31:d2:75:5e:33:f9:f5:b6:77:42:
- 07:62:a9:53:cc:f3:79:84:57:d9:14:3f:ab:4c:8b:ae:c7:9f:
- cf:7a:1f:bf:7e:1d:44:bd:76:b4:cd:8d:c8:1d:75:f7:3b:b5:
- bc:35:8b:3f:29:b1:cb:67:a4:17:af:a4:ca:9f:2b:e7:15:66:
- e4:c8:c1:7c:08:78:9e:5d:4b:c3:c6:58:66:96:42:e8:e6:40:
- fd:dc:24:ce:3b:58:11:38:40:0e:fc:a9:c0:2c:0f:e5:cc:bb:
- 02:32:31:b9:bc:6f:2d:1d:f6:2b:7c:d3:f8:24:f6:60:38:8a:
- 1f:dd:e1:50
+ 74:15:69:e0:48:a6:e3:fa:20:b6:3f:90:d7:61:d3:ea:b7:47:
+ 61:c7:81:6b:42:95:44:ac:1e:6f:3d:df:ad:2c:33:0d:e8:94:
+ 5b:d1:24:89:56:27:76:e4:6c:09:26:a7:e5:62:c9:96:83:ce:
+ 9d:08:f5:ee:c4:3d:fe:77:29:ae:8d:9f:7f:d5:81:b6:5d:b5:
+ 54:a0:1f:6c:54:1e:dd:a7:4e:78:e0:6c:60:1d:e8:1f:97:77:
+ 67:8d:57:80:00:17:80:cd:ab:ce:31:87:6e:9e:bf:3f:38:b9:
+ da:96:a3:d2:22:63:43:dd:5c:e8:42:ea:2d:eb:ab:81:33:e5:
+ 95:36:46:3c:dd:8e:ad:e2:43:40:6f:3c:ce:73:4d:52:71:9d:
+ 54:59:f4:73:a2:5a:48:a5:c7:bc:dd:f9:9f:91:39:b1:bc:ad:
+ 9a:59:ea:f6:33:42:72:66:2f:e9:78:8f:b6:09:15:35:d8:e6:
+ 70:0d:d3:da:a7:7e:55:d9:05:88:47:16:1d:cd:54:1c:15:11:
+ a6:d3:35:2a:4e:c5:0f:f7:b0:98:24:bf:7e:78:3e:5f:56:0c:
+ 87:72:c2:d1:7d:3e:3c:c6:98:50:a9:c7:cd:6f:0e:12:b4:32:
+ 7a:b8:01:6c:88:1c:8a:c2:19:24:1e:34:9b:da:45:eb:0a:f9:
+ 99:6e:54:c6
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EhxI
-5HMfXNJUqXtYHDdzwkkmPu21a1UXyUxSNM7ZdoYydHSuEbKZG1GgM0g0L7nTKwbC
-XClTNc58pmeyatQzwxNiMKFTX0V4W7tHrQekmJrp47E75jPCwVyV18i5pnInenna
-xMhaGj5eXqZiZMZyhrF4mFtjJ3AVBGuxDxGcTTtc543AvtWERmy9ER4hwYKc0Kot
-L/gq6TvkNRVtx0rdqGVpuBahigSiRGhAtpmuYd+fbEDvecmjbeQtBwFo8SFODiin
-/S+t7n1lzzb9Txu6EI6G/ew3ZwwgcWZIZPOCr/Xhc8kJNgM/wkd68jO5+Z9TmyRe
-w8wF2ant17Iqxbc5AgMBAAGjgekwgeYwHQYDVR0OBBYEFMlFCyry2I0q186vVr+C
-sIQMyC70MB8GA1UdIwQYMBaAFLE5eRM10ANr6cRjK8zWYcOC7BTBMD8GCCsGAQUF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-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAY2aebDSMXXSukCVVroZJ
-uT39J7xPaXtwyyUOo4x6fZxPC3zyhaXqgtI3wnSirqi/YvRf1MZBRQzMJ1Oqj2ZY
-6bDerpgUvZLfmw/yxTvSvBw+gLQJD8Gf1jopUnG2GpKVWhjctDDcYWGTVNFVg5Jd
-wMfcq9cI3YpEz5L5TYYlqqxS9g4XmQsx0nVeM/n1tndCB2KpU8zzeYRX2RQ/q0yL
-rsefz3ofv34dRL12tM2NyB119zu1vDWLPymxy2ekF6+kyp8r5xVm5MjBfAh4nl1L
-w8ZYZpZC6OZA/dwkzjtYEThADvypwCwP5cy7AjIxubxvLR32K3zT+CT2YDiKH93h
-UA==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdBVp4Eim4/ogtj+Q12HT
+6rdHYceBa0KVRKwebz3frSwzDeiUW9EkiVYnduRsCSan5WLJloPOnQj17sQ9/ncp
+ro2ff9WBtl21VKAfbFQe3adOeOBsYB3oH5d3Z41XgAAXgM2rzjGHbp6/Pzi52paj
+0iJjQ91c6ELqLeurgTPllTZGPN2OreJDQG88znNNUnGdVFn0c6JaSKXHvN35n5E5
+sbytmlnq9jNCcmYv6XiPtgkVNdjmcA3T2qd+VdkFiEcWHc1UHBURptM1Kk7FD/ew
+mCS/fng+X1YMh3LC0X0+PMaYUKnHzW8OErQyergBbIgcisIZJB40m9pF6wr5mW5U
+xg==
-----END CERTIFICATE-----
Certificate:
@@ -138,30 +138,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9c:d0:2e:3b:06:d6:ea:65:bd:dd:b2:d3:e8:88:
- ea:08:73:01:42:ac:ca:38:28:17:32:93:5e:16:a8:
- c1:79:44:9a:db:24:08:ba:81:52:63:9c:b4:ed:57:
- d4:b2:ac:54:64:3b:70:39:7e:37:da:11:e1:8c:ba:
- 09:bc:1a:9b:e7:fe:6d:75:f8:71:31:f0:ca:52:89:
- 2a:9e:d5:53:db:b8:c0:76:cf:bf:58:58:e1:bb:81:
- de:62:bb:06:58:1f:9b:64:03:75:7d:ee:76:6f:39:
- 47:cb:8e:34:32:07:83:89:b0:83:2a:78:d0:ac:e2:
- 86:0a:a8:ab:3b:97:81:de:9d:36:b4:03:b7:d5:06:
- 05:53:d7:80:03:44:86:53:72:db:7a:5f:c5:20:dd:
- c7:44:58:3b:40:7f:0e:39:bc:be:0d:ca:6a:f6:82:
- a2:97:a2:17:79:51:6f:42:5d:0d:6a:b7:a0:de:5f:
- 6a:00:be:e7:5a:b7:91:e9:fc:77:fd:75:88:8d:52:
- 76:3d:0e:91:4b:c7:db:96:a4:5f:39:59:55:62:65:
- 3b:15:7a:bc:7b:09:9f:3e:75:d9:9e:c5:00:b3:19:
- d4:26:7e:eb:db:62:07:c2:f5:b6:4e:87:2d:eb:56:
- 8b:5a:68:6c:85:2f:b4:3e:1d:dd:5d:31:49:98:8b:
- 06:55
+ 00:ad:d7:63:a2:51:33:32:fd:aa:73:2c:32:30:ac:
+ 2f:8d:37:5f:08:b2:9b:02:1a:f7:3c:eb:c2:9e:82:
+ d9:a2:0e:02:14:28:bc:18:e2:92:8e:db:66:14:36:
+ 3f:ef:43:47:ac:b4:e2:be:92:82:14:9a:bd:97:d7:
+ 19:6f:88:29:b1:85:68:bd:13:d5:93:2c:a0:c8:bb:
+ 76:9d:ad:f5:da:e8:55:ca:87:6d:07:20:f4:22:cf:
+ 5a:51:ea:e1:7b:c3:7e:f9:a8:85:95:c5:e9:88:bf:
+ 7b:5e:fd:49:d4:c4:ed:ce:b7:d2:71:23:59:00:a7:
+ 6f:85:40:a0:38:c6:2b:88:99:68:e9:97:7e:2f:92:
+ 97:18:0a:19:c2:4e:0a:28:2c:b3:b4:67:26:eb:1d:
+ 03:f6:16:58:20:88:81:ee:a8:ea:19:ae:25:e9:34:
+ 8d:87:f3:d2:3b:0e:b2:d8:31:14:ee:bd:c6:01:ec:
+ d4:41:f0:06:7b:3e:20:7b:06:88:86:29:d1:77:9a:
+ c0:bc:69:63:3f:2b:20:ac:aa:17:33:29:78:0a:11:
+ ff:92:f2:b3:4a:58:29:96:d3:f4:4f:70:ef:9c:81:
+ 55:1c:21:20:bf:54:5a:dd:60:b7:6e:53:41:a2:19:
+ 55:b5:f9:b8:6e:63:37:73:a0:b8:d4:c5:c1:a2:4e:
+ 0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -176,41 +176,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 56:90:dd:ae:50:4b:18:56:7f:e9:1c:e4:29:7c:60:7e:87:27:
- b5:cd:2b:00:67:2b:f7:a2:32:db:38:92:18:46:00:22:c4:2d:
- 1f:ff:32:5f:62:69:30:db:c8:aa:63:68:6a:0f:db:2d:13:15:
- 8f:74:22:54:67:fb:95:19:35:49:66:1e:a1:65:67:3c:71:02:
- 85:34:f7:3b:20:51:03:e9:a1:b9:7d:9b:3b:21:d4:7a:28:6e:
- bd:01:50:a6:7e:2b:a0:bc:ad:d5:55:63:3d:04:f3:f0:aa:c3:
- 4e:b3:aa:b8:68:89:a0:8c:b7:9e:38:37:81:2c:01:57:93:7c:
- 3f:aa:54:2e:35:66:a4:c0:81:ca:06:5c:c6:ab:72:f4:38:08:
- cd:60:40:53:42:48:71:0a:e7:f5:82:3c:bb:51:89:a4:8b:1e:
- c9:44:4c:7f:10:7d:d3:f4:60:04:07:36:b2:44:82:b2:0a:3c:
- e9:82:55:4a:37:cf:47:b6:d3:ea:e5:fc:b8:49:4c:6b:77:a6:
- 42:29:1c:1f:97:78:18:f7:88:da:52:42:87:19:e4:13:0d:91:
- 73:cc:98:6a:22:70:e2:5c:54:d0:96:b7:94:37:3c:0f:f6:9a:
- e3:02:fb:95:63:5a:87:d4:0d:16:16:bd:95:fa:88:c3:a8:e4:
- d0:91:dd:be
+ e0:0c:55:1f:da:4b:3e:e7:ec:e0:41:89:52:3d:0e:be:9d:31:
+ 1d:53:82:7a:99:d3:9d:35:65:97:4d:ba:67:c4:27:db:19:40:
+ d9:0b:15:0d:6a:44:86:be:59:07:14:dc:1a:2c:94:41:2d:eb:
+ 70:be:c8:54:89:18:e7:27:fb:bb:4f:41:a6:60:70:1d:7f:bf:
+ ea:87:01:df:7f:67:68:8a:8f:ff:89:89:b3:c0:95:a6:74:63:
+ 83:ba:b1:55:6d:1a:16:64:94:47:c2:6a:05:c2:62:eb:22:d5:
+ ae:1a:a2:fb:93:0d:ca:a1:8a:39:32:25:97:a4:b2:72:73:7c:
+ 81:30:33:18:a4:fd:b6:e1:b6:6b:53:ac:26:31:ea:19:b6:d3:
+ bb:31:6e:7a:91:01:e2:22:4a:f8:a5:38:9b:12:c6:e5:4a:bb:
+ e4:49:35:59:07:1b:6a:25:58:b2:aa:04:02:90:fd:0a:55:cf:
+ 0e:1d:95:c6:d0:c1:c7:fa:a0:c4:e3:9e:75:58:f0:c6:63:d7:
+ 10:b3:ac:45:7e:60:86:cc:95:ab:7b:46:72:27:12:05:5d:ea:
+ c8:09:47:b1:9a:6c:ef:d9:1a:0b:01:bb:6d:a4:f3:35:50:09:
+ 9a:86:68:a0:34:4c:7d:70:55:9d:88:d8:9a:3d:28:fb:8b:3c:
+ 53:96:8c:e9
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAuOwbW
-6mW93bLT6IjqCHMBQqzKOCgXMpNeFqjBeUSa2yQIuoFSY5y07VfUsqxUZDtwOX43
-2hHhjLoJvBqb5/5tdfhxMfDKUokqntVT27jAds+/WFjhu4HeYrsGWB+bZAN1fe52
-bzlHy440MgeDibCDKnjQrOKGCqirO5eB3p02tAO31QYFU9eAA0SGU3Lbel/FIN3H
-RFg7QH8OOby+Dcpq9oKil6IXeVFvQl0Nareg3l9qAL7nWreR6fx3/XWIjVJ2PQ6R
-S8fblqRfOVlVYmU7FXq8ewmfPnXZnsUAsxnUJn7r22IHwvW2Toct61aLWmhshS+0
-Ph3dXTFJmIsGVQIDAQABo4HLMIHIMB0GA1UdDgQWBBSxOXkTNdADa+nEYyvM1mHD
-guwUwTAfBgNVHSMEGDAWgBQCzvasGjkehehy0YrGHeh6j50VazA3BggrBgEFBQcB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-AFaQ3a5QSxhWf+kc5Cl8YH6HJ7XNKwBnK/eiMts4khhGACLELR//Ml9iaTDbyKpj
-aGoP2y0TFY90IlRn+5UZNUlmHqFlZzxxAoU09zsgUQPpobl9mzsh1Hoobr0BUKZ+
-K6C8rdVVYz0E8/Cqw06zqrhoiaCMt544N4EsAVeTfD+qVC41ZqTAgcoGXMarcvQ4
-CM1gQFNCSHEK5/WCPLtRiaSLHslETH8QfdP0YAQHNrJEgrIKPOmCVUo3z0e20+rl
-/LhJTGt3pkIpHB+XeBj3iNpSQocZ5BMNkXPMmGoicOJcVNCWt5Q3PA/2muMC+5Vj
-WofUDRYWvZX6iMOo5NCR3b4=
+AOAMVR/aSz7n7OBBiVI9Dr6dMR1TgnqZ0501ZZdNumfEJ9sZQNkLFQ1qRIa+WQcU
+3BoslEEt63C+yFSJGOcn+7tPQaZgcB1/v+qHAd9/Z2iKj/+JibPAlaZ0Y4O6sVVt
+GhZklEfCagXCYusi1a4aovuTDcqhijkyJZeksnJzfIEwMxik/bbhtmtTrCYx6hm2
+07sxbnqRAeIiSvilOJsSxuVKu+RJNVkHG2olWLKqBAKQ/QpVzw4dlcbQwcf6oMTj
+nnVY8MZj1xCzrEV+YIbMlat7RnInEgVd6sgJR7GabO/ZGgsBu22k8zVQCZqGaKA0
+TH1wVZ2I2Jo9KPuLPFOWjOk=
-----END CERTIFICATE-----
Certificate:
@@ -227,30 +227,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:44:ec:a7:15:00:1f:89:ac:91:f8:ec:7b:03:
- 46:0b:53:15:ed:23:40:35:94:f3:96:80:27:d3:4a:
- 84:92:68:c9:0c:e0:14:32:c7:31:67:49:29:58:77:
- ea:ce:8a:72:5b:93:b1:a0:a8:e5:84:c6:52:9d:5a:
- c0:41:bf:98:5f:18:5d:aa:d1:65:79:fb:e9:b0:84:
- 92:9d:2c:58:bc:f1:c4:29:59:ed:bc:ac:85:ce:d7:
- 0e:aa:08:e8:2d:90:25:cb:91:9d:7d:91:74:42:a0:
- ae:77:d2:11:7b:57:49:04:24:c0:94:f4:20:54:60:
- d9:1b:76:76:0b:2c:23:3c:67:90:8c:06:ed:4e:df:
- ac:24:22:26:f7:26:8f:5a:d2:5b:79:8a:6f:6e:53:
- 27:60:10:cb:c7:b4:9f:60:2d:8f:32:69:4b:01:d1:
- f0:6d:69:1a:22:14:06:66:63:97:e8:fc:79:41:8d:
- 15:44:44:d1:43:2a:37:5e:77:e4:06:e6:a9:85:13:
- e9:24:63:9d:09:d0:f5:13:d5:ba:59:2e:1c:d2:70:
- 06:b1:80:f7:57:d7:30:f7:14:f3:18:06:7f:84:38:
- b6:81:46:9f:a2:36:87:0e:5f:1a:45:38:b7:20:16:
- b7:c6:e1:91:3b:0e:0c:ab:b7:4e:3d:a4:6d:66:d8:
- 85:fb
+ 00:ef:e6:e9:e0:b4:83:30:dc:21:a0:1f:9d:c3:81:
+ 9d:a2:a1:ce:e5:ef:1f:94:e3:f0:14:05:12:2a:97:
+ 5e:00:ba:6a:c3:09:b3:06:a1:9e:da:6f:9d:f8:45:
+ a2:6c:1e:7d:a3:10:d2:db:38:24:ed:80:25:36:9c:
+ db:d3:07:af:39:f8:82:48:a3:cd:7f:f3:57:dd:f9:
+ fd:7c:03:d5:8e:5d:35:ae:ed:af:c6:a1:89:ca:2e:
+ 2e:cf:77:5a:26:c6:e4:1d:9d:97:c7:a7:cf:93:aa:
+ 24:22:d9:82:d5:98:47:c9:33:ba:77:7e:6a:a3:35:
+ 43:1c:56:a5:94:2d:48:0f:47:2d:33:cd:c4:46:2d:
+ 54:61:dd:b8:bc:8d:1c:97:7d:4b:f4:fc:6b:3e:4d:
+ 28:17:7f:9a:e9:e5:6d:6f:c4:1c:75:8d:a6:0d:b7:
+ 5e:37:de:e1:1a:b2:e5:a6:d6:79:e4:df:1f:d3:f6:
+ 68:ed:30:a3:9e:8d:ed:8b:55:3d:12:3f:0f:3f:90:
+ 4f:b5:74:02:b0:1f:40:ae:32:d9:8e:a5:3b:74:e0:
+ f3:1e:4e:4c:63:fd:37:4b:b8:2f:70:41:64:4f:ee:
+ 6b:2f:33:40:2f:8a:c6:5f:e3:6a:e4:a0:62:53:99:
+ de:8c:ca:b5:34:ca:c0:20:9e:16:73:13:e1:c9:dc:
+ 22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -265,41 +265,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 0e:00:56:5c:72:31:88:bd:95:13:f7:64:96:1c:63:c2:1c:11:
- 60:04:d2:c3:5f:7c:a2:d7:d1:33:6d:51:6b:77:61:78:a8:70:
- 2e:50:97:5d:c1:e8:9b:dd:c6:61:a7:d3:e1:2c:83:07:85:5c:
- c9:d7:1e:22:c2:5f:76:83:19:d7:de:4a:5e:82:0f:43:80:45:
- 02:d7:d0:3d:ca:c3:c0:fc:04:c8:f6:89:32:d7:47:c6:bf:1f:
- c6:bd:71:e1:07:00:90:12:ec:61:63:1b:6c:e9:58:2c:fc:4c:
- a9:8f:58:e1:b1:6e:a5:ca:4d:be:7e:32:16:74:5f:fd:35:e4:
- 37:aa:1a:c5:33:21:20:8a:3e:1c:af:da:f3:c7:a2:22:d3:93:
- 6c:5e:ac:0a:65:d5:db:e4:8b:11:5e:ca:eb:8f:da:c4:5d:2f:
- 7a:98:e8:3c:d1:89:15:05:02:86:ef:eb:17:18:81:28:ca:d6:
- 58:87:bd:d4:e2:50:41:92:d9:7f:b1:f7:53:8f:f3:cc:f3:1e:
- 1d:e4:5a:c2:60:1b:17:42:78:53:e9:2d:5d:bb:f9:21:50:ff:
- 87:53:be:5f:e6:d4:8f:25:7f:d7:83:d7:f8:4d:c1:7c:7a:40:
- 0b:11:f1:d9:c6:eb:97:45:00:d6:6b:84:1c:4f:fc:8e:1f:5b:
- b5:3d:60:0c
+ 0b:b4:ba:9b:02:15:72:58:48:09:c8:66:c4:7c:6e:07:5e:bf:
+ e1:a5:97:42:fd:5f:8f:5f:35:e7:60:78:73:a8:18:f8:c2:91:
+ b1:d4:1b:cb:11:17:e0:d5:30:69:90:b8:9a:f9:a1:95:47:c9:
+ 85:dd:6d:b9:56:a2:fb:16:2f:09:8c:c0:66:6d:af:7b:f2:42:
+ 67:0f:a3:b9:e8:69:36:89:92:1e:c8:54:11:fe:39:3f:71:85:
+ d9:65:30:0c:2a:b1:a6:b8:df:b0:40:7b:56:98:3d:c3:66:76:
+ be:85:ec:f2:6c:30:de:ce:b3:84:70:74:83:2b:20:42:5a:f0:
+ 9b:31:98:81:16:71:cf:cf:66:57:36:dd:13:cd:f0:74:0c:2f:
+ a1:26:71:1e:50:ce:57:c9:85:71:47:08:b2:a6:b4:2a:2f:6b:
+ 5f:1f:80:09:3d:b1:5e:ab:aa:e7:08:86:c7:75:2d:36:b1:f3:
+ 2c:e1:91:8c:1c:6b:0a:fe:80:38:34:61:f8:a2:ee:3e:9a:e4:
+ 38:95:dd:3d:21:1e:61:5c:53:a7:30:b8:2b:10:72:d8:5d:54:
+ a3:47:9c:6c:69:d6:42:a6:56:f2:b3:3e:98:22:c2:b0:6b:2e:
+ f3:3a:b8:71:52:53:b5:32:a5:a4:38:35:fc:f2:ed:9a:e3:52:
+ 57:75:df:07
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZE7KcVAB+JrJH47HsD
-RgtTFe0jQDWU85aAJ9NKhJJoyQzgFDLHMWdJKVh36s6KcluTsaCo5YTGUp1awEG/
-mF8YXarRZXn76bCEkp0sWLzxxClZ7byshc7XDqoI6C2QJcuRnX2RdEKgrnfSEXtX
-SQQkwJT0IFRg2Rt2dgssIzxnkIwG7U7frCQiJvcmj1rSW3mKb25TJ2AQy8e0n2At
-jzJpSwHR8G1pGiIUBmZjl+j8eUGNFURE0UMqN1535AbmqYUT6SRjnQnQ9RPVulku
-HNJwBrGA91fXMPcU8xgGf4Q4toFGn6I2hw5fGkU4tyAWt8bhkTsODKu3Tj2kbWbY
-hfsCAwEAAaOByzCByDAdBgNVHQ4EFgQUAs72rBo5HoXoctGKxh3oeo+dFWswHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAOAFZccjGI
-vZUT92SWHGPCHBFgBNLDX3yi19EzbVFrd2F4qHAuUJddweib3cZhp9PhLIMHhVzJ
-1x4iwl92gxnX3kpegg9DgEUC19A9ysPA/ATI9oky10fGvx/GvXHhBwCQEuxhYxts
-6Vgs/Eypj1jhsW6lyk2+fjIWdF/9NeQ3qhrFMyEgij4cr9rzx6Ii05NsXqwKZdXb
-5IsRXsrrj9rEXS96mOg80YkVBQKG7+sXGIEoytZYh73U4lBBktl/sfdTj/PM8x4d
-5FrCYBsXQnhT6S1du/khUP+HU75f5tSPJX/Xg9f4TcF8ekALEfHZxuuXRQDWa4Qc
-T/yOH1u1PWAM
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQALtLqbAhVy
+WEgJyGbEfG4HXr/hpZdC/V+PXzXnYHhzqBj4wpGx1BvLERfg1TBpkLia+aGVR8mF
+3W25VqL7Fi8JjMBmba978kJnD6O56Gk2iZIeyFQR/jk/cYXZZTAMKrGmuN+wQHtW
+mD3DZna+hezybDDezrOEcHSDKyBCWvCbMZiBFnHPz2ZXNt0TzfB0DC+hJnEeUM5X
+yYVxRwiyprQqL2tfH4AJPbFeq6rnCIbHdS02sfMs4ZGMHGsK/oA4NGH4ou4+muQ4
+ld09IR5hXFOnMLgrEHLYXVSjR5xsadZCplbysz6YIsKway7zOrhxUlO1MqWkODX8
+8u2a41JXdd8H
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem
index 94105ff..d4cad40 100644
--- a/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem
@@ -1,4 +1,4 @@
-[Created by: ./generate-key-rollover.py]
+[Created by: generate-key-rollover.py]
A certificate tree with two self-signed root certificates(oldroot, newroot),
and a third root certificate (newrootrollover) which has the same key as newroot
@@ -48,30 +48,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:be:12:1c:48:e4:73:1f:5c:d2:54:a9:7b:58:1c:
- 37:73:c2:49:26:3e:ed:b5:6b:55:17:c9:4c:52:34:
- ce:d9:76:86:32:74:74:ae:11:b2:99:1b:51:a0:33:
- 48:34:2f:b9:d3:2b:06:c2:5c:29:53:35:ce:7c:a6:
- 67:b2:6a:d4:33:c3:13:62:30:a1:53:5f:45:78:5b:
- bb:47:ad:07:a4:98:9a:e9:e3:b1:3b:e6:33:c2:c1:
- 5c:95:d7:c8:b9:a6:72:27:7a:79:da:c4:c8:5a:1a:
- 3e:5e:5e:a6:62:64:c6:72:86:b1:78:98:5b:63:27:
- 70:15:04:6b:b1:0f:11:9c:4d:3b:5c:e7:8d:c0:be:
- d5:84:46:6c:bd:11:1e:21:c1:82:9c:d0:aa:2d:2f:
- f8:2a:e9:3b:e4:35:15:6d:c7:4a:dd:a8:65:69:b8:
- 16:a1:8a:04:a2:44:68:40:b6:99:ae:61:df:9f:6c:
- 40:ef:79:c9:a3:6d:e4:2d:07:01:68:f1:21:4e:0e:
- 28:a7:fd:2f:ad:ee:7d:65:cf:36:fd:4f:1b:ba:10:
- 8e:86:fd:ec:37:67:0c:20:71:66:48:64:f3:82:af:
- f5:e1:73:c9:09:36:03:3f:c2:47:7a:f2:33:b9:f9:
- 9f:53:9b:24:5e:c3:cc:05:d9:a9:ed:d7:b2:2a:c5:
- b7:39
+ 00:ab:ca:16:55:35:25:9b:de:8e:fc:e9:5a:f9:04:
+ 3e:0e:6c:06:1e:1c:86:20:18:4f:41:da:3a:6d:16:
+ 9e:4e:3c:9b:11:67:bc:5a:3d:84:b2:79:05:d2:25:
+ 9a:6a:a8:80:6c:55:28:f2:5a:43:5f:c5:ef:e9:e3:
+ 1a:64:24:7e:57:4d:11:60:d7:e6:a9:2b:73:c7:93:
+ bb:67:b1:41:d5:df:21:5c:bd:98:93:a3:7d:0d:b0:
+ 86:5f:87:a9:d9:ab:ad:97:89:c5:12:c4:0f:71:d3:
+ 5b:79:18:53:64:7f:0a:a1:36:5e:00:5c:b9:ee:5e:
+ 14:10:17:f2:2a:60:0f:f7:ec:aa:d7:ad:d3:dc:8a:
+ 44:59:cf:c8:11:e7:42:1c:88:30:d7:1e:37:86:91:
+ 6b:ce:2a:bc:bb:f5:4a:cc:72:1a:9d:4f:5f:0e:c4:
+ c5:f7:b6:24:09:1c:22:f8:f7:a2:3d:45:c2:29:4d:
+ a3:f3:db:7a:a4:93:a2:48:d6:2b:90:da:0c:2b:d9:
+ 96:f0:d6:c7:eb:d0:eb:a8:08:72:55:a8:10:65:8f:
+ 38:6a:22:0c:9c:3d:68:1a:cd:16:da:73:24:2e:14:
+ 5d:08:05:fb:07:d1:52:53:4e:51:e4:b2:f3:17:4d:
+ f1:d0:c3:23:51:86:fb:a4:b9:09:37:9c:13:69:65:
+ 51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C9:45:0B:2A:F2:D8:8D:2A:D7:CE:AF:56:BF:82:B0:84:0C:C8:2E:F4
+ 90:8D:89:42:17:BF:F6:98:D1:AA:8C:BF:AF:C2:74:60:AB:ED:90:0F
X509v3 Authority Key Identifier:
- keyid:B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ keyid:A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
@@ -86,42 +86,42 @@
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 63:66:9e:6c:34:8c:5d:74:ae:90:25:55:ae:86:49:b9:3d:fd:
- 27:bc:4f:69:7b:70:cb:25:0e:a3:8c:7a:7d:9c:4f:0b:7c:f2:
- 85:a5:ea:82:d2:37:c2:74:a2:ae:a8:bf:62:f4:5f:d4:c6:41:
- 45:0c:cc:27:53:aa:8f:66:58:e9:b0:de:ae:98:14:bd:92:df:
- 9b:0f:f2:c5:3b:d2:bc:1c:3e:80:b4:09:0f:c1:9f:d6:3a:29:
- 52:71:b6:1a:92:95:5a:18:dc:b4:30:dc:61:61:93:54:d1:55:
- 83:92:5d:c0:c7:dc:ab:d7:08:dd:8a:44:cf:92:f9:4d:86:25:
- aa:ac:52:f6:0e:17:99:0b:31:d2:75:5e:33:f9:f5:b6:77:42:
- 07:62:a9:53:cc:f3:79:84:57:d9:14:3f:ab:4c:8b:ae:c7:9f:
- cf:7a:1f:bf:7e:1d:44:bd:76:b4:cd:8d:c8:1d:75:f7:3b:b5:
- bc:35:8b:3f:29:b1:cb:67:a4:17:af:a4:ca:9f:2b:e7:15:66:
- e4:c8:c1:7c:08:78:9e:5d:4b:c3:c6:58:66:96:42:e8:e6:40:
- fd:dc:24:ce:3b:58:11:38:40:0e:fc:a9:c0:2c:0f:e5:cc:bb:
- 02:32:31:b9:bc:6f:2d:1d:f6:2b:7c:d3:f8:24:f6:60:38:8a:
- 1f:dd:e1:50
+ 74:15:69:e0:48:a6:e3:fa:20:b6:3f:90:d7:61:d3:ea:b7:47:
+ 61:c7:81:6b:42:95:44:ac:1e:6f:3d:df:ad:2c:33:0d:e8:94:
+ 5b:d1:24:89:56:27:76:e4:6c:09:26:a7:e5:62:c9:96:83:ce:
+ 9d:08:f5:ee:c4:3d:fe:77:29:ae:8d:9f:7f:d5:81:b6:5d:b5:
+ 54:a0:1f:6c:54:1e:dd:a7:4e:78:e0:6c:60:1d:e8:1f:97:77:
+ 67:8d:57:80:00:17:80:cd:ab:ce:31:87:6e:9e:bf:3f:38:b9:
+ da:96:a3:d2:22:63:43:dd:5c:e8:42:ea:2d:eb:ab:81:33:e5:
+ 95:36:46:3c:dd:8e:ad:e2:43:40:6f:3c:ce:73:4d:52:71:9d:
+ 54:59:f4:73:a2:5a:48:a5:c7:bc:dd:f9:9f:91:39:b1:bc:ad:
+ 9a:59:ea:f6:33:42:72:66:2f:e9:78:8f:b6:09:15:35:d8:e6:
+ 70:0d:d3:da:a7:7e:55:d9:05:88:47:16:1d:cd:54:1c:15:11:
+ a6:d3:35:2a:4e:c5:0f:f7:b0:98:24:bf:7e:78:3e:5f:56:0c:
+ 87:72:c2:d1:7d:3e:3c:c6:98:50:a9:c7:cd:6f:0e:12:b4:32:
+ 7a:b8:01:6c:88:1c:8a:c2:19:24:1e:34:9b:da:45:eb:0a:f9:
+ 99:6e:54:c6
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EhxI
-5HMfXNJUqXtYHDdzwkkmPu21a1UXyUxSNM7ZdoYydHSuEbKZG1GgM0g0L7nTKwbC
-XClTNc58pmeyatQzwxNiMKFTX0V4W7tHrQekmJrp47E75jPCwVyV18i5pnInenna
-xMhaGj5eXqZiZMZyhrF4mFtjJ3AVBGuxDxGcTTtc543AvtWERmy9ER4hwYKc0Kot
-L/gq6TvkNRVtx0rdqGVpuBahigSiRGhAtpmuYd+fbEDvecmjbeQtBwFo8SFODiin
-/S+t7n1lzzb9Txu6EI6G/ew3ZwwgcWZIZPOCr/Xhc8kJNgM/wkd68jO5+Z9TmyRe
-w8wF2ant17Iqxbc5AgMBAAGjgekwgeYwHQYDVR0OBBYEFMlFCyry2I0q186vVr+C
-sIQMyC70MB8GA1UdIwQYMBaAFLE5eRM10ANr6cRjK8zWYcOC7BTBMD8GCCsGAQUF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-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAY2aebDSMXXSukCVVroZJ
-uT39J7xPaXtwyyUOo4x6fZxPC3zyhaXqgtI3wnSirqi/YvRf1MZBRQzMJ1Oqj2ZY
-6bDerpgUvZLfmw/yxTvSvBw+gLQJD8Gf1jopUnG2GpKVWhjctDDcYWGTVNFVg5Jd
-wMfcq9cI3YpEz5L5TYYlqqxS9g4XmQsx0nVeM/n1tndCB2KpU8zzeYRX2RQ/q0yL
-rsefz3ofv34dRL12tM2NyB119zu1vDWLPymxy2ekF6+kyp8r5xVm5MjBfAh4nl1L
-w8ZYZpZC6OZA/dwkzjtYEThADvypwCwP5cy7AjIxubxvLR32K3zT+CT2YDiKH93h
-UA==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdBVp4Eim4/ogtj+Q12HT
+6rdHYceBa0KVRKwebz3frSwzDeiUW9EkiVYnduRsCSan5WLJloPOnQj17sQ9/ncp
+ro2ff9WBtl21VKAfbFQe3adOeOBsYB3oH5d3Z41XgAAXgM2rzjGHbp6/Pzi52paj
+0iJjQ91c6ELqLeurgTPllTZGPN2OreJDQG88znNNUnGdVFn0c6JaSKXHvN35n5E5
+sbytmlnq9jNCcmYv6XiPtgkVNdjmcA3T2qd+VdkFiEcWHc1UHBURptM1Kk7FD/ew
+mCS/fng+X1YMh3LC0X0+PMaYUKnHzW8OErQyergBbIgcisIZJB40m9pF6wr5mW5U
+xg==
-----END CERTIFICATE-----
Certificate:
@@ -138,30 +138,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9c:d0:2e:3b:06:d6:ea:65:bd:dd:b2:d3:e8:88:
- ea:08:73:01:42:ac:ca:38:28:17:32:93:5e:16:a8:
- c1:79:44:9a:db:24:08:ba:81:52:63:9c:b4:ed:57:
- d4:b2:ac:54:64:3b:70:39:7e:37:da:11:e1:8c:ba:
- 09:bc:1a:9b:e7:fe:6d:75:f8:71:31:f0:ca:52:89:
- 2a:9e:d5:53:db:b8:c0:76:cf:bf:58:58:e1:bb:81:
- de:62:bb:06:58:1f:9b:64:03:75:7d:ee:76:6f:39:
- 47:cb:8e:34:32:07:83:89:b0:83:2a:78:d0:ac:e2:
- 86:0a:a8:ab:3b:97:81:de:9d:36:b4:03:b7:d5:06:
- 05:53:d7:80:03:44:86:53:72:db:7a:5f:c5:20:dd:
- c7:44:58:3b:40:7f:0e:39:bc:be:0d:ca:6a:f6:82:
- a2:97:a2:17:79:51:6f:42:5d:0d:6a:b7:a0:de:5f:
- 6a:00:be:e7:5a:b7:91:e9:fc:77:fd:75:88:8d:52:
- 76:3d:0e:91:4b:c7:db:96:a4:5f:39:59:55:62:65:
- 3b:15:7a:bc:7b:09:9f:3e:75:d9:9e:c5:00:b3:19:
- d4:26:7e:eb:db:62:07:c2:f5:b6:4e:87:2d:eb:56:
- 8b:5a:68:6c:85:2f:b4:3e:1d:dd:5d:31:49:98:8b:
- 06:55
+ 00:ad:d7:63:a2:51:33:32:fd:aa:73:2c:32:30:ac:
+ 2f:8d:37:5f:08:b2:9b:02:1a:f7:3c:eb:c2:9e:82:
+ d9:a2:0e:02:14:28:bc:18:e2:92:8e:db:66:14:36:
+ 3f:ef:43:47:ac:b4:e2:be:92:82:14:9a:bd:97:d7:
+ 19:6f:88:29:b1:85:68:bd:13:d5:93:2c:a0:c8:bb:
+ 76:9d:ad:f5:da:e8:55:ca:87:6d:07:20:f4:22:cf:
+ 5a:51:ea:e1:7b:c3:7e:f9:a8:85:95:c5:e9:88:bf:
+ 7b:5e:fd:49:d4:c4:ed:ce:b7:d2:71:23:59:00:a7:
+ 6f:85:40:a0:38:c6:2b:88:99:68:e9:97:7e:2f:92:
+ 97:18:0a:19:c2:4e:0a:28:2c:b3:b4:67:26:eb:1d:
+ 03:f6:16:58:20:88:81:ee:a8:ea:19:ae:25:e9:34:
+ 8d:87:f3:d2:3b:0e:b2:d8:31:14:ee:bd:c6:01:ec:
+ d4:41:f0:06:7b:3e:20:7b:06:88:86:29:d1:77:9a:
+ c0:bc:69:63:3f:2b:20:ac:aa:17:33:29:78:0a:11:
+ ff:92:f2:b3:4a:58:29:96:d3:f4:4f:70:ef:9c:81:
+ 55:1c:21:20:bf:54:5a:dd:60:b7:6e:53:41:a2:19:
+ 55:b5:f9:b8:6e:63:37:73:a0:b8:d4:c5:c1:a2:4e:
+ 0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -176,41 +176,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- a8:ad:48:d8:6e:1d:24:09:d2:b3:29:3c:48:60:27:7f:37:64:
- d5:f1:3b:b3:5c:43:de:7c:b4:5f:ee:3a:f2:1a:25:24:0a:8a:
- 25:6d:19:5b:dc:0c:4e:48:61:2f:60:d3:6b:f3:9c:03:2c:d3:
- fa:c8:9b:99:e7:2e:c5:43:c0:5f:14:cd:8b:92:62:4f:e5:3a:
- cd:b5:0a:d8:b2:01:c7:44:b4:3a:86:66:bf:fa:11:a5:f8:24:
- 3f:d1:1a:e8:eb:1e:ad:f0:70:31:6f:bc:21:cf:db:ce:63:4e:
- 84:e9:52:9e:bb:1b:c4:72:ae:e0:6c:88:9e:99:dc:79:d9:fd:
- 83:26:8e:f6:19:70:d9:5e:fc:f4:0c:d1:17:6f:af:10:f6:64:
- 16:08:d8:72:ba:3a:2d:66:28:5a:41:0d:f3:47:87:a7:9c:78:
- c6:cd:5e:25:71:0b:f2:93:b8:26:17:b2:19:17:cc:03:ed:c0:
- 6e:06:e2:4b:4a:57:5f:23:02:2a:69:06:7a:c4:b7:3e:2f:e8:
- f0:03:ae:b8:2d:df:63:22:20:73:23:75:d9:3c:d7:22:e4:b4:
- 65:65:ed:b9:e6:02:1d:b5:51:11:9c:db:92:e4:fe:8c:1d:bb:
- c5:95:87:5b:38:ee:ff:e4:01:d1:5d:84:b9:73:d3:da:23:ca:
- 5e:05:d3:7d
+ 7f:a1:7c:8f:ea:d9:b9:63:e1:b0:31:0a:2e:1c:8e:e9:d0:23:
+ ee:3e:8e:50:55:db:ba:10:93:a4:93:0b:bb:c1:a5:3d:32:90:
+ ee:40:bf:0f:df:25:f1:65:b3:30:6d:39:9b:d2:c1:b8:b7:a8:
+ 7e:23:dc:6a:c3:5a:9e:53:d7:86:4c:82:de:98:23:1a:6f:f9:
+ 0d:6d:b9:35:55:b9:94:03:8d:b7:6c:2e:64:79:ea:85:84:7e:
+ 51:18:37:42:80:f5:d4:16:3f:a0:a9:6b:bf:17:d1:19:99:ea:
+ 8d:5a:c9:30:b0:ca:c8:2c:17:ce:14:75:b3:c9:19:df:16:1b:
+ 9a:97:ae:50:69:a5:6c:02:57:84:f4:7f:30:90:ed:89:bb:0e:
+ c9:7b:34:d0:41:58:00:20:29:6b:f0:e8:97:81:92:3d:ba:e0:
+ 65:e9:7c:cb:5c:7b:50:c8:0f:d3:20:ab:42:2f:0d:44:6d:99:
+ c2:1d:42:e8:b2:10:82:9b:86:ba:a8:45:d2:2c:13:53:cf:ad:
+ 37:ac:ce:f3:e7:49:fe:59:d5:b6:5f:8b:6b:fd:5f:e0:f2:91:
+ ef:e3:f7:e0:b6:ee:e7:ae:77:0e:66:12:40:55:75:77:2a:05:
+ d4:bd:ab:7e:5a:67:d8:81:8b:15:fd:4c:60:63:c7:f7:5f:fa:
+ d4:d8:d9:d2
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAuOwbW
-6mW93bLT6IjqCHMBQqzKOCgXMpNeFqjBeUSa2yQIuoFSY5y07VfUsqxUZDtwOX43
-2hHhjLoJvBqb5/5tdfhxMfDKUokqntVT27jAds+/WFjhu4HeYrsGWB+bZAN1fe52
-bzlHy440MgeDibCDKnjQrOKGCqirO5eB3p02tAO31QYFU9eAA0SGU3Lbel/FIN3H
-RFg7QH8OOby+Dcpq9oKil6IXeVFvQl0Nareg3l9qAL7nWreR6fx3/XWIjVJ2PQ6R
-S8fblqRfOVlVYmU7FXq8ewmfPnXZnsUAsxnUJn7r22IHwvW2Toct61aLWmhshS+0
-Ph3dXTFJmIsGVQIDAQABo4HLMIHIMB0GA1UdDgQWBBSxOXkTNdADa+nEYyvM1mHD
-guwUwTAfBgNVHSMEGDAWgBQVnqat9Z+KocEImb9mb8/Kcs0MNDA3BggrBgEFBQcB
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArddjolEz
+Mv2qcywyMKwvjTdfCLKbAhr3POvCnoLZog4CFCi8GOKSjttmFDY/70NHrLTivpKC
+FJq9l9cZb4gpsYVovRPVkyygyLt2na312uhVyodtByD0Is9aUerhe8N++aiFlcXp
+iL97Xv1J1MTtzrfScSNZAKdvhUCgOMYriJlo6Zd+L5KXGAoZwk4KKCyztGcm6x0D
+9hZYIIiB7qjqGa4l6TSNh/PSOw6y2DEU7r3GAezUQfAGez4gewaIhinRd5rAvGlj
+PysgrKoXMyl4ChH/kvKzSlgpltP0T3DvnIFVHCEgv1Ra3WC3blNBohlVtfm4bmM3
+c6C41MXBok4OEQIDAQABo4HLMIHIMB0GA1UdDgQWBBSlJY7DFJyGGTD1BcWqyDcS
+9pRKRjAfBgNVHSMEGDAWgBSD+ZPVKfnEuqFf5Ml0GODfDhcYUDA3BggrBgEFBQcB
AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AKitSNhuHSQJ0rMpPEhgJ383ZNXxO7NcQ958tF/uOvIaJSQKiiVtGVvcDE5IYS9g
-02vznAMs0/rIm5nnLsVDwF8UzYuSYk/lOs21CtiyAcdEtDqGZr/6EaX4JD/RGujr
-Hq3wcDFvvCHP285jToTpUp67G8RyruBsiJ6Z3HnZ/YMmjvYZcNle/PQM0RdvrxD2
-ZBYI2HK6Oi1mKFpBDfNHh6eceMbNXiVxC/KTuCYXshkXzAPtwG4G4ktKV18jAipp
-BnrEtz4v6PADrrgt32MiIHMjddk81yLktGVl7bnmAh21URGc25Lk/owdu8WVh1s4
-7v/kAdFdhLlz09ojyl4F030=
+AH+hfI/q2blj4bAxCi4cjunQI+4+jlBV27oQk6STC7vBpT0ykO5Avw/fJfFlszBt
+OZvSwbi3qH4j3GrDWp5T14ZMgt6YIxpv+Q1tuTVVuZQDjbdsLmR56oWEflEYN0KA
+9dQWP6Cpa78X0RmZ6o1ayTCwysgsF84UdbPJGd8WG5qXrlBppWwCV4T0fzCQ7Ym7
+Dsl7NNBBWAAgKWvw6JeBkj264GXpfMtce1DID9Mgq0IvDURtmcIdQuiyEIKbhrqo
+RdIsE1PPrTeszvPnSf5Z1bZfi2v9X+Dyke/j9+C27ueudw5mEkBVdXcqBdS9q35a
+Z9iBixX9TGBjx/df+tTY2dI=
-----END CERTIFICATE-----
Certificate:
@@ -227,30 +227,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ae:ea:3b:3f:b6:e9:3d:ea:eb:3d:dd:e8:4d:45:
- 83:63:78:ea:07:90:3a:3c:4f:92:54:2b:2d:02:1b:
- eb:9e:81:72:68:2e:73:f8:4a:a1:de:0c:d6:f0:c2:
- 61:26:90:0b:48:59:ab:23:25:8f:e4:4a:6b:c9:2d:
- ba:a7:35:c4:22:df:76:99:d8:7b:f7:6d:ca:9b:da:
- d2:ed:7e:c8:93:b2:a7:f6:f0:05:6a:5d:c6:e1:79:
- d0:25:59:a9:50:1e:65:eb:1c:c9:cd:4e:6a:3a:2a:
- a4:1a:fa:81:a3:e7:ae:d7:de:43:d9:e8:0b:5c:b0:
- 6b:46:39:c5:9c:4a:6d:59:bf:da:70:2e:80:ac:c8:
- 80:e3:83:d1:71:7b:a7:0b:92:bf:a8:81:ad:5c:b2:
- d5:e9:b9:5f:b5:4f:93:43:67:72:36:b3:f7:17:b9:
- 1b:da:2a:13:83:70:36:ae:59:03:3d:f0:71:de:a2:
- 7a:41:ad:b5:e9:a2:51:e4:18:ec:88:ad:48:f1:df:
- 17:04:43:54:2a:af:3c:c0:f5:84:39:43:d1:a7:d2:
- 52:0f:3c:dd:ef:13:58:8c:1d:d4:dd:2e:6d:1a:e7:
- 73:9b:8b:f3:41:7b:9a:53:4e:0d:92:d3:5d:3f:fc:
- c3:61:dc:5f:a0:93:3c:08:cc:b4:9b:ce:9d:78:e3:
- 77:c9
+ 00:c8:01:d6:aa:f0:22:fa:55:68:e4:56:fa:87:9f:
+ 03:a4:78:36:40:64:b2:60:f7:20:25:47:92:b0:cb:
+ c7:9d:4c:c6:4d:78:0f:91:9e:a8:f1:0b:84:58:b1:
+ a9:06:2d:7d:09:82:f4:1a:60:67:7b:c3:47:69:05:
+ b5:59:90:02:2a:53:27:25:21:4d:9a:5f:b6:7b:58:
+ 25:77:b3:46:64:fc:ed:04:c0:e2:62:e5:96:f9:8a:
+ 8d:9a:e8:8d:bf:d9:19:38:97:52:ab:31:3c:1c:a2:
+ b9:21:ec:5f:aa:8c:21:44:c6:73:7f:0b:72:c9:61:
+ 1c:a7:cd:46:bb:da:5b:a7:1b:e2:18:fb:ff:18:81:
+ 5f:fb:75:29:21:9c:92:e0:d3:03:f5:b8:58:94:36:
+ 32:7a:9a:a7:ec:49:ab:ef:d4:8c:c4:65:aa:23:40:
+ 96:76:47:4b:06:0b:21:c4:44:9f:8d:12:ab:05:05:
+ e7:97:d9:9d:c0:f9:4d:77:14:0b:c5:d5:82:0c:d7:
+ 14:54:fa:07:dd:a3:78:30:5d:95:83:e4:1c:7f:c2:
+ 13:c6:b1:8b:10:87:9b:e9:3e:4f:d6:b6:b9:a8:9f:
+ 4c:47:f8:40:67:7d:4e:9b:87:4a:b6:92:eb:33:f1:
+ 73:a3:70:d6:fc:37:32:2a:b4:b8:56:90:63:5e:ec:
+ b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ 83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -265,41 +265,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 51:9b:dd:56:f2:b1:2b:e5:36:c8:2f:1d:a9:53:1f:89:e1:24:
- 33:bd:ac:56:c1:c3:1a:38:a6:7e:fc:61:9a:ae:7c:1f:13:3e:
- 37:e4:e6:a9:11:9e:2b:6e:ce:dd:12:0c:c1:b2:b7:eb:48:0e:
- c7:a5:65:f0:86:49:8a:dc:cf:1b:6d:33:af:af:96:51:49:01:
- e4:82:d6:e6:5a:d0:41:c7:05:9f:16:eb:06:bd:bc:ab:fe:a0:
- d7:ac:de:62:d1:71:7e:69:82:31:03:e3:60:28:e6:18:3b:e5:
- 93:2b:58:ee:d5:0b:7b:b6:af:f2:4f:22:eb:4d:b7:a6:74:68:
- b7:82:68:7f:a9:b6:ee:a0:20:d7:c6:16:0e:9c:1c:39:ea:24:
- 5e:60:12:fc:39:60:0d:54:3e:aa:b3:43:e1:0f:ef:d7:8f:3e:
- 09:a9:55:95:e9:3d:0c:4f:ad:cb:c2:f3:2c:10:43:67:54:f9:
- 66:54:81:ff:62:61:94:05:b0:42:af:f0:c5:ac:00:91:28:5c:
- aa:a3:61:44:ba:c2:a6:ab:f8:1d:7e:02:69:33:48:fe:ac:93:
- 7f:4c:99:91:d9:18:37:f9:70:3f:56:2a:ee:4a:e0:4d:f3:60:
- 12:5d:30:d8:37:bf:ca:40:85:29:0c:a7:8f:ab:ad:03:6d:7b:
- ba:62:7f:58
+ a4:6f:3a:2b:4c:55:63:68:09:a1:73:eb:b1:b6:69:07:de:8a:
+ 44:7d:10:bd:05:bf:a9:ef:06:af:c1:90:a6:75:1d:a8:51:e2:
+ f7:9a:4e:d7:23:6b:c1:34:83:64:9c:6d:15:0a:cc:b0:99:13:
+ 53:1f:0b:ef:23:82:6d:32:e1:ea:08:ce:65:21:d4:09:6a:6a:
+ d4:05:1b:96:2b:34:44:89:31:4e:14:11:b2:ff:ae:cf:60:56:
+ 2a:37:2f:18:2b:ae:aa:74:bb:d5:88:fb:3f:d4:ee:4c:f5:f3:
+ 4a:fa:6f:34:78:b7:bd:b1:d0:77:da:86:02:ce:a7:c3:11:f2:
+ 09:bf:3c:17:61:d2:4c:c5:26:07:ec:92:0a:ab:9e:6a:ae:72:
+ 66:34:a3:45:94:76:8c:e7:7c:f8:d3:43:41:b0:70:57:78:56:
+ ee:bc:54:8f:ba:ac:07:dd:cb:3d:a0:1a:79:cb:5b:20:4a:9b:
+ 1a:8d:93:3a:5e:38:11:ae:60:dd:1c:5f:63:5a:dd:06:a6:c3:
+ a1:20:4d:1e:a1:6a:a6:92:7c:1e:b4:01:a7:e3:6c:94:c8:30:
+ a6:bb:a7:2e:d7:66:2b:7f:a6:0b:3f:44:b5:62:2e:32:44:12:
+ 96:f0:bb:49:8a:49:f6:78:05:60:ed:64:13:93:67:35:4f:c8:
+ 38:98:2f:e5
-----BEGIN CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7qOz+26T3q6z3d6E1F
-g2N46geQOjxPklQrLQIb656Bcmguc/hKod4M1vDCYSaQC0hZqyMlj+RKa8ktuqc1
-xCLfdpnYe/dtypva0u1+yJOyp/bwBWpdxuF50CVZqVAeZescyc1OajoqpBr6gaPn
-rtfeQ9noC1ywa0Y5xZxKbVm/2nAugKzIgOOD0XF7pwuSv6iBrVyy1em5X7VPk0Nn
-cjaz9xe5G9oqE4NwNq5ZAz3wcd6iekGttemiUeQY7IitSPHfFwRDVCqvPMD1hDlD
-0afSUg883e8TWIwd1N0ubRrnc5uL80F7mlNODZLTXT/8w2HcX6CTPAjMtJvOnXjj
-d8kCAwEAAaOByzCByDAdBgNVHQ4EFgQUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBRm91W8rEr
-5TbILx2pUx+J4SQzvaxWwcMaOKZ+/GGarnwfEz435OapEZ4rbs7dEgzBsrfrSA7H
-pWXwhkmK3M8bbTOvr5ZRSQHkgtbmWtBBxwWfFusGvbyr/qDXrN5i0XF+aYIxA+Ng
-KOYYO+WTK1ju1Qt7tq/yTyLrTbemdGi3gmh/qbbuoCDXxhYOnBw56iReYBL8OWAN
-VD6qs0PhD+/Xjz4JqVWV6T0MT63LwvMsEENnVPlmVIH/YmGUBbBCr/DFrACRKFyq
-o2FEusKmq/gdfgJpM0j+rJN/TJmR2Rg3+XA/ViruSuBN82ASXTDYN7/KQIUpDKeP
-q60DbXu6Yn9Y
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCkbzorTFVj
+aAmhc+uxtmkH3opEfRC9Bb+p7wavwZCmdR2oUeL3mk7XI2vBNINknG0VCsywmRNT
+HwvvI4JtMuHqCM5lIdQJamrUBRuWKzREiTFOFBGy/67PYFYqNy8YK66qdLvViPs/
+1O5M9fNK+m80eLe9sdB32oYCzqfDEfIJvzwXYdJMxSYH7JIKq55qrnJmNKNFlHaM
+53z400NBsHBXeFbuvFSPuqwH3cs9oBp5y1sgSpsajZM6XjgRrmDdHF9jWt0GpsOh
+IE0eoWqmknwetAGn42yUyDCmu6cu12Yrf6YLP0S1Yi4yRBKW8LtJikn2eAVg7WQT
+k2c1T8g4mC/l
-----END CERTIFICATE-----
Certificate:
@@ -316,30 +316,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:44:ec:a7:15:00:1f:89:ac:91:f8:ec:7b:03:
- 46:0b:53:15:ed:23:40:35:94:f3:96:80:27:d3:4a:
- 84:92:68:c9:0c:e0:14:32:c7:31:67:49:29:58:77:
- ea:ce:8a:72:5b:93:b1:a0:a8:e5:84:c6:52:9d:5a:
- c0:41:bf:98:5f:18:5d:aa:d1:65:79:fb:e9:b0:84:
- 92:9d:2c:58:bc:f1:c4:29:59:ed:bc:ac:85:ce:d7:
- 0e:aa:08:e8:2d:90:25:cb:91:9d:7d:91:74:42:a0:
- ae:77:d2:11:7b:57:49:04:24:c0:94:f4:20:54:60:
- d9:1b:76:76:0b:2c:23:3c:67:90:8c:06:ed:4e:df:
- ac:24:22:26:f7:26:8f:5a:d2:5b:79:8a:6f:6e:53:
- 27:60:10:cb:c7:b4:9f:60:2d:8f:32:69:4b:01:d1:
- f0:6d:69:1a:22:14:06:66:63:97:e8:fc:79:41:8d:
- 15:44:44:d1:43:2a:37:5e:77:e4:06:e6:a9:85:13:
- e9:24:63:9d:09:d0:f5:13:d5:ba:59:2e:1c:d2:70:
- 06:b1:80:f7:57:d7:30:f7:14:f3:18:06:7f:84:38:
- b6:81:46:9f:a2:36:87:0e:5f:1a:45:38:b7:20:16:
- b7:c6:e1:91:3b:0e:0c:ab:b7:4e:3d:a4:6d:66:d8:
- 85:fb
+ 00:ef:e6:e9:e0:b4:83:30:dc:21:a0:1f:9d:c3:81:
+ 9d:a2:a1:ce:e5:ef:1f:94:e3:f0:14:05:12:2a:97:
+ 5e:00:ba:6a:c3:09:b3:06:a1:9e:da:6f:9d:f8:45:
+ a2:6c:1e:7d:a3:10:d2:db:38:24:ed:80:25:36:9c:
+ db:d3:07:af:39:f8:82:48:a3:cd:7f:f3:57:dd:f9:
+ fd:7c:03:d5:8e:5d:35:ae:ed:af:c6:a1:89:ca:2e:
+ 2e:cf:77:5a:26:c6:e4:1d:9d:97:c7:a7:cf:93:aa:
+ 24:22:d9:82:d5:98:47:c9:33:ba:77:7e:6a:a3:35:
+ 43:1c:56:a5:94:2d:48:0f:47:2d:33:cd:c4:46:2d:
+ 54:61:dd:b8:bc:8d:1c:97:7d:4b:f4:fc:6b:3e:4d:
+ 28:17:7f:9a:e9:e5:6d:6f:c4:1c:75:8d:a6:0d:b7:
+ 5e:37:de:e1:1a:b2:e5:a6:d6:79:e4:df:1f:d3:f6:
+ 68:ed:30:a3:9e:8d:ed:8b:55:3d:12:3f:0f:3f:90:
+ 4f:b5:74:02:b0:1f:40:ae:32:d9:8e:a5:3b:74:e0:
+ f3:1e:4e:4c:63:fd:37:4b:b8:2f:70:41:64:4f:ee:
+ 6b:2f:33:40:2f:8a:c6:5f:e3:6a:e4:a0:62:53:99:
+ de:8c:ca:b5:34:ca:c0:20:9e:16:73:13:e1:c9:dc:
+ 22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -354,41 +354,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 0e:00:56:5c:72:31:88:bd:95:13:f7:64:96:1c:63:c2:1c:11:
- 60:04:d2:c3:5f:7c:a2:d7:d1:33:6d:51:6b:77:61:78:a8:70:
- 2e:50:97:5d:c1:e8:9b:dd:c6:61:a7:d3:e1:2c:83:07:85:5c:
- c9:d7:1e:22:c2:5f:76:83:19:d7:de:4a:5e:82:0f:43:80:45:
- 02:d7:d0:3d:ca:c3:c0:fc:04:c8:f6:89:32:d7:47:c6:bf:1f:
- c6:bd:71:e1:07:00:90:12:ec:61:63:1b:6c:e9:58:2c:fc:4c:
- a9:8f:58:e1:b1:6e:a5:ca:4d:be:7e:32:16:74:5f:fd:35:e4:
- 37:aa:1a:c5:33:21:20:8a:3e:1c:af:da:f3:c7:a2:22:d3:93:
- 6c:5e:ac:0a:65:d5:db:e4:8b:11:5e:ca:eb:8f:da:c4:5d:2f:
- 7a:98:e8:3c:d1:89:15:05:02:86:ef:eb:17:18:81:28:ca:d6:
- 58:87:bd:d4:e2:50:41:92:d9:7f:b1:f7:53:8f:f3:cc:f3:1e:
- 1d:e4:5a:c2:60:1b:17:42:78:53:e9:2d:5d:bb:f9:21:50:ff:
- 87:53:be:5f:e6:d4:8f:25:7f:d7:83:d7:f8:4d:c1:7c:7a:40:
- 0b:11:f1:d9:c6:eb:97:45:00:d6:6b:84:1c:4f:fc:8e:1f:5b:
- b5:3d:60:0c
+ 0b:b4:ba:9b:02:15:72:58:48:09:c8:66:c4:7c:6e:07:5e:bf:
+ e1:a5:97:42:fd:5f:8f:5f:35:e7:60:78:73:a8:18:f8:c2:91:
+ b1:d4:1b:cb:11:17:e0:d5:30:69:90:b8:9a:f9:a1:95:47:c9:
+ 85:dd:6d:b9:56:a2:fb:16:2f:09:8c:c0:66:6d:af:7b:f2:42:
+ 67:0f:a3:b9:e8:69:36:89:92:1e:c8:54:11:fe:39:3f:71:85:
+ d9:65:30:0c:2a:b1:a6:b8:df:b0:40:7b:56:98:3d:c3:66:76:
+ be:85:ec:f2:6c:30:de:ce:b3:84:70:74:83:2b:20:42:5a:f0:
+ 9b:31:98:81:16:71:cf:cf:66:57:36:dd:13:cd:f0:74:0c:2f:
+ a1:26:71:1e:50:ce:57:c9:85:71:47:08:b2:a6:b4:2a:2f:6b:
+ 5f:1f:80:09:3d:b1:5e:ab:aa:e7:08:86:c7:75:2d:36:b1:f3:
+ 2c:e1:91:8c:1c:6b:0a:fe:80:38:34:61:f8:a2:ee:3e:9a:e4:
+ 38:95:dd:3d:21:1e:61:5c:53:a7:30:b8:2b:10:72:d8:5d:54:
+ a3:47:9c:6c:69:d6:42:a6:56:f2:b3:3e:98:22:c2:b0:6b:2e:
+ f3:3a:b8:71:52:53:b5:32:a5:a4:38:35:fc:f2:ed:9a:e3:52:
+ 57:75:df:07
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZE7KcVAB+JrJH47HsD
-RgtTFe0jQDWU85aAJ9NKhJJoyQzgFDLHMWdJKVh36s6KcluTsaCo5YTGUp1awEG/
-mF8YXarRZXn76bCEkp0sWLzxxClZ7byshc7XDqoI6C2QJcuRnX2RdEKgrnfSEXtX
-SQQkwJT0IFRg2Rt2dgssIzxnkIwG7U7frCQiJvcmj1rSW3mKb25TJ2AQy8e0n2At
-jzJpSwHR8G1pGiIUBmZjl+j8eUGNFURE0UMqN1535AbmqYUT6SRjnQnQ9RPVulku
-HNJwBrGA91fXMPcU8xgGf4Q4toFGn6I2hw5fGkU4tyAWt8bhkTsODKu3Tj2kbWbY
-hfsCAwEAAaOByzCByDAdBgNVHQ4EFgQUAs72rBo5HoXoctGKxh3oeo+dFWswHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO/m6eC0gzDcIaAfncOB
+naKhzuXvH5Tj8BQFEiqXXgC6asMJswahntpvnfhFomwefaMQ0ts4JO2AJTac29MH
+rzn4gkijzX/zV935/XwD1Y5dNa7tr8ahicouLs93WibG5B2dl8enz5OqJCLZgtWY
+R8kzund+aqM1QxxWpZQtSA9HLTPNxEYtVGHduLyNHJd9S/T8az5NKBd/munlbW/E
+HHWNpg23Xjfe4Rqy5abWeeTfH9P2aO0wo56N7YtVPRI/Dz+QT7V0ArAfQK4y2Y6l
+O3Tg8x5OTGP9N0u4L3BBZE/uay8zQC+Kxl/jauSgYlOZ3ozKtTTKwCCeFnMT4cnc
+IrMCAwEAAaOByzCByDAdBgNVHQ4EFgQUvslrrJS1H+SNxpCdwNcSFl5QRxYwHwYD
+VR0jBBgwFoAUvslrrJS1H+SNxpCdwNcSFl5QRxYwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAOAFZccjGI
-vZUT92SWHGPCHBFgBNLDX3yi19EzbVFrd2F4qHAuUJddweib3cZhp9PhLIMHhVzJ
-1x4iwl92gxnX3kpegg9DgEUC19A9ysPA/ATI9oky10fGvx/GvXHhBwCQEuxhYxts
-6Vgs/Eypj1jhsW6lyk2+fjIWdF/9NeQ3qhrFMyEgij4cr9rzx6Ii05NsXqwKZdXb
-5IsRXsrrj9rEXS96mOg80YkVBQKG7+sXGIEoytZYh73U4lBBktl/sfdTj/PM8x4d
-5FrCYBsXQnhT6S1du/khUP+HU75f5tSPJX/Xg9f4TcF8ekALEfHZxuuXRQDWa4Qc
-T/yOH1u1PWAM
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQALtLqbAhVy
+WEgJyGbEfG4HXr/hpZdC/V+PXzXnYHhzqBj4wpGx1BvLERfg1TBpkLia+aGVR8mF
+3W25VqL7Fi8JjMBmba978kJnD6O56Gk2iZIeyFQR/jk/cYXZZTAMKrGmuN+wQHtW
+mD3DZna+hezybDDezrOEcHSDKyBCWvCbMZiBFnHPz2ZXNt0TzfB0DC+hJnEeUM5X
+yYVxRwiyprQqL2tfH4AJPbFeq6rnCIbHdS02sfMs4ZGMHGsK/oA4NGH4ou4+muQ4
+ld09IR5hXFOnMLgrEHLYXVSjR5xsadZCplbysz6YIsKway7zOrhxUlO1MqWkODX8
+8u2a41JXdd8H
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem b/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem
index 11dddad..f80c4c8 100644
--- a/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem
+++ b/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-non-self-signed-root.py]
+[Created by: generate-non-self-signed-root.py]
-Certificate chain with 1 intermediary and a trusted root. The trusted root
+Certificate chain with 1 intermediate and a trusted root. The trusted root
is NOT self signed, however its issuer is not included in the chain or root
store. Verification is expected to succeed since the root is trusted.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c2:27:87:8d:77:16:37:79:6a:b5:5d:e7:ee:9f:
- a4:5e:f6:f3:9e:a0:f9:9c:05:1a:5f:67:d8:72:c7:
- 89:73:a5:21:d5:d6:df:39:0d:f7:e7:cb:1e:82:ec:
- ae:15:ee:5a:bf:57:12:29:b2:44:8b:40:4b:d6:ea:
- a5:34:05:34:5f:37:2e:32:c0:ed:6a:0c:21:ac:c5:
- 16:80:61:96:e1:82:e3:15:62:34:23:0a:de:ca:ee:
- 43:f8:3a:e7:42:5f:3a:79:f4:bc:cf:e7:da:c4:3a:
- d6:d0:5f:bf:13:58:e7:69:0f:bc:38:7c:05:82:a9:
- 92:b8:eb:f5:fb:2a:53:ef:5d:12:5e:dc:55:12:b1:
- 66:67:3f:7c:00:89:b9:50:ea:9c:7f:90:48:02:40:
- b3:f5:98:0d:73:ca:d8:f7:3d:0b:48:fe:99:12:90:
- 92:37:93:34:5b:75:60:1c:16:c2:98:ec:2f:9a:f8:
- e3:1f:8d:56:ea:c6:35:14:67:66:21:e5:83:69:59:
- ce:c3:a6:f5:1e:94:e8:14:ce:73:83:52:af:ed:df:
- 63:58:d2:45:07:87:18:ec:7c:11:85:c8:22:b8:ff:
- b2:6d:05:2c:70:86:d1:5b:f9:8a:94:22:73:58:f1:
- 9e:b2:4f:ea:50:7e:7c:db:2e:6a:ab:bc:b5:73:b5:
- 49:3f
+ 00:a5:fd:12:f2:87:40:5c:07:a7:7c:a8:7a:2c:2c:
+ 9e:de:bc:e5:8e:c6:55:90:ce:5d:a9:e6:c8:7d:5a:
+ 9f:b1:f7:32:b4:90:9c:80:12:a2:43:fa:71:95:54:
+ 76:45:b3:28:cc:93:05:f1:f4:e9:5d:1d:4e:5d:1a:
+ a1:ad:a5:4b:4f:50:7a:c2:cd:63:2c:de:5d:54:74:
+ 09:8b:d2:5b:1f:0e:49:b4:ce:cc:24:f4:9d:f7:ca:
+ 65:6e:58:02:c0:8d:06:35:81:01:b1:2d:37:07:1e:
+ 9b:07:fa:a3:12:6b:32:bb:98:f1:41:03:2f:17:b5:
+ 5a:d3:bd:b0:2a:0c:be:2f:34:29:ba:87:44:a5:d9:
+ b7:1c:c0:ff:c5:dd:bf:21:78:38:71:ce:7a:54:d1:
+ 97:d9:aa:86:84:eb:2c:17:bf:61:1b:4b:10:54:a2:
+ a1:a6:ec:01:04:f8:f3:c8:6c:2f:30:15:e0:da:94:
+ 49:98:01:de:e6:c4:04:57:bb:f5:6d:09:53:e1:ff:
+ 76:94:cc:ba:2c:74:70:b7:f9:d4:10:35:8a:b0:8c:
+ 4c:5b:5f:5c:db:e3:a5:b6:c9:d5:b4:13:7c:17:77:
+ fd:ac:0d:65:fb:0a:a4:d4:0e:a5:2e:8f:ef:0d:5c:
+ c1:9b:00:c1:dd:0d:4f:c3:7e:3b:3b:a7:4a:d2:99:
+ f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 0B:2F:1A:F2:F7:59:E8:BE:B9:20:D5:71:5F:D3:A1:CA:FB:88:4B:65
+ 8E:F7:4C:4C:A6:3A:4A:DA:FB:BE:DE:D3:24:D2:56:B5:3D:55:43:18
X509v3 Authority Key Identifier:
- keyid:A5:03:4B:C2:60:A5:9F:86:00:2A:8E:36:33:89:B2:7B:17:24:C2:BC
+ keyid:25:1D:DB:44:41:CD:DE:76:AA:96:3B:9B:5B:17:24:39:86:B7:DD:E0
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 12:45:9a:a3:e1:5b:0d:8f:1c:b7:39:60:63:7a:e0:fd:34:46:
- 7e:44:1b:32:44:c7:7f:03:fb:94:68:a2:6b:a1:7f:06:c2:60:
- 8d:be:65:fc:a3:45:f9:15:2c:17:16:25:98:03:a2:85:88:b6:
- 4b:4d:86:26:ae:8a:0b:43:46:cd:cc:a3:28:5f:44:3c:92:8a:
- ae:f3:de:02:93:1b:b7:a3:8e:6e:79:d5:a0:09:d2:c4:65:ff:
- 1b:f5:80:16:66:20:c7:1d:0c:af:32:ff:ec:f6:a4:0f:53:79:
- 41:0c:b6:57:9f:b9:1b:81:9c:56:29:3e:62:f6:f5:75:9f:97:
- ff:0a:9f:5c:c8:58:f5:d0:e7:ad:c1:4b:ba:62:c1:a3:c6:59:
- 9a:01:11:46:40:c1:54:b6:23:ae:33:58:f9:05:6b:f2:32:0d:
- 09:2e:5f:ff:74:c5:7d:ce:c9:96:a5:8d:ba:4c:d7:49:3c:8b:
- 13:73:36:05:12:56:bf:f8:ad:b5:7a:0a:82:ca:bc:b4:00:d2:
- 9f:39:88:2b:b8:d0:c0:49:8a:f6:3a:e3:3e:3e:fe:b4:4e:20:
- 1e:60:e8:cb:4d:18:80:94:26:47:bf:be:49:8a:2d:e2:41:4a:
- cd:c3:7e:23:82:90:ba:43:a6:8b:7e:b3:57:f8:ec:59:3c:97:
- 38:52:a0:0d
+ 6e:29:ba:73:d2:ce:13:e8:a8:61:cc:1c:c9:63:c3:e5:62:72:
+ 3d:bd:19:d9:10:ce:04:5c:b4:1a:0c:52:c6:57:4d:d0:a7:2d:
+ a7:11:90:78:72:8c:1c:56:4f:e4:be:4e:de:6e:f3:e1:eb:7e:
+ 9c:05:86:e4:f2:22:69:7b:7d:43:df:4e:a9:11:4d:8a:68:33:
+ a3:7d:9b:b1:04:9c:c2:bf:d4:9f:78:d9:8f:a5:51:9a:20:8a:
+ 79:c8:40:49:e4:30:d1:b9:9b:09:5e:3d:5e:93:f5:84:e5:2b:
+ 9f:1e:56:1c:2d:ef:09:34:8c:db:a0:b6:f0:91:88:91:6b:1f:
+ 4e:86:11:b6:62:33:63:8b:03:b2:40:d2:b8:28:33:e1:33:5d:
+ ae:e4:0c:08:4b:ab:05:08:6c:4a:b2:b7:cd:cd:28:7f:4a:5c:
+ 4c:9d:fa:93:c7:00:fa:47:4e:00:ca:2d:2b:c9:ed:da:e8:33:
+ 23:b6:98:f1:e5:6f:1b:cc:8b:e2:27:b2:1d:46:53:39:29:45:
+ 46:1a:50:94:c0:e7:5e:a4:ef:a3:ee:13:7a:81:89:e2:4e:f9:
+ 5e:1c:e3:ee:fe:d9:6d:7b:85:c6:99:ed:b0:30:d4:ef:16:65:
+ 1f:37:d9:f9:c1:54:c2:d9:18:3f:e9:89:a3:28:6a:ad:fc:a2:
+ 01:b8:82:d3
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ4eN
-dxY3eWq1Xefun6Re9vOeoPmcBRpfZ9hyx4lzpSHV1t85Dffnyx6C7K4V7lq/VxIp
-skSLQEvW6qU0BTRfNy4ywO1qDCGsxRaAYZbhguMVYjQjCt7K7kP4OudCXzp59LzP
-59rEOtbQX78TWOdpD7w4fAWCqZK46/X7KlPvXRJe3FUSsWZnP3wAiblQ6px/kEgC
-QLP1mA1zytj3PQtI/pkSkJI3kzRbdWAcFsKY7C+a+OMfjVbqxjUUZ2Yh5YNpWc7D
-pvUelOgUznODUq/t32NY0kUHhxjsfBGFyCK4/7JtBSxwhtFb+YqUInNY8Z6yT+pQ
-fnzbLmqrvLVztUk/AgMBAAGjgekwgeYwHQYDVR0OBBYEFAsvGvL3Wei+uSDVcV/T
-ocr7iEtlMB8GA1UdIwQYMBaAFKUDS8JgpZ+GACqONjOJsnsXJMK8MD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAEkWao+FbDY8ctzlgY3rg
-/TRGfkQbMkTHfwP7lGiia6F/BsJgjb5l/KNF+RUsFxYlmAOihYi2S02GJq6KC0NG
-zcyjKF9EPJKKrvPeApMbt6OObnnVoAnSxGX/G/WAFmYgxx0MrzL/7PakD1N5QQy2
-V5+5G4GcVik+Yvb1dZ+X/wqfXMhY9dDnrcFLumLBo8ZZmgERRkDBVLYjrjNY+QVr
-8jINCS5f/3TFfc7JlqWNukzXSTyLE3M2BRJWv/ittXoKgsq8tADSnzmIK7jQwEmK
-9jrjPj7+tE4gHmDoy00YgJQmR7++SYot4kFKzcN+I4KQukOmi36zV/jsWTyXOFKg
-DQ==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-----END CERTIFICATE-----
Certificate:
@@ -103,35 +103,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b0:65:a4:4b:a6:56:90:82:42:cf:e8:65:86:d1:
- 96:7f:13:8d:b9:46:5a:16:ce:c2:fa:0d:52:ae:93:
- 62:dc:72:05:a2:31:b7:29:88:77:31:c3:2e:3f:4d:
- 17:16:08:3a:96:d2:49:1b:bf:0f:a0:56:ac:d2:5a:
- b8:ff:e3:46:f1:56:83:c3:72:32:8a:7d:f6:55:a5:
- 05:8a:68:ca:2e:9b:2a:80:63:4d:fd:46:f2:9f:c9:
- 95:43:06:79:c4:88:78:b3:73:fb:05:0c:4f:57:75:
- 9c:ef:eb:9f:b3:5e:65:b6:b3:b1:b7:8d:1c:c4:d9:
- 03:76:72:4f:b8:4f:dc:36:19:4c:62:d8:0c:e4:c1:
- 9b:9f:0c:3e:e2:54:69:f5:a6:53:a1:16:88:be:ee:
- a8:3e:20:28:3d:a9:3c:12:41:cc:91:ca:b7:fc:d7:
- 15:d3:1c:63:9e:7b:1d:c4:b4:08:65:2e:bc:b5:61:
- b8:84:de:3b:69:05:9c:52:6e:60:d1:79:17:36:69:
- 06:21:ed:43:07:bf:21:28:0a:6b:48:79:53:21:da:
- 02:07:79:b6:30:4c:f2:6f:9f:30:55:a2:20:ae:cf:
- 8c:ac:c6:b0:30:b0:01:80:83:ed:b0:5a:9b:92:35:
- d9:7d:51:c5:f5:76:1e:c5:53:c1:33:71:41:35:40:
- 55:d7
+ 00:dd:9f:7d:91:ef:30:35:17:fe:58:20:b0:99:23:
+ d3:ce:e4:f6:b2:05:82:69:5b:4c:e4:94:40:41:ad:
+ d6:6b:b3:44:08:50:be:9f:b3:f4:26:d6:10:50:52:
+ e3:a4:71:bd:3d:ed:f0:a8:30:da:21:06:aa:d9:ae:
+ 62:51:ed:06:c1:6e:f5:e2:23:a8:62:db:04:b7:0f:
+ 69:84:39:1f:3d:46:28:ae:a0:56:fe:aa:9b:68:0e:
+ 30:65:6a:38:f8:a6:66:12:78:99:cc:8e:c9:80:15:
+ ab:5a:66:75:71:42:4d:8c:32:2c:15:a7:6d:c9:51:
+ c8:d8:88:28:56:03:e4:ab:98:3b:52:d9:01:f0:4d:
+ 18:71:cf:d3:82:cb:62:af:6c:12:8a:a2:4b:44:c7:
+ a7:61:fd:d6:34:89:c6:f0:6e:2c:77:fd:cc:93:a9:
+ 90:5b:85:e7:46:1c:04:41:3d:df:02:79:c3:e6:98:
+ 66:28:b0:39:9b:59:ce:5e:8c:d1:63:b1:28:a3:05:
+ a3:79:93:3a:dd:92:8b:d2:07:15:96:61:27:98:ae:
+ 53:78:3f:da:79:09:01:e7:dc:03:c4:05:8f:e5:52:
+ b3:bc:d8:8f:6d:0a:89:21:a6:cf:b5:db:1c:65:67:
+ 4c:5f:5e:33:24:d7:3c:3e:61:ce:9a:4e:6e:e7:a5:
+ 30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- A5:03:4B:C2:60:A5:9F:86:00:2A:8E:36:33:89:B2:7B:17:24:C2:BC
+ 25:1D:DB:44:41:CD:DE:76:AA:96:3B:9B:5B:17:24:39:86:B7:DD:E0
X509v3 Authority Key Identifier:
- keyid:D4:83:FC:D5:EF:E0:C4:8E:32:6D:A2:30:65:12:B4:CD:3A:B2:95:88
+ keyid:63:A2:D5:4E:83:BA:38:5F:50:C5:93:E5:5C:93:9D:DE:55:08:73:A9
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -146,41 +146,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 67:ed:d6:55:16:b2:0d:af:79:6e:53:48:70:4c:93:be:5e:ed:
- 50:ea:d7:92:e4:7c:6c:78:05:0c:00:90:15:de:10:18:e5:cc:
- 50:24:23:e6:3e:5f:b0:f4:6f:f9:74:44:db:38:d1:45:c5:84:
- 59:58:cc:b6:f9:e9:1f:ed:41:e8:b9:aa:4b:d8:6e:88:76:d9:
- 2f:44:bf:5d:4f:6e:72:8f:b8:35:d3:e6:a3:a2:ef:3d:e6:f3:
- be:90:73:a8:80:ed:72:bb:ac:20:96:38:c6:3f:d1:fe:64:3e:
- 1a:ce:21:65:cd:1f:28:54:4a:fb:44:dc:43:cc:b4:61:dd:58:
- 83:1b:08:0c:31:f6:bc:bf:02:99:45:16:88:84:68:91:13:aa:
- af:f6:6d:4e:8d:dd:26:1d:3a:35:ab:75:7e:f7:64:62:8c:b7:
- 34:f9:5b:73:9b:e9:40:12:1c:f2:32:b9:e0:8c:86:fc:f2:b0:
- 33:6d:56:f2:a0:f7:9c:ea:d7:45:41:8d:de:49:26:90:45:32:
- 35:cf:e2:ce:43:b0:af:28:35:6a:0f:86:87:2b:57:eb:88:92:
- 89:7a:9d:b5:f3:3c:46:11:56:2e:fc:73:32:56:a9:4b:c1:87:
- f7:f8:46:d5:5d:ad:b2:e7:a2:88:5d:7d:b5:68:b4:ea:a7:1f:
- 35:1d:f9:a6
+ c5:e9:f1:a5:8e:03:ae:78:a2:51:87:0b:ee:26:02:97:5e:31:
+ 41:72:f2:7c:00:46:1b:45:51:02:03:4e:16:d0:69:61:e9:7e:
+ aa:fc:5f:5e:6b:63:99:98:c0:cf:36:96:ae:82:56:70:13:33:
+ 8d:f2:00:7a:b3:50:c7:15:ad:56:1b:ab:1a:6f:27:a4:e1:65:
+ da:22:4c:11:32:02:23:30:f8:7c:63:4d:c6:3b:5f:5b:55:37:
+ 82:29:0d:74:ff:49:4c:10:25:60:4b:3f:e8:06:1f:47:67:38:
+ 26:df:c4:92:d8:c4:9a:c8:bd:e6:1f:b9:52:2e:70:f7:21:48:
+ 43:6b:f5:40:07:c7:fd:15:51:80:54:c6:c8:74:14:a9:56:bd:
+ ad:b4:d4:da:a3:1d:b4:c4:91:73:0a:3d:1e:71:e0:97:e2:d4:
+ 79:8d:00:42:a7:8a:28:a2:2c:49:94:3f:23:e6:66:75:42:88:
+ 66:e5:98:14:b0:8d:76:d3:80:32:60:e9:05:18:65:ff:c8:4d:
+ 3b:ea:b3:d1:77:1b:7f:d1:99:c9:b5:58:72:ea:49:d4:31:68:
+ 28:2d:04:3c:49:99:f0:3a:74:11:91:0e:82:46:84:c7:54:7c:
+ 0b:9b:1a:64:ea:e3:9c:d4:c2:b9:90:e8:0e:2c:82:8b:2a:e1:
+ d1:03:32:77
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGWkS6ZW
-kIJCz+hlhtGWfxONuUZaFs7C+g1SrpNi3HIFojG3KYh3McMuP00XFgg6ltJJG78P
-oFas0lq4/+NG8VaDw3Iyin32VaUFimjKLpsqgGNN/Ubyn8mVQwZ5xIh4s3P7BQxP
-V3Wc7+ufs15ltrOxt40cxNkDdnJPuE/cNhlMYtgM5MGbnww+4lRp9aZToRaIvu6o
-PiAoPak8EkHMkcq3/NcV0xxjnnsdxLQIZS68tWG4hN47aQWcUm5g0XkXNmkGIe1D
-B78hKAprSHlTIdoCB3m2MEzyb58wVaIgrs+MrMawMLABgIPtsFqbkjXZfVHF9XYe
-xVPBM3FBNUBV1wIDAQABo4HLMIHIMB0GA1UdDgQWBBSlA0vCYKWfhgAqjjYzibJ7
-FyTCvDAfBgNVHSMEGDAWgBTUg/zV7+DEjjJtojBlErTNOrKViDA3BggrBgEFBQcB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-AGft1lUWsg2veW5TSHBMk75e7VDq15LkfGx4BQwAkBXeEBjlzFAkI+Y+X7D0b/l0
-RNs40UXFhFlYzLb56R/tQei5qkvYboh22S9Ev11PbnKPuDXT5qOi7z3m876Qc6iA
-7XK7rCCWOMY/0f5kPhrOIWXNHyhUSvtE3EPMtGHdWIMbCAwx9ry/AplFFoiEaJET
-qq/2bU6N3SYdOjWrdX73ZGKMtzT5W3Ob6UASHPIyueCMhvzysDNtVvKg95zq10VB
-jd5JJpBFMjXP4s5DsK8oNWoPhocrV+uIkol6nbXzPEYRVi78czJWqUvBh/f4RtVd
-rbLnoohdfbVotOqnHzUd+aY=
+AMXp8aWOA654olGHC+4mApdeMUFy8nwARhtFUQIDThbQaWHpfqr8X15rY5mYwM82
+lq6CVnATM43yAHqzUMcVrVYbqxpvJ6ThZdoiTBEyAiMw+HxjTcY7X1tVN4IpDXT/
+SUwQJWBLP+gGH0dnOCbfxJLYxJrIveYfuVIucPchSENr9UAHx/0VUYBUxsh0FKlW
+va201NqjHbTEkXMKPR5x4Jfi1HmNAEKniiiiLEmUPyPmZnVCiGblmBSwjXbTgDJg
+6QUYZf/ITTvqs9F3G3/Rmcm1WHLqSdQxaCgtBDxJmfA6dBGRDoJGhMdUfAubGmTq
+45zUwrmQ6A4sgosq4dEDMnc=
-----END CERTIFICATE-----
Certificate:
@@ -197,30 +197,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:37:9c:ac:42:96:1c:fb:44:86:df:16:85:d2:
- de:49:73:74:b8:5b:3e:8c:34:4b:42:57:7e:7a:9a:
- fd:cf:7f:03:c7:39:22:02:3f:44:1b:62:4b:4a:1b:
- 9b:d8:8e:7b:a5:b5:92:39:a1:03:bc:3c:1a:1f:5f:
- 36:54:9d:b4:6d:98:c2:24:a9:fd:f7:6e:8e:41:18:
- e1:9b:ae:ef:61:98:5f:91:53:f0:8a:8e:d4:18:cf:
- 4f:dd:ff:75:01:16:10:f1:76:10:28:ba:70:96:8b:
- b7:ac:df:17:68:61:03:56:77:e5:bd:04:58:d8:44:
- d6:65:21:97:28:46:5d:a3:62:6d:3d:a1:03:6d:da:
- f7:46:f5:76:5c:1a:cd:19:b4:25:cd:17:d7:0e:ac:
- 6a:3c:d1:35:a0:20:cc:5e:62:7b:e1:11:d6:92:09:
- 34:3e:1d:d7:d5:27:b9:3b:5b:42:1e:11:f4:1a:2f:
- de:93:81:2f:6b:d1:9f:40:9f:d7:8e:7c:9b:37:7b:
- d8:3f:ba:e3:00:d7:f7:3c:20:0e:81:b4:df:cc:46:
- 3c:10:0d:04:8a:b5:ef:ba:e7:ec:7e:0b:98:a1:18:
- fb:39:db:2c:76:ae:1b:91:94:22:f4:35:b0:1a:73:
- 4d:7b:eb:c5:b3:80:80:74:90:79:b9:2f:fd:35:39:
- 02:ad
+ 00:d4:fa:c0:4f:fa:75:57:2e:07:a4:26:6d:43:48:
+ a2:47:06:03:dd:a3:f2:10:d1:66:21:4f:fa:28:42:
+ b9:4f:c1:f5:4c:fa:dc:ad:92:30:50:2a:ce:ac:db:
+ 05:cd:c2:19:26:b8:de:46:0e:ec:14:9b:27:92:71:
+ bd:e9:a5:28:55:eb:27:71:dc:ff:d7:2b:ea:ed:f0:
+ 5b:e3:38:bc:35:f8:7b:ec:5d:ba:67:8d:d8:8a:95:
+ bb:a2:01:32:3e:a6:d2:d3:a2:c7:70:f5:7c:fb:53:
+ 6f:b8:11:48:af:0c:a0:60:87:98:43:87:ff:d2:c2:
+ 18:b5:50:67:18:ee:06:8f:80:ff:4b:02:c6:c3:01:
+ 34:e2:7e:fa:60:62:23:2c:8a:68:ae:5a:0f:ad:1a:
+ 52:1f:7f:58:ae:9a:50:6e:fb:c7:53:1a:b6:b7:92:
+ 5d:ba:65:53:4c:73:b4:ed:c5:b5:b4:3a:f6:cb:79:
+ b3:87:f9:69:ac:29:e5:e4:bb:54:89:bf:45:bf:0c:
+ b9:83:6c:31:3e:a5:6e:7d:50:f1:68:f8:3d:ca:c2:
+ 3f:9f:5c:61:35:21:bc:6a:a2:77:2c:53:22:71:2e:
+ 96:70:f9:c2:c3:f6:3a:8c:3a:a4:00:f9:55:d4:01:
+ 6e:be:fc:f9:9a:2b:78:7e:3c:25:e9:09:87:47:5e:
+ a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- D4:83:FC:D5:EF:E0:C4:8E:32:6D:A2:30:65:12:B4:CD:3A:B2:95:88
+ 63:A2:D5:4E:83:BA:38:5F:50:C5:93:E5:5C:93:9D:DE:55:08:73:A9
X509v3 Authority Key Identifier:
- keyid:EE:5C:5F:80:3F:59:C4:A6:5B:70:C2:1C:BA:E4:5D:40:F9:E9:60:8D
+ keyid:F9:8A:EA:DF:3D:59:DD:70:5F:B5:B8:D5:24:99:76:02:DC:6E:30:8F
Authority Information Access:
CA Issuers - URI:http://url-for-aia/ShadowRoot.cer
@@ -235,41 +235,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 8c:2a:1f:ee:90:15:b8:41:8b:cc:b4:45:2b:6f:5b:9e:49:f7:
- a1:9f:9e:2a:ce:8a:c3:ae:57:95:62:b5:f2:c9:a4:6a:57:49:
- 39:00:32:c4:23:4c:b8:15:21:4a:8f:0a:83:98:d8:ba:83:dc:
- da:88:4c:7e:60:21:1a:ed:75:6d:5e:5d:83:90:e0:71:23:13:
- 4f:2d:94:c0:fb:91:7f:b6:59:41:d6:b3:3e:42:ef:31:02:23:
- 18:a6:d2:9b:00:c6:8c:5a:3d:2c:cb:5e:dc:53:69:ac:71:b8:
- 68:90:62:5a:ba:2f:1f:20:9d:77:f3:b0:aa:2e:52:61:a5:60:
- 53:5b:5c:ab:c9:56:7e:01:4c:bf:26:ab:13:47:c1:28:72:13:
- a5:d8:b8:4c:65:09:9f:7f:a1:67:93:fc:0d:71:a3:4c:1d:3f:
- 95:9c:4a:28:8d:52:0d:48:fe:34:04:c2:d2:80:61:86:1c:e6:
- 18:cd:bb:62:ca:d2:e6:76:a8:f3:14:e3:41:75:5d:3b:e7:5a:
- 29:6c:6e:2c:bc:53:6f:39:e8:82:ab:73:d1:d5:b9:d3:f8:30:
- 5c:d7:19:d3:49:11:25:7c:01:3a:2a:a6:7f:19:b3:08:bf:0f:
- dc:4f:7b:fa:5b:20:b8:7e:eb:ea:8f:0a:56:c4:16:cd:e1:2b:
- a2:bb:66:f0
+ ce:fc:9e:82:80:f8:42:20:0d:93:e5:35:7d:8b:44:89:7b:dd:
+ a6:2b:dd:69:ee:16:da:2c:98:76:31:ae:7e:b3:c2:30:e5:9d:
+ 6b:be:11:48:70:d8:bd:d6:01:22:93:c7:14:da:0f:46:2f:98:
+ e7:b1:0b:33:10:75:77:3e:3a:e4:ba:ee:10:98:bd:b3:0a:34:
+ f7:85:09:d2:73:d4:7f:61:e1:5d:e4:eb:d6:7b:c6:f3:a9:a0:
+ 4d:15:46:f9:de:c5:31:10:5b:87:c4:58:99:51:64:7e:0b:31:
+ 22:73:ca:54:34:bd:e6:30:44:0a:59:01:ba:1a:7a:e6:83:76:
+ 3c:5e:8b:d4:06:72:b6:a8:62:07:eb:01:97:02:2d:69:95:4a:
+ 2b:77:27:a3:30:e5:22:7d:96:81:c9:ba:90:22:f4:fe:6c:bc:
+ a2:eb:96:81:4c:1a:83:4f:af:9e:21:77:5e:68:87:f3:eb:f8:
+ 10:7d:38:00:9b:83:0c:2d:9f:7f:b8:93:23:c4:f4:b2:77:c7:
+ cf:1d:bb:12:e4:30:f3:bb:5c:ec:82:1c:47:bf:31:93:93:b2:
+ a0:6f:f8:d2:ec:67:7e:95:4e:f5:eb:d4:64:c5:32:2c:0f:b4:
+ 6c:e4:64:ef:b5:a5:07:cf:f8:b2:f1:c9:67:10:e6:1a:0d:a3:
+ 9c:44:65:6e
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDApTaGFk
b3dSb290MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UE
-AwwEUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKY3nKxClhz7
-RIbfFoXS3klzdLhbPow0S0JXfnqa/c9/A8c5IgI/RBtiS0obm9iOe6W1kjmhA7w8
-Gh9fNlSdtG2YwiSp/fdujkEY4Zuu72GYX5FT8IqO1BjPT93/dQEWEPF2ECi6cJaL
-t6zfF2hhA1Z35b0EWNhE1mUhlyhGXaNibT2hA23a90b1dlwazRm0Jc0X1w6sajzR
-NaAgzF5ie+ER1pIJND4d19UnuTtbQh4R9Bov3pOBL2vRn0Cf1458mzd72D+64wDX
-9zwgDoG038xGPBANBIq177rn7H4LmKEY+znbLHauG5GUIvQ1sBpzTXvrxbOAgHSQ
-ebkv/TU5Aq0CAwEAAaOB1zCB1DAdBgNVHQ4EFgQU1IP81e/gxI4ybaIwZRK0zTqy
-lYgwHwYDVR0jBBgwFoAU7lxfgD9ZxKZbcMIcuuRdQPnpYI0wPQYIKwYBBQUHAQEE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-DQEBCwUAA4IBAQCMKh/ukBW4QYvMtEUrb1ueSfehn54qzorDrleVYrXyyaRqV0k5
-ADLEI0y4FSFKjwqDmNi6g9zaiEx+YCEa7XVtXl2DkOBxIxNPLZTA+5F/tllB1rM+
-Qu8xAiMYptKbAMaMWj0sy17cU2mscbhokGJaui8fIJ1387CqLlJhpWBTW1yryVZ+
-AUy/JqsTR8EochOl2LhMZQmff6Fnk/wNcaNMHT+VnEoojVINSP40BMLSgGGGHOYY
-zbtiytLmdqjzFONBdV0751opbG4svFNvOeiCq3PR1bnT+DBc1xnTSRElfAE6KqZ/
-GbMIvw/cT3v6WyC4fuvqjwpWxBbN4Suiu2bw
+DQEBCwUAA4IBAQDO/J6CgPhCIA2T5TV9i0SJe92mK91p7hbaLJh2Ma5+s8Iw5Z1r
+vhFIcNi91gEik8cU2g9GL5jnsQszEHV3Pjrkuu4QmL2zCjT3hQnSc9R/YeFd5OvW
+e8bzqaBNFUb53sUxEFuHxFiZUWR+CzEic8pUNL3mMEQKWQG6Gnrmg3Y8XovUBnK2
+qGIH6wGXAi1plUordyejMOUifZaBybqQIvT+bLyi65aBTBqDT6+eIXdeaIfz6/gQ
+fTgAm4MMLZ9/uJMjxPSyd8fPHbsS5DDzu1zsghxHvzGTk7Kgb/jS7Gd+lU7169Rk
+xTIsD7Rs5GTvtaUHz/iy8clnEOYaDaOcRGVu
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem b/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem
deleted file mode 100644
index 51446ab..0000000
--- a/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem
+++ /dev/null
@@ -1,280 +0,0 @@
-[Created by: generate-target-and-intermediary.py]
-
-Certificate chain with 1 intermediary and a trusted root. Verification is
-expected to succeed.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:dc:50:a0:d0:af:3b:b6:d5:af:48:be:31:08:db:
- 91:81:c5:c8:d7:22:88:d4:74:1e:12:de:7a:79:79:
- 10:71:de:b5:8a:4e:d1:1d:46:6b:46:62:e8:de:f8:
- 01:f5:9d:6b:35:f6:a6:b7:f2:7f:4c:5f:f9:ad:10:
- f6:7e:9c:87:dc:27:e5:3f:19:1c:f0:c5:69:06:51:
- 96:bf:d0:c5:ef:b8:e3:2c:47:6a:8f:44:68:70:ed:
- 18:b9:f1:85:7b:2e:42:bc:44:5d:e3:d3:df:95:93:
- 8c:1d:ad:bc:9e:45:ad:6e:4f:78:68:6e:8f:ee:16:
- a9:6e:9d:50:6b:9c:72:a0:d7:fe:ff:68:4b:1c:df:
- 18:fd:26:fb:65:be:c9:63:30:30:15:7d:f9:83:95:
- c4:5e:2e:e5:d1:f0:ce:9c:5e:4a:6c:ec:6f:26:f6:
- 79:38:bc:15:e2:50:68:f0:46:c2:7f:7d:0a:c2:79:
- 08:b7:ea:41:18:d5:65:29:3e:6d:bb:80:8e:a2:0d:
- c3:c4:8a:e2:dd:3c:19:01:e9:ea:0c:bb:db:6c:c7:
- ed:6d:c5:7e:78:5f:5d:e2:87:d9:fa:90:3a:1d:c3:
- b6:d8:7f:78:77:7b:e8:2c:bb:ed:04:18:72:a7:0f:
- b2:ef:96:65:b4:39:a0:e9:59:b3:64:f4:db:9d:53:
- 42:9f
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 86:F0:37:63:2C:67:7D:F8:D4:71:4D:9B:A3:47:47:BA:F5:F0:0E:90
- X509v3 Authority Key Identifier:
- keyid:42:1A:C3:C4:D6:79:39:E2:20:E5:63:13:EB:41:7B:8C:0E:28:72:8E
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 4e:86:be:e0:4b:d5:15:99:49:09:6c:9a:6d:9a:82:e2:41:3e:
- 99:a5:e3:23:dd:43:d7:22:8d:c6:4f:4c:51:47:cb:32:44:b8:
- 3a:f0:b6:88:0c:fd:08:d1:ea:0d:b0:72:fe:a0:48:6b:5d:a2:
- 9e:f2:2d:12:6a:bf:68:ce:2e:d0:35:5f:da:32:c9:74:4b:29:
- 53:81:69:a1:a1:1a:de:c8:5e:c1:73:21:b6:02:81:d8:57:ef:
- 68:c3:24:f7:05:fa:ae:ed:d7:8a:62:e3:09:bf:fc:d0:41:93:
- e8:12:a5:fc:c3:46:d8:2b:f6:e3:cc:36:a7:39:cd:32:9e:9d:
- e1:79:68:ff:15:b9:10:5f:86:ad:4d:a0:dc:60:2f:1f:36:6f:
- d3:7a:60:81:c5:38:71:d0:fa:28:ae:ba:80:0e:cf:9c:ef:4d:
- 1f:d4:0c:27:0f:55:a8:49:65:c1:d6:af:6d:b1:1d:fb:90:38:
- ad:8b:5e:ba:82:68:60:2a:e4:7a:b8:07:aa:91:37:84:d6:18:
- 38:ba:37:a6:d9:bb:3b:45:da:59:8c:c5:90:11:1d:85:fe:af:
- fa:62:87:84:5d:5a:90:91:c3:6c:53:e1:d3:74:e7:51:19:b6:
- b5:e7:12:1a:73:35:34:16:dd:e4:31:62:58:de:3a:fb:40:80:
- 21:4f:f5:13
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUKDQ
-rzu21a9IvjEI25GBxcjXIojUdB4S3np5eRBx3rWKTtEdRmtGYuje+AH1nWs19qa3
-8n9MX/mtEPZ+nIfcJ+U/GRzwxWkGUZa/0MXvuOMsR2qPRGhw7Ri58YV7LkK8RF3j
-09+Vk4wdrbyeRa1uT3hobo/uFqlunVBrnHKg1/7/aEsc3xj9JvtlvsljMDAVffmD
-lcReLuXR8M6cXkps7G8m9nk4vBXiUGjwRsJ/fQrCeQi36kEY1WUpPm27gI6iDcPE
-iuLdPBkB6eoMu9tsx+1txX54X13ih9n6kDodw7bYf3h3e+gsu+0EGHKnD7LvlmW0
-OaDpWbNk9NudU0KfAgMBAAGjgekwgeYwHQYDVR0OBBYEFIbwN2MsZ3341HFNm6NH
-R7r18A6QMB8GA1UdIwQYMBaAFEIaw8TWeTniIOVjE+tBe4wOKHKOMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAToa+4EvVFZlJCWyabZqC
-4kE+maXjI91D1yKNxk9MUUfLMkS4OvC2iAz9CNHqDbBy/qBIa12invItEmq/aM4u
-0DVf2jLJdEspU4FpoaEa3shewXMhtgKB2FfvaMMk9wX6ru3XimLjCb/80EGT6BKl
-/MNG2Cv248w2pznNMp6d4Xlo/xW5EF+GrU2g3GAvHzZv03pggcU4cdD6KK66gA7P
-nO9NH9QMJw9VqEllwdavbbEd+5A4rYteuoJoYCrkergHqpE3hNYYOLo3ptm7O0Xa
-WYzFkBEdhf6v+mKHhF1akJHDbFPh03TnURm2tecSGnM1NBbd5DFiWN46+0CAIU/1
-Ew==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:a4:16:0d:45:92:8b:7b:8e:42:07:a1:f4:01:dc:
- 31:0e:68:b4:3f:f3:b7:0d:8f:08:f4:f0:bb:2b:45:
- 37:98:b4:3b:6f:61:7c:23:2e:6e:cf:33:a3:d1:09:
- 16:74:3f:ac:4f:59:f1:92:42:35:e6:8a:e9:98:5e:
- 39:a2:0d:45:26:8f:7d:bb:ad:bf:f8:66:a3:b0:eb:
- 7f:eb:79:60:9a:70:03:5d:9f:46:a8:47:64:7d:a9:
- eb:a7:7d:77:60:3a:f5:5f:e8:bc:54:f3:d7:25:5e:
- 5b:62:3a:4a:df:f3:21:df:e4:bc:89:69:26:fa:d7:
- 24:16:f1:06:d0:57:a1:a0:aa:f2:bd:9f:0c:59:50:
- 57:c2:5d:25:24:05:eb:91:58:bb:1a:82:df:eb:03:
- ec:55:ed:d4:46:b5:fe:2e:fa:08:14:d7:76:71:99:
- 2b:34:10:2d:20:21:ed:78:91:f9:05:04:14:42:a0:
- ed:95:46:a3:a2:e6:55:1e:87:0b:1b:57:8e:e4:7c:
- c5:c5:39:83:b1:c6:91:e1:54:8a:6f:6a:9b:a5:80:
- 93:ec:00:81:6f:20:70:6c:31:95:42:76:a3:82:17:
- d8:d2:ff:3a:09:53:be:76:ea:e1:a9:fb:a9:a5:5f:
- 2b:5f:f9:5a:78:97:2e:f9:9d:31:42:2a:f9:1c:26:
- 16:7d
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 42:1A:C3:C4:D6:79:39:E2:20:E5:63:13:EB:41:7B:8C:0E:28:72:8E
- X509v3 Authority Key Identifier:
- keyid:FE:3F:EE:E8:53:09:31:CA:D4:66:C1:C7:FE:E0:74:C3:D7:81:44:5F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- af:11:72:82:33:e5:f9:b1:10:fc:c2:4a:9e:c8:8e:b4:16:51:
- 62:8d:b5:e3:e3:c7:30:32:52:52:55:aa:6b:c4:c2:67:de:71:
- 37:2d:85:68:80:c8:b7:9b:4b:05:6f:97:e1:82:03:f4:b7:07:
- b8:c2:a8:02:7a:60:34:c8:07:9b:7e:c3:02:bd:11:26:51:b4:
- 4d:e2:6c:e4:38:bc:4c:e7:35:91:24:f1:40:6e:69:7f:ac:b4:
- ee:12:8a:1c:41:f6:96:13:93:67:c4:11:18:67:80:e6:41:ef:
- 2b:3e:47:1a:57:b1:66:ac:87:93:ed:6c:fe:a2:c4:5a:47:75:
- d0:1b:01:b6:74:b6:f8:7b:aa:e3:91:c3:45:56:2b:a4:d2:67:
- 94:18:71:e7:ea:41:14:bb:12:4e:56:d8:5a:95:89:bc:e6:89:
- be:9a:03:8c:b8:2b:18:56:7c:41:db:2d:e3:86:b5:de:aa:cb:
- 11:da:91:8f:f2:75:1d:d2:b6:0b:bd:d6:b5:65:a5:96:1a:44:
- fd:66:80:89:bf:a5:a9:c4:fb:3f:2b:cc:f5:e7:a6:e6:bd:5f:
- e3:df:51:76:e3:e8:1c:e5:53:e9:6e:cf:e8:54:5f:f3:7f:ca:
- 3a:b2:b2:07:7d:6c:29:a9:01:17:cf:f9:e8:0a:13:88:13:d3:
- ad:ac:be:ad
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBYNRZKL
-e45CB6H0AdwxDmi0P/O3DY8I9PC7K0U3mLQ7b2F8Iy5uzzOj0QkWdD+sT1nxkkI1
-5orpmF45og1FJo99u62/+GajsOt/63lgmnADXZ9GqEdkfanrp313YDr1X+i8VPPX
-JV5bYjpK3/Mh3+S8iWkm+tckFvEG0FehoKryvZ8MWVBXwl0lJAXrkVi7GoLf6wPs
-Ve3URrX+LvoIFNd2cZkrNBAtICHteJH5BQQUQqDtlUajouZVHocLG1eO5HzFxTmD
-scaR4VSKb2qbpYCT7ACBbyBwbDGVQnajghfY0v86CVO+durhqfuppV8rX/laeJcu
-+Z0xQir5HCYWfQIDAQABo4HLMIHIMB0GA1UdDgQWBBRCGsPE1nk54iDlYxPrQXuM
-DihyjjAfBgNVHSMEGDAWgBT+P+7oUwkxytRmwcf+4HTD14FEXzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AK8RcoIz5fmxEPzCSp7IjrQWUWKNtePjxzAyUlJVqmvEwmfecTcthWiAyLebSwVv
-l+GCA/S3B7jCqAJ6YDTIB5t+wwK9ESZRtE3ibOQ4vEznNZEk8UBuaX+stO4SihxB
-9pYTk2fEERhngOZB7ys+RxpXsWash5PtbP6ixFpHddAbAbZ0tvh7quORw0VWK6TS
-Z5QYcefqQRS7Ek5W2FqVibzmib6aA4y4KxhWfEHbLeOGtd6qyxHakY/ydR3Stgu9
-1rVlpZYaRP1mgIm/panE+z8rzPXnpua9X+PfUXbj6BzlU+luz+hUX/N/yjqysgd9
-bCmpARfP+egKE4gT062svq0=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:ea:28:d6:83:e1:ad:7f:df:9a:70:91:b6:2a:45:
- 28:bb:1a:00:d2:1f:0c:6e:14:10:27:c0:65:c9:90:
- 40:45:83:6c:af:9a:66:ed:cb:59:2f:f7:82:67:74:
- aa:1d:73:ec:f3:98:cb:38:9c:f6:6b:4f:bc:6b:5d:
- f7:15:89:ed:02:f8:ed:17:69:df:a2:8d:ee:f5:d1:
- 84:92:42:b8:9f:fe:77:fd:d5:06:7b:6f:59:8a:2a:
- c7:32:f5:ff:ad:f9:8a:59:e7:93:11:79:fe:f6:2a:
- cb:99:db:a9:d7:05:a8:be:af:db:2e:b1:8a:56:8e:
- f7:ec:b4:b0:a3:a4:96:39:79:69:3c:3b:ce:fe:42:
- 15:a8:56:bb:88:94:42:a5:0b:04:b4:e9:fa:c9:1a:
- 14:7d:c0:82:d5:d8:3a:de:ec:6f:a6:be:5c:43:6d:
- 85:f8:84:57:cd:06:b0:e1:63:a5:ab:05:14:2f:2d:
- fb:04:99:fb:7e:ce:06:cf:3b:29:27:7a:70:1a:6b:
- fb:6a:f3:a6:23:31:dd:93:80:67:b9:09:03:92:e2:
- a9:c4:71:85:1b:a5:f9:1c:ff:86:b0:72:e3:23:58:
- 15:6c:4e:55:7f:89:91:35:0a:b3:41:ba:3c:17:76:
- da:e6:39:6e:58:92:67:9d:06:c5:c8:84:e0:61:49:
- ea:b3
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- FE:3F:EE:E8:53:09:31:CA:D4:66:C1:C7:FE:E0:74:C3:D7:81:44:5F
- X509v3 Authority Key Identifier:
- keyid:FE:3F:EE:E8:53:09:31:CA:D4:66:C1:C7:FE:E0:74:C3:D7:81:44:5F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 9f:ae:51:c1:f5:31:bf:30:6c:e1:b5:38:07:b5:c2:56:38:6b:
- 3c:f3:49:50:93:5f:75:9e:94:15:5c:15:0a:91:87:6a:c1:fa:
- 36:d6:4a:72:6f:cd:8c:9d:77:e7:61:96:14:88:4f:b2:71:d7:
- 81:8f:06:9f:c7:14:49:0c:de:7c:73:ba:00:c8:44:58:ac:0a:
- 4b:27:bb:3d:cb:fd:4d:14:dd:f7:61:b7:a0:f4:00:8a:ff:54:
- 6b:c0:6a:6d:21:43:b8:9b:cb:f9:ad:9d:fe:2a:09:3d:a1:dd:
- de:17:7d:6f:74:44:79:0c:12:4e:d0:68:4f:b2:35:60:ef:95:
- da:a5:25:f8:e4:4c:ea:83:38:c1:26:83:db:13:78:58:1c:50:
- e3:20:93:b0:c8:5e:a0:76:5f:c2:fe:cc:16:3d:f6:2f:33:08:
- fe:61:af:57:cd:c6:ae:8a:d2:7b:98:e8:eb:98:9b:89:ff:47:
- 24:d6:bf:a3:29:f6:e3:7e:e2:08:0b:a6:06:11:36:07:ea:61:
- 5f:58:16:d3:c1:29:b4:c8:39:7c:32:98:17:82:e7:8c:0f:2e:
- 34:bc:a3:78:62:15:29:95:4e:ca:c4:40:8b:29:2e:5c:8c:9b:
- 14:ee:90:68:08:91:ef:64:fe:8f:61:89:cd:6b:44:dd:24:cf:
- 7c:3d:a3:86
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOoo1oPhrX/fmnCRtipF
-KLsaANIfDG4UECfAZcmQQEWDbK+aZu3LWS/3gmd0qh1z7POYyzic9mtPvGtd9xWJ
-7QL47Rdp36KN7vXRhJJCuJ/+d/3VBntvWYoqxzL1/635ilnnkxF5/vYqy5nbqdcF
-qL6v2y6xilaO9+y0sKOkljl5aTw7zv5CFahWu4iUQqULBLTp+skaFH3AgtXYOt7s
-b6a+XENthfiEV80GsOFjpasFFC8t+wSZ+37OBs87KSd6cBpr+2rzpiMx3ZOAZ7kJ
-A5LiqcRxhRul+Rz/hrBy4yNYFWxOVX+JkTUKs0G6PBd22uY5bliSZ50GxciE4GFJ
-6rMCAwEAAaOByzCByDAdBgNVHQ4EFgQU/j/u6FMJMcrUZsHH/uB0w9eBRF8wHwYD
-VR0jBBgwFoAU/j/u6FMJMcrUZsHH/uB0w9eBRF8wNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCfrlHB9TG/
-MGzhtTgHtcJWOGs880lQk191npQVXBUKkYdqwfo21kpyb82MnXfnYZYUiE+ycdeB
-jwafxxRJDN58c7oAyERYrApLJ7s9y/1NFN33Ybeg9ACK/1RrwGptIUO4m8v5rZ3+
-Kgk9od3eF31vdER5DBJO0GhPsjVg75XapSX45EzqgzjBJoPbE3hYHFDjIJOwyF6g
-dl/C/swWPfYvMwj+Ya9XzcauitJ7mOjrmJuJ/0ck1r+jKfbjfuIIC6YGETYH6mFf
-WBbTwSm0yDl8MpgXgueMDy40vKN4YhUplU7KxECLKS5cjJsU7pBoCJHvZP6PYYnN
-a0TdJM98PaOG
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-U1VDQ0VTUw==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/target-and-intermediate.pem b/net/data/verify_certificate_chain_unittest/target-and-intermediate.pem
new file mode 100644
index 0000000..89ff641
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/target-and-intermediate.pem
@@ -0,0 +1,280 @@
+[Created by: generate-target-and-intermediate.py]
+
+Certificate chain with 1 intermediate and a trusted root. Verification is
+expected to succeed.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:99:a4:c0:d4:dd:a9:aa:60:8b:ae:df:d6:20:ae:
+ b9:f2:f2:ae:44:0e:1f:13:9c:cc:bb:03:81:36:91:
+ 75:72:b4:f8:36:61:2b:7d:70:a9:da:e5:35:7e:e5:
+ 39:a6:fa:da:45:37:fd:77:04:af:21:c3:43:c4:15:
+ 9e:07:a1:4e:19:04:66:e7:bf:ae:76:b1:95:8a:9b:
+ b8:79:12:b7:ca:d3:ec:72:16:4b:47:08:89:1f:d5:
+ 5d:cf:e2:a6:1e:c3:c9:28:54:41:f6:68:e4:01:a9:
+ df:4a:f1:ab:d5:45:26:1a:4e:f9:f7:11:1e:c2:43:
+ 52:d9:2e:95:52:35:71:dc:6a:eb:56:ee:81:73:6a:
+ 86:5b:bd:4f:a6:8f:4b:b3:4e:35:06:d5:35:8a:aa:
+ d5:f7:bd:6a:e1:79:6a:61:37:dc:a8:06:d9:5a:31:
+ ea:3b:2e:8c:8f:de:1e:47:02:c7:ca:27:00:b9:49:
+ 7b:29:c4:f4:82:f2:bc:58:52:bb:f2:36:1c:10:4f:
+ a7:93:fa:46:d0:92:80:15:e7:b9:da:1d:70:21:2b:
+ 9c:47:9c:17:5a:26:2d:94:8a:ce:ae:ba:ac:cb:31:
+ 96:a9:e8:9e:51:73:4f:8c:bf:8c:57:d8:c8:61:0e:
+ c0:45:09:e4:56:a0:47:f9:df:97:af:9c:76:63:54:
+ c6:9b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 05:BE:F6:16:F8:E7:6A:1B:E6:6D:6D:5A:A4:AF:01:89:8B:98:88:E3
+ X509v3 Authority Key Identifier:
+ keyid:6E:35:75:BC:3A:85:BC:B6:F7:B8:01:75:BD:9E:A8:36:8D:1E:C7:D9
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ a4:7d:30:26:06:98:4b:33:c7:b7:84:04:cb:1b:1f:29:1c:b4:
+ 44:6e:6f:b2:5e:40:ce:e9:5d:e5:3d:ed:5c:a4:34:67:08:c0:
+ 10:55:f3:c8:90:43:65:d9:fc:b9:64:43:1a:fc:cb:6c:3f:fc:
+ 2a:48:87:60:6b:95:a6:4f:d6:6f:ac:e3:39:19:54:5d:96:6b:
+ 80:15:db:e3:9f:84:90:4d:23:b1:74:f2:f8:d1:4e:8e:6b:05:
+ 2c:28:94:05:03:90:04:98:08:e3:73:34:b6:05:1e:8e:b0:52:
+ 33:cf:41:ff:99:cd:26:70:12:b1:0a:5c:c7:ed:d3:87:be:fa:
+ f1:24:34:42:22:35:a0:e5:7c:ef:18:b8:61:ce:a1:0a:99:7a:
+ 2d:3f:b9:48:36:a2:3c:5e:70:e4:36:32:a2:9d:1d:3a:37:fa:
+ bf:e4:b4:89:0d:48:e7:9d:f5:9f:48:13:ec:6a:8b:e6:b3:3f:
+ 23:f7:94:b1:2d:cf:b4:26:f4:1b:b5:01:3b:92:bb:63:4e:d6:
+ ee:ed:c0:2e:77:53:5b:3e:a5:8c:c6:b9:40:67:bb:cd:67:65:
+ 6b:41:46:7e:90:f9:2a:a7:5f:09:92:37:13:23:19:2d:66:cb:
+ 73:7e:a3:42:dd:da:ed:f6:08:8a:8a:97:ef:4b:f7:5d:22:81:
+ 82:95:87:7c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:d2:ee:b5:26:40:84:3d:98:ee:bc:3e:62:1a:09:
+ 5e:53:b1:72:28:f6:70:c0:a1:08:65:6f:54:24:4c:
+ fc:bf:fe:14:25:fa:5d:a5:17:f1:00:64:b3:33:6f:
+ 09:3a:0f:cc:25:87:f6:20:e4:f4:49:f3:5a:5d:a4:
+ d5:02:e7:db:20:c9:66:b4:cf:44:4d:58:4b:48:13:
+ 7b:83:60:14:28:f7:5a:5b:f8:f5:34:40:81:32:bd:
+ d2:8c:34:4f:d6:5d:5f:65:dd:74:56:7a:07:7a:82:
+ c3:0b:42:d5:cb:09:30:76:41:6e:08:28:ad:0c:27:
+ 51:9c:86:e1:fe:e8:85:68:aa:59:d0:f8:39:c2:59:
+ 6e:95:90:de:c9:f8:df:77:5e:56:3f:d5:9d:f8:09:
+ 29:ed:7c:cc:92:e7:c3:40:27:76:fc:08:4f:ae:98:
+ c9:7c:95:43:05:cc:1f:f5:b2:0b:51:ec:09:cd:22:
+ 3d:7e:e4:5a:b9:4f:86:62:76:d7:c0:42:23:bb:97:
+ e1:b3:ae:af:9d:56:89:00:68:01:b0:cb:11:cc:f4:
+ ea:cd:1e:7d:32:81:d9:93:20:00:22:ed:31:78:3c:
+ 62:de:73:3f:1d:38:17:4e:04:a2:58:45:36:26:95:
+ 93:ab:36:f1:54:01:81:b1:c2:70:f5:06:17:47:40:
+ 0e:fb
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 6E:35:75:BC:3A:85:BC:B6:F7:B8:01:75:BD:9E:A8:36:8D:1E:C7:D9
+ X509v3 Authority Key Identifier:
+ keyid:4F:DE:F3:E5:5E:F5:98:0D:CA:3A:20:2B:E9:C8:B4:5D:D0:1D:86:BF
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 10:e4:01:2e:8b:a4:ea:e0:cc:ac:c2:57:68:b7:97:98:e2:57:
+ d6:ff:e2:70:d9:de:bd:7e:44:59:da:3c:cc:1e:62:5d:a8:77:
+ 70:b5:fc:4c:21:50:b1:5f:4d:d8:dc:18:bf:d7:1e:40:fa:11:
+ 8e:40:e6:b8:38:87:a3:10:ed:97:93:ae:a6:7f:6c:cf:75:43:
+ e1:88:b9:84:b3:f3:73:05:fb:24:de:2b:f1:20:65:3f:70:25:
+ 87:4d:e0:66:73:ca:29:52:60:88:e9:e3:5f:cc:2b:83:1c:b3:
+ 8c:4d:12:7b:35:70:fd:d1:1a:08:85:94:77:39:3c:b0:c5:d7:
+ 7e:a5:71:f3:ca:a7:98:30:69:62:f6:96:d4:f9:30:07:aa:56:
+ da:ba:16:fc:1b:57:24:a0:f1:84:e2:4a:a2:97:a4:a1:82:05:
+ 1a:02:c7:41:2f:98:c8:e5:27:b4:85:98:72:d0:a0:e1:b5:c1:
+ 57:ab:aa:6b:71:79:d0:4d:91:68:18:25:f8:b4:b7:cb:1d:0c:
+ 74:6a:77:66:48:3f:24:b0:92:d9:22:6f:6e:54:b7:f8:8c:21:
+ 57:0e:a9:cc:52:ff:56:2e:42:fa:08:2e:fe:29:3c:f1:86:8b:
+ 74:88:68:82:3f:16:2d:06:12:57:a6:e2:b1:b7:1b:5d:3a:a1:
+ 75:c7:24:d7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:ba:0d:d2:51:af:0c:48:94:37:cf:ea:83:8f:d6:
+ 39:b5:c9:58:fe:59:5b:e5:61:b6:21:98:86:16:a0:
+ 85:e6:cd:c8:21:81:65:4c:65:97:55:72:76:2f:c6:
+ 0d:25:f8:c8:28:9f:20:d1:56:4c:06:99:ff:6d:0f:
+ 24:d3:92:f1:31:25:5a:13:6c:be:4b:19:6a:65:af:
+ 2f:32:be:a9:0f:f8:9b:6d:6f:10:7c:e9:24:61:4d:
+ fe:ba:e9:b5:b4:54:5e:82:f7:02:7a:e2:e2:d7:53:
+ 6a:69:f4:9a:41:27:0f:50:dc:64:a1:47:84:53:3f:
+ f1:38:cd:80:a3:5a:2b:dd:96:81:8a:ea:e3:94:72:
+ f7:aa:f8:2f:cc:a9:d0:9e:36:9f:56:0c:45:ec:dd:
+ 6a:05:52:85:60:99:d7:94:9f:76:7e:1d:8f:3f:50:
+ fb:33:bc:ca:f8:10:2e:db:15:b2:49:57:d8:f4:59:
+ fa:73:3b:03:32:86:a7:f1:46:a1:62:ac:67:10:73:
+ 70:51:07:ff:d2:04:33:d8:7c:e2:a8:ff:8e:53:24:
+ e8:e4:96:da:fb:d1:ea:2f:9c:a9:b5:8f:c5:50:fb:
+ 90:67:b1:8c:5b:8d:f7:5f:af:da:a4:fa:3c:fb:4f:
+ 05:bf:56:4c:dd:d6:6e:43:54:fd:f4:a0:c9:13:93:
+ 55:07
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 4F:DE:F3:E5:5E:F5:98:0D:CA:3A:20:2B:E9:C8:B4:5D:D0:1D:86:BF
+ X509v3 Authority Key Identifier:
+ keyid:4F:DE:F3:E5:5E:F5:98:0D:CA:3A:20:2B:E9:C8:B4:5D:D0:1D:86:BF
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 75:4e:86:e1:25:9e:a8:7b:0e:65:db:bb:ca:49:e3:0c:70:df:
+ 07:bd:1a:83:d8:48:e1:b7:0b:39:ed:da:61:a0:98:1d:de:9b:
+ 5f:66:a6:33:79:43:46:1b:7d:bf:b4:e4:37:8c:96:5e:89:a8:
+ 8f:92:04:0f:c5:e4:0d:81:a3:76:98:c1:b0:b2:70:70:11:f6:
+ 8e:34:3a:82:ae:6b:7d:e9:ff:b4:58:85:20:b0:85:fc:86:89:
+ 40:08:62:e5:0f:34:83:82:90:da:2a:59:e4:53:53:ee:61:ac:
+ 46:51:ab:cb:81:1d:c1:f7:f0:c2:64:55:b9:fd:2a:67:44:3a:
+ 6a:af:f9:c2:55:c8:35:e6:8b:3a:d1:06:82:8f:14:ee:f1:11:
+ 25:db:a2:98:cc:be:bd:63:21:65:77:6e:6a:f8:d1:7e:a1:c6:
+ df:48:0e:74:0d:e3:03:51:ff:f9:98:92:3c:f8:36:75:90:5e:
+ 09:6c:7f:3f:c1:5e:40:03:72:de:ab:ed:6f:bb:fe:f7:9d:14:
+ 92:5c:69:13:ba:cf:7a:d8:4b:f1:29:04:6e:bc:5f:c9:8e:52:
+ b6:db:58:41:bb:8d:32:e7:5b:4b:74:bf:4c:8d:ec:07:0b:7d:
+ 3c:d6:2f:4d:27:11:31:15:6f:38:0d:ba:2a:53:76:2a:47:e6:
+ 32:52:df:ea
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem b/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem
index f008c4e..2cfe408 100644
--- a/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem
+++ b/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-target-has-keycertsign-but-not-ca.py]
+[Created by: generate-target-has-keycertsign-but-not-ca.py]
-Certificate chain with 1 intermediary, a trusted root, and a target
+Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is not a CA, and yet has the keyCertSign bit set. Verification
is expected to fail, since keyCertSign should only be asserted when CA is
true.
@@ -10,7 +10,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -19,80 +19,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:ec:9f:55:56:11:c4:7a:fc:00:75:b9:b4:bb:
- 08:8f:8f:88:ad:df:22:e4:5d:b4:f1:7d:af:a4:62:
- df:64:86:46:34:cb:a4:32:21:b0:53:7c:94:5e:8a:
- e6:6d:56:8b:28:93:23:79:ef:0b:7f:96:5a:19:09:
- 3a:b7:30:77:e3:db:54:a5:c0:f7:df:3c:bd:f5:26:
- 9f:ab:73:f9:c5:02:e8:67:cf:4d:d5:0e:31:4d:ab:
- b7:d5:55:1a:f2:dc:1a:87:45:61:3c:ea:56:19:a3:
- a7:f7:34:82:30:6f:48:54:fd:ce:05:cc:fe:95:2b:
- a3:d8:b5:8f:20:26:60:e9:22:07:2e:e3:54:22:fe:
- e2:2e:fc:33:2b:9d:6d:ed:1f:56:6d:7b:4a:69:15:
- c0:f3:d5:0a:f8:c2:9b:82:b0:91:36:7c:5a:06:6b:
- eb:02:85:58:5c:15:14:c4:c9:72:8c:21:29:29:e7:
- 23:ca:56:07:7e:28:fa:f0:99:69:ad:10:bc:6c:43:
- 31:1c:d1:bc:79:51:dd:92:54:f9:f3:0c:f8:ee:a4:
- 8a:96:1d:17:ef:70:64:71:f4:30:54:b5:77:53:26:
- 11:80:ce:dc:cb:38:98:98:69:20:e1:ae:f7:1b:61:
- 53:32:59:27:8d:e9:84:b8:6f:c1:9f:03:95:ac:9a:
- 8c:35
+ 00:aa:e6:1b:b4:96:49:1d:88:99:c3:be:30:44:ed:
+ 2a:6e:80:18:66:5a:66:26:44:14:8f:1a:1d:69:81:
+ 8b:44:fb:ee:76:a1:c6:6d:e1:c1:ad:50:aa:99:a2:
+ d5:ce:ac:f4:86:04:93:02:d9:33:aa:24:ef:36:ef:
+ 5c:93:9a:69:00:45:95:c3:82:37:67:df:25:3e:ea:
+ dc:d0:fb:08:7f:89:aa:ad:df:a6:b6:c8:09:a3:74:
+ dc:17:12:b4:03:7d:7d:86:7d:57:1e:ff:d2:16:f7:
+ 9f:85:79:6e:5c:01:e3:cf:64:9d:55:e1:77:2c:43:
+ 89:30:d1:eb:d0:2e:68:e6:d1:c1:2a:92:58:c8:e2:
+ 9b:95:be:f6:d0:42:2d:38:fe:c8:17:a3:cf:37:76:
+ af:b1:0e:32:a5:6d:58:c9:de:4b:f4:2f:fa:8c:e4:
+ 9c:c6:1c:88:7c:55:01:4b:48:81:b0:0f:4f:19:f7:
+ fa:12:e7:9e:27:27:85:47:e6:b8:07:d9:59:a3:9a:
+ ac:3f:7d:a6:14:16:c8:8b:8d:70:d7:7b:fa:46:d4:
+ 32:fc:50:c7:83:82:e3:18:69:a5:a4:56:df:24:a3:
+ c5:7d:d5:f3:24:a4:67:22:4c:c8:b6:93:c2:05:fc:
+ 01:1b:ae:9d:a4:76:f4:bb:d6:b6:a9:32:2c:3a:fe:
+ 91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 64:67:70:1F:EA:D4:3D:30:5E:54:D3:BF:DF:83:3D:14:94:C3:DD:58
+ 55:B5:67:E4:CD:8D:51:AD:5E:A2:25:B0:94:40:72:52:F4:17:24:4E
X509v3 Authority Key Identifier:
- keyid:F3:98:98:C6:42:9E:AB:03:53:76:3F:43:FB:C9:9D:E4:0B:FF:BF:B5
+ keyid:71:AE:42:1C:8C:C1:FB:35:F7:C0:9F:63:95:A7:7B:4F:9D:8E:D2:7A
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment, Certificate Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 65:55:d3:04:1b:96:89:b8:44:32:01:15:ee:43:85:c0:c9:ee:
- f9:19:6c:ef:f4:5a:92:22:b2:62:b1:18:38:c5:42:06:e5:c7:
- be:83:9c:96:6b:72:d7:2a:0c:68:40:d6:30:91:4b:4e:e1:d4:
- 13:05:c5:5a:91:c1:11:ce:57:2e:31:87:2a:f3:70:e4:77:3a:
- 60:82:fa:58:56:18:1f:bf:4a:dd:89:48:c6:ab:4c:01:06:d5:
- ec:8d:aa:55:eb:07:0f:bd:bd:2b:67:f6:3f:43:15:c7:a4:77:
- 88:fa:f8:9f:3b:fa:0b:a2:fe:55:7c:f1:0b:49:da:b7:08:24:
- 34:68:db:a8:76:37:60:02:be:32:54:29:b4:b7:69:c4:05:66:
- 60:a4:86:9f:a1:13:d7:c3:f6:ed:a0:97:37:17:35:97:05:c9:
- ce:f9:af:e0:42:c3:e5:32:15:d7:1e:6c:3b:41:93:df:ba:b0:
- aa:60:e8:66:46:55:b3:00:65:e2:1c:70:85:c7:81:21:3f:8e:
- 41:69:19:a0:ac:8b:54:bc:d0:4b:78:db:f8:11:d7:93:eb:a4:
- 48:04:1b:76:96:e2:ae:d5:2b:dd:ea:e4:a5:02:ca:02:86:11:
- 82:cc:3c:70:10:3a:35:81:0e:52:ad:71:11:be:d9:f2:9c:3f:
- 85:53:b8:df
+ 25:e8:87:e7:07:ba:bd:47:c3:dd:5a:3c:29:bc:af:cb:fb:cd:
+ c6:55:e6:9c:7b:cd:0e:8f:1a:0a:e4:cb:06:db:42:44:02:e5:
+ 37:6e:1a:a3:7d:23:96:c6:b2:67:cb:5a:1e:71:a1:e3:4f:15:
+ 80:7f:a1:0d:59:60:b0:6f:c9:ab:0f:ef:20:d3:c2:45:e0:99:
+ aa:7e:e1:b7:31:dc:4b:b2:16:78:c5:06:27:a8:5e:c5:7b:3b:
+ dc:81:81:0d:eb:31:13:d5:4b:23:2e:4e:2c:86:fd:ce:58:96:
+ b5:cc:33:80:5c:7b:8a:ce:74:97:aa:df:fc:7c:1e:42:7d:12:
+ 58:bb:84:0f:2d:30:7c:a9:0c:1e:5c:c4:c6:ce:2b:c0:9d:bb:
+ 7d:c2:51:04:5d:70:c3:63:43:59:57:40:e4:69:52:be:72:79:
+ b4:c5:74:51:30:af:9c:30:8e:33:89:be:69:69:4a:01:03:07:
+ d9:df:8b:0c:69:ff:cc:57:45:7c:c6:23:e5:4a:1f:19:94:19:
+ 25:9d:eb:87:04:51:06:ba:9c:6b:72:da:2b:05:ef:72:21:e9:
+ 95:5e:61:83:6a:7a:b6:30:f8:97:a1:99:dd:12:ea:47:50:ee:
+ 26:02:3b:81:94:a8:19:29:a7:ad:b6:7c:28:10:53:09:53:a4:
+ 61:74:57:ed
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7J9V
-VhHEevwAdbm0uwiPj4it3yLkXbTxfa+kYt9khkY0y6QyIbBTfJReiuZtVosokyN5
-7wt/lloZCTq3MHfj21SlwPffPL31Jp+rc/nFAuhnz03VDjFNq7fVVRry3BqHRWE8
-6lYZo6f3NIIwb0hU/c4FzP6VK6PYtY8gJmDpIgcu41Qi/uIu/DMrnW3tH1Zte0pp
-FcDz1Qr4wpuCsJE2fFoGa+sChVhcFRTEyXKMISkp5yPKVgd+KPrwmWmtELxsQzEc
-0bx5Ud2SVPnzDPjupIqWHRfvcGRx9DBUtXdTJhGAztzLOJiYaSDhrvcbYVMyWSeN
-6YS4b8GfA5Wsmow1AgMBAAGjgekwgeYwHQYDVR0OBBYEFGRncB/q1D0wXlTTv9+D
-PRSUw91YMB8GA1UdIwQYMBaAFPOYmMZCnqsDU3Y/Q/vJneQL/7+1MD8GCCsGAQUF
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5hu0
+lkkdiJnDvjBE7SpugBhmWmYmRBSPGh1pgYtE++52ocZt4cGtUKqZotXOrPSGBJMC
+2TOqJO8271yTmmkARZXDgjdn3yU+6tzQ+wh/iaqt36a2yAmjdNwXErQDfX2GfVce
+/9IW95+FeW5cAePPZJ1V4XcsQ4kw0evQLmjm0cEqkljI4puVvvbQQi04/sgXo883
+dq+xDjKlbVjJ3kv0L/qM5JzGHIh8VQFLSIGwD08Z9/oS554nJ4VH5rgH2Vmjmqw/
+faYUFsiLjXDXe/pG1DL8UMeDguMYaaWkVt8ko8V91fMkpGciTMi2k8IF/AEbrp2k
+dvS71rapMiw6/pGTAgMBAAGjgekwgeYwHQYDVR0OBBYEFFW1Z+TNjVGtXqIlsJRA
+clL0FyROMB8GA1UdIwQYMBaAFHGuQhyMwfs198CfY5Wne0+djtJ6MD8GCCsGAQUF
BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgKkMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAZVXTBBuWibhEMgEV7kOF
-wMnu+Rls7/RakiKyYrEYOMVCBuXHvoOclmty1yoMaEDWMJFLTuHUEwXFWpHBEc5X
-LjGHKvNw5Hc6YIL6WFYYH79K3YlIxqtMAQbV7I2qVesHD729K2f2P0MVx6R3iPr4
-nzv6C6L+VXzxC0natwgkNGjbqHY3YAK+MlQptLdpxAVmYKSGn6ET18P27aCXNxc1
-lwXJzvmv4ELD5TIV1x5sO0GT37qwqmDoZkZVswBl4hxwhceBIT+OQWkZoKyLVLzQ
-S3jb+BHXk+ukSAQbdpbirtUr3erkpQLKAoYRgsw8cBA6NYEOUq1xEb7Z8pw/hVO4
-3w==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-----END CERTIFICATE-----
Certificate:
@@ -104,35 +104,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a8:d0:63:48:13:03:82:fe:27:31:f5:c0:25:67:
- 0e:46:56:3b:d0:db:01:06:88:ae:64:12:2a:b3:8f:
- 79:c1:20:87:75:e7:11:2d:97:09:b4:55:e6:c4:14:
- 7e:61:4e:98:6c:1d:dc:ec:2c:ef:16:40:99:d1:29:
- dd:0d:74:77:c7:f9:2f:5f:bd:55:63:35:3c:a2:36:
- e1:42:12:49:a1:83:0b:7b:53:f1:9d:53:02:97:3e:
- cf:27:50:2e:41:63:3a:6f:c2:b0:2a:b6:f9:bd:bb:
- d8:0a:42:0d:99:e5:5a:ea:c8:26:bc:54:6f:b6:36:
- d2:28:d4:d6:53:b5:f6:0e:8d:dd:e0:46:98:32:61:
- 42:20:ee:44:f0:a1:06:e4:9e:8c:c3:b6:cd:1b:7e:
- ef:3c:68:d6:80:5e:49:b4:66:3f:2a:5c:e1:c3:fd:
- 43:ce:b7:c7:ec:fa:1f:1d:94:e4:21:4e:51:5f:5d:
- 5a:fd:3f:84:a5:15:2a:64:2c:d5:70:4f:24:dd:96:
- 67:43:c6:1d:62:53:ed:2f:ef:64:8c:a9:b2:c3:c7:
- f3:a2:55:08:ed:dc:2a:5f:51:50:05:59:e8:e2:0e:
- cf:8d:06:5b:7b:19:56:b9:3b:dc:75:ce:b0:4e:74:
- 62:d7:31:a4:7b:1f:44:ca:3f:79:8d:5c:b7:41:a6:
- c0:bf
+ 00:c4:8f:d1:37:69:c5:65:2a:c8:df:6e:82:4d:1a:
+ ea:2c:59:9d:43:07:8b:d1:c3:01:3a:1d:7a:9f:81:
+ ad:b8:fb:10:35:ae:84:80:07:69:5b:47:eb:af:1c:
+ 7b:43:21:f3:3c:13:8a:3b:62:c0:20:fa:96:06:9b:
+ 50:04:82:05:c2:7a:e3:53:d1:34:ab:2e:94:a9:6b:
+ 5f:6c:a9:66:0d:df:d0:73:79:f0:bd:ac:9c:99:68:
+ e7:1c:25:6f:c6:68:36:07:99:57:23:17:a8:8e:4e:
+ 8c:b9:41:ef:25:7e:92:3d:08:8a:82:c2:de:fe:a3:
+ cc:05:ed:b5:8b:b8:2f:09:eb:87:29:4d:55:f1:4e:
+ ee:3a:91:54:dc:6f:6a:9e:d8:17:2a:3a:46:00:65:
+ f4:4d:ae:26:35:72:97:06:41:ef:4e:bd:af:83:ec:
+ 9b:e2:96:24:61:2b:88:71:77:a7:e8:cf:2e:3e:79:
+ 5b:a2:33:11:94:aa:e7:65:6b:06:a2:4e:94:c8:d7:
+ 56:0f:cc:12:b9:9c:c1:b5:f6:bf:2a:a0:f8:b1:74:
+ 34:54:0e:cb:f0:87:87:f6:93:3f:f4:5f:10:81:90:
+ 78:51:ae:41:19:6e:c9:89:8c:9d:d9:85:64:18:de:
+ e5:d6:8c:a8:5a:4b:60:b0:44:5f:7a:1e:f4:d1:5b:
+ 94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- F3:98:98:C6:42:9E:AB:03:53:76:3F:43:FB:C9:9D:E4:0B:FF:BF:B5
+ 71:AE:42:1C:8C:C1:FB:35:F7:C0:9F:63:95:A7:7B:4F:9D:8E:D2:7A
X509v3 Authority Key Identifier:
- keyid:97:E9:16:F3:C4:AD:14:F3:56:CD:F3:E6:E5:60:D4:8F:EF:F7:BA:06
+ keyid:F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -147,41 +147,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 05:1f:e8:41:f2:76:1f:cd:2a:92:f9:cc:61:a9:6f:14:40:12:
- 69:19:1c:44:1d:3e:2e:c5:d0:a8:25:e3:bc:62:a3:6c:0f:e8:
- b9:dc:b0:92:cd:7a:ae:1d:4e:de:cc:90:3f:97:98:d4:d4:b0:
- a2:73:f7:b4:83:94:fb:ac:83:d3:39:af:13:64:61:bd:80:8d:
- dc:de:af:50:1a:15:12:c2:99:04:d4:c6:b8:31:12:2c:15:0a:
- 7c:13:ad:c8:be:37:fb:fa:43:ae:70:fd:64:70:a8:fb:77:fd:
- 09:7e:7e:e1:ff:27:e6:91:d8:c4:62:54:ad:cd:04:51:b0:da:
- 09:df:99:ac:91:0b:f8:31:e3:2e:18:64:f4:76:55:dd:d9:b3:
- 90:3a:07:91:e5:89:f7:83:48:15:5d:b3:bb:76:e6:d6:4a:1f:
- 3b:a4:3e:89:36:de:a8:80:09:2c:1f:23:a7:8a:cb:c3:e7:46:
- f3:f3:1e:0f:8b:88:bb:a9:87:9e:a7:64:2e:64:be:48:c1:91:
- d2:ef:c1:82:b9:1a:f4:08:d9:b1:a0:1f:ff:16:af:c4:b2:bc:
- 01:0f:e4:a0:f0:eb:81:aa:37:32:70:61:16:52:01:f6:39:10:
- a3:b0:8c:ec:2c:3f:ac:1b:cd:12:91:44:2f:6a:2e:4f:d4:8d:
- 92:a5:55:1b
+ 7b:29:bd:b8:c7:76:7f:09:90:d3:5d:e7:20:9e:f6:a0:bd:dc:
+ a1:cb:7c:c8:c8:17:d5:80:81:79:6a:88:e5:e8:c8:e3:56:37:
+ 60:3f:9c:2a:14:86:fe:e0:79:2f:d6:ec:67:51:d4:d8:65:9d:
+ ce:3b:59:b6:42:06:7b:c8:2a:79:7f:40:2f:ed:fb:50:d3:78:
+ 9e:99:fe:1d:fe:a1:4f:1d:58:c9:2d:b4:75:72:3f:6a:7a:db:
+ 2e:7b:81:3b:00:3f:e4:95:47:63:42:90:fd:25:ba:db:53:0a:
+ 01:37:28:78:7d:c6:cf:54:5e:2b:94:88:79:bb:4c:f7:06:e3:
+ 7a:be:44:29:c3:2e:17:ea:61:c4:8f:16:f0:b6:e0:60:fe:19:
+ 08:48:fd:a8:bf:95:ef:e5:32:1c:cf:e5:59:6b:04:1d:4c:6d:
+ ea:9b:4d:b4:f9:14:c2:00:a3:32:d6:1b:54:00:5a:17:29:8f:
+ 85:0c:eb:ed:41:70:6f:52:f8:37:92:ed:2b:ae:8c:b8:e4:51:
+ aa:68:62:12:9b:97:62:1a:5b:27:46:b5:5f:8c:0e:c9:93:15:
+ d7:d8:85:99:67:56:ef:31:4a:55:1f:67:7c:09:fc:03:c9:a0:
+ 67:b8:ed:32:d7:c0:0b:bd:b6:47:b9:50:78:f2:0a:ec:1d:bd:
+ d5:e9:06:b3
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNBjSBMD
-gv4nMfXAJWcORlY70NsBBoiuZBIqs495wSCHdecRLZcJtFXmxBR+YU6YbB3c7Czv
-FkCZ0SndDXR3x/kvX71VYzU8ojbhQhJJoYMLe1PxnVMClz7PJ1AuQWM6b8KwKrb5
-vbvYCkINmeVa6sgmvFRvtjbSKNTWU7X2Do3d4EaYMmFCIO5E8KEG5J6Mw7bNG37v
-PGjWgF5JtGY/Klzhw/1DzrfH7PofHZTkIU5RX11a/T+EpRUqZCzVcE8k3ZZnQ8Yd
-YlPtL+9kjKmyw8fzolUI7dwqX1FQBVno4g7PjQZbexlWuTvcdc6wTnRi1zGkex9E
-yj95jVy3QabAvwIDAQABo4HLMIHIMB0GA1UdDgQWBBTzmJjGQp6rA1N2P0P7yZ3k
-C/+/tTAfBgNVHSMEGDAWgBSX6RbzxK0U81bN8+blYNSP7/e6BjA3BggrBgEFBQcB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-AAUf6EHydh/NKpL5zGGpbxRAEmkZHEQdPi7F0Kgl47xio2wP6LncsJLNeq4dTt7M
-kD+XmNTUsKJz97SDlPusg9M5rxNkYb2Ajdzer1AaFRLCmQTUxrgxEiwVCnwTrci+
-N/v6Q65w/WRwqPt3/Ql+fuH/J+aR2MRiVK3NBFGw2gnfmayRC/gx4y4YZPR2Vd3Z
-s5A6B5HlifeDSBVds7t25tZKHzukPok23qiACSwfI6eKy8PnRvPzHg+LiLuph56n
-ZC5kvkjBkdLvwYK5GvQI2bGgH/8Wr8SyvAEP5KDw64GqNzJwYRZSAfY5EKOwjOws
-P6wbzRKRRC9qLk/UjZKlVRs=
+AHspvbjHdn8JkNNd5yCe9qC93KHLfMjIF9WAgXlqiOXoyONWN2A/nCoUhv7geS/W
+7GdR1Nhlnc47WbZCBnvIKnl/QC/t+1DTeJ6Z/h3+oU8dWMkttHVyP2p62y57gTsA
+P+SVR2NCkP0luttTCgE3KHh9xs9UXiuUiHm7TPcG43q+RCnDLhfqYcSPFvC24GD+
+GQhI/ai/le/lMhzP5VlrBB1MbeqbTbT5FMIAozLWG1QAWhcpj4UM6+1BcG9S+DeS
+7SuujLjkUapoYhKbl2IaWydGtV+MDsmTFdfYhZlnVu8xSlUfZ3wJ/APJoGe47TLX
+wAu9tke5UHjyCuwdvdXpBrM=
-----END CERTIFICATE-----
Certificate:
@@ -198,30 +198,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ba:52:6a:89:3e:75:9b:d6:ed:f4:d1:1c:fb:aa:
- 99:8f:5e:89:59:2a:75:5a:54:77:9c:b5:91:d5:2a:
- f8:8a:a3:74:d2:75:39:24:cc:c5:f7:42:83:11:a7:
- 6c:cd:c2:2b:e1:18:84:b6:26:d8:12:fd:e2:a8:6a:
- 4d:4d:8f:a1:25:07:08:d2:73:a0:17:c7:54:11:a5:
- fb:0e:36:cd:e2:24:a8:dc:85:a1:22:a2:7c:c3:20:
- 02:60:ec:40:ba:1e:5b:03:51:68:d7:f2:28:f6:3d:
- 3f:b3:30:34:0e:33:6c:44:c4:31:a9:ee:cf:42:96:
- c2:eb:06:52:92:86:80:b9:0b:99:41:4b:64:aa:b7:
- 55:2b:21:25:92:46:1d:e2:31:3d:0b:54:ad:a9:c7:
- 2a:29:be:5c:bb:ba:99:59:69:70:71:75:bb:9a:a1:
- 7c:fa:36:79:bd:b4:f3:6c:4b:6c:c9:ea:32:03:dd:
- 64:9e:94:82:33:d1:d9:f8:48:04:ae:79:35:5c:a4:
- 43:54:c1:ec:3c:97:bf:3a:40:f6:e6:9d:7b:bf:a1:
- 67:b0:59:de:78:ff:33:94:f2:2b:15:d0:0a:89:0c:
- 2c:ee:9f:dc:f8:48:f0:68:0c:19:59:86:86:41:1c:
- 19:02:89:4f:0c:ea:43:b2:a8:b9:c9:c1:1d:76:c0:
- 3d:19
+ 00:cd:6b:8f:1c:b6:4c:54:b3:0d:f7:e0:b8:5a:a6:
+ d3:cc:0b:63:89:cb:3a:5a:87:3c:39:65:aa:63:32:
+ 79:fe:5c:67:f6:00:8c:32:b6:75:01:2f:7b:45:d3:
+ a4:53:f4:7a:47:7e:2d:ca:5a:d2:22:eb:22:8c:02:
+ e3:c1:91:ad:71:f8:67:43:62:8f:f1:60:17:77:ea:
+ a3:d6:78:64:b2:58:c2:fd:20:e0:a2:06:d5:18:a8:
+ 36:9e:2e:b0:97:20:c7:72:a4:51:0d:d5:f0:f0:1f:
+ b2:05:8e:82:98:9e:b5:67:dd:55:bb:c1:03:e1:9f:
+ 45:73:74:d7:11:aa:5b:de:c1:5d:5e:f2:29:85:29:
+ 03:e3:14:fa:e8:91:f5:29:a3:8c:c0:78:1c:4c:18:
+ 2b:49:2b:20:31:1e:bf:e1:55:7f:ed:76:25:4d:95:
+ a5:40:4c:cc:f4:8e:de:85:d3:88:0a:86:27:95:f4:
+ c8:4b:00:8d:16:b7:33:e9:76:12:aa:85:43:1e:89:
+ bb:ae:16:f2:f1:26:c4:a7:b9:44:89:76:1b:1a:2c:
+ 34:50:4b:e0:68:bc:f1:fb:be:22:14:b0:2b:67:78:
+ 22:f0:71:07:43:21:a3:24:d7:4e:28:a0:7d:04:16:
+ b1:a2:d8:35:2a:2b:2e:13:8e:6b:e9:c9:7f:78:7e:
+ 98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 97:E9:16:F3:C4:AD:14:F3:56:CD:F3:E6:E5:60:D4:8F:EF:F7:BA:06
+ F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
X509v3 Authority Key Identifier:
- keyid:97:E9:16:F3:C4:AD:14:F3:56:CD:F3:E6:E5:60:D4:8F:EF:F7:BA:06
+ keyid:F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -236,41 +236,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- a5:32:dc:be:9a:58:7d:66:69:99:07:13:d9:ec:20:99:72:37:
- c1:8b:4d:e1:8e:79:0b:7f:ed:1c:89:a1:9b:18:66:bd:1b:fe:
- ec:74:f6:aa:7b:57:71:06:07:ea:02:41:6e:83:b4:68:39:15:
- c8:c5:16:d7:4e:10:75:f5:05:b4:f2:c6:e4:bd:b4:64:21:16:
- c8:14:dd:06:88:f7:81:89:76:44:c8:70:99:70:f2:67:e6:4c:
- 72:3e:75:24:d7:2f:83:b2:4e:6b:f8:4d:f0:e7:16:25:02:16:
- c3:fa:8a:9c:c2:75:60:6b:ed:40:1d:b2:14:97:6a:26:a1:72:
- b9:53:f1:95:fb:6e:d9:11:b3:d4:67:ff:ba:0a:06:c3:5b:fb:
- 84:e7:b1:48:07:fb:db:d7:6f:c9:7e:6f:e6:b4:3b:8c:e0:3c:
- 73:fe:80:8e:cd:35:3c:4f:51:f8:ac:fc:b4:d0:0a:5e:b9:d7:
- 95:f2:e6:fb:a8:de:25:ab:20:da:d5:e6:e2:d3:5b:6b:9b:db:
- 2c:77:0e:59:01:7a:29:07:1f:53:72:2b:f3:06:86:1b:04:a0:
- 01:82:aa:59:4f:a5:e6:8b:2a:01:24:8b:77:5b:bb:8d:36:94:
- 4a:02:ab:61:5c:0a:ba:87:ee:53:53:a7:5d:e3:6a:bc:73:9f:
- fe:e9:fc:9f
+ 50:5f:b0:32:ec:41:85:3d:75:ff:8d:05:17:be:20:98:81:da:
+ 48:39:17:20:24:a7:31:cf:63:35:90:29:26:d0:60:29:e1:68:
+ fe:35:fd:6c:61:c0:3a:cd:08:92:9b:cc:ad:73:d4:dd:a5:51:
+ 0e:a9:65:04:7d:16:77:8b:b8:b4:9d:fb:c4:7a:4a:ab:8a:9e:
+ d0:70:47:45:74:a4:57:ab:c2:cd:b3:c5:44:6b:7e:3b:78:8f:
+ 5b:7f:f0:f7:c3:ef:24:a2:40:fe:c6:71:cd:a8:a6:ac:63:22:
+ 57:39:f5:98:c3:91:79:bf:47:6a:0b:c6:b1:61:c6:35:1b:1c:
+ 10:cc:e7:bc:20:83:f6:48:26:4a:80:47:e0:22:fa:04:1f:b0:
+ 06:9c:54:fa:46:45:9b:d5:20:a2:f0:ee:be:b5:a2:83:92:86:
+ 5d:f5:40:f5:32:d0:85:35:eb:af:5d:9b:04:5d:21:b3:35:90:
+ e8:5f:0a:6c:90:85:eb:86:31:e4:89:81:c6:aa:73:4d:1e:3e:
+ af:40:07:f1:38:ae:30:ab:2d:aa:6d:2f:b2:1d:ff:d8:18:2e:
+ f3:d0:74:8e:ff:6d:24:97:30:cb:b6:e5:6f:cb:6b:c2:27:5e:
+ a5:f1:63:c0:d9:0d:c5:08:7f:86:8c:47:c4:9b:cb:e2:d9:da:
+ 17:51:5b:12
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpSaok+dZvW7fTRHPuq
-mY9eiVkqdVpUd5y1kdUq+IqjdNJ1OSTMxfdCgxGnbM3CK+EYhLYm2BL94qhqTU2P
-oSUHCNJzoBfHVBGl+w42zeIkqNyFoSKifMMgAmDsQLoeWwNRaNfyKPY9P7MwNA4z
-bETEManuz0KWwusGUpKGgLkLmUFLZKq3VSshJZJGHeIxPQtUranHKim+XLu6mVlp
-cHF1u5qhfPo2eb2082xLbMnqMgPdZJ6UgjPR2fhIBK55NVykQ1TB7DyXvzpA9uad
-e7+hZ7BZ3nj/M5TyKxXQCokMLO6f3PhI8GgMGVmGhkEcGQKJTwzqQ7KoucnBHXbA
-PRkCAwEAAaOByzCByDAdBgNVHQ4EFgQUl+kW88StFPNWzfPm5WDUj+/3ugYwHwYD
-VR0jBBgwFoAUl+kW88StFPNWzfPm5WDUj+/3ugYwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQClMty+mlh9
-ZmmZBxPZ7CCZcjfBi03hjnkLf+0ciaGbGGa9G/7sdPaqe1dxBgfqAkFug7RoORXI
-xRbXThB19QW08sbkvbRkIRbIFN0GiPeBiXZEyHCZcPJn5kxyPnUk1y+Dsk5r+E3w
-5xYlAhbD+oqcwnVga+1AHbIUl2omoXK5U/GV+27ZEbPUZ/+6CgbDW/uE57FIB/vb
-12/Jfm/mtDuM4Dxz/oCOzTU8T1H4rPy00ApeudeV8ub7qN4lqyDa1ebi01trm9ss
-dw5ZAXopBx9TcivzBoYbBKABgqpZT6XmiyoBJIt3W7uNNpRKAqthXAq6h+5TU6dd
-42q8c5/+6fyf
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBQX7Ay7EGF
+PXX/jQUXviCYgdpIORcgJKcxz2M1kCkm0GAp4Wj+Nf1sYcA6zQiSm8ytc9TdpVEO
+qWUEfRZ3i7i0nfvEekqrip7QcEdFdKRXq8LNs8VEa347eI9bf/D3w+8kokD+xnHN
+qKasYyJXOfWYw5F5v0dqC8axYcY1GxwQzOe8IIP2SCZKgEfgIvoEH7AGnFT6RkWb
+1SCi8O6+taKDkoZd9UD1MtCFNeuvXZsEXSGzNZDoXwpskIXrhjHkiYHGqnNNHj6v
+QAfxOK4wqy2qbS+yHf/YGC7z0HSO/20klzDLtuVvy2vCJ16l8WPA2Q3FCH+GjEfE
+m8vi2doXUVsS
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem b/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
index 34c777c..0628545 100644
--- a/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
+++ b/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-target-has-pathlen-but-not-ca.py]
+[Created by: generate-target-has-pathlen-but-not-ca.py]
-Certificate chain with 1 intermediary, a trusted root, and a target
+Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is not a CA, and yet has a pathlen set. Verification is
expected to fail, since pathlen should only be set for CAs.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,82 +18,82 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:e4:03:84:57:5e:99:af:4e:fe:20:15:48:81:f8:
- 76:01:11:a3:33:b0:2e:ff:3d:ec:69:be:76:8d:9b:
- c6:9b:5d:cb:b1:a6:eb:84:60:8e:99:fd:31:c1:66:
- 9f:bb:3d:bb:16:e0:c8:d8:f5:cd:23:10:8a:c5:96:
- e7:df:ed:96:d9:76:eb:82:23:e2:8c:7d:00:a9:71:
- ff:71:df:2e:14:b4:ab:3e:29:e8:11:c2:44:75:f9:
- 9f:e9:cd:cf:2f:0c:db:7b:47:b2:80:c1:90:45:a8:
- 01:6d:26:88:ff:3b:d8:54:7b:cd:ff:dc:aa:bd:38:
- 49:b0:02:d8:80:e2:79:07:33:5a:74:cd:ce:8e:df:
- 75:33:41:e7:5e:fb:25:c0:45:fb:48:32:78:47:1a:
- 70:03:d6:56:66:32:6e:2d:35:6b:76:8c:a6:33:4c:
- 1d:60:91:10:5f:70:f3:13:ec:b4:03:4f:cf:99:f9:
- 8e:e8:99:85:23:0b:cc:3d:17:5b:ec:df:aa:eb:8a:
- a7:52:67:10:dd:66:c5:b2:95:9f:72:2b:4e:fa:19:
- 31:99:62:d7:60:fd:9d:9e:e0:ca:29:13:ec:e3:c6:
- af:47:e0:84:73:ab:3b:2d:58:f5:d8:d1:0c:ee:f6:
- 23:b1:5c:55:1e:33:40:87:84:f9:d8:8a:ac:ac:46:
- ed:93
+ 00:ca:73:f9:c5:cb:c6:2c:26:07:85:8f:4b:a4:ac:
+ 52:18:84:42:ca:cb:34:59:92:5a:d8:f7:1f:df:51:
+ ed:6a:d5:e2:e1:dc:06:fb:72:0d:f3:e7:9f:38:0d:
+ 46:f4:19:77:31:33:4c:5b:ac:dd:6c:8c:06:68:4c:
+ 48:84:e2:c7:17:28:a9:0b:4e:07:07:b6:7b:cc:a9:
+ ef:6c:ae:22:6e:03:d6:d4:5b:f1:d9:aa:9e:61:54:
+ c7:14:79:cb:d6:c2:8f:da:87:e8:ae:d2:b3:66:4f:
+ d3:4c:56:b8:e0:80:f8:45:b7:11:35:53:ec:d4:49:
+ f8:05:70:f3:5b:56:b2:05:6d:3e:46:f8:be:67:71:
+ 48:a6:65:dd:55:62:a3:23:b0:94:e1:f2:3b:17:54:
+ 40:cc:37:90:d9:78:5a:d8:29:99:3f:02:16:a8:5b:
+ 5e:64:f4:f2:84:ad:25:c6:cf:2c:5b:e7:6c:bf:88:
+ 63:0c:8a:9b:fb:d9:b1:30:5a:21:74:1f:e4:5a:54:
+ 23:3a:a1:02:34:97:2c:a2:af:08:05:f0:db:52:58:
+ 7f:86:80:12:a3:f9:78:c0:ad:d6:8b:12:53:72:55:
+ 24:ca:3e:70:f2:7f:78:8f:b7:a1:32:f1:2c:7f:23:
+ db:7b:ce:79:cf:cc:6d:d8:f7:14:54:5c:e0:db:7d:
+ 60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 3F:B5:B3:28:77:02:A4:B0:9D:4B:DE:37:42:2E:E6:59:0A:D8:38:84
+ 99:D8:C1:91:A6:13:EB:0F:B4:6F:F2:B0:C4:0C:D9:0A:25:8E:53:10
X509v3 Authority Key Identifier:
- keyid:77:62:DF:59:FD:79:52:7B:9A:CF:99:3C:7C:BD:87:CE:41:27:57:F6
+ keyid:5B:9F:DF:D5:C6:FF:4F:39:52:EA:EF:97:5B:C1:ED:E1:CC:44:4E:B6
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
- Digital Signature, Key Encipherment, Certificate Sign
+ Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE, pathlen:1
Signature Algorithm: sha256WithRSAEncryption
- 0f:6a:84:9e:41:23:9d:77:90:68:4b:93:39:8e:74:cc:f5:3f:
- 0a:1c:8f:d9:45:bc:5d:42:d1:23:11:e6:a6:2f:52:58:23:5f:
- ba:ef:a2:3a:c7:3e:bd:24:a3:47:d3:5a:f7:00:37:0d:a4:c8:
- cd:ee:92:73:67:4c:d0:3f:63:08:c4:90:a8:42:5f:0e:cb:1e:
- 96:ae:c7:16:5f:4d:69:e4:3c:8c:a9:47:7e:ad:aa:52:dd:b3:
- 77:d8:f6:bf:f3:e3:c5:46:ec:c3:21:af:52:62:76:e5:99:0a:
- ba:a2:1c:54:62:8f:3f:0b:b8:c1:9e:e3:6e:50:4e:36:17:d0:
- ee:e1:a2:2e:29:c0:1e:a3:94:a3:69:1f:4d:13:50:4c:44:5c:
- 0f:c3:80:94:3f:6f:60:02:98:da:4f:3a:40:e4:ee:01:af:f1:
- b3:7b:4a:2e:3a:57:3b:8e:9c:8a:0c:3e:4c:49:e2:22:09:ef:
- dc:ea:fc:e2:04:20:5c:8e:a5:82:a9:0e:83:b3:ef:cc:09:ff:
- a9:bc:fa:47:0f:61:3f:7f:d6:df:ec:57:b2:da:16:70:42:8e:
- 68:28:f5:4d:cb:fb:85:16:e4:78:3b:5e:8a:96:f0:73:d6:f7:
- b0:ce:4d:18:6a:b9:1b:99:33:01:15:ce:90:c2:13:8e:14:e6:
- 0e:32:84:28
+ 70:43:96:4c:98:6f:28:18:8a:59:39:82:cc:24:47:f8:58:f8:
+ f8:43:04:09:1e:a6:51:59:bc:60:36:ff:a1:41:51:e1:4c:40:
+ 6b:5e:8b:73:3c:c4:37:65:f4:b0:57:01:8f:c6:ba:0c:5b:97:
+ a1:6b:3a:ea:53:79:8f:9a:99:f8:ca:01:a5:15:ac:60:4c:a7:
+ a7:68:07:72:3c:ed:06:70:d8:a4:d0:c0:5f:88:f2:6a:c0:a1:
+ 2b:e7:58:68:23:d3:7e:f0:98:99:7d:3d:91:25:e3:84:4f:ef:
+ 55:a4:ee:f7:1f:dc:f2:af:a8:74:96:6c:26:c4:d8:b6:84:dc:
+ b7:e7:7d:9d:2b:7b:3b:e6:e4:ad:76:e0:aa:ea:a4:26:97:4b:
+ 20:cd:b1:bd:a8:6e:b3:08:47:31:a2:01:7b:b5:6c:72:d0:f0:
+ 12:ac:bd:4f:be:de:23:cb:34:14:d2:11:42:3f:d5:70:76:4c:
+ 99:db:ce:bc:0e:d5:2e:4b:6f:c3:1b:5d:c6:58:89:74:5f:1d:
+ 62:cf:df:1e:4c:13:08:88:cb:66:6f:00:c2:c5:6f:bb:b4:9e:
+ 1f:8a:7d:9d:0b:a6:11:6f:28:bb:5e:46:ab:71:d4:eb:00:8c:
+ 71:6b:32:85:3d:17:ca:d0:15:90:66:7a:b2:96:0c:c1:9d:2e:
+ 53:36:97:5b
-----BEGIN CERTIFICATE-----
MIIDnjCCAoagAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkA4RX
-XpmvTv4gFUiB+HYBEaMzsC7/PexpvnaNm8abXcuxpuuEYI6Z/THBZp+7PbsW4MjY
-9c0jEIrFluff7ZbZduuCI+KMfQCpcf9x3y4UtKs+KegRwkR1+Z/pzc8vDNt7R7KA
-wZBFqAFtJoj/O9hUe83/3Kq9OEmwAtiA4nkHM1p0zc6O33UzQede+yXARftIMnhH
-GnAD1lZmMm4tNWt2jKYzTB1gkRBfcPMT7LQDT8+Z+Y7omYUjC8w9F1vs36rriqdS
-ZxDdZsWylZ9yK076GTGZYtdg/Z2e4MopE+zjxq9H4IRzqzstWPXY0Qzu9iOxXFUe
-M0CHhPnYiqysRu2TAgMBAAGjgfowgfcwHQYDVR0OBBYEFD+1syh3AqSwnUveN0Iu
-5lkK2DiEMB8GA1UdIwQYMBaAFHdi31n9eVJ7ms+ZPHy9h85BJ1f2MD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgKkMB0GA1UdJQQWMBQGCCsGAQUF
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAgEBMA0GCSqGSIb3DQEBCwUAA4IB
-AQAPaoSeQSOdd5BoS5M5jnTM9T8KHI/ZRbxdQtEjEeamL1JYI1+676I6xz69JKNH
-01r3ADcNpMjN7pJzZ0zQP2MIxJCoQl8Oyx6WrscWX01p5DyMqUd+rapS3bN32Pa/
-8+PFRuzDIa9SYnblmQq6ohxUYo8/C7jBnuNuUE42F9Du4aIuKcAeo5SjaR9NE1BM
-RFwPw4CUP29gApjaTzpA5O4Br/Gze0ouOlc7jpyKDD5MSeIiCe/c6vziBCBcjqWC
-qQ6Ds+/MCf+pvPpHD2E/f9bf7Fey2hZwQo5oKPVNy/uFFuR4O16KlvBz1vewzk0Y
-arkbmTMBFc6QwhOOFOYOMoQo
+AQBwQ5ZMmG8oGIpZOYLMJEf4WPj4QwQJHqZRWbxgNv+hQVHhTEBrXotzPMQ3ZfSw
+VwGPxroMW5ehazrqU3mPmpn4ygGlFaxgTKenaAdyPO0GcNik0MBfiPJqwKEr51ho
+I9N+8JiZfT2RJeOET+9VpO73H9zyr6h0lmwmxNi2hNy3532dK3s75uStduCq6qQm
+l0sgzbG9qG6zCEcxogF7tWxy0PASrL1Pvt4jyzQU0hFCP9VwdkyZ2868DtUuS2/D
+G13GWIl0Xx1iz98eTBMIiMtmbwDCxW+7tJ4fin2dC6YRbyi7XkarcdTrAIxxazKF
+PRfK0BWQZnqylgzBnS5TNpdb
-----END CERTIFICATE-----
Certificate:
@@ -105,35 +105,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cd:be:5e:d6:3b:af:1c:51:0b:b8:31:41:16:86:
- a1:04:5b:d4:c3:d1:e8:16:12:b0:7a:f8:d4:b6:61:
- 9b:5a:51:bb:7d:a5:e6:cf:70:48:1d:4e:21:74:de:
- f8:de:c7:8d:b2:e1:b5:a0:b9:4a:7c:76:b1:24:e6:
- 6d:7b:17:79:28:99:85:44:d5:9c:c7:b3:7c:64:fd:
- 3a:97:76:94:88:aa:dc:eb:c3:6e:ab:43:42:d2:89:
- b3:cb:56:dc:89:f6:4c:65:e0:be:1e:72:01:c7:c6:
- 50:e6:5b:df:a2:de:4f:43:9d:3d:e8:c8:25:2e:50:
- 1b:61:0e:2c:45:22:f0:93:7b:d6:05:9f:a4:23:fb:
- 78:b1:15:49:fe:eb:73:29:b0:eb:9f:e8:6e:3b:92:
- 86:c0:d0:20:e7:4c:b7:69:7f:d3:0f:54:39:05:3a:
- 46:9b:47:4d:fa:7e:8c:ce:45:a5:1f:2c:6f:f7:33:
- 36:10:bc:67:d9:b6:15:86:71:5f:7a:7a:af:4e:71:
- 59:1d:46:d1:76:96:d8:4b:fc:a0:b9:11:e4:5f:5d:
- fe:f4:bf:c8:48:54:66:60:be:4b:8b:70:4a:33:e0:
- ea:02:7a:cd:a1:37:3d:67:ad:93:f3:d0:a5:9e:f2:
- a4:ff:18:3e:77:97:d2:2c:58:12:a5:d6:55:03:6d:
- a1:cb
+ 00:c8:43:a7:fe:04:ff:78:d4:be:60:bd:16:7d:46:
+ a2:cf:a8:74:42:6b:2b:49:13:61:2e:78:e7:7c:49:
+ 52:0b:df:bf:b0:e1:5e:dd:f5:39:99:11:ff:d2:14:
+ 8f:db:de:10:55:90:29:05:b3:49:db:80:87:d1:82:
+ 6b:15:97:4b:da:5e:d7:da:11:0c:84:1e:db:d9:57:
+ 4d:52:cf:31:a0:1f:bd:4f:79:22:7a:ee:5a:ae:9d:
+ 22:df:71:d3:20:12:e5:c8:7e:1e:76:d3:6f:07:6e:
+ 5c:c3:89:11:a2:35:50:05:4d:6f:30:d8:3c:ef:38:
+ 80:51:e3:ee:7d:66:81:7f:7c:c4:e7:d0:d4:53:1d:
+ 00:3d:03:cb:87:f4:3d:b9:13:cd:16:ef:b2:51:3f:
+ 1c:96:0a:71:90:ca:25:c4:10:71:aa:ba:27:c8:67:
+ 94:af:63:7c:29:2a:2e:a8:4e:03:7e:6c:5c:2f:96:
+ 8d:9d:ca:c5:6f:f1:e7:8d:92:a9:ed:aa:87:3a:74:
+ 12:c7:ea:3f:ad:a2:6a:76:d8:f6:c9:96:27:6e:8b:
+ a3:b8:cc:d4:2b:9b:61:be:2b:11:c5:bb:da:ef:14:
+ 23:5d:5d:96:69:c0:a7:7a:16:db:3a:4e:e4:22:84:
+ 55:02:26:7b:a5:8e:84:12:e4:36:fc:c5:07:d9:ee:
+ c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 77:62:DF:59:FD:79:52:7B:9A:CF:99:3C:7C:BD:87:CE:41:27:57:F6
+ 5B:9F:DF:D5:C6:FF:4F:39:52:EA:EF:97:5B:C1:ED:E1:CC:44:4E:B6
X509v3 Authority Key Identifier:
- keyid:AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+ keyid:8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -148,41 +148,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 4f:dc:80:b5:cb:13:5d:2d:af:b6:6d:7b:51:4e:81:36:16:d1:
- 36:bb:5d:37:be:6e:4d:40:87:57:5e:db:a9:75:ae:46:e4:74:
- c4:dc:e5:fd:bc:04:2f:ca:7f:b4:67:db:65:f7:d6:37:94:74:
- a4:f9:8a:e2:da:d5:64:9e:00:4d:85:39:07:6f:e0:96:d7:2b:
- ef:73:d3:a4:77:6b:e1:ee:d4:f7:54:ba:30:23:a3:95:2c:c8:
- 38:21:0c:14:fb:f4:44:27:9a:f3:81:2f:89:59:3e:12:52:52:
- bf:4e:7c:93:7c:db:b7:df:9b:fb:b6:3c:70:fc:67:07:a6:42:
- 99:6d:95:c0:64:f8:99:50:aa:2f:b6:19:d8:63:80:0f:22:c3:
- b4:d6:b0:09:9b:62:a0:37:0e:21:e5:ef:c2:61:ed:7e:2f:f5:
- 7d:09:19:f4:6f:8a:c8:7a:0e:0a:44:41:9b:22:01:d4:7c:c9:
- a8:da:d5:91:d9:a6:1f:1f:b8:4a:6a:bd:bc:7e:36:33:7a:e0:
- 9c:58:c1:75:71:9f:14:04:ce:c9:1f:e6:dc:40:95:ee:ed:b3:
- 6c:77:5c:31:9a:90:bd:99:80:ab:8f:ef:8d:a6:e0:64:ba:16:
- 03:a2:21:5d:75:bd:d9:50:7f:d2:02:44:58:9e:b5:c2:1d:37:
- 50:8f:27:21
+ 14:37:73:58:3c:37:40:b3:ff:a3:e4:f3:2d:f1:26:6b:c9:82:
+ 17:c5:97:4d:bd:84:6a:19:25:08:20:a9:7d:38:fb:3d:a4:7f:
+ 06:80:7e:fb:6e:7e:bf:26:90:4b:96:ab:a7:f9:49:a5:d6:77:
+ 67:b5:ab:bb:ad:ea:84:5a:43:13:f9:b3:1a:80:b1:59:cc:d4:
+ 1d:33:e8:0d:b0:af:9a:80:44:0e:a6:01:f3:a4:e2:87:2b:db:
+ 47:be:0f:28:08:d9:ab:7c:d9:4c:86:d0:ba:bc:1b:dc:99:9b:
+ 33:ea:a7:3e:ef:52:b8:70:a8:27:e7:83:59:cd:57:38:7f:a1:
+ 36:53:4f:a0:1b:69:7d:e4:fa:9f:2b:52:50:09:23:62:c6:c0:
+ 01:a6:85:76:45:80:6a:b6:54:bd:60:5d:5a:3a:04:92:ab:e3:
+ bd:0c:94:7f:5f:79:9c:3f:6e:12:c3:96:b0:78:44:9b:03:1e:
+ 79:11:fb:8d:a5:1d:55:c9:b3:e5:a0:26:18:10:68:92:b8:54:
+ 68:d0:2d:e1:99:0c:08:9c:cc:40:50:34:69:9f:13:e6:d7:87:
+ 85:e7:57:63:3e:17:0f:ce:02:7b:78:e5:18:ef:1a:55:b1:6a:
+ 55:f8:44:3e:92:1d:08:a1:7d:bb:fc:00:be:e3:1b:83:aa:b8:
+ 75:f0:05:45
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb5e1juv
-HFELuDFBFoahBFvUw9HoFhKwevjUtmGbWlG7faXmz3BIHU4hdN743seNsuG1oLlK
-fHaxJOZtexd5KJmFRNWcx7N8ZP06l3aUiKrc68Nuq0NC0omzy1bcifZMZeC+HnIB
-x8ZQ5lvfot5PQ5096MglLlAbYQ4sRSLwk3vWBZ+kI/t4sRVJ/utzKbDrn+huO5KG
-wNAg50y3aX/TD1Q5BTpGm0dN+n6MzkWlHyxv9zM2ELxn2bYVhnFfenqvTnFZHUbR
-dpbYS/yguRHkX13+9L/ISFRmYL5Li3BKM+DqAnrNoTc9Z62T89ClnvKk/xg+d5fS
-LFgSpdZVA22hywIDAQABo4HLMIHIMB0GA1UdDgQWBBR3Yt9Z/XlSe5rPmTx8vYfO
-QSdX9jAfBgNVHSMEGDAWgBSqFrz5fq30cdbUlNlhSwE4spWLhDA3BggrBgEFBQcB
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEOn/gT/
+eNS+YL0WfUaiz6h0QmsrSRNhLnjnfElSC9+/sOFe3fU5mRH/0hSP294QVZApBbNJ
+24CH0YJrFZdL2l7X2hEMhB7b2VdNUs8xoB+9T3kieu5arp0i33HTIBLlyH4edtNv
+B25cw4kRojVQBU1vMNg87ziAUePufWaBf3zE59DUUx0APQPLh/Q9uRPNFu+yUT8c
+lgpxkMolxBBxqronyGeUr2N8KSouqE4DfmxcL5aNncrFb/HnjZKp7aqHOnQSx+o/
+raJqdtj2yZYnboujuMzUK5thvisRxbva7xQjXV2WacCnehbbOk7kIoRVAiZ7pY6E
+EuQ2/MUH2e7FGQIDAQABo4HLMIHIMB0GA1UdDgQWBBRbn9/Vxv9POVLq75dbwe3h
+zEROtjAfBgNVHSMEGDAWgBSKhc5+3K8VtwHCXIE/PRRJ0jgIqzA3BggrBgEFBQcB
AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AE/cgLXLE10tr7Zte1FOgTYW0Ta7XTe+bk1Ah1de26l1rkbkdMTc5f28BC/Kf7Rn
-22X31jeUdKT5iuLa1WSeAE2FOQdv4JbXK+9z06R3a+Hu1PdUujAjo5UsyDghDBT7
-9EQnmvOBL4lZPhJSUr9OfJN827ffm/u2PHD8ZwemQpltlcBk+JlQqi+2GdhjgA8i
-w7TWsAmbYqA3DiHl78Jh7X4v9X0JGfRvish6DgpEQZsiAdR8yaja1ZHZph8fuEpq
-vbx+NjN64JxYwXVxnxQEzskf5txAle7ts2x3XDGakL2ZgKuP742m4GS6FgOiIV11
-vdlQf9ICRFietcIdN1CPJyE=
+ABQ3c1g8N0Cz/6Pk8y3xJmvJghfFl029hGoZJQggqX04+z2kfwaAfvtufr8mkEuW
+q6f5SaXWd2e1q7ut6oRaQxP5sxqAsVnM1B0z6A2wr5qARA6mAfOk4ocr20e+DygI
+2at82UyG0Lq8G9yZmzPqpz7vUrhwqCfng1nNVzh/oTZTT6AbaX3k+p8rUlAJI2LG
+wAGmhXZFgGq2VL1gXVo6BJKr470MlH9feZw/bhLDlrB4RJsDHnkR+42lHVXJs+Wg
+JhgQaJK4VGjQLeGZDAiczEBQNGmfE+bXh4XnV2M+Fw/OAnt45RjvGlWxalX4RD6S
+HQihfbv8AL7jG4OquHXwBUU=
-----END CERTIFICATE-----
Certificate:
@@ -199,30 +199,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:eb:e2:5f:c7:d4:38:fe:e8:6d:64:82:8e:c6:d8:
- d7:a5:a4:ca:65:5f:55:b6:c5:5c:9c:f6:cc:af:d6:
- 4b:ec:a1:5c:c3:55:08:19:1c:0e:99:4a:4d:b2:14:
- 22:36:a0:db:eb:c3:1c:6f:d6:05:69:a5:5b:61:59:
- 7a:fb:88:da:28:1d:95:c6:fe:31:51:06:ac:f7:41:
- a6:10:08:25:7f:41:f1:01:39:48:27:c1:34:73:2f:
- c2:05:b1:97:42:80:de:d4:3a:44:db:a0:34:8c:b8:
- 5c:de:ab:42:c8:1e:f1:08:7e:10:3a:ee:16:8e:61:
- ee:ab:aa:f5:7a:2b:ab:af:a2:69:da:f4:b5:95:32:
- 17:bc:cf:ba:ad:a7:7b:fc:ea:9b:43:bc:ae:07:c3:
- 92:15:ce:4a:fb:ee:33:e6:89:7d:09:88:f9:a5:af:
- 0b:4d:c1:7f:28:30:d8:93:75:92:b5:27:2c:01:bd:
- 52:05:5d:42:a5:dc:f3:1f:1e:b2:3c:a1:17:19:9b:
- 30:ec:18:85:41:e3:72:d2:93:ef:a0:4d:0b:d4:8a:
- fa:89:0d:b6:46:fe:bc:f0:82:de:99:4c:1e:57:1c:
- 8d:71:b3:9c:41:ea:03:8f:a1:d6:f2:a4:9d:1c:b8:
- 50:c8:c0:19:6a:18:4d:c0:7f:7d:f8:b3:af:c6:62:
- 09:9b
+ 00:d3:fa:b1:7f:2b:e4:ff:ad:10:e9:54:54:ef:6a:
+ 81:02:0b:b6:83:70:89:ae:d9:4d:54:ea:95:99:88:
+ 3d:59:7d:97:1e:fd:b9:9b:53:8b:14:1e:a4:68:07:
+ ed:68:65:68:7d:4f:ba:28:38:ff:87:33:98:2c:32:
+ d0:e5:00:78:0f:6a:20:32:7d:9e:7d:9b:af:e9:39:
+ fe:5c:bc:04:1c:06:1a:11:1a:46:24:34:f7:e3:af:
+ 56:6d:38:8f:46:39:a6:01:fa:56:f9:d7:9e:73:35:
+ 1a:23:94:12:0f:0d:d3:ec:fe:09:57:f6:a0:9c:18:
+ a7:ba:4b:c9:37:a3:0c:60:77:4b:77:5f:c8:9c:7e:
+ b1:5c:b3:43:72:da:c9:6c:c8:71:24:ab:2f:c4:83:
+ bd:b0:4f:60:af:46:0d:7b:34:8f:e9:70:a2:85:ed:
+ 6e:05:df:e3:c1:40:3d:17:b1:f0:a3:7d:e2:17:6f:
+ 3d:fe:11:81:90:1f:c2:f8:bc:2c:d5:9c:fc:04:47:
+ 24:c4:5e:cf:20:0f:31:e8:7d:ea:b5:69:b8:0f:35:
+ 19:5d:13:08:db:d6:a2:dc:7a:33:92:b3:9c:fc:35:
+ de:cf:55:96:f7:52:6e:a9:e2:93:b0:52:07:8d:0f:
+ 95:9c:0e:0d:1b:48:0e:b8:41:4f:eb:68:da:e5:6d:
+ a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+ 8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
X509v3 Authority Key Identifier:
- keyid:AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+ keyid:8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -237,41 +237,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 07:d5:33:48:84:04:40:42:f1:f2:ff:d9:07:5e:5f:bf:d9:72:
- 07:6f:a9:6a:f1:5f:f3:59:69:99:41:cd:9d:37:65:cb:2e:c8:
- 06:f3:0a:0c:da:46:28:6d:d6:06:08:20:5b:ca:ed:c9:14:6e:
- 11:5a:9f:df:33:06:67:44:e7:63:ba:b2:42:53:2e:31:0b:ce:
- ef:c1:74:60:76:96:0b:3f:da:9b:f2:a1:d1:89:99:34:f0:f9:
- ae:8c:39:fd:3d:a6:be:7f:f5:82:f0:25:62:b0:b7:b4:bc:1b:
- 51:c3:60:05:af:bc:22:b9:62:49:c0:27:12:72:c2:ac:d9:1e:
- 17:ff:e7:57:f6:b2:f8:37:dd:76:1a:dc:e0:89:4f:b3:8a:74:
- 0b:76:5f:48:fc:6c:af:6d:42:85:25:b4:44:ca:27:ed:2e:fb:
- d8:df:1a:a1:82:bd:6c:25:35:62:cb:50:db:27:9e:b2:65:cc:
- 58:fa:fd:1e:6a:2a:77:cd:3f:b4:6b:e6:71:ec:85:f5:7b:73:
- a9:73:05:78:1f:26:21:dc:8b:a4:f5:e1:06:a6:97:13:9f:5f:
- 84:03:12:59:37:81:17:21:2d:39:db:b7:b0:f4:17:73:90:7c:
- a1:2f:53:c0:4a:af:53:54:2c:5b:9c:8a:e3:66:80:40:30:96:
- e3:d8:b2:23
+ 3b:f2:cd:03:ef:d9:61:67:ea:7b:dd:e9:88:13:07:8d:94:51:
+ 62:bb:56:d6:c1:be:8a:d0:a0:81:fe:1d:90:6d:85:94:2c:ac:
+ 33:fb:5d:f6:c9:74:72:7b:f7:5a:b8:e4:b6:dd:30:bb:93:3b:
+ 74:22:e9:fe:e9:5c:b2:8b:d4:a1:21:0c:e6:3c:ee:86:ae:9e:
+ 8a:fd:88:bb:a7:fd:20:bb:9c:ff:d4:ca:6f:66:60:19:14:d1:
+ d1:f2:d6:f3:b2:58:c8:4d:15:30:e1:e0:fc:40:ad:55:25:ba:
+ 8d:25:68:26:c4:64:68:7e:94:e6:f4:96:5a:c4:e6:ba:85:5b:
+ b2:32:d1:82:32:8b:f4:3f:6f:4e:d5:de:2e:d7:09:3c:1f:7e:
+ 93:3a:22:d8:ef:40:41:47:28:80:03:77:0d:f9:51:28:28:b6:
+ 53:24:66:f7:3b:56:6c:53:58:55:b2:49:7c:c4:1a:3d:a1:37:
+ 29:19:8a:9a:99:84:7f:63:ac:21:85:f5:02:5a:5a:1c:7c:0a:
+ 8b:bc:83:ff:80:57:2e:ce:62:c5:79:58:24:12:e8:af:a4:6c:
+ ce:a8:92:2b:25:c4:e3:b6:27:f7:d5:dd:e6:fa:cc:91:6c:59:
+ 5e:f5:a4:e2:4f:0b:18:fa:4e:9c:88:66:20:25:af:87:14:01:
+ 27:08:89:6a
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOviX8fUOP7obWSCjsbY
-16WkymVfVbbFXJz2zK/WS+yhXMNVCBkcDplKTbIUIjag2+vDHG/WBWmlW2FZevuI
-2igdlcb+MVEGrPdBphAIJX9B8QE5SCfBNHMvwgWxl0KA3tQ6RNugNIy4XN6rQsge
-8Qh+EDruFo5h7quq9Xorq6+iadr0tZUyF7zPuq2ne/zqm0O8rgfDkhXOSvvuM+aJ
-fQmI+aWvC03Bfygw2JN1krUnLAG9UgVdQqXc8x8esjyhFxmbMOwYhUHjctKT76BN
-C9SK+okNtkb+vPCC3plMHlccjXGznEHqA4+h1vKknRy4UMjAGWoYTcB/ffizr8Zi
-CZsCAwEAAaOByzCByDAdBgNVHQ4EFgQUqha8+X6t9HHW1JTZYUsBOLKVi4QwHwYD
-VR0jBBgwFoAUqha8+X6t9HHW1JTZYUsBOLKVi4QwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAH1TNIhARA
-QvHy/9kHXl+/2XIHb6lq8V/zWWmZQc2dN2XLLsgG8woM2kYobdYGCCBbyu3JFG4R
-Wp/fMwZnROdjurJCUy4xC87vwXRgdpYLP9qb8qHRiZk08PmujDn9Paa+f/WC8CVi
-sLe0vBtRw2AFr7wiuWJJwCcScsKs2R4X/+dX9rL4N912GtzgiU+zinQLdl9I/Gyv
-bUKFJbREyiftLvvY3xqhgr1sJTViy1DbJ56yZcxY+v0eaip3zT+0a+Zx7IX1e3Op
-cwV4HyYh3Iuk9eEGppcTn1+EAxJZN4EXIS0527ew9BdzkHyhL1PASq9TVCxbnIrj
-ZoBAMJbj2LIj
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA78s0D79lh
+Z+p73emIEweNlFFiu1bWwb6K0KCB/h2QbYWULKwz+132yXRye/dauOS23TC7kzt0
+Iun+6Vyyi9ShIQzmPO6Grp6K/Yi7p/0gu5z/1MpvZmAZFNHR8tbzsljITRUw4eD8
+QK1VJbqNJWgmxGRofpTm9JZaxOa6hVuyMtGCMov0P29O1d4u1wk8H36TOiLY70BB
+RyiAA3cN+VEoKLZTJGb3O1ZsU1hVskl8xBo9oTcpGYqamYR/Y6whhfUCWlocfAqL
+vIP/gFcuzmLFeVgkEuivpGzOqJIrJcTjtif31d3m+syRbFle9aTiTwsY+k6ciGYg
+Ja+HFAEnCIlq
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem b/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
index 249d42a..ee5a515 100644
--- a/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
+++ b/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-target-not-end-entity.py]
+[Created by: generate-target-not-end-entity.py]
-Certificate chain with 1 intermediary, a trusted root, and a target
+Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is also a CA. Verification is expected to succeed, as the test
code accepts any target certificate.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,79 +18,79 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ee:c2:63:d9:42:ea:55:e7:60:10:b7:7a:07:f3:
- 2c:85:b7:38:91:0c:ec:29:d5:fd:ca:14:ad:58:8b:
- 12:c2:fd:b6:2e:fb:50:dc:04:e9:c3:20:d1:db:23:
- da:0e:5e:93:94:cf:82:54:fd:e7:5d:9a:ee:01:37:
- 84:67:e9:f4:93:7b:ef:be:b1:e1:a3:5a:5a:eb:31:
- b1:29:8e:05:1a:90:d5:15:aa:5e:de:29:1b:1f:80:
- eb:17:fa:89:4b:d4:5b:77:0f:d1:e0:7b:f2:8d:a6:
- b4:aa:22:44:42:3e:bb:af:b7:5e:06:ae:0b:c0:20:
- 6e:ea:90:ef:4c:cb:34:5a:6b:37:29:a7:07:0c:66:
- 65:16:36:29:f0:d7:c8:e7:cc:88:2f:cc:bd:63:33:
- 2d:f5:91:8d:9b:69:f6:f3:05:d3:ca:87:96:ed:79:
- e4:0f:85:a4:41:62:aa:f2:f9:89:fe:a7:92:e5:7c:
- 0a:6e:74:70:b0:be:b2:67:12:2c:c4:44:77:54:f0:
- d6:07:26:aa:ad:8f:9c:f2:12:c2:c1:23:2d:54:8c:
- 09:df:94:59:7c:8b:e0:62:f1:2d:7b:cc:26:f3:11:
- 7b:97:04:3b:2a:02:c5:8f:2f:28:c5:c4:52:dc:4c:
- 5b:6f:0b:8c:e4:89:0a:85:d0:a3:d4:02:74:35:48:
- c7:c5
+ 00:f5:cd:3c:3f:41:74:34:24:e9:1d:74:42:a1:a8:
+ 16:8e:38:0b:ef:74:5b:38:0c:fb:18:b5:f6:08:f3:
+ 7e:d6:03:ac:02:7c:38:07:dc:c2:3e:78:bd:a7:2d:
+ 44:3d:6b:b4:74:42:71:c4:0c:93:c7:9a:ba:83:e9:
+ 6a:12:39:ab:fd:63:f5:e9:d7:97:33:93:7c:1b:77:
+ 78:c6:7a:7b:32:31:c3:68:aa:b0:b9:78:7b:c2:5a:
+ 85:0b:04:b4:c1:2b:fd:ce:71:02:6a:b1:0c:f6:1a:
+ 65:99:58:29:6e:95:21:69:7c:2a:c0:ff:18:90:28:
+ 92:ad:40:f5:83:67:63:04:14:21:aa:d2:29:35:22:
+ 03:f8:28:27:8a:69:82:de:aa:f4:1e:5e:93:19:27:
+ 74:4a:6b:d5:82:d3:2e:66:cb:23:e9:34:d1:70:0f:
+ 84:cb:1d:87:55:9e:1c:f2:b9:5a:e8:d0:43:dc:89:
+ a3:5c:28:61:fc:89:97:ab:ff:4a:2c:bc:c0:58:f2:
+ 68:f8:d7:9f:3e:e8:b1:8c:70:5a:d0:f7:1a:d3:dd:
+ d1:24:ba:fe:15:f8:bd:ea:16:8d:ee:9e:7e:99:30:
+ 22:6c:24:21:67:d1:fa:50:61:ce:65:48:5f:0e:79:
+ 02:0d:e9:b1:69:d3:4c:e7:2d:5d:57:8b:d5:e8:42:
+ d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 75:E4:93:1E:26:35:79:D3:34:F7:E2:FD:A3:1C:38:1C:68:8B:F6:CD
+ B4:44:21:DE:96:81:AA:7F:9A:5B:79:CB:57:AA:3D:13:A5:4B:6A:93
X509v3 Authority Key Identifier:
- keyid:58:01:24:B6:3B:E6:E7:85:87:83:6F:54:23:6A:C2:D4:E0:9D:6C:37
+ keyid:01:CB:1D:FC:13:00:C9:67:B2:D6:76:F2:0A:4F:9D:6A:D4:E2:9D:3D
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 86:0e:74:e2:4f:1c:93:23:8a:9c:37:4a:42:ff:ab:4b:7b:5c:
- 38:c3:67:11:1d:60:03:b3:1e:57:15:8f:1f:b2:94:45:f0:44:
- 31:f1:7e:30:0e:f9:cc:48:7b:a3:27:2b:bf:9a:bd:e9:a1:69:
- e2:1f:e7:91:ef:98:e9:58:5e:f8:7c:a0:8d:e5:81:85:af:8c:
- a6:04:c5:57:3e:cb:5f:33:dc:ca:b6:72:5b:e7:82:9b:68:91:
- 73:aa:f2:47:b9:6b:e2:7d:12:b4:85:87:2a:a9:49:a0:cd:79:
- 41:8d:60:33:43:e8:aa:55:4b:60:8a:41:26:ca:e1:75:35:bd:
- 45:00:a7:1a:2e:16:15:14:1f:be:9d:aa:25:54:e2:0d:f2:da:
- 96:27:72:2c:75:4b:d7:06:5f:9d:47:37:25:08:7f:1f:ad:df:
- e7:6f:1d:f6:95:63:e8:08:02:c9:51:dc:ae:4a:31:eb:c5:61:
- 24:79:4c:d1:88:79:1f:04:ae:35:79:24:bc:29:4d:0c:c0:05:
- 99:91:db:f3:83:af:95:4f:f3:13:35:b4:a9:40:04:81:cb:f5:
- 39:e1:55:96:cf:42:86:68:26:f8:cc:82:6a:b9:10:77:41:55:
- 03:16:9d:0e:57:37:33:a0:53:ca:7e:0b:1c:85:9e:c2:81:8d:
- c8:3e:b8:62
+ 0e:8f:41:87:a8:42:bd:13:c8:62:be:1d:f6:ad:a4:cd:00:5d:
+ 21:61:73:5f:75:27:67:16:98:11:ca:0f:cd:9d:bf:96:2a:75:
+ 62:35:68:e0:af:f7:6f:c4:75:69:f2:a7:89:27:96:64:4f:0e:
+ 7e:f0:82:89:65:1e:a2:08:cd:8b:f1:e5:a0:32:c5:93:2a:62:
+ 4c:3c:d2:9f:95:55:5d:87:a8:fe:ef:fa:92:aa:08:76:38:67:
+ 0a:d3:f9:0a:b9:93:69:e6:d3:78:ab:9f:eb:ef:35:a7:24:ae:
+ 10:d7:3d:17:bd:86:07:c0:64:0f:d6:fc:55:c1:54:70:6c:22:
+ 4f:ae:c1:64:ca:fc:dc:97:eb:8b:d2:22:52:d8:52:2c:4d:d4:
+ 5c:df:10:52:ab:ab:b2:89:10:e8:ed:00:19:8a:65:e8:4e:8c:
+ e2:5d:5b:cd:35:4c:55:24:30:be:57:f7:f0:51:ef:52:9d:34:
+ 60:0d:1e:f5:ba:8a:33:83:ac:db:dc:d9:2b:0b:f3:46:1c:98:
+ 3a:5e:5c:c7:36:7e:62:62:a4:13:68:2e:35:32:a1:bd:9d:e9:
+ 67:bb:58:85:3b:ea:94:1f:c7:91:35:b0:2c:ce:25:2b:9c:9f:
+ 60:7a:09:fa:32:1c:9d:4e:ca:ef:20:9d:ca:e1:ad:20:cd:63:
+ 20:ce:48:fd
-----BEGIN CERTIFICATE-----
MIIDfzCCAmegAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuwmPZ
-QupV52AQt3oH8yyFtziRDOwp1f3KFK1YixLC/bYu+1DcBOnDINHbI9oOXpOUz4JU
-/eddmu4BN4Rn6fSTe+++seGjWlrrMbEpjgUakNUVql7eKRsfgOsX+olL1Ft3D9Hg
-e/KNprSqIkRCPruvt14GrgvAIG7qkO9MyzRaazcppwcMZmUWNinw18jnzIgvzL1j
-My31kY2bafbzBdPKh5bteeQPhaRBYqry+Yn+p5LlfApudHCwvrJnEizERHdU8NYH
-Jqqtj5zyEsLBIy1UjAnflFl8i+Bi8S17zCbzEXuXBDsqAsWPLyjFxFLcTFtvC4zk
-iQqF0KPUAnQ1SMfFAgMBAAGjgdswgdgwHQYDVR0OBBYEFHXkkx4mNXnTNPfi/aMc
-OBxoi/bNMB8GA1UdIwQYMBaAFFgBJLY75ueFh4NvVCNqwtTgnWw3MD8GCCsGAQUF
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1zTw/
+QXQ0JOkddEKhqBaOOAvvdFs4DPsYtfYI837WA6wCfDgH3MI+eL2nLUQ9a7R0QnHE
+DJPHmrqD6WoSOav9Y/Xp15czk3wbd3jGensyMcNoqrC5eHvCWoULBLTBK/3OcQJq
+sQz2GmWZWClulSFpfCrA/xiQKJKtQPWDZ2MEFCGq0ik1IgP4KCeKaYLeqvQeXpMZ
+J3RKa9WC0y5myyPpNNFwD4TLHYdVnhzyuVro0EPciaNcKGH8iZer/0osvMBY8mj4
+158+6LGMcFrQ9xrT3dEkuv4V+L3qFo3unn6ZMCJsJCFn0fpQYc5lSF8OeQIN6bFp
+00znLV1Xi9XoQtTnAgMBAAGjgdswgdgwHQYDVR0OBBYEFLREId6Wgap/mlt5y1eq
+PROlS2qTMB8GA1UdIwQYMBaAFAHLHfwTAMlnstZ28gpPnWrU4p09MD8GCCsGAQUF
BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w
-DQYJKoZIhvcNAQELBQADggEBAIYOdOJPHJMjipw3SkL/q0t7XDjDZxEdYAOzHlcV
-jx+ylEXwRDHxfjAO+cxIe6MnK7+avemhaeIf55HvmOlYXvh8oI3lgYWvjKYExVc+
-y18z3Mq2clvngptokXOq8ke5a+J9ErSFhyqpSaDNeUGNYDND6KpVS2CKQSbK4XU1
-vUUApxouFhUUH76dqiVU4g3y2pYncix1S9cGX51HNyUIfx+t3+dvHfaVY+gIAslR
-3K5KMevFYSR5TNGIeR8ErjV5JLwpTQzABZmR2/ODr5VP8xM1tKlABIHL9TnhVZbP
-QoZoJvjMgmq5EHdBVQMWnQ5XNzOgU8p+CxyFnsKBjcg+uGI=
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w
+DQYJKoZIhvcNAQELBQADggEBAA6PQYeoQr0TyGK+HfatpM0AXSFhc191J2cWmBHK
+D82dv5YqdWI1aOCv92/EdWnyp4knlmRPDn7wgollHqIIzYvx5aAyxZMqYkw80p+V
+VV2HqP7v+pKqCHY4ZwrT+Qq5k2nm03irn+vvNackrhDXPRe9hgfAZA/W/FXBVHBs
+Ik+uwWTK/NyX64vSIlLYUixN1FzfEFKrq7KJEOjtABmKZehOjOJdW801TFUkML5X
+9/BR71KdNGANHvW6ijODrNvc2SsL80YcmDpeXMc2fmJipBNoLjUyob2d6We7WIU7
+6pQfx5E1sCzOJSucn2B6CfoyHJ1Oyu8gncrhrSDNYyDOSP0=
-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c7:c3:50:5c:f2:60:57:55:0d:be:39:c4:be:74:
- 76:26:ce:b2:4c:be:ac:dc:17:ac:a0:a4:c3:5f:ae:
- 64:59:da:20:77:7c:88:28:0e:75:7e:ef:70:80:9c:
- 0c:8e:94:1c:48:ea:4f:b3:34:1e:e4:cf:af:f8:29:
- 13:06:6f:19:0f:e7:9a:df:59:8c:44:d3:0e:26:70:
- 5f:c7:a5:3a:36:4d:4b:50:9c:bd:14:fb:21:4a:f8:
- d6:2b:49:94:2b:df:4c:8c:89:32:d7:53:f8:59:14:
- e9:23:76:f3:fb:b4:27:2d:c9:28:17:cc:fe:06:2c:
- bd:b5:97:30:83:40:9e:c7:ff:9e:0a:99:a7:f0:e8:
- 0c:c7:73:ca:3f:48:3a:75:97:bd:de:9a:84:6d:5b:
- 13:dc:0c:64:1e:66:4f:72:10:28:cd:34:bb:15:f1:
- ca:65:3f:03:db:aa:fa:4d:4c:26:64:8a:3f:6f:67:
- 51:fa:15:2d:71:7c:fd:0b:12:9e:12:c2:77:9c:f2:
- a8:86:78:f2:6f:9f:79:c9:50:51:28:41:13:79:79:
- 7c:a1:93:dd:71:f7:08:92:99:f7:9c:37:ff:2b:82:
- b6:4e:a9:93:47:83:dc:36:83:40:13:22:96:eb:5e:
- 2f:ad:a1:d6:70:38:c5:2b:3a:0b:ce:4c:fc:81:c1:
- 49:f5
+ 00:d0:8e:2e:ba:a1:8d:d9:60:16:cd:17:31:c9:08:
+ 43:93:94:76:48:55:a2:78:19:17:70:8e:95:25:ac:
+ f9:b9:81:33:66:8c:2c:79:b7:d9:f5:89:92:1b:d2:
+ 4e:01:e9:69:e6:61:b4:d7:96:78:6d:a0:23:cf:67:
+ 11:cd:fb:fe:3d:d6:b8:ad:64:3f:f6:b9:f5:17:05:
+ 89:1c:fb:3d:94:c3:18:43:e4:1e:15:0f:8d:26:25:
+ de:db:f0:c0:d6:67:cc:90:f8:33:1c:d1:81:4b:63:
+ 3e:c9:76:61:65:80:b4:13:97:9d:2e:99:ca:a2:6b:
+ cc:10:a6:3b:2f:20:90:ee:a5:6c:cf:f6:a0:7a:7b:
+ ce:59:c6:19:42:3f:9f:69:ab:f3:c1:2f:26:8d:fe:
+ ac:b8:ec:33:d2:d6:bb:4e:3f:80:c0:d9:12:33:35:
+ 05:2d:30:ce:6b:1c:12:ea:89:6f:8a:93:15:0e:0c:
+ c0:10:7a:99:1e:3f:fb:85:88:09:82:16:f0:62:ed:
+ fb:26:63:93:71:72:9b:15:11:19:c3:36:5b:10:c1:
+ b1:12:51:2e:6a:af:c1:d1:9d:fd:8b:7f:13:19:5d:
+ ce:00:49:3d:33:32:d1:6b:c5:14:4e:10:92:4d:1f:
+ 28:07:01:29:8f:fe:5d:ff:98:b8:2f:99:fc:68:21:
+ 1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 58:01:24:B6:3B:E6:E7:85:87:83:6F:54:23:6A:C2:D4:E0:9D:6C:37
+ 01:CB:1D:FC:13:00:C9:67:B2:D6:76:F2:0A:4F:9D:6A:D4:E2:9D:3D
X509v3 Authority Key Identifier:
- keyid:92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D
+ keyid:2D:38:72:D3:21:CA:2A:39:AD:2D:B4:9A:10:5C:CB:58:56:82:C4:AA
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 3d:c9:5f:4a:71:a9:28:ca:c0:27:47:f1:23:b0:87:2c:5f:4c:
- 20:de:1e:60:8b:6d:c3:42:2c:bf:ed:82:26:00:b6:f8:4f:7e:
- ac:37:ec:43:ea:7a:a5:58:fc:34:cd:af:54:2d:3e:30:e8:44:
- 8d:37:8d:5b:5c:b8:52:bd:f1:d5:ab:c7:61:d9:83:b5:f5:51:
- 41:ed:f0:1c:02:c7:ae:4f:57:60:49:c8:6d:3e:44:53:13:ce:
- 97:47:78:b5:04:23:fd:0a:49:e5:99:67:90:07:e7:a5:66:61:
- 2b:93:5f:b5:dd:d0:fe:92:e8:36:3e:4f:cb:a7:f0:64:d2:88:
- 11:e5:78:42:89:a7:3f:b6:fe:93:3a:d8:52:d0:8c:9d:ea:89:
- 21:56:67:04:21:c5:c2:83:42:13:43:ee:5c:1c:2f:00:97:45:
- 56:4a:18:21:ad:2d:b3:b6:38:ed:5e:df:fe:13:43:53:90:2a:
- 05:ab:47:6a:dd:9e:9e:51:a2:f2:98:08:03:4c:3f:17:5f:55:
- e7:b0:f3:ae:62:be:a3:0f:5f:d2:3c:b9:c3:48:55:a9:f6:0d:
- 4b:fd:15:54:f5:0b:57:30:c7:f5:fb:61:ff:0a:82:35:58:21:
- f0:05:90:a2:d6:52:d4:6b:53:a8:ea:98:68:53:59:0c:11:db:
- b2:af:fd:3e
+ 11:b8:7a:ac:f4:c5:c5:cc:bc:46:f9:9e:03:6d:69:f7:3c:15:
+ 71:be:be:15:0d:a4:b9:23:cd:e0:15:a4:51:36:86:2a:65:7e:
+ 7e:29:bc:58:d1:9d:11:2d:0e:22:61:65:ca:a4:9e:61:3f:16:
+ 23:ca:ff:91:62:34:55:56:1c:b8:83:b7:62:cb:9a:07:46:53:
+ 35:53:8a:04:7e:fa:12:72:af:af:04:1d:18:a4:c1:ba:5b:c7:
+ db:01:97:58:01:d1:73:e9:85:fb:16:27:0f:d2:eb:ce:35:7e:
+ e1:a1:91:52:d7:91:03:59:ab:c0:ed:a6:bc:7b:70:bc:af:73:
+ 20:10:a6:a8:f4:45:28:0e:8b:a8:f7:e8:03:64:c6:f1:3d:12:
+ dc:f2:30:75:85:a9:68:44:ad:fb:ab:36:ed:8f:84:25:79:d3:
+ d6:f1:c8:10:1a:ac:c4:fc:65:6b:0c:77:ef:d3:61:de:91:74:
+ df:da:f3:f2:f1:07:93:5f:e0:c9:6a:6d:58:29:e1:ef:98:93:
+ 3a:13:82:09:ec:90:82:5a:d7:ef:1d:d4:50:b8:e6:ff:ef:8f:
+ 8f:9e:38:72:e5:f3:58:f9:04:90:b3:a9:a3:fd:dc:82:ab:44:
+ be:bc:47:f7:79:15:31:91:1c:c1:3c:5c:86:d1:78:bc:1e:0c:
+ 9e:af:18:60
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8NQXPJg
-V1UNvjnEvnR2Js6yTL6s3BesoKTDX65kWdogd3yIKA51fu9wgJwMjpQcSOpPszQe
-5M+v+CkTBm8ZD+ea31mMRNMOJnBfx6U6Nk1LUJy9FPshSvjWK0mUK99MjIky11P4
-WRTpI3bz+7QnLckoF8z+Biy9tZcwg0Cex/+eCpmn8OgMx3PKP0g6dZe93pqEbVsT
-3AxkHmZPchAozTS7FfHKZT8D26r6TUwmZIo/b2dR+hUtcXz9CxKeEsJ3nPKohnjy
-b595yVBRKEETeXl8oZPdcfcIkpn3nDf/K4K2TqmTR4PcNoNAEyKW614vraHWcDjF
-KzoLzkz8gcFJ9QIDAQABo4HLMIHIMB0GA1UdDgQWBBRYASS2O+bnhYeDb1QjasLU
-4J1sNzAfBgNVHSMEGDAWgBSSACPHwzMUYj1ZyVKkzKBcFt01LTA3BggrBgEFBQcB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-AD3JX0pxqSjKwCdH8SOwhyxfTCDeHmCLbcNCLL/tgiYAtvhPfqw37EPqeqVY/DTN
-r1QtPjDoRI03jVtcuFK98dWrx2HZg7X1UUHt8BwCx65PV2BJyG0+RFMTzpdHeLUE
-I/0KSeWZZ5AH56VmYSuTX7Xd0P6S6DY+T8un8GTSiBHleEKJpz+2/pM62FLQjJ3q
-iSFWZwQhxcKDQhND7lwcLwCXRVZKGCGtLbO2OO1e3/4TQ1OQKgWrR2rdnp5RovKY
-CANMPxdfVeew865ivqMPX9I8ucNIVan2DUv9FVT1C1cwx/X7Yf8KgjVYIfAFkKLW
-UtRrU6jqmGhTWQwR27Kv/T4=
+ABG4eqz0xcXMvEb5ngNtafc8FXG+vhUNpLkjzeAVpFE2hiplfn4pvFjRnREtDiJh
+ZcqknmE/FiPK/5FiNFVWHLiDt2LLmgdGUzVTigR++hJyr68EHRikwbpbx9sBl1gB
+0XPphfsWJw/S6841fuGhkVLXkQNZq8Dtprx7cLyvcyAQpqj0RSgOi6j36ANkxvE9
+EtzyMHWFqWhErfurNu2PhCV509bxyBAarMT8ZWsMd+/TYd6RdN/a8/LxB5Nf4Mlq
+bVgp4e+YkzoTggnskIJa1+8d1FC45v/vj4+eOHLl81j5BJCzqaP93IKrRL68R/d5
+FTGRHME8XIbReLweDJ6vGGA=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9d:bb:c1:61:ff:52:46:21:fd:d7:06:43:c7:e0:
- 5d:5c:c8:02:0a:44:68:63:45:92:58:8d:2f:d6:b3:
- 86:f1:01:ee:fd:34:97:4b:d6:64:fc:4f:8f:88:50:
- 56:1a:e6:20:00:9f:8c:8d:e0:c0:30:41:28:99:10:
- 14:b6:28:6c:b9:37:ef:5c:c4:ee:eb:37:ff:06:07:
- f3:5c:17:8b:aa:d6:5c:8e:19:01:8d:66:3b:8f:c9:
- e2:83:0a:0f:8c:7b:21:da:cb:4d:ea:81:11:17:92:
- 83:f5:35:19:d5:b5:92:49:3d:08:a5:c3:95:37:76:
- ad:38:9c:fd:11:ff:d4:7f:09:60:10:ea:07:93:5c:
- 2f:4c:95:53:a1:cb:3b:b1:a8:9a:9d:b9:a4:87:af:
- 78:78:6e:dc:76:bb:00:74:cd:54:75:6a:17:45:b8:
- 55:d8:87:87:88:7a:d4:98:30:05:92:df:65:07:aa:
- d7:08:b7:18:b8:35:79:bb:5e:13:e2:c3:07:65:42:
- d4:52:e3:91:41:9d:38:cb:1e:9e:5d:3b:51:7d:95:
- f4:3b:6f:31:77:57:4b:e8:74:59:82:47:60:f9:91:
- 83:19:20:54:03:a0:cb:76:5e:50:32:ec:32:57:f6:
- d0:1d:f7:46:7d:c1:ff:a7:b8:1d:80:66:f0:d9:c9:
- 59:d9
+ 00:c4:68:12:a9:88:50:04:f4:70:9b:0a:1e:d1:83:
+ 30:a0:36:08:fe:20:f5:bc:b4:a5:32:74:dd:4c:ab:
+ cc:73:a4:ce:25:ab:04:38:71:2d:5c:06:de:3b:c3:
+ 2f:b8:d9:91:f3:28:9a:70:f4:7f:be:d5:0e:4e:00:
+ db:ce:d7:c6:9f:b2:aa:0b:5e:3a:b5:e3:ad:80:78:
+ 53:f1:38:61:05:7f:00:19:e4:ec:77:b5:1d:b6:c9:
+ 35:10:ca:18:c2:71:ae:c8:34:77:dc:46:26:a1:60:
+ a4:f0:dc:49:5a:fe:af:91:98:41:1c:90:50:7d:be:
+ 94:61:0e:58:b6:21:48:83:2e:5f:c1:a6:0c:a6:72:
+ 95:4a:a5:c5:a1:d9:bd:14:dd:7c:f4:1a:db:b1:1c:
+ 09:0c:2b:60:e7:28:c0:fc:e1:36:0a:f4:68:dc:ee:
+ 89:d8:0f:47:9c:e4:7b:ca:fe:65:57:2c:3b:3b:e5:
+ b4:89:c5:04:52:55:02:dc:09:44:fd:6a:19:fc:e4:
+ 52:6f:78:96:41:79:3f:b8:85:5a:fe:7f:8f:5d:fc:
+ ee:ba:35:1d:eb:64:2d:e0:7b:f2:8c:17:d3:33:21:
+ 9c:2d:e6:85:d2:e3:2c:0f:5b:57:2c:c5:c6:de:93:
+ 24:a2:6e:1b:72:49:f5:c8:05:e2:0e:ae:68:7a:f6:
+ b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D
+ 2D:38:72:D3:21:CA:2A:39:AD:2D:B4:9A:10:5C:CB:58:56:82:C4:AA
X509v3 Authority Key Identifier:
- keyid:92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D
+ keyid:2D:38:72:D3:21:CA:2A:39:AD:2D:B4:9A:10:5C:CB:58:56:82:C4:AA
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 7a:76:9e:1b:08:ba:ae:df:d7:32:30:27:f7:6d:e0:00:f2:4f:
- f0:cf:dd:b5:3e:65:71:d9:97:18:5c:fc:5f:a4:61:88:41:73:
- e6:45:d2:09:3a:a5:6d:09:ab:29:13:dc:0a:43:fd:8a:1f:be:
- 7f:a5:a2:07:cc:9c:63:d5:30:51:93:eb:fc:27:17:08:d4:15:
- 80:84:1c:5e:1b:bd:00:a0:21:0d:08:8a:44:64:40:73:6c:b5:
- 50:2b:82:5f:c8:d8:fd:26:f6:91:38:df:d2:58:20:a0:ae:f2:
- 14:54:e5:d2:ff:ef:87:57:7d:bd:5e:68:b8:1b:62:e0:ae:f4:
- 08:cd:53:35:1e:a4:cf:3c:21:22:55:1e:e4:51:87:f9:74:38:
- 10:29:86:64:87:8b:55:9b:96:5a:81:e4:93:2d:c0:fb:06:7f:
- dd:17:b1:d3:24:75:73:97:df:31:d6:01:a4:be:70:e2:af:ee:
- c3:bc:fc:a1:cd:93:2d:4d:b6:b5:95:02:28:38:68:27:59:38:
- 95:d9:64:20:1e:e5:46:f1:bb:f3:5a:2c:b3:f8:d8:cc:fd:34:
- 09:fb:0b:02:b7:e5:de:0f:ea:2a:2b:0d:81:55:4d:84:d6:f6:
- ba:a4:47:fe:f1:f9:7d:3f:f9:a1:46:bf:fd:dd:89:8b:b4:22:
- 1d:86:9f:c5
+ 09:ee:80:43:2f:77:6c:2b:2f:51:79:35:59:ad:f0:a5:51:45:
+ 22:6a:0a:20:c7:eb:d1:98:c2:43:06:5a:5c:92:cb:44:24:7b:
+ 97:8e:18:b8:23:3c:8b:31:6d:54:0e:73:11:90:9e:8b:2c:a4:
+ 78:53:e6:8e:55:93:64:cc:14:04:54:a1:b6:ec:28:59:67:3a:
+ 64:0f:9d:51:ec:ba:35:06:af:5f:96:b5:3c:fe:62:0e:13:5a:
+ ee:29:af:55:d9:22:71:b3:c8:61:1a:36:4c:c8:f9:39:80:c2:
+ 06:c2:54:93:fb:2f:1b:f7:01:66:42:2a:e2:08:7b:ee:3e:0d:
+ e0:c6:07:fd:f1:cf:5e:d1:77:b2:46:21:c6:c5:9f:db:15:75:
+ 7e:ea:ec:5d:da:02:2a:42:35:7a:b5:a2:2e:86:08:8b:29:ea:
+ e9:f3:b5:cd:9d:46:96:86:c7:82:ed:64:ab:74:29:53:1c:3e:
+ f5:69:51:5b:11:1c:0d:c4:f0:01:31:a6:32:d2:68:af:1d:52:
+ c1:c4:d9:a2:9e:da:a2:bd:19:71:fa:26:f5:28:43:6a:fd:5c:
+ 97:d2:bb:e0:cd:56:0e:b8:0e:f9:4d:d5:dd:a0:4e:ae:46:68:
+ 00:93:d6:fd:ec:85:78:f4:c9:93:96:34:65:cc:f0:72:e7:0e:
+ 00:3d:d0:6b
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ27wWH/UkYh/dcGQ8fg
-XVzIAgpEaGNFkliNL9azhvEB7v00l0vWZPxPj4hQVhrmIACfjI3gwDBBKJkQFLYo
-bLk371zE7us3/wYH81wXi6rWXI4ZAY1mO4/J4oMKD4x7IdrLTeqBEReSg/U1GdW1
-kkk9CKXDlTd2rTic/RH/1H8JYBDqB5NcL0yVU6HLO7Gomp25pIeveHhu3Ha7AHTN
-VHVqF0W4VdiHh4h61JgwBZLfZQeq1wi3GLg1ebteE+LDB2VC1FLjkUGdOMsenl07
-UX2V9DtvMXdXS+h0WYJHYPmRgxkgVAOgy3ZeUDLsMlf20B33Rn3B/6e4HYBm8NnJ
-WdkCAwEAAaOByzCByDAdBgNVHQ4EFgQUkgAjx8MzFGI9WclSpMygXBbdNS0wHwYD
-VR0jBBgwFoAUkgAjx8MzFGI9WclSpMygXBbdNS0wNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB6dp4bCLqu
-39cyMCf3beAA8k/wz921PmVx2ZcYXPxfpGGIQXPmRdIJOqVtCaspE9wKQ/2KH75/
-paIHzJxj1TBRk+v8JxcI1BWAhBxeG70AoCENCIpEZEBzbLVQK4JfyNj9JvaRON/S
-WCCgrvIUVOXS/++HV329Xmi4G2LgrvQIzVM1HqTPPCEiVR7kUYf5dDgQKYZkh4tV
-m5ZageSTLcD7Bn/dF7HTJHVzl98x1gGkvnDir+7DvPyhzZMtTba1lQIoOGgnWTiV
-2WQgHuVG8bvzWiyz+NjM/TQJ+wsCt+XeD+oqKw2BVU2E1va6pEf+8fl9P/mhRr/9
-3YmLtCIdhp/F
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAJ7oBDL3ds
+Ky9ReTVZrfClUUUiagogx+vRmMJDBlpckstEJHuXjhi4IzyLMW1UDnMRkJ6LLKR4
+U+aOVZNkzBQEVKG27ChZZzpkD51R7Lo1Bq9flrU8/mIOE1ruKa9V2SJxs8hhGjZM
+yPk5gMIGwlST+y8b9wFmQiriCHvuPg3gxgf98c9e0XeyRiHGxZ/bFXV+6uxd2gIq
+QjV6taIuhgiLKerp87XNnUaWhseC7WSrdClTHD71aVFbERwNxPABMaYy0mivHVLB
+xNmintqivRlx+ib1KENq/VyX0rvgzVYOuA75TdXdoE6uRmgAk9b97IV49MmTljRl
+zPBy5w4APdBr
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem
index 8c8bd24..d55d955 100644
--- a/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem
+++ b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem
@@ -1,6 +1,6 @@
[Created by: generate-target-signed-by-512bit-rsa.py]
-Certificate chain with 1 intermediary and a trusted root. The target
+Certificate chain with 1 intermediate and a trusted root. The target
certificate is signed using a weak RSA key (512-bit modulus), and so
verification is expected to fail.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,64 +18,64 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a0:09:f8:e1:95:28:53:9e:e3:c1:a5:c0:76:05:
- 74:88:fb:fb:d0:c9:c2:3e:61:e3:a1:e3:b0:c8:81:
- a3:d1:bf:0c:f4:d8:06:3d:8f:58:45:e1:f0:00:8e:
- b1:8c:ab:bc:83:ae:d1:39:3d:6c:52:ef:76:f1:6f:
- 93:b0:b2:26:b7:b4:ab:fd:25:44:94:85:4a:c1:ad:
- 2a:6c:59:11:3c:33:63:39:e9:f1:c6:96:05:7a:a4:
- 8b:3c:74:10:cb:ae:19:eb:cd:df:eb:b0:68:91:cd:
- 5c:56:8d:41:d4:b4:4f:db:45:50:4d:01:01:10:09:
- be:84:a3:3a:98:55:a2:a6:ea:6b:fc:c7:4f:ae:cd:
- 31:60:80:2b:86:27:cf:64:f8:4f:35:32:83:02:57:
- ab:85:9e:ae:e0:39:06:03:d8:8e:c5:6f:01:5f:f6:
- 08:1f:ae:c9:a1:32:65:35:c5:9b:d7:2c:e1:6f:93:
- 41:f7:40:ff:b1:36:08:5e:35:9e:42:2b:a4:d8:0a:
- c2:ce:e4:94:cf:51:7c:76:18:d0:0a:4e:e8:37:b3:
- 44:f4:0b:31:fa:49:96:94:c8:c0:ef:3a:10:ca:4d:
- eb:ed:24:a7:d4:ec:bf:d5:5d:80:ed:d7:3a:b1:7c:
- 3f:0f:b7:cb:48:59:73:fb:af:43:5e:3e:6b:e7:a5:
- ed:01
+ 00:b8:8a:4e:71:4c:e6:58:02:9d:bc:08:20:2d:8d:
+ 74:e3:04:2f:59:9e:43:73:e0:ca:83:1b:3a:e2:30:
+ 78:de:f8:07:a1:17:62:5d:4e:35:e8:03:40:2a:1e:
+ 2e:8e:91:a4:96:bf:a7:34:45:13:19:b2:d7:b0:72:
+ d0:10:e2:ad:ab:a8:f8:41:c5:ec:ee:1c:14:cb:cf:
+ 4f:cd:37:71:bd:2d:11:8d:95:e4:fa:2b:16:8c:bf:
+ 82:1c:22:85:25:4a:88:01:af:1e:fe:e7:53:d5:03:
+ d4:36:14:ae:81:d2:3d:73:6c:96:e0:e7:d2:a4:fb:
+ 17:1d:df:6a:93:68:b5:f8:a8:70:df:d0:b6:9d:fb:
+ e5:80:a3:a8:85:df:82:f3:05:23:9f:b6:62:89:b7:
+ 72:0c:99:49:5b:07:bd:c5:fb:4c:f4:32:83:a5:3c:
+ c6:8c:6b:c1:a1:c0:ab:73:68:fb:91:14:12:3a:c5:
+ 31:89:ac:a2:4b:b6:20:3b:03:1f:50:48:ff:7b:3b:
+ be:53:e5:46:e2:ad:18:7a:d3:3e:f9:bb:d0:0b:ac:
+ 0c:23:d8:9c:92:07:6c:ee:a6:64:0d:77:ef:aa:f4:
+ 64:5a:aa:ed:52:cb:20:9a:57:d5:ab:be:8c:07:71:
+ b3:a4:43:8b:d9:7e:6f:46:2c:70:9f:c0:e3:68:89:
+ e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 01:E0:D2:38:1C:28:DC:51:7E:F9:E6:25:7A:C5:47:ED:81:6C:FC:5F
+ 3D:5B:07:9A:2F:A5:14:87:32:C3:F8:54:71:62:3F:A1:E6:60:7F:D0
X509v3 Authority Key Identifier:
- keyid:B8:D0:79:3D:EA:8A:56:E5:90:68:D6:6C:E9:91:14:0C:AE:5A:48:10
+ keyid:7C:0E:01:A5:04:38:CE:0F:6A:AB:34:B2:CD:77:19:DB:84:C1:EC:44
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- be:ba:eb:82:1f:02:6b:d0:9e:c9:55:09:b1:e9:e1:82:8c:50:
- 39:7e:f5:ff:0f:4f:ef:d8:7d:52:10:07:5e:c1:c4:0e:d5:94:
- 67:d2:0e:2e:22:e6:5a:91:b5:f7:05:e3:a4:be:bc:6c:fb:38:
- 2c:df:47:55:61:bc:4c:39:14:68
+ 6a:f4:be:75:7e:66:b3:42:6e:fb:64:ed:d2:a1:d8:3d:08:04:
+ bf:93:17:0b:9b:79:df:ca:73:95:b4:5a:78:e3:96:d0:7f:5e:
+ 3c:2c:df:00:da:37:fc:61:22:9a:81:d1:bb:5d:13:6a:e4:21:
+ 18:bf:dc:49:36:4e:7a:aa:b8:6f
-----BEGIN CERTIFICATE-----
MIICyzCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCfjh
-lShTnuPBpcB2BXSI+/vQycI+YeOh47DIgaPRvwz02AY9j1hF4fAAjrGMq7yDrtE5
-PWxS73bxb5Owsia3tKv9JUSUhUrBrSpsWRE8M2M56fHGlgV6pIs8dBDLrhnrzd/r
-sGiRzVxWjUHUtE/bRVBNAQEQCb6EozqYVaKm6mv8x0+uzTFggCuGJ89k+E81MoMC
-V6uFnq7gOQYD2I7FbwFf9ggfrsmhMmU1xZvXLOFvk0H3QP+xNgheNZ5CK6TYCsLO
-5JTPUXx2GNAKTug3s0T0CzH6SZaUyMDvOhDKTevtJKfU7L/VXYDt1zqxfD8Pt8tI
-WXP7r0NePmvnpe0BAgMBAAGjgekwgeYwHQYDVR0OBBYEFAHg0jgcKNxRfvnmJXrF
-R+2BbPxfMB8GA1UdIwQYMBaAFLjQeT3qilblkGjWbOmRFAyuWkgQMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBAL6664IfAmvQnslVCbHp4YKM
-UDl+9f8PT+/YfVIQB17BxA7VlGfSDi4i5lqRtfcF46S+vGz7OCzfR1VhvEw5FGg=
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBAGr0vnV+ZrNCbvtk7dKh2D0I
+BL+TFwubed/Kc5W0WnjjltB/Xjws3wDaN/xhIpqB0btdE2rkIRi/3Ek2TnqquG8=
-----END CERTIFICATE-----
Certificate:
@@ -87,22 +87,22 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (512 bit)
Modulus:
- 00:da:fa:51:64:db:d4:40:cf:aa:60:3f:0b:9a:0e:
- 26:21:59:0e:f1:8b:e2:75:11:de:2d:1c:e5:dc:9b:
- e2:16:ce:cf:50:a1:aa:c9:e0:19:9f:5c:e5:44:69:
- 0d:f9:0c:d7:c5:1e:cf:11:65:77:cd:37:5f:d8:fe:
- 6f:e0:99:b3:f7
+ 00:ba:89:53:56:03:c7:9f:d6:cc:d0:48:7d:3b:52:
+ 02:ee:7e:58:eb:d8:9c:8e:3c:d6:65:b2:8d:94:0d:
+ 87:48:e1:65:65:56:91:5b:1a:52:3a:84:96:46:2a:
+ 8b:1b:7d:0c:43:57:04:0d:38:55:21:5b:0b:45:06:
+ a6:1e:67:ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B8:D0:79:3D:EA:8A:56:E5:90:68:D6:6C:E9:91:14:0C:AE:5A:48:10
+ 7C:0E:01:A5:04:38:CE:0F:6A:AB:34:B2:CD:77:19:DB:84:C1:EC:44
X509v3 Authority Key Identifier:
- keyid:68:06:12:0B:9D:1F:3A:7C:E5:87:20:3C:ED:A3:49:5D:3E:74:28:69
+ keyid:71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -117,37 +117,37 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 8c:35:af:f3:d9:62:41:91:93:ed:8b:f6:42:3e:94:80:cf:31:
- ed:0f:a5:52:2e:51:3f:f3:3f:56:38:c5:f0:25:c5:f1:13:8c:
- 6a:80:28:58:79:e1:eb:39:25:5a:af:31:07:24:da:8c:ae:17:
- c7:56:fd:c1:d4:3a:2c:7e:7e:a4:ff:eb:66:74:96:66:e8:26:
- 52:1d:c5:d6:0a:64:ea:cd:b7:df:b8:49:b1:c4:44:c6:d0:e3:
- 94:0f:b2:b2:cb:75:5a:bf:48:c6:ad:82:46:74:a7:53:bd:55:
- 00:67:6e:ba:2c:b8:15:43:30:64:d8:10:3a:67:b0:31:df:f6:
- 9e:7e:7c:0b:63:d6:6d:b0:5d:9a:61:96:51:03:71:d3:fb:da:
- 30:b8:d1:a6:8a:4a:a2:36:58:84:34:c0:30:5a:d8:51:30:d0:
- 89:8c:1e:c3:45:32:85:17:ba:01:4d:60:04:91:23:ee:df:71:
- 0d:82:90:67:2f:04:4e:e2:64:a9:48:55:03:e7:0b:a1:b4:e3:
- e7:e9:54:3b:bc:83:f0:b3:bb:3f:1a:fd:03:95:28:0e:d2:3b:
- 8b:62:fe:bb:b7:9a:1d:15:d3:96:47:be:c9:4e:21:77:63:60:
- 3b:27:b3:3d:7e:8b:fd:3b:55:17:cf:8b:99:81:6d:92:66:5b:
- 35:62:4a:96
+ 8e:cc:d3:f3:5a:fb:ca:83:4e:55:e3:ae:2a:b7:b7:ac:9e:87:
+ f0:62:58:23:29:3d:63:7e:8d:42:60:ea:dc:3e:ec:66:19:4b:
+ e6:d6:a7:b7:e1:ea:33:88:3c:ea:8b:87:b9:e7:64:0d:35:b3:
+ 0e:ab:81:71:0c:1c:0a:f3:0a:49:23:4e:d6:21:de:7f:e5:fd:
+ 6d:8b:7a:33:2f:a6:ab:4e:b8:02:cc:01:1e:18:9a:90:f3:56:
+ f8:8a:b5:2f:68:12:c6:83:b2:91:59:00:51:86:75:68:45:3b:
+ 27:c4:e0:0d:ed:e7:51:2d:47:60:26:19:02:fd:43:27:81:ad:
+ 33:cb:eb:98:9a:a1:2e:81:d3:81:52:4a:1d:19:e9:30:f9:fc:
+ 6b:e7:26:c8:c1:6c:65:e4:66:d4:cc:82:16:0a:a6:b9:68:3a:
+ eb:ee:cd:86:aa:a7:80:ed:4f:77:47:d2:c6:1b:eb:53:de:f3:
+ eb:24:60:41:ac:77:08:43:1b:76:ce:a6:4b:f1:4e:1d:32:2b:
+ 31:bd:59:52:f1:60:e7:f5:db:6d:bf:be:af:55:9b:11:63:f7:
+ 6e:19:2c:17:4b:db:fe:40:27:ae:02:f5:c2:17:62:21:7b:ac:
+ 38:d6:17:3e:5c:80:61:6d:95:63:e4:64:d3:07:23:9f:14:bb:
+ df:b2:eb:c2
-----BEGIN CERTIFICATE-----
MIICpTCCAY2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANr6UWTb1EDPqmA/C5oO
-JiFZDvGL4nUR3i0c5dyb4hbOz1ChqsngGZ9c5URpDfkM18UezxFld803X9j+b+CZ
-s/cCAwEAAaOByzCByDAdBgNVHQ4EFgQUuNB5PeqKVuWQaNZs6ZEUDK5aSBAwHwYD
-VR0jBBgwFoAUaAYSC50fOnzlhyA87aNJXT50KGkwNwYIKwYBBQUHAQEEKzApMCcG
+ZXJtZWRpYXRlMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALqJU1YDx5/WzNBIfTtS
+Au5+WOvYnI481mWyjZQNh0jhZWVWkVsaUjqElkYqixt9DENXBA04VSFbC0UGph5n
+ylsCAwEAAaOByzCByDAdBgNVHQ4EFgQUfA4BpQQ4zg9qqzSyzXcZ24TB7EQwHwYD
+VR0jBBgwFoAUcVlJTaVDScUO5HjpXLdOgKiju14wNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCMNa/z2WJB
-kZPti/ZCPpSAzzHtD6VSLlE/8z9WOMXwJcXxE4xqgChYeeHrOSVarzEHJNqMrhfH
-Vv3B1Dosfn6k/+tmdJZm6CZSHcXWCmTqzbffuEmxxETG0OOUD7Kyy3Vav0jGrYJG
-dKdTvVUAZ266LLgVQzBk2BA6Z7Ax3/aefnwLY9ZtsF2aYZZRA3HT+9owuNGmikqi
-NliENMAwWthRMNCJjB7DRTKFF7oBTWAEkSPu33ENgpBnLwRO4mSpSFUD5wuhtOPn
-6VQ7vIPws7s/Gv0DlSgO0juLYv67t5odFdOWR77JTiF3Y2A7J7M9fov9O1UXz4uZ
-gW2SZls1YkqW
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCOzNPzWvvK
+g05V464qt7esnofwYlgjKT1jfo1CYOrcPuxmGUvm1qe34eoziDzqi4e552QNNbMO
+q4FxDBwK8wpJI07WId5/5f1ti3ozL6arTrgCzAEeGJqQ81b4irUvaBLGg7KRWQBR
+hnVoRTsnxOAN7edRLUdgJhkC/UMnga0zy+uYmqEugdOBUkodGekw+fxr5ybIwWxl
+5GbUzIIWCqa5aDrr7s2GqqeA7U93R9LGG+tT3vPrJGBBrHcIQxt2zqZL8U4dMisx
+vVlS8WDn9dttv76vVZsRY/duGSwXS9v+QCeuAvXCF2Ihe6w41hc+XIBhbZVj5GTT
+ByOfFLvfsuvC
-----END CERTIFICATE-----
Certificate:
@@ -164,30 +164,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cc:43:57:ce:f5:69:b5:17:2d:24:1e:10:48:61:
- 1e:6e:27:06:10:ae:6d:cd:70:97:4c:39:7b:0d:68:
- 76:49:5b:2a:56:cf:24:d3:35:e4:f9:44:b0:60:c2:
- db:ee:58:f0:2c:3f:25:53:95:bf:fc:3b:cf:1a:5c:
- de:94:67:30:7f:6b:7b:c1:9c:d9:55:91:8b:34:57:
- a7:4f:d0:d7:38:8c:e6:57:ae:f6:61:66:bb:fb:4e:
- d3:b0:d0:c0:74:83:e3:43:7a:15:ab:29:fa:3f:65:
- b5:58:3b:0b:76:cf:b9:85:d9:2a:5b:bf:81:4d:d7:
- bb:72:cf:30:91:1a:0a:4f:6c:64:48:13:fe:cc:14:
- 21:f0:74:b8:90:73:f7:d5:fe:5b:dd:b2:7a:71:1a:
- e3:c3:22:5a:37:38:db:d0:39:62:b3:87:0e:7d:a8:
- 93:68:82:01:29:36:eb:30:20:66:d9:2a:f8:e9:7d:
- 53:ac:93:c1:68:c1:21:66:26:9e:4d:34:8a:14:c2:
- 38:c0:6e:57:9a:c8:93:c1:7d:7d:d8:22:6e:bb:5e:
- ff:dd:e0:af:e4:af:32:6d:f2:e7:57:d4:53:8d:ea:
- f9:ca:72:d3:3a:4e:19:e3:b8:b7:4f:fb:d8:5b:41:
- da:0e:17:59:e2:88:cd:c2:b7:6b:d4:64:50:f0:1e:
- 36:9d
+ 00:ca:5e:08:17:b7:7c:c4:55:39:a2:1c:7f:97:49:
+ b0:bb:88:3e:9e:ed:46:36:41:c2:a7:5e:2b:ce:bb:
+ 7b:d2:d2:a8:3b:a3:53:27:39:ac:3a:76:48:a2:85:
+ 97:3f:ba:98:9f:14:f9:b9:31:64:e5:27:a8:9a:23:
+ ae:7d:12:39:65:c0:10:f3:6d:2d:a3:45:3d:c3:69:
+ e6:cf:3e:4d:8a:5c:37:a5:6c:32:17:7c:ab:8f:62:
+ 0e:e4:57:6b:e1:64:22:8d:3b:ad:c6:93:60:4a:c4:
+ 32:6d:be:c4:6b:06:e1:4b:e0:89:3c:ef:ad:78:94:
+ bd:3d:d1:bb:19:1a:86:98:43:0e:84:bb:68:11:47:
+ 9a:06:49:33:e9:48:e6:f2:00:0e:ef:e7:4d:2a:1b:
+ b2:aa:5b:a8:8d:59:ac:b7:c8:77:5d:c9:9f:d3:e8:
+ c7:f2:88:0a:ce:6e:34:b5:8f:5a:63:24:68:42:2f:
+ 60:2c:a5:82:44:e9:12:1f:c3:7a:01:c3:e7:e3:24:
+ 97:0b:bc:5e:48:e1:33:4b:a0:cd:fa:ce:75:90:97:
+ 20:f4:0b:4c:8e:69:c5:8b:cd:1c:ac:8a:7f:d4:18:
+ 22:c7:10:09:52:dc:3a:17:3d:3a:5c:03:99:ee:f8:
+ 9d:a0:bf:ef:72:33:df:43:8d:9f:1b:1c:e3:22:24:
+ 73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 68:06:12:0B:9D:1F:3A:7C:E5:87:20:3C:ED:A3:49:5D:3E:74:28:69
+ 71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
X509v3 Authority Key Identifier:
- keyid:68:06:12:0B:9D:1F:3A:7C:E5:87:20:3C:ED:A3:49:5D:3E:74:28:69
+ keyid:71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -202,41 +202,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 2a:56:07:28:0a:b2:16:a5:3e:e3:cc:7e:10:47:8d:88:04:be:
- 92:d6:ef:fa:c2:e3:5f:5f:57:3a:75:5a:8e:8e:62:e0:94:26:
- 32:d2:ab:d3:d7:88:7e:d0:14:b1:1b:1a:5d:15:87:15:45:ae:
- 47:50:0b:50:dd:52:55:03:0b:cb:91:13:b0:96:20:24:c5:aa:
- 13:f5:4f:60:20:b6:46:6a:a6:cf:9d:4e:88:09:77:ad:4d:6f:
- ea:d6:18:81:ac:7c:ad:59:9c:bb:f5:c5:62:e5:e4:b3:61:b2:
- fb:f4:22:4e:38:a4:42:3a:e1:00:54:78:dd:24:90:20:47:d2:
- 74:2b:89:44:64:04:02:3b:f9:8b:fa:35:aa:90:c1:73:82:95:
- 94:fa:5f:85:e9:af:e1:3e:33:2b:1b:91:31:1d:94:ee:1c:0c:
- e5:22:de:48:d4:2d:f7:3a:16:7e:f2:40:dc:ce:ec:3e:41:0d:
- 12:3e:9c:ff:15:2b:9b:b3:80:87:02:50:76:ae:e1:05:dd:89:
- 72:fc:49:e5:81:1f:91:cc:c8:27:b7:2c:b2:ef:71:a0:97:76:
- 49:da:71:75:24:5e:45:2d:5b:2b:79:d2:b0:a3:b8:85:13:d5:
- 68:d7:53:f0:d1:b8:87:d1:84:7c:9e:e1:18:23:f4:cc:2a:8d:
- f3:93:51:5e
+ 20:51:cc:39:0f:3c:0c:67:47:0c:73:f0:00:0d:57:fb:6f:fe:
+ 4c:e3:c1:d1:a6:f7:40:54:4c:91:0f:ca:e1:eb:b3:7a:44:0e:
+ 57:f5:81:1f:9a:4f:81:57:d8:91:01:7b:09:6a:61:19:04:8f:
+ 00:7a:d1:5b:3f:cb:1b:c0:53:a4:da:dc:40:a5:ef:9b:59:1a:
+ fc:99:b2:0d:66:22:ee:d7:da:69:72:4d:b1:44:e9:2d:57:84:
+ 52:d5:2b:c5:77:ac:a7:d0:f2:27:12:6b:5c:42:7a:3d:fc:e8:
+ 04:91:98:aa:1d:3f:40:9d:9b:e2:43:24:47:7b:b8:24:23:a3:
+ 47:24:cd:9a:44:87:f8:a7:c4:07:90:9a:73:60:e1:0e:7b:82:
+ a1:ef:73:4e:02:46:6d:06:e2:58:8f:79:47:79:a6:59:75:cf:
+ ac:5d:e2:37:6c:88:3f:bf:57:00:f5:fb:09:53:f4:5f:06:42:
+ 58:5e:75:48:96:7d:4f:dd:3b:45:d3:7c:61:8f:75:20:17:a0:
+ 2e:1c:08:4b:22:3f:37:be:d7:43:89:da:59:ac:79:87:1e:6a:
+ cc:53:4d:5b:e9:0a:d6:40:a5:a0:28:99:57:44:5d:d2:7b:bf:
+ 02:38:a3:c4:df:14:a9:c1:b2:ec:15:21:7b:84:a1:a1:56:f8:
+ b9:45:42:cd
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMxDV871abUXLSQeEEhh
-Hm4nBhCubc1wl0w5ew1odklbKlbPJNM15PlEsGDC2+5Y8Cw/JVOVv/w7zxpc3pRn
-MH9re8Gc2VWRizRXp0/Q1ziM5leu9mFmu/tO07DQwHSD40N6Fasp+j9ltVg7C3bP
-uYXZKlu/gU3Xu3LPMJEaCk9sZEgT/swUIfB0uJBz99X+W92yenEa48MiWjc429A5
-YrOHDn2ok2iCASk26zAgZtkq+Ol9U6yTwWjBIWYmnk00ihTCOMBuV5rIk8F9fdgi
-brte/93gr+SvMm3y51fUU43q+cpy0zpOGeO4t0/72FtB2g4XWeKIzcK3a9RkUPAe
-Np0CAwEAAaOByzCByDAdBgNVHQ4EFgQUaAYSC50fOnzlhyA87aNJXT50KGkwHwYD
-VR0jBBgwFoAUaAYSC50fOnzlhyA87aNJXT50KGkwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAqVgcoCrIW
-pT7jzH4QR42IBL6S1u/6wuNfX1c6dVqOjmLglCYy0qvT14h+0BSxGxpdFYcVRa5H
-UAtQ3VJVAwvLkROwliAkxaoT9U9gILZGaqbPnU6ICXetTW/q1hiBrHytWZy79cVi
-5eSzYbL79CJOOKRCOuEAVHjdJJAgR9J0K4lEZAQCO/mL+jWqkMFzgpWU+l+F6a/h
-PjMrG5ExHZTuHAzlIt5I1C33OhZ+8kDczuw+QQ0SPpz/FSubs4CHAlB2ruEF3Yly
-/EnlgR+RzMgntyyy73Ggl3ZJ2nF1JF5FLVsredKwo7iFE9Vo11Pw0biH0YR8nuEY
-I/TMKo3zk1Fe
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAgUcw5DzwM
+Z0cMc/AADVf7b/5M48HRpvdAVEyRD8rh67N6RA5X9YEfmk+BV9iRAXsJamEZBI8A
+etFbP8sbwFOk2txApe+bWRr8mbINZiLu19ppck2xROktV4RS1SvFd6yn0PInEmtc
+Qno9/OgEkZiqHT9AnZviQyRHe7gkI6NHJM2aRIf4p8QHkJpzYOEOe4Kh73NOAkZt
+BuJYj3lHeaZZdc+sXeI3bIg/v1cA9fsJU/RfBkJYXnVIln1P3TtF03xhj3UgF6Au
+HAhLIj83vtdDidpZrHmHHmrMU01b6QrWQKWgKJlXRF3Se78COKPE3xSpwbLsFSF7
+hKGhVvi5RULN
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
index 6109796..620b9cc 100644
--- a/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
+++ b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
@@ -1,6 +1,6 @@
[Created by: generate-target-signed-using-ecdsa.py]
-Certificate chain with a trusted root using RSA, and intermediary using EC,
+Certificate chain with a trusted root using RSA, and intermediate using EC,
and a target certificate using RSA. Verification is expected to succeed.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: ecdsa-with-SHA256
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,67 +17,67 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:f5:15:82:5b:5b:ef:98:fd:63:b3:5b:08:9c:21:
- 8b:be:10:f1:3a:ab:17:e8:f2:9c:37:24:80:41:6a:
- 87:71:1d:9a:ea:c3:a6:f7:25:e3:09:03:3f:92:2e:
- e1:bc:9e:fd:70:65:e9:29:21:4f:46:01:12:20:e2:
- 08:d9:bd:86:40:5d:3d:b9:6a:c5:ad:3f:dc:82:00:
- 75:7b:da:26:a1:c9:49:f2:b5:30:6c:40:07:94:c6:
- f4:41:1f:88:3a:d7:89:ab:86:79:50:cc:85:8e:f6:
- a4:fc:7b:03:70:74:1e:6e:09:98:ff:b4:8a:ea:c0:
- c1:e3:07:ff:8d:f8:e8:bc:f5:fd:6e:aa:db:fc:26:
- 2e:44:bd:52:e3:66:f5:58:6d:ea:0c:30:19:ed:8f:
- db:cd:1f:40:20:2f:36:35:d7:63:b5:d7:2c:e8:4b:
- d3:e2:90:82:2f:27:4d:22:8a:94:e3:fb:c7:40:77:
- e2:e0:56:c7:70:b6:ae:9b:e9:7c:fa:b5:d0:40:34:
- dd:0b:59:96:0d:ba:84:47:87:62:c1:3e:1f:21:5b:
- 3b:15:56:3a:8b:e8:4e:6c:02:c8:da:dc:b3:2b:a3:
- b9:7e:c6:dc:06:94:9b:0c:ea:fc:7e:02:d3:3f:d2:
- 87:30:da:c4:41:1a:5f:1f:89:c9:6f:39:96:e5:fd:
- 3a:c9
+ 00:c1:2c:42:ca:d9:bd:0d:55:79:40:9a:cf:f4:1b:
+ de:4e:e7:8b:77:40:55:83:bf:2c:27:72:58:db:62:
+ 24:12:e2:e5:4e:36:09:95:e0:0d:5b:09:d9:f8:bf:
+ e5:f8:3a:d4:9a:c9:5a:ff:16:44:16:21:15:bc:cf:
+ f6:99:ad:5c:bf:74:9a:02:3e:91:99:28:2b:76:eb:
+ fe:14:8c:24:a2:f9:41:b3:7a:86:b2:15:34:a4:fc:
+ 93:49:42:b6:ee:20:70:61:f8:8e:ae:8b:55:aa:4f:
+ 3f:ec:1e:63:45:24:c4:01:c1:68:c2:cf:a7:c5:29:
+ 58:a7:c2:cc:89:00:25:b0:1a:b1:a0:dd:52:e4:3c:
+ 41:ff:2a:3b:97:07:63:70:13:01:3d:eb:1d:a1:12:
+ f2:27:0a:c0:47:8a:96:f4:c9:f0:2f:b1:2a:7a:fa:
+ 57:f8:60:98:c5:b8:03:ce:36:fc:32:73:39:13:46:
+ 5b:71:02:42:22:45:4c:11:1d:3d:e1:77:53:9c:8d:
+ 0b:a0:bf:68:67:b4:b2:2b:6a:9a:1f:da:dd:dd:c2:
+ 0d:0c:12:00:ff:d9:d2:36:77:52:72:32:30:ea:68:
+ bb:62:55:37:24:aa:13:92:a4:b5:8c:9d:71:19:6b:
+ 4a:1a:38:b0:21:79:14:70:d3:e9:7e:92:91:fc:8a:
+ c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 0A:36:4B:AA:5E:42:C2:6B:CE:3C:58:0C:33:53:9B:ED:09:42:89:B9
+ E2:9C:21:ED:AF:F9:55:73:3F:68:B8:CD:03:B2:45:FB:C8:4F:35:8C
X509v3 Authority Key Identifier:
- keyid:A4:A1:01:1C:8F:94:62:C3:11:19:36:76:04:DC:A9:AF:6F:B6:11:9C
+ keyid:71:4E:D7:4E:A8:0A:43:13:41:FE:F4:50:09:92:D0:56:1D:44:8A:3F
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: ecdsa-with-SHA256
- 30:64:02:30:3b:0e:cc:c2:70:77:25:fe:01:46:fb:e7:fe:ee:
- 68:07:50:f1:14:b8:9a:6f:53:bb:1f:4f:7f:ba:62:d2:76:06:
- 4b:d4:93:8a:1b:f6:3c:96:91:8c:57:90:a2:99:5d:0b:02:30:
- 3e:98:92:c5:01:13:f9:d4:21:bc:44:14:a6:9b:b9:8e:f0:86:
- ec:67:c8:12:07:74:41:8c:f0:f3:e8:b7:cc:e3:23:a0:a1:05:
- 2f:66:73:be:62:9b:1c:ce:70:fe:eb:09
+ 30:65:02:30:16:0c:16:b2:2c:2e:68:f7:e6:c9:e6:fc:25:67:
+ ab:1b:cd:65:0b:30:ca:d4:92:0b:0a:26:40:cd:7b:47:b5:37:
+ 8b:84:12:b2:51:53:3e:a9:b8:d0:fa:0b:e5:ec:54:2e:02:31:
+ 00:e5:d7:43:9b:58:f1:7e:90:79:de:63:49:7f:5b:fe:7a:34:
+ 2e:5a:d1:92:13:66:3a:e0:1c:ea:77:e1:98:1c:a9:38:d5:ce:
+ 98:7b:1f:5b:8a:d4:01:cb:35:7a:d5:74:8a
-----BEGIN CERTIFICATE-----
-MIIC6zCCAnKgAwIBAgIBATAKBggqhkjOPQQDAjAXMRUwEwYDVQQDDAxJbnRlcm1l
-ZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYDVQQD
-DAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FYJbW++Y
-/WOzWwicIYu+EPE6qxfo8pw3JIBBaodxHZrqw6b3JeMJAz+SLuG8nv1wZekpIU9G
-ARIg4gjZvYZAXT25asWtP9yCAHV72iahyUnytTBsQAeUxvRBH4g614mrhnlQzIWO
-9qT8ewNwdB5uCZj/tIrqwMHjB/+N+Oi89f1uqtv8Ji5EvVLjZvVYbeoMMBntj9vN
-H0AgLzY112O11yzoS9PikIIvJ00iipTj+8dAd+LgVsdwtq6b6Xz6tdBANN0LWZYN
-uoRHh2LBPh8hWzsVVjqL6E5sAsja3LMro7l+xtwGlJsM6vx+AtM/0ocw2sRBGl8f
-iclvOZbl/TrJAgMBAAGjgekwgeYwHQYDVR0OBBYEFAo2S6peQsJrzjxYDDNTm+0J
-Qom5MB8GA1UdIwQYMBaAFKShARyPlGLDERk2dgTcqa9vthGcMD8GCCsGAQUFBwEB
-BDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVkaWFy
-eS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0ludGVy
-bWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
-BggrBgEFBQcDAjAKBggqhkjOPQQDAgNnADBkAjA7DszCcHcl/gFG++f+7mgHUPEU
-uJpvU7sfT3+6YtJ2BkvUk4ob9jyWkYxXkKKZXQsCMD6YksUBE/nUIbxEFKabuY7w
-huxnyBIHdEGM8PPot8zjI6ChBS9mc75imxzOcP7rCQ==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-----END CERTIFICATE-----
Certificate:
@@ -89,24 +89,24 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (384 bit)
pub:
- 04:ca:bc:6c:d5:4b:51:ef:d3:7d:8a:46:12:ab:5f:
- d4:f3:3c:7d:eb:40:8b:de:0f:79:6d:6f:a4:40:0f:
- 96:51:8a:00:20:48:7a:d3:d4:30:2e:5b:1d:9f:e1:
- 00:3e:54:cb:93:62:21:7c:09:57:2e:43:38:08:77:
- 5c:1c:8b:aa:17:c1:22:c0:db:01:bf:c0:80:0a:24:
- 68:0d:2d:ce:51:e4:a3:2a:c9:42:0b:7c:57:82:31:
- 94:2f:b7:a8:42:9c:4e
+ 04:ff:41:5f:16:8c:e0:75:59:3b:4a:9c:84:3e:79:
+ 93:48:a5:98:7e:93:58:58:d5:c9:ca:60:b8:6d:0c:
+ 84:81:40:de:22:95:f1:6e:56:49:8f:02:45:ce:fe:
+ e8:71:71:02:25:a7:47:5f:63:0e:4a:46:4d:e0:b3:
+ 73:9e:d8:91:2a:ad:51:47:80:b0:f5:4a:5e:0d:93:
+ a6:78:93:a7:f9:1d:ad:b6:23:78:2e:23:e0:62:f6:
+ 77:f8:1c:db:31:82:c1
ASN1 OID: secp384r1
X509v3 extensions:
X509v3 Subject Key Identifier:
- A4:A1:01:1C:8F:94:62:C3:11:19:36:76:04:DC:A9:AF:6F:B6:11:9C
+ 71:4E:D7:4E:A8:0A:43:13:41:FE:F4:50:09:92:D0:56:1D:44:8A:3F
X509v3 Authority Key Identifier:
- keyid:E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53
+ keyid:39:BF:53:7E:B4:7B:97:5D:7A:E5:12:6D:FA:8B:79:C5:67:3E:1E:E4
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -121,37 +121,37 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 22:50:e8:71:34:bf:8b:44:c5:4e:82:31:fd:50:48:f4:fa:3a:
- 01:4a:f9:71:a6:a9:a2:d0:1e:bc:d3:1d:dc:ac:8f:4e:db:58:
- 8a:6b:a2:64:29:6e:f5:1b:0b:87:2e:f5:bd:dd:92:7a:5f:4e:
- a6:aa:1d:b4:7c:f2:eb:5a:2b:17:83:99:29:1f:2b:12:45:9b:
- 1a:cd:d3:b1:71:a3:d9:7d:cf:78:f4:64:ce:03:a5:0b:c7:98:
- e8:73:58:e2:26:47:5c:c0:ed:ac:c0:11:b8:39:11:19:39:fc:
- 01:b6:4c:a2:f5:4a:ae:a3:9e:3c:82:73:3e:b5:2c:28:63:ec:
- 14:a2:9f:a7:d7:4b:3e:f3:56:50:f6:9e:87:9b:d1:38:fa:78:
- 2e:7f:29:fe:4a:a8:d6:43:c4:05:d6:d6:67:7f:52:90:36:53:
- ff:a6:78:1f:7f:f7:ad:66:65:7d:4b:57:3c:d6:b3:19:9d:08:
- af:d2:5b:1a:76:42:ff:b2:6b:2c:0d:d1:1d:05:c0:d8:28:02:
- 9b:cb:f6:1d:7a:35:93:b9:c9:76:2d:d3:ef:f4:07:bf:d6:8b:
- 33:2a:83:69:8a:68:63:0a:b9:45:f6:e4:12:38:37:87:d6:53:
- 46:33:ae:f8:72:d3:e5:e9:93:bb:ba:db:8d:73:01:b1:79:0f:
- d8:1c:a0:d0
+ d2:53:ac:75:a8:06:52:55:48:4f:d0:a3:92:51:d4:23:06:f7:
+ 98:2b:b4:15:2e:65:26:44:c0:75:64:c5:df:73:cd:dc:a3:5a:
+ 7f:86:f6:e8:6b:bd:8f:3a:7e:20:6e:b9:df:4c:07:78:f5:1d:
+ b4:4c:d0:8b:0b:71:ad:74:6d:f7:48:fb:a8:45:e6:2f:87:d8:
+ 89:e3:de:b4:15:fa:71:47:19:c6:88:a2:9c:66:cd:44:05:22:
+ f8:d8:0b:1f:72:4d:ef:98:76:15:7d:41:20:53:2b:ef:e1:35:
+ 31:7c:b7:8e:70:c0:23:5a:ab:9a:58:5e:0b:02:d6:9c:7c:6e:
+ d0:29:ad:19:95:e2:1f:e8:18:c7:c3:25:cf:21:30:52:28:32:
+ fa:cf:07:4a:19:f2:39:bd:bb:05:96:4e:11:91:9f:b4:ae:5c:
+ 9e:bc:ac:f4:4a:b8:9a:73:40:4b:88:05:6d:3c:9e:c7:7d:0a:
+ 16:4f:d1:96:67:17:fa:e6:43:8c:0e:4c:26:2e:4c:51:8b:18:
+ ee:8d:e4:69:09:ca:7f:ea:8d:33:38:fa:45:e5:d7:06:74:1d:
+ bd:05:32:c7:1f:fd:84:9e:42:f7:7d:f2:24:ab:54:50:ba:69:
+ 3e:84:15:fe:f9:20:5a:77:8a:20:af:f3:97:35:1e:16:ee:92:
+ ef:9d:c7:5d
-----BEGIN CERTIFICATE-----
MIICvzCCAaegAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEyrxs1UtR79N9ikYSq1/U
-8zx960CL3g95bW+kQA+WUYoAIEh609QwLlsdn+EAPlTLk2IhfAlXLkM4CHdcHIuq
-F8EiwNsBv8CACiRoDS3OUeSjKslCC3xXgjGUL7eoQpxOo4HLMIHIMB0GA1UdDgQW
-BBSkoQEcj5RiwxEZNnYE3Kmvb7YRnDAfBgNVHSMEGDAWgBTprHMJtobNlUIpXeXs
-x5kpEpGMUzA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwt
+ZXJtZWRpYXRlMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE/0FfFozgdVk7SpyEPnmT
+SKWYfpNYWNXJymC4bQyEgUDeIpXxblZJjwJFzv7ocXECJadHX2MOSkZN4LNzntiR
+Kq1RR4Cw9UpeDZOmeJOn+R2ttiN4LiPgYvZ3+BzbMYLBo4HLMIHIMB0GA1UdDgQW
+BBRxTtdOqApDE0H+9FAJktBWHUSKPzAfBgNVHSMEGDAWgBQ5v1N+tHuXXXrlEm36
+i3nFZz4e5DA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwt
Zm9yLWFpYS9Sb290LmNlcjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZv
ci1jcmwvUm9vdC5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w
-DQYJKoZIhvcNAQELBQADggEBACJQ6HE0v4tExU6CMf1QSPT6OgFK+XGmqaLQHrzT
-Hdysj07bWIpromQpbvUbC4cu9b3dknpfTqaqHbR88utaKxeDmSkfKxJFmxrN07Fx
-o9l9z3j0ZM4DpQvHmOhzWOImR1zA7azAEbg5ERk5/AG2TKL1Sq6jnjyCcz61LChj
-7BSin6fXSz7zVlD2noeb0Tj6eC5/Kf5KqNZDxAXW1md/UpA2U/+meB9/961mZX1L
-VzzWsxmdCK/SWxp2Qv+yaywN0R0FwNgoApvL9h16NZO5yXYt0+/0B7/WizMqg2mK
-aGMKuUX25BI4N4fWU0Yzrvhy0+Xpk7u6241zAbF5D9gcoNA=
+DQYJKoZIhvcNAQELBQADggEBANJTrHWoBlJVSE/Qo5JR1CMG95grtBUuZSZEwHVk
+xd9zzdyjWn+G9uhrvY86fiBuud9MB3j1HbRM0IsLca10bfdI+6hF5i+H2Inj3rQV
++nFHGcaIopxmzUQFIvjYCx9yTe+YdhV9QSBTK+/hNTF8t45wwCNaq5pYXgsC1px8
+btAprRmV4h/oGMfDJc8hMFIoMvrPB0oZ8jm9uwWWThGRn7SuXJ68rPRKuJpzQEuI
+BW08nsd9ChZP0ZZnF/rmQ4wOTCYuTFGLGO6N5GkJyn/qjTM4+kXl1wZ0Hb0FMscf
+/YSeQvd98iSrVFC6aT6EFf75IFp3iiCv85c1Hhbuku+dx10=
-----END CERTIFICATE-----
Certificate:
@@ -168,30 +168,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b8:3c:af:88:6d:5e:96:7e:58:90:09:5d:40:54:
- 11:4f:55:ff:bb:e7:94:1b:ba:d7:df:b9:47:c3:ff:
- 84:71:22:da:a8:89:e6:98:71:4b:ae:d8:c1:19:df:
- 4f:69:bf:c2:3d:da:0a:a8:65:08:a8:c3:2c:aa:34:
- c7:a2:b9:00:45:6f:2e:69:6e:90:ee:9b:a2:f6:20:
- 0d:75:17:c2:33:e0:59:2c:7d:d6:3d:23:34:0e:e6:
- e0:49:74:3b:21:04:9f:6b:25:92:1a:2e:0f:e5:4a:
- 0a:96:85:0d:69:dc:ab:31:23:19:b7:d0:54:e6:18:
- c6:a1:ef:c6:e1:8b:da:a4:c2:78:7a:61:19:d7:83:
- 5f:81:34:37:3e:1a:e2:b4:56:64:eb:db:af:7c:83:
- c7:67:58:f1:69:c4:02:3a:05:1c:d9:56:5c:32:32:
- bd:a7:e9:5f:82:b3:bb:1e:a6:e8:9c:86:86:ee:de:
- 9b:19:d7:19:4f:89:cf:98:76:81:6d:dc:10:7d:d3:
- 92:b8:7b:0d:c8:2f:2d:fc:ee:d7:68:fb:d5:87:7e:
- 64:9a:32:73:57:58:5b:31:fc:da:d3:2c:2c:22:1d:
- d6:db:71:a6:58:0b:84:0d:28:de:82:ad:d1:4e:2c:
- 4b:b4:df:1d:78:34:59:52:a3:16:bd:0b:77:26:4d:
- 4b:6f
+ 00:dd:a5:d8:2e:59:ed:a6:74:62:3b:71:d5:2f:0c:
+ b5:e6:a8:d6:d3:d2:f3:38:d5:6a:14:e4:ec:7e:d0:
+ 46:81:35:0e:27:96:4e:25:0c:9f:81:85:18:03:d2:
+ 22:1b:14:cc:54:4b:96:0e:35:0c:4c:0f:20:69:3d:
+ ff:48:26:b4:28:6c:6a:1f:95:87:df:09:9e:ab:60:
+ 43:97:3c:3a:7b:4a:d3:c6:66:ba:1a:79:71:58:29:
+ cb:78:38:19:de:12:c6:09:fa:f9:fd:13:a0:e1:0e:
+ d5:e6:c2:36:d9:dc:c5:f4:ef:08:42:e8:bf:43:d1:
+ b5:8a:c9:81:b1:9c:16:8f:8d:b2:aa:9e:61:30:ed:
+ fc:12:f0:a6:f5:9e:6a:1e:6e:d7:7c:3f:ff:76:fa:
+ 6f:53:8b:49:08:84:9a:69:37:bc:f5:ee:e7:ba:ee:
+ 39:5b:31:28:05:5a:39:d3:75:5a:1a:b2:5a:ef:48:
+ d4:f5:5c:ab:99:b0:41:cd:50:cd:f4:36:c3:4d:e9:
+ 42:2c:9d:2c:86:ea:a8:e4:d0:c9:1f:d0:c3:92:1b:
+ ef:c0:2c:a2:ed:2a:23:2f:ba:c0:27:a5:13:98:1d:
+ d3:ba:71:91:29:ae:2c:85:44:ff:bd:b5:c2:bc:e3:
+ fc:ff:c1:78:51:57:e9:5e:ee:1e:c2:29:d1:8c:91:
+ 60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53
+ 39:BF:53:7E:B4:7B:97:5D:7A:E5:12:6D:FA:8B:79:C5:67:3E:1E:E4
X509v3 Authority Key Identifier:
- keyid:E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53
+ keyid:39:BF:53:7E:B4:7B:97:5D:7A:E5:12:6D:FA:8B:79:C5:67:3E:1E:E4
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -206,41 +206,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 76:62:2d:4c:94:4e:63:cb:7f:35:52:08:e2:8a:f3:d1:03:55:
- 31:f4:e8:e0:79:68:23:f0:19:d5:7f:b2:dd:27:0a:a2:bb:6c:
- f3:85:ae:48:83:3c:37:7e:62:69:e9:af:e0:4d:60:f0:8b:bf:
- 1b:2c:da:90:10:fc:8c:83:b1:55:46:a6:fe:d1:d1:21:6f:91:
- e1:cc:d6:c6:8c:1e:b1:03:e5:d7:5b:5f:3c:a7:2d:16:a1:71:
- 54:e1:8a:4b:62:61:18:42:b1:f4:ec:6e:33:5a:3b:52:2a:8e:
- 1a:60:75:73:89:78:72:86:9f:42:82:e5:d7:0e:5c:ce:36:a7:
- 2d:8e:78:0a:e9:95:2d:72:d2:42:6f:b6:7c:7e:28:29:2d:85:
- 3c:46:ab:6f:04:a8:f4:a2:ec:c4:24:7e:7a:a9:96:ec:b3:49:
- 8b:ec:2a:00:88:c0:a6:50:01:a5:f0:df:ef:1c:6c:f8:bf:8e:
- 64:ab:ff:43:bf:05:ce:82:b6:d4:cc:30:47:d8:74:7f:4e:4c:
- dc:cc:a6:92:e3:96:37:97:b1:03:27:93:38:62:4d:b7:ae:fe:
- a2:2b:61:05:32:27:28:27:c3:1f:e9:50:91:0a:4a:4b:ca:a3:
- b0:8e:d4:56:30:ad:e8:76:49:e4:0e:36:83:15:22:8a:bc:59:
- 27:1c:62:f3
+ 0d:d6:63:36:cb:eb:0f:98:6d:d8:0a:17:d2:6e:77:43:17:e8:
+ e6:36:c6:2a:40:2c:1e:64:f3:84:13:31:b9:fd:b7:6f:1d:b0:
+ d3:49:55:4b:76:ac:9d:6b:9c:3e:2b:fd:c6:d2:0c:df:9b:ef:
+ 4a:cf:2b:9c:61:5e:6b:2a:7d:b4:08:8e:a7:2a:aa:a9:a5:0d:
+ 8e:e1:0a:99:fc:f7:fa:f2:34:50:6a:aa:3b:30:ac:7c:93:b1:
+ dc:56:9e:2c:98:12:05:26:51:ff:c5:bf:06:44:24:7e:98:21:
+ aa:32:5e:f6:25:74:6d:31:f4:6b:f6:b0:70:30:87:04:b6:89:
+ 3d:a0:0f:cc:a6:d4:bd:93:df:98:bc:a9:92:ca:3f:ff:ef:29:
+ 4b:f1:3a:6a:c8:69:89:a6:93:01:54:49:af:20:4f:4d:4d:df:
+ 8a:4e:4a:ba:4b:a8:5e:85:46:96:a2:64:6f:78:f9:d7:6b:e5:
+ db:fb:39:42:3a:18:c7:08:ce:93:41:e3:3c:78:01:64:36:8b:
+ de:78:9e:13:42:52:72:13:f6:81:df:5e:7a:45:08:4f:0d:99:
+ f8:af:1e:71:d6:55:85:3a:2c:79:17:e3:df:8e:46:8d:39:13:
+ a4:c9:e7:3d:f2:9d:ef:e7:b9:12:6e:e3:76:3f:e7:c6:5c:fe:
+ 1e:af:1b:50
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALg8r4htXpZ+WJAJXUBU
-EU9V/7vnlBu619+5R8P/hHEi2qiJ5phxS67YwRnfT2m/wj3aCqhlCKjDLKo0x6K5
-AEVvLmlukO6bovYgDXUXwjPgWSx91j0jNA7m4El0OyEEn2slkhouD+VKCpaFDWnc
-qzEjGbfQVOYYxqHvxuGL2qTCeHphGdeDX4E0Nz4a4rRWZOvbr3yDx2dY8WnEAjoF
-HNlWXDIyvafpX4Kzux6m6JyGhu7emxnXGU+Jz5h2gW3cEH3Tkrh7DcgvLfzu12j7
-1Yd+ZJoyc1dYWzH82tMsLCId1ttxplgLhA0o3oKt0U4sS7TfHXg0WVKjFr0LdyZN
-S28CAwEAAaOByzCByDAdBgNVHQ4EFgQU6axzCbaGzZVCKV3l7MeZKRKRjFMwHwYD
-VR0jBBgwFoAU6axzCbaGzZVCKV3l7MeZKRKRjFMwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB2Yi1MlE5j
-y381UgjiivPRA1Ux9OjgeWgj8BnVf7LdJwqiu2zzha5Igzw3fmJp6a/gTWDwi78b
-LNqQEPyMg7FVRqb+0dEhb5HhzNbGjB6xA+XXW188py0WoXFU4YpLYmEYQrH07G4z
-WjtSKo4aYHVziXhyhp9CguXXDlzONqctjngK6ZUtctJCb7Z8figpLYU8RqtvBKj0
-ouzEJH56qZbss0mL7CoAiMCmUAGl8N/vHGz4v45kq/9DvwXOgrbUzDBH2HR/Tkzc
-zKaS45Y3l7EDJ5M4Yk23rv6iK2EFMicoJ8Mf6VCRCkpLyqOwjtRWMK3odknkDjaD
-FSKKvFknHGLz
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAN1mM2y+sP
+mG3YChfSbndDF+jmNsYqQCweZPOEEzG5/bdvHbDTSVVLdqyda5w+K/3G0gzfm+9K
+zyucYV5rKn20CI6nKqqppQ2O4QqZ/Pf68jRQaqo7MKx8k7HcVp4smBIFJlH/xb8G
+RCR+mCGqMl72JXRtMfRr9rBwMIcEtok9oA/MptS9k9+YvKmSyj//7ylL8TpqyGmJ
+ppMBVEmvIE9NTd+KTkq6S6hehUaWomRvePnXa+Xb+zlCOhjHCM6TQeM8eAFkNove
+eJ4TQlJyE/aB3156RQhPDZn4rx5x1lWFOix5F+PfjkaNOROkyec98p3v57kSbuN2
+P+fGXP4erxtQ
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem b/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem
index dd82071..1e60c4a0 100644
--- a/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem
+++ b/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem
@@ -1,6 +1,6 @@
[Created by: generate-target-signed-with-md5.py]
-Certificate chain with an intermediary that uses MD5 to sign the target
+Certificate chain with an intermediate that uses MD5 to sign the target
certificate. This is expected to fail because MD5 is too weak.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: md5WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c5:55:ac:42:f6:5f:21:93:e6:93:07:6a:dc:a0:
- 4c:66:21:42:8c:2e:f4:d0:61:30:ac:bf:9a:3b:b3:
- 59:21:e4:29:9f:33:5d:5e:6f:a1:de:4d:c2:b3:22:
- f3:16:0a:81:f0:51:90:f8:45:e0:5e:9b:7d:3a:e4:
- 60:d2:a8:a1:b1:2f:13:8c:41:dc:c3:58:1d:66:6c:
- 67:13:5e:21:51:f7:49:21:5d:29:dd:91:fd:a7:36:
- 10:bb:d1:30:71:16:ee:4b:7f:1b:ba:02:c3:79:0c:
- 4d:e7:98:59:b1:0f:c8:61:a3:f9:5c:fa:03:08:29:
- 41:af:60:50:b8:80:3b:f6:fe:75:0f:bb:d4:92:d9:
- f5:3a:25:41:12:f1:cd:ad:2c:08:c9:f9:a3:17:78:
- 86:2a:18:13:b1:20:15:83:de:04:ac:2a:c6:42:5c:
- d1:f9:e6:12:1c:1b:51:7a:2c:cd:40:94:c8:76:17:
- d7:20:4a:f8:e4:c8:3c:57:7c:c8:c6:6d:bd:2a:5e:
- a9:03:7e:14:9d:a5:4e:1f:b1:aa:94:2f:64:34:6e:
- d1:cb:5f:41:84:f7:86:95:04:90:ce:77:27:f6:7d:
- 8e:5b:9c:52:7a:5e:dd:e2:f6:e6:fd:10:8d:e2:7d:
- 34:f0:54:1b:c2:54:45:fe:01:97:90:f7:33:03:db:
- 0c:bd
+ 00:bc:8a:b8:3e:5c:f9:f0:cc:33:10:6f:ab:ec:81:
+ 53:1c:4f:d3:c7:e2:c6:ac:57:9b:b0:a1:37:3d:2a:
+ b8:4f:eb:23:8b:64:6d:2f:5b:f5:02:dc:5b:d5:11:
+ ea:29:38:4c:76:40:f4:b0:b0:47:9f:6c:8d:89:91:
+ f4:0d:e5:cb:bb:c2:2a:cc:c1:9b:3a:56:f6:26:8e:
+ 4a:df:2c:b3:7c:35:3f:71:a9:37:49:3c:1a:40:fd:
+ 5e:6f:1b:5e:a0:61:64:d1:40:80:d7:dd:2b:d4:32:
+ 4c:80:f8:5a:8c:b2:ff:b6:ea:91:73:59:00:5e:02:
+ a8:49:1b:2b:fa:c2:9b:35:44:79:74:7b:02:8e:68:
+ 47:76:43:8d:23:d0:d0:f9:c4:8c:a1:aa:99:cb:55:
+ 24:a1:11:1c:88:0d:8a:5c:d9:46:a6:8f:ac:3f:83:
+ e3:4e:35:90:03:fe:0e:2d:d7:c6:9b:a3:36:d7:7f:
+ af:32:89:83:94:40:e7:87:1b:fe:f5:1b:1e:75:ba:
+ f2:b5:70:f3:75:f8:85:b3:58:9d:5f:56:6b:60:0f:
+ 53:12:82:dc:01:67:28:66:2c:3e:f6:df:08:fb:b9:
+ da:ce:00:60:b3:b4:65:fd:1d:1e:14:7c:90:9b:0b:
+ d4:ca:ff:96:12:c0:2c:cd:fb:c3:4f:62:d0:67:59:
+ bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- DF:16:6B:0E:36:1E:E4:F1:15:A2:3A:9E:07:4A:F9:6D:81:82:7A:D5
+ 2F:67:2E:92:9E:39:55:C4:47:23:6A:10:A9:37:87:97:74:0F:55:57
X509v3 Authority Key Identifier:
- keyid:E2:CD:39:61:AF:F5:B9:CE:D9:7C:36:97:5D:28:36:61:63:0B:CA:49
+ keyid:A7:A7:7E:EF:32:C8:D1:7C:DF:CA:EE:F4:4F:7A:EA:67:43:53:57:CF
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: md5WithRSAEncryption
- 35:9f:32:4a:5f:2e:b6:3f:d4:03:97:8f:0d:70:8b:5a:8d:62:
- 30:77:44:37:e0:85:5f:e8:fc:8a:f6:e2:cb:df:05:f3:08:2d:
- 05:dc:bb:16:1f:69:06:2e:4b:2b:1b:6f:a1:b3:77:02:1e:7d:
- 49:da:a0:d9:6a:ac:bd:5e:4d:65:10:51:ee:e6:2a:33:e5:b9:
- b5:5b:83:67:3d:c1:9d:c5:a6:c4:6e:7b:3b:ad:88:02:dc:ef:
- 98:c4:cf:1d:cc:ab:45:23:53:27:ee:7f:87:f4:e6:13:5a:3a:
- 3d:30:1e:66:b7:6e:67:e7:ae:1b:c6:4e:26:14:0f:cf:71:8a:
- 0c:ee:60:14:25:45:a1:4b:2f:46:73:41:11:59:9f:e7:9f:12:
- 01:7e:dc:e4:68:96:31:a5:c0:cc:03:fc:e3:b0:c5:c2:65:57:
- ef:48:a4:85:eb:6e:d9:95:2f:d8:b1:48:46:b1:d5:30:84:d6:
- c0:aa:32:41:a2:8a:be:35:b4:97:e5:1d:f7:36:f4:47:36:68:
- f9:6b:10:39:1f:13:e8:b3:f5:7c:57:71:df:a8:e8:40:28:ed:
- 65:3a:ba:7a:98:fa:4d:14:e9:5e:f5:a3:92:03:aa:d5:0b:72:
- 29:7e:30:80:03:40:b9:eb:72:e2:ac:43:3a:2c:f6:c9:a3:13:
- c7:c9:05:b9
+ 30:9f:40:ac:31:10:78:0f:06:4b:ed:6d:de:05:20:c6:29:64:
+ 66:a8:2a:4d:ac:b3:3d:40:d5:70:80:24:08:13:00:73:0b:90:
+ 32:c3:fe:35:b3:8c:77:bb:d6:79:a9:84:e3:76:89:d9:0f:19:
+ 2e:68:6a:ec:09:ef:9c:57:32:ee:9f:e5:0e:5e:4c:6b:87:eb:
+ e0:7b:e9:ed:b0:db:ef:34:7a:41:aa:7b:0d:b7:37:89:17:99:
+ b8:43:db:93:19:30:91:7c:25:fe:1d:cd:69:02:b8:6d:c6:08:
+ fa:7f:d8:3c:e5:9a:9d:fd:af:13:53:5a:54:a7:5d:d1:e3:46:
+ 3a:c9:8b:ac:e3:cb:e8:67:a8:e0:cf:bb:ab:45:5c:d6:d5:51:
+ d2:2a:d2:b2:f8:3f:05:d2:20:e8:95:17:7d:43:fe:af:cd:1c:
+ fa:d2:8f:8f:3b:b1:2b:3d:22:06:d8:c7:0d:00:64:8a:35:40:
+ 32:6e:2c:07:be:5f:e7:9d:06:4f:b1:99:a9:fb:2e:03:80:79:
+ 5e:19:60:a9:7f:e5:12:bb:ba:a8:f2:34:d7:00:29:11:ab:8d:
+ 51:52:67:33:99:5c:08:de:85:a6:ea:42:9d:08:76:d1:f1:23:
+ fa:c0:4c:ff:38:5a:de:1b:7a:16:e7:79:cf:a0:d0:2f:b7:e5:
+ d4:8e:92:4f
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQQFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVaxC
-9l8hk+aTB2rcoExmIUKMLvTQYTCsv5o7s1kh5CmfM11eb6HeTcKzIvMWCoHwUZD4
-ReBem3065GDSqKGxLxOMQdzDWB1mbGcTXiFR90khXSndkf2nNhC70TBxFu5Lfxu6
-AsN5DE3nmFmxD8hho/lc+gMIKUGvYFC4gDv2/nUPu9SS2fU6JUES8c2tLAjJ+aMX
-eIYqGBOxIBWD3gSsKsZCXNH55hIcG1F6LM1AlMh2F9cgSvjkyDxXfMjGbb0qXqkD
-fhSdpU4fsaqUL2Q0btHLX0GE94aVBJDOdyf2fY5bnFJ6Xt3i9ub9EI3ifTTwVBvC
-VEX+AZeQ9zMD2wy9AgMBAAGjgekwgeYwHQYDVR0OBBYEFN8Waw42HuTxFaI6ngdK
-+W2BgnrVMB8GA1UdIwQYMBaAFOLNOWGv9bnO2Xw2l10oNmFjC8pJMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQQFAAOCAQEANZ8ySl8utj/UA5ePDXCL
-Wo1iMHdEN+CFX+j8ivbiy98F8wgtBdy7Fh9pBi5LKxtvobN3Ah59Sdqg2WqsvV5N
-ZRBR7uYqM+W5tVuDZz3BncWmxG57O62IAtzvmMTPHcyrRSNTJ+5/h/TmE1o6PTAe
-ZrduZ+euG8ZOJhQPz3GKDO5gFCVFoUsvRnNBEVmf558SAX7c5GiWMaXAzAP847DF
-wmVX70ikhetu2ZUv2LFIRrHVMITWwKoyQaKKvjW0l+Ud9zb0RzZo+WsQOR8T6LP1
-fFdx36joQCjtZTq6epj6TRTpXvWjkgOq1QtyKX4wgANAuety4qxDOiz2yaMTx8kF
-uQ==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-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b0:67:b9:ee:01:e6:50:d2:01:11:81:3a:70:41:
- c3:36:af:95:28:11:ed:90:02:37:9a:f9:fe:23:38:
- d6:72:c5:38:da:62:a4:84:dc:50:12:0e:03:e2:34:
- 4d:d8:88:b7:aa:09:31:14:71:b5:e5:f9:80:06:c5:
- 72:8a:1a:dd:72:a8:c9:76:79:3b:14:34:0a:bc:7a:
- d4:a6:75:58:c0:f1:77:d7:23:bb:5b:a1:54:d2:cf:
- ec:0f:b7:ab:53:01:7d:1d:54:40:68:12:fb:75:68:
- 56:d5:0d:5c:00:de:81:5f:a5:14:fd:5d:77:b8:1f:
- 3e:ee:84:99:a5:b5:0d:13:9a:fe:cf:b8:b0:e1:4c:
- db:87:64:e1:36:a0:04:02:5d:fd:58:9e:e5:70:85:
- 63:65:50:93:b8:3e:6c:85:10:67:bc:3d:e2:77:38:
- b2:75:b5:e3:57:55:b2:44:68:3c:ab:65:2b:cb:8b:
- 11:29:d5:7c:b8:24:88:25:d1:80:0b:04:3f:0e:e9:
- 1d:79:db:39:7d:ab:81:67:fb:cf:ae:a3:da:ea:f1:
- 12:ac:cd:87:96:5c:ed:fd:db:bc:e2:3a:4e:33:05:
- af:1a:d3:03:85:ec:74:23:04:12:7e:62:a1:56:4c:
- 45:9c:95:80:55:b6:2f:13:82:27:24:c4:a0:68:33:
- e6:71
+ 00:b1:0a:34:0b:b1:d9:65:b5:ea:7a:ac:f5:96:11:
+ 68:ba:f0:c9:6b:57:c7:97:7e:f4:bb:5d:31:4e:43:
+ 9b:04:7f:a7:2e:fd:4c:e0:03:c7:0d:ac:70:24:0e:
+ bc:26:a2:5d:48:71:04:9b:43:8c:97:e4:2c:df:7c:
+ 59:39:eb:a3:94:b3:5b:87:d5:11:b6:c1:4a:e9:7b:
+ e8:f8:c5:31:3b:2c:4d:f0:47:34:75:a8:88:6d:22:
+ a9:24:dc:00:1f:a0:36:1e:e3:a7:92:b1:00:9d:f8:
+ ef:27:46:63:60:23:67:48:e6:5d:66:b3:3d:b6:84:
+ 04:3f:b1:1b:2f:b7:8e:71:26:28:32:ff:de:fa:b0:
+ cb:e2:90:5a:72:9a:83:1d:de:c7:ad:b1:5d:68:11:
+ 9e:6a:ac:44:6b:06:cc:93:6c:a9:13:af:a4:72:e2:
+ 34:4d:c4:d7:8f:ee:99:f4:e4:db:d1:19:45:bf:97:
+ 76:59:7d:b9:32:63:07:a0:1c:e3:19:98:f6:aa:d8:
+ ba:44:f6:ec:5f:eb:46:d1:63:70:56:00:a1:f1:ce:
+ 18:c3:a5:77:27:81:e6:18:65:78:9a:c4:87:f9:36:
+ 2e:b6:fc:5c:75:a9:a9:59:6a:df:99:26:07:c9:1d:
+ 1a:a8:4f:6e:b6:10:92:4f:96:c1:74:30:4a:5c:8b:
+ bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- E2:CD:39:61:AF:F5:B9:CE:D9:7C:36:97:5D:28:36:61:63:0B:CA:49
+ A7:A7:7E:EF:32:C8:D1:7C:DF:CA:EE:F4:4F:7A:EA:67:43:53:57:CF
X509v3 Authority Key Identifier:
- keyid:BD:2A:00:54:BB:89:72:89:4F:27:75:12:AA:89:38:AB:A0:06:F7:D1
+ keyid:7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 3d:9a:bd:e5:a7:4d:e4:0e:ea:6a:34:da:9e:48:c7:8a:e4:34:
- 6c:19:fe:d0:2f:2f:7b:01:14:46:3a:45:d7:a7:46:6e:83:bb:
- 54:cc:4e:af:cf:ef:fc:6d:90:e4:54:38:94:2d:cb:55:85:bd:
- 1d:9f:9e:cd:ac:68:b3:7f:ed:bb:1f:30:30:14:15:ba:17:e4:
- 62:db:6b:70:5a:1f:c2:e7:43:c6:30:d0:0f:be:78:06:4e:09:
- 0b:00:96:63:d2:14:84:93:88:5d:e6:bf:93:1c:e9:18:9d:df:
- 7d:db:34:39:e5:94:f8:c9:84:b6:ff:a0:e7:5c:51:5e:ba:40:
- 82:5a:7e:64:ca:bf:e3:0e:c8:76:0b:5c:be:29:b1:62:79:18:
- b2:d6:c3:ee:d0:05:61:96:be:a8:dc:c5:65:72:cc:f7:f8:6e:
- 27:85:c3:9b:68:6d:3d:a5:e5:34:20:ff:19:12:62:7c:5d:b8:
- 95:8f:a8:a8:a8:90:41:e0:83:f1:e3:3f:67:26:bc:b1:6c:76:
- b1:5e:25:60:49:7d:78:bf:bb:11:22:43:ac:d3:5f:c0:c9:73:
- 76:d5:9c:97:b0:ec:17:36:0d:4b:83:3e:77:d0:84:62:76:98:
- af:6d:42:ac:cb:40:bb:04:1d:9e:0a:a3:97:11:f2:b0:3f:6b:
- b6:fd:ff:da
+ 96:e8:cf:14:ab:83:41:2e:62:24:7e:03:ad:0e:ae:8e:6a:93:
+ ed:3d:86:68:84:b5:76:2b:88:c3:67:b6:15:b6:38:b2:27:f3:
+ 2a:1b:83:42:60:11:ee:94:ba:d8:d8:35:74:92:c1:5f:b4:b3:
+ f0:fc:5e:eb:51:93:be:00:11:79:db:94:86:0f:19:26:bb:f6:
+ b1:ec:93:66:34:df:3e:7e:6e:80:17:3e:4a:9b:53:04:05:22:
+ 88:de:65:e3:50:c1:81:fa:1d:fc:76:09:f6:25:89:9d:4f:d3:
+ ff:76:b0:3e:81:d3:79:8f:05:48:68:36:93:43:ac:b8:41:37:
+ 98:54:bc:71:90:ed:12:c0:1f:f7:b4:a7:7b:56:34:e3:97:01:
+ 41:56:9a:c6:37:3f:8e:34:9b:51:37:77:4f:67:d6:72:66:d1:
+ 89:64:10:80:5f:13:15:34:03:a9:c5:6e:07:6c:77:78:99:27:
+ f4:e0:44:0e:5f:a0:67:dd:f7:4d:4a:93:b3:71:d2:8e:1b:d6:
+ 29:5a:8f:f1:f7:c8:9c:33:ae:28:15:7b:10:ee:92:bd:d5:3c:
+ b3:81:5a:52:5d:96:43:ae:bd:03:83:36:e8:c5:f8:23:03:26:
+ eb:2f:70:4a:bb:d8:e1:6a:a0:7d:23:b1:4f:32:28:65:23:84:
+ 02:95:8e:2d
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGe57gHm
-UNIBEYE6cEHDNq+VKBHtkAI3mvn+IzjWcsU42mKkhNxQEg4D4jRN2Ii3qgkxFHG1
-5fmABsVyihrdcqjJdnk7FDQKvHrUpnVYwPF31yO7W6FU0s/sD7erUwF9HVRAaBL7
-dWhW1Q1cAN6BX6UU/V13uB8+7oSZpbUNE5r+z7iw4Uzbh2ThNqAEAl39WJ7lcIVj
-ZVCTuD5shRBnvD3idziydbXjV1WyRGg8q2Ury4sRKdV8uCSIJdGACwQ/Dukdeds5
-fauBZ/vPrqPa6vESrM2Hllzt/du84jpOMwWvGtMDhex0IwQSfmKhVkxFnJWAVbYv
-E4InJMSgaDPmcQIDAQABo4HLMIHIMB0GA1UdDgQWBBTizTlhr/W5ztl8NpddKDZh
-YwvKSTAfBgNVHSMEGDAWgBS9KgBUu4lyiU8ndRKqiTiroAb30TA3BggrBgEFBQcB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-AD2aveWnTeQO6mo02p5Ix4rkNGwZ/tAvL3sBFEY6RdenRm6Du1TMTq/P7/xtkORU
-OJQty1WFvR2fns2saLN/7bsfMDAUFboX5GLba3BaH8LnQ8Yw0A++eAZOCQsAlmPS
-FISTiF3mv5Mc6Rid333bNDnllPjJhLb/oOdcUV66QIJafmTKv+MOyHYLXL4psWJ5
-GLLWw+7QBWGWvqjcxWVyzPf4bieFw5tobT2l5TQg/xkSYnxduJWPqKiokEHgg/Hj
-P2cmvLFsdrFeJWBJfXi/uxEiQ6zTX8DJc3bVnJew7Bc2DUuDPnfQhGJ2mK9tQqzL
-QLsEHZ4Ko5cR8rA/a7b9/9o=
+AJbozxSrg0EuYiR+A60Oro5qk+09hmiEtXYriMNnthW2OLIn8yobg0JgEe6UutjY
+NXSSwV+0s/D8XutRk74AEXnblIYPGSa79rHsk2Y03z5+boAXPkqbUwQFIojeZeNQ
+wYH6Hfx2CfYliZ1P0/92sD6B03mPBUhoNpNDrLhBN5hUvHGQ7RLAH/e0p3tWNOOX
+AUFWmsY3P440m1E3d09n1nJm0YlkEIBfExU0A6nFbgdsd3iZJ/TgRA5foGfd901K
+k7Nx0o4b1ilaj/H3yJwzrigVexDukr3VPLOBWlJdlkOuvQODNujF+CMDJusvcEq7
+2OFqoH0jsU8yKGUjhAKVji0=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a0:9b:ff:8c:74:7b:c9:1e:3c:34:5b:7c:c0:35:
- a4:88:6a:26:ed:0b:52:e9:58:e6:b5:bd:fd:f6:ae:
- 0f:08:09:24:ef:62:fb:1c:61:7f:8a:ca:5f:d4:b5:
- 2b:45:c2:21:1f:1a:a1:ef:f9:d8:0d:be:31:88:bd:
- d7:35:8e:0d:de:e8:be:60:63:f6:3c:6a:cd:e7:1d:
- 78:36:86:91:a1:e9:5c:2d:c6:9a:95:b9:e7:c3:66:
- 6f:b5:0c:4b:aa:9a:51:ea:b3:a3:9e:57:d6:17:c9:
- ae:4c:3f:32:ef:28:5a:99:6a:dc:50:54:f5:cc:80:
- 51:76:6c:50:4d:52:01:45:92:af:a2:ca:a7:c1:9e:
- 76:24:29:9c:d1:73:95:0a:a1:16:73:0f:56:9d:e8:
- fe:c2:bb:e4:64:99:a3:d4:46:7d:7a:f7:25:d3:49:
- c0:da:38:18:78:9c:2a:40:60:c2:b8:98:8a:84:ed:
- d2:84:e0:39:a6:31:64:36:2a:59:ca:ba:dc:c2:6d:
- a2:ac:1a:93:58:27:76:95:ea:5d:12:8d:7a:a5:b6:
- 50:3b:1c:25:3f:75:ee:eb:db:12:78:67:47:0d:86:
- 49:77:ce:f5:d0:37:03:55:eb:98:93:bf:f1:10:5b:
- 87:aa:a1:ef:76:30:e1:e4:77:54:b1:52:e8:c9:81:
- 4d:5b
+ 00:a7:f5:bd:ee:ad:ff:30:37:e6:5a:68:20:1a:22:
+ b1:f5:bb:5e:24:38:bd:b7:c1:34:d4:97:8b:16:97:
+ 34:17:bc:61:df:ff:ff:6b:9c:b6:34:79:7d:5a:e7:
+ 3b:cf:07:73:b8:2d:03:59:56:68:4a:85:25:58:f4:
+ 68:01:61:84:52:99:2f:6a:7e:cb:13:61:8b:6e:3b:
+ f5:8e:c2:48:cc:1e:50:28:4f:5f:4b:6b:32:d3:f3:
+ 76:c9:6f:a3:aa:40:1b:06:59:19:cd:42:70:f4:85:
+ fe:86:38:ca:84:42:5f:bb:d3:a7:41:42:46:59:14:
+ 3f:11:1d:62:d9:e1:16:3f:06:a7:59:f3:ff:ba:f1:
+ 88:7b:0c:68:10:49:ac:8d:75:87:08:94:f6:ec:ce:
+ 4c:6d:e6:77:85:25:c8:8f:42:0a:1d:d3:00:cc:89:
+ 31:dc:32:07:d7:2e:62:16:73:8b:5d:c4:c9:1b:87:
+ 7c:46:64:2d:cc:e0:fb:69:d2:e1:bd:23:2b:d9:15:
+ 62:22:a4:cd:75:64:f1:78:76:cc:07:11:59:08:60:
+ 03:dd:cb:67:3e:a7:b8:12:fa:96:54:6f:6d:9f:05:
+ 11:89:71:13:50:94:bb:bb:17:7e:80:ed:40:b1:ba:
+ f2:36:2d:45:bb:73:78:5e:b7:5e:2f:e7:f8:66:ec:
+ 1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- BD:2A:00:54:BB:89:72:89:4F:27:75:12:AA:89:38:AB:A0:06:F7:D1
+ 7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87
X509v3 Authority Key Identifier:
- keyid:BD:2A:00:54:BB:89:72:89:4F:27:75:12:AA:89:38:AB:A0:06:F7:D1
+ keyid:7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 43:7c:24:ea:dc:11:3a:08:d7:6e:dd:8c:b9:21:1a:d7:88:d8:
- f1:4c:90:a0:b7:67:a7:3c:d2:8d:a4:68:50:34:db:a4:f1:69:
- d4:e0:8b:4c:b3:39:62:11:b5:4a:df:3a:60:87:eb:f6:79:2c:
- ef:4d:67:91:93:5f:b3:d1:63:1b:2e:12:74:4e:e2:60:d8:c1:
- 1f:e8:b2:5d:d4:56:2d:85:27:64:36:b0:e4:17:5e:d1:9c:ce:
- 56:e2:f4:68:d3:80:6f:44:d6:e4:7b:5b:c6:5e:3e:ea:69:9d:
- 97:4b:0d:83:3b:a7:52:f5:78:96:9f:af:15:e2:bf:59:a7:5f:
- 5b:d4:21:d1:49:b2:f4:b5:26:b1:b1:cf:74:d0:ba:26:b1:2e:
- 0e:ef:74:29:ed:f5:35:18:2f:cc:8b:80:39:41:8f:ea:ab:81:
- 6a:89:71:b8:22:e6:bc:e5:33:34:f7:dd:6c:37:0a:e1:21:a7:
- 7f:2d:29:f6:aa:02:d8:47:3f:a6:3d:0e:85:20:59:f8:5f:49:
- 06:f7:3a:9a:b8:d9:3a:08:ce:9a:60:aa:dd:72:07:1e:bb:8f:
- 86:fd:6a:3e:dc:4a:3f:5e:c2:b7:e6:0e:89:75:08:89:e3:bf:
- 2b:6c:cc:02:63:e0:1c:04:21:79:64:c0:7c:89:73:2b:e9:85:
- 49:80:5e:f4
+ a6:5d:56:c1:c7:29:8f:3a:1d:86:2c:5f:1e:ff:83:7a:c0:44:
+ 81:81:f7:16:9d:84:70:66:f8:1a:f4:8e:50:a7:dd:d2:1a:2e:
+ f9:6e:cc:e6:39:7c:fb:7e:29:54:24:3d:4a:82:e1:a5:d6:7e:
+ 4c:c8:58:b8:d6:f7:d2:90:ca:d9:8f:e9:c8:59:bc:73:1c:37:
+ 19:7c:a4:2b:ec:68:de:e9:04:fa:14:f0:07:bd:2f:3f:16:a4:
+ 50:8f:e8:89:ea:c1:31:d1:ce:6e:b1:21:11:5b:69:dc:28:e7:
+ 8a:33:8d:40:52:f8:86:8e:b0:a1:7a:a5:46:f2:8d:d7:d1:2e:
+ c8:2f:0f:ac:20:38:25:d6:4e:b2:72:fc:88:f3:47:93:bc:ec:
+ 47:0c:1c:cf:22:65:40:04:70:15:fa:79:ec:09:a2:69:a9:09:
+ 78:f7:3e:84:f3:7f:fa:a2:11:ad:45:72:5d:9d:55:58:fa:b1:
+ c6:67:4e:41:b4:bd:88:a0:e2:55:ae:26:3a:72:78:3d:e4:ab:
+ ad:f7:83:69:24:cd:22:4f:2e:23:a1:05:19:bd:57:d3:e8:b3:
+ 3d:9f:bd:ed:0b:95:bf:e5:47:8f:da:dd:9d:6b:27:61:bd:49:
+ 15:9c:9d:6b:40:2b:54:5f:3f:56:d5:08:29:6c:46:49:2d:3f:
+ d1:91:ff:f8
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKCb/4x0e8kePDRbfMA1
-pIhqJu0LUulY5rW9/fauDwgJJO9i+xxhf4rKX9S1K0XCIR8aoe/52A2+MYi91zWO
-Dd7ovmBj9jxqzecdeDaGkaHpXC3GmpW558Nmb7UMS6qaUeqzo55X1hfJrkw/Mu8o
-Wplq3FBU9cyAUXZsUE1SAUWSr6LKp8GediQpnNFzlQqhFnMPVp3o/sK75GSZo9RG
-fXr3JdNJwNo4GHicKkBgwriYioTt0oTgOaYxZDYqWcq63MJtoqwak1gndpXqXRKN
-eqW2UDscJT917uvbEnhnRw2GSXfO9dA3A1XrmJO/8RBbh6qh73Yw4eR3VLFS6MmB
-TVsCAwEAAaOByzCByDAdBgNVHQ4EFgQUvSoAVLuJcolPJ3USqok4q6AG99EwHwYD
-VR0jBBgwFoAUvSoAVLuJcolPJ3USqok4q6AG99EwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBDfCTq3BE6
-CNdu3Yy5IRrXiNjxTJCgt2enPNKNpGhQNNuk8WnU4ItMszliEbVK3zpgh+v2eSzv
-TWeRk1+z0WMbLhJ0TuJg2MEf6LJd1FYthSdkNrDkF17RnM5W4vRo04BvRNbke1vG
-Xj7qaZ2XSw2DO6dS9XiWn68V4r9Zp19b1CHRSbL0tSaxsc900LomsS4O73Qp7fU1
-GC/Mi4A5QY/qq4FqiXG4Iua85TM0991sNwrhIad/LSn2qgLYRz+mPQ6FIFn4X0kG
-9zqauNk6CM6aYKrdcgceu4+G/Wo+3Eo/XsK35g6JdQiJ478rbMwCY+AcBCF5ZMB8
-iXMr6YVJgF70
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCmXVbBxymP
+Oh2GLF8e/4N6wESBgfcWnYRwZvga9I5Qp93SGi75bszmOXz7filUJD1KguGl1n5M
+yFi41vfSkMrZj+nIWbxzHDcZfKQr7Gje6QT6FPAHvS8/FqRQj+iJ6sEx0c5usSER
+W2ncKOeKM41AUviGjrCheqVG8o3X0S7ILw+sIDgl1k6ycvyI80eTvOxHDBzPImVA
+BHAV+nnsCaJpqQl49z6E83/6ohGtRXJdnVVY+rHGZ05BtL2IoOJVriY6cng95Kut
+94NpJM0iTy4joQUZvVfT6LM9n73tC5W/5UeP2t2daydhvUkVnJ1rQCtUXz9W1Qgp
+bEZJLT/Rkf/4
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem b/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem
index f02ac62..20ae9b5 100644
--- a/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem
+++ b/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem
@@ -1,16 +1,16 @@
-[Created by: ./generate-target-unknown-critical-extension.py]
+[Created by: generate-target-unknown-critical-extension.py]
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as critical.
-Verifying this certificate chain is expected to fail because there is an
-unrecognized critical extension.
+Certificate chain with 1 intermediate and a trusted root. The target
+certificate has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as
+critical. Verifying this certificate chain is expected to fail because there is
+an unrecognized critical extension.
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -19,38 +19,38 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c9:42:1d:0f:19:4b:d8:78:b9:3f:4d:43:a8:a9:
- 92:67:ed:f3:55:a4:f5:9e:f4:d0:21:3c:25:cc:28:
- 1d:db:22:5c:c0:eb:e8:78:fe:6c:71:72:ed:0c:cd:
- 76:80:44:dc:72:d1:92:29:7d:e8:7f:e0:42:60:d6:
- cb:b1:53:06:0d:6c:8b:f4:d3:ce:42:af:34:bc:57:
- 63:34:dd:b2:00:26:3f:a9:7f:c8:ce:f6:1a:66:75:
- db:7c:b6:57:ef:ee:3d:e7:d7:b8:38:3a:83:5d:7a:
- 63:1f:91:c4:f1:15:da:9b:e9:f7:ef:d5:d6:26:16:
- 96:c1:94:55:3f:3e:67:13:26:bf:3d:0c:93:ab:1b:
- a2:58:10:38:60:11:18:15:c5:3c:db:71:62:ef:27:
- 1f:a9:62:61:1f:f6:55:51:d9:7c:2d:b6:e3:2d:c3:
- 86:2b:cd:5c:30:d3:a0:0d:a4:e4:34:fb:bb:59:09:
- d5:7b:8f:b2:49:10:0d:d7:2d:0e:34:72:25:7b:b4:
- 0e:e9:fd:cb:ce:50:ee:d2:71:40:14:3d:06:ad:71:
- 52:43:cc:e9:77:4e:c4:8c:af:8c:a2:41:40:4a:82:
- 82:83:a2:58:e3:5e:40:fa:74:f0:fb:bd:46:aa:55:
- 9d:6d:5b:db:af:6a:1f:7c:46:cf:1a:1f:d3:17:c3:
- 02:2f
+ 00:d5:9d:3b:85:e5:81:69:52:70:67:33:4a:2b:76:
+ 6a:e5:61:db:af:e5:32:74:85:dd:54:d2:c7:76:5a:
+ 5c:38:d8:46:fc:b4:33:f5:9d:8e:80:83:ab:31:96:
+ 41:c4:c2:52:af:8c:4d:0e:5c:69:c5:5d:cc:b4:1b:
+ ef:de:61:58:88:e2:c4:bf:6a:cb:74:bd:f5:bd:61:
+ 57:1c:22:9f:6d:e8:38:c6:70:b8:1e:a5:2b:4f:35:
+ 9f:65:fc:c1:36:17:3e:d7:fa:33:21:70:fb:e0:ce:
+ ab:23:41:3f:fc:7b:74:1d:6b:ba:21:b7:5b:fd:a1:
+ 77:11:1a:8d:5b:2a:be:38:2e:79:a0:b7:2d:45:5c:
+ d7:32:fd:4c:70:f1:95:1c:38:a3:15:4f:57:f3:75:
+ 59:fe:75:14:39:ea:44:16:b9:2e:06:df:67:30:dd:
+ 5a:b1:7e:95:09:fd:12:cc:87:b1:66:fa:7e:b9:e5:
+ b5:38:0a:46:73:53:1a:b2:aa:12:e3:6d:99:56:e8:
+ c7:cc:eb:6b:00:9b:c1:ba:02:23:2b:32:be:9b:f8:
+ ab:b2:b5:be:50:f6:7f:95:b6:6b:1c:e6:ad:f1:69:
+ 5a:e0:41:1e:85:64:91:37:7b:9a:28:43:a5:ee:33:
+ 25:ab:82:97:03:07:94:b8:d3:34:95:bf:33:d2:14:
+ b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 07:DB:E2:A1:15:3D:67:0C:54:ED:D5:22:AD:DE:59:73:9E:0F:F5:24
+ B3:FD:B6:08:AB:82:83:50:E7:F0:85:51:1C:CC:78:E5:22:50:91:60
X509v3 Authority Key Identifier:
- keyid:07:D2:5E:3F:28:F7:AD:46:16:25:D0:4D:DD:6D:77:7B:26:81:89:85
+ keyid:5B:B2:D8:DC:1B:60:39:B5:6B:10:A5:70:37:93:E7:3C:F5:52:46:C8
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
@@ -59,42 +59,42 @@
1.2.3.4: critical
....
Signature Algorithm: sha256WithRSAEncryption
- 66:78:33:4b:09:c3:20:05:e2:d2:a3:7f:90:2f:96:15:b8:d0:
- ca:7e:97:c6:12:53:4b:18:92:03:77:b6:2c:8b:57:8e:84:7d:
- 14:ee:df:cc:99:0d:f9:2e:21:dd:ca:4d:00:77:87:88:4d:13:
- 28:36:4a:88:82:52:d2:b8:1d:75:67:1f:b5:0a:ea:bd:6a:b8:
- 98:79:ea:cf:6e:2c:5f:21:94:e4:a9:29:d5:37:87:58:6a:d7:
- 5b:0b:f5:35:59:c9:68:dd:f9:e7:c6:67:1a:ef:26:17:cf:89:
- e7:18:8c:be:41:c4:07:d3:b7:1a:20:44:4f:20:12:8c:2e:5a:
- 39:7c:8b:f3:12:f7:bd:b6:f1:7b:8c:48:7f:c5:29:7f:7a:9e:
- 1e:28:13:08:36:56:ca:8d:17:f2:37:ce:59:0a:e7:ca:19:90:
- c7:c8:b4:45:ab:3b:f7:0e:10:db:81:4b:2d:74:05:46:ab:5c:
- 7e:c2:88:83:87:09:4d:5a:a3:40:56:f5:d5:da:fd:a2:2d:99:
- 8c:d1:bf:0b:d0:8c:ce:79:12:0c:37:fc:b2:08:68:b2:fe:5e:
- cc:3e:99:85:40:74:27:88:7f:f6:43:0f:60:dd:b7:6e:31:e3:
- d4:39:87:8e:b1:cf:2d:b7:2f:bb:f9:ec:f8:86:96:1e:fc:68:
- 0d:45:21:2c
+ 39:19:04:31:e9:20:03:1b:e9:d3:91:25:94:68:4f:8d:07:16:
+ 08:e8:7f:99:01:37:56:8d:f4:15:6b:a8:7c:e4:3d:32:ad:3d:
+ 62:0f:5e:93:6f:b9:21:ba:e8:c3:48:13:e5:eb:ad:26:f0:9b:
+ 4c:fe:76:8e:73:a2:be:01:b5:48:7c:11:7e:cc:47:4b:0c:0c:
+ 17:65:54:ab:0e:79:6c:e5:75:67:52:ab:f7:26:97:36:3d:71:
+ 6d:88:54:b9:ef:b1:00:42:56:64:88:db:0f:9c:be:25:e0:6e:
+ 2b:df:c6:55:3a:89:af:92:1c:21:71:6e:22:ab:5a:b8:de:53:
+ a1:8d:84:0f:0e:55:43:08:45:0b:fd:4a:6f:fa:e4:89:55:a0:
+ 8d:10:c0:3a:06:42:7c:f1:b8:7a:19:a7:61:cc:c0:b1:e2:f1:
+ 14:d5:bd:ff:41:a5:50:f6:ac:a4:3f:ec:6a:6a:3e:7b:60:29:
+ f4:9d:c8:57:81:12:59:7b:0f:b2:2a:43:29:03:a5:eb:e7:e8:
+ cd:15:fe:53:07:e0:12:0a:35:29:e8:fe:7f:51:ae:19:98:d5:
+ 89:9c:05:0a:ba:51:89:0f:1f:3c:8e:2a:eb:e7:93:0a:fd:c1:
+ f3:0e:ce:67:5b:f2:73:dc:e6:2e:db:2b:88:11:3b:07:d8:ff:
+ 79:0c:6a:e1
-----BEGIN CERTIFICATE-----
MIIDnTCCAoWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQh0P
-GUvYeLk/TUOoqZJn7fNVpPWe9NAhPCXMKB3bIlzA6+h4/mxxcu0MzXaARNxy0ZIp
-feh/4EJg1suxUwYNbIv0085CrzS8V2M03bIAJj+pf8jO9hpmddt8tlfv7j3n17g4
-OoNdemMfkcTxFdqb6ffv1dYmFpbBlFU/PmcTJr89DJOrG6JYEDhgERgVxTzbcWLv
-Jx+pYmEf9lVR2XwttuMtw4YrzVww06ANpOQ0+7tZCdV7j7JJEA3XLQ40ciV7tA7p
-/cvOUO7ScUAUPQatcVJDzOl3TsSMr4yiQUBKgoKDoljjXkD6dPD7vUaqVZ1tW9uv
-ah98Rs8aH9MXwwIvAgMBAAGjgfkwgfYwHQYDVR0OBBYEFAfb4qEVPWcMVO3VIq3e
-WXOeD/UkMB8GA1UdIwQYMBaAFAfSXj8o961GFiXQTd1td3smgYmFMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAOBgMqAwQBAf8EBAECAwQwDQYJKoZIhvcNAQELBQADggEB
-AGZ4M0sJwyAF4tKjf5AvlhW40Mp+l8YSU0sYkgN3tiyLV46EfRTu38yZDfkuId3K
-TQB3h4hNEyg2SoiCUtK4HXVnH7UK6r1quJh56s9uLF8hlOSpKdU3h1hq11sL9TVZ
-yWjd+efGZxrvJhfPiecYjL5BxAfTtxogRE8gEowuWjl8i/MS97228XuMSH/FKX96
-nh4oEwg2VsqNF/I3zlkK58oZkMfItEWrO/cOENuBSy10BUarXH7CiIOHCU1ao0BW
-9dXa/aItmYzRvwvQjM55Egw3/LIIaLL+Xsw+mYVAdCeIf/ZDD2Ddt24x49Q5h46x
-zy23L7v57PiGlh78aA1FISw=
+ADkZBDHpIAMb6dORJZRoT40HFgjof5kBN1aN9BVrqHzkPTKtPWIPXpNvuSG66MNI
+E+XrrSbwm0z+do5zor4BtUh8EX7MR0sMDBdlVKsOeWzldWdSq/cmlzY9cW2IVLnv
+sQBCVmSI2w+cviXgbivfxlU6ia+SHCFxbiKrWrjeU6GNhA8OVUMIRQv9Sm/65IlV
+oI0QwDoGQnzxuHoZp2HMwLHi8RTVvf9BpVD2rKQ/7GpqPntgKfSdyFeBEll7D7Iq
+QykDpevn6M0V/lMH4BIKNSno/n9RrhmY1YmcBQq6UYkPHzyOKuvnkwr9wfMOzmdb
+8nPc5i7bK4gROwfY/3kMauE=
-----END CERTIFICATE-----
Certificate:
@@ -106,35 +106,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:e1:3b:e0:9e:b3:37:a6:d2:5d:5a:cf:1d:6c:d4:
- e7:9d:92:0e:29:b6:da:7e:48:32:ea:dd:a8:6e:a5:
- 4f:d4:07:23:be:f5:b2:e2:e9:57:1b:a1:bc:67:5a:
- 27:15:9d:f7:51:07:23:d9:0a:0f:21:36:4b:b1:c3:
- 48:71:f5:f8:67:6f:a4:9c:54:8b:e8:d2:79:da:6e:
- 70:06:b8:ae:b5:6f:82:ab:89:5a:68:19:56:c7:8a:
- 93:25:f9:4b:7e:8b:de:2f:1a:92:c4:be:c4:9f:ea:
- 34:fe:95:f5:74:ab:fc:47:8b:34:7d:28:d3:7a:7b:
- 29:70:3e:aa:b9:d9:be:53:fe:79:3a:ea:79:c7:d7:
- 1d:b1:c3:47:e6:7d:8e:ed:40:2a:47:d9:71:5f:c2:
- 6c:cb:52:be:1b:83:01:de:06:97:d4:98:ea:37:67:
- f6:fb:67:69:c7:b1:fe:07:ad:be:0a:f8:c8:a8:5d:
- 98:0b:f6:02:7b:cb:19:f6:23:58:79:f9:d3:8c:a5:
- 09:73:c9:2b:ae:76:33:3f:2d:a9:49:93:39:89:92:
- bc:5e:27:1c:ae:a6:29:43:97:a1:04:d0:6c:b6:b6:
- b8:c3:62:5e:43:7c:ca:27:50:e2:91:da:bb:cc:c6:
- e5:7b:5a:31:62:77:a6:4d:6a:ee:84:ea:7a:87:de:
- a9:bd
+ 00:b9:ec:7c:da:f2:c7:b4:02:ee:82:a9:58:98:60:
+ 67:07:a2:c2:9d:2c:a1:76:50:f7:4a:0a:04:80:45:
+ 7b:3d:f6:31:fe:1d:e9:45:40:76:1d:38:df:c9:e1:
+ 42:df:13:7e:16:26:2b:41:14:6b:6e:5e:f3:39:4e:
+ 61:9d:fd:5f:bf:2a:f9:b7:cf:3f:af:34:b1:17:ef:
+ 97:1f:bf:3d:4c:0a:93:91:bd:ee:11:7a:64:ee:69:
+ 22:75:60:8b:c3:10:cd:9e:91:8a:d8:54:c7:43:f4:
+ fb:88:db:09:7a:22:5d:26:58:ab:7d:d0:41:11:47:
+ 10:62:ed:cc:e6:bb:d2:da:a4:7c:e9:0a:39:5b:9f:
+ 93:b0:06:27:50:38:ea:63:e2:6b:a0:eb:c5:d3:7f:
+ 87:71:d8:08:64:d5:87:0a:6e:59:99:d7:74:7c:da:
+ eb:30:68:9d:f8:09:31:c7:66:5f:9a:fb:2d:9b:f1:
+ c1:ff:cb:57:67:46:03:99:a3:4b:e0:bc:2b:17:f4:
+ 0b:7b:61:3f:5e:cf:c9:41:9b:15:ee:f9:90:46:ad:
+ b4:a2:86:3f:87:3c:dd:7e:97:6f:97:30:88:f8:e6:
+ 88:83:15:ad:77:6a:fd:1e:f1:ae:88:a2:f5:52:6d:
+ 6e:d9:5d:5d:c1:1b:0a:49:10:f4:5a:e8:42:53:67:
+ d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 07:D2:5E:3F:28:F7:AD:46:16:25:D0:4D:DD:6D:77:7B:26:81:89:85
+ 5B:B2:D8:DC:1B:60:39:B5:6B:10:A5:70:37:93:E7:3C:F5:52:46:C8
X509v3 Authority Key Identifier:
- keyid:C8:0F:45:73:03:B2:2C:B8:35:14:0F:C4:D7:4B:E4:E2:9D:B2:AB:CE
+ keyid:50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -149,41 +149,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 2a:af:ec:1b:fc:c9:ad:bf:ad:97:8d:ed:f4:44:87:7f:72:86:
- c0:4d:85:dd:eb:6c:d3:c7:17:df:11:0a:f5:e5:2b:c2:53:41:
- 58:73:66:da:29:8a:43:af:5e:24:b2:16:26:b6:89:7e:4a:6f:
- 46:13:05:c4:3f:13:6c:ed:b8:37:a7:a9:f6:c9:c8:b9:b3:a1:
- 7c:eb:99:57:fb:8d:12:c5:47:ff:1e:02:b2:47:dc:e9:6f:41:
- 17:0a:3b:ff:ba:14:76:cc:14:35:ec:71:b0:1a:d4:eb:b0:6c:
- a3:96:eb:7d:50:59:d7:01:a0:ee:67:b8:c8:b6:ed:78:02:b1:
- 0b:72:9c:ea:c3:3b:14:3d:89:fc:89:c2:af:6c:18:ae:b0:13:
- 31:04:a2:89:4f:a6:99:58:00:c6:00:e1:39:79:d4:31:0b:0f:
- d5:92:86:a2:e7:ec:c6:b8:f2:62:21:bb:0d:d5:91:b8:f2:5f:
- db:dc:b1:b2:b2:28:fd:d5:14:54:a6:cf:8d:bd:33:ca:22:27:
- 72:d8:27:85:03:21:7f:8e:4f:2d:e6:bf:22:08:86:03:a8:f3:
- 9f:42:2f:81:8f:1e:44:39:e3:23:b2:9d:3d:64:7e:e2:b3:93:
- 8d:46:a0:b7:08:4e:d5:e6:14:af:1d:5d:b6:74:7c:91:36:37:
- 0c:c0:ab:14
+ 12:72:ee:b6:62:1b:0d:70:52:a6:02:3c:13:2a:88:cf:cb:9a:
+ e2:07:5f:cf:3e:be:75:d3:f9:a6:23:47:ca:fb:88:87:bd:e1:
+ 52:8e:8b:fe:e9:c1:7a:8c:30:91:c5:0c:fe:9d:31:fa:fc:c0:
+ d7:fe:7a:7a:18:6f:3c:67:50:b0:22:b2:09:48:ca:dc:d7:d3:
+ 29:86:eb:f4:cf:e0:3e:6e:d1:88:fa:20:93:b3:05:4c:c6:29:
+ 06:df:4a:8b:72:3e:c8:3c:2b:33:56:26:de:91:1a:11:bc:21:
+ 7b:b8:b5:b6:7c:ca:0d:f7:d6:e8:b0:a8:99:e8:7a:2b:f0:c4:
+ 78:e5:54:9e:3f:73:dc:85:41:97:11:36:45:73:b9:f2:49:8d:
+ d7:83:cf:b4:1a:ed:33:dc:0b:cd:7e:83:77:ce:aa:2f:0e:1f:
+ 4d:e0:19:96:cd:74:79:de:18:8b:ad:9f:0c:96:20:14:63:5e:
+ e2:58:8e:4a:d8:fd:59:0d:a6:a4:02:85:ac:23:d4:43:b2:da:
+ 2d:6b:87:79:9e:2e:1e:f4:d3:95:ef:3d:91:7a:f7:17:16:c7:
+ 9f:1f:b7:42:7e:f4:fa:d9:81:18:26:23:03:1e:86:99:7d:28:
+ ef:a3:ac:be:bb:55:fa:38:62:3c:e6:6e:47:4b:f1:45:ef:de:
+ 38:ea:c3:a3
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TvgnrM3
-ptJdWs8dbNTnnZIOKbbafkgy6t2obqVP1AcjvvWy4ulXG6G8Z1onFZ33UQcj2QoP
-ITZLscNIcfX4Z2+knFSL6NJ52m5wBriutW+Cq4laaBlWx4qTJflLfoveLxqSxL7E
-n+o0/pX1dKv8R4s0fSjTenspcD6qudm+U/55Oup5x9cdscNH5n2O7UAqR9lxX8Js
-y1K+G4MB3gaX1JjqN2f2+2dpx7H+B62+CvjIqF2YC/YCe8sZ9iNYefnTjKUJc8kr
-rnYzPy2pSZM5iZK8XiccrqYpQ5ehBNBstra4w2JeQ3zKJ1Dikdq7zMble1oxYnem
-TWruhOp6h96pvQIDAQABo4HLMIHIMB0GA1UdDgQWBBQH0l4/KPetRhYl0E3dbXd7
-JoGJhTAfBgNVHSMEGDAWgBTID0VzA7IsuDUUD8TXS+TinbKrzjA3BggrBgEFBQcB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-ACqv7Bv8ya2/rZeN7fREh39yhsBNhd3rbNPHF98RCvXlK8JTQVhzZtopikOvXiSy
-Fia2iX5Kb0YTBcQ/E2ztuDenqfbJyLmzoXzrmVf7jRLFR/8eArJH3OlvQRcKO/+6
-FHbMFDXscbAa1OuwbKOW631QWdcBoO5nuMi27XgCsQtynOrDOxQ9ifyJwq9sGK6w
-EzEEoolPpplYAMYA4Tl51DELD9WShqLn7Ma48mIhuw3VkbjyX9vcsbKyKP3VFFSm
-z429M8oiJ3LYJ4UDIX+OTy3mvyIIhgOo859CL4GPHkQ54yOynT1kfuKzk41GoLcI
-TtXmFK8dXbZ0fJE2NwzAqxQ=
+ABJy7rZiGw1wUqYCPBMqiM/LmuIHX88+vnXT+aYjR8r7iIe94VKOi/7pwXqMMJHF
+DP6dMfr8wNf+enoYbzxnULAisglIytzX0ymG6/TP4D5u0Yj6IJOzBUzGKQbfSoty
+Psg8KzNWJt6RGhG8IXu4tbZ8yg331uiwqJnoeivwxHjlVJ4/c9yFQZcRNkVzufJJ
+jdeDz7Qa7TPcC81+g3fOqi8OH03gGZbNdHneGIutnwyWIBRjXuJYjkrY/VkNpqQC
+hawj1EOy2i1rh3meLh7005XvPZF69xcWx58ft0J+9PrZgRgmIwMehpl9KO+jrL67
+Vfo4YjzmbkdL8UXv3jjqw6M=
-----END CERTIFICATE-----
Certificate:
@@ -200,30 +200,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:dc:6a:1a:05:36:f1:a3:7c:28:e9:97:2f:7b:85:
- d5:c1:91:33:0a:72:2d:bb:45:ae:c6:29:54:22:05:
- c2:e9:f4:be:f2:39:ec:e0:64:66:1d:e3:c9:42:3e:
- 6c:c8:3b:65:0a:e4:2c:74:e4:c9:17:c8:8b:27:6e:
- c0:4c:9a:b4:85:ae:ff:3f:e3:1e:d0:21:1c:8b:84:
- e0:3b:f6:59:00:a7:ab:59:f3:58:67:d7:af:97:74:
- a9:b1:1f:78:80:ad:e3:09:31:81:c2:11:55:10:d0:
- 93:ca:eb:de:a7:72:76:09:33:6a:89:f9:51:b1:de:
- ca:4a:48:e8:9f:1c:5f:df:bc:7d:a7:f5:27:6b:77:
- a3:53:e5:c3:e4:3d:9e:82:72:9e:d2:1b:76:52:8c:
- f0:53:b6:98:5f:6c:54:1b:da:9a:72:14:ee:c3:51:
- b4:c7:6b:f0:75:b2:2c:6e:b4:b7:29:54:92:ab:69:
- 57:af:3c:6d:96:e8:05:c8:a4:d0:7a:c2:42:7d:8b:
- 7f:3c:8f:9d:1d:c1:35:af:41:7b:f5:0e:60:88:72:
- 90:22:ac:37:2f:7b:b4:47:01:62:b8:fe:73:4b:d2:
- 7b:56:8d:b2:37:d3:18:2f:dc:fb:d1:fb:e9:14:19:
- b1:d8:76:eb:34:d2:c0:40:a8:22:68:33:44:a7:84:
- 90:e1
+ 00:a9:09:72:27:8b:f5:e4:bb:33:ee:14:1d:da:11:
+ 7c:b1:f1:53:3a:a3:77:3f:b2:f5:1f:b6:23:a3:69:
+ f8:9d:52:97:4c:92:af:07:46:c5:82:3f:97:a5:b2:
+ fc:e0:b3:3e:29:53:e5:75:07:04:30:7b:bb:55:a3:
+ af:ec:c3:bd:a0:c5:f1:58:4b:a8:5a:77:49:c7:fc:
+ a2:13:97:5c:3a:95:58:9b:95:4c:a0:18:b3:3a:18:
+ 1d:fe:5f:c1:c7:9b:d3:9a:0d:f3:4c:a6:3d:28:21:
+ 50:9d:ae:90:ae:aa:96:23:d6:4f:9b:ec:ff:59:67:
+ 0a:ff:8a:89:df:bc:99:ff:f6:75:b5:da:c7:79:d8:
+ 54:c8:f3:96:3a:c6:e9:60:0c:ee:9e:52:e1:e9:5f:
+ 58:1e:29:a3:1a:c3:4f:91:8c:2e:85:33:87:f0:c7:
+ c6:74:91:cc:fb:dd:ca:1e:71:6f:e2:c1:41:bc:ef:
+ e8:7f:48:07:a9:5c:aa:21:60:43:fd:3e:98:8b:4c:
+ 8d:95:55:48:3b:35:1a:2a:f4:e3:ef:85:01:11:c4:
+ f4:a3:15:e3:68:df:bb:94:f9:26:10:35:83:96:83:
+ 00:ce:cf:71:d4:e9:01:18:80:c2:dd:f0:9d:52:f6:
+ fa:11:de:a1:7f:79:d9:13:a6:eb:33:3e:04:57:b6:
+ 75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C8:0F:45:73:03:B2:2C:B8:35:14:0F:C4:D7:4B:E4:E2:9D:B2:AB:CE
+ 50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
X509v3 Authority Key Identifier:
- keyid:C8:0F:45:73:03:B2:2C:B8:35:14:0F:C4:D7:4B:E4:E2:9D:B2:AB:CE
+ keyid:50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -238,41 +238,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 54:39:78:5b:30:97:aa:99:fb:e5:0a:39:27:2a:ea:ad:9f:37:
- 3e:aa:5a:b8:c4:51:66:83:6e:36:5c:c3:1b:da:de:cd:a7:6e:
- bd:55:47:7c:3e:53:12:6a:51:02:13:c2:98:03:32:b6:5b:d9:
- 5e:26:b2:9a:d1:21:ca:39:cd:20:be:ad:d8:3a:23:a2:de:d7:
- 18:b2:99:bb:d4:1a:82:43:7c:6e:20:3c:01:f1:22:5f:72:ac:
- 43:9a:87:07:37:5d:a8:34:26:19:89:aa:f3:18:e3:ee:c6:67:
- 43:49:64:e4:b3:d8:2c:11:8c:f7:8b:48:7f:fd:e1:6b:e9:a5:
- 87:55:bf:f1:9d:54:fe:b5:7f:c4:5c:8b:08:cf:4f:47:21:58:
- 06:5e:ab:40:be:b7:28:0c:27:55:82:6b:e8:17:5e:dd:f8:79:
- 61:f2:7e:18:59:7a:24:7e:e3:08:3c:d9:d1:81:73:36:51:99:
- a1:ea:bf:18:ff:94:40:d7:ff:5f:1a:8a:b1:ae:78:c1:91:7b:
- 55:1a:d8:b1:91:02:b6:5e:94:32:84:5f:77:f8:89:89:00:5c:
- 74:be:77:1b:95:3e:60:2d:6a:67:a3:e9:42:03:51:af:1f:10:
- d8:21:6f:36:29:33:72:90:f4:7e:05:17:bb:a5:aa:fb:d6:56:
- fc:40:2e:0e
+ 3d:e1:85:32:4c:43:1e:f2:0d:ff:d3:ec:90:97:7d:8f:9c:16:
+ b1:6e:cb:55:f1:4f:d9:46:1c:c8:d7:3c:3e:8c:2c:8a:21:b8:
+ 38:a4:a9:a8:ac:69:51:32:3c:99:57:f8:73:2a:56:4a:ba:6e:
+ 6a:a8:89:f0:03:14:d2:7f:d2:22:55:84:47:e7:05:9c:3b:72:
+ 5d:39:02:b0:fc:68:90:14:02:12:d8:9b:85:1c:cf:77:92:c7:
+ 73:80:38:e4:f4:f9:72:b7:dd:ca:0f:3d:f2:1c:6a:82:1f:21:
+ 90:d3:e3:77:e5:ee:e9:0e:23:9e:69:f6:29:38:51:4f:e9:73:
+ 7d:3d:32:54:b2:96:04:9b:62:36:99:8b:ea:9c:3f:87:7f:5e:
+ e8:ed:28:c8:15:ac:59:f8:f5:d9:3b:b3:fd:d4:a9:e4:55:1b:
+ 07:ee:d9:18:77:d4:68:8d:b0:ce:a3:60:fe:60:2c:ca:b4:2f:
+ 08:8a:19:1a:fc:a3:6b:1b:b4:72:28:7a:63:cc:cc:cd:18:ae:
+ 99:86:4d:67:12:48:a6:33:f3:19:ce:fa:5a:a5:d7:0d:4d:50:
+ c6:1f:f2:d9:e6:41:d6:29:4a:a6:3c:ff:80:4f:e6:e8:90:f5:
+ ab:cb:bf:93:3b:90:da:e6:fb:d5:59:c3:9f:ec:91:bf:3e:0a:
+ a3:23:ef:ee
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANxqGgU28aN8KOmXL3uF
-1cGRMwpyLbtFrsYpVCIFwun0vvI57OBkZh3jyUI+bMg7ZQrkLHTkyRfIiyduwEya
-tIWu/z/jHtAhHIuE4Dv2WQCnq1nzWGfXr5d0qbEfeICt4wkxgcIRVRDQk8rr3qdy
-dgkzaon5UbHeykpI6J8cX9+8faf1J2t3o1Plw+Q9noJyntIbdlKM8FO2mF9sVBva
-mnIU7sNRtMdr8HWyLG60tylUkqtpV688bZboBcik0HrCQn2LfzyPnR3BNa9Be/UO
-YIhykCKsNy97tEcBYrj+c0vSe1aNsjfTGC/c+9H76RQZsdh26zTSwECoImgzRKeE
-kOECAwEAAaOByzCByDAdBgNVHQ4EFgQUyA9FcwOyLLg1FA/E10vk4p2yq84wHwYD
-VR0jBBgwFoAUyA9FcwOyLLg1FA/E10vk4p2yq84wNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBUOXhbMJeq
-mfvlCjknKuqtnzc+qlq4xFFmg242XMMb2t7Np269VUd8PlMSalECE8KYAzK2W9le
-JrKa0SHKOc0gvq3YOiOi3tcYspm71BqCQ3xuIDwB8SJfcqxDmocHN12oNCYZiarz
-GOPuxmdDSWTks9gsEYz3i0h//eFr6aWHVb/xnVT+tX/EXIsIz09HIVgGXqtAvrco
-DCdVgmvoF17d+Hlh8n4YWXokfuMIPNnRgXM2UZmh6r8Y/5RA1/9fGoqxrnjBkXtV
-GtixkQK2XpQyhF93+ImJAFx0vncblT5gLWpno+lCA1GvHxDYIW82KTNykPR+BRe7
-par71lb8QC4O
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA94YUyTEMe
+8g3/0+yQl32PnBaxbstV8U/ZRhzI1zw+jCyKIbg4pKmorGlRMjyZV/hzKlZKum5q
+qInwAxTSf9IiVYRH5wWcO3JdOQKw/GiQFAIS2JuFHM93ksdzgDjk9Plyt93KDz3y
+HGqCHyGQ0+N35e7pDiOeafYpOFFP6XN9PTJUspYEm2I2mYvqnD+Hf17o7SjIFaxZ
++PXZO7P91KnkVRsH7tkYd9RojbDOo2D+YCzKtC8Iihka/KNrG7RyKHpjzMzNGK6Z
+hk1nEkimM/MZzvpapdcNTVDGH/LZ5kHWKUqmPP+AT+bokPWry7+TO5Da5vvVWcOf
+7JG/PgqjI+/u
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem b/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
index 9d162b0..e027308 100644
--- a/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
+++ b/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cd:40:90:3b:6e:2e:d4:5d:a8:08:3e:d4:69:a0:
- ec:3b:62:99:ec:81:30:1b:6e:d0:92:8b:bd:df:17:
- 3a:fb:ce:bd:2a:32:5b:bb:5e:da:53:6c:b9:3d:4b:
- a8:0b:12:41:61:d3:f9:3f:23:b9:71:3f:33:8a:bf:
- 57:48:bd:99:e1:5d:c7:99:72:fd:ac:f4:4f:e1:cd:
- ca:b8:0c:81:57:64:c5:56:1f:d9:ed:f8:df:c6:60:
- 70:82:ee:b5:23:4a:a4:b5:d6:b4:e3:84:74:c9:ca:
- da:d7:a7:11:51:c4:56:36:6c:b4:53:0e:35:e5:63:
- fa:fd:75:df:72:01:31:17:e9:4d:35:8c:ae:a9:c1:
- 3b:ae:ac:06:75:e0:77:2b:36:97:e5:bb:99:34:b6:
- dc:f4:11:f6:2f:33:4e:db:4b:73:18:78:51:e6:12:
- d1:be:94:2a:02:33:d9:bc:8a:36:dc:12:f0:2f:ae:
- 57:4b:66:f0:ba:e6:1b:65:01:de:95:06:63:22:9b:
- d0:58:42:55:99:34:06:ec:5a:00:f2:77:ed:71:23:
- 24:7d:66:9a:e0:8c:d3:64:91:0a:a6:5b:36:43:36:
- e3:07:33:a0:c3:fa:46:9c:3e:81:b2:2c:a6:51:92:
- a7:7a:01:cb:95:1a:ea:cf:3c:fa:93:2d:81:5b:29:
- 98:d5
+ 00:95:c5:73:7e:a9:8f:9f:25:a3:b1:9f:29:c6:2e:
+ d6:b2:3d:5b:a4:10:08:53:40:f7:91:79:45:96:d0:
+ 66:85:85:ea:56:e6:db:07:fd:82:1d:e3:e6:11:f2:
+ da:13:64:45:bf:c6:e1:a7:4c:da:29:e7:ba:2f:27:
+ d8:cd:59:3d:69:a3:af:d6:64:4b:3e:a4:12:07:5d:
+ d4:7d:07:85:6d:9c:9d:fe:fd:8f:ff:74:b3:c9:c9:
+ 86:64:7c:ee:ca:74:1b:2f:3f:7c:37:8b:d9:fa:05:
+ 0a:3a:9b:93:45:d0:8d:16:3e:7a:ce:0b:bb:8f:1b:
+ cc:15:4b:a2:76:08:f5:fb:e0:98:cc:1d:a4:1a:c1:
+ f5:23:b0:28:1c:fe:5f:a4:24:68:59:fc:1d:63:bc:
+ 60:9a:a6:16:2c:db:0d:66:9d:d7:6e:13:6a:53:8c:
+ 5b:61:a7:3f:9f:be:c8:2a:f9:ce:ea:47:d2:d2:1b:
+ 95:de:af:5d:b0:39:3d:71:f5:be:5f:80:bd:3b:3e:
+ 2e:79:e8:a2:de:9c:2b:da:e5:88:cd:4e:9c:cf:cd:
+ bc:88:2e:cc:9e:3b:e4:52:2b:49:0f:31:90:3f:15:
+ 0d:b5:68:ea:5e:7e:6e:f9:6c:ba:57:bd:41:33:51:
+ 27:66:f9:2b:3f:ae:7c:87:07:a1:19:a5:0f:ba:bd:
+ f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 7F:F7:32:82:5E:B7:BD:FB:F8:64:38:93:2A:B1:6E:10:D6:4A:B4:28
+ 5E:72:8E:7C:0B:A6:A7:E8:2C:3E:36:CA:37:EF:8E:4E:46:CB:97:34
X509v3 Authority Key Identifier:
- keyid:E1:EB:47:46:C2:78:53:C4:B6:58:28:94:20:81:58:06:93:17:36:7F
+ keyid:DF:46:5C:25:13:E9:22:B2:C9:E4:1A:32:22:C4:97:1F:E6:0C:55:AA
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 80:dc:43:74:98:bf:da:2c:ea:5f:60:45:7f:d9:90:46:b1:f1:
- ba:ea:9f:e3:39:40:4e:43:51:30:f1:a6:1a:c7:52:48:ed:de:
- 2a:d8:6d:0d:b6:b2:69:a7:d7:e6:e9:4d:c3:73:c6:e5:3f:56:
- 06:04:79:d2:a5:56:b7:a6:a5:a8:a2:2c:4f:0e:fa:fe:4f:39:
- 11:5a:83:76:af:5e:0f:5d:df:0e:c6:c2:ea:79:19:04:92:a1:
- c7:57:b2:16:83:c3:44:d1:47:89:e1:14:eb:1c:2c:f0:a9:63:
- ed:31:fc:43:d0:93:c5:4c:7f:d3:68:6e:9b:81:2c:4f:70:71:
- 90:af:98:ce:f6:73:97:5b:dc:13:d3:d9:01:8e:5f:34:a8:00:
- 1d:71:89:a7:6e:12:f3:df:9d:4b:18:1f:0f:84:59:2b:7f:d0:
- 05:5d:5f:e7:97:b7:26:ab:c1:12:87:19:28:6a:43:dc:c0:76:
- 38:8a:fc:16:93:92:d3:2e:69:1f:9b:f3:1d:75:0d:32:89:f6:
- ca:a4:8c:f2:c6:0a:17:e4:29:c3:bc:a6:33:df:c2:cd:42:97:
- 28:65:1f:99:c9:6b:41:0e:4b:59:de:32:f2:1e:f7:62:88:66:
- c6:d1:e7:9a:25:78:86:7d:e3:f3:4e:f7:18:11:ce:bc:37:56:
- 78:f4:04:b1
+ 15:7a:35:37:ba:ff:11:3b:c0:ad:82:51:d0:e9:23:50:77:06:
+ 56:e0:84:94:2d:e4:76:94:d5:af:65:26:26:06:77:f2:6c:03:
+ f4:77:6c:a3:ba:92:26:c7:a0:ea:24:06:98:78:18:24:70:44:
+ 08:03:d0:ef:0b:db:d9:f2:3d:35:38:17:41:69:46:62:1a:af:
+ a7:44:be:1d:27:02:b3:79:1a:30:ab:06:79:6a:bd:3f:72:21:
+ f2:34:47:07:ef:08:69:ae:40:1f:61:68:a7:a8:a8:5c:85:6e:
+ 39:61:39:ad:8a:3a:a5:d8:64:94:bd:e2:dc:1f:68:45:f0:2c:
+ bf:08:d0:74:75:1c:80:30:86:87:b0:f4:eb:69:e8:16:52:45:
+ bc:c3:3b:08:c9:90:9f:f8:c9:01:9b:2f:29:2b:dc:2c:af:59:
+ cb:3e:07:8a:e7:e0:ca:64:2a:43:39:bf:a5:0e:d6:14:08:e9:
+ 9a:c1:76:7d:fb:a1:39:05:a6:43:0a:ba:ed:70:5b:f5:b8:ac:
+ 15:91:a4:37:24:c7:1e:d2:69:41:08:e2:2f:76:bb:e1:f8:b9:
+ 0d:7a:a9:57:af:25:8c:5c:73:f2:d8:2b:a6:23:c8:42:b4:28:
+ ed:fe:79:2b:11:4a:2e:3c:ef:3f:13:e6:51:68:d8:1a:c3:3b:
+ b3:22:62:c9
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQJA7
-bi7UXagIPtRpoOw7YpnsgTAbbtCSi73fFzr7zr0qMlu7XtpTbLk9S6gLEkFh0/k/
-I7lxPzOKv1dIvZnhXceZcv2s9E/hzcq4DIFXZMVWH9nt+N/GYHCC7rUjSqS11rTj
-hHTJytrXpxFRxFY2bLRTDjXlY/r9dd9yATEX6U01jK6pwTuurAZ14HcrNpflu5k0
-ttz0EfYvM07bS3MYeFHmEtG+lCoCM9m8ijbcEvAvrldLZvC65htlAd6VBmMim9BY
-QlWZNAbsWgDyd+1xIyR9ZprgjNNkkQqmWzZDNuMHM6DD+kacPoGyLKZRkqd6AcuV
-GurPPPqTLYFbKZjVAgMBAAGjgekwgeYwHQYDVR0OBBYEFH/3MoJet737+GQ4kyqx
-bhDWSrQoMB8GA1UdIwQYMBaAFOHrR0bCeFPEtlgolCCBWAaTFzZ/MD8GCCsGAQUF
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVxXN+
+qY+fJaOxnynGLtayPVukEAhTQPeReUWW0GaFhepW5tsH/YId4+YR8toTZEW/xuGn
+TNop57ovJ9jNWT1po6/WZEs+pBIHXdR9B4VtnJ3+/Y//dLPJyYZkfO7KdBsvP3w3
+i9n6BQo6m5NF0I0WPnrOC7uPG8wVS6J2CPX74JjMHaQawfUjsCgc/l+kJGhZ/B1j
+vGCaphYs2w1mndduE2pTjFthpz+fvsgq+c7qR9LSG5Xer12wOT1x9b5fgL07Pi55
+6KLenCva5YjNTpzPzbyILsyeO+RSK0kPMZA/FQ21aOpefm75bLpXvUEzUSdm+Ss/
+rnyHB6EZpQ+6vfi3AgMBAAGjgekwgeYwHQYDVR0OBBYEFF5yjnwLpqfoLD42yjfv
+jk5Gy5c0MB8GA1UdIwQYMBaAFN9GXCUT6SKyyeQaMiLElx/mDFWqMD8GCCsGAQUF
BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAgNxDdJi/2izqX2BFf9mQ
-RrHxuuqf4zlATkNRMPGmGsdSSO3eKthtDbayaafX5ulNw3PG5T9WBgR50qVWt6al
-qKIsTw76/k85EVqDdq9eD13fDsbC6nkZBJKhx1eyFoPDRNFHieEU6xws8Klj7TH8
-Q9CTxUx/02hum4EsT3BxkK+YzvZzl1vcE9PZAY5fNKgAHXGJp24S89+dSxgfD4RZ
-K3/QBV1f55e3JqvBEocZKGpD3MB2OIr8FpOS0y5pH5vzHXUNMon2yqSM8sYKF+Qp
-w7ymM9/CzUKXKGUfmclrQQ5LWd4y8h73YohmxtHnmiV4hn3j8073GBHOvDdWePQE
-sQ==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-----END CERTIFICATE-----
Certificate:
@@ -103,35 +103,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c8:7f:42:62:ee:29:ef:bb:58:84:48:c3:aa:61:
- ca:32:b1:ec:f0:e6:34:0b:f4:7e:d2:21:46:bb:bb:
- b5:fb:43:ef:e8:66:88:2e:a3:86:4f:2e:95:51:f8:
- 82:dd:c4:7a:9f:3b:6e:81:4d:32:eb:a6:c7:05:4a:
- 1d:f1:bd:31:9a:2d:45:0b:2e:a9:9b:d4:13:a4:55:
- 40:1c:12:db:4b:76:2b:31:cc:8b:fb:f7:a4:52:e1:
- de:f7:0f:b8:17:47:a4:0a:1e:53:b9:7c:a6:cc:ac:
- ed:40:72:d1:9c:93:85:05:2e:77:1e:60:ab:7d:fc:
- 46:0f:f1:47:65:09:53:62:c6:90:db:5d:4e:ee:cd:
- e9:ea:f0:18:f0:ba:a3:91:e2:bf:7b:24:e9:eb:13:
- 48:4e:05:63:f4:40:b8:f1:84:7b:d6:91:e9:90:50:
- c2:7a:f7:44:2e:70:ad:73:c1:5a:3c:32:5e:3c:9b:
- 15:5f:9a:b2:48:03:50:a6:72:2f:10:94:81:e5:27:
- bf:28:01:6a:a2:ef:3f:6c:10:b0:a2:02:72:27:d8:
- 1c:0c:d4:4d:06:55:48:19:ab:6d:67:56:cd:2d:55:
- 63:e5:50:63:02:7d:cc:c6:28:ef:29:ed:db:50:f2:
- 31:23:dd:52:f3:27:7e:fd:e1:5f:6f:f5:0f:69:58:
- 2b:01
+ 00:ba:c2:3e:70:32:82:15:bd:6f:24:c3:e0:9f:a9:
+ af:46:01:cb:23:03:07:17:d8:73:73:d0:8d:46:88:
+ 3f:9b:40:30:ea:cb:76:d1:dc:e5:79:c6:ed:5e:94:
+ 68:49:fe:8e:be:ff:74:b4:b1:a0:fd:ec:3f:4c:f5:
+ 26:40:97:d8:b2:fd:a8:e1:9a:1e:47:48:58:8a:39:
+ 0f:a8:53:76:1d:d8:55:b7:ff:15:7a:1a:28:70:a7:
+ 50:6f:f7:2f:d8:dd:22:bf:08:32:82:66:33:fd:7d:
+ df:55:7f:71:5b:bd:c0:c6:f4:cd:a4:52:30:a9:bd:
+ a1:a3:61:e3:7a:93:40:a7:41:b3:10:43:0f:79:12:
+ 50:34:0a:a4:ad:07:53:e6:7a:b6:8c:a5:00:82:0c:
+ 9f:eb:c9:f8:51:68:2c:4e:3a:da:7e:7d:6d:15:b1:
+ ff:37:dd:e6:25:cf:5e:8f:fe:b1:09:7e:f8:60:3b:
+ 20:3e:99:64:e1:9a:58:ee:01:28:71:cf:ac:dd:66:
+ 40:0d:d9:7b:85:8f:f2:35:90:2a:75:26:96:b4:3a:
+ f2:ef:5c:06:f1:2c:ec:07:83:d6:23:a4:ab:f4:28:
+ ad:1f:8d:cf:e2:d8:b9:1f:48:76:6f:7c:e7:8a:17:
+ 5b:b5:9b:ff:17:13:6e:f4:05:47:78:91:c7:7a:03:
+ 33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C4:E1:12:23:5E:5D:61:E9:F8:C1:9E:0E:57:94:54:97:B2:4E:0B:65
+ D0:3F:2D:C4:6A:01:B8:7A:61:4F:B0:35:18:E6:D0:F9:55:5D:7B:B7
X509v3 Authority Key Identifier:
- keyid:81:56:F3:D5:96:CB:97:DE:87:18:26:E0:E7:E9:59:9E:58:FC:8B:76
+ keyid:D4:FF:80:DD:86:D2:53:18:54:65:B3:62:9A:07:67:BB:21:7D:19:77
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -146,41 +146,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 4a:7b:2a:d9:aa:69:78:28:dc:2d:46:22:f2:ec:d3:09:b7:b7:
- 91:2b:6d:a0:07:b9:8a:9e:5c:11:73:ba:1d:61:ed:07:b2:a3:
- 7e:3c:48:f3:95:59:ed:98:e9:40:9c:88:47:47:23:9e:37:ce:
- f3:49:b5:53:51:be:4a:8b:77:ac:ef:76:2a:3b:11:d1:92:61:
- cc:f4:04:85:09:c2:83:db:21:cc:20:a6:49:3d:54:da:e8:ba:
- e2:0f:f6:15:fd:cb:83:8a:82:17:b2:c3:43:dd:a4:0a:42:61:
- 59:75:5c:c6:5b:7e:5f:97:e6:ea:7e:bc:19:17:5b:df:9e:72:
- a4:31:fd:64:6d:34:5b:05:39:5d:f3:2d:35:44:0a:cc:da:cb:
- af:86:06:14:0f:ae:47:9e:ff:f1:55:dc:32:4b:9b:43:df:60:
- d9:ee:0a:09:95:08:43:c3:c3:18:30:c6:56:f1:d0:b9:17:c9:
- 19:5f:a5:c3:a2:76:c0:ad:b2:73:24:0e:34:03:f0:83:17:a5:
- ac:b1:4f:9e:38:3d:7d:82:f6:90:ca:43:f5:37:c4:1a:19:2e:
- a5:a9:40:64:0a:fb:d1:eb:42:c2:42:f1:08:26:6b:d6:c3:59:
- bc:14:99:95:b3:62:80:92:93:49:4f:95:fe:71:e8:7c:3d:ee:
- 21:99:7a:aa
+ 44:69:05:6c:d0:10:da:90:f7:62:5f:8a:80:93:39:f0:ee:6f:
+ c5:18:df:47:40:d0:b4:73:8a:d6:68:7f:99:92:e4:34:bd:ef:
+ d7:c8:8c:d9:09:b1:24:06:86:ab:9f:58:1a:d3:38:73:9b:80:
+ f3:9b:a9:8c:db:ef:0d:94:54:91:45:04:42:9b:98:3c:fc:39:
+ 53:85:36:1d:06:59:c5:1e:50:7c:1e:e0:ec:ad:d8:44:98:13:
+ a2:6b:bc:10:39:3e:3e:5b:3a:30:de:2a:a0:08:05:21:cd:d1:
+ 57:50:05:c2:84:c3:e8:0d:69:59:76:3d:32:aa:9a:82:0d:59:
+ c6:1a:8e:fa:08:3c:18:08:b2:8b:f2:39:05:02:0e:af:7c:28:
+ 7e:16:44:d8:b2:e0:32:19:d7:c5:54:4c:e9:87:e0:1f:30:73:
+ 6a:2b:ef:9f:9d:5e:31:a6:02:39:9d:5b:e1:c5:b6:d1:cd:95:
+ ba:ee:5c:3a:97:58:49:ef:26:cf:e6:eb:72:47:5b:6e:f4:cc:
+ 3b:1c:08:c7:2e:89:f6:91:ef:94:e3:33:83:7c:9b:d8:10:01:
+ d7:ac:0f:4c:c6:01:c7:0d:84:48:bd:a7:e8:4d:09:40:a8:b2:
+ f3:0a:21:71:74:0f:ab:ca:23:aa:99:80:6d:0c:42:73:14:00:
+ 31:1e:67:51
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH9CYu4p
-77tYhEjDqmHKMrHs8OY0C/R+0iFGu7u1+0Pv6GaILqOGTy6VUfiC3cR6nztugU0y
-66bHBUod8b0xmi1FCy6pm9QTpFVAHBLbS3YrMcyL+/ekUuHe9w+4F0ekCh5TuXym
-zKztQHLRnJOFBS53HmCrffxGD/FHZQlTYsaQ211O7s3p6vAY8LqjkeK/eyTp6xNI
-TgVj9EC48YR71pHpkFDCevdELnCtc8FaPDJePJsVX5qySANQpnIvEJSB5Se/KAFq
-ou8/bBCwogJyJ9gcDNRNBlVIGattZ1bNLVVj5VBjAn3MxijvKe3bUPIxI91S8yd+
-/eFfb/UPaVgrAQIDAQABo4HLMIHIMB0GA1UdDgQWBBTE4RIjXl1h6fjBng5XlFSX
-sk4LZTAfBgNVHSMEGDAWgBSBVvPVlsuX3ocYJuDn6VmeWPyLdjA3BggrBgEFBQcB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-AEp7KtmqaXgo3C1GIvLs0wm3t5ErbaAHuYqeXBFzuh1h7Qeyo348SPOVWe2Y6UCc
-iEdHI543zvNJtVNRvkqLd6zvdio7EdGSYcz0BIUJwoPbIcwgpkk9VNrouuIP9hX9
-y4OKgheyw0PdpApCYVl1XMZbfl+X5up+vBkXW9+ecqQx/WRtNFsFOV3zLTVECsza
-y6+GBhQPrkee//FV3DJLm0PfYNnuCgmVCEPDwxgwxlbx0LkXyRlfpcOidsCtsnMk
-DjQD8IMXpayxT544PX2C9pDKQ/U3xBoZLqWpQGQK+9HrQsJC8Qgma9bDWbwUmZWz
-YoCSk0lPlf5x6Hw97iGZeqo=
+AERpBWzQENqQ92JfioCTOfDub8UY30dA0LRzitZof5mS5DS979fIjNkJsSQGhquf
+WBrTOHObgPObqYzb7w2UVJFFBEKbmDz8OVOFNh0GWcUeUHwe4Oyt2ESYE6JrvBA5
+Pj5bOjDeKqAIBSHN0VdQBcKEw+gNaVl2PTKqmoINWcYajvoIPBgIsovyOQUCDq98
+KH4WRNiy4DIZ18VUTOmH4B8wc2or75+dXjGmAjmdW+HFttHNlbruXDqXWEnvJs/m
+63JHW270zDscCMcuifaR75TjM4N8m9gQAdesD0zGAccNhEi9p+hNCUCosvMKIXF0
+D6vKI6qZgG0MQnMUADEeZ1E=
-----END CERTIFICATE-----
Certificate:
@@ -197,30 +197,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ce:b8:01:ca:69:e8:5c:e1:16:2a:54:88:85:15:
- 66:e9:09:2e:04:cf:e8:7f:98:b0:63:1a:39:b9:25:
- 0d:dd:d8:81:f6:e3:d3:3b:98:39:70:09:eb:ed:63:
- 35:91:6a:bf:c4:4e:38:fa:04:a7:1c:bd:32:92:3b:
- 5b:2b:29:f3:94:bc:b2:e6:69:7c:32:57:40:36:1b:
- 6a:1f:9d:12:10:96:db:75:2b:77:bb:50:95:0e:03:
- 65:d7:28:85:12:c8:54:89:38:be:2c:83:81:59:31:
- c7:36:d8:d8:89:28:f3:87:7d:ab:b8:24:c0:d9:43:
- a8:c8:0d:18:fa:98:4c:32:90:73:4c:86:ec:b1:c1:
- 52:1f:af:03:73:84:7c:80:ee:72:56:4e:49:91:0e:
- 1d:16:bc:ad:39:5a:dd:52:96:cb:87:09:e0:15:6a:
- a4:ac:24:5c:c0:93:13:4b:09:1e:b7:bd:a6:0b:0a:
- 94:96:5d:b5:7f:3a:ea:25:cd:c3:c5:7a:49:6a:89:
- 42:db:e6:b5:71:fc:46:45:19:d2:33:d8:e4:95:a4:
- 53:12:fd:09:f1:94:d8:24:28:d3:cc:ec:21:bd:cb:
- 46:1b:24:d9:5a:70:86:1d:cb:7f:6c:be:24:7c:e4:
- 37:72:3e:4f:c5:3e:01:68:d8:3b:ae:4a:ab:b2:90:
- 3c:cd
+ 00:c8:51:b0:c3:f3:b1:5d:6e:4a:c2:41:9e:b7:88:
+ 48:d3:62:d1:49:3a:0b:ab:c9:26:f3:8a:bb:ee:1e:
+ b8:4a:cb:9a:47:3f:8c:87:a2:81:f5:91:05:7c:47:
+ 45:d6:5f:a1:7d:e7:dd:cd:33:eb:4e:90:65:be:31:
+ d7:2d:98:03:45:48:03:03:72:8f:0f:43:3d:3a:ad:
+ cf:bc:f5:f5:bb:7d:1d:94:1d:d4:2c:b6:3b:4a:68:
+ 9e:30:54:c2:c1:69:10:f8:7c:d5:73:ae:2f:22:65:
+ 94:5c:17:1e:41:eb:5a:10:80:6c:eb:04:1d:09:0e:
+ 79:51:71:ce:e7:4f:90:23:4f:84:b5:4e:97:70:79:
+ eb:28:47:0a:8c:b8:43:a6:f5:df:4d:fd:44:46:18:
+ 06:97:6c:52:65:4a:89:25:af:73:6e:43:6a:93:b0:
+ ec:29:97:63:a4:36:95:db:71:b6:61:c3:25:0d:3f:
+ 53:2f:de:d0:b4:16:c2:b6:70:3a:34:53:02:3d:50:
+ eb:32:4a:22:62:3c:9a:74:da:b2:60:af:37:41:4c:
+ c1:df:90:74:5a:ae:5d:a4:48:dd:1b:86:06:0f:cb:
+ 3e:e5:4d:ec:62:86:04:1a:cb:0f:2a:04:a0:45:d5:
+ c1:79:9e:07:df:5d:2d:c3:0c:c4:57:0a:be:7e:41:
+ 43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 81:56:F3:D5:96:CB:97:DE:87:18:26:E0:E7:E9:59:9E:58:FC:8B:76
+ D4:FF:80:DD:86:D2:53:18:54:65:B3:62:9A:07:67:BB:21:7D:19:77
X509v3 Authority Key Identifier:
- keyid:81:56:F3:D5:96:CB:97:DE:87:18:26:E0:E7:E9:59:9E:58:FC:8B:76
+ keyid:D4:FF:80:DD:86:D2:53:18:54:65:B3:62:9A:07:67:BB:21:7D:19:77
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -235,41 +235,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 49:ab:00:40:12:3b:b6:18:a4:f7:c0:e3:94:db:49:b3:45:02:
- 45:ac:38:50:2c:4f:b9:a3:31:4f:99:e5:1a:3d:a7:76:23:1f:
- 47:83:c4:ea:11:1e:98:f4:a5:d2:d3:76:d1:e7:47:23:09:5f:
- e6:de:ef:d3:9e:aa:fa:42:4f:2e:14:2e:78:ee:0f:3f:ac:53:
- 1c:d5:7f:b2:ec:4e:34:bd:c6:10:f4:be:fa:31:e4:a3:67:7e:
- 3e:31:e7:55:ad:17:8c:b3:72:e0:19:5e:77:59:06:bb:56:8e:
- 81:ec:c8:b5:c1:95:d6:6c:53:9c:86:a0:19:72:1d:47:ea:be:
- ad:bc:4d:cd:26:f8:87:75:ff:08:1d:9a:d5:f8:7c:ae:3f:57:
- 97:3a:54:aa:90:5a:b5:93:97:3f:47:be:34:2d:14:bf:7d:fd:
- be:67:88:22:7e:b7:b5:3a:a0:3a:b0:d2:0f:9d:28:1e:fb:1a:
- c0:11:ed:ba:a6:4e:c5:6f:2a:4b:90:84:26:1d:2b:f0:14:40:
- 7a:55:22:c7:7d:39:ee:42:30:7f:b5:4a:0b:d5:1b:12:42:36:
- 62:86:b2:02:68:24:8a:c3:a6:7e:18:b1:15:5d:d4:f0:62:2c:
- cf:09:0d:7d:8f:80:a5:13:8d:9a:53:87:70:f0:94:b1:62:71:
- e3:b9:b0:d1
+ 46:ee:68:7d:1f:94:16:70:57:11:6b:6b:18:96:45:c3:d7:17:
+ 50:9b:f1:e6:b1:bf:ad:97:3f:ca:3e:75:37:4e:c6:b6:d3:68:
+ 57:f5:59:a6:44:b4:3f:e5:fe:a3:05:65:02:f5:7c:dc:da:8e:
+ 1f:2d:fb:9c:23:f0:c0:a6:fc:f5:f3:a9:80:f9:eb:64:f0:8b:
+ 2a:f1:f5:68:8d:8c:c2:37:c4:8e:d5:bb:5b:e6:fb:ec:06:f9:
+ 80:28:56:c2:de:9c:16:78:3f:a8:16:15:e9:26:72:8f:45:c3:
+ e7:d4:78:84:3c:b4:a0:72:5e:5d:09:d8:d1:7f:66:ca:74:d6:
+ 26:c0:72:c0:2a:89:fa:b4:5f:fe:92:4f:01:97:0e:81:88:01:
+ 6b:2e:ed:af:36:30:c7:62:fd:42:63:10:3f:c4:ad:eb:ee:c5:
+ fd:bc:57:08:0f:a3:0c:e5:8c:de:ab:05:b5:b4:e9:c9:d1:c8:
+ 66:e2:ea:4a:b0:33:e5:a4:47:22:67:7c:70:e9:02:e0:22:75:
+ 35:4a:39:0e:2c:27:e5:29:d6:d2:f5:39:c9:03:39:7a:35:f5:
+ ff:1d:88:8d:e1:be:6b:6b:c7:4c:0c:6d:02:d4:33:7a:f5:ea:
+ 29:55:a9:79:94:bc:a3:01:64:4a:99:99:fc:c6:e5:38:a2:8f:
+ 18:cc:e7:1f
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM64Acpp6FzhFipUiIUV
-ZukJLgTP6H+YsGMaObklDd3Ygfbj0zuYOXAJ6+1jNZFqv8ROOPoEpxy9MpI7Wysp
-85S8suZpfDJXQDYbah+dEhCW23Urd7tQlQ4DZdcohRLIVIk4viyDgVkxxzbY2Iko
-84d9q7gkwNlDqMgNGPqYTDKQc0yG7LHBUh+vA3OEfIDuclZOSZEOHRa8rTla3VKW
-y4cJ4BVqpKwkXMCTE0sJHre9pgsKlJZdtX866iXNw8V6SWqJQtvmtXH8RkUZ0jPY
-5JWkUxL9CfGU2CQo08zsIb3LRhsk2Vpwhh3Lf2y+JHzkN3I+T8U+AWjYO65Kq7KQ
-PM0CAwEAAaOByzCByDAdBgNVHQ4EFgQUgVbz1ZbLl96HGCbg5+lZnlj8i3YwHwYD
-VR0jBBgwFoAUgVbz1ZbLl96HGCbg5+lZnlj8i3YwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBJqwBAEju2
-GKT3wOOU20mzRQJFrDhQLE+5ozFPmeUaPad2Ix9Hg8TqER6Y9KXS03bR50cjCV/m
-3u/Tnqr6Qk8uFC547g8/rFMc1X+y7E40vcYQ9L76MeSjZ34+MedVrReMs3LgGV53
-WQa7Vo6B7Mi1wZXWbFOchqAZch1H6r6tvE3NJviHdf8IHZrV+HyuP1eXOlSqkFq1
-k5c/R740LRS/ff2+Z4gifre1OqA6sNIPnSge+xrAEe26pk7FbypLkIQmHSvwFEB6
-VSLHfTnuQjB/tUoL1RsSQjZihrICaCSKw6Z+GLEVXdTwYizPCQ19j4ClE42aU4dw
-8JSxYnHjubDR
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBG7mh9H5QW
+cFcRa2sYlkXD1xdQm/Hmsb+tlz/KPnU3Tsa202hX9VmmRLQ/5f6jBWUC9Xzc2o4f
+LfucI/DApvz186mA+etk8Isq8fVojYzCN8SO1btb5vvsBvmAKFbC3pwWeD+oFhXp
+JnKPRcPn1HiEPLSgcl5dCdjRf2bKdNYmwHLAKon6tF/+kk8Blw6BiAFrLu2vNjDH
+Yv1CYxA/xK3r7sX9vFcID6MM5YzeqwW1tOnJ0chm4upKsDPlpEciZ3xw6QLgInU1
+SjkOLCflKdbS9TnJAzl6NfX/HYiN4b5ra8dMDG0C1DN69eopVal5lLyjAWRKmZn8
+xuU4oo8YzOcf
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/unknown-root.pem b/net/data/verify_certificate_chain_unittest/unknown-root.pem
index a3ee2f7..1900cb0 100644
--- a/net/data/verify_certificate_chain_unittest/unknown-root.pem
+++ b/net/data/verify_certificate_chain_unittest/unknown-root.pem
@@ -1,7 +1,7 @@
[Created by: generate-unknown-root.py]
-Certificate chain with 1 intermediary, but the root is not in trust store.
-Verification is expected to fail because the final intermediary (Intermediary)
+Certificate chain with 1 intermediate, but the root is not in trust store.
+Verification is expected to fail because the final intermediate (Intermediate)
does not chain to a known root.
Certificate:
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:f3:f6:f4:c5:f5:4f:a3:17:ee:19:45:0e:97:90:
- 31:60:2a:a5:31:0d:e4:c7:f4:fa:4d:e4:99:f5:3c:
- db:ad:6b:2d:f2:8d:07:4f:dc:c1:e3:3f:53:b6:48:
- 31:8e:8e:a6:b3:d6:a4:3c:fb:21:00:01:a6:35:79:
- 50:a6:d0:43:10:8d:13:1b:6f:a9:4b:a3:9b:77:11:
- af:0f:7c:f9:f0:e6:03:c5:b5:b4:49:7a:9d:8f:a1:
- 42:89:a5:41:5d:c7:e1:7d:4a:e5:af:8f:66:ad:93:
- b0:f6:60:52:f4:0c:2d:d1:60:ca:a4:4c:fa:0d:55:
- 0d:46:60:69:10:a7:8e:06:bd:ad:28:65:63:a5:63:
- 36:d8:eb:8e:e1:cc:fd:53:76:80:d3:1d:e2:b8:46:
- f9:24:e7:3a:86:30:f9:14:34:a2:42:81:b7:2b:a4:
- 41:14:7a:9c:77:83:51:cb:b9:08:31:29:a2:b0:25:
- 92:1e:7f:43:90:1c:6a:43:ca:64:04:37:c8:26:b7:
- 7b:ae:cb:8b:2e:e7:6f:09:c4:3e:87:0d:b1:ef:70:
- 58:cd:b5:d7:c7:6b:dd:7b:3c:46:0c:4d:5f:21:1d:
- 78:b9:cf:46:5e:f8:35:48:7d:14:0b:3e:a4:2a:1c:
- 4e:78:6d:27:76:61:e5:c5:74:16:fb:f1:77:9c:f3:
- 51:7f
+ 00:a3:7b:69:ed:ad:13:3f:59:75:63:cf:2a:9e:b0:
+ 78:06:62:e2:5e:40:3f:12:2e:61:1c:7f:2e:f8:4f:
+ 0e:92:28:80:18:d8:e2:e2:f4:b4:63:84:c8:0b:4d:
+ ae:1b:f0:4d:d5:49:91:89:b9:a4:11:b3:77:72:ba:
+ 12:16:3e:29:7c:51:28:99:37:69:57:6d:3b:68:e1:
+ 58:83:c0:ad:13:af:63:2e:85:63:ab:92:11:7a:92:
+ 8b:fa:66:33:f9:3b:c9:ab:22:75:9f:6c:91:1b:22:
+ 6b:c9:2d:c8:6d:58:2b:bc:a9:f3:cf:24:8f:7a:37:
+ 9b:83:67:e5:b2:eb:ea:35:c6:9d:e4:a8:24:74:18:
+ 5b:8b:62:6b:cd:92:d7:c3:6c:b1:40:e1:2f:a3:16:
+ 52:92:df:59:70:bc:cc:37:27:8f:8e:3d:b9:fc:d6:
+ ca:fb:63:89:b3:d0:64:24:2b:97:e3:a7:bc:6f:76:
+ 7e:e6:82:36:9f:c4:ea:b2:96:60:ac:86:57:09:55:
+ d7:3b:45:a8:23:b8:b1:4a:92:f8:a9:66:1f:1a:0f:
+ c5:f6:da:4e:6d:02:56:1b:8a:9f:52:9f:bd:b5:16:
+ a6:fb:85:3d:fa:04:1d:8e:25:b4:03:9e:74:e4:98:
+ 4a:da:39:7b:d0:f2:7d:f9:f4:97:ce:d1:d8:4d:31:
+ 88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- F8:48:56:E7:65:49:C4:48:98:8E:F0:F5:EA:01:C4:01:C8:4D:56:D9
+ 94:D6:3E:50:DE:FF:47:B8:65:1A:C6:33:78:79:87:8D:F2:32:32:BA
X509v3 Authority Key Identifier:
- keyid:41:D3:BE:10:2F:EE:43:B6:25:B0:04:4E:39:CF:78:F9:0E:ED:E1:9D
+ keyid:CC:11:88:FF:DF:7E:14:06:07:B5:10:B6:C1:BC:CB:2B:65:FC:83:77
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 48:65:f4:55:86:82:85:93:a0:4d:b0:ce:b8:b2:21:f5:bf:56:
- 66:ef:e3:f5:24:52:da:a5:15:21:f7:b4:a1:7c:2f:69:de:1e:
- 6a:90:8d:98:e9:38:29:b8:51:44:7b:43:68:92:95:e4:50:7c:
- 32:94:72:6c:96:4a:77:07:ce:0c:55:df:19:50:29:e5:ee:ff:
- c4:54:c9:75:2d:c2:fd:f1:41:5c:c4:28:3c:15:df:1a:12:73:
- aa:a6:af:2a:3e:f5:a6:17:68:5b:80:d8:6d:fa:6d:37:26:a1:
- 01:0e:0a:c1:a8:ed:ef:2b:65:1c:43:4d:dd:aa:7b:e1:6d:a6:
- a6:23:66:11:58:73:f0:e2:98:d2:ba:db:94:ed:c9:fc:41:6f:
- 4b:99:7c:be:2e:e9:57:e2:c6:26:24:db:2a:02:4e:3c:7e:8b:
- d8:96:27:43:7b:b4:1e:25:2f:19:c0:e4:05:b9:5e:0e:57:29:
- 9e:81:9c:1e:d8:48:4b:d0:c8:ff:1a:a7:7f:71:4a:9f:51:0d:
- 8a:11:6e:74:86:8e:89:d8:fd:a4:69:bb:67:78:2d:2d:44:75:
- 9b:63:31:ef:b1:3e:38:11:ce:01:ae:b0:fa:a4:3f:b0:df:be:
- 13:9a:5e:11:f6:bb:eb:8e:3a:7d:09:be:76:9b:e5:d4:91:f3:
- dc:e5:23:df
+ b4:9a:15:da:2b:7d:d4:26:f2:41:a2:04:1e:13:f3:b3:28:bf:
+ a3:85:34:fc:42:b1:57:05:0f:97:e5:f5:d9:d4:0e:eb:43:e8:
+ 63:ce:5b:23:8b:48:ab:2f:25:03:81:43:ba:7e:9a:14:e4:4e:
+ 9c:5b:d3:08:56:b7:00:7c:7f:fd:9e:ab:50:ce:09:95:2c:21:
+ 00:74:22:26:83:fb:08:47:34:1b:67:0e:eb:e0:c4:ab:3d:00:
+ 76:b2:9a:b1:00:c8:d0:17:0d:2e:81:43:71:51:f8:d7:f5:ad:
+ e9:f0:81:12:2a:e0:6f:c7:10:11:d7:f4:55:73:a4:7c:cb:97:
+ 6c:fd:2b:34:bf:7e:a9:57:d8:e1:a9:05:01:5a:09:2b:49:bf:
+ bc:99:a3:a5:7c:b0:df:7a:32:0f:c2:94:0f:e0:15:f2:86:8f:
+ c3:19:44:49:02:10:56:f6:a9:58:38:7f:4d:f1:66:58:00:f9:
+ 17:18:ab:b4:0c:c1:9e:f3:8d:5d:61:4d:02:8c:3a:97:89:8d:
+ 5f:d0:98:f3:57:5c:85:35:b0:94:f8:02:7c:6f:bf:69:bf:7b:
+ 91:5a:c3:38:88:0d:ec:42:3b:b5:29:6b:0a:2d:10:19:ae:bc:
+ 6c:18:95:2e:cd:74:04:af:95:79:ab:8e:4a:cc:53:6e:4d:ad:
+ 83:58:6d:c5
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz9vTF
-9U+jF+4ZRQ6XkDFgKqUxDeTH9PpN5Jn1PNutay3yjQdP3MHjP1O2SDGOjqaz1qQ8
-+yEAAaY1eVCm0EMQjRMbb6lLo5t3Ea8PfPnw5gPFtbRJep2PoUKJpUFdx+F9SuWv
-j2atk7D2YFL0DC3RYMqkTPoNVQ1GYGkQp44Gva0oZWOlYzbY647hzP1TdoDTHeK4
-Rvkk5zqGMPkUNKJCgbcrpEEUepx3g1HLuQgxKaKwJZIef0OQHGpDymQEN8gmt3uu
-y4su528JxD6HDbHvcFjNtdfHa917PEYMTV8hHXi5z0Ze+DVIfRQLPqQqHE54bSd2
-YeXFdBb78Xec81F/AgMBAAGjgekwgeYwHQYDVR0OBBYEFPhIVudlScRImI7w9eoB
-xAHITVbZMB8GA1UdIwQYMBaAFEHTvhAv7kO2JbAETjnPePkO7eGdMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEASGX0VYaChZOgTbDOuLIh
-9b9WZu/j9SRS2qUVIfe0oXwvad4eapCNmOk4KbhRRHtDaJKV5FB8MpRybJZKdwfO
-DFXfGVAp5e7/xFTJdS3C/fFBXMQoPBXfGhJzqqavKj71phdoW4DYbfptNyahAQ4K
-wajt7ytlHENN3ap74W2mpiNmEVhz8OKY0rrblO3J/EFvS5l8vi7pV+LGJiTbKgJO
-PH6L2JYnQ3u0HiUvGcDkBbleDlcpnoGcHthIS9DI/xqnf3FKn1ENihFudIaOidj9
-pGm7Z3gtLUR1m2Mx77E+OBHOAa6w+qQ/sN++E5peEfa76446fQm+dpvl1JHz3OUj
-3w==
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAtJoV2it91CbyQaIEHhPz
+syi/o4U0/EKxVwUPl+X12dQO60PoY85bI4tIqy8lA4FDun6aFOROnFvTCFa3AHx/
+/Z6rUM4JlSwhAHQiJoP7CEc0G2cO6+DEqz0AdrKasQDI0BcNLoFDcVH41/Wt6fCB
+Eirgb8cQEdf0VXOkfMuXbP0rNL9+qVfY4akFAVoJK0m/vJmjpXyw33oyD8KUD+AV
+8oaPwxlESQIQVvapWDh/TfFmWAD5FxirtAzBnvONXWFNAow6l4mNX9CY81dchTWw
+lPgCfG+/ab97kVrDOIgN7EI7tSlrCi0QGa68bBiVLs10BK+VeauOSsxTbk2tg1ht
+xQ==
-----END CERTIFICATE-----
Certificate:
@@ -103,35 +103,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cd:6f:e8:b3:ea:d4:9e:d9:23:03:8a:4a:f3:6c:
- 84:cd:0c:28:7c:c2:07:60:89:c5:9a:9f:74:b8:d0:
- ac:e4:30:f1:4b:1c:c5:7f:9d:d2:0f:4e:e0:e5:45:
- 4a:cc:93:70:a0:df:3c:4c:fc:0c:a5:d5:c9:86:fd:
- ba:4e:67:c0:af:c3:04:98:cb:bb:f6:25:a6:af:7f:
- 7b:a3:29:b9:86:60:87:80:67:90:ab:e7:64:86:ec:
- e6:30:f6:dd:5b:3a:69:4f:b1:58:f8:4b:15:ae:13:
- c8:84:24:bf:9a:a0:6c:8a:b3:36:31:84:2f:a4:3e:
- 4a:f2:9f:07:91:a4:8b:dc:fa:5b:65:3c:4e:93:19:
- 02:a5:3a:78:5d:f2:51:bd:d7:96:16:6e:c5:8b:17:
- d0:21:77:2f:96:4a:44:c8:17:2d:73:d5:da:24:40:
- d1:a4:b7:f2:c4:b2:e2:16:6a:19:9b:72:cb:58:62:
- eb:30:2f:2f:c5:35:1c:74:2f:ba:e6:93:7e:dc:78:
- bc:ad:e3:89:c9:72:9a:f5:01:95:61:02:9f:82:40:
- f9:c1:c8:6e:36:b7:14:4a:13:36:bb:d0:1b:25:bd:
- d6:5e:11:e7:d9:ea:a7:db:6d:d3:92:98:b1:2a:c1:
- cf:00:52:c1:78:c9:0a:30:41:30:09:c8:90:0a:04:
- 8f:0d
+ 00:b6:cf:57:a5:6e:7c:9a:78:f2:c1:bd:99:eb:7c:
+ af:6a:c8:38:2e:8e:cf:e5:20:c0:f9:57:5c:e2:83:
+ 29:33:2c:b1:9d:2b:91:ce:4c:da:27:62:5f:18:08:
+ a8:f1:03:eb:0e:be:f2:1e:00:8c:63:f2:8f:d3:c1:
+ e4:df:0a:d3:d4:82:0d:6c:c4:98:87:eb:5b:81:66:
+ 43:f3:38:5e:d4:8b:91:47:70:8b:89:90:a0:0b:9d:
+ 63:56:4f:58:4b:e2:36:e1:97:df:37:71:7a:90:f5:
+ 62:2c:3e:57:71:6a:75:db:10:66:22:4c:fd:e9:a0:
+ 78:5e:4c:e3:8c:d5:c2:c9:a0:10:3d:ec:bd:7b:76:
+ 9f:5f:54:e3:c3:88:9b:d7:7f:8c:80:79:87:0f:3c:
+ aa:28:d9:f5:63:e8:f3:a5:6b:2b:e0:45:1c:af:94:
+ 00:84:b4:e4:fc:3a:5d:9c:bc:05:c2:04:b7:3a:23:
+ 84:56:66:a2:50:fc:8d:00:06:52:7f:a2:d3:9e:0b:
+ fa:d5:ba:1b:1e:10:e9:13:60:56:a6:cd:ab:67:90:
+ 66:0c:3d:71:c0:46:42:13:48:74:a8:a8:6d:0c:a8:
+ 6d:7b:6b:57:f1:ba:c0:c5:c8:cd:d9:75:20:d3:59:
+ ed:32:ed:5c:b6:63:b4:9b:0b:3a:05:7b:ad:38:70:
+ e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 41:D3:BE:10:2F:EE:43:B6:25:B0:04:4E:39:CF:78:F9:0E:ED:E1:9D
+ CC:11:88:FF:DF:7E:14:06:07:B5:10:B6:C1:BC:CB:2B:65:FC:83:77
X509v3 Authority Key Identifier:
- keyid:A7:80:43:01:58:B0:DD:7A:AD:7C:38:10:73:02:DE:2C:E6:E4:9E:A9
+ keyid:A7:26:DB:0B:03:E6:0B:32:0B:8C:34:AD:CE:60:CD:4C:89:9B:59:6E
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -146,41 +146,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 90:b6:a5:85:fe:d4:51:b9:f7:92:ae:60:80:ab:54:09:3d:63:
- 43:fd:ce:e0:ea:e3:f2:c0:db:f5:1b:a7:db:f1:b3:21:d0:e4:
- 7f:63:c1:75:13:ca:3d:6b:70:76:55:23:cc:c8:74:80:b8:82:
- c0:cd:63:41:77:4c:27:8a:32:34:f7:9d:8d:0e:9f:15:ee:22:
- 4f:ed:d7:32:f2:c9:95:bd:35:87:d8:c5:58:19:ba:06:58:a4:
- 96:bc:2d:4e:1b:ed:2f:23:ac:b1:2f:b7:e0:88:a9:fc:68:c0:
- 8d:8a:41:e6:d3:ba:b9:88:77:54:37:5a:e5:a9:b3:f2:85:7b:
- b4:7d:69:83:37:81:12:54:21:4c:d1:69:98:a2:fd:ef:a3:65:
- e9:32:f6:63:1e:54:ce:a9:75:74:53:61:b4:f0:78:72:c4:f0:
- 04:f0:f3:a8:70:93:f6:35:89:0f:6f:49:7a:0e:57:e0:af:33:
- 35:89:b6:cd:ef:81:aa:8c:10:11:e9:57:a1:66:4c:30:9c:11:
- 6a:c6:85:4b:d1:94:88:6e:aa:5f:8e:fb:d2:31:3d:ee:19:19:
- 01:3c:4a:05:72:9c:aa:ae:ef:af:b0:f1:9f:e0:ae:d6:8e:09:
- d1:05:ee:6b:77:08:11:52:8c:91:a0:2f:9b:ac:88:98:14:14:
- a4:08:b5:7d
+ 69:10:d5:c3:ff:f0:65:c6:79:55:be:ba:6b:7c:7f:49:a2:47:
+ b0:d7:e9:28:9f:14:f6:11:6a:d7:1f:e3:11:30:c1:d0:0c:21:
+ 8c:b3:21:95:c1:f3:2e:7c:8a:34:f6:d6:c7:49:9a:75:4c:93:
+ 35:c4:88:f7:be:d6:ed:e0:75:22:29:4d:0f:59:80:1a:1b:9b:
+ a4:fd:86:af:1e:76:44:03:f9:42:f2:74:1e:6b:74:fc:fa:64:
+ 67:33:4a:14:93:fc:84:1f:92:0c:62:ac:aa:e1:f0:6f:3e:09:
+ 90:d5:67:68:2a:28:9c:5f:86:29:8d:48:ef:3e:a5:48:60:08:
+ b5:cf:ac:ba:ff:ba:d7:7d:9a:8e:b4:63:10:e3:14:12:12:89:
+ 37:00:42:fb:4c:e5:b7:0d:e5:b8:28:5b:9f:79:48:aa:e4:ef:
+ 17:ec:eb:f1:c3:82:d9:48:ec:cd:f4:f7:1f:8f:e2:9e:ec:71:
+ a6:7a:ce:c0:fc:14:8f:48:17:56:10:02:27:aa:d9:10:bb:fc:
+ 6d:e2:d8:b6:66:27:08:e5:31:4d:fb:24:45:0f:da:7a:9c:8d:
+ e5:91:0c:80:91:1e:44:78:01:28:ca:db:40:87:db:38:0f:18:
+ 1a:a9:ff:68:8c:03:b2:89:82:e2:80:ee:3c:77:e2:4e:85:a5:
+ cf:72:3f:24
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW/os+rU
-ntkjA4pK82yEzQwofMIHYInFmp90uNCs5DDxSxzFf53SD07g5UVKzJNwoN88TPwM
-pdXJhv26TmfAr8MEmMu79iWmr397oym5hmCHgGeQq+dkhuzmMPbdWzppT7FY+EsV
-rhPIhCS/mqBsirM2MYQvpD5K8p8HkaSL3PpbZTxOkxkCpTp4XfJRvdeWFm7FixfQ
-IXcvlkpEyBctc9XaJEDRpLfyxLLiFmoZm3LLWGLrMC8vxTUcdC+65pN+3Hi8reOJ
-yXKa9QGVYQKfgkD5wchuNrcUShM2u9AbJb3WXhHn2eqn223TkpixKsHPAFLBeMkK
-MEEwCciQCgSPDQIDAQABo4HLMIHIMB0GA1UdDgQWBBRB074QL+5DtiWwBE45z3j5
-Du3hnTAfBgNVHSMEGDAWgBSngEMBWLDdeq18OBBzAt4s5uSeqTA3BggrBgEFBQcB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-AJC2pYX+1FG595KuYICrVAk9Y0P9zuDq4/LA2/Ubp9vxsyHQ5H9jwXUTyj1rcHZV
-I8zIdIC4gsDNY0F3TCeKMjT3nY0OnxXuIk/t1zLyyZW9NYfYxVgZugZYpJa8LU4b
-7S8jrLEvt+CIqfxowI2KQebTurmId1Q3WuWps/KFe7R9aYM3gRJUIUzRaZii/e+j
-Zeky9mMeVM6pdXRTYbTweHLE8ATw86hwk/Y1iQ9vSXoOV+CvMzWJts3vgaqMEBHp
-V6FmTDCcEWrGhUvRlIhuql+O+9IxPe4ZGQE8SgVynKqu76+w8Z/grtaOCdEF7mt3
-CBFSjJGgL5usiJgUFKQItX0=
+AGkQ1cP/8GXGeVW+umt8f0miR7DX6SifFPYRatcf4xEwwdAMIYyzIZXB8y58ijT2
+1sdJmnVMkzXEiPe+1u3gdSIpTQ9ZgBobm6T9hq8edkQD+ULydB5rdPz6ZGczShST
+/IQfkgxirKrh8G8+CZDVZ2gqKJxfhimNSO8+pUhgCLXPrLr/utd9mo60YxDjFBIS
+iTcAQvtM5bcN5bgoW595SKrk7xfs6/HDgtlI7M309x+P4p7scaZ6zsD8FI9IF1YQ
+Aieq2RC7/G3i2LZmJwjlMU37JEUP2nqcjeWRDICRHkR4ASjK20CH2zgPGBqp/2iM
+A7KJguKA7jx34k6Fpc9yPyQ=
-----END CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem b/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem
index a0cd187..04d29bf 100644
--- a/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem
+++ b/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem
@@ -1,15 +1,15 @@
[Created by: generate-violates-basic-constraints-pathlen-0.py]
-Certificate chain with 2 intermediaries. The first intermediary has a basic
+Certificate chain with 2 intermediates. The first intermediate has a basic
constraints path length of 0, so it is a violation for it to have a subordinate
-intermediary.
+intermediate.
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary2
+ Issuer: CN=Intermediate2
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b2:f1:24:bb:4b:3d:6d:80:7f:67:ad:2e:0e:e8:
- 07:e4:4b:6c:28:0d:2e:d9:9d:9d:e5:31:0a:7f:37:
- 3f:9c:c1:c3:03:8e:b8:72:5a:1c:52:d4:4e:84:7a:
- 9c:4d:f6:2a:a8:4b:f2:5c:5b:6c:f4:23:73:b3:4e:
- 0a:b9:66:16:ae:e4:c4:8b:d7:1b:b5:d0:5e:5f:03:
- 21:ce:63:b8:3a:da:e0:3c:f8:0a:7e:4b:99:f9:c6:
- 0d:01:a2:ab:18:d8:a7:a0:84:8c:3f:09:fd:10:41:
- 7c:6f:b0:51:34:4f:5d:39:b5:3f:6d:a0:68:87:6d:
- 09:47:db:0d:2a:62:99:83:02:0c:b9:d7:93:0b:bf:
- 17:5f:06:58:22:27:62:fc:1c:d9:02:b9:1e:e9:f0:
- fb:e1:a4:cc:fd:e3:9e:a8:a5:2d:f9:af:8b:b8:1e:
- 68:dc:f1:52:a2:55:94:20:da:82:14:b7:c0:a0:c5:
- 53:ff:00:0f:76:f9:fd:bf:53:71:99:60:2f:00:c9:
- 9e:d0:07:eb:3c:d0:47:5c:7b:65:cb:62:db:9b:74:
- ed:b8:51:a0:ed:ed:af:e9:6f:44:0e:8c:a4:42:ee:
- fc:92:bb:19:1a:b3:42:74:27:39:47:b8:d4:06:ed:
- bd:99:72:0c:83:15:10:ff:4a:66:66:0f:d6:14:ef:
- dd:17
+ 00:c3:d8:cf:ca:eb:7a:63:bc:cd:53:50:a0:a5:e7:
+ 24:1c:5e:ab:ee:eb:48:d3:60:73:ab:a5:c3:b5:e0:
+ ea:b2:71:0b:99:48:4c:0c:78:6f:67:a8:98:13:f7:
+ 99:59:a0:fc:78:d8:7e:05:cc:1c:4c:4d:ff:c0:a7:
+ 85:8f:c0:f8:c2:10:51:a2:a6:9b:38:a1:a8:7f:e3:
+ 7c:df:be:f7:8c:62:9a:83:c6:a5:ab:63:26:9e:71:
+ 25:26:7d:dc:05:09:b3:76:e8:de:90:07:6d:6d:d1:
+ 33:a5:3a:64:90:c0:50:2e:d6:a9:84:2e:f2:7c:11:
+ 49:4c:c5:e2:50:c3:b9:9c:0f:ac:8f:07:19:74:63:
+ 00:12:8a:ec:6f:4f:86:8a:9b:af:2a:c2:21:f1:98:
+ 88:eb:4a:23:2c:7d:25:9f:fd:2a:3e:b0:3d:f5:66:
+ bf:a7:07:42:7d:04:70:62:d3:4b:88:92:af:74:6e:
+ 20:4c:55:5e:9e:de:29:a6:58:66:1a:8d:c4:af:b5:
+ 22:44:29:ee:b6:03:66:8e:4b:a6:ca:77:3d:91:08:
+ c0:b2:e0:70:c8:e6:d1:fb:db:09:86:7c:ad:f5:20:
+ 76:10:1d:fc:bf:98:05:0b:b1:6e:47:d8:ce:4b:aa:
+ 02:7c:ec:3e:8a:b0:22:f9:3d:fc:8e:60:45:1b:cc:
+ c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 33:73:C0:44:EE:71:53:CD:C0:EA:D9:FC:FF:BE:B7:DD:16:66:19:84
+ 4C:E1:88:56:8D:23:98:7B:19:E1:6E:D8:1C:E5:06:73:6B:D5:1E:03
X509v3 Authority Key Identifier:
- keyid:FD:31:C0:C5:57:AB:1E:A5:78:24:73:72:58:9F:75:7D:78:17:42:AC
+ keyid:CB:CE:B8:91:FA:EC:E9:A4:15:CA:75:30:F1:C6:9A:B8:19:35:FA:29
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary2.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate2.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary2.crl
+ URI:http://url-for-crl/Intermediate2.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 61:39:30:49:95:f7:63:44:f3:a5:97:35:48:84:ea:94:cd:94:
- 37:ce:09:7a:b1:58:21:3e:f8:9c:a4:a9:65:bf:1d:a1:cb:eb:
- 09:95:f7:f6:ad:a4:65:95:a1:51:c4:18:06:43:d2:93:eb:16:
- 41:65:33:8a:42:cc:90:9d:e9:66:1f:d6:98:31:f1:48:f4:a8:
- a3:89:50:29:bc:f2:2d:af:8b:f7:af:9e:62:02:21:06:75:3d:
- 4a:8d:98:a0:df:4d:5d:db:9a:af:2a:0f:32:50:aa:61:c3:19:
- 87:99:54:60:3a:16:c5:46:ea:ed:54:ab:91:34:5f:8e:60:33:
- 10:e4:e1:4d:05:8d:36:5b:47:1c:c3:f2:58:7f:22:07:c7:95:
- 02:24:8e:03:f4:1f:06:25:d7:49:76:f8:f1:02:25:7c:9a:cf:
- 0f:4d:8f:08:e7:bf:fd:13:31:43:e5:56:20:eb:0a:43:ca:41:
- 0d:7c:4f:68:f6:d1:d1:67:ca:24:4f:e3:8e:8e:12:39:2f:7b:
- e8:9a:5c:c9:b5:19:01:1a:46:7e:54:21:ad:7e:c5:cd:e2:40:
- c3:13:aa:b5:e5:16:b3:18:dc:c8:61:d7:73:b7:3b:23:00:04:
- ce:dc:5a:22:1a:0b:da:8a:99:10:96:33:32:ae:4e:83:f4:d0:
- 93:e7:75:56
+ a6:96:6f:71:a0:4e:f8:17:93:ad:30:1f:2e:e5:6e:bc:4e:83:
+ 32:07:95:9f:f6:02:e8:06:5e:a6:51:0a:23:f6:46:06:3c:3d:
+ e6:4d:cc:ac:8c:29:e8:ce:0e:a4:db:11:7d:4f:6e:b7:78:e2:
+ 40:1e:0e:74:83:d5:16:7c:c5:6e:3e:41:59:be:d5:0c:ab:05:
+ 9f:2f:22:8c:3b:58:ed:72:49:11:b0:0b:21:b9:5d:e0:b8:3f:
+ cd:a0:a0:95:64:c6:8e:45:7d:aa:1b:67:69:13:54:40:0d:99:
+ 74:da:b1:9f:5b:9f:ba:e3:b6:aa:5b:e4:b6:d9:6c:46:d3:50:
+ 1a:d9:5a:54:b9:2d:a1:da:97:00:7a:6a:71:2a:8e:45:9c:6d:
+ e8:3d:a2:cb:29:44:45:11:5c:a9:64:60:81:88:e4:93:a2:61:
+ ec:87:74:69:bc:9c:61:92:94:eb:42:33:12:29:82:5d:fe:30:
+ 9b:9c:bf:47:50:a9:f6:ae:ea:d4:97:39:87:d5:02:c4:45:09:
+ a8:f3:f3:bf:e0:35:45:89:a9:bc:57:34:bf:d4:81:a0:09:4e:
+ 2d:15:61:39:0c:43:53:2e:50:fb:31:ab:91:0d:ce:9c:cb:c1:
+ e2:39:e2:76:60:ab:6b:5d:33:b6:0f:a7:c8:f0:61:ed:37:81:
+ 83:3a:2b:b4
-----BEGIN CERTIFICATE-----
MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl
-cm1lZGlhcnkyMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowETEPMA0G
-A1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvEk
-u0s9bYB/Z60uDugH5EtsKA0u2Z2d5TEKfzc/nMHDA464clocUtROhHqcTfYqqEvy
-XFts9CNzs04KuWYWruTEi9cbtdBeXwMhzmO4OtrgPPgKfkuZ+cYNAaKrGNinoISM
-Pwn9EEF8b7BRNE9dObU/baBoh20JR9sNKmKZgwIMudeTC78XXwZYIidi/BzZArke
-6fD74aTM/eOeqKUt+a+LuB5o3PFSolWUINqCFLfAoMVT/wAPdvn9v1NxmWAvAMme
-0AfrPNBHXHtly2Lbm3TtuFGg7e2v6W9EDoykQu78krsZGrNCdCc5R7jUBu29mXIM
-gxUQ/0pmZg/WFO/dFwIDAQABo4HrMIHoMB0GA1UdDgQWBBQzc8BE7nFTzcDq2fz/
-vrfdFmYZhDAfBgNVHSMEGDAWgBT9McDFV6sepXgkc3JYn3V9eBdCrDBABggrBgEF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-ZGlhcnkyLmNlcjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vdXJsLWZvci1jcmwv
-SW50ZXJtZWRpYXJ5Mi5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
-AQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAYTkwSZX3Y0TzpZc1
-SITqlM2UN84JerFYIT74nKSpZb8docvrCZX39q2kZZWhUcQYBkPSk+sWQWUzikLM
-kJ3pZh/WmDHxSPSoo4lQKbzyLa+L96+eYgIhBnU9So2YoN9NXduaryoPMlCqYcMZ
-h5lUYDoWxUbq7VSrkTRfjmAzEOThTQWNNltHHMPyWH8iB8eVAiSOA/QfBiXXSXb4
-8QIlfJrPD02PCOe//RMxQ+VWIOsKQ8pBDXxPaPbR0WfKJE/jjo4SOS976JpcybUZ
-ARpGflQhrX7FzeJAwxOqteUWsxjcyGHXc7c7IwAEztxaIhoL2oqZEJYzMq5Og/TQ
-k+d1Vg==
+ZGlhdGUyLmNlcjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vdXJsLWZvci1jcmwv
+SW50ZXJtZWRpYXRlMi5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
+AQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAppZvcaBO+BeTrTAf
+LuVuvE6DMgeVn/YC6AZeplEKI/ZGBjw95k3MrIwp6M4OpNsRfU9ut3jiQB4OdIPV
+FnzFbj5BWb7VDKsFny8ijDtY7XJJEbALIbld4Lg/zaCglWTGjkV9qhtnaRNUQA2Z
+dNqxn1ufuuO2qlvkttlsRtNQGtlaVLktodqXAHpqcSqORZxt6D2iyylERRFcqWRg
+gYjkk6Jh7Id0abycYZKU60IzEimCXf4wm5y/R1Cp9q7q1Jc5h9UCxEUJqPPzv+A1
+RYmpvFc0v9SBoAlOLRVhOQxDUy5Q+zGrkQ3OnMvB4jnidmCra10ztg+nyPBh7TeB
+gzortA==
-----END CERTIFICATE-----
Certificate:
@@ -99,88 +99,88 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary1
+ Issuer: CN=Intermediate1
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary2
+ Subject: CN=Intermediate2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b9:4e:dc:bd:a8:9e:1d:81:d7:bb:c3:4d:8a:5d:
- 34:3f:b2:71:12:c0:0d:76:05:d6:b3:6a:b6:3d:b5:
- 97:a8:8d:a0:ba:d9:2f:3c:da:b0:8f:5f:18:f0:83:
- fb:59:ef:91:8d:5a:57:57:63:36:a1:ff:54:9a:f5:
- 10:ab:4a:6b:16:fc:c6:f2:4e:9f:97:ec:22:6f:97:
- dd:0e:63:ef:ce:71:4f:f6:8e:04:68:22:c9:6d:b4:
- d2:fe:7b:46:aa:e9:05:a0:c0:b0:25:42:cd:ba:e8:
- 8d:bb:cb:3e:5f:e4:54:b7:dd:48:c6:08:52:30:54:
- e2:f4:c1:ae:ee:71:71:a7:33:ce:c1:b1:55:e4:77:
- 15:72:c5:ea:5f:ed:b3:a6:ef:a7:cc:f6:eb:6c:42:
- 1d:45:c3:75:15:d5:bd:09:44:52:b9:f5:5d:1f:10:
- e1:fc:31:9e:37:90:ca:7c:8d:16:c4:f7:76:39:b7:
- 57:ea:5b:75:3d:6c:50:60:26:ed:8b:2a:e4:a2:b8:
- a2:34:ba:51:89:ce:3c:e3:68:c3:3c:4a:58:cb:be:
- 79:34:54:2d:61:38:7b:7a:89:3f:4c:5f:3f:c9:c6:
- fc:d0:81:de:0c:21:2e:5a:2a:74:cd:fe:d7:c9:de:
- b3:3a:60:d6:16:e7:91:13:87:a4:f4:f8:67:4b:17:
- e6:13
+ 00:ad:d8:fa:e5:f4:8b:41:38:13:dc:61:ad:db:db:
+ 3d:f6:be:e2:fd:9d:63:a2:eb:4a:8d:c8:03:6b:d2:
+ c3:18:29:e6:93:92:5f:d0:c5:b2:3c:05:cd:79:c9:
+ 25:dd:e8:fc:68:83:f1:d9:95:15:22:8f:27:eb:bf:
+ 1f:ed:78:ce:34:b7:60:66:ee:4a:40:9f:e3:95:d0:
+ 32:47:67:80:6c:37:1c:3d:3a:e8:3e:14:2d:5b:97:
+ b3:40:85:28:a9:10:f0:fb:c9:eb:51:be:b6:c6:8a:
+ ca:60:cd:31:b7:b0:d3:bd:eb:5c:8a:14:89:38:47:
+ cb:18:2b:11:f7:a7:9e:9d:f3:76:82:97:c4:78:61:
+ 8c:ec:90:ac:f2:a8:2e:bf:d8:30:48:52:94:7f:48:
+ f6:fb:4b:e6:0a:63:89:ad:8a:4d:8d:3e:dc:45:06:
+ 89:e9:94:24:5b:d4:94:50:de:05:cf:87:59:66:fb:
+ 70:62:84:3c:fe:d9:1b:02:92:30:80:cb:45:43:e4:
+ 55:47:97:2e:99:59:22:86:6f:51:3a:24:13:26:e8:
+ 10:c9:92:35:13:6f:4a:39:c5:71:d2:c3:63:a5:11:
+ f8:6e:dc:fa:75:5c:4b:29:24:04:9f:e3:f4:f0:49:
+ 55:7e:0a:8c:6c:44:b4:a4:35:c7:b0:54:10:a4:b1:
+ 6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- FD:31:C0:C5:57:AB:1E:A5:78:24:73:72:58:9F:75:7D:78:17:42:AC
+ CB:CE:B8:91:FA:EC:E9:A4:15:CA:75:30:F1:C6:9A:B8:19:35:FA:29
X509v3 Authority Key Identifier:
- keyid:09:87:C1:14:11:81:04:D8:AF:CF:66:4A:4F:8D:1C:A5:BB:04:CF:DA
+ keyid:58:20:BB:27:E1:6D:B0:95:1A:D3:40:A1:81:79:89:63:34:21:9F:13
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary1.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate1.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary1.crl
+ URI:http://url-for-crl/Intermediate1.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha256WithRSAEncryption
- 51:f3:32:1a:03:bd:bd:a1:40:7d:4a:55:ef:6e:5e:58:57:8c:
- 50:75:7c:e6:d0:44:ff:7e:0c:f7:9d:c2:67:99:83:e2:da:19:
- e6:0b:54:8a:61:7d:16:86:99:2d:b7:32:2d:c6:a0:7a:1a:e2:
- c2:46:8c:a1:b7:f8:bb:d4:22:b1:ae:d0:2f:a9:98:32:4e:14:
- 20:6c:22:cf:df:c8:08:ce:f4:4c:8b:5c:03:33:0a:d1:32:2b:
- 5a:0d:d2:99:18:79:a1:e8:ed:8d:31:85:9e:dd:30:52:30:1f:
- ff:af:1f:09:08:98:a0:75:11:02:e6:6c:2b:7e:67:df:89:91:
- 1e:57:b4:a2:ba:1e:7b:86:68:f3:62:7a:69:c1:4e:b3:76:58:
- 74:e5:84:3d:0f:6d:1b:22:97:e9:7f:0b:c7:2f:00:c5:4d:1a:
- fd:47:ff:9f:c0:84:0b:ee:dc:cd:c2:43:7f:0f:7a:a6:28:6e:
- c3:2c:7a:a1:cf:4f:16:3f:f5:fc:40:c7:65:91:a5:bc:5c:82:
- 9c:a0:fb:0a:1d:69:89:85:e5:9e:10:41:7e:4d:83:02:4f:64:
- 54:04:86:97:d7:5e:6c:e1:ef:65:b0:a4:69:b8:e3:d4:0e:cd:
- 20:04:1a:05:56:e9:e1:c3:e9:2f:9a:7b:43:59:73:ff:0b:82:
- 38:e8:b3:b5
+ 5c:fb:a9:0c:98:92:b4:e2:3c:b1:57:ae:7d:4c:17:b3:44:0e:
+ df:f8:c5:96:e3:1c:10:c2:1b:cf:26:b8:b8:45:3b:e2:3a:54:
+ d9:2a:ce:2d:70:ef:7d:e7:0a:f8:c4:3e:c2:11:65:58:c2:9c:
+ 57:0f:82:6f:ad:d5:c3:75:fe:7a:eb:3e:51:13:a9:04:18:37:
+ 6a:e1:86:11:7f:3b:9d:5a:eb:29:ec:ef:d1:3b:df:13:f4:66:
+ 87:31:2e:b7:75:b0:31:02:b6:47:98:d6:f5:3d:35:7e:18:ac:
+ 53:86:4e:d2:d4:93:ac:7a:20:04:8f:58:9b:15:58:ad:7a:b3:
+ 3e:a0:11:57:92:96:2a:d4:b9:16:e9:f0:8b:70:67:4b:21:58:
+ 80:8e:43:21:ba:62:22:46:96:d2:f0:48:82:69:c5:51:ba:22:
+ 32:a0:50:cf:48:1f:1a:35:05:41:23:4e:93:a2:43:e6:83:d9:
+ ae:32:1e:95:72:24:61:79:09:4c:62:d0:1c:42:60:c5:8c:0c:
+ 6f:a1:8c:29:8c:68:e3:b8:da:44:83:f6:04:ab:e2:85:e4:6a:
+ f6:ca:ed:95:e3:a0:81:4e:79:1e:cb:46:a1:83:4b:19:23:52:
+ ae:b3:80:d7:7c:4f:05:8c:78:55:e2:fc:ec:80:74:5b:3e:7d:
+ 16:e3:71:5a
-----BEGIN CERTIFICATE-----
MIIDjDCCAnSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl
-cm1lZGlhcnkxMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQG
-A1UEAwwNSW50ZXJtZWRpYXJ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBALlO3L2onh2B17vDTYpdND+ycRLADXYF1rNqtj21l6iNoLrZLzzasI9fGPCD
-+1nvkY1aV1djNqH/VJr1EKtKaxb8xvJOn5fsIm+X3Q5j785xT/aOBGgiyW200v57
-RqrpBaDAsCVCzbrojbvLPl/kVLfdSMYIUjBU4vTBru5xcaczzsGxVeR3FXLF6l/t
-s6bvp8z262xCHUXDdRXVvQlEUrn1XR8Q4fwxnjeQynyNFsT3djm3V+pbdT1sUGAm
-7Ysq5KK4ojS6UYnOPONowzxKWMu+eTRULWE4e3qJP0xfP8nG/NCB3gwhLloqdM3+
-18neszpg1hbnkROHpPT4Z0sX5hMCAwEAAaOB4DCB3TAdBgNVHQ4EFgQU/THAxVer
-HqV4JHNyWJ91fXgXQqwwHwYDVR0jBBgwFoAUCYfBFBGBBNivz2ZKT40cpbsEz9ow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-SW50ZXJtZWRpYXJ5MS5jZXIwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL3VybC1m
-b3ItY3JsL0ludGVybWVkaWFyeTEuY3JsMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMB
-Af8ECDAGAQH/AgEAMA0GCSqGSIb3DQEBCwUAA4IBAQBR8zIaA729oUB9SlXvbl5Y
-V4xQdXzm0ET/fgz3ncJnmYPi2hnmC1SKYX0WhpkttzItxqB6GuLCRoyht/i71CKx
-rtAvqZgyThQgbCLP38gIzvRMi1wDMwrRMitaDdKZGHmh6O2NMYWe3TBSMB//rx8J
-CJigdREC5mwrfmffiZEeV7Siuh57hmjzYnppwU6zdlh05YQ9D20bIpfpfwvHLwDF
-TRr9R/+fwIQL7tzNwkN/D3qmKG7DLHqhz08WP/X8QMdlkaW8XIKcoPsKHWmJheWe
-EEF+TYMCT2RUBIaX115s4e9lsKRpuOPUDs0gBBoFVunhw+kvmntDWXP/C4I46LO1
+SW50ZXJtZWRpYXRlMS5jZXIwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL3VybC1m
+b3ItY3JsL0ludGVybWVkaWF0ZTEuY3JsMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMB
+Af8ECDAGAQH/AgEAMA0GCSqGSIb3DQEBCwUAA4IBAQBc+6kMmJK04jyxV659TBez
+RA7f+MWW4xwQwhvPJri4RTviOlTZKs4tcO995wr4xD7CEWVYwpxXD4JvrdXDdf56
+6z5RE6kEGDdq4YYRfzudWusp7O/RO98T9GaHMS63dbAxArZHmNb1PTV+GKxThk7S
+1JOseiAEj1ibFViterM+oBFXkpYq1LkW6fCLcGdLIViAjkMhumIiRpbS8EiCacVR
+uiIyoFDPSB8aNQVBI06TokPmg9muMh6VciRheQlMYtAcQmDFjAxvoYwpjGjjuNpE
+g/YEq+KF5Gr2yu2V46CBTnkey0ahg0sZI1Kus4DXfE8FjHhV4vzsgHRbPn0W43Fa
-----END CERTIFICATE-----
Certificate:
@@ -192,35 +192,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary1
+ Subject: CN=Intermediate1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ab:e9:a0:28:67:38:13:72:12:a0:3b:f2:f9:13:
- c2:2b:c1:a2:07:e6:45:35:cf:ff:1a:46:b0:d2:58:
- 12:63:fc:3d:b3:85:50:68:9c:57:21:ff:31:ff:24:
- 48:db:13:de:b1:f4:f8:39:7a:f3:34:dd:51:58:1a:
- 12:73:9d:85:e0:d0:f8:be:fd:9d:e2:34:ce:36:e0:
- a0:48:53:36:23:bf:52:d2:ac:da:d1:ef:6c:da:9f:
- 11:3b:6c:e1:67:6a:f1:df:97:2c:1a:12:c7:c3:72:
- 0f:98:21:6a:40:2b:f0:28:b8:c2:ef:7f:cb:ee:7a:
- e9:8f:17:fe:0a:a1:ff:d5:15:4c:63:5b:53:55:15:
- 01:b9:5d:91:77:b0:23:03:0e:45:00:84:52:33:2b:
- 11:51:99:e8:0d:5b:45:ef:d2:e2:c9:0e:a2:ae:43:
- c2:92:5c:b0:36:76:06:21:91:d0:42:e8:0f:6f:80:
- 61:98:12:a6:c0:c3:b7:64:7e:77:0c:76:12:1f:50:
- 73:f8:bb:28:1a:5d:7b:68:36:01:fa:09:e7:9a:90:
- b6:c5:3d:e9:16:a0:7b:c2:76:19:f0:e9:bc:15:0d:
- 55:df:ea:67:2a:b2:e0:69:f8:c1:49:c4:a6:51:e9:
- 43:d2:df:2a:de:e3:a0:66:3f:0c:18:b8:f8:8d:bb:
- 43:15
+ 00:e6:65:53:d1:2e:4e:ad:28:ff:05:13:1b:64:08:
+ aa:e6:b7:44:64:94:4c:0e:a4:68:80:12:7d:07:ce:
+ 6a:ec:c8:4b:cc:a1:3f:af:f4:c8:45:0e:b2:66:46:
+ b3:fd:ef:68:5d:04:c0:95:e9:71:45:b2:26:12:16:
+ 78:b1:75:15:39:a1:da:2a:b0:d7:7c:52:11:8b:1a:
+ b0:46:19:fb:71:d0:8f:13:3d:2e:ee:bc:75:97:4d:
+ b1:b6:7b:d5:b6:36:44:5b:75:d1:00:b3:a3:60:9f:
+ 92:34:c1:50:52:30:89:54:35:24:fa:7d:ea:5a:32:
+ ca:11:aa:12:1c:55:74:fd:5b:98:ad:0d:04:d3:b3:
+ 12:cd:a4:f9:7c:54:e1:1f:01:cd:ad:c6:0e:cc:ae:
+ 8c:89:d3:ff:a6:f7:2b:9f:67:d8:55:c2:a9:4a:5f:
+ e8:d6:96:0d:14:68:79:23:84:d0:5f:59:99:f6:8e:
+ 9c:34:da:b6:d2:37:cc:de:8d:44:ba:e4:bb:f0:6f:
+ f1:60:d2:0d:22:28:41:98:e8:9a:dd:18:b5:30:45:
+ fd:3b:7a:27:0f:16:08:07:02:83:aa:e0:68:ba:47:
+ 44:48:84:ea:da:51:c1:ec:7b:cb:1e:25:11:3d:fd:
+ ce:53:1a:39:0a:fc:42:82:3d:cc:a5:93:00:c6:27:
+ 62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 09:87:C1:14:11:81:04:D8:AF:CF:66:4A:4F:8D:1C:A5:BB:04:CF:DA
+ 58:20:BB:27:E1:6D:B0:95:1A:D3:40:A1:81:79:89:63:34:21:9F:13
X509v3 Authority Key Identifier:
- keyid:A4:9D:E4:F8:B0:AF:D5:A4:2F:B9:3F:42:B8:C3:D5:60:9D:64:C2:8C
+ keyid:7A:3D:6D:AF:22:3F:64:CA:5C:C8:B3:3D:D5:E5:3B:32:A0:02:CF:29
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -235,41 +235,41 @@
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha256WithRSAEncryption
- 7d:97:b6:93:81:ef:63:d9:d6:31:8d:ba:e0:61:36:7c:06:cd:
- b5:2f:3f:4a:04:84:c2:c4:51:07:49:55:53:4f:22:b6:2f:15:
- d9:62:8a:65:97:15:84:a1:e2:2e:4e:66:59:02:b2:8f:b6:d6:
- 84:d6:ed:d4:df:45:a3:75:93:58:88:76:8d:6c:01:81:cc:c5:
- 91:99:cc:9c:65:f9:c9:f0:86:ed:3a:fe:d0:a0:2e:6c:04:d2:
- 49:f8:d4:31:9f:ce:db:93:bb:5a:73:4d:5d:24:83:4b:55:fe:
- 49:79:67:64:83:18:56:d9:ad:90:96:0b:ab:49:de:08:80:7a:
- 93:54:b1:38:19:c2:0b:6f:e1:b1:50:52:19:67:15:a9:aa:5a:
- c5:ed:73:30:63:1a:64:24:d4:8b:95:c9:c4:54:78:62:ce:42:
- f7:98:f1:94:2e:4d:93:7e:df:6f:cd:6f:41:c4:ef:c8:ed:f7:
- 73:92:af:ee:19:b5:e5:47:82:f7:47:41:35:29:8c:88:3b:62:
- 18:c0:f6:80:56:3f:f8:9e:b4:6e:33:2c:ce:41:da:56:83:c7:
- c7:30:c6:0f:f5:49:f5:79:d6:7b:c5:33:4c:0f:2a:e9:13:27:
- 0b:e3:b8:63:74:14:c0:2e:19:24:00:a4:f8:17:d7:cd:b5:1b:
- c1:38:25:9a
+ 37:db:eb:ca:f7:4c:e8:8d:30:46:40:83:77:7b:84:85:66:06:
+ 20:10:22:e9:f3:f0:5e:41:27:7d:dd:01:2a:c0:20:74:a6:f5:
+ d3:30:01:40:4a:4c:60:b0:9d:da:2f:71:90:c5:19:97:cc:af:
+ a2:e3:cc:fe:6e:e6:fa:5d:11:50:e6:ef:a9:b0:15:f8:da:26:
+ 51:b9:2e:1e:82:44:ec:13:e5:8d:27:2d:b1:31:97:cd:43:04:
+ 8a:70:ca:51:e3:2c:9e:93:9a:48:36:a1:46:56:08:e1:43:1c:
+ d7:96:aa:44:c2:3a:a2:e7:91:ac:91:28:fb:03:9c:e7:13:d1:
+ eb:c0:33:7b:3b:ff:c2:fc:af:68:36:54:57:f4:b8:2a:9d:de:
+ 78:3c:8e:ad:0d:d8:dd:4b:e7:50:41:0a:ae:7a:08:d7:5e:3b:
+ 2a:71:d5:88:ec:99:02:b3:cd:5a:31:26:41:79:e2:3a:49:55:
+ 40:7f:26:7f:34:f6:7a:76:28:5e:3d:e9:20:1e:a2:f4:6b:d5:
+ e0:6d:bd:2e:30:1a:69:70:ae:03:d3:ce:b3:76:04:2f:ef:86:
+ 4f:77:44:19:6f:94:6a:09:86:60:28:75:63:22:3a:13:5a:d5:
+ 13:af:23:08:9c:1f:0d:dc:0f:62:b4:97:85:05:5a:ea:c5:60:
+ 8a:02:4d:51
-----BEGIN CERTIFICATE-----
MIIDcTCCAlmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQGA1UEAwwNSW50
-ZXJtZWRpYXJ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKvpoChn
-OBNyEqA78vkTwivBogfmRTXP/xpGsNJYEmP8PbOFUGicVyH/Mf8kSNsT3rH0+Dl6
-8zTdUVgaEnOdheDQ+L79neI0zjbgoEhTNiO/UtKs2tHvbNqfETts4Wdq8d+XLBoS
-x8NyD5ghakAr8Ci4wu9/y+566Y8X/gqh/9UVTGNbU1UVAbldkXewIwMORQCEUjMr
-EVGZ6A1bRe/S4skOoq5DwpJcsDZ2BiGR0ELoD2+AYZgSpsDDt2R+dwx2Eh9Qc/i7
-KBpde2g2AfoJ55qQtsU96Rage8J2GfDpvBUNVd/qZyqy4Gn4wUnEplHpQ9LfKt7j
-oGY/DBi4+I27QxUCAwEAAaOBzjCByzAdBgNVHQ4EFgQUCYfBFBGBBNivz2ZKT40c
-pbsEz9owHwYDVR0jBBgwFoAUpJ3k+LCv1aQvuT9CuMPVYJ1kwowwNwYIKwYBBQUH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-A4IBAQB9l7aTge9j2dYxjbrgYTZ8Bs21Lz9KBITCxFEHSVVTTyK2LxXZYopllxWE
-oeIuTmZZArKPttaE1u3U30WjdZNYiHaNbAGBzMWRmcycZfnJ8IbtOv7QoC5sBNJJ
-+NQxn87bk7tac01dJINLVf5JeWdkgxhW2a2QlgurSd4IgHqTVLE4GcILb+GxUFIZ
-ZxWpqlrF7XMwYxpkJNSLlcnEVHhizkL3mPGULk2Tft9vzW9BxO/I7fdzkq/uGbXl
-R4L3R0E1KYyIO2IYwPaAVj/4nrRuMyzOQdpWg8fHMMYP9Un1edZ7xTNMDyrpEycL
-47hjdBTALhkkAKT4F9fNtRvBOCWa
+A4IBAQA32+vK90zojTBGQIN3e4SFZgYgECLp8/BeQSd93QEqwCB0pvXTMAFASkxg
+sJ3aL3GQxRmXzK+i48z+bub6XRFQ5u+psBX42iZRuS4egkTsE+WNJy2xMZfNQwSK
+cMpR4yyek5pINqFGVgjhQxzXlqpEwjqi55GskSj7A5znE9HrwDN7O//C/K9oNlRX
+9Lgqnd54PI6tDdjdS+dQQQquegjXXjsqcdWI7JkCs81aMSZBeeI6SVVAfyZ/NPZ6
+dihePekgHqL0a9Xgbb0uMBppcK4D086zdgQv74ZPd0QZb5RqCYZgKHVjIjoTWtUT
+ryMInB8N3A9itJeFBVrqxWCKAk1R
-----END CERTIFICATE-----
Certificate:
@@ -286,30 +286,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9e:1f:9a:ec:aa:50:56:02:47:76:c8:ff:b9:91:
- c0:58:8d:08:b9:87:d9:ac:9e:7c:6e:2e:b7:60:68:
- d6:ab:1c:3d:f3:e2:a8:e6:05:58:ff:52:27:7c:f9:
- 7e:96:2d:19:71:35:84:eb:8d:3c:db:27:f7:5f:2f:
- d1:56:af:73:a8:26:84:f5:bb:7f:7a:7c:40:81:66:
- e9:e5:c1:53:eb:ac:d5:65:47:3d:a1:0a:67:c6:c8:
- 3b:cb:2f:a9:1e:9c:d5:30:6b:7b:50:cb:ad:46:6b:
- 33:44:91:14:94:20:ad:e2:79:1b:62:bb:1d:7e:a7:
- 2a:45:03:4b:d4:64:1b:15:82:c6:dc:cb:48:84:c5:
- 77:22:2a:20:6d:d8:bd:25:8d:55:11:95:46:73:97:
- fa:53:66:2e:ec:1a:73:66:09:f7:ef:e4:f8:df:ea:
- ce:90:c8:f8:38:67:bb:3c:c2:48:e7:69:01:98:6b:
- c1:3e:8f:17:05:0f:c0:d0:eb:49:f1:c7:ab:c6:07:
- 49:85:a7:57:ac:11:42:e5:de:bf:a1:65:4b:e6:ba:
- e8:44:64:2d:84:d8:a4:4a:ba:62:56:76:49:bf:67:
- 19:91:e1:29:e9:fb:aa:de:ef:df:58:01:08:65:14:
- 8e:71:b5:3b:43:fb:6c:65:9a:d6:6e:42:65:24:2d:
- f4:99
+ 00:cd:87:9d:f4:66:f8:77:5c:e3:56:6d:cb:12:dc:
+ a9:36:79:d5:1b:11:9f:92:20:8d:e6:d7:7d:41:8e:
+ 90:90:2a:a8:63:3d:59:25:a6:7a:86:73:7f:10:da:
+ 9f:c1:a5:69:4d:a3:67:61:b8:f8:9b:9b:ec:4a:3a:
+ f1:73:f1:83:c4:ab:34:1f:0b:ed:05:f3:6d:c5:ee:
+ 64:18:34:69:5f:09:1f:48:e5:d2:2d:12:4c:17:a3:
+ 7e:74:9f:93:04:ea:00:15:e3:b9:0d:ef:c5:ed:19:
+ 97:2b:12:05:7f:5c:32:2d:c5:30:46:7c:a7:02:27:
+ 29:b2:99:e1:43:95:f6:67:1c:ee:ad:9b:8e:fb:f8:
+ 57:1a:47:13:5a:1a:2f:27:e8:d5:03:2a:e5:f9:92:
+ 53:1d:03:5f:d6:2f:18:65:ce:3a:6e:ab:bf:b6:c5:
+ 72:e1:c9:a0:d6:3c:a2:8e:4f:3e:8f:06:52:19:a8:
+ 1a:f0:06:55:d2:f9:be:23:27:0a:de:33:26:ec:a0:
+ 41:d3:6b:56:25:70:09:ac:28:45:82:33:cb:db:85:
+ 59:50:61:9c:12:e0:04:cc:c5:81:3c:77:d7:9d:8e:
+ 59:d3:70:4d:4e:47:0a:f7:ef:6c:33:54:db:61:ee:
+ 31:cb:8d:43:59:ec:a1:3d:a4:c6:06:6e:05:b2:14:
+ d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- A4:9D:E4:F8:B0:AF:D5:A4:2F:B9:3F:42:B8:C3:D5:60:9D:64:C2:8C
+ 7A:3D:6D:AF:22:3F:64:CA:5C:C8:B3:3D:D5:E5:3B:32:A0:02:CF:29
X509v3 Authority Key Identifier:
- keyid:A4:9D:E4:F8:B0:AF:D5:A4:2F:B9:3F:42:B8:C3:D5:60:9D:64:C2:8C
+ keyid:7A:3D:6D:AF:22:3F:64:CA:5C:C8:B3:3D:D5:E5:3B:32:A0:02:CF:29
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -324,41 +324,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 39:75:b8:af:a2:4e:d6:2f:15:08:4e:6d:06:1f:e7:65:29:96:
- c2:77:96:ed:1b:b2:48:e3:f9:cf:fd:8c:40:d1:67:37:1a:7c:
- e8:40:f0:ca:ee:72:9e:ef:6d:eb:e7:e9:5c:c4:61:e5:65:0e:
- 25:62:8e:ca:b1:5d:08:d2:21:6d:cb:0f:d6:f3:41:4a:66:56:
- 5b:06:3a:a7:6e:df:ad:6c:4d:18:01:95:b4:c9:7e:f4:80:e7:
- 75:17:e0:41:25:7e:03:1b:5b:bd:a0:2d:1c:f8:f5:18:e6:0b:
- 4c:69:7e:aa:54:78:f3:b4:84:b8:eb:8c:37:e9:60:dd:df:b8:
- f8:43:57:37:99:db:b1:ed:99:2e:1f:f2:af:94:33:97:86:83:
- 58:6d:e6:37:56:36:f8:68:e6:32:70:3f:5b:9b:13:75:a5:fc:
- c0:5a:e5:61:61:37:d2:b6:d8:d5:5c:55:21:d5:8e:3a:ed:bf:
- 83:81:76:e7:71:2b:3f:5b:0f:77:43:20:3a:d2:f6:ef:53:c8:
- 29:19:2c:0a:4d:a6:2e:fb:9b:3b:10:73:e1:dc:ac:0e:8d:e4:
- bd:36:da:e9:1e:0a:e6:57:b4:1d:ea:d8:cd:a0:dd:e3:88:8d:
- a5:b4:43:7f:fd:b1:3c:29:e5:6a:b4:c9:4e:e6:77:83:ae:c6:
- f7:04:47:a2
+ 20:3e:c4:b6:78:84:bd:36:33:6b:38:8e:f2:1f:1a:46:a7:d9:
+ 02:86:39:d2:3f:14:bd:a9:82:21:b0:9d:da:a9:4f:0a:e8:65:
+ 0b:7f:b7:cd:d9:3c:de:7f:08:d6:d9:60:ba:b2:be:4d:8a:77:
+ e4:4d:fe:8c:5d:27:e6:8a:0c:6c:e1:3c:7b:e2:d2:4c:ac:34:
+ fe:1e:b1:28:e6:b7:49:a8:09:bf:67:80:0f:8f:02:49:d4:52:
+ 6e:bf:d1:a7:b8:b4:22:90:f8:83:d5:85:7f:46:99:2d:df:cb:
+ 56:31:0c:0e:92:9b:eb:28:6e:c2:7c:ba:37:5d:3f:f0:f8:b5:
+ e2:0a:02:ea:78:c3:5c:8d:24:92:95:52:bf:68:3e:2b:fc:17:
+ bc:bb:3c:7c:38:f8:6e:5f:d3:1d:9e:4c:c5:3a:47:93:4d:a6:
+ c2:00:f2:2a:7a:a1:f0:76:48:5a:ef:77:1c:47:10:40:d8:d5:
+ 84:45:13:f6:5e:7c:d2:0e:bd:e3:e3:b1:3d:d5:93:e1:c4:95:
+ a1:ba:84:0d:a0:1c:b0:cd:b6:b4:a2:52:2e:37:c2:f3:30:3e:
+ 91:0b:24:9d:3d:77:02:ce:83:b0:73:21:ba:3f:f6:b9:c7:5d:
+ 08:5c:f0:33:8d:de:1e:56:e8:82:2f:5d:e6:8c:0c:ac:77:c7:
+ bf:91:2a:25
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4fmuyqUFYCR3bI/7mR
-wFiNCLmH2ayefG4ut2Bo1qscPfPiqOYFWP9SJ3z5fpYtGXE1hOuNPNsn918v0Vav
-c6gmhPW7f3p8QIFm6eXBU+us1WVHPaEKZ8bIO8svqR6c1TBre1DLrUZrM0SRFJQg
-reJ5G2K7HX6nKkUDS9RkGxWCxtzLSITFdyIqIG3YvSWNVRGVRnOX+lNmLuwac2YJ
-9+/k+N/qzpDI+DhnuzzCSOdpAZhrwT6PFwUPwNDrSfHHq8YHSYWnV6wRQuXev6Fl
-S+a66ERkLYTYpEq6YlZ2Sb9nGZHhKen7qt7v31gBCGUUjnG1O0P7bGWa1m5CZSQt
-9JkCAwEAAaOByzCByDAdBgNVHQ4EFgQUpJ3k+LCv1aQvuT9CuMPVYJ1kwowwHwYD
-VR0jBBgwFoAUpJ3k+LCv1aQvuT9CuMPVYJ1kwowwNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM2HnfRm+Hdc41ZtyxLc
+qTZ51RsRn5IgjebXfUGOkJAqqGM9WSWmeoZzfxDan8GlaU2jZ2G4+Jub7Eo68XPx
+g8SrNB8L7QXzbcXuZBg0aV8JH0jl0i0STBejfnSfkwTqABXjuQ3vxe0ZlysSBX9c
+Mi3FMEZ8pwInKbKZ4UOV9mcc7q2bjvv4VxpHE1oaLyfo1QMq5fmSUx0DX9YvGGXO
+Om6rv7bFcuHJoNY8oo5PPo8GUhmoGvAGVdL5viMnCt4zJuygQdNrViVwCawoRYIz
+y9uFWVBhnBLgBMzFgTx3152OWdNwTU5HCvfvbDNU22HuMcuNQ1nsoT2kxgZuBbIU
+1q0CAwEAAaOByzCByDAdBgNVHQ4EFgQUej1tryI/ZMpcyLM91eU7MqACzykwHwYD
+VR0jBBgwFoAUej1tryI/ZMpcyLM91eU7MqACzykwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA5dbivok7W
-LxUITm0GH+dlKZbCd5btG7JI4/nP/YxA0Wc3GnzoQPDK7nKe723r5+lcxGHlZQ4l
-Yo7KsV0I0iFtyw/W80FKZlZbBjqnbt+tbE0YAZW0yX70gOd1F+BBJX4DG1u9oC0c
-+PUY5gtMaX6qVHjztIS464w36WDd37j4Q1c3mdux7ZkuH/KvlDOXhoNYbeY3Vjb4
-aOYycD9bmxN1pfzAWuVhYTfSttjVXFUh1Y467b+DgXbncSs/Ww93QyA60vbvU8gp
-GSwKTaYu+5s7EHPh3KwOjeS9NtrpHgrmV7Qd6tjNoN3jiI2ltEN//bE8KeVqtMlO
-5neDrsb3BEei
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAgPsS2eIS9
+NjNrOI7yHxpGp9kChjnSPxS9qYIhsJ3aqU8K6GULf7fN2TzefwjW2WC6sr5Ninfk
+Tf6MXSfmigxs4Tx74tJMrDT+HrEo5rdJqAm/Z4APjwJJ1FJuv9GnuLQikPiD1YV/
+Rpkt38tWMQwOkpvrKG7CfLo3XT/w+LXiCgLqeMNcjSSSlVK/aD4r/Be8uzx8OPhu
+X9MdnkzFOkeTTabCAPIqeqHwdkha73ccRxBA2NWERRP2XnzSDr3j47E91ZPhxJWh
+uoQNoBywzba0olIuN8LzMD6RCySdPXcCzoOwcyG6P/a5x10IXPAzjd4eVuiCL13m
+jAysd8e/kSol
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem b/net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem
index c639e56..62ef958 100644
--- a/net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem
+++ b/net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem
@@ -1,6 +1,6 @@
[Created by: generate-violates-pathlen-1-root.py]
-Certificate chain with 2 intermediaries and one end entity certificate. The
+Certificate chain with 2 intermediates and one end entity certificate. The
root certificate has a pathlen:1 restriction so this is an invalid chain.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary2
+ Issuer: CN=Intermediate2
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:bf:b8:e9:8b:9f:2a:8d:58:f0:93:6a:7a:d2:d4:
- 29:ec:ce:35:c9:5e:c0:f7:27:2a:78:a3:76:53:25:
- 54:09:43:e0:30:df:a1:f3:e2:a2:45:21:d7:b0:e6:
- ff:d0:cc:81:eb:2b:78:9a:b6:85:97:87:d5:b2:9f:
- 3b:f2:d7:55:3d:fe:0f:ba:20:39:a6:0d:c8:7c:ea:
- 23:8a:63:38:8e:70:44:ff:d2:18:66:3e:ad:10:68:
- ee:ec:21:f7:18:e4:7f:37:09:c6:e6:a8:d1:a2:4c:
- 1f:e5:7a:69:04:13:df:09:5e:13:61:7c:15:09:9c:
- 55:af:27:66:87:0e:bd:fc:2a:9d:7f:1c:73:b5:84:
- c2:d6:2b:d9:5d:f6:19:52:58:bb:8c:8c:5f:a7:9c:
- de:d7:8d:5f:ef:8f:f3:24:e1:0d:10:59:58:c6:72:
- 8c:d7:fc:fe:bc:22:a7:58:4d:83:f2:48:4b:cd:55:
- 36:45:28:e4:cf:93:75:78:0f:5e:35:c0:b7:52:e5:
- e2:91:42:04:bb:9c:0c:cf:eb:89:66:5f:90:46:b2:
- 76:b0:82:c4:af:34:fd:a6:fd:93:7f:54:ce:4f:be:
- a4:32:8e:9c:3f:40:c9:6c:db:be:85:0c:e6:df:2b:
- 7c:9b:ef:8b:7a:4b:15:dc:09:10:3b:b1:b7:e7:c7:
- c1:21
+ 00:cb:62:aa:87:80:66:83:c5:88:0f:18:6f:ba:e4:
+ 3d:6e:3a:0e:02:40:9a:90:1c:2c:ef:63:5c:28:3a:
+ 27:79:e7:53:c0:d8:0e:e9:95:ec:ee:19:45:6a:39:
+ 1f:09:80:db:eb:0c:fc:ec:ff:e1:3d:42:8a:ab:ba:
+ 6e:43:bf:bc:50:6b:15:da:0d:af:84:f1:7e:8d:b1:
+ c6:b6:ee:50:2a:73:3f:38:de:46:49:c1:eb:52:4a:
+ 03:54:0b:67:d7:3b:1d:3d:ae:b5:0d:e1:2b:b5:a1:
+ 9d:ea:56:aa:13:8b:80:2d:fb:ea:7f:83:15:d5:df:
+ 09:a7:d5:ab:a8:5f:50:02:e1:82:7d:73:c3:6a:c6:
+ d9:bc:47:21:cd:d7:00:a2:06:7c:a7:2f:3e:e6:dd:
+ 35:b0:fe:35:8d:7f:1e:68:ff:15:ee:d0:3f:69:05:
+ b5:2f:bb:27:bc:3a:9d:29:31:3d:af:29:a6:d6:a7:
+ 45:0b:b9:f0:4f:a6:b3:13:f7:97:f5:6a:0f:1e:d1:
+ d8:9c:05:78:2e:b5:b9:de:ab:f4:26:90:93:49:f3:
+ b1:18:fe:3e:03:74:39:92:dd:7e:17:6d:31:c8:e7:
+ 3f:a0:d7:13:dc:fe:76:ec:1a:c1:7f:4e:ad:0f:cc:
+ b3:d4:27:9b:2f:a5:e9:d9:81:ad:f6:ab:da:7f:d4:
+ 71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 11:74:6B:48:F5:42:3C:04:F3:A2:04:42:E5:F2:BC:1C:AD:AB:CB:E2
+ CA:5D:98:89:E9:73:51:6B:E4:E7:3E:9B:EF:A8:A0:0A:BC:48:07:92
X509v3 Authority Key Identifier:
- keyid:9A:80:A6:AF:E0:4A:48:D1:70:0A:10:7A:0D:74:57:B8:CE:48:5B:7D
+ keyid:FD:E5:DE:B3:E1:33:73:97:CA:6B:94:1B:A6:4C:98:A0:8A:75:8F:F7
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary2.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate2.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary2.crl
+ URI:http://url-for-crl/Intermediate2.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 6e:0e:da:63:ae:72:b5:ee:9b:ee:f6:34:18:30:e5:4c:9b:b7:
- a8:21:ef:fe:fe:55:c9:27:4d:13:ab:32:be:89:76:93:b8:2a:
- be:c2:3f:6d:f6:23:6d:ed:b2:4f:77:7e:b7:7c:f4:5a:a3:de:
- 80:09:f6:c0:3b:87:34:2d:97:5c:1a:a0:0d:e4:9f:28:93:d4:
- d6:38:ca:ea:c8:4e:ec:71:07:b8:c7:cb:c0:59:77:e5:99:80:
- 34:7b:9f:77:8f:63:b0:d0:3d:ce:a9:c4:aa:ba:49:02:5e:31:
- 84:a3:7f:8e:51:5c:06:a4:44:49:04:c4:27:7e:04:f7:13:18:
- 61:67:d1:4d:23:b0:16:f2:47:79:bd:e5:40:52:77:06:73:8b:
- 4b:c6:c4:5c:09:46:29:a3:36:b5:3c:75:6d:94:71:13:db:ff:
- e8:62:e4:76:59:06:88:9d:c5:5b:d7:af:ae:16:72:80:60:6a:
- 23:01:4d:fa:90:33:ad:01:38:47:d6:5d:91:28:9f:78:6f:ba:
- da:62:5b:17:fa:9f:5a:6e:28:5f:59:96:de:64:a8:3b:b7:de:
- fe:f7:b5:3c:79:e9:fe:15:b2:73:0f:65:5f:83:2e:6b:85:55:
- 04:42:da:87:48:6b:7d:1c:a2:b0:e2:60:7f:c9:22:70:d1:a4:
- 51:94:40:3c
+ 6c:a3:b3:78:4e:dc:a2:d9:f4:d4:37:13:e2:1d:63:41:8c:db:
+ 37:8a:b5:9c:6f:03:20:b8:56:3f:45:c9:53:e2:d7:07:12:e3:
+ 4f:70:21:11:af:68:91:67:2c:12:b0:c3:8a:c6:52:24:55:ab:
+ 4c:37:f3:cc:9c:4f:51:d6:0e:a4:be:c0:a6:4e:7a:8b:a3:db:
+ ae:3e:d8:36:71:19:f4:34:1e:d8:52:4f:75:fb:47:0e:df:fe:
+ 67:93:04:5b:88:84:7c:a4:21:aa:2c:3e:84:94:fa:96:5a:93:
+ 90:32:4f:5a:64:aa:e5:be:b1:38:24:20:a3:8e:f0:5c:96:d0:
+ da:b3:12:82:00:fb:88:24:51:c5:65:6c:90:64:7f:80:38:32:
+ 74:bf:6f:a5:5e:88:96:ff:6f:5d:22:44:bc:85:27:b5:06:8e:
+ db:7b:ab:b1:e0:96:f2:1c:f7:21:36:97:c7:0f:7d:99:b9:ca:
+ 22:74:5b:b2:70:c7:8a:4e:ae:b8:03:14:f0:ea:ad:4a:4b:97:
+ d4:b1:33:91:c6:1b:4d:2a:85:03:c9:f2:60:22:47:d8:74:bd:
+ 97:83:ec:d4:cd:20:48:f6:b2:5e:5a:a8:ed:99:cf:58:d4:02:
+ 2a:23:3e:9b:b3:21:c1:82:b6:4e:31:01:73:e0:a5:06:e0:b5:
+ 4d:18:35:9e
-----BEGIN CERTIFICATE-----
MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl
-cm1lZGlhcnkyMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowETEPMA0G
-A1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jp
-i58qjVjwk2p60tQp7M41yV7A9ycqeKN2UyVUCUPgMN+h8+KiRSHXsOb/0MyB6yt4
-mraFl4fVsp878tdVPf4PuiA5pg3IfOojimM4jnBE/9IYZj6tEGju7CH3GOR/NwnG
-5qjRokwf5XppBBPfCV4TYXwVCZxVrydmhw69/CqdfxxztYTC1ivZXfYZUli7jIxf
-p5ze141f74/zJOENEFlYxnKM1/z+vCKnWE2D8khLzVU2RSjkz5N1eA9eNcC3UuXi
-kUIEu5wMz+uJZl+QRrJ2sILErzT9pv2Tf1TOT76kMo6cP0DJbNu+hQzm3yt8m++L
-eksV3AkQO7G358fBIQIDAQABo4HrMIHoMB0GA1UdDgQWBBQRdGtI9UI8BPOiBELl
-8rwcravL4jAfBgNVHSMEGDAWgBSagKav4EpI0XAKEHoNdFe4zkhbfTBABggrBgEF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-ZGlhcnkyLmNlcjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vdXJsLWZvci1jcmwv
-SW50ZXJtZWRpYXJ5Mi5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
-AQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAbg7aY65yte6b7vY0
-GDDlTJu3qCHv/v5VySdNE6syvol2k7gqvsI/bfYjbe2yT3d+t3z0WqPegAn2wDuH
-NC2XXBqgDeSfKJPU1jjK6shO7HEHuMfLwFl35ZmANHufd49jsNA9zqnEqrpJAl4x
-hKN/jlFcBqRESQTEJ34E9xMYYWfRTSOwFvJHeb3lQFJ3BnOLS8bEXAlGKaM2tTx1
-bZRxE9v/6GLkdlkGiJ3FW9evrhZygGBqIwFN+pAzrQE4R9ZdkSifeG+62mJbF/qf
-Wm4oX1mW3mSoO7fe/ve1PHnp/hWycw9lX4Mua4VVBELah0hrfRyisOJgf8kicNGk
-UZRAPA==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-----END CERTIFICATE-----
Certificate:
@@ -98,88 +98,88 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary1
+ Issuer: CN=Intermediate1
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary2
+ Subject: CN=Intermediate2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9b:e8:f6:41:79:62:c9:06:fd:13:2c:f5:cc:07:
- a9:dd:5c:1e:90:76:a5:71:fa:f3:5c:34:1f:c9:3a:
- 33:77:05:a0:27:7b:6a:eb:8b:d8:de:25:65:6f:b6:
- d6:e1:82:34:0a:7b:13:d3:85:37:7d:d9:70:04:43:
- b3:e3:46:8b:60:e1:99:ba:28:5b:ef:c2:7e:b3:c4:
- 20:6f:94:f2:47:79:66:ce:0f:5d:79:58:aa:f7:62:
- 80:38:14:4a:17:34:59:86:39:1d:ed:38:b8:14:f4:
- 10:0c:1f:2c:8e:49:e5:5d:fd:d2:0f:37:5c:b8:e5:
- a9:86:07:0e:5e:27:ee:05:a0:ad:b5:b6:86:43:30:
- 8b:0d:35:b5:86:cd:98:98:e8:d6:04:53:4e:2b:81:
- be:d2:96:6f:cf:2f:72:2d:f5:6c:c8:ba:f5:42:7a:
- f1:67:33:03:bb:cf:6d:67:03:f3:1a:3c:39:d9:cf:
- 8f:ad:03:ca:2c:dc:e3:33:92:24:18:46:86:8e:dc:
- 27:b8:76:57:3a:7d:a2:89:96:18:07:96:04:d9:75:
- 8c:e6:1b:cf:1f:e9:6c:5d:8d:77:2f:4d:9d:00:bb:
- 16:e9:c5:da:7d:5f:45:e8:3d:17:d8:72:a6:bf:68:
- 1f:0a:a5:88:c1:74:45:53:b9:0c:d5:05:a5:ba:ed:
- 55:73
+ 00:cf:d2:9b:08:f9:4a:42:eb:7d:64:c4:af:15:8e:
+ 1a:df:56:db:70:cd:5f:55:81:80:8b:cc:6e:2e:8a:
+ ed:cc:3e:cf:73:08:a8:6a:f6:d5:ab:71:ac:8e:dc:
+ 3f:ab:85:9a:c6:2e:d5:83:98:24:71:1d:81:c5:28:
+ 05:4a:ed:25:b7:d1:a0:1a:1c:d4:36:65:aa:33:5c:
+ a1:71:de:de:4e:ff:78:ef:54:1e:2e:6f:55:d2:58:
+ fc:c4:ef:b7:1d:88:5a:b7:01:25:43:84:9a:f8:20:
+ af:70:11:76:ec:c9:57:8b:1c:19:eb:fa:25:a4:f6:
+ 96:cf:b9:4e:6d:ec:a5:f6:92:01:09:ee:ec:b9:84:
+ 51:58:1c:a8:67:6d:46:9b:87:09:5d:3e:35:d3:d7:
+ cd:2f:67:96:07:c7:4c:93:df:f9:7b:48:84:3b:4f:
+ 6b:0d:57:15:69:8b:eb:9c:00:df:6d:59:26:7b:34:
+ 4c:da:6b:62:5b:16:5b:b5:df:2e:b0:97:90:54:98:
+ 84:83:07:f0:78:c0:6c:21:8f:5e:96:d1:8c:e7:0b:
+ ad:c9:be:38:c4:a9:d5:dd:96:6e:fa:3d:e9:de:04:
+ e0:eb:7a:8f:e7:54:9c:e8:bd:cd:df:42:91:19:2c:
+ 73:b0:ef:f4:f6:49:fc:ae:9a:88:50:ac:72:a1:84:
+ 03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 9A:80:A6:AF:E0:4A:48:D1:70:0A:10:7A:0D:74:57:B8:CE:48:5B:7D
+ FD:E5:DE:B3:E1:33:73:97:CA:6B:94:1B:A6:4C:98:A0:8A:75:8F:F7
X509v3 Authority Key Identifier:
- keyid:1D:4A:1C:48:70:30:B6:65:73:56:A7:6E:A0:48:35:81:6E:3B:95:8A
+ keyid:6A:CF:A7:31:B7:5A:1E:F0:D3:D0:55:74:2A:18:ED:26:B6:46:99:A2
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary1.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate1.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary1.crl
+ URI:http://url-for-crl/Intermediate1.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 47:1c:62:1b:7e:69:aa:b6:d8:6c:50:44:09:e8:15:b5:fe:ee:
- 86:5c:69:6d:4c:7a:90:1f:2e:4f:e8:21:a3:44:38:d6:07:0b:
- 43:cf:dd:13:64:64:42:a9:ae:62:f6:1b:ea:03:2e:3b:4f:ed:
- 8a:45:8e:ec:09:d8:1a:67:eb:ef:c6:77:fc:cf:03:9f:b4:4a:
- 59:76:4e:2b:b0:d3:41:5a:a0:8c:bb:1c:61:67:52:7d:48:2e:
- 3f:c2:7d:a6:60:95:25:75:47:9c:1a:c3:1e:25:cd:e9:7d:2b:
- 71:26:fc:97:f1:2e:c6:2f:d4:2a:bb:27:d4:76:7e:c9:bc:05:
- 92:24:86:56:46:27:e0:14:af:d7:c6:72:d2:dc:be:93:2f:b3:
- 44:d3:e1:4a:08:75:47:50:16:e6:50:36:61:e3:6f:b7:a6:40:
- 1c:61:14:ae:66:20:93:0b:fb:6d:b1:a9:4d:d5:ec:8d:2b:d6:
- 84:36:c4:61:70:e5:99:4f:7e:af:97:d2:42:91:11:a7:1f:0e:
- 32:fc:09:37:44:a2:c9:bb:35:82:73:85:e5:90:b4:80:a7:4b:
- 40:ce:cb:62:ca:e1:2b:36:f6:e7:bc:3a:67:71:6d:ab:4b:87:
- cf:72:70:ad:ef:7a:85:ab:72:5d:c7:c1:ac:5e:b5:81:dc:ff:
- 96:6f:08:02
+ cb:42:61:28:aa:f4:9b:98:aa:7e:16:fc:c4:8e:58:6c:c4:3d:
+ 2e:47:9e:bf:ea:f6:61:db:95:30:77:23:c2:ea:21:67:d0:9c:
+ a5:4d:48:7b:ba:19:f9:9d:e2:f8:28:b0:f9:90:aa:f5:1e:53:
+ 02:e1:0c:b2:83:89:fe:63:ef:4e:3b:21:51:3d:cd:19:82:43:
+ c9:a1:fe:2b:ff:e7:ff:a5:19:ad:17:42:22:b8:15:01:80:17:
+ 1b:83:68:58:33:22:71:e5:03:20:f3:f2:11:b8:9b:93:be:11:
+ d0:6c:96:53:97:9e:d8:0e:f8:20:91:7d:61:a0:82:98:a2:67:
+ 06:3a:61:ee:d7:46:f1:02:77:75:28:50:cf:62:15:17:c9:9d:
+ 5b:ea:e4:1f:00:59:52:ad:66:07:46:34:df:13:3b:32:63:6a:
+ b5:a4:36:71:bd:e5:fa:85:40:98:3e:0b:1d:65:e6:b6:a0:c5:
+ b4:1b:3f:06:d4:8e:cf:4b:97:5b:7c:f2:f4:57:ba:89:a9:a9:
+ d4:b2:b3:7f:70:71:85:ca:8e:dd:3f:3b:5e:64:a7:a2:84:91:
+ 45:9e:14:4a:7e:02:1c:b0:45:4f:ee:90:8e:1a:d6:27:09:19:
+ 5d:f1:6c:8a:4b:2d:85:05:0a:83:af:1c:1a:0c:0e:b7:33:d2:
+ b7:c6:0a:f3
-----BEGIN CERTIFICATE-----
MIIDiTCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl
-cm1lZGlhcnkxMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQG
-A1UEAwwNSW50ZXJtZWRpYXJ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAJvo9kF5YskG/RMs9cwHqd1cHpB2pXH681w0H8k6M3cFoCd7auuL2N4lZW+2
-1uGCNAp7E9OFN33ZcARDs+NGi2DhmbooW+/CfrPEIG+U8kd5Zs4PXXlYqvdigDgU
-Shc0WYY5He04uBT0EAwfLI5J5V390g83XLjlqYYHDl4n7gWgrbW2hkMwiw01tYbN
-mJjo1gRTTiuBvtKWb88vci31bMi69UJ68WczA7vPbWcD8xo8OdnPj60Dyizc4zOS
-JBhGho7cJ7h2Vzp9oomWGAeWBNl1jOYbzx/pbF2Ndy9NnQC7FunF2n1fReg9F9hy
-pr9oHwqliMF0RVO5DNUFpbrtVXMCAwEAAaOB3TCB2jAdBgNVHQ4EFgQUmoCmr+BK
-SNFwChB6DXRXuM5IW30wHwYDVR0jBBgwFoAUHUocSHAwtmVzVqduoEg1gW47lYow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-SW50ZXJtZWRpYXJ5MS5jZXIwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL3VybC1m
-b3ItY3JsL0ludGVybWVkaWFyeTEuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB
-Af8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBHHGIbfmmqtthsUEQJ6BW1/u6G
-XGltTHqQHy5P6CGjRDjWBwtDz90TZGRCqa5i9hvqAy47T+2KRY7sCdgaZ+vvxnf8
-zwOftEpZdk4rsNNBWqCMuxxhZ1J9SC4/wn2mYJUldUecGsMeJc3pfStxJvyX8S7G
-L9QquyfUdn7JvAWSJIZWRifgFK/XxnLS3L6TL7NE0+FKCHVHUBbmUDZh42+3pkAc
-YRSuZiCTC/ttsalN1eyNK9aENsRhcOWZT36vl9JCkRGnHw4y/Ak3RKLJuzWCc4Xl
-kLSAp0tAzstiyuErNvbnvDpncW2rS4fPcnCt73qFq3Jdx8GsXrWB3P+WbwgC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-----END CERTIFICATE-----
Certificate:
@@ -191,35 +191,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary1
+ Subject: CN=Intermediate1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b9:d1:e1:e9:55:23:09:13:95:52:d6:31:f6:16:
- 49:28:4d:e9:02:bd:42:73:3b:f6:9a:d4:05:86:6e:
- fd:c4:26:b1:59:d5:e1:be:64:f0:84:39:f0:d9:cf:
- 0a:62:98:68:c6:7b:a1:6c:73:4c:79:5e:92:88:ba:
- db:e2:16:f9:0a:5b:46:f7:ef:6b:77:4b:98:d9:40:
- ca:1b:2d:7b:fa:9a:92:11:fe:85:6c:ef:2e:39:6f:
- 2f:16:32:cc:45:c7:a7:bd:62:2a:d7:49:9d:c1:cc:
- 0d:a8:b1:91:e0:f7:b8:e5:77:f4:0a:ef:01:de:e1:
- 65:4c:e0:e6:29:3f:2d:3f:aa:0d:a4:38:69:90:5d:
- 83:b4:e9:b0:04:c4:f4:a4:b9:5f:c0:a8:88:68:13:
- 86:a1:9b:fe:24:d3:ef:cc:34:be:3d:bb:70:58:64:
- 74:54:7d:c8:6a:a3:d3:37:9e:91:5c:fe:16:15:5f:
- 00:45:2f:f9:81:3a:7f:ef:bb:03:60:b8:08:ce:9f:
- 88:20:62:ba:4d:8a:18:8a:57:1d:ea:12:1e:62:d7:
- eb:01:80:e6:a9:72:d2:2f:84:aa:16:20:e8:f8:47:
- e1:4e:43:46:16:20:51:cd:20:39:a3:47:70:0f:9f:
- 4e:e6:7b:fa:5d:c2:9e:67:ce:22:e1:e8:1c:89:bd:
- a0:49
+ 00:db:38:a4:dd:a1:12:62:44:8f:17:f5:d0:26:2d:
+ 52:d6:74:74:29:d1:7c:9d:97:a2:a2:18:10:ff:08:
+ 38:d8:b1:9b:ff:ff:91:f1:e0:36:31:37:e1:e7:32:
+ ca:40:12:7a:6a:4f:fa:44:91:40:1f:51:14:85:32:
+ 9f:16:e1:2d:35:65:5f:3b:a8:6d:a4:e9:eb:51:d0:
+ 1f:f7:9c:1e:22:82:48:2d:72:82:a3:59:82:f1:02:
+ 0f:73:ce:1e:92:0d:1c:23:31:a7:4a:80:f1:65:13:
+ a5:57:2b:ab:16:f4:87:ca:45:79:8e:46:68:4b:97:
+ 00:b2:98:61:c7:0d:21:47:58:dc:ff:85:4e:46:9e:
+ 7c:2a:90:a0:8c:22:a2:91:06:51:61:e1:75:7d:66:
+ a4:4f:7e:12:4b:8b:f1:aa:a5:aa:fb:73:d8:ca:a2:
+ 2b:c3:ba:3c:b4:03:4c:c8:9a:b6:8e:6d:9d:3f:45:
+ 2b:35:3c:f7:86:f6:83:1a:b8:0e:41:a8:7f:62:2d:
+ d7:95:f8:39:f8:7c:bf:e9:2d:3a:1d:7b:16:b4:55:
+ 46:d4:5c:bb:d1:19:24:97:c3:14:97:94:d4:43:b4:
+ 94:07:be:12:72:ba:de:60:7a:75:3b:da:df:81:cc:
+ 55:18:07:85:44:9c:95:da:30:e7:a1:01:e9:2a:85:
+ 64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 1D:4A:1C:48:70:30:B6:65:73:56:A7:6E:A0:48:35:81:6E:3B:95:8A
+ 6A:CF:A7:31:B7:5A:1E:F0:D3:D0:55:74:2A:18:ED:26:B6:46:99:A2
X509v3 Authority Key Identifier:
- keyid:88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F6
+ keyid:46:4A:98:70:E1:6E:F7:E1:51:0F:EE:4D:43:FA:ED:D8:F3:23:58:BF
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 7c:45:39:85:85:2e:2a:47:1a:05:7c:45:0b:9d:1c:94:58:c9:
- a6:ab:95:85:fb:64:da:a3:cf:96:98:80:8c:c4:fe:5d:10:db:
- 94:df:6c:eb:15:45:d3:e8:d1:80:39:0e:b9:28:4a:b8:0c:aa:
- 87:cc:4b:b2:14:4d:fe:2c:a6:36:5e:40:5c:10:49:e2:90:1d:
- 46:ad:d1:b5:25:85:35:3d:99:da:0b:da:ad:f0:9d:94:50:6e:
- b8:4c:1c:86:d6:68:cc:d9:7f:7e:b8:8d:0c:43:0c:e9:6a:05:
- 00:0e:7d:00:88:62:70:4f:f9:a1:68:48:9f:c4:c7:cd:78:63:
- c6:6c:ec:84:c3:09:65:64:14:27:f4:f9:df:a1:f4:bc:c1:43:
- 88:88:ba:98:ba:14:66:8a:47:42:49:dc:9a:35:84:e0:8b:17:
- 9e:5b:bd:8f:4f:b3:01:2e:61:3e:12:45:ab:63:38:77:b1:f2:
- 21:57:04:49:53:e4:23:4b:58:81:23:42:9a:a5:fe:1c:08:7b:
- d6:bf:7e:ec:9d:b1:15:b7:27:2a:f2:96:81:05:52:ad:97:92:
- 71:20:34:33:99:77:a3:e9:92:e1:68:73:ea:31:eb:54:cb:f9:
- 97:61:03:56:de:4c:35:c5:cd:d4:75:a7:e4:f2:5c:66:f5:5d:
- 34:ab:8f:f8
+ 97:fe:af:92:37:5a:ea:1f:72:3a:0a:87:37:b2:e1:67:bf:37:
+ 66:1c:34:85:aa:86:38:36:c2:5e:cf:bb:de:4c:05:06:d8:61:
+ 96:4e:e7:3a:28:65:fb:1d:ee:c2:ff:e4:93:17:3d:6c:fa:1b:
+ 04:d0:06:6d:fb:41:3c:81:ff:e5:39:14:d1:37:b1:ad:fa:2f:
+ c8:fa:ce:7f:7a:85:b1:11:22:7d:24:d4:b8:93:cb:41:75:b2:
+ 7c:09:cc:af:79:af:e5:a6:49:f6:42:d3:f0:38:47:b7:28:10:
+ 56:5e:ea:65:09:11:e7:4b:42:66:3f:e5:83:08:19:cf:da:69:
+ 6a:45:51:c9:d0:93:43:71:2d:94:d4:33:b3:77:2c:a9:9e:76:
+ b8:49:70:17:ae:80:2e:3b:d0:91:63:28:9e:86:11:88:8e:0b:
+ c3:10:04:13:87:b0:5e:29:67:e8:03:ba:3d:40:04:3d:df:a5:
+ 68:34:1d:3f:7e:c8:ff:38:00:4d:da:a1:2f:e6:76:54:26:d7:
+ 42:11:fa:b0:be:8d:a1:67:95:ec:04:ff:21:db:99:ad:90:50:
+ cf:38:54:8a:4f:68:ca:e5:aa:00:9d:79:4a:57:ed:58:b0:b1:
+ bc:0b:31:c2:c6:6b:c5:5b:e0:5f:3e:b3:8c:56:8a:04:9a:45:
+ 23:3a:e2:dd
-----BEGIN CERTIFICATE-----
MIIDbjCCAlagAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQGA1UEAwwNSW50
-ZXJtZWRpYXJ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnR4elV
-IwkTlVLWMfYWSShN6QK9QnM79prUBYZu/cQmsVnV4b5k8IQ58NnPCmKYaMZ7oWxz
-THlekoi62+IW+QpbRvfva3dLmNlAyhste/qakhH+hWzvLjlvLxYyzEXHp71iKtdJ
-ncHMDaixkeD3uOV39ArvAd7hZUzg5ik/LT+qDaQ4aZBdg7TpsATE9KS5X8CoiGgT
-hqGb/iTT78w0vj27cFhkdFR9yGqj0zeekVz+FhVfAEUv+YE6f++7A2C4CM6fiCBi
-uk2KGIpXHeoSHmLX6wGA5qly0i+EqhYg6PhH4U5DRhYgUc0gOaNHcA+fTuZ7+l3C
-nmfOIuHoHIm9oEkCAwEAAaOByzCByDAdBgNVHQ4EFgQUHUocSHAwtmVzVqduoEg1
-gW47lYowHwYDVR0jBBgwFoAUiBzW5g2Pg96dnC4+HuVhguotEfYwNwYIKwYBBQUH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-AQB8RTmFhS4qRxoFfEULnRyUWMmmq5WF+2Tao8+WmICMxP5dENuU32zrFUXT6NGA
-OQ65KEq4DKqHzEuyFE3+LKY2XkBcEEnikB1GrdG1JYU1PZnaC9qt8J2UUG64TByG
-1mjM2X9+uI0MQwzpagUADn0AiGJwT/mhaEifxMfNeGPGbOyEwwllZBQn9PnfofS8
-wUOIiLqYuhRmikdCSdyaNYTgixeeW72PT7MBLmE+EkWrYzh3sfIhVwRJU+QjS1iB
-I0Kapf4cCHvWv37snbEVtycq8paBBVKtl5JxIDQzmXej6ZLhaHPqMetUy/mXYQNW
-3kw1xc3Udafk8lxm9V00q4/4
+AQCX/q+SN1rqH3I6Coc3suFnvzdmHDSFqoY4NsJez7veTAUG2GGWTuc6KGX7He7C
+/+STFz1s+hsE0AZt+0E8gf/lORTRN7Gt+i/I+s5/eoWxESJ9JNS4k8tBdbJ8Ccyv
+ea/lpkn2QtPwOEe3KBBWXuplCRHnS0JmP+WDCBnP2mlqRVHJ0JNDcS2U1DOzdyyp
+nna4SXAXroAuO9CRYyiehhGIjgvDEAQTh7BeKWfoA7o9QAQ936VoNB0/fsj/OABN
+2qEv5nZUJtdCEfqwvo2hZ5XsBP8h25mtkFDPOFSKT2jK5aoAnXlKV+1YsLG8CzHC
+xmvFW+BfPrOMVooEmkUjOuLd
-----END CERTIFICATE-----
Certificate:
@@ -285,30 +285,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a3:90:0c:56:93:34:da:26:53:6e:a9:d5:07:b9:
- 83:30:70:85:69:ed:18:67:72:bb:1d:c4:06:ff:a8:
- b8:00:75:fd:38:ac:f1:e2:4a:86:21:4d:01:77:fc:
- f3:2d:90:94:7e:14:2c:8a:89:c2:cd:42:a5:ae:fe:
- 7a:ca:9d:44:78:21:f6:ab:6d:d3:c8:8a:07:57:eb:
- 22:10:cf:1e:44:f2:a4:23:e7:10:46:1e:d4:21:60:
- 9c:01:72:ff:ca:20:c8:48:c4:ad:b0:17:28:f3:14:
- af:49:65:52:52:58:9a:1b:68:1a:9d:77:e9:61:52:
- 54:0b:81:e4:0b:c7:2d:b3:2d:aa:9e:16:1f:51:ec:
- 7d:e7:2d:2c:e6:c4:88:81:3e:1b:e1:e7:1f:21:12:
- 21:47:ec:14:a5:d9:ab:a2:2b:ac:1f:3c:b2:a5:c1:
- 69:4e:55:88:66:e8:5a:4d:9d:08:27:1c:fe:cd:62:
- b0:95:62:c4:4b:ff:12:11:4c:d8:10:66:a4:d0:29:
- da:d5:79:b7:ee:19:d5:b9:33:92:c5:61:89:56:a8:
- 4f:48:cf:9a:a0:3e:95:f0:1f:b7:c9:de:82:89:09:
- b0:87:a5:c5:71:2c:71:3b:72:4a:0a:51:c4:c4:7d:
- ac:84:c3:9b:60:3d:ff:0c:52:05:23:4d:57:57:06:
- 60:17
+ 00:ae:d8:f0:4c:e2:aa:62:09:4f:6c:9e:00:49:b4:
+ b3:65:74:d7:78:f8:8d:42:96:f8:95:0e:58:91:bc:
+ b5:0c:9e:0c:df:0d:ab:e4:0b:8c:4d:77:24:45:0f:
+ 02:97:7c:d7:c4:10:41:7f:1f:10:80:46:85:6b:c1:
+ bb:88:81:fc:af:9e:35:f1:88:62:ff:58:e8:67:13:
+ a1:0d:10:9c:ea:0e:5d:fa:2c:b3:a2:e4:aa:53:55:
+ f4:01:1d:f9:bf:05:7e:36:f6:93:df:ce:44:e6:a9:
+ 8e:2d:93:75:1c:a1:55:18:41:f3:7f:1e:62:76:18:
+ 3f:0f:ca:5b:d5:0b:49:d1:ff:6a:1c:d5:2f:9d:c9:
+ 63:b7:1c:b7:03:39:5a:41:c5:b2:19:86:dd:f8:a1:
+ df:e8:75:4b:91:69:0b:96:83:c7:df:c5:c8:f0:a9:
+ ea:7c:d3:fe:11:29:39:ca:ce:1e:5e:9a:00:0c:16:
+ 1d:aa:c4:f0:4f:4f:d8:12:57:06:04:3c:04:e3:89:
+ d8:fb:71:9f:d5:14:c0:e9:ad:c9:c9:61:7f:00:6a:
+ e7:3f:c3:fc:99:b7:94:2a:dd:16:d7:f5:7d:77:1d:
+ de:87:e7:0b:18:fa:35:e6:23:7b:c9:d1:6a:88:20:
+ bf:ed:ec:2a:2a:e1:65:96:1e:68:15:bd:1b:ae:31:
+ cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F6
+ 46:4A:98:70:E1:6E:F7:E1:51:0F:EE:4D:43:FA:ED:D8:F3:23:58:BF
X509v3 Authority Key Identifier:
- keyid:88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F6
+ keyid:46:4A:98:70:E1:6E:F7:E1:51:0F:EE:4D:43:FA:ED:D8:F3:23:58:BF
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -323,41 +323,41 @@
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:1
Signature Algorithm: sha256WithRSAEncryption
- 2e:81:16:b6:af:49:9b:93:4d:84:34:9c:f0:43:ee:76:91:f5:
- 88:9e:6b:cd:a8:95:f2:5e:10:19:f0:41:98:b2:ac:38:2a:ac:
- 3e:4c:0f:49:0b:b9:fd:97:d3:c9:61:6c:8b:7d:26:06:1d:65:
- 7e:e8:92:23:07:82:cc:3c:c9:c7:32:7b:2e:e2:3e:e8:42:52:
- 29:9f:6d:8f:7d:34:57:37:7a:71:8f:f1:28:33:70:aa:59:88:
- 12:95:74:82:60:d0:14:50:b5:d4:5a:ad:7c:03:85:ab:84:c9:
- e5:bf:7a:4a:3e:1a:d0:44:0b:bc:e1:ae:3b:48:e9:00:1c:92:
- 1b:b5:40:a4:e6:65:88:ec:3b:6e:ab:da:37:10:b7:6d:45:e5:
- 70:89:eb:e4:21:68:2e:77:e6:de:25:e3:5d:7a:a0:f1:33:4c:
- cc:e2:8b:a9:c8:fd:dc:0b:4b:9e:4c:5c:7c:86:0f:d4:ab:f9:
- e0:c8:c0:82:76:38:55:d3:dc:4d:57:d0:ca:76:63:9f:92:5c:
- ff:5f:1b:bd:b6:39:5e:0f:5f:93:0b:86:23:9e:08:d3:e4:11:
- 02:5f:5f:bd:00:af:d3:22:c0:14:3a:f4:4b:8b:fb:be:5e:b7:
- 1c:34:e1:20:69:5d:7c:d9:f5:86:28:ab:92:a6:31:6b:fe:1d:
- 03:00:f0:89
+ 75:7f:28:f3:9e:92:a5:65:6a:9a:ed:7f:29:3e:17:88:10:6a:
+ cc:a7:0d:b7:80:f0:d4:38:d0:f2:ed:a6:51:3e:7f:20:98:f3:
+ bc:18:ad:c3:3d:83:bb:b4:37:f0:27:68:eb:71:e4:a0:33:f0:
+ 6b:57:be:f2:9d:f6:45:ac:7b:83:bd:f9:bc:90:6e:38:20:4a:
+ 69:00:f3:2c:b0:b2:68:a4:14:b8:2d:09:f5:87:63:57:97:0a:
+ c5:64:41:c4:ab:b3:09:91:4e:ab:c6:b6:0f:1b:d4:86:16:12:
+ 02:86:3f:c7:4b:46:05:55:28:8b:f8:a5:f1:a3:1a:8c:d0:1c:
+ b6:83:56:01:9f:fd:68:f6:e1:6d:ff:ce:3a:59:7d:0e:5e:be:
+ 72:e7:b3:7c:c3:b6:a4:a1:a9:bc:a4:af:60:55:5b:07:51:19:
+ db:5b:1a:89:b9:ab:bb:cb:7a:ed:33:b1:c7:10:f6:6b:c7:a8:
+ 93:fb:fb:b7:f0:40:db:22:73:86:7d:da:db:33:a8:f4:e3:fc:
+ 45:6e:69:49:ba:18:7c:c0:59:75:b9:82:64:ae:8d:db:ae:27:
+ 03:14:2d:e2:e0:38:d3:af:0c:65:3b:4b:d7:c2:94:d4:9a:4d:
+ e6:58:31:d8:b6:c0:b1:c7:71:21:3f:a1:bf:84:d1:a1:c0:d9:
+ 06:47:08:0b
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDaDCCAlCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKOQDFaTNNomU26p1Qe5
-gzBwhWntGGdyux3EBv+ouAB1/Tis8eJKhiFNAXf88y2QlH4ULIqJws1Cpa7+esqd
-RHgh9qtt08iKB1frIhDPHkTypCPnEEYe1CFgnAFy/8ogyEjErbAXKPMUr0llUlJY
-mhtoGp136WFSVAuB5AvHLbMtqp4WH1HsfectLObEiIE+G+HnHyESIUfsFKXZq6Ir
-rB88sqXBaU5ViGboWk2dCCcc/s1isJVixEv/EhFM2BBmpNAp2tV5t+4Z1bkzksVh
-iVaoT0jPmqA+lfAft8negokJsIelxXEscTtySgpRxMR9rITDm2A9/wxSBSNNV1cG
-YBcCAwEAAaOBzjCByzAdBgNVHQ4EFgQUiBzW5g2Pg96dnC4+HuVhguotEfYwHwYD
-VR0jBBgwFoAUiBzW5g2Pg96dnC4+HuVhguotEfYwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMA0GCSqGSIb3DQEBCwUAA4IBAQAugRa2
-r0mbk02ENJzwQ+52kfWInmvNqJXyXhAZ8EGYsqw4Kqw+TA9JC7n9l9PJYWyLfSYG
-HWV+6JIjB4LMPMnHMnsu4j7oQlIpn22PfTRXN3pxj/EoM3CqWYgSlXSCYNAUULXU
-Wq18A4WrhMnlv3pKPhrQRAu84a47SOkAHJIbtUCk5mWI7Dtuq9o3ELdtReVwievk
-IWgud+beJeNdeqDxM0zM4oupyP3cC0ueTFx8hg/Uq/ngyMCCdjhV09xNV9DKdmOf
-klz/Xxu9tjleD1+TC4YjngjT5BECX1+9AK/TIsAUOvRLi/u+XrccNOEgaV182fWG
-KKuSpjFr/h0DAPCJ
+AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMA0GCSqGSIb3DQEBCwUAA4IBAQB1fyjz
+npKlZWqa7X8pPheIEGrMpw23gPDUONDy7aZRPn8gmPO8GK3DPYO7tDfwJ2jrceSg
+M/BrV77ynfZFrHuDvfm8kG44IEppAPMssLJopBS4LQn1h2NXlwrFZEHEq7MJkU6r
+xrYPG9SGFhIChj/HS0YFVSiL+KXxoxqM0By2g1YBn/1o9uFt/846WX0OXr5y57N8
+w7akoam8pK9gVVsHURnbWxqJuau7y3rtM7HHEPZrx6iT+/u38EDbInOGfdrbM6j0
+4/xFbmlJuhh8wFl1uYJkro3bricDFC3i4DjTrwxlO0vXwpTUmk3mWDHYtsCxx3Eh
+P6G/hNGhwNkGRwgL
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/net.gypi b/net/net.gypi
index 8a4a799..744f6e8 100644
--- a/net/net.gypi
+++ b/net/net.gypi
@@ -2458,17 +2458,17 @@
'data/url_request_unittest/with-headers.html',
'data/url_request_unittest/with-headers.html.mock-http-headers',
'data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem',
- 'data/verify_certificate_chain_unittest/expired-intermediary.pem',
+ 'data/verify_certificate_chain_unittest/expired-intermediate.pem',
'data/verify_certificate_chain_unittest/expired-root.pem',
'data/verify_certificate_chain_unittest/expired-target-notBefore.pem',
'data/verify_certificate_chain_unittest/expired-target.pem',
- 'data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem',
- 'data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem',
- 'data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem',
- 'data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem',
- 'data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem',
- 'data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem',
- 'data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem',
'data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal-anchor.pem',
'data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal.pem',
'data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem',
@@ -2476,7 +2476,7 @@
'data/verify_certificate_chain_unittest/key-rollover-oldchain.pem',
'data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem',
'data/verify_certificate_chain_unittest/non-self-signed-root.pem',
- 'data/verify_certificate_chain_unittest/target-and-intermediary.pem',
+ 'data/verify_certificate_chain_unittest/target-and-intermediate.pem',
'data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem',
'data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem',
'data/verify_certificate_chain_unittest/target-not-end-entity.pem',
Author: eroman <ero...@chromium.org>
AuthorDate: Sat Jul 09 00:38:59 2016
Commit: Commit bot <commi...@chromium.org>
CommitDate: Sat Jul 09 00:40:46 2016
Cleanup: Rename "intermediary" --> "intermediate"
Mechanically generated CL that does these replacements:
intermediary --> intermediate
intermediaries --> intermediates
Intermediary --> Intermediate
Intermediaries --> Intermediates
Review-Url: https://codereview.chromium.org/2130283003
Cr-Commit-Position: refs/heads/master@{#404545}
diff --git a/net/cert/internal/verify_certificate_chain.cc b/net/cert/internal/verify_certificate_chain.cc
index baef57a..ee379fd 100644
--- a/net/cert/internal/verify_certificate_chain.cc
+++ b/net/cert/internal/verify_certificate_chain.cc
@@ -169,7 +169,7 @@
}
// This function corresponds to RFC 5280 section 6.1.4's "Preparation for
-// Certificate i+1" procedure. |cert| is expected to be an intermediary.
+// Certificate i+1" procedure. |cert| is expected to be an intermediate.
WARN_UNUSED_RESULT bool PrepareForNextCertificate(
const ParsedCertificate& cert,
size_t* max_path_length_ptr,
@@ -211,7 +211,7 @@
// choose to reject all version 1 and version 2 intermediate
// certificates.)
//
- // This code implicitly rejects non version 3 intermediaries, since they
+ // This code implicitly rejects non version 3 intermediates, since they
// can't contain a BasicConstraints extension.
if (!cert.has_basic_constraints() || !cert.basic_constraints().is_ca)
return false;
diff --git a/net/cert/internal/verify_certificate_chain_typed_unittest.h b/net/cert/internal/verify_certificate_chain_typed_unittest.h
index 1ddd464..b4990a3 100644
--- a/net/cert/internal/verify_certificate_chain_typed_unittest.h
+++ b/net/cert/internal/verify_certificate_chain_typed_unittest.h
@@ -118,38 +118,38 @@
TYPED_TEST_CASE_P(VerifyCertificateChainSingleRootTest);
-TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetAndIntermediary) {
- this->RunTest("target-and-intermediary.pem");
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetAndIntermediate) {
+ this->RunTest("target-and-intermediate.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryLacksBasicConstraints) {
- this->RunTest("intermediary-lacks-basic-constraints.pem");
+ IntermediateLacksBasicConstraints) {
+ this->RunTest("intermediate-lacks-basic-constraints.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryBasicConstraintsCaFalse) {
- this->RunTest("intermediary-basic-constraints-ca-false.pem");
+ IntermediateBasicConstraintsCaFalse) {
+ this->RunTest("intermediate-basic-constraints-ca-false.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryBasicConstraintsNotCritical) {
- this->RunTest("intermediary-basic-constraints-not-critical.pem");
+ IntermediateBasicConstraintsNotCritical) {
+ this->RunTest("intermediate-basic-constraints-not-critical.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryLacksSigningKeyUsage) {
- this->RunTest("intermediary-lacks-signing-key-usage.pem");
+ IntermediateLacksSigningKeyUsage) {
+ this->RunTest("intermediate-lacks-signing-key-usage.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryUnknownCriticalExtension) {
- this->RunTest("intermediary-unknown-critical-extension.pem");
+ IntermediateUnknownCriticalExtension) {
+ this->RunTest("intermediate-unknown-critical-extension.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
- IntermediaryUnknownNonCriticalExtension) {
- this->RunTest("intermediary-unknown-non-critical-extension.pem");
+ IntermediateUnknownNonCriticalExtension) {
+ this->RunTest("intermediate-unknown-non-critical-extension.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest,
@@ -166,8 +166,8 @@
this->RunTest("target-signed-with-md5.pem");
}
-TYPED_TEST_P(VerifyCertificateChainSingleRootTest, IntermediarySignedWithMd5) {
- this->RunTest("intermediary-signed-with-md5.pem");
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, IntermediateSignedWithMd5) {
+ this->RunTest("intermediate-signed-with-md5.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest, TargetWrongSignature) {
@@ -182,8 +182,8 @@
this->RunTest("target-signed-using-ecdsa.pem");
}
-TYPED_TEST_P(VerifyCertificateChainSingleRootTest, ExpiredIntermediary) {
- this->RunTest("expired-intermediary.pem");
+TYPED_TEST_P(VerifyCertificateChainSingleRootTest, ExpiredIntermediate) {
+ this->RunTest("expired-intermediate.pem");
}
TYPED_TEST_P(VerifyCertificateChainSingleRootTest, ExpiredTarget) {
@@ -255,21 +255,21 @@
// ordinal not in range, like "March 39, 2016" are rejected.
REGISTER_TYPED_TEST_CASE_P(VerifyCertificateChainSingleRootTest,
- TargetAndIntermediary,
- IntermediaryLacksBasicConstraints,
- IntermediaryBasicConstraintsCaFalse,
- IntermediaryBasicConstraintsNotCritical,
- IntermediaryLacksSigningKeyUsage,
- IntermediaryUnknownCriticalExtension,
- IntermediaryUnknownNonCriticalExtension,
+ TargetAndIntermediate,
+ IntermediateLacksBasicConstraints,
+ IntermediateBasicConstraintsCaFalse,
+ IntermediateBasicConstraintsNotCritical,
+ IntermediateLacksSigningKeyUsage,
+ IntermediateUnknownCriticalExtension,
+ IntermediateUnknownNonCriticalExtension,
ViolatesBasicConstraintsPathlen0,
BasicConstraintsPathlen0SelfIssued,
TargetSignedWithMd5,
- IntermediarySignedWithMd5,
+ IntermediateSignedWithMd5,
TargetWrongSignature,
TargetSignedBy512bitRsa,
TargetSignedUsingEcdsa,
- ExpiredIntermediary,
+ ExpiredIntermediate,
ExpiredTarget,
ExpiredTargetNotBefore,
ExpiredRoot,
diff --git a/net/data/cert_issuer_source_aia_unittest/generate-certs.py b/net/data/cert_issuer_source_aia_unittest/generate-certs.py
index 534d498..e854c13 100755
--- a/net/data/cert_issuer_source_aia_unittest/generate-certs.py
+++ b/net/data/cert_issuer_source_aia_unittest/generate-certs.py
@@ -15,39 +15,39 @@
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificates. All have the same subject and key.
-i_base = common.create_intermediary_certificate('I', root)
+# Intermediate certificates. All have the same subject and key.
+i_base = common.create_intermediate_certificate('I', root)
common.write_string_to_file(i_base.get_cert_pem(), 'i.pem')
-i2 = common.create_intermediary_certificate('I', root)
+i2 = common.create_intermediate_certificate('I', root)
i2.set_key_path(i_base.get_key_path())
common.write_string_to_file(i2.get_cert_pem(), 'i2.pem')
-i3 = common.create_intermediary_certificate('I', root)
+i3 = common.create_intermediate_certificate('I', root)
i3.set_key_path(i_base.get_key_path())
common.write_string_to_file(i3.get_cert_pem(), 'i3.pem')
-# More Intermediary certificates, which are just to generate the proper config
+# More Intermediate certificates, which are just to generate the proper config
# files so the target certs will have the desired Authority Information Access
# values. These ones aren't saved to files.
-i_no_aia = common.create_intermediary_certificate('I', root)
+i_no_aia = common.create_intermediate_certificate('I', root)
i_no_aia.set_key_path(i_base.get_key_path())
section = i_no_aia.config.get_section('signing_ca_ext')
section.set_property('authorityInfoAccess', None)
-i_two_aia = common.create_intermediary_certificate('I', root)
+i_two_aia = common.create_intermediate_certificate('I', root)
i_two_aia.set_key_path(i_base.get_key_path())
section = i_two_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.1', 'http://url-for-aia2/I2.foo')
-i_three_aia = common.create_intermediary_certificate('I', root)
+i_three_aia = common.create_intermediate_certificate('I', root)
i_three_aia.set_key_path(i_base.get_key_path())
section = i_three_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.1', 'http://url-for-aia2/I2.foo')
section.set_property('caIssuers;URI.2', 'http://url-for-aia3/I3.foo')
-i_six_aia = common.create_intermediary_certificate('I', root)
+i_six_aia = common.create_intermediate_certificate('I', root)
i_six_aia.set_key_path(i_base.get_key_path())
section = i_six_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.1', 'http://url-for-aia2/I2.foo')
@@ -56,23 +56,23 @@
section.set_property('caIssuers;URI.4', 'http://url-for-aia5/I5.foo')
section.set_property('caIssuers;URI.5', 'http://url-for-aia6/I6.foo')
-i_file_aia = common.create_intermediary_certificate('I', root)
+i_file_aia = common.create_intermediate_certificate('I', root)
i_file_aia.set_key_path(i_base.get_key_path())
section = i_file_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.0', 'file:///dev/null')
-i_invalid_url_aia = common.create_intermediary_certificate('I', root)
+i_invalid_url_aia = common.create_intermediate_certificate('I', root)
i_invalid_url_aia.set_key_path(i_base.get_key_path())
section = i_invalid_url_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.0', 'foobar')
-i_file_and_http_aia = common.create_intermediary_certificate('I', root)
+i_file_and_http_aia = common.create_intermediate_certificate('I', root)
i_file_and_http_aia.set_key_path(i_base.get_key_path())
section = i_file_and_http_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.0', 'file:///dev/null')
section.set_property('caIssuers;URI.1', 'http://url-for-aia2/I2.foo')
-i_invalid_and_http_aia = common.create_intermediary_certificate('I', root)
+i_invalid_and_http_aia = common.create_intermediate_certificate('I', root)
i_invalid_and_http_aia.set_key_path(i_base.get_key_path())
section = i_invalid_and_http_aia.config.get_section('issuer_info')
section.set_property('caIssuers;URI.0', 'foobar')
diff --git a/net/data/cert_issuer_source_static_unittest/generate-certs.py b/net/data/cert_issuer_source_static_unittest/generate-certs.py
index c67cc81..e15fd91 100755
--- a/net/data/cert_issuer_source_static_unittest/generate-certs.py
+++ b/net/data/cert_issuer_source_static_unittest/generate-certs.py
@@ -47,16 +47,16 @@
write_cert_to_file(root, 'root.pem')
-# Intermediary certificates
-i1_1 = common.create_intermediary_certificate('I1', root)
+# Intermediate certificates
+i1_1 = common.create_intermediate_certificate('I1', root)
write_cert_to_file(i1_1, 'i1_1.pem')
# same name (after normalization), different key
-i1_2 = common.create_intermediary_certificate('i1', root)
+i1_2 = common.create_intermediate_certificate('i1', root)
write_cert_to_file(i1_2, 'i1_2.pem')
# different name
-i2 = common.create_intermediary_certificate('I2', root)
+i2 = common.create_intermediate_certificate('I2', root)
write_cert_to_file(i2, 'i2.pem')
diff --git a/net/data/verify_certificate_chain_unittest/README b/net/data/verify_certificate_chain_unittest/README
index 11cc4cb..5c7019d 100644
--- a/net/data/verify_certificate_chain_unittest/README
+++ b/net/data/verify_certificate_chain_unittest/README
@@ -24,6 +24,6 @@
The input file is a PEM file with blocks for:
* The trust store
- * The certificate chain (target certificate and all intermediaries)
+ * The certificate chain (target certificate and all intermediates)
* The timestamp to use when verifying
* The expected result of verification (success or fail)
diff --git a/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem b/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
index 5ed1126..53f7de92 100644
--- a/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
+++ b/net/data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem
@@ -1,6 +1,6 @@
[Created by: generate-basic-constraints-pathlen-0-self-issued.py]
-Certificate chain with 2 intermediaries. The first intermediary has a basic
+Certificate chain with 2 intermediates. The first intermediate has a basic
constraints path length of 0. The second one is self-issued so does not count
against the path length.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cc:d5:1f:2f:97:16:d6:23:ca:d5:a1:c1:97:42:
- 2b:7e:3e:7f:45:44:70:b9:8d:81:76:be:b4:69:56:
- 78:a9:14:10:69:ad:60:8e:ed:80:b2:a2:f9:85:d6:
- fe:4c:81:d0:30:8e:c8:75:48:29:48:b9:ad:9f:a9:
- 83:b6:4f:c7:ba:40:f9:d5:66:9f:f9:51:48:72:0d:
- 95:38:65:da:41:8a:91:4a:e1:34:d6:1c:a0:0b:ee:
- 4d:07:69:0c:74:87:58:79:1b:e5:7b:51:ae:19:36:
- b2:6a:a6:89:81:30:bd:51:c1:7f:99:86:63:78:48:
- a6:8e:74:f6:5f:cc:fb:3f:12:ac:2e:e7:a8:75:15:
- b7:5b:37:dd:ce:54:68:ae:0d:ad:80:13:b5:d7:06:
- 98:39:a9:67:f9:fb:c1:7f:e0:f6:6b:14:f3:d3:b4:
- f4:33:2c:41:9e:69:63:de:b3:f9:cd:4e:f8:58:98:
- dd:6f:9b:9a:b7:82:19:c1:01:c9:2d:fb:d3:5a:48:
- 5f:e4:e5:c5:6e:5f:b1:3b:31:49:65:f0:0d:46:a5:
- 33:fb:57:23:fc:ca:17:51:72:fc:5a:f7:7c:44:74:
- 24:3b:cc:54:2c:e3:d4:8b:e9:9c:13:da:78:58:a1:
- d8:00:19:30:ee:3d:29:fb:2b:7a:79:b8:69:f2:3b:
- d3:19
+ 00:ce:da:bc:23:ea:7f:3b:c7:c0:83:35:31:8c:8a:
+ d4:32:e0:e8:ff:6e:80:4c:38:d5:60:3c:cf:dc:bb:
+ 6a:76:d6:7a:4b:03:29:21:5b:4c:51:8d:2d:82:7c:
+ 65:8f:c0:ca:c4:07:57:63:29:81:19:63:06:09:4d:
+ 91:c0:22:c6:29:ec:79:e7:e5:f1:aa:22:52:0b:73:
+ 8d:60:ef:47:bb:f6:b7:7a:5a:87:c0:d4:2c:ac:95:
+ a2:17:6f:31:19:cc:92:ca:ca:b0:e3:74:b3:a5:26:
+ 06:fd:ba:28:3d:1a:69:9d:d3:b5:da:f5:98:22:ed:
+ da:60:29:92:ec:df:76:98:7b:2b:4b:47:ca:65:32:
+ 09:24:4c:27:be:3c:94:c1:45:f6:f7:67:72:62:62:
+ 60:e4:82:fe:74:fe:b1:7b:bd:4c:24:36:7d:0c:4d:
+ 1d:b1:91:58:6b:01:ba:89:3a:e3:60:86:e4:68:1e:
+ 7a:28:7c:4c:a4:c2:50:73:fa:2e:21:62:71:36:6b:
+ 82:50:c2:12:3c:f0:70:83:ed:98:7c:f0:16:08:81:
+ d8:b3:4e:85:4b:31:a5:ce:ed:89:82:01:4f:c6:ca:
+ b3:29:0d:fb:e7:54:79:84:51:d6:ef:ef:98:6c:c6:
+ 66:8c:2c:d5:33:9d:37:37:8d:f2:f2:36:66:ac:1d:
+ f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 6D:49:C7:0A:DE:44:7C:B7:07:ED:87:EF:41:DE:5D:12:91:28:3D:1C
+ A4:2C:1E:6A:EA:E4:DB:1A:EA:98:3A:F3:38:7B:5D:F4:8F:24:DA:3A
X509v3 Authority Key Identifier:
- keyid:31:9F:A3:DB:EA:90:94:EB:3D:93:39:9F:BA:8A:05:7E:2C:94:23:9B
+ keyid:8C:6F:A0:45:A9:77:60:30:97:AA:87:1F:96:34:1D:3B:7A:C6:40:5E
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 34:51:df:38:e9:c2:df:c6:2c:01:00:7e:a1:4b:5e:d1:43:8a:
- d7:4e:ff:49:5d:17:e7:bd:e2:3c:cd:43:63:4d:a9:05:97:bf:
- 76:e2:8d:90:d2:dd:ea:6b:4c:e3:1e:c1:7b:8b:35:5a:24:cc:
- d8:b2:9a:12:07:d2:66:fa:fd:3c:79:b4:a7:d7:cb:69:af:07:
- f7:9d:66:34:ee:ed:22:1f:7d:58:9e:e1:49:90:88:95:1e:27:
- 2a:3d:dc:a9:b9:1d:2b:1f:88:b9:0c:89:a1:bc:dd:25:97:b9:
- 32:0e:02:86:fa:a3:2c:cd:8e:29:e5:68:12:3b:5b:bf:0e:cc:
- 25:ad:06:ef:77:26:d7:b4:84:cf:ba:00:55:c4:f0:95:39:88:
- ff:22:f8:a5:89:8a:d2:31:aa:e7:98:76:02:19:bd:04:bc:5c:
- 26:be:5e:eb:96:2b:f6:a2:cf:13:3e:a1:82:92:63:c0:13:bc:
- b6:f9:06:fb:77:c3:0f:cd:39:b1:af:43:b5:9d:fc:64:d4:bd:
- d0:81:5c:06:fb:8b:0e:c5:59:0b:07:d6:a7:8b:a9:8e:b3:6b:
- f5:ed:9b:ea:ea:f7:6f:ea:2b:02:df:62:92:ae:98:fb:45:ca:
- bc:1c:6b:eb:6d:33:e3:0e:32:0f:0d:e3:7f:5c:ef:e3:1b:c2:
- f6:fc:99:a4
+ 51:ba:35:03:2c:20:55:1a:24:3e:11:c6:13:29:e3:98:58:fa:
+ 09:b7:3b:47:45:4a:32:c5:85:3a:64:d9:d3:ff:f8:fb:f8:eb:
+ 1d:88:22:29:b9:38:31:8f:de:12:da:c9:c3:93:de:5a:4e:25:
+ 89:11:8b:a9:0c:3a:1f:ce:0b:8a:0b:ec:e4:e6:4b:b6:c9:ae:
+ 63:0e:89:72:64:ee:9c:fd:1a:88:59:49:96:0c:0f:14:db:be:
+ 5e:37:02:2e:af:f0:da:04:c0:29:e5:3a:96:b2:a4:6b:cc:a6:
+ be:63:5a:d2:61:58:23:96:fe:15:a5:2a:46:15:5d:13:76:0a:
+ 07:59:b9:ed:41:79:db:c7:1b:a9:6d:99:d1:3e:1c:93:97:c8:
+ b7:40:6e:4b:d0:31:d6:7b:e3:9d:c8:f9:04:0d:1c:d7:f8:d4:
+ a8:85:ba:be:90:95:7c:b3:d7:85:74:14:fd:50:6e:93:80:96:
+ fe:09:24:83:b7:f8:f2:08:bc:c2:1a:b3:92:af:0e:a9:d6:32:
+ 0f:a0:86:fc:f7:95:6d:5b:07:a6:83:0d:2b:67:05:c1:2f:90:
+ a0:b0:02:ba:57:64:10:97:52:d8:67:ff:39:c0:3c:d0:c7:90:
+ 76:2f:e0:42:37:ec:50:85:55:78:1e:34:88:63:4f:73:d0:7b:
+ 7d:d1:20:85
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1R8v
-lxbWI8rVocGXQit+Pn9FRHC5jYF2vrRpVnipFBBprWCO7YCyovmF1v5MgdAwjsh1
-SClIua2fqYO2T8e6QPnVZp/5UUhyDZU4ZdpBipFK4TTWHKAL7k0HaQx0h1h5G+V7
-Ua4ZNrJqpomBML1RwX+ZhmN4SKaOdPZfzPs/Eqwu56h1FbdbN93OVGiuDa2AE7XX
-Bpg5qWf5+8F/4PZrFPPTtPQzLEGeaWPes/nNTvhYmN1vm5q3ghnBAckt+9NaSF/k
-5cVuX7E7MUll8A1GpTP7VyP8yhdRcvxa93xEdCQ7zFQs49SL6ZwT2nhYodgAGTDu
-PSn7K3p5uGnyO9MZAgMBAAGjgekwgeYwHQYDVR0OBBYEFG1JxwreRHy3B+2H70He
-XRKRKD0cMB8GA1UdIwQYMBaAFDGfo9vqkJTrPZM5n7qKBX4slCObMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEANFHfOOnC38YsAQB+oUte
-0UOK107/SV0X573iPM1DY02pBZe/duKNkNLd6mtM4x7Be4s1WiTM2LKaEgfSZvr9
-PHm0p9fLaa8H951mNO7tIh99WJ7hSZCIlR4nKj3cqbkdKx+IuQyJobzdJZe5Mg4C
-hvqjLM2OKeVoEjtbvw7MJa0G73cm17SEz7oAVcTwlTmI/yL4pYmK0jGq55h2Ahm9
-BLxcJr5e65Yr9qLPEz6hgpJjwBO8tvkG+3fDD805sa9DtZ38ZNS90IFcBvuLDsVZ
-CwfWp4upjrNr9e2b6ur3b+orAt9ikq6Y+0XKvBxr620z4w4yDw3jf1zv4xvC9vyZ
-pA==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-----END CERTIFICATE-----
Certificate:
@@ -99,88 +99,88 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:e6:56:91:e6:27:53:a1:d7:64:56:d8:c8:57:b7:
- 55:7c:89:a2:b4:9d:ab:72:f0:bc:03:35:16:53:77:
- 7e:ef:bf:0b:f5:91:d5:de:ae:bb:ae:ae:3a:53:00:
- ec:80:3b:a0:2b:d3:6a:ae:0c:d0:4c:a1:24:b2:b4:
- 77:de:ad:81:0f:70:f8:f4:dc:f8:c7:6e:f8:54:29:
- 84:3a:b8:83:f4:95:22:80:ae:71:b0:dd:4e:ba:82:
- 87:80:d1:c7:f3:ad:a7:45:c5:db:47:3c:8e:84:31:
- bc:c6:bd:29:77:70:39:78:f4:3b:5e:ae:8f:d9:44:
- 6b:1a:1d:cb:f9:7b:84:14:7c:5b:b8:82:3c:ed:47:
- 16:c6:4e:2b:75:5a:1b:b4:5d:0c:0a:2f:55:b6:48:
- 87:a1:25:a2:a9:5b:e4:a8:f9:bc:70:24:92:07:7f:
- 5b:94:83:3b:44:78:65:cb:62:0c:30:fa:cf:f1:f7:
- 20:9e:76:c8:52:78:8b:f8:30:62:f0:66:28:8a:7f:
- ba:74:12:f8:05:ef:29:d8:17:cb:8a:95:61:fc:af:
- 58:d2:e2:86:d7:8c:fb:3b:56:28:8d:e4:d9:27:48:
- b6:c1:fc:9a:4e:d4:24:b8:68:c3:32:5d:65:30:6e:
- a3:9e:b9:bf:6e:a7:3b:b4:3d:2e:5d:13:a1:28:4e:
- a4:0d
+ 00:b6:ad:89:87:ed:48:f8:65:a1:8e:48:22:2d:af:
+ 1e:0c:0b:e0:4c:5c:7a:0d:25:c1:a4:91:9a:b3:cc:
+ 1f:78:07:40:c7:05:97:71:d2:94:bc:ce:0c:27:b2:
+ c9:57:7a:44:49:32:26:02:72:c6:f3:f7:18:ca:35:
+ 2c:25:ba:17:a4:a4:68:92:ea:68:d8:50:17:21:65:
+ 2e:94:db:56:47:96:53:c8:d3:96:c0:34:55:12:8d:
+ a1:0c:2d:dd:f9:3c:34:78:5a:ee:32:63:e3:34:8c:
+ 44:4c:67:c4:c4:31:42:35:ba:07:6e:70:c3:9e:73:
+ da:dc:08:1c:2f:d4:c6:32:42:62:67:55:ac:f4:4a:
+ a1:29:cf:ba:c3:2a:74:b3:e6:eb:a8:df:c8:79:0e:
+ 86:55:1d:dd:c4:61:63:f1:39:ca:ae:0b:a0:d4:81:
+ 69:69:6b:ca:72:9a:79:9b:eb:d0:b4:0a:63:b5:ec:
+ dc:a0:ce:5f:10:e3:e7:1c:f5:71:3e:01:8e:09:fc:
+ cc:80:92:ed:92:7e:68:ac:2d:9f:49:63:56:0e:61:
+ a6:44:75:99:14:68:97:24:42:a1:16:47:1d:c9:42:
+ 1f:74:d2:f3:7e:11:4b:b0:7b:73:5f:20:5d:3a:e4:
+ 74:71:34:25:d3:2d:77:9c:5f:06:4d:f7:15:fc:74:
+ 24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 31:9F:A3:DB:EA:90:94:EB:3D:93:39:9F:BA:8A:05:7E:2C:94:23:9B
+ 8C:6F:A0:45:A9:77:60:30:97:AA:87:1F:96:34:1D:3B:7A:C6:40:5E
X509v3 Authority Key Identifier:
- keyid:73:4C:95:45:4C:3B:F6:7E:7B:92:30:C9:AC:30:51:E7:7D:21:D2:BF
+ keyid:BD:54:1F:A6:8B:24:E6:BD:59:FD:50:9F:2B:A8:54:7F:F2:7B:B1:3E
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha256WithRSAEncryption
- 0d:7d:a3:df:40:cd:02:79:b5:69:5d:c5:a7:eb:bc:87:95:c3:
- 17:fc:73:dd:59:a8:c2:d3:67:71:15:09:7a:9b:f8:01:5d:a0:
- d2:a3:e5:37:1d:f5:f3:2c:fd:8d:8e:e7:6c:ca:01:2a:83:a8:
- 00:c9:65:26:8e:ab:0b:13:91:9c:00:9a:a3:60:44:8c:82:0f:
- 04:1e:74:b1:c6:4f:a6:da:37:70:16:35:03:92:f2:04:ab:c8:
- 21:97:a8:b4:e3:bf:bf:67:9e:ce:c3:24:df:6a:cc:43:d6:ea:
- 59:89:b7:3e:1c:de:ed:ab:99:ec:26:60:3b:b7:84:4b:e0:1a:
- b7:be:6d:20:7b:f4:88:a2:bf:95:3f:6e:7a:fa:ea:e1:55:72:
- 88:ae:67:b3:13:1a:3a:1f:07:16:1d:84:fd:e5:e3:1e:90:ec:
- dc:d2:ce:73:c0:50:19:69:10:dc:c7:db:91:46:f4:50:52:87:
- 94:6e:ce:ef:a6:20:57:d2:ad:36:95:1e:94:7f:a3:8f:d9:0d:
- 99:dd:8f:e3:2a:b2:2b:69:a0:f7:26:4e:cd:f2:f1:cf:05:14:
- 31:3d:aa:71:01:dd:42:24:19:62:5c:00:1b:98:ac:7d:45:f2:
- e6:14:dd:2e:10:06:74:39:61:6d:b9:3c:68:c1:e7:3d:b6:3d:
- e1:75:c9:fd
+ 8b:7a:66:86:f1:9f:ae:f1:75:5b:70:2c:c7:d9:97:29:08:f7:
+ b8:8a:6b:98:b8:81:eb:e9:99:bc:63:55:ab:b1:09:7b:06:f2:
+ 39:be:5c:7d:2f:ab:30:9b:11:dc:79:d3:67:e0:20:70:9f:01:
+ 2c:da:35:59:e1:2b:f6:1d:15:94:cd:12:db:99:05:89:69:a8:
+ 03:09:99:1b:e4:42:3d:55:f5:0d:92:78:1d:4b:99:0f:c4:ca:
+ 3a:bb:c5:33:d4:5c:bd:8e:24:81:db:51:1d:22:6f:1b:89:3d:
+ ea:a0:7d:e0:b3:ee:9b:eb:c4:48:b3:ad:7d:68:4a:a6:64:ec:
+ 08:d4:0d:28:3a:65:9e:cc:e4:42:35:95:48:87:e4:85:01:57:
+ 6e:f2:60:cf:50:1e:ca:7f:d8:c4:fa:60:ee:b0:94:52:2e:b6:
+ e6:e4:45:d0:b6:8c:e1:c0:34:7c:6f:ee:ad:a2:a3:e0:a1:fa:
+ 2e:5f:27:b5:c2:26:20:46:19:b7:a8:5a:c1:1d:8f:ab:42:1e:
+ 40:cf:ab:4c:ce:10:54:55:d3:10:af:32:14:80:b7:34:bb:72:
+ 96:97:df:40:a7:70:f2:be:47:43:be:83:2f:a9:47:e8:ce:50:
+ ee:e4:8e:a1:ff:fd:28:13:7d:ba:7e:ca:35:5d:67:e3:8e:0e:
+ 31:0f:b4:8f
-----BEGIN CERTIFICATE-----
MIIDiDCCAnCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjAXMRUwEwYD
-VQQDDAxJbnRlcm1lZGlhcnkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
-AQDmVpHmJ1Oh12RW2MhXt1V8iaK0naty8LwDNRZTd37vvwv1kdXerruurjpTAOyA
-O6Ar02quDNBMoSSytHferYEPcPj03PjHbvhUKYQ6uIP0lSKArnGw3U66goeA0cfz
-radFxdtHPI6EMbzGvSl3cDl49Dtero/ZRGsaHcv5e4QUfFu4gjztRxbGTit1Whu0
-XQwKL1W2SIehJaKpW+So+bxwJJIHf1uUgztEeGXLYgww+s/x9yCedshSeIv4MGLw
-ZiiKf7p0EvgF7ynYF8uKlWH8r1jS4obXjPs7ViiN5NknSLbB/JpO1CS4aMMyXWUw
-bqOeub9upzu0PS5dE6EoTqQNAgMBAAGjgd4wgdswHQYDVR0OBBYEFDGfo9vqkJTr
-PZM5n7qKBX4slCObMB8GA1UdIwQYMBaAFHNMlUVMO/Z+e5IwyawwUed9IdK/MD8G
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjAXMRUwEwYD
+VQQDDAxJbnRlcm1lZGlhdGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
+AQC2rYmH7Uj4ZaGOSCItrx4MC+BMXHoNJcGkkZqzzB94B0DHBZdx0pS8zgwnsslX
+ekRJMiYCcsbz9xjKNSwluhekpGiS6mjYUBchZS6U21ZHllPI05bANFUSjaEMLd35
+PDR4Wu4yY+M0jERMZ8TEMUI1ugducMOec9rcCBwv1MYyQmJnVaz0SqEpz7rDKnSz
+5uuo38h5DoZVHd3EYWPxOcquC6DUgWlpa8pymnmb69C0CmO17Nygzl8Q4+cc9XE+
+AY4J/MyAku2SfmisLZ9JY1YOYaZEdZkUaJckQqEWRx3JQh900vN+EUuwe3NfIF06
+5HRxNCXTLXecXwZN9xX8dCShAgMBAAGjgd4wgdswHQYDVR0OBBYEFIxvoEWpd2Aw
+l6qHH5Y0HTt6xkBeMB8GA1UdIwQYMBaAFL1UH6aLJOa9Wf1QnyuoVH/ye7E+MD8G
CCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0lu
-dGVybWVkaWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3It
-Y3JsL0ludGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQI
-MAYBAf8CAQAwDQYJKoZIhvcNAQELBQADggEBAA19o99AzQJ5tWldxafrvIeVwxf8
-c91ZqMLTZ3EVCXqb+AFdoNKj5Tcd9fMs/Y2O52zKASqDqADJZSaOqwsTkZwAmqNg
-RIyCDwQedLHGT6baN3AWNQOS8gSryCGXqLTjv79nns7DJN9qzEPW6lmJtz4c3u2r
-mewmYDu3hEvgGre+bSB79Iiiv5U/bnr66uFVcoiuZ7MTGjofBxYdhP3l4x6Q7NzS
-znPAUBlpENzH25FG9FBSh5Ruzu+mIFfSrTaVHpR/o4/ZDZndj+MqsitpoPcmTs3y
-8c8FFDE9qnEB3UIkGWJcABuYrH1F8uYU3S4QBnQ5YW25PGjB5z22PeF1yf0=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=
-----END CERTIFICATE-----
Certificate:
@@ -192,35 +192,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c9:30:53:c1:b9:0f:27:7a:39:3d:39:c4:a3:7c:
- 96:bb:0e:e4:d9:fd:10:76:98:36:62:fc:33:7c:02:
- 47:6c:6f:2e:d2:61:aa:d5:e3:86:67:a2:ef:93:a3:
- fd:15:83:1c:27:90:f3:81:4a:41:f2:e6:e6:be:26:
- 9a:b0:77:1d:e5:8a:97:2d:a7:87:6b:80:49:26:0e:
- da:48:36:ba:eb:71:6a:cb:b4:82:66:42:fd:58:5f:
- bc:c9:18:30:ee:2f:0c:28:81:e7:36:b9:76:da:55:
- 8c:7a:cf:a9:1f:04:c6:6e:42:ea:d3:83:c6:8d:04:
- 26:9e:11:8a:c6:cd:25:c7:4a:58:d1:98:86:b5:37:
- 9c:3e:68:2e:17:4d:81:85:f3:d4:7d:65:e7:0f:86:
- 8a:c9:d0:2d:fc:4f:c7:40:2a:ef:48:ab:2e:4c:2e:
- b6:1c:81:4e:73:73:e9:cc:d4:ef:94:b1:17:2c:70:
- 64:b0:4c:ad:87:cf:45:13:c2:67:46:d1:c6:b3:61:
- 8d:77:af:4f:1c:b6:4f:b6:d9:2b:3c:4c:5f:72:23:
- 77:c7:85:65:1d:85:48:28:06:34:b4:f0:bd:a9:76:
- 7a:65:60:59:d6:f6:26:f6:85:99:7b:84:16:5e:91:
- 8d:f9:90:b8:75:d3:4a:77:6a:1f:f8:ed:66:67:22:
- 64:4b
+ 00:9e:e2:7c:00:e0:00:2f:08:6e:14:3a:5f:e0:de:
+ 0a:c0:4d:af:11:e7:87:5b:6a:b8:d9:0e:c0:86:bb:
+ f2:aa:2f:7d:c0:81:ee:58:36:2b:e7:61:57:45:4b:
+ 2c:0d:12:71:f2:ce:ee:bb:28:30:40:fc:d9:f4:9b:
+ 91:72:0b:99:e0:af:83:84:18:f1:17:c9:fb:ca:56:
+ 67:89:08:05:39:13:a2:48:7f:95:33:3d:ae:b9:c2:
+ 9d:4a:94:7c:b5:f0:b3:0c:a7:ba:ac:78:a3:06:7b:
+ 2a:11:00:02:bf:b5:05:c4:82:70:c4:57:6e:4f:19:
+ 51:84:0e:f5:26:04:f9:4d:64:7b:59:97:b1:97:a1:
+ 28:f0:86:07:5b:53:5d:42:fb:ee:c0:a8:9b:ce:f2:
+ f4:eb:e5:9e:fa:81:a1:c0:5c:46:b5:80:a5:9a:8d:
+ 31:7d:0b:c3:b9:cb:1d:92:62:66:42:fd:e9:d1:f2:
+ 45:e2:a5:aa:ea:f8:01:2b:16:7f:1c:38:c2:8c:66:
+ 24:0c:d3:83:c6:da:b5:17:a5:1f:bd:47:73:53:68:
+ 5b:7b:d5:b4:25:b7:48:3c:c5:25:42:5f:e9:84:90:
+ 64:e9:e2:cb:27:0a:43:d8:f0:36:16:39:db:46:e5:
+ fa:8f:67:db:ba:d6:2c:05:a4:43:dd:1b:d7:29:ac:
+ f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 73:4C:95:45:4C:3B:F6:7E:7B:92:30:C9:AC:30:51:E7:7D:21:D2:BF
+ BD:54:1F:A6:8B:24:E6:BD:59:FD:50:9F:2B:A8:54:7F:F2:7B:B1:3E
X509v3 Authority Key Identifier:
- keyid:DE:10:87:7A:48:75:9E:50:89:F1:AE:40:E0:BF:BA:5F:D8:63:77:9B
+ keyid:1A:ED:F5:14:E8:2E:82:B7:0E:5A:25:9D:2F:88:BE:43:75:E1:76:F9
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -235,41 +235,41 @@
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha256WithRSAEncryption
- 3f:40:c5:c8:06:d9:35:27:63:63:e7:9c:08:1d:ee:ef:e3:b6:
- 11:a7:a2:4f:b0:bf:8b:14:2f:16:6f:47:f5:0b:d8:3d:98:7a:
- 03:7d:30:0c:85:11:80:a6:ff:fc:99:dd:a0:31:d6:fb:bf:4f:
- 09:49:64:ca:8a:34:3d:56:c3:72:b0:08:e2:b8:12:95:1e:70:
- 4f:3f:5b:1e:70:6f:06:f0:78:77:90:3b:d1:54:83:f2:b1:8e:
- 7e:25:d3:f7:21:66:8b:a9:c4:f7:f6:bb:a9:7a:3b:e0:99:4c:
- 94:b7:45:3a:fe:61:74:0a:70:de:a0:d6:c1:c4:dd:59:0e:cc:
- 81:d1:ad:da:99:1d:83:b3:e2:3a:7b:8f:5c:3a:25:52:3e:40:
- 5a:96:00:71:e6:f3:5d:9c:6a:54:be:0f:24:8e:8b:3a:14:37:
- 6a:72:0b:41:e6:06:d1:b2:3d:f9:a2:bb:d7:6e:f1:ac:70:08:
- 62:e7:f2:82:df:fb:85:e4:99:b9:cf:84:9a:34:55:e5:e8:39:
- a9:e7:e3:79:54:07:c9:6b:1d:33:aa:30:d3:ea:7b:32:07:0f:
- 23:34:10:fa:58:17:ad:e0:62:c8:ce:d6:0f:db:34:0c:a3:a9:
- f9:09:05:c6:25:d9:ce:e5:52:0a:5c:8a:f3:c9:44:72:45:71:
- 6d:5c:fc:d1
+ cc:05:72:82:a4:23:cc:ad:29:af:c0:b7:b5:25:d8:0d:a0:7e:
+ 6e:38:bd:7d:5a:6e:39:a9:c0:1c:c6:21:89:74:b1:83:9e:46:
+ 55:5a:e7:c5:ae:d7:e0:6f:c5:f5:95:a2:17:69:02:30:8a:9b:
+ 46:6e:43:b4:ba:2c:34:5b:55:fc:12:90:38:2b:16:94:56:10:
+ 4a:09:14:e3:77:ca:12:aa:12:30:60:06:ac:7a:fa:92:ed:1f:
+ d7:b3:08:83:c4:e7:a8:00:f0:fc:02:aa:9e:0d:f1:fa:0e:3a:
+ 17:05:9f:a0:2d:45:d3:78:2b:49:93:fa:c0:2b:e4:e2:77:07:
+ e5:8c:00:a4:89:c0:25:17:6d:3a:a9:4b:db:f5:f6:d6:e3:4f:
+ 5f:50:1d:3c:d9:00:69:9c:b5:ee:3f:cc:8b:ae:61:8d:c4:57:
+ d4:76:f0:97:2f:0c:a2:13:1a:29:1b:98:05:56:89:f8:55:b9:
+ 56:d2:11:d2:b7:dc:aa:24:88:a9:6c:2c:af:9e:85:8a:b1:c5:
+ 4d:8f:6f:36:b6:b7:60:cc:42:ee:fc:14:75:3c:25:b2:99:fb:
+ 36:86:54:f5:27:df:06:09:32:94:c9:84:43:83:6e:09:14:2d:
+ 61:2c:d5:8e:7f:ae:a0:21:ed:f4:52:ec:2c:a8:98:dc:85:1e:
+ 30:61:23:b5
-----BEGIN CERTIFICATE-----
MIIDcDCCAligAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTBTwbkP
-J3o5PTnEo3yWuw7k2f0Qdpg2YvwzfAJHbG8u0mGq1eOGZ6Lvk6P9FYMcJ5DzgUpB
-8ubmviaasHcd5YqXLaeHa4BJJg7aSDa663Fqy7SCZkL9WF+8yRgw7i8MKIHnNrl2
-2lWMes+pHwTGbkLq04PGjQQmnhGKxs0lx0pY0ZiGtTecPmguF02BhfPUfWXnD4aK
-ydAt/E/HQCrvSKsuTC62HIFOc3PpzNTvlLEXLHBksEyth89FE8JnRtHGs2GNd69P
-HLZPttkrPExfciN3x4VlHYVIKAY0tPC9qXZ6ZWBZ1vYm9oWZe4QWXpGN+ZC4ddNK
-d2of+O1mZyJkSwIDAQABo4HOMIHLMB0GA1UdDgQWBBRzTJVFTDv2fnuSMMmsMFHn
-fSHSvzAfBgNVHSMEGDAWgBTeEId6SHWeUInxrkDgv7pf2GN3mzA3BggrBgEFBQcB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-ggEBAD9AxcgG2TUnY2PnnAgd7u/jthGnok+wv4sULxZvR/UL2D2YegN9MAyFEYCm
-//yZ3aAx1vu/TwlJZMqKND1Ww3KwCOK4EpUecE8/Wx5wbwbweHeQO9FUg/Kxjn4l
-0/chZoupxPf2u6l6O+CZTJS3RTr+YXQKcN6g1sHE3VkOzIHRrdqZHYOz4jp7j1w6
-JVI+QFqWAHHm812calS+DySOizoUN2pyC0HmBtGyPfmiu9du8axwCGLn8oLf+4Xk
-mbnPhJo0VeXoOann43lUB8lrHTOqMNPqezIHDyM0EPpYF63gYsjO1g/bNAyjqfkJ
-BcYl2c7lUgpcivPJRHJFcW1c/NE=
+ggEBAMwFcoKkI8ytKa/At7Ul2A2gfm44vX1abjmpwBzGIYl0sYOeRlVa58Wu1+Bv
+xfWVohdpAjCKm0ZuQ7S6LDRbVfwSkDgrFpRWEEoJFON3yhKqEjBgBqx6+pLtH9ez
+CIPE56gA8PwCqp4N8foOOhcFn6AtRdN4K0mT+sAr5OJ3B+WMAKSJwCUXbTqpS9v1
+9tbjT19QHTzZAGmcte4/zIuuYY3EV9R28JcvDKITGikbmAVWifhVuVbSEdK33Kok
+iKlsLK+ehYqxxU2Pbza2t2DMQu78FHU8JbKZ+zaGVPUn3wYJMpTJhEODbgkULWEs
+1Y5/rqAh7fRS7CyomNyFHjBhI7U=
-----END CERTIFICATE-----
Certificate:
@@ -286,30 +286,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a8:11:83:b7:cc:88:e9:4c:69:28:ad:6a:95:83:
- 6a:1c:28:52:d2:02:21:00:93:f0:82:8e:fc:b8:fb:
- b9:44:e2:43:e9:fe:3f:7e:0c:01:a6:9f:12:fc:09:
- fc:66:44:03:b4:66:78:3c:36:05:37:00:6e:87:54:
- ff:61:95:ab:37:88:a0:6e:f7:8f:c2:ea:8d:e5:bf:
- 4c:21:21:1d:74:22:dd:93:52:b3:66:d7:97:33:b9:
- cb:ab:8e:38:59:52:e7:f0:5c:09:50:ad:c9:e0:e1:
- 18:d7:cc:4a:d7:2b:41:cd:91:8c:a2:b0:25:d6:6c:
- d2:7d:e8:fa:20:3f:c8:aa:15:b9:77:b6:da:ac:86:
- f8:21:52:2e:f9:e7:b6:d5:65:fd:23:ba:2f:5b:1b:
- c6:62:76:00:f1:74:4b:e2:d9:9a:d3:67:03:71:d4:
- 93:af:93:4d:4f:82:da:1c:ba:a5:a9:0f:25:6b:54:
- dd:63:8c:3e:34:75:32:9e:c8:99:44:fd:f0:47:6d:
- 98:45:3c:75:b5:ac:0b:eb:d6:30:6a:a1:6c:67:14:
- ee:62:72:93:fe:bc:4c:e8:10:a2:3c:66:33:1c:49:
- e8:dc:2f:c9:a4:64:17:88:a0:1c:a4:b0:ff:9c:8f:
- c4:c6:18:1d:0c:55:62:a9:3b:f6:bc:53:16:62:82:
- 49:c5
+ 00:e3:4b:ce:a5:cb:b1:d2:1e:51:45:de:74:b2:98:
+ c6:35:8a:93:f3:07:cf:90:e9:e2:13:d4:2d:da:6d:
+ 1f:17:ba:d4:24:8f:f1:ba:3e:62:75:1f:6f:23:69:
+ e3:eb:c6:b3:37:e2:fa:7a:70:a9:f2:c1:ae:b5:bf:
+ 3d:12:b5:66:05:24:8e:0f:85:a4:4f:b9:bb:d0:d4:
+ 7a:86:fd:57:be:fa:c3:dc:bc:db:ba:04:19:b4:4d:
+ 3e:30:a0:cd:6e:07:a6:31:d5:e0:47:c4:c9:d3:2e:
+ 91:78:3a:22:3a:4e:7d:8a:d3:94:90:1f:57:b8:c3:
+ f3:6d:44:06:28:99:d4:eb:7e:98:3a:2d:3b:49:04:
+ 54:41:0c:50:ff:8b:ea:5e:31:a7:b1:c0:76:cd:22:
+ 09:e6:6c:d8:19:fb:34:eb:50:c5:f5:0f:76:86:6a:
+ d5:ce:75:bd:5f:fc:8f:e3:97:6d:20:fb:d5:c0:0e:
+ cd:18:fd:7c:f9:43:c8:74:24:2f:dc:82:57:b6:4e:
+ 6b:a3:d2:77:17:28:27:42:9e:b1:94:49:24:a5:84:
+ 34:fc:4b:9a:0b:84:cc:08:52:08:18:23:ee:72:02:
+ 95:64:e9:4f:f6:f0:09:c5:8d:a4:84:21:99:e8:9a:
+ d3:df:d5:c3:2d:3c:ee:0c:11:22:eb:a7:7d:6c:32:
+ 05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- DE:10:87:7A:48:75:9E:50:89:F1:AE:40:E0:BF:BA:5F:D8:63:77:9B
+ 1A:ED:F5:14:E8:2E:82:B7:0E:5A:25:9D:2F:88:BE:43:75:E1:76:F9
X509v3 Authority Key Identifier:
- keyid:DE:10:87:7A:48:75:9E:50:89:F1:AE:40:E0:BF:BA:5F:D8:63:77:9B
+ keyid:1A:ED:F5:14:E8:2E:82:B7:0E:5A:25:9D:2F:88:BE:43:75:E1:76:F9
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -324,41 +324,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 27:c0:50:82:2b:1b:71:84:c6:12:ea:45:ed:21:b8:fd:7c:08:
- 68:ec:de:4a:1b:98:3b:ce:e9:a1:9e:42:9a:e0:f4:e2:09:a6:
- 5c:98:33:16:5b:65:6b:fc:b9:9b:26:90:e1:86:58:1f:0a:7e:
- 7e:0d:7d:4e:0e:8b:93:04:b9:84:f0:e8:a3:7f:34:e2:ab:f5:
- d5:bb:46:b7:df:a0:3a:81:8c:56:48:02:95:8f:06:cb:f2:cd:
- 2a:39:c6:12:5a:9d:62:e9:a9:49:55:4d:e9:17:c2:97:3d:81:
- 12:76:d8:68:18:f6:7e:a6:c4:52:a9:85:4c:83:38:94:2b:df:
- dd:39:bb:cf:e1:9e:4e:e1:a0:eb:63:8a:c0:6e:99:01:65:78:
- b5:ca:ab:2a:90:86:c5:5e:53:62:57:89:14:c1:41:8f:e6:9a:
- 60:97:e4:5c:5b:fa:28:9c:9f:e3:55:ed:42:36:b6:d0:8d:f3:
- 0c:cf:6e:87:38:aa:98:91:a9:1f:48:2a:c7:27:49:04:d6:d6:
- f8:33:c9:d0:e2:b7:87:00:9a:1f:63:af:5b:ac:70:7e:96:9f:
- b0:3b:e5:a3:f8:04:b6:f8:2c:38:54:21:06:51:33:32:78:80:
- 17:59:83:95:66:65:1d:b5:5b:f2:1b:3e:6d:9e:98:c2:09:f3:
- ec:52:20:5b
+ 02:89:3f:e5:42:09:a5:9a:63:2f:54:2d:67:51:ab:bf:e0:9e:
+ 5c:76:a0:fb:19:f2:49:74:c6:65:ac:46:48:de:b8:52:58:60:
+ ee:6f:0b:04:dd:b8:b1:89:a1:cb:db:1e:28:5f:20:fb:d3:ef:
+ 8f:5c:28:a5:02:f6:13:7e:20:9a:e9:cd:9a:91:b0:00:2f:3c:
+ 6c:3e:84:3b:b2:33:4f:8b:b3:3f:62:6d:d5:f9:89:f5:c3:63:
+ 37:52:7b:4f:a3:20:e4:eb:25:bb:c0:a0:f9:d1:e8:d0:fa:53:
+ 55:d4:1f:2c:d5:e2:2e:b0:fe:4c:95:c9:9c:0d:99:24:af:b5:
+ f7:c8:ff:dc:f4:63:bd:bd:65:97:a1:b9:26:d8:51:d6:96:65:
+ f7:c7:6a:32:ec:23:59:37:8c:53:30:d6:f6:93:70:76:c3:8a:
+ 3d:5e:74:13:59:36:d7:0d:18:75:06:e5:1f:fc:c0:aa:b4:c8:
+ 93:0a:4c:f0:fc:d0:e9:1e:23:7e:6e:17:86:c7:1f:8e:a3:5a:
+ 12:82:8f:35:a3:d2:69:b2:f8:9d:7a:88:75:e6:84:05:ea:34:
+ 1e:e0:0c:bc:e9:6e:f3:37:eb:5d:08:a2:fb:d8:d2:69:5d:f8:
+ ab:8a:4b:23:0c:9e:6a:44:83:16:7a:94:65:b3:dd:61:1c:28:
+ 31:1f:75:f1
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKgRg7fMiOlMaSitapWD
-ahwoUtICIQCT8IKO/Lj7uUTiQ+n+P34MAaafEvwJ/GZEA7RmeDw2BTcAbodU/2GV
-qzeIoG73j8LqjeW/TCEhHXQi3ZNSs2bXlzO5y6uOOFlS5/BcCVCtyeDhGNfMStcr
-Qc2RjKKwJdZs0n3o+iA/yKoVuXe22qyG+CFSLvnnttVl/SO6L1sbxmJ2APF0S+LZ
-mtNnA3HUk6+TTU+C2hy6pakPJWtU3WOMPjR1Mp7ImUT98EdtmEU8dbWsC+vWMGqh
-bGcU7mJyk/68TOgQojxmMxxJ6NwvyaRkF4igHKSw/5yPxMYYHQxVYqk79rxTFmKC
-ScUCAwEAAaOByzCByDAdBgNVHQ4EFgQU3hCHekh1nlCJ8a5A4L+6X9hjd5swHwYD
-VR0jBBgwFoAU3hCHekh1nlCJ8a5A4L+6X9hjd5swNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAnwFCCKxtx
-hMYS6kXtIbj9fAho7N5KG5g7zumhnkKa4PTiCaZcmDMWW2Vr/LmbJpDhhlgfCn5+
-DX1ODouTBLmE8OijfzTiq/XVu0a336A6gYxWSAKVjwbL8s0qOcYSWp1i6alJVU3p
-F8KXPYESdthoGPZ+psRSqYVMgziUK9/dObvP4Z5O4aDrY4rAbpkBZXi1yqsqkIbF
-XlNiV4kUwUGP5ppgl+RcW/oonJ/jVe1CNrbQjfMMz26HOKqYkakfSCrHJ0kE1tb4
-M8nQ4reHAJofY69brHB+lp+wO+Wj+AS2+Cw4VCEGUTMyeIAXWYOVZmUdtVvyGz5t
-npjCCfPsUiBb
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQACiT/lQgml
+mmMvVC1nUau/4J5cdqD7GfJJdMZlrEZI3rhSWGDubwsE3bixiaHL2x4oXyD70++P
+XCilAvYTfiCa6c2akbAALzxsPoQ7sjNPi7M/Ym3V+Yn1w2M3UntPoyDk6yW7wKD5
+0ejQ+lNV1B8s1eIusP5MlcmcDZkkr7X3yP/c9GO9vWWXobkm2FHWlmX3x2oy7CNZ
+N4xTMNb2k3B2w4o9XnQTWTbXDRh1BuUf/MCqtMiTCkzw/NDpHiN+bheGxx+Oo1oS
+go81o9Jpsvideoh15oQF6jQe4Ay86W7zN+tdCKL72NJpXfiriksjDJ5qRIMWepRl
+s91hHCgxH3Xx
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/common.py b/net/data/verify_certificate_chain_unittest/common.py
index 0174ec1..6bfefbf 100755
--- a/net/data/verify_certificate_chain_unittest/common.py
+++ b/net/data/verify_certificate_chain_unittest/common.py
@@ -426,7 +426,7 @@
return Certificate(name, TYPE_CA, None)
-def create_intermediary_certificate(name, issuer):
+def create_intermediate_certificate(name, issuer):
return Certificate(name, TYPE_CA, issuer)
diff --git a/net/data/verify_certificate_chain_unittest/expired-intermediary.pem b/net/data/verify_certificate_chain_unittest/expired-intermediary.pem
deleted file mode 100644
index f3f2054..0000000
--- a/net/data/verify_certificate_chain_unittest/expired-intermediary.pem
+++ /dev/null
@@ -1,280 +0,0 @@
-[Created by: generate-expired-intermediary.py]
-
-Certificate chain with 1 intermediary, where the intermediary is expired
-(violates validity.notAfter). Verification is expected to fail.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:aa:15:ea:8b:25:e9:de:1a:5f:39:89:dd:71:6d:
- 30:a6:24:ca:59:9b:63:ab:c2:18:2d:d4:80:ea:63:
- 71:70:2e:fe:ac:c0:7d:01:b1:35:06:7c:ad:a8:8c:
- 18:5f:34:16:23:07:78:07:f1:ee:92:08:39:68:1b:
- 08:53:c0:4e:68:62:01:e3:5e:3f:6f:bf:84:18:06:
- a8:59:8d:81:cc:39:71:b9:49:a8:19:2e:44:49:7b:
- 8c:a6:71:15:2c:2a:3d:69:b9:42:5f:48:3c:1b:37:
- c0:c0:fa:11:a8:d2:5a:bc:70:43:e3:b5:04:62:42:
- 40:bc:5a:8d:f6:bb:27:7a:70:34:9b:dc:a8:12:75:
- 0d:1b:5c:1e:81:44:41:7f:57:6e:c6:40:78:f6:a6:
- 5b:98:93:61:4d:e6:dd:bd:49:8f:ba:1e:c5:ac:e9:
- 3f:b3:d1:c5:c9:dd:db:88:f0:47:5a:fc:fc:ec:b3:
- 87:2f:7f:f0:e1:a0:69:05:48:21:58:18:4b:79:e9:
- de:92:9c:5f:89:79:68:f7:5e:59:58:9c:09:88:5e:
- 7e:1c:6d:1e:ad:41:4d:f2:b9:9f:ef:9a:9b:57:8e:
- ff:35:c3:69:2c:35:eb:30:f0:e4:07:94:09:87:a6:
- ef:f4:1b:4b:61:47:64:d1:c9:8b:ba:08:e3:9a:01:
- 99:43
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 40:79:FB:A7:C3:78:BA:A4:08:EC:1C:B2:14:21:D9:DD:6A:9E:B5:29
- X509v3 Authority Key Identifier:
- keyid:6D:48:EB:C2:7F:9A:86:86:39:A3:39:79:C1:5B:A7:BD:A9:4E:23:00
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 5d:d4:68:d4:44:96:48:60:17:d4:88:12:43:df:6b:f0:b3:4c:
- b2:ab:70:57:bc:d3:98:ae:34:d2:ab:e9:a3:b7:ae:76:9b:49:
- e5:c5:bd:45:33:6a:19:e2:58:96:c7:49:98:24:0b:c1:57:5e:
- 64:a7:2d:7a:c6:1f:fb:9d:ba:a9:19:6e:25:31:2a:b1:82:41:
- 47:d4:02:47:ba:03:c3:43:d1:6b:05:10:b0:25:30:5c:0c:17:
- 3c:a6:7c:4e:6d:94:35:b4:65:e6:67:32:9a:9b:df:26:fa:c6:
- f6:f9:c0:47:62:64:a9:95:02:a3:aa:70:82:38:c3:6d:b3:cd:
- 75:37:bd:4e:c5:91:bc:a1:48:7e:47:a1:bb:39:c4:7d:06:ef:
- dc:c1:28:6b:6e:c6:d5:a3:e1:a0:d5:ec:c3:0a:ae:e5:5b:da:
- 67:14:af:f5:6e:6a:06:72:2e:0d:61:31:31:b7:d4:a4:7b:45:
- 21:50:cb:2d:30:c4:1f:c5:55:5c:e2:50:ce:35:cc:23:35:b0:
- c2:92:ae:89:16:93:66:94:36:43:ff:30:79:b1:28:4d:6f:d1:
- 01:83:a4:e5:fd:d2:d8:6f:c0:0e:e2:d1:85:e8:56:ea:a7:9a:
- d3:ec:f6:96:fc:d2:0c:ec:61:78:97:c8:2a:6d:49:67:ac:66:
- 19:37:0a:f1
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFeqL
-JeneGl85id1xbTCmJMpZm2Orwhgt1IDqY3FwLv6swH0BsTUGfK2ojBhfNBYjB3gH
-8e6SCDloGwhTwE5oYgHjXj9vv4QYBqhZjYHMOXG5SagZLkRJe4ymcRUsKj1puUJf
-SDwbN8DA+hGo0lq8cEPjtQRiQkC8Wo32uyd6cDSb3KgSdQ0bXB6BREF/V27GQHj2
-pluYk2FN5t29SY+6HsWs6T+z0cXJ3duI8Eda/Pzss4cvf/DhoGkFSCFYGEt56d6S
-nF+JeWj3XllYnAmIXn4cbR6tQU3yuZ/vmptXjv81w2ksNesw8OQHlAmHpu/0G0th
-R2TRyYu6COOaAZlDAgMBAAGjgekwgeYwHQYDVR0OBBYEFEB5+6fDeLqkCOwcshQh
-2d1qnrUpMB8GA1UdIwQYMBaAFG1I68J/moaGOaM5ecFbp72pTiMAMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAXdRo1ESWSGAX1IgSQ99r
-8LNMsqtwV7zTmK400qvpo7eudptJ5cW9RTNqGeJYlsdJmCQLwVdeZKctesYf+526
-qRluJTEqsYJBR9QCR7oDw0PRawUQsCUwXAwXPKZ8Tm2UNbRl5mcympvfJvrG9vnA
-R2JkqZUCo6pwgjjDbbPNdTe9TsWRvKFIfkehuznEfQbv3MEoa27G1aPhoNXswwqu
-5VvaZxSv9W5qBnIuDWExMbfUpHtFIVDLLTDEH8VVXOJQzjXMIzWwwpKuiRaTZpQ2
-Q/8webEoTW/RAYOk5f3S2G/ADuLRhehW6qea0+z2lvzSDOxheJfIKm1JZ6xmGTcK
-8Q==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Mar 1 12:00:00 2015 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b5:a7:f6:93:6b:28:98:90:c6:36:f3:31:5e:b2:
- 6d:43:8a:03:c7:8d:9a:04:1a:23:9d:07:ee:5c:47:
- 26:da:31:7e:96:34:7e:9d:d8:29:ff:56:2c:05:f9:
- d9:ff:e9:10:26:9e:53:12:4b:cb:9d:b6:2f:9d:87:
- 33:9c:91:7e:d4:81:c7:63:cf:3a:52:b7:62:18:bb:
- b5:47:c4:ba:80:79:71:30:31:ed:08:e6:c5:85:03:
- d1:e7:05:24:bf:8b:24:f0:2d:44:3c:80:eb:da:75:
- f5:8f:a7:6e:dc:1c:46:b8:c6:bf:76:7b:20:e6:f5:
- 3d:0a:c1:32:54:c6:f1:e6:34:6c:18:c6:11:a5:16:
- 5b:29:24:75:fa:d3:ee:b9:91:56:80:88:df:fe:7f:
- 6b:fa:07:49:95:46:b0:0e:61:ce:8d:f0:a7:64:d5:
- e5:05:7a:c1:9a:6f:e9:e0:44:05:f8:75:ea:d9:64:
- c9:20:98:28:11:d0:c4:fe:31:2f:9b:a5:79:42:2c:
- ee:95:6b:7c:34:d4:15:5c:f8:68:e9:de:5c:b7:c8:
- 1c:33:aa:24:3d:29:60:6e:18:e8:c8:cb:6a:a6:ad:
- 3c:eb:36:0f:1a:81:aa:0b:8a:0e:fd:7b:e5:8b:12:
- 7b:76:04:56:7e:b7:1d:cf:cf:65:77:03:fe:a2:6d:
- 02:29
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 6D:48:EB:C2:7F:9A:86:86:39:A3:39:79:C1:5B:A7:BD:A9:4E:23:00
- X509v3 Authority Key Identifier:
- keyid:7A:B1:AA:9D:A5:49:7E:15:F6:31:BC:33:C7:B6:57:F7:FD:13:5C:CF
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 1f:03:06:d7:ad:e1:fb:5a:3f:20:60:5d:d0:db:54:2b:b7:52:
- 1a:67:c1:06:75:a7:48:d0:de:14:02:e2:6b:c6:71:d0:da:41:
- 8e:59:c9:17:8e:c5:1e:27:2e:4a:16:2c:7c:77:1e:d4:1c:14:
- 84:85:22:b2:d4:49:90:ab:c3:86:a6:b5:52:97:53:1e:1f:2e:
- e4:ff:60:42:53:03:bb:59:e2:7e:f0:59:a6:4e:04:e6:73:3e:
- d3:2a:c3:ff:1f:69:cd:29:4b:ce:39:aa:93:b9:97:d6:f0:e6:
- e4:52:ca:30:5f:7f:2d:60:6f:93:20:ec:74:dc:d6:65:0d:5d:
- bc:49:cd:ee:56:29:4f:34:8f:9f:5d:54:b6:2b:df:7b:33:8b:
- 2a:b8:7d:f4:39:f3:e1:02:95:3f:e4:28:14:73:58:7d:88:2b:
- e5:1b:e5:0a:9e:eb:b2:e7:7c:bf:e7:1a:70:5f:0f:3d:50:d9:
- 8c:ea:4b:0a:e9:03:8e:5b:84:68:af:5f:72:6d:96:62:b3:90:
- de:f7:be:8d:95:cb:59:5e:d8:7b:41:3e:32:3a:76:a6:01:45:
- 54:9c:d5:98:78:f0:f7:bf:6b:00:4f:0e:c6:05:8b:0f:64:6a:
- ca:0d:fc:ff:db:08:d4:20:11:5e:2b:70:59:bb:5d:46:da:07:
- 94:12:e6:c7
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE1MDMwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaf2k2so
-mJDGNvMxXrJtQ4oDx42aBBojnQfuXEcm2jF+ljR+ndgp/1YsBfnZ/+kQJp5TEkvL
-nbYvnYcznJF+1IHHY886UrdiGLu1R8S6gHlxMDHtCObFhQPR5wUkv4sk8C1EPIDr
-2nX1j6du3BxGuMa/dnsg5vU9CsEyVMbx5jRsGMYRpRZbKSR1+tPuuZFWgIjf/n9r
-+gdJlUawDmHOjfCnZNXlBXrBmm/p4EQF+HXq2WTJIJgoEdDE/jEvm6V5QizulWt8
-NNQVXPho6d5ct8gcM6okPSlgbhjoyMtqpq086zYPGoGqC4oO/XvlixJ7dgRWfrcd
-z89ldwP+om0CKQIDAQABo4HLMIHIMB0GA1UdDgQWBBRtSOvCf5qGhjmjOXnBW6e9
-qU4jADAfBgNVHSMEGDAWgBR6saqdpUl+FfYxvDPHtlf3/RNczzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AB8DBtet4ftaPyBgXdDbVCu3UhpnwQZ1p0jQ3hQC4mvGcdDaQY5ZyReOxR4nLkoW
-LHx3HtQcFISFIrLUSZCrw4amtVKXUx4fLuT/YEJTA7tZ4n7wWaZOBOZzPtMqw/8f
-ac0pS845qpO5l9bw5uRSyjBffy1gb5Mg7HTc1mUNXbxJze5WKU80j59dVLYr33sz
-iyq4ffQ58+EClT/kKBRzWH2IK+Ub5Qqe67LnfL/nGnBfDz1Q2YzqSwrpA45bhGiv
-X3JtlmKzkN73vo2Vy1le2HtBPjI6dqYBRVSc1Zh48Pe/awBPDsYFiw9kasoN/P/b
-CNQgEV4rcFm7XUbaB5QS5sc=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:ea:ec:57:02:47:92:bc:08:b2:1a:2b:0d:03:36:
- e3:2c:b0:4a:52:00:ed:12:f6:5d:39:61:ba:1c:fc:
- 06:9c:11:13:b6:97:b1:ae:bc:66:4c:8a:05:03:29:
- 4c:8a:59:cb:27:86:96:98:ce:5c:35:17:74:ba:ad:
- 1f:14:00:2c:84:cf:cf:2c:fa:5e:a4:70:e5:66:e1:
- 28:79:be:5a:39:42:ad:a5:bb:66:ca:f2:59:d2:cc:
- 22:30:c7:bd:aa:19:e2:ed:be:4f:67:05:26:71:a1:
- 39:96:52:e1:42:cf:fe:83:d2:87:00:e2:96:7b:34:
- 64:cb:a7:76:ed:cf:79:ca:0f:1d:44:49:9e:7c:0a:
- cb:3f:f4:f2:95:1f:07:23:12:75:0c:f7:f4:55:4e:
- 3c:39:ac:0b:93:a4:33:76:27:82:d7:fa:9e:41:17:
- d6:98:e5:c9:a8:0d:40:62:b6:80:36:e7:35:71:6a:
- aa:bb:ae:25:0d:12:b1:c7:f2:18:e6:05:3f:43:df:
- 37:0b:92:30:1c:1f:7c:55:36:01:35:0b:8b:f0:19:
- 81:39:52:70:c6:e8:51:14:41:ae:e8:90:e0:ce:78:
- 31:98:8a:ed:0c:c7:24:bb:1a:3f:ef:78:80:0e:35:
- 19:e2:57:f7:3e:f6:ca:03:c2:f5:46:25:80:32:c7:
- 44:39
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 7A:B1:AA:9D:A5:49:7E:15:F6:31:BC:33:C7:B6:57:F7:FD:13:5C:CF
- X509v3 Authority Key Identifier:
- keyid:7A:B1:AA:9D:A5:49:7E:15:F6:31:BC:33:C7:B6:57:F7:FD:13:5C:CF
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- a2:db:fb:36:6b:24:df:02:28:0c:ba:9d:88:82:7b:e7:e0:87:
- 58:75:70:78:40:3d:f6:53:b9:57:0f:a3:01:b6:aa:3e:80:34:
- 2f:b5:dc:9b:30:3e:43:44:79:70:22:48:0a:33:28:87:6d:09:
- 90:92:d8:41:d5:ca:18:72:ba:65:5d:cb:b2:25:50:1c:07:f7:
- b7:b7:23:93:2c:da:61:b4:c8:15:66:17:17:b4:d3:a8:4a:cd:
- b6:01:bf:4c:e5:84:5d:b2:fb:fe:24:98:44:e8:84:16:6b:f4:
- 04:f9:88:50:ec:42:1c:31:4b:87:1b:67:76:63:01:8f:46:0b:
- 66:1b:59:a6:83:43:ed:33:4f:f8:74:74:2e:fe:8d:2c:f4:55:
- 9f:c5:f9:c1:eb:44:9b:5b:aa:bd:98:5e:36:87:0f:c8:8e:f3:
- f7:e3:ef:08:72:a8:f6:d0:f9:86:fa:58:1e:fb:73:43:b0:ba:
- f9:8d:b0:f5:29:da:64:be:d8:e2:94:88:75:25:54:ce:e6:4d:
- 80:33:be:bc:c0:7e:76:fc:65:2e:dc:74:d7:86:64:08:47:f0:
- 6c:a1:dc:ae:69:2e:71:23:56:eb:a0:6c:f6:2a:15:2c:a7:a5:
- 05:92:68:56:16:07:cd:82:62:02:e8:77:1f:0f:85:31:02:0c:
- c0:9a:56:cd
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOrsVwJHkrwIshorDQM2
-4yywSlIA7RL2XTlhuhz8BpwRE7aXsa68ZkyKBQMpTIpZyyeGlpjOXDUXdLqtHxQA
-LITPzyz6XqRw5WbhKHm+WjlCraW7ZsryWdLMIjDHvaoZ4u2+T2cFJnGhOZZS4ULP
-/oPShwDilns0ZMundu3PecoPHURJnnwKyz/08pUfByMSdQz39FVOPDmsC5OkM3Yn
-gtf6nkEX1pjlyagNQGK2gDbnNXFqqruuJQ0SscfyGOYFP0PfNwuSMBwffFU2ATUL
-i/AZgTlScMboURRBruiQ4M54MZiK7QzHJLsaP+94gA41GeJX9z72ygPC9UYlgDLH
-RDkCAwEAAaOByzCByDAdBgNVHQ4EFgQUerGqnaVJfhX2Mbwzx7ZX9/0TXM8wHwYD
-VR0jBBgwFoAUerGqnaVJfhX2Mbwzx7ZX9/0TXM8wNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCi2/s2ayTf
-AigMup2Ignvn4IdYdXB4QD32U7lXD6MBtqo+gDQvtdybMD5DRHlwIkgKMyiHbQmQ
-kthB1coYcrplXcuyJVAcB/e3tyOTLNphtMgVZhcXtNOoSs22Ab9M5YRdsvv+JJhE
-6IQWa/QE+YhQ7EIcMUuHG2d2YwGPRgtmG1mmg0PtM0/4dHQu/o0s9FWfxfnB60Sb
-W6q9mF42hw/IjvP34+8Icqj20PmG+lge+3NDsLr5jbD1KdpkvtjilIh1JVTO5k2A
-M768wH52/GUu3HTXhmQIR/BsodyuaS5xI1broGz2KhUsp6UFkmhWFgfNgmIC6Hcf
-D4UxAgzAmlbN
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/expired-intermediate.pem b/net/data/verify_certificate_chain_unittest/expired-intermediate.pem
new file mode 100644
index 0000000..6ca87fd
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/expired-intermediate.pem
@@ -0,0 +1,280 @@
+[Created by: generate-expired-intermediate.py]
+
+Certificate chain with 1 intermediate, where the intermediate is expired
+(violates validity.notAfter). Verification is expected to fail.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c0:b3:a7:c8:34:e7:e2:df:55:43:80:00:33:96:
+ 78:2c:3a:ac:7e:79:5d:86:9f:df:7e:9b:7a:30:d0:
+ 5b:30:2b:26:cc:06:e7:1f:13:6c:80:36:59:ec:1c:
+ 4b:c9:70:c2:79:14:f4:83:2f:cf:39:a2:9d:96:5c:
+ f2:91:90:ae:8f:f6:63:f6:cc:fb:1b:eb:fe:53:9b:
+ b6:27:8b:52:bb:bb:94:1b:8b:e5:76:cc:5a:4d:d7:
+ 9c:96:05:62:f4:c8:bf:87:cf:a7:6e:55:fd:b5:ab:
+ 28:ae:08:c3:cd:5f:72:77:e3:d8:8d:de:1b:cb:17:
+ bb:4c:b3:3d:6d:f2:84:22:5c:fb:84:31:46:68:3e:
+ bd:b5:83:81:24:01:80:7d:eb:76:8e:1f:7b:8f:e7:
+ 77:cb:8f:ca:69:77:5a:7a:56:f3:1c:3c:16:bf:00:
+ 2b:9f:2d:f5:3a:59:e0:f5:84:91:d3:7a:3e:90:39:
+ 44:5a:65:36:ab:5f:25:5d:9b:57:1e:13:91:97:88:
+ cb:36:39:d3:10:ee:2c:54:4d:6c:d7:22:92:37:0b:
+ 04:05:8f:1d:c3:58:b4:87:7c:db:17:2b:fc:db:00:
+ eb:0f:8c:75:96:e5:12:96:37:fe:b2:d5:68:1c:67:
+ fe:fb:60:c2:30:85:ae:0d:9b:62:50:6f:32:ae:fc:
+ 85:77
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ FC:25:45:D2:F9:2D:71:1C:EA:7B:79:2C:C5:C7:37:5F:9E:2A:5F:5D
+ X509v3 Authority Key Identifier:
+ keyid:4C:33:3C:86:48:60:C6:50:02:47:AF:DE:60:2F:A0:5C:96:EE:70:7B
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 46:d0:27:3e:e6:49:d1:48:c4:0e:d3:0e:d0:3e:be:44:7f:0e:
+ a0:38:92:84:c4:ed:60:65:1c:26:3f:12:dd:d8:e3:49:c6:c8:
+ 42:86:67:95:6c:61:e7:61:8c:da:0a:db:90:d0:6f:e7:9f:05:
+ 38:a5:4a:4e:c3:40:f8:2b:ff:67:ad:9f:70:27:10:8d:68:f2:
+ ee:78:d5:a7:83:2f:e3:67:b3:47:8c:39:c9:29:97:f0:77:b7:
+ fe:7f:c7:6b:aa:6d:4c:83:39:e3:dc:bd:c3:18:e3:d8:d3:50:
+ 8a:97:d3:ee:59:3a:62:20:5b:e7:99:77:e6:d1:d2:d3:d0:d5:
+ 04:7d:86:8e:26:30:05:d1:0e:0f:d6:d2:1e:49:42:67:61:81:
+ 3d:10:75:d6:ba:c4:07:bb:e7:43:c8:a6:f7:56:e3:2b:d4:35:
+ d1:56:94:5c:0b:b6:25:02:d7:cd:74:e7:4d:1d:02:d3:43:ab:
+ dd:50:9f:c4:cf:15:4c:77:87:48:1e:57:3f:3d:7e:7e:67:9b:
+ ae:2f:79:ea:16:a9:cd:c6:76:cb:3c:75:75:a7:78:22:af:a9:
+ b4:83:d3:b2:72:e8:43:cc:4a:8d:ee:b4:5a:ac:b2:30:96:52:
+ 91:26:4b:17:29:4e:53:b4:58:df:f9:1d:53:2c:66:3d:c5:d7:
+ 11:99:b6:f5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Mar 1 12:00:00 2015 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:ae:f8:c2:3a:71:85:a2:bd:ca:2c:30:b7:22:3a:
+ f3:c9:24:7e:74:86:98:af:cd:13:0a:c1:4c:52:56:
+ f6:03:19:af:7d:67:73:2e:e2:99:e4:3b:f7:7a:7c:
+ dc:8d:83:61:36:c4:89:bc:14:aa:11:8d:e7:fe:3d:
+ 61:e5:1a:78:88:9b:af:63:05:30:78:f8:1e:f5:92:
+ e5:2d:02:d4:b4:cb:a4:44:a4:cc:1b:38:52:fb:55:
+ 4a:b9:37:d4:bb:d0:13:20:69:cb:1f:34:4c:d0:ca:
+ 32:04:23:f3:52:1f:39:e8:90:a3:3d:68:f5:a9:e3:
+ fc:e3:f1:e2:c3:47:55:68:ab:7e:90:77:87:90:00:
+ e9:30:05:ea:30:07:6d:66:d6:c8:98:bd:8b:81:18:
+ c6:c5:45:26:30:ce:c8:61:6a:dc:70:7a:23:8a:4d:
+ b8:ca:94:68:a7:48:ba:d6:fb:10:89:a9:9d:5e:1c:
+ 43:10:b5:de:33:68:a3:2c:91:2b:70:da:be:bd:1e:
+ b2:30:2e:b9:f7:57:fc:d9:d1:4a:92:78:34:93:df:
+ 89:6a:85:1c:df:23:f3:30:fb:7d:9f:7b:b3:cc:9d:
+ 85:98:f8:64:7a:34:ba:7a:51:80:01:eb:91:77:7f:
+ 77:f6:65:86:9e:51:5e:4e:20:6f:c9:ed:3c:50:1c:
+ cd:8f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 4C:33:3C:86:48:60:C6:50:02:47:AF:DE:60:2F:A0:5C:96:EE:70:7B
+ X509v3 Authority Key Identifier:
+ keyid:FB:59:3E:CC:A2:42:62:72:9F:53:96:95:3A:48:EA:16:80:C8:42:40
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 4f:a5:3b:98:b8:a9:83:3a:35:3d:75:a8:f6:e8:59:43:95:3a:
+ 0b:37:dc:ac:d0:12:82:31:2a:64:c8:64:81:f4:f8:d7:28:2c:
+ bf:6f:81:79:a8:21:7b:70:62:4b:7f:c8:b1:bf:69:8b:38:14:
+ e8:78:aa:61:f1:6f:6b:1a:81:93:e7:c4:7b:9f:99:75:2c:90:
+ e9:8d:3a:7e:4e:2f:09:f9:0a:20:04:cb:3e:c6:ed:59:f5:2e:
+ 2e:be:73:b4:40:4f:9d:96:f0:8c:b8:01:88:fa:bf:7a:ed:f6:
+ cc:46:c5:62:1b:bb:f3:1d:3a:4b:02:7c:aa:6e:61:1f:5b:4e:
+ 0e:d5:3f:c3:5c:c0:5f:1a:aa:fb:bb:4f:4d:a4:45:4c:2a:cd:
+ c0:c2:29:3d:1f:31:2b:0d:80:45:c7:5f:4b:09:96:88:a6:4a:
+ b0:fb:66:3f:4b:41:c3:5b:a7:f7:7f:ce:cb:b5:c9:54:62:66:
+ 61:d1:20:73:f6:c2:e0:81:11:20:b1:a0:a5:44:3f:52:4a:77:
+ 9d:b9:b9:99:e7:73:a8:23:1f:02:91:03:e5:90:ad:23:00:2a:
+ 08:99:37:16:df:ca:70:bf:da:e9:50:1d:c5:94:81:57:97:7d:
+ 3f:d2:4f:91:74:94:90:2e:5c:dd:33:13:a0:83:25:4d:c0:7e:
+ 19:97:e3:d6
+-----BEGIN CERTIFICATE-----
+MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE1MDMwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvjCOnGF
+or3KLDC3IjrzySR+dIaYr80TCsFMUlb2AxmvfWdzLuKZ5Dv3enzcjYNhNsSJvBSq
+EY3n/j1h5Rp4iJuvYwUwePge9ZLlLQLUtMukRKTMGzhS+1VKuTfUu9ATIGnLHzRM
+0MoyBCPzUh856JCjPWj1qeP84/Hiw0dVaKt+kHeHkADpMAXqMAdtZtbImL2LgRjG
+xUUmMM7IYWrccHojik24ypRop0i61vsQiamdXhxDELXeM2ijLJErcNq+vR6yMC65
+91f82dFKkng0k9+JaoUc3yPzMPt9n3uzzJ2FmPhkejS6elGAAeuRd3939mWGnlFe
+TiBvye08UBzNjwIDAQABo4HLMIHIMB0GA1UdDgQWBBRMMzyGSGDGUAJHr95gL6Bc
+lu5wezAfBgNVHSMEGDAWgBT7WT7MokJicp9TlpU6SOoWgMhCQDA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
+AE+lO5i4qYM6NT11qPboWUOVOgs33KzQEoIxKmTIZIH0+NcoLL9vgXmoIXtwYkt/
+yLG/aYs4FOh4qmHxb2sagZPnxHufmXUskOmNOn5OLwn5CiAEyz7G7Vn1Li6+c7RA
+T52W8Iy4AYj6v3rt9sxGxWIbu/MdOksCfKpuYR9bTg7VP8NcwF8aqvu7T02kRUwq
+zcDCKT0fMSsNgEXHX0sJloimSrD7Zj9LQcNbp/d/zsu1yVRiZmHRIHP2wuCBESCx
+oKVEP1JKd525uZnnc6gjHwKRA+WQrSMAKgiZNxbfynC/2ulQHcWUgVeXfT/ST5F0
+lJAuXN0zE6CDJU3AfhmX49Y=
+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c9:53:af:4f:d1:35:5f:3e:69:08:13:28:41:5b:
+ 69:25:b0:ee:39:75:73:4c:63:c4:08:42:0c:5e:04:
+ 04:62:21:1a:92:5d:c8:6d:e8:44:6a:3b:3e:c5:6a:
+ 22:56:86:db:cb:38:c8:c7:55:ed:2c:dc:bc:36:39:
+ 76:96:3f:6a:5f:3d:12:43:60:b1:94:13:75:94:02:
+ 8b:ad:f4:be:85:5b:ed:f1:c5:03:2c:3c:0c:e3:eb:
+ 7f:ab:94:4a:79:8b:48:fd:ad:7a:c3:e0:a8:de:40:
+ ea:f0:a7:87:54:40:6e:f4:74:88:aa:2b:bb:21:bf:
+ d6:7f:da:bc:cf:52:48:3d:b6:75:0d:e2:6b:ea:03:
+ 0a:d7:39:f5:78:45:63:05:1a:4b:99:40:5e:97:08:
+ 0a:5d:34:63:fa:ba:de:a7:f5:1c:e8:b2:26:96:0f:
+ c9:c1:ac:6d:ef:05:8d:1c:dc:09:0b:bc:d3:f3:fb:
+ 10:43:2f:b2:36:3e:cf:84:1a:37:1e:fc:81:67:c6:
+ 14:87:bb:87:33:16:2a:95:cf:e7:0a:b7:52:00:05:
+ 09:08:a9:a5:97:5d:be:ed:19:92:4e:6c:4f:94:7f:
+ e5:1a:34:c0:dc:3f:02:8e:ae:77:fc:b6:27:77:78:
+ 48:e7:ca:a1:bd:27:1d:3c:a3:2d:8d:46:d5:a6:9d:
+ 53:cd
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ FB:59:3E:CC:A2:42:62:72:9F:53:96:95:3A:48:EA:16:80:C8:42:40
+ X509v3 Authority Key Identifier:
+ keyid:FB:59:3E:CC:A2:42:62:72:9F:53:96:95:3A:48:EA:16:80:C8:42:40
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 34:3c:af:58:31:78:ea:c0:32:23:d8:b0:8e:84:44:9c:a3:b7:
+ 0b:b5:a4:4b:3d:21:d2:8a:02:ec:4c:ed:ab:c3:0a:17:89:50:
+ 45:fc:43:0b:db:6c:e6:69:56:3c:41:b0:c9:2d:12:19:bd:a1:
+ b6:a7:fa:25:a4:73:6f:32:06:b7:f5:ac:64:b3:b9:b6:44:65:
+ 83:b2:48:cc:3c:68:69:ae:16:0a:c0:c5:57:39:00:51:16:97:
+ 0e:03:7d:e7:02:65:f2:84:de:e9:a6:9d:d5:83:73:37:9d:f5:
+ bc:d8:ef:dc:6f:1b:48:db:f6:ca:a0:00:d5:e6:c0:f6:94:2d:
+ a9:4e:b4:4d:cf:49:7d:c4:4d:3a:68:a2:b2:d8:e8:67:77:98:
+ 6f:1c:2d:4a:74:13:2b:24:04:67:50:38:7e:e9:cb:0c:94:0d:
+ d0:07:50:52:a5:03:10:07:6a:04:ef:33:ea:b0:70:9f:27:34:
+ 47:b0:f8:41:81:7e:f2:93:0b:c0:cf:c3:d7:06:59:f1:24:2a:
+ 61:64:7f:38:f0:4f:77:d3:92:e4:1f:e4:44:a4:b6:85:40:59:
+ 3d:df:f2:cc:57:ea:1a:58:1d:f8:90:d4:2d:53:67:56:c3:88:
+ 9d:17:0f:19:19:fc:ed:4e:cc:b9:76:fa:fc:93:e5:bf:08:e7:
+ a9:d6:46:0f
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/expired-root.pem b/net/data/verify_certificate_chain_unittest/expired-root.pem
index 5e9ffcf..57b0b7b 100644
--- a/net/data/verify_certificate_chain_unittest/expired-root.pem
+++ b/net/data/verify_certificate_chain_unittest/expired-root.pem
@@ -1,6 +1,6 @@
[Created by: generate-expired-root.py]
-Certificate chain with 1 intermediary, where the root certificate is expired
+Certificate chain with 1 intermediate, where the root certificate is expired
(violates validity.notAfter). Verification is expected to fail.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c2:5a:d7:49:58:e0:e3:06:4c:d0:8d:83:ad:7a:
- ff:86:7c:0e:00:26:64:44:8a:cb:38:bd:95:8e:b1:
- 7f:7c:48:7f:02:ef:7d:f9:b4:76:76:eb:5a:1d:71:
- 99:3a:c8:66:1a:c8:fb:24:d3:e8:9c:af:3b:5c:b5:
- 10:f0:32:7c:46:87:9a:3f:f6:57:6a:45:5c:18:6e:
- 92:54:54:16:4e:17:79:1c:a1:05:7c:21:3c:dc:89:
- 23:5d:aa:f9:1e:a1:8c:9b:9f:d7:a0:f3:c3:23:f0:
- f4:b5:12:ac:d3:57:cb:bb:f9:8e:0d:d8:e9:d5:bd:
- 71:2b:3e:38:d1:fe:f0:17:cb:f0:ce:23:8f:8a:ee:
- 56:4d:94:18:31:c3:1d:74:07:57:a4:f7:07:e8:b3:
- a4:60:53:38:96:83:f7:59:cf:03:f9:38:3c:35:87:
- 6a:71:92:8a:1b:4f:7e:f0:49:76:ba:65:42:87:fe:
- b2:21:e1:17:d6:98:50:36:5a:7f:fe:8d:f6:bf:ab:
- 46:63:fc:57:e8:57:c5:90:9b:27:07:30:fa:26:1d:
- 13:eb:f2:e1:b0:99:f9:55:39:76:0f:ca:a4:31:85:
- c6:62:df:53:cd:3e:df:bf:83:1d:a9:07:b1:a2:8a:
- be:43:f2:05:1e:f9:ca:28:2e:81:39:fa:2c:74:c5:
- 7c:b1
+ 00:de:6b:17:fa:9d:bf:8d:97:11:c1:2b:af:53:67:
+ 89:b2:bb:1b:7c:25:a6:ba:81:f9:43:3f:15:51:06:
+ 24:11:3c:3c:d1:28:16:86:53:15:fb:e6:99:67:08:
+ d7:2a:74:2d:ba:f2:72:55:ec:8e:7b:13:30:f8:31:
+ dc:16:a2:7f:7a:83:9c:26:ee:cb:5a:49:68:75:7e:
+ 97:a9:04:e5:2a:dc:e7:5d:9d:60:22:7f:b5:b3:d5:
+ 13:7c:64:3b:75:a5:b8:92:8f:67:7e:de:7e:42:13:
+ 7a:d2:e1:da:c5:f5:a7:bb:db:57:db:e5:09:d8:37:
+ 6f:80:c0:06:52:c5:ea:33:1b:35:ba:21:de:6c:a0:
+ e2:c8:19:b4:cc:3e:3c:0e:af:f1:a8:c6:01:f7:d8:
+ 7a:dc:83:4a:e8:9f:dc:30:f7:c8:a4:19:c4:89:45:
+ 69:60:3b:ca:a0:f8:86:09:56:1e:0f:55:c4:32:8f:
+ 95:fd:02:ee:e6:76:d5:bc:4a:6c:8f:b4:47:3f:04:
+ e4:0c:45:16:a3:04:3b:73:f2:5e:2e:6b:62:9e:25:
+ e9:46:2c:ee:b9:3a:6b:a9:84:63:d2:aa:a6:73:66:
+ 61:77:90:e2:7b:1e:d0:c3:3c:7d:23:40:cb:9d:a4:
+ 53:ab:bb:9d:57:b8:dd:30:f4:89:cd:be:40:0f:8c:
+ fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 14:B3:FA:87:AB:1D:54:2D:2B:B8:C4:5D:33:57:C5:52:F4:15:B8:20
+ E1:00:21:A7:60:75:C5:70:AE:67:AA:A2:C0:27:3E:1D:88:0B:8F:3A
X509v3 Authority Key Identifier:
- keyid:ED:CC:99:FA:9D:D2:85:7E:0E:02:42:8E:72:48:C3:F4:29:4B:95:D2
+ keyid:63:74:44:85:E8:82:EC:BA:73:D2:A8:F4:8D:AF:0B:B0:37:F6:14:DD
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 42:13:4f:10:c0:69:c9:ad:88:94:2d:df:24:e6:47:6c:d3:07:
- 33:75:77:ba:c8:40:f4:28:1f:7a:0a:49:14:93:5f:d7:6e:91:
- 49:22:a3:cb:f0:52:f9:d6:22:90:ef:62:79:3d:cc:e5:2f:d0:
- c9:c3:0e:b0:54:06:6c:31:7e:f3:9e:48:be:02:c8:f3:60:cb:
- d7:5b:65:f6:82:41:fa:b4:19:34:e2:82:9c:0a:02:ee:ec:2a:
- 53:6d:25:49:19:9a:ce:1a:6c:c4:49:e2:3b:08:fb:6f:05:00:
- 65:d6:64:29:a9:c5:9f:83:27:af:49:a8:b8:14:de:e0:43:c6:
- b4:c2:ad:49:55:d5:58:42:50:cb:20:54:df:1e:9b:0a:9d:d3:
- a0:85:4d:a2:5c:cb:07:24:1c:f0:91:d2:89:54:d1:69:7a:68:
- 05:6a:3c:80:00:e5:7d:6d:9a:0b:37:0d:d0:6b:5e:61:d4:04:
- 37:73:41:ae:48:10:0a:3b:b1:d4:67:31:19:19:43:d2:22:f4:
- 29:72:cd:8d:97:5b:f8:11:09:5b:32:07:56:fb:f4:d7:66:cc:
- 72:e4:db:f6:1d:53:70:0e:bf:4c:c2:0f:61:07:a9:f3:1d:5f:
- 03:f9:1e:9c:96:f6:49:1a:b8:51:1d:16:22:1a:f5:2b:ac:da:
- ce:5a:a6:38
+ a0:85:7a:3a:fd:63:12:8f:fa:ea:aa:a0:17:37:a9:ee:2d:a1:
+ 98:e4:4e:c0:5a:8f:42:1e:f7:09:c9:36:0e:8e:7c:0f:00:20:
+ f8:73:5b:7c:e2:f0:ea:45:35:0e:70:b3:a7:65:d6:8e:ad:02:
+ 2b:04:79:c0:0b:e3:3e:57:da:ab:7a:e5:78:6e:91:fd:0c:bf:
+ 3a:22:14:16:c1:42:e1:8c:f9:92:1c:7d:74:b3:72:b6:18:42:
+ 1f:30:c1:f1:05:f2:7e:9e:71:f8:a7:e1:e4:6d:9b:a4:8a:29:
+ f0:ae:73:c3:b9:7d:93:5f:4c:b4:7e:4e:fb:6d:3f:4d:85:46:
+ ea:31:32:01:92:50:10:c7:81:82:d3:86:75:8b:47:c3:e7:e9:
+ 17:0c:42:d2:e4:70:66:eb:07:e7:6e:1a:12:b2:c9:8a:62:b0:
+ 0e:8e:27:f1:90:9e:82:10:96:92:c9:9f:31:e1:50:21:e8:39:
+ c3:d8:26:2a:f9:36:21:02:e7:ac:a7:0c:81:a1:35:1c:7c:33:
+ e8:84:26:9a:41:a7:07:d0:ff:d5:18:b9:b8:2c:46:47:3a:1b:
+ 22:c4:35:f7:ab:86:98:63:cf:8a:d1:94:be:5b:59:a3:4b:6a:
+ 01:1f:df:27:cb:09:d3:98:43:88:80:9c:ed:ca:73:60:41:e0:
+ 77:8d:e4:ab
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWtdJ
-WODjBkzQjYOtev+GfA4AJmREiss4vZWOsX98SH8C7335tHZ261odcZk6yGYayPsk
-0+icrztctRDwMnxGh5o/9ldqRVwYbpJUVBZOF3kcoQV8ITzciSNdqvkeoYybn9eg
-88Mj8PS1EqzTV8u7+Y4N2OnVvXErPjjR/vAXy/DOI4+K7lZNlBgxwx10B1ek9wfo
-s6RgUziWg/dZzwP5ODw1h2pxkoobT37wSXa6ZUKH/rIh4RfWmFA2Wn/+jfa/q0Zj
-/FfoV8WQmycHMPomHRPr8uGwmflVOXYPyqQxhcZi31PNPt+/gx2pB7Giir5D8gUe
-+cooLoE5+ix0xXyxAgMBAAGjgekwgeYwHQYDVR0OBBYEFBSz+oerHVQtK7jEXTNX
-xVL0FbggMB8GA1UdIwQYMBaAFO3Mmfqd0oV+DgJCjnJIw/QpS5XSMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAQhNPEMBpya2IlC3fJOZH
-bNMHM3V3ushA9CgfegpJFJNf126RSSKjy/BS+dYikO9ieT3M5S/QycMOsFQGbDF+
-855IvgLI82DL11tl9oJB+rQZNOKCnAoC7uwqU20lSRmazhpsxEniOwj7bwUAZdZk
-KanFn4Mnr0mouBTe4EPGtMKtSVXVWEJQyyBU3x6bCp3ToIVNolzLByQc8JHSiVTR
-aXpoBWo8gADlfW2aCzcN0GteYdQEN3NBrkgQCjux1GcxGRlD0iL0KXLNjZdb+BEJ
-WzIHVvv012bMcuTb9h1TcA6/TMIPYQep8x1fA/kenJb2SRq4UR0WIhr1K6zazlqm
-OA==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-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b0:4e:34:a2:37:40:52:cd:58:5e:d8:18:40:f2:
- 23:9e:a8:78:10:18:db:5b:87:a3:e2:e3:c8:a5:50:
- b7:c3:1c:fa:e5:77:7f:93:b3:44:2a:90:60:39:81:
- a4:c4:63:e0:3d:8a:d8:36:c8:5d:df:04:01:c1:f1:
- b5:65:12:3d:f5:22:f9:f5:ff:c5:60:2a:48:39:90:
- 69:df:08:9f:bc:07:6c:c6:ab:3f:e4:2d:05:b5:b3:
- 11:9e:4d:5a:8d:3c:64:3f:1e:7d:df:05:1c:e2:e4:
- b7:d9:42:36:cb:86:df:53:2a:ea:51:2b:53:f8:3a:
- 07:5a:08:8b:df:fb:9d:2f:1f:94:a9:fb:07:93:87:
- 20:ee:e6:ae:d9:a5:2e:1a:eb:d9:67:0e:ce:8f:7e:
- 0b:be:3a:ca:b2:9c:40:38:54:5c:35:99:ac:07:12:
- 3e:00:a3:39:07:76:e1:fa:df:7b:81:59:0b:a3:8e:
- 4e:42:b7:1e:09:04:e2:0c:ea:eb:d5:c0:da:dd:6f:
- f0:6e:6a:34:2a:38:ae:4f:b4:f3:4f:06:17:c3:83:
- 0a:66:e8:c6:8a:54:71:86:0b:8b:39:3b:73:07:d2:
- 0b:dc:4c:86:79:da:86:44:25:3d:dc:f1:38:eb:22:
- ce:92:df:8b:9b:ff:47:eb:7a:28:0a:91:cd:ba:30:
- 77:7d
+ 00:d6:9b:b6:c4:fd:a9:f3:0d:77:4f:26:65:7d:54:
+ f5:19:ab:7a:49:c0:8a:90:ee:86:43:c4:1f:52:f8:
+ af:1c:47:f7:88:0d:19:df:2f:5d:b1:c2:3c:5d:1d:
+ 9e:54:cd:e0:22:6a:6b:b4:8f:f9:38:0b:ef:b2:81:
+ 80:ee:22:83:5b:3e:2e:b7:b0:cd:4f:2f:78:be:d4:
+ 40:3f:c9:d9:4b:f6:39:6c:63:94:a4:c2:1b:97:01:
+ a2:a6:9b:5c:11:f8:40:c4:25:64:6a:9a:17:fb:43:
+ ab:d4:42:cd:d3:6e:23:68:90:3e:c0:54:0f:73:58:
+ 13:c2:70:9f:c6:76:a4:c3:94:e8:b2:5f:16:e3:a9:
+ f7:87:56:06:85:d9:ca:2c:09:01:39:97:c0:f2:36:
+ e1:90:97:c1:78:9f:99:86:03:e6:00:6a:ea:2c:60:
+ b0:ae:08:04:e8:11:bd:7e:e5:4e:e6:b1:9b:d0:1c:
+ 09:ff:ea:68:1b:c0:54:4a:c5:ad:d9:bd:25:e9:b3:
+ 7a:66:7f:98:50:9e:a7:c4:1b:ed:fa:2a:cc:94:9e:
+ bd:4b:11:b4:03:7c:6e:8e:5e:db:46:b1:59:2f:b2:
+ 18:fc:2f:83:ef:e3:d1:24:3a:c0:60:ae:dd:ab:a6:
+ 93:07:27:cb:d9:7f:1b:75:f2:1a:82:35:e5:1b:e6:
+ 27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- ED:CC:99:FA:9D:D2:85:7E:0E:02:42:8E:72:48:C3:F4:29:4B:95:D2
+ 63:74:44:85:E8:82:EC:BA:73:D2:A8:F4:8D:AF:0B:B0:37:F6:14:DD
X509v3 Authority Key Identifier:
- keyid:62:81:A1:85:84:13:F2:70:79:BD:48:5B:29:88:E0:F1:27:35:41:F7
+ keyid:01:34:E7:14:1F:DF:2E:D5:19:18:06:94:60:42:D1:A8:FC:16:E0:61
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 02:82:8b:cf:81:89:f2:15:d3:a7:a6:30:c8:2a:c8:32:c5:95:
- 7c:18:60:2e:51:48:c5:26:47:b8:5e:49:17:b4:aa:87:f7:8b:
- 22:73:2a:81:20:1d:1c:54:b7:7b:91:e1:48:40:7a:19:13:05:
- 05:6e:e4:21:75:d7:a7:a0:54:bf:da:18:a1:52:08:95:0a:c5:
- e0:36:f3:6d:ab:ed:21:69:e1:e7:4d:8f:85:85:22:ac:7b:b3:
- 7f:3f:1a:7e:44:be:06:ee:0b:f5:89:53:e3:d1:fa:f7:51:00:
- 7c:61:d2:5e:48:ab:4c:bb:47:03:a2:d4:6a:78:02:7e:33:5a:
- b9:7c:14:12:5a:c2:bb:66:91:4f:21:cb:c0:b7:80:72:4b:28:
- 6c:d9:7b:02:fa:04:26:f2:de:2a:54:7d:69:89:88:f3:b9:10:
- ab:0a:07:fa:f8:7c:1e:bb:45:0f:4f:de:2e:36:3e:a4:63:b0:
- 71:a1:be:2b:dd:0c:fa:0b:97:f0:ad:56:b0:dd:76:51:e7:45:
- aa:a3:82:cd:77:5a:07:3a:e5:bc:fd:37:8f:52:ee:e0:de:ac:
- 99:44:94:65:7d:b1:30:89:4d:12:da:73:29:06:a9:28:42:5d:
- 1f:1a:a7:44:f3:77:5b:99:4a:ca:a6:dd:3a:cd:a1:16:76:11:
- 16:44:34:c0
+ 33:28:d1:77:84:d7:9e:51:7e:ce:85:49:35:ee:e8:f3:fb:d6:
+ 4f:fa:6c:00:0b:90:a1:f1:37:4b:d0:3e:9d:82:2d:e0:96:d8:
+ 72:fb:61:96:d6:36:a2:1a:ca:62:44:c3:a3:14:c5:0b:e0:de:
+ 39:a9:c9:75:a4:9f:2c:54:0d:fa:61:5c:fa:6e:66:0f:71:0e:
+ 58:12:d4:1a:c6:c0:ca:33:f7:8f:0f:2a:8f:a1:2d:c1:a8:64:
+ 2e:52:23:ac:fe:9b:04:90:84:13:44:40:e8:4b:bf:53:30:72:
+ ff:5c:7e:8c:62:87:c5:03:a8:84:8c:7c:4d:fb:d6:8c:8c:35:
+ 56:9b:0f:01:e3:81:9b:6c:36:e2:f1:88:06:16:75:2f:6e:cc:
+ 70:30:67:c9:6c:3c:28:49:72:0d:11:6b:1d:73:ae:d9:bf:e6:
+ 6c:63:c4:70:df:18:8c:fc:d0:03:01:c5:8a:22:4e:b1:c5:03:
+ dc:36:9a:22:08:ab:46:88:d6:93:2c:6c:1b:05:b1:60:69:be:
+ ad:97:d1:a8:e4:a1:70:5a:ab:84:87:72:75:13:50:95:58:b1:
+ 80:27:50:60:9b:b1:da:7e:18:b8:f0:bd:f3:54:89:04:32:ff:
+ b1:f2:be:a8:09:14:b1:74:30:a8:95:8e:59:ed:8a:63:28:ce:
+ 55:68:d8:e2
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE40ojdA
-Us1YXtgYQPIjnqh4EBjbW4ej4uPIpVC3wxz65Xd/k7NEKpBgOYGkxGPgPYrYNshd
-3wQBwfG1ZRI99SL59f/FYCpIOZBp3wifvAdsxqs/5C0FtbMRnk1ajTxkPx593wUc
-4uS32UI2y4bfUyrqUStT+DoHWgiL3/udLx+UqfsHk4cg7uau2aUuGuvZZw7Oj34L
-vjrKspxAOFRcNZmsBxI+AKM5B3bh+t97gVkLo45OQrceCQTiDOrr1cDa3W/wbmo0
-KjiuT7TzTwYXw4MKZujGilRxhguLOTtzB9IL3EyGedqGRCU93PE46yLOkt+Lm/9H
-63ooCpHNujB3fQIDAQABo4HLMIHIMB0GA1UdDgQWBBTtzJn6ndKFfg4CQo5ySMP0
-KUuV0jAfBgNVHSMEGDAWgBRigaGFhBPycHm9SFspiODxJzVB9zA3BggrBgEFBQcB
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pu2xP2p
+8w13TyZlfVT1Gat6ScCKkO6GQ8QfUvivHEf3iA0Z3y9dscI8XR2eVM3gImprtI/5
+OAvvsoGA7iKDWz4ut7DNTy94vtRAP8nZS/Y5bGOUpMIblwGipptcEfhAxCVkapoX
++0Or1ELN024jaJA+wFQPc1gTwnCfxnakw5Tosl8W46n3h1YGhdnKLAkBOZfA8jbh
+kJfBeJ+ZhgPmAGrqLGCwrggE6BG9fuVO5rGb0BwJ/+poG8BUSsWt2b0l6bN6Zn+Y
+UJ6nxBvt+irMlJ69SxG0A3xujl7bRrFZL7IY/C+D7+PRJDrAYK7dq6aTByfL2X8b
+dfIagjXlG+YnAQIDAQABo4HLMIHIMB0GA1UdDgQWBBRjdESF6ILsunPSqPSNrwuw
+N/YU3TAfBgNVHSMEGDAWgBQBNOcUH98u1RkYBpRgQtGo/BbgYTA3BggrBgEFBQcB
AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AAKCi8+BifIV06emMMgqyDLFlXwYYC5RSMUmR7heSRe0qof3iyJzKoEgHRxUt3uR
-4UhAehkTBQVu5CF116egVL/aGKFSCJUKxeA2822r7SFp4edNj4WFIqx7s38/Gn5E
-vgbuC/WJU+PR+vdRAHxh0l5Iq0y7RwOi1Gp4An4zWrl8FBJawrtmkU8hy8C3gHJL
-KGzZewL6BCby3ipUfWmJiPO5EKsKB/r4fB67RQ9P3i42PqRjsHGhvivdDPoLl/Ct
-VrDddlHnRaqjgs13Wgc65bz9N49S7uDerJlElGV9sTCJTRLacykGqShCXR8ap0Tz
-d1uZSsqm3TrNoRZ2ERZENMA=
+ADMo0XeE155Rfs6FSTXu6PP71k/6bAALkKHxN0vQPp2CLeCW2HL7YZbWNqIaymJE
+w6MUxQvg3jmpyXWknyxUDfphXPpuZg9xDlgS1BrGwMoz948PKo+hLcGoZC5SI6z+
+mwSQhBNEQOhLv1Mwcv9cfoxih8UDqISMfE371oyMNVabDwHjgZtsNuLxiAYWdS9u
+zHAwZ8lsPChJcg0Rax1zrtm/5mxjxHDfGIz80AMBxYoiTrHFA9w2miIIq0aI1pMs
+bBsFsWBpvq2X0ajkoXBaq4SHcnUTUJVYsYAnUGCbsdp+GLjwvfNUiQQy/7HyvqgJ
+FLF0MKiVjlntimMozlVo2OI=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b5:79:69:47:50:a7:53:24:79:a6:6a:35:e8:33:
- 74:57:45:da:2c:69:13:1f:76:f9:51:ce:b4:47:ad:
- a3:c3:58:50:d1:5f:d6:34:5b:3a:62:f0:6c:ea:e7:
- 86:c2:09:78:b3:53:0d:7f:45:cb:2b:8e:2e:1f:9b:
- c0:7e:47:90:e3:7b:20:cc:01:ed:b6:c3:c6:40:69:
- 74:2b:f1:db:a5:f8:f4:5b:fd:e9:84:db:1a:fc:4f:
- 91:4b:e7:f5:2e:99:d0:c9:69:f5:48:5b:8b:19:ca:
- dc:5c:0d:3d:15:25:56:77:86:b6:54:fc:d3:1d:8e:
- f8:ea:f5:ec:de:30:38:93:28:37:7c:d4:b7:29:26:
- 6f:2a:4a:56:c3:12:91:18:d6:77:cf:4f:31:4e:13:
- b3:8f:ca:bc:7b:a7:7f:f1:af:db:77:80:51:8c:42:
- 1c:27:37:18:ac:6c:45:8e:d5:21:25:16:09:fb:3b:
- 0c:84:a8:60:ea:8a:03:65:94:f5:5c:d6:62:36:ae:
- b4:de:a3:b1:ee:1b:85:12:8c:6e:ba:ee:14:94:b9:
- c7:cb:a3:f1:d1:96:ed:81:79:71:27:d0:d8:26:b4:
- 80:54:c8:07:a9:34:71:a2:a9:04:33:d6:58:02:59:
- f9:14:97:5e:a9:2b:8c:41:2a:5c:3e:ac:30:b8:63:
- 52:35
+ 00:cc:3f:3d:39:6a:1a:de:64:b7:11:19:82:b6:ed:
+ b9:47:d8:67:22:83:07:f7:a1:de:70:05:e1:83:f2:
+ 06:8d:ea:b0:19:95:27:f4:19:c8:b9:53:91:35:0a:
+ 50:2c:26:7c:77:9f:fb:d5:36:19:f3:91:67:8d:2a:
+ ea:0c:81:ab:f6:dd:8a:32:e9:e9:71:71:57:ea:3c:
+ 5f:e8:b8:9b:60:6a:7d:2a:8c:54:66:ad:5a:b5:e0:
+ c0:0e:a1:0b:2f:00:b3:f9:e3:82:16:4f:8c:a9:4c:
+ 89:72:88:ba:2c:60:04:29:09:7c:bc:9e:d4:81:62:
+ 22:ed:3d:2f:00:5a:71:7d:db:87:54:83:8d:43:49:
+ db:6d:53:59:36:81:d4:ef:8f:e6:fa:d8:9b:a2:f0:
+ e6:1c:32:26:8c:f6:d5:57:4e:bb:dc:6e:f4:fd:24:
+ b4:3a:75:91:3b:9d:72:78:1f:06:7d:05:88:72:eb:
+ d7:4a:d1:22:97:19:90:90:d8:e0:d5:03:4c:be:8e:
+ 04:9b:b0:4d:8d:1b:dd:96:91:7e:90:16:7b:5d:32:
+ 3d:f5:c3:a9:1c:62:07:17:55:56:4b:08:75:5b:fc:
+ 11:57:39:52:81:08:2e:31:b3:ee:7c:38:e0:62:dd:
+ cc:47:b1:fb:c7:45:47:aa:b7:c6:c1:20:ba:b0:13:
+ 63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 62:81:A1:85:84:13:F2:70:79:BD:48:5B:29:88:E0:F1:27:35:41:F7
+ 01:34:E7:14:1F:DF:2E:D5:19:18:06:94:60:42:D1:A8:FC:16:E0:61
X509v3 Authority Key Identifier:
- keyid:62:81:A1:85:84:13:F2:70:79:BD:48:5B:29:88:E0:F1:27:35:41:F7
+ keyid:01:34:E7:14:1F:DF:2E:D5:19:18:06:94:60:42:D1:A8:FC:16:E0:61
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 47:20:58:cf:09:e0:8c:35:aa:91:d7:be:d1:6a:dc:06:11:ef:
- 4a:b2:f1:94:41:3b:b4:00:d5:d3:be:cb:4b:ef:67:e0:1b:91:
- 8b:c3:4f:42:92:9a:5b:8f:84:b1:8e:86:f8:9a:f8:aa:d2:66:
- 34:76:e5:bb:6f:95:4c:f4:23:e4:71:53:6a:02:8d:e4:ad:7f:
- c3:6c:77:a0:8d:00:80:c9:cf:e3:d0:96:e2:5a:1c:b6:66:96:
- 0d:2a:43:58:66:c8:53:b8:7a:6e:c2:c4:2b:c6:54:33:40:b3:
- f3:07:67:37:51:92:b2:7f:9a:e3:c1:79:36:4b:d8:9f:e9:6e:
- 04:c6:49:19:51:fd:6f:21:86:09:9a:00:76:e0:5e:73:b0:57:
- 00:25:c5:2a:12:b3:bd:9a:8b:1b:ff:46:90:47:20:76:2b:bf:
- 8e:94:7d:1a:7c:56:f6:0a:03:7b:5a:42:97:76:77:2e:a5:0c:
- 2e:a0:03:13:a8:39:79:82:a0:98:8c:da:bd:1e:7e:af:56:21:
- 95:14:26:ef:06:07:d7:ec:42:6b:2f:b1:e6:f7:97:88:30:5f:
- 79:50:99:92:b4:9e:20:d0:c2:95:8e:f7:61:64:99:c3:13:da:
- 46:a1:63:73:0b:23:e8:d7:e7:97:36:82:2b:2a:12:8e:b8:a9:
- 2d:3c:35:b3
+ 79:96:30:f1:a6:30:2b:c8:b8:51:8f:17:03:6c:ca:26:30:f8:
+ 2e:40:ff:ea:d3:3a:b6:80:db:d6:cc:ec:83:75:84:65:47:8b:
+ fc:0e:b4:13:b2:68:41:2e:ab:83:0d:4a:d0:d1:16:ab:f3:5c:
+ 80:a0:60:f0:08:c9:b3:56:26:c3:08:d1:37:0c:66:fa:11:ce:
+ 93:74:d1:ed:a7:5c:34:d4:31:d4:ba:af:81:d4:ca:85:93:27:
+ cc:c1:8f:97:06:51:61:94:1f:e9:3a:90:e7:39:c8:0e:f0:08:
+ 97:bd:ff:b4:2d:b6:20:9f:78:7b:7c:c0:25:ea:3b:2e:9d:66:
+ 84:f9:2a:f3:7e:54:20:1c:d9:fa:5f:0c:4a:c1:ea:36:8c:ae:
+ 43:c5:26:b6:99:f4:bd:2d:da:ff:96:f3:a9:1d:03:4a:50:44:
+ 2a:0c:bb:42:fb:b2:e4:44:f5:c2:06:1a:10:e7:cb:32:d6:40:
+ b9:eb:85:d1:79:0e:f5:6a:1b:2b:fe:3e:01:c6:2d:a5:e4:bd:
+ b0:46:76:a3:50:07:42:9d:18:76:3f:c2:29:1b:03:94:c2:d1:
+ 14:4d:47:cd:44:63:e0:d4:30:b9:e5:05:03:88:ca:a5:a8:0e:
+ 01:15:02:d8:cc:8c:91:87:56:d6:20:00:58:73:db:2e:10:86:
+ 41:63:5e:35
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE1MDMwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALV5aUdQp1MkeaZqNegz
-dFdF2ixpEx92+VHOtEeto8NYUNFf1jRbOmLwbOrnhsIJeLNTDX9FyyuOLh+bwH5H
-kON7IMwB7bbDxkBpdCvx26X49Fv96YTbGvxPkUvn9S6Z0Mlp9UhbixnK3FwNPRUl
-VneGtlT80x2O+Or17N4wOJMoN3zUtykmbypKVsMSkRjWd89PMU4Ts4/KvHunf/Gv
-23eAUYxCHCc3GKxsRY7VISUWCfs7DISoYOqKA2WU9VzWYjautN6jse4bhRKMbrru
-FJS5x8uj8dGW7YF5cSfQ2Ca0gFTIB6k0caKpBDPWWAJZ+RSXXqkrjEEqXD6sMLhj
-UjUCAwEAAaOByzCByDAdBgNVHQ4EFgQUYoGhhYQT8nB5vUhbKYjg8Sc1QfcwHwYD
-VR0jBBgwFoAUYoGhhYQT8nB5vUhbKYjg8Sc1QfcwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBHIFjPCeCM
-NaqR177RatwGEe9KsvGUQTu0ANXTvstL72fgG5GLw09Ckppbj4Sxjob4mviq0mY0
-duW7b5VM9CPkcVNqAo3krX/DbHegjQCAyc/j0JbiWhy2ZpYNKkNYZshTuHpuwsQr
-xlQzQLPzB2c3UZKyf5rjwXk2S9if6W4ExkkZUf1vIYYJmgB24F5zsFcAJcUqErO9
-mosb/0aQRyB2K7+OlH0afFb2CgN7WkKXdncupQwuoAMTqDl5gqCYjNq9Hn6vViGV
-FCbvBgfX7EJrL7Hm95eIMF95UJmStJ4g0MKVjvdhZJnDE9pGoWNzCyPo1+eXNoIr
-KhKOuKktPDWz
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB5ljDxpjAr
+yLhRjxcDbMomMPguQP/q0zq2gNvWzOyDdYRlR4v8DrQTsmhBLquDDUrQ0Rar81yA
+oGDwCMmzVibDCNE3DGb6Ec6TdNHtp1w01DHUuq+B1MqFkyfMwY+XBlFhlB/pOpDn
+OcgO8AiXvf+0LbYgn3h7fMAl6jsunWaE+SrzflQgHNn6XwxKweo2jK5DxSa2mfS9
+Ldr/lvOpHQNKUEQqDLtC+7LkRPXCBhoQ58sy1kC564XReQ71ahsr/j4Bxi2l5L2w
+RnajUAdCnRh2P8IpGwOUwtEUTUfNRGPg1DC55QUDiMqlqA4BFQLYzIyRh1bWIABY
+c9suEIZBY141
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem b/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem
index 3a1096d..5f480a7 100644
--- a/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem
+++ b/net/data/verify_certificate_chain_unittest/expired-target-notBefore.pem
@@ -1,6 +1,6 @@
[Created by: generate-expired-target-notBefore.py]
-Certificate chain with 1 intermediary, where the target is expired (violates
+Certificate chain with 1 intermediate, where the target is expired (violates
validity.notBefore). Verification is expected to fail.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Mar 2 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b8:1e:b0:de:22:2f:b4:13:ca:c4:72:10:b9:bd:
- 4c:80:81:be:17:f2:45:bb:5a:d2:b4:a1:f6:3e:1c:
- 50:00:d5:8d:fe:27:5b:a2:21:07:8b:1a:de:56:56:
- 58:88:25:41:09:4e:fd:04:bb:6c:75:c7:48:3f:98:
- 6b:4c:54:8a:22:26:28:f3:c6:76:5f:e8:bf:ad:bf:
- 4f:ad:6d:1a:1d:ba:5e:fc:0d:2f:92:b2:4f:f7:bb:
- e5:fd:3a:ff:8d:fb:f1:9f:96:90:18:46:2c:cf:7b:
- 62:75:b8:c5:e9:40:ce:67:21:e0:4b:9e:78:65:9b:
- 9e:71:50:bd:33:12:53:78:7f:ad:fd:bf:e0:ae:d2:
- 72:51:c1:18:d0:96:71:78:23:ff:a6:55:39:d5:9a:
- 89:3e:21:72:cd:9d:13:fa:04:9f:08:6f:c0:d0:c5:
- ab:b2:27:b5:b8:e2:2d:ab:31:a3:7a:c1:94:56:8b:
- 35:9c:b8:46:71:1c:d6:69:95:c1:0a:98:e4:14:96:
- 3c:2f:cb:12:ac:71:88:a4:aa:d0:c8:0e:51:98:47:
- 71:e8:0e:a0:e7:7e:01:95:b3:73:3f:9b:c4:8b:9d:
- d0:dc:17:a9:53:35:99:29:67:f3:28:d2:7f:1e:0d:
- 17:6b:5d:56:c9:91:a6:ae:e8:07:a6:76:d6:8e:2a:
- 48:47
+ 00:d8:d8:32:e7:2a:be:55:8d:e7:e8:ae:ee:1d:c6:
+ f5:3b:0c:6d:25:d9:53:8e:4a:84:0c:1e:7b:cb:30:
+ 2f:5f:1f:85:a3:e7:e0:92:79:b4:a2:35:fe:b7:71:
+ b4:a3:c0:79:dd:50:e5:e4:b0:61:b5:2c:97:2e:e6:
+ 4a:bc:c6:3c:c7:20:f3:87:20:4e:27:d8:8a:f6:0d:
+ a9:ac:0a:57:9a:53:03:9e:5f:32:ef:07:18:0a:ab:
+ f6:a7:42:4e:ef:36:9a:10:4a:db:d3:9f:49:d7:04:
+ 3a:95:61:77:ba:5e:d2:84:cb:57:ec:45:91:d0:fd:
+ be:5b:8b:4d:2f:0b:21:ab:89:ab:92:d9:fc:18:0c:
+ 44:bb:54:0a:94:5d:bd:ee:ac:a9:ee:f2:27:a8:3f:
+ 30:b1:e7:f6:fd:1a:05:86:56:db:22:de:bd:e5:a6:
+ d2:50:2d:4c:0c:ab:1c:b2:49:6c:23:9a:46:d8:f5:
+ 53:f4:9d:52:2c:f0:25:e3:a8:e7:99:d3:6d:ec:f0:
+ 0c:d1:bd:1e:73:c6:8f:5d:11:50:88:b3:63:bc:c7:
+ c5:eb:36:74:8f:03:fe:1a:36:d7:ac:5f:18:ae:73:
+ 11:7f:dc:81:dc:7c:77:17:ec:2c:91:c5:db:cc:2d:
+ 1a:a0:f1:ad:aa:d4:b6:1d:22:ee:22:bd:48:c9:f0:
+ df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 27:06:C6:75:1B:30:9B:E0:78:6C:9C:9B:F1:E1:29:B7:11:41:6D:BD
+ E6:C3:54:85:55:F1:44:F6:4B:55:D3:EA:09:69:E3:95:F6:DA:2A:FA
X509v3 Authority Key Identifier:
- keyid:7A:68:26:1F:EE:59:FA:52:EB:B0:98:D1:5D:F6:19:9F:8D:1C:F5:FB
+ keyid:EC:3F:B7:92:DD:EA:7D:97:A5:77:22:28:E9:98:4D:0D:07:69:C4:86
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 4e:c4:5a:b3:1f:31:4c:04:75:f8:bb:7d:7b:ed:93:07:81:e3:
- 41:b9:50:b0:c4:01:06:7d:64:f3:c5:d8:5b:96:0e:b6:c2:fa:
- 66:50:25:79:c8:6f:6c:03:f1:7b:e6:73:60:cc:68:42:0e:43:
- 85:58:46:c2:51:27:73:dd:f1:6d:9d:d1:7a:80:97:e5:cf:0c:
- 9a:85:a1:92:ed:26:3a:d6:10:fd:19:c8:f2:fb:b9:47:ee:a9:
- 63:1c:52:c5:97:1a:6b:2f:f4:dc:9c:cb:74:86:6a:48:2a:87:
- ac:24:d5:cc:8c:2b:12:9d:6d:bc:7e:be:95:3f:88:83:18:68:
- 75:59:db:79:fb:f0:c7:38:7b:8f:a3:16:e0:44:4c:19:e3:cd:
- 36:98:fb:fd:c9:17:5e:2f:9c:0c:e1:ba:f2:6e:c0:6e:91:9d:
- 5e:c0:0b:95:d8:62:7e:2e:8a:2d:4c:f9:b4:ca:17:0d:f0:d2:
- 71:b0:4d:15:79:b0:8b:9e:96:cf:2e:44:1a:84:a7:4f:61:38:
- 67:61:1c:a1:70:a0:a4:02:5b:42:f5:a0:09:95:cc:22:89:0d:
- 4e:e2:1b:dd:1d:fe:ae:d7:84:58:db:dd:07:1d:96:6b:32:11:
- da:c6:56:d9:cd:69:10:25:62:fd:91:2d:63:0f:8c:82:fe:00:
- 8a:eb:87:4f
+ 27:8e:41:9c:f0:5c:4a:e0:b0:63:c7:fa:cc:1f:d4:21:35:33:
+ 87:13:68:b7:18:08:0e:ba:22:a1:51:1a:d9:ba:31:a7:35:80:
+ c7:75:35:a4:68:c8:3e:91:79:55:e3:60:34:79:a1:0f:a9:cc:
+ 05:92:61:40:b0:66:2b:fe:c7:29:a2:54:f3:7c:71:b6:36:fe:
+ a9:fd:7b:79:ea:66:19:c0:2f:d2:56:97:2f:ca:12:a3:96:6b:
+ b3:57:c8:06:58:6f:de:53:d7:63:ee:93:d6:b2:f2:11:9c:8a:
+ a1:00:26:6c:9a:bd:dd:da:97:ea:07:61:5e:48:8e:dd:3f:10:
+ 4b:39:d1:9a:ba:8f:14:30:b3:36:3c:9f:a7:2c:68:b4:3c:da:
+ f2:90:24:4a:03:19:38:24:73:b5:72:b3:ae:31:b3:44:96:36:
+ 3d:38:c5:c7:07:62:78:06:d8:5d:01:07:d9:b3:2d:be:0f:46:
+ 13:8c:25:f9:d7:e0:84:5d:a4:62:a7:5d:3b:22:cf:e6:95:97:
+ 20:d3:24:40:cc:cf:3d:72:17:f9:c1:8e:ee:15:6f:99:8f:24:
+ d1:83:6b:f9:fe:6b:94:3a:9c:2c:02:5c:1d:70:d6:f8:d6:69:
+ 0d:99:f5:53:89:4f:21:7b:a6:34:dd:ce:27:ef:45:a5:e0:c6:
+ e5:f5:fc:5f
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMzAyMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HrDe
-Ii+0E8rEchC5vUyAgb4X8kW7WtK0ofY+HFAA1Y3+J1uiIQeLGt5WVliIJUEJTv0E
-u2x1x0g/mGtMVIoiJijzxnZf6L+tv0+tbRodul78DS+Ssk/3u+X9Ov+N+/GflpAY
-RizPe2J1uMXpQM5nIeBLnnhlm55xUL0zElN4f639v+Cu0nJRwRjQlnF4I/+mVTnV
-mok+IXLNnRP6BJ8Ib8DQxauyJ7W44i2rMaN6wZRWizWcuEZxHNZplcEKmOQUljwv
-yxKscYikqtDIDlGYR3HoDqDnfgGVs3M/m8SLndDcF6lTNZkpZ/Mo0n8eDRdrXVbJ
-kaau6AemdtaOKkhHAgMBAAGjgekwgeYwHQYDVR0OBBYEFCcGxnUbMJvgeGycm/Hh
-KbcRQW29MB8GA1UdIwQYMBaAFHpoJh/uWfpS67CY0V32GZ+NHPX7MD8GCCsGAQUF
+cm1lZGlhdGUwHhcNMTUwMzAyMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2DLn
+Kr5Vjeforu4dxvU7DG0l2VOOSoQMHnvLMC9fH4Wj5+CSebSiNf63cbSjwHndUOXk
+sGG1LJcu5kq8xjzHIPOHIE4n2Ir2DamsCleaUwOeXzLvBxgKq/anQk7vNpoQStvT
+n0nXBDqVYXe6XtKEy1fsRZHQ/b5bi00vCyGriauS2fwYDES7VAqUXb3urKnu8ieo
+PzCx5/b9GgWGVtsi3r3lptJQLUwMqxyySWwjmkbY9VP0nVIs8CXjqOeZ023s8AzR
+vR5zxo9dEVCIs2O8x8XrNnSPA/4aNtesXxiucxF/3IHcfHcX7CyRxdvMLRqg8a2q
+1LYdIu4ivUjJ8N9/AgMBAAGjgekwgeYwHQYDVR0OBBYEFObDVIVV8UT2S1XT6glp
+45X22ir6MB8GA1UdIwQYMBaAFOw/t5Ld6n2XpXciKOmYTQ0HacSGMD8GCCsGAQUF
BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEATsRasx8xTAR1+Lt9e+2T
-B4HjQblQsMQBBn1k88XYW5YOtsL6ZlAlechvbAPxe+ZzYMxoQg5DhVhGwlEnc93x
-bZ3ReoCX5c8MmoWhku0mOtYQ/RnI8vu5R+6pYxxSxZcaay/03JzLdIZqSCqHrCTV
-zIwrEp1tvH6+lT+IgxhodVnbefvwxzh7j6MW4ERMGePNNpj7/ckXXi+cDOG68m7A
-bpGdXsALldhifi6KLUz5tMoXDfDScbBNFXmwi56Wzy5EGoSnT2E4Z2EcoXCgpAJb
-QvWgCZXMIokNTuIb3R3+rteEWNvdBx2WazIR2sZW2c1pECVi/ZEtYw+Mgv4AiuuH
-Tw==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-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c0:6b:09:c5:84:c2:5f:1b:c6:98:31:2d:a2:3e:
- 03:a9:13:4d:b8:4b:03:a6:1d:0a:e4:e1:ba:81:31:
- 2b:dd:92:7c:6b:81:85:c4:d4:cf:73:30:33:b2:8d:
- 9f:d9:0b:48:a0:70:51:88:93:d5:f1:ef:bd:14:6e:
- 7b:da:b6:a4:c5:a9:ca:cd:27:90:38:c8:5e:12:68:
- f8:f2:70:01:8a:da:e3:6c:2f:62:c4:67:40:e2:92:
- 20:fe:77:d9:91:f4:6b:02:0c:40:d6:b5:ef:98:85:
- 36:58:59:ec:e7:17:c8:72:53:8a:fc:2e:fa:08:70:
- ba:ab:ea:42:40:50:e0:6b:14:04:73:78:34:96:db:
- 8a:c9:22:21:f1:c1:1b:81:7c:95:c6:83:f8:d1:40:
- 1f:5d:ec:bc:d0:4e:30:7f:b2:07:b4:e2:be:3f:f7:
- 28:ab:a2:61:fd:98:3b:5a:1c:c9:61:30:13:ea:7c:
- 7d:13:99:a0:9a:a5:a5:72:3f:a7:e7:7d:3b:a6:b7:
- 09:6c:48:5c:ec:a3:d6:4c:2e:eb:21:e8:97:aa:44:
- 32:23:03:dd:24:8d:08:b4:94:df:65:5b:7c:45:59:
- 11:4b:ce:1f:78:e5:c4:bc:87:00:bb:c4:69:d7:3b:
- ae:a6:b7:80:df:4c:e2:0d:be:a4:0e:1c:05:5d:cf:
- dc:c9
+ 00:e4:7c:a3:bb:4c:6d:c3:5e:ae:62:cd:af:18:39:
+ c5:4b:6a:a3:fd:85:d0:ed:8b:25:93:bd:2b:06:22:
+ b2:6b:c1:ff:73:c9:26:dd:d6:eb:eb:ee:93:4a:6d:
+ df:10:02:b8:c5:72:d4:2f:c7:b4:1a:06:e9:38:b4:
+ 90:ae:9f:5f:69:45:47:07:68:17:b2:84:8a:65:b8:
+ 1e:ef:de:f1:b4:8a:6b:ab:de:55:79:5d:f5:2e:96:
+ 46:5b:5c:87:0b:4a:a8:53:70:4f:6f:f3:9e:9d:f4:
+ f8:38:fa:1f:a6:5f:a3:25:08:f2:e9:63:fc:3c:98:
+ 4d:91:df:77:60:e7:e2:bd:af:bb:d9:23:38:2d:6e:
+ 07:07:0c:1a:59:5e:8a:43:c7:da:b2:ce:39:3a:80:
+ c6:72:60:1f:d3:93:45:cd:63:b8:8b:96:bf:30:cd:
+ b1:f6:56:d7:a9:de:14:42:ae:42:40:f8:e9:7b:47:
+ a3:63:a1:5d:b9:2b:c0:3b:2b:81:56:11:54:ce:96:
+ 85:e6:3a:8c:66:ff:42:9f:ce:e4:a4:80:f5:59:8a:
+ 4b:ae:b2:37:c2:1f:45:9b:49:cd:db:0f:8b:a7:37:
+ 31:20:19:b4:42:20:aa:e9:e4:af:13:5a:b9:ea:d2:
+ 2c:9a:15:48:af:8d:ed:d0:fe:02:c0:a2:c6:47:bd:
+ dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 7A:68:26:1F:EE:59:FA:52:EB:B0:98:D1:5D:F6:19:9F:8D:1C:F5:FB
+ EC:3F:B7:92:DD:EA:7D:97:A5:77:22:28:E9:98:4D:0D:07:69:C4:86
X509v3 Authority Key Identifier:
- keyid:66:52:63:09:9B:DD:07:2A:2D:E0:F3:6C:29:FB:D9:74:87:F5:02:6A
+ keyid:44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- b2:03:09:bd:ed:73:cd:8d:d6:d0:f4:86:40:00:10:eb:b9:37:
- 74:1d:f2:b3:dc:2d:df:a4:75:77:f1:62:23:b8:2d:70:14:af:
- 33:4e:0c:8f:6d:13:db:d4:dc:92:04:8d:0e:b6:14:98:07:f6:
- 80:cb:9a:8d:d3:0e:9d:6d:13:12:c1:01:f0:14:9d:a3:c1:05:
- 45:3c:26:16:d2:39:3f:ed:3c:6c:ab:c0:2b:b2:21:29:dc:4b:
- 6b:51:cf:e9:99:ef:fa:14:3a:c4:f1:77:c0:83:f5:7f:af:11:
- 40:db:f3:3f:7c:18:26:79:e9:15:c0:62:79:06:85:15:8a:53:
- 03:be:2f:e9:5c:69:7c:c7:d7:47:6a:7b:00:c8:d8:4f:55:ce:
- d1:64:58:0f:87:ef:27:b2:7b:59:20:04:7d:4f:16:08:c7:d0:
- f0:c1:aa:b6:a9:ae:aa:fd:a7:98:2c:40:28:bb:e5:d7:91:e5:
- 72:c9:ab:0a:92:0e:b0:d5:ff:9c:db:73:5d:e1:9d:a5:fd:89:
- 4e:c8:26:8d:f8:76:0b:7e:7f:94:70:73:e4:22:b4:fb:2f:bc:
- 06:84:73:b1:99:78:fa:5f:e8:d7:20:8f:b9:cb:d9:a4:99:7e:
- be:b9:89:1c:07:0a:19:cb:0c:f0:15:70:81:51:ee:d7:8e:e8:
- f7:21:3f:fd
+ 40:21:7c:15:90:68:e9:aa:b0:ab:21:63:e7:21:f1:92:5b:75:
+ 02:34:b4:cd:06:b3:45:f4:93:07:d1:0f:f2:bc:92:ac:75:94:
+ 43:ad:a8:4f:91:6a:28:0c:cd:47:8d:01:de:54:51:aa:14:e3:
+ 35:f8:eb:d8:d4:59:f5:86:ef:55:e6:6f:54:17:47:c1:5f:e8:
+ be:0d:7f:34:d2:88:2d:b5:04:29:25:11:cc:a3:d7:0e:49:b2:
+ 9a:e3:01:1d:3f:15:89:68:41:19:4d:ee:8d:12:0e:96:ce:5e:
+ e5:08:31:64:4f:89:e0:91:1b:a9:b0:3c:4e:50:cb:83:a0:df:
+ d0:d3:df:af:53:d5:99:6b:88:dd:9c:4f:98:f1:0d:1d:f5:29:
+ f6:c5:be:18:84:4f:1f:76:ce:6f:c8:08:a0:f4:58:af:a3:ff:
+ cb:44:55:ad:2e:6e:e0:44:07:f4:a3:d4:08:9c:d1:0e:04:29:
+ 34:54:1b:bd:e8:e3:b4:56:e1:0b:05:bd:ee:6d:47:fb:10:42:
+ d2:14:12:e4:15:29:bd:06:13:7d:12:41:fa:5f:5d:01:27:69:
+ 99:76:ff:76:74:c8:c8:fe:11:c5:2e:67:44:d3:32:6d:8f:45:
+ e4:0a:5a:73:ef:74:75:6a:6c:d6:c2:c5:e8:73:bc:be:29:b3:
+ 3a:01:cf:02
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGsJxYTC
-XxvGmDEtoj4DqRNNuEsDph0K5OG6gTEr3ZJ8a4GFxNTPczAzso2f2QtIoHBRiJPV
-8e+9FG572rakxanKzSeQOMheEmj48nABitrjbC9ixGdA4pIg/nfZkfRrAgxA1rXv
-mIU2WFns5xfIclOK/C76CHC6q+pCQFDgaxQEc3g0ltuKySIh8cEbgXyVxoP40UAf
-Xey80E4wf7IHtOK+P/coq6Jh/Zg7WhzJYTAT6nx9E5mgmqWlcj+n5307prcJbEhc
-7KPWTC7rIeiXqkQyIwPdJI0ItJTfZVt8RVkRS84feOXEvIcAu8Rp1zuupreA30zi
-Db6kDhwFXc/cyQIDAQABo4HLMIHIMB0GA1UdDgQWBBR6aCYf7ln6UuuwmNFd9hmf
-jRz1+zAfBgNVHSMEGDAWgBRmUmMJm90HKi3g82wp+9l0h/UCajA3BggrBgEFBQcB
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hyju0xt
+w16uYs2vGDnFS2qj/YXQ7Yslk70rBiKya8H/c8km3dbr6+6TSm3fEAK4xXLUL8e0
+GgbpOLSQrp9faUVHB2gXsoSKZbge797xtIprq95VeV31LpZGW1yHC0qoU3BPb/Oe
+nfT4OPofpl+jJQjy6WP8PJhNkd93YOfiva+72SM4LW4HBwwaWV6KQ8fass45OoDG
+cmAf05NFzWO4i5a/MM2x9lbXqd4UQq5CQPjpe0ejY6FduSvAOyuBVhFUzpaF5jqM
+Zv9Cn87kpID1WYpLrrI3wh9Fm0nN2w+LpzcxIBm0QiCq6eSvE1q56tIsmhVIr43t
+0P4CwKLGR73dLwIDAQABo4HLMIHIMB0GA1UdDgQWBBTsP7eS3ep9l6V3IijpmE0N
+B2nEhjAfBgNVHSMEGDAWgBRE/J3wUfIjmf6kdsvLXDm9/Gg4RTA3BggrBgEFBQcB
AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-ALIDCb3tc82N1tD0hkAAEOu5N3Qd8rPcLd+kdXfxYiO4LXAUrzNODI9tE9vU3JIE
-jQ62FJgH9oDLmo3TDp1tExLBAfAUnaPBBUU8JhbSOT/tPGyrwCuyISncS2tRz+mZ
-7/oUOsTxd8CD9X+vEUDb8z98GCZ56RXAYnkGhRWKUwO+L+lcaXzH10dqewDI2E9V
-ztFkWA+H7yeye1kgBH1PFgjH0PDBqraprqr9p5gsQCi75deR5XLJqwqSDrDV/5zb
-c13hnaX9iU7IJo34dgt+f5Rwc+QitPsvvAaEc7GZePpf6Ncgj7nL2aSZfr65iRwH
-ChnLDPAVcIFR7teO6PchP/0=
+AEAhfBWQaOmqsKshY+ch8ZJbdQI0tM0Gs0X0kwfRD/K8kqx1lEOtqE+RaigMzUeN
+Ad5UUaoU4zX469jUWfWG71Xmb1QXR8Ff6L4NfzTSiC21BCklEcyj1w5JsprjAR0/
+FYloQRlN7o0SDpbOXuUIMWRPieCRG6mwPE5Qy4Og39DT369T1ZlriN2cT5jxDR31
+KfbFvhiETx92zm/ICKD0WK+j/8tEVa0ubuBEB/Sj1Aic0Q4EKTRUG73o47RW4QsF
+ve5tR/sQQtIUEuQVKb0GE30SQfpfXQEnaZl2/3Z0yMj+EcUuZ0TTMm2PReQKWnPv
+dHVqbNbCxehzvL4pszoBzwI=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:bb:61:9d:50:28:51:f7:22:01:45:32:28:d0:d0:
- b2:c3:41:a4:3a:1f:8b:9a:b0:eb:61:31:39:1a:87:
- 5b:03:fb:02:82:15:8f:7f:d7:bb:4e:89:ae:08:df:
- 7e:6f:2f:66:87:8f:57:ab:a0:61:79:25:64:eb:20:
- 5d:e7:92:17:bd:c4:1b:e0:ea:27:e2:7b:b8:6e:05:
- 08:07:54:3d:4e:d6:80:8b:b9:50:d0:75:23:93:c3:
- e2:1b:de:f7:20:24:35:0f:d4:c3:dd:cf:07:19:29:
- 6f:08:08:a6:b3:9f:6d:2a:8b:3c:b7:6f:32:fe:81:
- 6d:1b:ad:88:96:c5:1f:a4:7a:a4:81:b5:e4:b3:9a:
- bc:42:b0:40:e5:77:8d:12:32:cc:d9:05:12:6a:47:
- 62:2b:22:5b:a8:48:fe:14:1a:a1:2f:03:34:f1:2b:
- 8f:d5:bf:3c:18:ae:f1:67:79:c8:a3:8d:29:d0:ce:
- 23:03:6f:ee:14:5e:97:dd:4d:c8:f5:1f:c4:1d:49:
- 08:b5:9c:7d:fa:e1:79:08:27:83:2d:8a:f4:43:d6:
- d6:6b:78:f4:0e:4c:42:57:72:03:61:73:b5:82:23:
- 98:2a:a9:06:f9:b3:95:cd:01:66:c2:3e:96:da:02:
- 13:95:e1:e6:51:94:67:2d:37:a5:cf:c1:18:62:fb:
- 56:15
+ 00:a0:21:1c:d1:00:97:80:26:4c:59:fe:1f:73:23:
+ 48:97:10:b0:7f:bb:bb:34:00:76:fb:5d:e6:1f:59:
+ ed:24:d9:25:9c:16:06:50:8e:83:da:d6:93:22:80:
+ 34:69:d3:d2:ee:98:9b:51:09:02:25:e4:04:fa:cc:
+ de:4f:f6:3d:9c:65:80:b3:83:19:dd:74:b7:3f:84:
+ 86:7f:77:f9:5b:bc:c9:5c:0d:98:3e:77:df:3b:f1:
+ 43:cd:3d:4a:88:81:76:08:cb:56:25:5f:ff:56:7e:
+ e1:e2:ab:41:60:9a:89:32:cf:9b:5e:3f:95:17:04:
+ 75:2d:a2:b7:e8:02:ea:6e:a0:2f:69:9f:30:a7:cd:
+ 7b:e6:e5:3d:98:01:51:b4:3e:c2:cf:87:f9:a1:e8:
+ 9d:69:43:91:37:58:b9:ec:2e:64:5f:76:21:e5:09:
+ 8c:6e:72:31:f4:c5:79:2f:14:1f:84:17:10:e3:50:
+ 0f:5d:d2:dd:f1:33:cb:57:f2:19:8c:04:96:e8:a7:
+ 3b:77:51:3a:6e:03:2b:29:2a:db:40:da:fb:41:f2:
+ bc:37:ef:31:5c:2b:0f:b2:f4:58:27:b6:0f:24:4d:
+ 1d:97:ca:bd:00:c8:5f:eb:c4:3d:5d:b7:9e:d6:58:
+ 45:8a:20:af:2f:16:fc:51:6c:55:66:24:19:21:66:
+ 38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 66:52:63:09:9B:DD:07:2A:2D:E0:F3:6C:29:FB:D9:74:87:F5:02:6A
+ 44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45
X509v3 Authority Key Identifier:
- keyid:66:52:63:09:9B:DD:07:2A:2D:E0:F3:6C:29:FB:D9:74:87:F5:02:6A
+ keyid:44:FC:9D:F0:51:F2:23:99:FE:A4:76:CB:CB:5C:39:BD:FC:68:38:45
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 09:c6:5a:c2:9c:aa:78:6d:66:79:43:2a:1c:a4:0b:04:42:8c:
- 54:6c:89:d7:ce:e0:fd:8e:33:5b:6c:2b:a2:ed:05:de:ea:3b:
- 11:21:bd:e9:23:45:bd:0f:e0:5c:fe:1b:11:8b:46:75:c1:24:
- 84:5a:95:15:a5:b3:73:86:6b:aa:8f:dc:46:3c:64:d9:60:9e:
- c1:7a:63:a3:d5:d6:b4:27:ed:c3:77:ea:5d:59:e7:93:05:df:
- be:58:4c:a5:92:52:61:11:d1:7f:27:e6:9b:29:3c:b8:9d:a0:
- 5c:d0:98:5f:a7:ed:39:14:f4:30:81:f6:0d:3b:cd:96:d6:dd:
- 7a:e2:b0:55:7c:ab:87:10:54:a6:5d:ac:27:5b:a6:a1:1e:ee:
- e7:26:cb:44:1d:fe:84:85:54:e0:cb:62:1b:5a:bb:ed:38:c0:
- f4:bd:1e:5d:ee:c6:d7:6e:b3:27:56:5c:8d:1f:dd:70:52:35:
- 8a:bc:07:0a:97:99:10:80:16:5b:a3:d1:de:f9:97:59:ca:5f:
- 42:10:c0:26:3e:6e:92:a9:6d:e5:09:1e:4c:92:4b:2e:a7:e8:
- 81:7f:e4:bb:b3:44:3c:71:e3:0c:ba:66:30:4a:fc:30:40:ce:
- 50:98:1b:61:52:91:02:84:ff:a1:a3:09:ad:1b:68:db:52:a6:
- cf:18:79:af
+ 94:de:4b:73:02:e3:22:7f:1e:82:0c:64:a8:de:79:70:34:96:
+ 9d:b5:e9:a0:51:bc:5c:3a:b1:97:7e:a4:0a:04:60:5a:3b:3a:
+ 88:7e:ff:67:1a:19:7f:61:c0:6a:f9:73:14:b4:6b:be:21:fd:
+ f3:e2:7a:61:56:73:15:9e:8d:c5:bb:21:47:8a:1f:fa:03:0d:
+ 0a:90:20:37:69:49:0b:2e:6a:9c:64:5b:e8:f0:ed:29:32:5f:
+ bc:f8:59:81:ad:d8:d9:71:ef:8d:bd:9c:ed:2e:c3:53:4f:12:
+ ec:f3:83:24:36:30:b1:c6:59:a7:2c:a8:6d:62:30:bc:a3:28:
+ 13:0a:09:ed:47:a9:f5:68:e9:97:33:b2:e7:e7:5c:f9:bb:c1:
+ 4b:7b:63:62:0a:0f:31:58:7e:24:88:30:f5:42:cf:3e:86:ca:
+ 48:5b:83:44:b0:04:fa:0b:e2:9c:8b:5f:9c:68:77:23:79:40:
+ 29:95:0d:6e:32:bf:ab:b4:ae:8a:2a:ca:f2:2a:92:a7:0d:b4:
+ 80:5d:ce:be:f8:68:24:00:d9:30:9c:de:ba:35:d4:22:b5:dd:
+ 15:37:70:bd:2e:7c:53:65:db:6f:1d:47:fa:53:56:dd:d0:9f:
+ e7:d5:d5:27:7f:c7:2e:9b:55:c2:70:1f:5e:66:b8:d1:2e:ac:
+ c6:e9:de:aa
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALthnVAoUfciAUUyKNDQ
-ssNBpDofi5qw62ExORqHWwP7AoIVj3/Xu06Jrgjffm8vZoePV6ugYXklZOsgXeeS
-F73EG+DqJ+J7uG4FCAdUPU7WgIu5UNB1I5PD4hve9yAkNQ/Uw93PBxkpbwgIprOf
-bSqLPLdvMv6BbRutiJbFH6R6pIG15LOavEKwQOV3jRIyzNkFEmpHYisiW6hI/hQa
-oS8DNPErj9W/PBiu8Wd5yKONKdDOIwNv7hRel91NyPUfxB1JCLWcffrheQgngy2K
-9EPW1mt49A5MQldyA2FztYIjmCqpBvmzlc0BZsI+ltoCE5Xh5lGUZy03pc/BGGL7
-VhUCAwEAAaOByzCByDAdBgNVHQ4EFgQUZlJjCZvdByot4PNsKfvZdIf1AmowHwYD
-VR0jBBgwFoAUZlJjCZvdByot4PNsKfvZdIf1AmowNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKAhHNEAl4AmTFn+H3Mj
+SJcQsH+7uzQAdvtd5h9Z7STZJZwWBlCOg9rWkyKANGnT0u6Ym1EJAiXkBPrM3k/2
+PZxlgLODGd10tz+Ehn93+Vu8yVwNmD533zvxQ809SoiBdgjLViVf/1Z+4eKrQWCa
+iTLPm14/lRcEdS2it+gC6m6gL2mfMKfNe+blPZgBUbQ+ws+H+aHonWlDkTdYuewu
+ZF92IeUJjG5yMfTFeS8UH4QXEONQD13S3fEzy1fyGYwEluinO3dROm4DKykq20Da
++0HyvDfvMVwrD7L0WCe2DyRNHZfKvQDIX+vEPV23ntZYRYogry8W/FFsVWYkGSFm
+OJ8CAwEAAaOByzCByDAdBgNVHQ4EFgQURPyd8FHyI5n+pHbLy1w5vfxoOEUwHwYD
+VR0jBBgwFoAURPyd8FHyI5n+pHbLy1w5vfxoOEUwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAJxlrCnKp4
-bWZ5QyocpAsEQoxUbInXzuD9jjNbbCui7QXe6jsRIb3pI0W9D+Bc/hsRi0Z1wSSE
-WpUVpbNzhmuqj9xGPGTZYJ7BemOj1da0J+3Dd+pdWeeTBd++WEylklJhEdF/J+ab
-KTy4naBc0Jhfp+05FPQwgfYNO82W1t164rBVfKuHEFSmXawnW6ahHu7nJstEHf6E
-hVTgy2IbWrvtOMD0vR5d7sbXbrMnVlyNH91wUjWKvAcKl5kQgBZbo9He+ZdZyl9C
-EMAmPm6SqW3lCR5Mkksup+iBf+S7s0Q8ceMMumYwSvwwQM5QmBthUpEChP+howmt
-G2jbUqbPGHmv
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCU3ktzAuMi
+fx6CDGSo3nlwNJadtemgUbxcOrGXfqQKBGBaOzqIfv9nGhl/YcBq+XMUtGu+If3z
+4nphVnMVno3FuyFHih/6Aw0KkCA3aUkLLmqcZFvo8O0pMl+8+FmBrdjZce+NvZzt
+LsNTTxLs84MkNjCxxlmnLKhtYjC8oygTCgntR6n1aOmXM7Ln51z5u8FLe2NiCg8x
+WH4kiDD1Qs8+hspIW4NEsAT6C+Kci1+caHcjeUAplQ1uMr+rtK6KKsryKpKnDbSA
+Xc6++GgkANkwnN66NdQitd0VN3C9LnxTZdtvHUf6U1bd0J/n1dUnf8cum1XCcB9e
+ZrjRLqzG6d6q
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/expired-target.pem b/net/data/verify_certificate_chain_unittest/expired-target.pem
index 8afcd0f..2919474 100644
--- a/net/data/verify_certificate_chain_unittest/expired-target.pem
+++ b/net/data/verify_certificate_chain_unittest/expired-target.pem
@@ -1,6 +1,6 @@
[Created by: generate-expired-target.py]
-Certificate chain with 1 intermediary, where the target is expired (violates
+Certificate chain with 1 intermediate, where the target is expired (violates
validity.notAfter). Verification is expected to fail.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Mar 1 12:00:00 2015 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:e3:02:17:8f:16:37:b7:e0:0b:44:86:f7:4f:de:
- 18:39:31:91:ed:11:80:67:c4:e0:18:7e:42:8e:be:
- dd:a9:0e:e7:ff:47:f2:1d:eb:a8:53:21:5b:c0:3e:
- 32:59:cf:31:24:e3:0f:00:4a:d2:f7:9a:77:31:10:
- 45:89:e3:e8:62:9c:c7:06:31:d0:c8:86:2b:3d:a7:
- 71:83:82:fa:c1:c2:cb:84:74:48:ad:c9:8a:4d:27:
- 1e:75:bb:4e:ce:54:3c:c1:b5:25:e5:02:d0:b3:8c:
- 14:f3:f5:9e:f8:30:20:ec:c6:d9:c4:a2:aa:06:f9:
- dc:ca:53:2f:76:cf:32:42:fd:7a:1a:c3:da:4a:d3:
- 82:30:84:f5:fb:02:82:f6:db:6e:87:fc:e8:69:14:
- a0:9f:2d:07:c4:ac:64:86:f5:ac:4b:22:f1:b0:d1:
- 91:2e:29:f7:cf:e0:10:aa:5d:cd:df:d7:a7:b9:9d:
- 72:cc:fd:16:d5:11:97:90:75:dc:5e:02:ab:7f:d3:
- dd:0a:a8:bc:5a:34:c6:8d:bb:8f:7a:04:d5:b6:99:
- 20:a4:72:c9:ba:00:cf:69:5e:e5:dd:bf:47:b3:3c:
- be:83:0d:4b:95:be:91:58:a4:a4:33:2e:3b:b8:da:
- 85:3d:74:66:8f:f9:0b:be:8e:9d:3e:b6:ca:8b:9b:
- 7e:19
+ 00:df:82:6a:2a:fe:30:47:00:84:06:de:48:a1:fc:
+ a5:d9:2c:d5:7d:e2:71:eb:ff:b5:7b:da:8c:c7:fc:
+ 38:8a:a3:64:5a:f8:01:70:e0:c0:26:d4:70:2c:08:
+ da:6b:5c:b4:40:41:aa:9e:b4:1d:05:9b:54:7c:54:
+ a4:b8:07:03:b0:69:95:98:c5:e6:7a:7f:71:6f:07:
+ dd:a5:21:59:79:7c:58:7c:00:0d:9d:18:6b:c0:3d:
+ 2d:fe:c6:63:58:c6:5f:29:47:01:b6:a2:dd:bb:f4:
+ 8a:8b:d0:15:3e:0b:01:18:34:0a:d4:a1:d3:e9:7a:
+ c3:5d:97:2b:c7:53:ff:49:81:34:fc:16:b4:02:f8:
+ 7c:55:6e:fa:9b:4f:cd:31:1a:f5:d2:5c:8f:92:d7:
+ bd:48:50:a9:b1:c4:89:cd:6d:c8:1d:99:77:34:d1:
+ d3:61:8f:b9:f8:3b:3e:c6:b3:2e:5f:3c:d0:f7:04:
+ 34:51:9f:83:4e:7b:1d:c9:59:53:81:6e:d9:f7:4b:
+ 36:dc:80:9e:b4:a4:cb:5d:18:1d:d3:52:3e:d8:b3:
+ 4e:28:c5:ba:2c:bd:dc:d1:e2:4a:21:e5:2a:ed:6f:
+ 97:84:a9:01:89:eb:2e:21:9e:b9:4a:6a:9b:c5:fe:
+ b0:5a:34:cf:25:0f:55:53:41:be:94:b9:8d:81:44:
+ fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 1C:D2:85:3D:00:41:91:25:0B:8B:C2:CB:0E:D7:97:F1:14:8E:DE:01
+ A1:54:DE:B4:8A:C7:C9:C4:33:C6:9B:40:BF:3D:6E:CF:DB:47:EC:8C
X509v3 Authority Key Identifier:
- keyid:90:4B:3E:89:21:25:2A:3C:CA:35:BF:D9:A6:B1:CF:BC:1F:9D:3A:2F
+ keyid:13:F7:B3:D5:1C:C9:63:BD:3A:24:01:43:AE:4A:26:96:46:55:F5:F0
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 6d:36:b8:bc:75:67:0d:8a:5b:00:51:3b:06:31:af:83:23:80:
- a0:4f:eb:05:d6:5c:15:20:a3:10:7b:3e:31:0a:ba:45:b5:6b:
- 21:2b:02:bf:83:73:2c:cd:81:85:a0:38:ed:4e:bd:b7:36:dc:
- b6:69:bb:81:7b:75:74:3c:ac:5a:c2:59:74:6d:d9:64:8e:5b:
- 16:19:25:44:98:cb:9d:cd:a0:d4:6f:7f:d2:a3:11:cd:94:aa:
- b0:74:ee:c2:a3:3b:aa:98:e0:c5:0d:01:a4:f8:a2:84:ab:d0:
- db:19:9d:4d:ce:84:89:50:e8:3a:44:fb:e5:06:f3:d8:e9:d5:
- aa:81:69:af:2a:f2:9e:58:35:d5:3d:97:44:3a:79:47:22:d6:
- 9c:1b:b9:93:ea:3f:44:ac:cf:2a:54:52:86:0b:db:17:9d:f9:
- 4d:54:46:4d:af:21:92:cf:8a:01:52:14:07:96:c7:48:75:3c:
- 66:4d:74:fb:44:06:eb:a9:ab:12:2e:91:80:de:02:c1:12:5b:
- 32:76:36:46:13:16:00:31:76:c9:ee:64:e6:75:03:49:7d:63:
- d6:bf:f1:90:1f:b6:49:38:e5:af:37:63:46:e2:4d:d1:29:b8:
- b3:24:ec:f5:f8:32:c3:03:fa:1a:ad:30:1a:db:41:4d:5e:43:
- 46:ae:6d:4e
+ aa:f9:d5:79:52:fa:99:3e:d8:cd:ab:c3:e4:05:a9:85:c5:bf:
+ 78:3b:d6:14:0b:06:f4:62:77:8e:70:40:a5:b9:b4:46:52:5d:
+ 86:ad:52:52:f7:c3:1f:e9:e8:8a:e2:5b:23:63:bf:e8:5c:d8:
+ a6:11:ad:02:94:09:04:3b:67:cb:62:a3:09:67:eb:b3:68:0f:
+ 81:6d:0f:d6:4e:6c:d8:a3:e5:85:8f:8f:7e:65:a4:c7:d9:ba:
+ a8:05:22:2c:94:9d:8f:e4:d1:a5:5c:7e:c0:0f:39:3e:d7:b4:
+ 2c:df:d7:c1:ab:9e:5d:8d:28:51:d5:fa:2f:c6:fa:85:17:d4:
+ 05:d5:4d:d8:ee:6a:14:23:da:a0:cc:43:7b:65:54:71:e1:e1:
+ 79:b0:62:0a:a3:70:56:9b:53:5d:70:b7:78:6f:fd:ba:13:a7:
+ 99:0a:0a:b3:46:2a:7b:48:26:31:b2:50:aa:5e:29:d9:1b:55:
+ 1f:cb:de:2a:17:4d:ee:0d:67:2b:4e:dd:f6:54:d0:72:ec:e3:
+ 53:4e:24:26:a6:1e:17:e8:94:ca:a8:4a:3a:af:b8:48:51:1a:
+ 76:38:bd:bf:cb:c5:56:e4:a8:e4:f8:cb:cb:e9:97:ed:4e:b9:
+ af:fb:e7:92:d3:b7:ba:81:a0:13:e8:09:31:f3:45:91:2a:5c:
+ 93:12:a9:99
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTUwMzAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjAheP
-Fje34AtEhvdP3hg5MZHtEYBnxOAYfkKOvt2pDuf/R/Id66hTIVvAPjJZzzEk4w8A
-StL3mncxEEWJ4+hinMcGMdDIhis9p3GDgvrBwsuEdEityYpNJx51u07OVDzBtSXl
-AtCzjBTz9Z74MCDsxtnEoqoG+dzKUy92zzJC/Xoaw9pK04IwhPX7AoL2226H/Ohp
-FKCfLQfErGSG9axLIvGw0ZEuKffP4BCqXc3f16e5nXLM/RbVEZeQddxeAqt/090K
-qLxaNMaNu496BNW2mSCkcsm6AM9pXuXdv0ezPL6DDUuVvpFYpKQzLju42oU9dGaP
-+Qu+jp0+tsqLm34ZAgMBAAGjgekwgeYwHQYDVR0OBBYEFBzShT0AQZElC4vCyw7X
-l/EUjt4BMB8GA1UdIwQYMBaAFJBLPokhJSo8yjW/2aaxz7wfnTovMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAbTa4vHVnDYpbAFE7BjGv
-gyOAoE/rBdZcFSCjEHs+MQq6RbVrISsCv4NzLM2BhaA47U69tzbctmm7gXt1dDys
-WsJZdG3ZZI5bFhklRJjLnc2g1G9/0qMRzZSqsHTuwqM7qpjgxQ0BpPiihKvQ2xmd
-Tc6EiVDoOkT75Qbz2OnVqoFpryrynlg11T2XRDp5RyLWnBu5k+o/RKzPKlRShgvb
-F535TVRGTa8hks+KAVIUB5bHSHU8Zk10+0QG66mrEi6RgN4CwRJbMnY2RhMWADF2
-ye5k5nUDSX1j1r/xkB+2STjlrzdjRuJN0Sm4syTs9fgywwP6Gq0wGttBTV5DRq5t
-Tg==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-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c1:92:e2:bf:d0:e9:8f:c6:45:f0:c9:ef:51:cc:
- 97:cc:cb:80:ac:c1:7c:da:7e:28:12:0c:84:45:6b:
- db:fb:4f:ba:16:3e:33:8b:a1:14:70:42:99:ca:4e:
- 8e:55:ac:13:e5:ac:d4:30:9e:25:dc:19:d9:b9:de:
- 46:7a:84:80:29:bd:a1:11:f8:f2:af:ce:c1:0c:73:
- 43:29:37:c3:76:61:32:70:6d:e7:29:bf:dd:9f:68:
- ed:9e:c2:b9:8c:f6:16:7c:b9:06:4b:65:ff:57:26:
- 9d:62:48:ee:0b:0f:4c:5e:fb:d7:a9:e3:d8:4b:a9:
- 0c:01:b6:00:f8:48:27:64:03:b6:73:d0:85:10:92:
- 4c:50:f8:f4:33:95:ea:52:30:72:b0:c1:e1:d3:1e:
- 8e:67:2a:64:42:c8:61:b8:3f:76:d2:01:1d:e6:dc:
- d2:66:09:41:24:c3:22:b4:55:3a:f0:5e:3d:82:af:
- 5d:0d:b7:d7:96:02:dc:94:e4:d2:24:dc:49:f8:d3:
- dc:b9:78:0e:ce:cf:8f:1a:3f:06:8b:57:e4:51:91:
- 7f:64:1b:cd:db:4d:80:88:26:21:dc:da:64:ae:64:
- bb:03:21:1c:de:ce:44:eb:a7:b4:43:50:51:cc:67:
- da:16:91:93:94:e4:d0:ed:28:dc:8a:16:8b:3d:d8:
- cd:19
+ 00:ba:33:55:c9:1e:c0:91:17:3a:eb:30:8c:ed:23:
+ cc:1d:6d:1e:e7:6e:4e:ac:23:63:23:ae:48:87:13:
+ 61:0f:0c:0b:ee:72:f7:c2:7b:95:2e:7b:25:34:08:
+ b6:e1:f5:ae:50:bf:8f:cf:81:6e:e6:26:9f:92:61:
+ c4:fb:44:9e:23:09:df:13:80:bc:38:5b:db:08:6c:
+ 68:60:46:d4:e3:e0:41:91:c4:42:d5:d9:75:d2:c4:
+ df:29:b8:04:bb:96:dc:9d:e4:0b:f7:de:ab:cf:90:
+ ad:22:c8:ab:56:65:84:00:3b:b9:e6:29:b5:e2:96:
+ 88:bd:95:e5:10:6d:57:ab:be:d1:f4:61:bb:1d:b4:
+ 7f:f9:02:db:48:d3:21:9d:f1:03:77:bf:f9:ca:f3:
+ 4e:2d:44:1c:28:1d:c5:4f:30:1b:0a:8b:71:0e:5f:
+ 86:0a:3f:97:7f:47:a6:a2:3c:60:02:c6:e8:bd:e9:
+ 52:b1:0b:cb:53:d4:09:f4:b6:20:23:b4:89:09:ff:
+ 1a:61:e8:dd:ac:19:4d:be:94:1e:60:24:d4:6c:89:
+ 03:3a:c4:44:5b:dd:7c:59:37:b7:0c:83:40:24:0e:
+ ed:ab:02:cf:cd:93:d2:3d:5d:e0:c6:c4:c5:1d:1a:
+ 01:d1:e1:77:58:62:90:e1:83:af:d2:ee:31:f3:29:
+ 0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 90:4B:3E:89:21:25:2A:3C:CA:35:BF:D9:A6:B1:CF:BC:1F:9D:3A:2F
+ 13:F7:B3:D5:1C:C9:63:BD:3A:24:01:43:AE:4A:26:96:46:55:F5:F0
X509v3 Authority Key Identifier:
- keyid:C3:6A:BF:B8:BB:62:64:F0:4C:4C:28:47:94:45:0F:15:0D:DC:CD:5A
+ keyid:5F:B1:E2:C5:58:EB:EF:73:DC:15:A3:0F:8E:24:0C:6C:67:65:00:04
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- bd:cb:4f:22:e2:7a:50:05:dd:e3:d6:41:19:2b:6d:4a:3e:a8:
- 90:27:4f:ce:eb:ee:83:4f:d5:b6:ea:a5:18:1c:00:83:84:76:
- 92:76:a7:2c:54:5f:94:a7:fc:4c:2f:38:08:c5:24:3f:95:57:
- e4:55:e2:a5:96:b7:c0:7b:cc:8f:ce:a1:81:e2:d2:51:17:d3:
- 7f:6b:76:ed:f5:41:2a:7a:56:e2:d1:ed:55:94:38:2e:9f:cb:
- 9b:a3:8b:d8:d7:42:24:81:55:97:82:a1:77:52:7c:1f:70:db:
- 0b:bf:a5:eb:96:2e:d4:fb:9c:d5:6a:6e:9b:60:75:01:e1:fe:
- f1:14:64:42:82:2a:f5:ea:b3:e1:2e:40:fe:b2:af:9f:c5:66:
- 25:d8:7d:8c:5f:00:3d:04:b4:02:8c:c7:99:30:d0:c0:02:e4:
- 5f:3b:75:01:59:76:1c:3c:95:5b:28:49:90:2f:c0:af:45:f0:
- 4c:62:ca:40:66:80:7e:25:89:ab:91:55:ee:41:71:af:05:4c:
- 7e:31:2c:99:24:50:c9:dd:97:79:73:97:f9:5a:79:79:05:ff:
- c6:83:b7:e3:4d:86:b6:a3:60:1d:7c:e6:89:80:a3:50:8f:b1:
- 4a:43:d2:a9:89:92:8b:38:20:71:64:0a:41:8b:fd:2f:4b:ab:
- 3c:45:99:0f
+ a5:43:87:2e:d0:2c:51:df:a7:aa:48:b4:38:fc:1d:6f:c9:db:
+ 23:32:75:f2:d1:52:45:ea:4a:89:1f:e9:10:0c:22:0d:70:3e:
+ f0:c1:cf:b7:a8:cd:af:d4:33:99:14:6e:62:b9:a8:0f:a6:2c:
+ 75:dd:d8:79:88:fc:cb:c4:7e:64:b1:2f:7a:0b:b2:a4:6c:82:
+ 29:7d:23:32:d3:de:a8:90:a8:77:f8:33:13:e9:3e:42:0b:32:
+ e8:50:e0:af:31:2f:b9:e5:be:b7:c7:16:ca:a7:96:9e:95:24:
+ d2:c1:b3:df:70:5f:7b:8a:33:6b:55:76:e8:18:32:66:0e:9a:
+ 60:cf:dc:30:1e:38:15:05:6e:cc:4a:1e:e7:2e:e0:5a:de:ea:
+ 84:a1:ce:04:fd:db:74:d6:fe:b6:4d:6b:86:38:22:78:f1:3e:
+ ba:dc:8b:85:a6:2f:56:10:1f:7d:b8:96:00:4c:d6:a3:fa:93:
+ fd:1b:29:64:40:7c:f8:65:3f:73:8a:7e:3e:72:c7:ce:19:74:
+ 51:21:26:5d:2d:41:a0:95:c9:8f:70:fd:2a:60:7a:b0:fc:e5:
+ 14:65:9a:3e:68:2c:4a:47:1b:5a:97:8a:31:a9:1a:1a:c9:fc:
+ e3:be:c9:dd:65:0f:33:2b:f9:d9:68:5b:54:22:c4:dc:a6:21:
+ 42:6c:ec:64
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZLiv9Dp
-j8ZF8MnvUcyXzMuArMF82n4oEgyERWvb+0+6Fj4zi6EUcEKZyk6OVawT5azUMJ4l
-3BnZud5GeoSAKb2hEfjyr87BDHNDKTfDdmEycG3nKb/dn2jtnsK5jPYWfLkGS2X/
-VyadYkjuCw9MXvvXqePYS6kMAbYA+EgnZAO2c9CFEJJMUPj0M5XqUjBysMHh0x6O
-ZypkQshhuD920gEd5tzSZglBJMMitFU68F49gq9dDbfXlgLclOTSJNxJ+NPcuXgO
-zs+PGj8Gi1fkUZF/ZBvN202AiCYh3NpkrmS7AyEc3s5E66e0Q1BRzGfaFpGTlOTQ
-7SjcihaLPdjNGQIDAQABo4HLMIHIMB0GA1UdDgQWBBSQSz6JISUqPMo1v9mmsc+8
-H506LzAfBgNVHSMEGDAWgBTDar+4u2Jk8ExMKEeURQ8VDdzNWjA3BggrBgEFBQcB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-AL3LTyLielAF3ePWQRkrbUo+qJAnT87r7oNP1bbqpRgcAIOEdpJ2pyxUX5Sn/Ewv
-OAjFJD+VV+RV4qWWt8B7zI/OoYHi0lEX039rdu31QSp6VuLR7VWUOC6fy5uji9jX
-QiSBVZeCoXdSfB9w2wu/peuWLtT7nNVqbptgdQHh/vEUZEKCKvXqs+EuQP6yr5/F
-ZiXYfYxfAD0EtAKMx5kw0MAC5F87dQFZdhw8lVsoSZAvwK9F8ExiykBmgH4liauR
-Ve5Bca8FTH4xLJkkUMndl3lzl/laeXkF/8aDt+NNhrajYB185omAo1CPsUpD0qmJ
-kos4IHFkCkGL/S9LqzxFmQ8=
+AKVDhy7QLFHfp6pItDj8HW/J2yMydfLRUkXqSokf6RAMIg1wPvDBz7eoza/UM5kU
+bmK5qA+mLHXd2HmI/MvEfmSxL3oLsqRsgil9IzLT3qiQqHf4MxPpPkILMuhQ4K8x
+L7nlvrfHFsqnlp6VJNLBs99wX3uKM2tVdugYMmYOmmDP3DAeOBUFbsxKHucu4Fre
+6oShzgT923TW/rZNa4Y4InjxPrrci4WmL1YQH324lgBM1qP6k/0bKWRAfPhlP3OK
+fj5yx84ZdFEhJl0tQaCVyY9w/SpgerD85RRlmj5oLEpHG1qXijGpGhrJ/OO+yd1l
+DzMr+dloW1QixNymIUJs7GQ=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:fa:da:12:88:da:6c:4d:a4:17:2e:e6:c7:c7:f6:
- fc:0b:41:94:b9:ad:5e:72:7f:53:82:c3:9b:bd:f0:
- 39:fd:6c:be:42:2f:28:fe:76:7e:e6:24:f7:6b:32:
- 42:c7:0e:6f:b3:9b:4d:61:ab:f3:f1:76:67:29:77:
- a5:6a:b9:64:65:40:42:0a:ad:dc:27:16:7a:94:ae:
- 8f:f0:d2:db:e7:7c:71:21:c9:ca:f0:64:94:58:32:
- b7:fa:d3:27:bc:84:95:ce:d2:81:43:dc:7d:b3:e8:
- 76:aa:eb:0a:a6:c1:03:1f:ae:19:db:8a:c4:ef:a1:
- bd:f3:d6:e9:e7:20:a8:83:1c:78:d5:85:c2:be:9f:
- c9:e2:4e:ab:e6:a8:53:6b:c7:5d:d6:57:6f:4f:2d:
- db:75:89:c6:10:a3:96:36:22:8d:c3:0a:20:7b:5f:
- 75:04:a6:4a:8d:24:d3:21:0b:16:fe:70:ae:34:d4:
- bd:33:27:86:cb:b3:c8:b8:9a:80:70:0c:01:38:af:
- e8:dc:0a:32:ca:a8:da:6c:a7:0a:2d:f3:b6:f7:cb:
- 7f:ea:59:38:66:ce:9d:93:f2:75:89:d3:5f:43:5c:
- 9b:29:1c:d4:e9:37:6d:7c:79:ee:ad:c9:70:62:58:
- 4f:25:f6:21:20:44:a8:0b:c6:52:9d:2f:ea:a5:f8:
- b3:cf
+ 00:df:9c:45:02:46:38:eb:d4:64:cd:8e:95:65:63:
+ d5:e6:71:8b:67:13:d8:bc:6d:64:73:d7:40:17:79:
+ 80:a4:8d:8e:5f:bf:5e:48:b0:2f:bc:49:08:71:b4:
+ 80:38:00:cd:e9:ee:2e:6e:73:8a:77:56:b4:b3:d0:
+ e3:0c:40:c9:ca:1f:9b:a0:89:68:07:34:cd:f4:f4:
+ b9:a2:c1:ca:42:0e:da:90:cf:95:89:3a:3c:de:ad:
+ a6:ff:49:6c:e2:5e:f5:0b:ff:be:06:ee:ab:e1:81:
+ e9:da:a3:b8:d5:63:af:5e:10:63:49:23:0a:1d:ca:
+ 3e:bc:96:6e:82:5c:4f:ce:56:a7:8f:53:34:65:cb:
+ 47:88:3e:38:4d:71:b6:8a:06:e4:ed:4f:d2:df:59:
+ 3e:a7:03:a7:be:c2:14:a6:cf:9e:4b:c8:a3:25:21:
+ b2:3e:f8:cd:65:de:fc:0e:52:fd:fa:cf:d3:07:af:
+ 79:53:11:bf:e6:77:ce:d8:1a:4b:4f:cb:d2:35:28:
+ f8:5a:4b:05:a2:dd:88:e1:54:ac:1a:15:8d:54:a2:
+ b7:ac:66:7a:f8:4a:2a:75:94:15:b3:44:c2:05:ff:
+ e3:a0:34:40:84:00:39:6d:6d:e1:8e:16:f3:d3:60:
+ 2b:95:2f:fc:74:6e:b1:83:b7:0b:9d:9e:d8:34:45:
+ 21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C3:6A:BF:B8:BB:62:64:F0:4C:4C:28:47:94:45:0F:15:0D:DC:CD:5A
+ 5F:B1:E2:C5:58:EB:EF:73:DC:15:A3:0F:8E:24:0C:6C:67:65:00:04
X509v3 Authority Key Identifier:
- keyid:C3:6A:BF:B8:BB:62:64:F0:4C:4C:28:47:94:45:0F:15:0D:DC:CD:5A
+ keyid:5F:B1:E2:C5:58:EB:EF:73:DC:15:A3:0F:8E:24:0C:6C:67:65:00:04
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 48:d9:ed:17:dd:a3:7c:5f:6b:aa:90:6d:f5:d4:61:a3:27:8e:
- 83:92:15:7a:6c:d7:87:71:95:6a:e4:e0:d9:11:4e:2a:af:14:
- 5c:11:ba:a0:2e:15:bd:f0:c6:2d:72:0a:17:ce:02:1a:3b:61:
- 16:5d:1a:ff:e8:45:4d:d6:f2:93:9d:09:ce:e6:ec:a8:c8:de:
- e6:40:dc:26:cc:15:89:38:b9:59:06:27:d0:93:af:0e:83:08:
- 9f:c3:50:1c:b1:e0:88:69:b2:43:61:c3:4c:bc:d9:19:d7:87:
- 57:c3:e6:99:7b:f0:02:09:ac:e1:f0:a1:55:d5:53:0c:fc:c4:
- b3:3c:49:67:30:70:d5:c7:cd:94:a6:07:f0:cd:89:fd:68:b4:
- 29:9d:63:91:f6:bf:79:da:6a:93:6d:b5:52:57:d8:1a:62:18:
- 9f:ed:71:5c:d2:5d:53:0b:04:56:5c:05:81:6b:16:9a:dd:ff:
- fe:5d:98:32:97:07:c1:7b:9c:d5:08:07:2e:b9:17:ab:1e:a3:
- ea:64:b1:02:1b:04:ca:5f:4c:fd:1f:45:91:d9:f6:de:c7:78:
- 9d:aa:5d:b7:cc:6f:58:7f:2d:71:cc:5c:3a:8c:e5:db:51:3e:
- af:77:1f:d1:e1:81:cb:74:c0:36:46:be:51:4e:55:94:98:65:
- 7d:33:c0:5e
+ 98:24:67:cd:0c:c3:0f:c5:09:c1:b3:b2:c3:eb:90:d5:1b:7e:
+ ce:45:7e:e8:f9:ae:bd:54:46:58:4e:0f:b3:65:30:45:98:3e:
+ 02:bf:a0:a9:e6:9c:69:f7:94:c8:bc:3d:33:ed:ac:52:5e:65:
+ 58:f1:ef:4d:bd:bf:39:65:62:e1:75:35:b2:27:92:fa:9b:3d:
+ 92:ed:51:f3:73:9a:73:2f:2f:61:2a:1d:34:e0:a1:fa:fc:b3:
+ dc:24:40:af:14:fd:d5:26:d0:5e:cb:fd:05:8b:88:f5:5c:0f:
+ 6f:75:68:c5:32:f1:1d:cd:a2:be:b2:66:0c:1a:4c:d6:df:1b:
+ e4:09:b9:bf:32:41:59:ca:bc:48:33:b1:ec:6a:fa:4d:dc:72:
+ ae:96:15:29:35:78:85:96:f9:64:05:75:50:b3:3e:b0:f8:15:
+ 7c:06:54:ff:36:98:2a:6d:4f:33:b0:78:1c:d3:be:12:2d:5b:
+ b4:37:2b:04:1b:d8:ce:28:db:9c:6d:49:e8:6f:f6:45:75:0a:
+ fb:69:dc:71:63:cd:c6:17:84:4b:8a:14:a0:ef:42:6a:6f:f2:
+ a8:76:e9:c6:4b:94:d2:24:f5:aa:80:d2:b6:81:17:c6:7d:7d:
+ 88:36:fe:26:44:cf:36:5a:5e:de:c4:34:da:54:1e:89:1f:d6:
+ 98:9e:3c:f7
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPraEojabE2kFy7mx8f2
-/AtBlLmtXnJ/U4LDm73wOf1svkIvKP52fuYk92syQscOb7ObTWGr8/F2Zyl3pWq5
-ZGVAQgqt3CcWepSuj/DS2+d8cSHJyvBklFgyt/rTJ7yElc7SgUPcfbPodqrrCqbB
-Ax+uGduKxO+hvfPW6ecgqIMceNWFwr6fyeJOq+aoU2vHXdZXb08t23WJxhCjljYi
-jcMKIHtfdQSmSo0k0yELFv5wrjTUvTMnhsuzyLiagHAMATiv6NwKMsqo2mynCi3z
-tvfLf+pZOGbOnZPydYnTX0Ncmykc1Ok3bXx57q3JcGJYTyX2ISBEqAvGUp0v6qX4
-s88CAwEAAaOByzCByDAdBgNVHQ4EFgQUw2q/uLtiZPBMTChHlEUPFQ3czVowHwYD
-VR0jBBgwFoAUw2q/uLtiZPBMTChHlEUPFQ3czVowNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBI2e0X3aN8
-X2uqkG311GGjJ46DkhV6bNeHcZVq5ODZEU4qrxRcEbqgLhW98MYtcgoXzgIaO2EW
-XRr/6EVN1vKTnQnO5uyoyN7mQNwmzBWJOLlZBifQk68Ogwifw1AcseCIabJDYcNM
-vNkZ14dXw+aZe/ACCazh8KFV1VMM/MSzPElnMHDVx82UpgfwzYn9aLQpnWOR9r95
-2mqTbbVSV9gaYhif7XFc0l1TCwRWXAWBaxaa3f/+XZgylwfBe5zVCAcuuRerHqPq
-ZLECGwTKX0z9H0WR2fbex3idql23zG9Yfy1xzFw6jOXbUT6vdx/R4YHLdMA2Rr5R
-TlWUmGV9M8Be
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCYJGfNDMMP
+xQnBs7LD65DVG37ORX7o+a69VEZYTg+zZTBFmD4Cv6Cp5pxp95TIvD0z7axSXmVY
+8e9Nvb85ZWLhdTWyJ5L6mz2S7VHzc5pzLy9hKh004KH6/LPcJECvFP3VJtBey/0F
+i4j1XA9vdWjFMvEdzaK+smYMGkzW3xvkCbm/MkFZyrxIM7HsavpN3HKulhUpNXiF
+lvlkBXVQsz6w+BV8BlT/NpgqbU8zsHgc074SLVu0NysEG9jOKNucbUnob/ZFdQr7
+adxxY83GF4RLihSg70Jqb/KodunGS5TSJPWqgNK2gRfGfX2INv4mRM82Wl7exDTa
+VB6JH9aYnjz3
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py b/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py
index 03c6eb5..55f649f 100755
--- a/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py
+++ b/net/data/verify_certificate_chain_unittest/generate-basic-constraints-pathlen-0-self-issued.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 2 intermediaries. The first intermediary has a basic
+"""Certificate chain with 2 intermediates. The first intermediate has a basic
constraints path length of 0. The second one is self-issued so does not count
against the path length."""
@@ -12,22 +12,22 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with pathlen 0
-intermediary1 = common.create_intermediary_certificate('Intermediary', root)
-intermediary1.get_extensions().set_property('basicConstraints',
+# Intermediate with pathlen 0
+intermediate1 = common.create_intermediate_certificate('Intermediate', root)
+intermediate1.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:0')
-# Another intermediary (with the same pathlen restriction).
+# Another intermediate (with the same pathlen restriction).
# Note that this is self-issued but NOT self-signed.
-intermediary2 = common.create_intermediary_certificate('Intermediary',
- intermediary1)
-intermediary2.get_extensions().set_property('basicConstraints',
+intermediate2 = common.create_intermediate_certificate('Intermediate',
+ intermediate1)
+intermediate2.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:0')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary2)
+target = common.create_end_entity_certificate('Target', intermediate2)
-chain = [target, intermediary2, intermediary1]
+chain = [target, intermediate2, intermediate1]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-expired-intermediary.py b/net/data/verify_certificate_chain_unittest/generate-expired-intermediate.py
similarity index 74%
rename from net/data/verify_certificate_chain_unittest/generate-expired-intermediary.py
rename to net/data/verify_certificate_chain_unittest/generate-expired-intermediate.py
index 463a37b..708d734 100755
--- a/net/data/verify_certificate_chain_unittest/generate-expired-intermediary.py
+++ b/net/data/verify_certificate_chain_unittest/generate-expired-intermediate.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, where the intermediary is expired
+"""Certificate chain with 1 intermediate, where the intermediate is expired
(violates validity.notAfter). Verification is expected to fail."""
import common
@@ -12,20 +12,20 @@
root = common.create_self_signed_root_certificate('Root')
root.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_validity_range(common.JANUARY_1_2015_UTC,
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.MARCH_1_2015_UTC)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
# Both the root and target are valid at this time, however the
-# intermediary certificate is not.
+# intermediate certificate is not.
time = common.MARCH_2_2015_UTC
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-expired-root.py b/net/data/verify_certificate_chain_unittest/generate-expired-root.py
index 83f7917..328edcc 100755
--- a/net/data/verify_certificate_chain_unittest/generate-expired-root.py
+++ b/net/data/verify_certificate_chain_unittest/generate-expired-root.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, where the root certificate is expired
+"""Certificate chain with 1 intermediate, where the root certificate is expired
(violates validity.notAfter). Verification is expected to fail."""
import common
@@ -12,19 +12,19 @@
root = common.create_self_signed_root_certificate('Root')
root.set_validity_range(common.JANUARY_1_2015_UTC, common.MARCH_1_2015_UTC)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_validity_range(common.JANUARY_1_2015_UTC,
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.JANUARY_1_2016_UTC)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
-# Both the target and intermediary are valid at this time, however the
+# Both the target and intermediate are valid at this time, however the
# root is not.
time = common.MARCH_2_2015_UTC
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py b/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py
index fae1831..209154d 100755
--- a/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py
+++ b/net/data/verify_certificate_chain_unittest/generate-expired-target-notBefore.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, where the target is expired (violates
+"""Certificate chain with 1 intermediate, where the target is expired (violates
validity.notBefore). Verification is expected to fail."""
import common
@@ -12,19 +12,19 @@
root = common.create_self_signed_root_certificate('Root')
root.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_validity_range(common.JANUARY_1_2015_UTC,
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.JANUARY_1_2016_UTC)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_validity_range(common.MARCH_2_2015_UTC, common.JANUARY_1_2016_UTC)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
-# Both the root and intermediary are valid at this time, however the
+# Both the root and intermediate are valid at this time, however the
# target is not.
time = common.MARCH_1_2015_UTC
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-expired-target.py b/net/data/verify_certificate_chain_unittest/generate-expired-target.py
index eaa94d3..d75fa5a 100755
--- a/net/data/verify_certificate_chain_unittest/generate-expired-target.py
+++ b/net/data/verify_certificate_chain_unittest/generate-expired-target.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, where the target is expired (violates
+"""Certificate chain with 1 intermediate, where the target is expired (violates
validity.notAfter). Verification is expected to fail."""
import common
@@ -12,19 +12,19 @@
root = common.create_self_signed_root_certificate('Root')
root.set_validity_range(common.JANUARY_1_2015_UTC, common.JANUARY_1_2016_UTC)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_validity_range(common.JANUARY_1_2015_UTC,
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.JANUARY_1_2016_UTC)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_validity_range(common.JANUARY_1_2015_UTC, common.MARCH_1_2015_UTC)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
-# Both the root and intermediary are valid at this time, however the
+# Both the root and intermediate are valid at this time, however the
# target is not.
time = common.MARCH_2_2015_UTC
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-ca-false.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-ca-false.py
similarity index 70%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-ca-false.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-ca-false.py
index 4375f0e..5d15191 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-ca-false.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-ca-false.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
has a basic constraints extension that indicates it is NOT a CA. Verification
is expected to fail."""
@@ -12,15 +12,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with incorrect basic constraints.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().set_property('basicConstraints',
+# Intermediate with incorrect basic constraints.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().set_property('basicConstraints',
'critical,CA:false')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-not-critical.py
similarity index 70%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-not-critical.py
index 284354f..9a409fc 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-basic-constraints-not-critical.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-basic-constraints-not-critical.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
has a basic constraints extension but does not mark it as critical.
Verification is expected to succeed, since although not critical, the
basicConstraints indicates CA=true as expected."""
@@ -13,14 +13,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with non-critical basic constarints.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().set_property('basicConstraints', 'CA:true')
+# Intermediate with non-critical basic constarints.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().set_property('basicConstraints', 'CA:true')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-basic-constraints.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-basic-constraints.py
similarity index 69%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-basic-constraints.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-basic-constraints.py
index 1faced5..db91ff72 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-basic-constraints.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-basic-constraints.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
lacks the basic constraints extension, and hence is expected to fail validation
(RFC 5280 requires v3 signing certificates have a BasicConstaints)."""
@@ -12,14 +12,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary that lacks basic constraints.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().remove_property('basicConstraints')
+# Intermediate that lacks basic constraints.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().remove_property('basicConstraints')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-signing-key-usage.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-signing-key-usage.py
similarity index 71%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-signing-key-usage.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-signing-key-usage.py
index 4c3d8e8..5a3c5e1 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-lacks-signing-key-usage.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-lacks-signing-key-usage.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit.
Hence validation is expected to fail."""
@@ -12,15 +12,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary that is missing keyCertSign.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().set_property('keyUsage',
+# Intermediate that is missing keyCertSign.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().set_property('keyUsage',
'critical,digitalSignature,keyEncipherment')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-signed-with-md5.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-signed-with-md5.py
similarity index 72%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-signed-with-md5.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-signed-with-md5.py
index 8a59e65..5dec9d1 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-signed-with-md5.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-signed-with-md5.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
however is signed using the MD5 hash. Verification is expected to fail because
MD5 is too weak."""
@@ -12,14 +12,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.set_signature_hash('md5')
+# Intermediate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.set_signature_hash('md5')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-critical-extension.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-critical-extension.py
similarity index 72%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-critical-extension.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-critical-extension.py
index 39c0597..b4bffa1 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-critical-extension.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-critical-extension.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as critical.
Verifying this certificate chain is expected to fail because there is an
unrecognized critical extension."""
@@ -13,15 +13,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary that has an unknown critical extension.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.get_extensions().add_property('1.2.3.4',
+# Intermediate that has an unknown critical extension.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.get_extensions().add_property('1.2.3.4',
'critical,DER:01:02:03:04')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-non-critical-extension.py b/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-non-critical-extension.py
similarity index 69%
rename from net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-non-critical-extension.py
rename to net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-non-critical-extension.py
index 874a658..b4bbb9e 100755
--- a/net/data/verify_certificate_chain_unittest/generate-intermediary-unknown-non-critical-extension.py
+++ b/net/data/verify_certificate_chain_unittest/generate-intermediate-unknown-non-critical-extension.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The intermediary
+"""Certificate chain with 1 intermediate and a trusted root. The intermediate
has an unknown X.509v3 extension that is marked as non-critical. Verification
is expected to succeed because although unrecognized, the extension is not
critical."""
@@ -12,15 +12,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+intermediate = common.create_intermediate_certificate('Intermediate', root)
-# Intermediary that has an unknown non-critical extension.
-intermediary.get_extensions().add_property('1.2.3.4', 'DER:01:02:03:04')
+# Intermediate that has an unknown non-critical extension.
+intermediate.get_extensions().add_property('1.2.3.4', 'DER:01:02:03:04')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-key-rollover.py b/net/data/verify_certificate_chain_unittest/generate-key-rollover.py
index e06b452..01deacb 100755
--- a/net/data/verify_certificate_chain_unittest/generate-key-rollover.py
+++ b/net/data/verify_certificate_chain_unittest/generate-key-rollover.py
@@ -49,18 +49,18 @@
newroot = common.create_self_signed_root_certificate('Root')
newroot.set_validity_range(JANUARY_2_2015_UTC, common.JANUARY_1_2016_UTC)
# Root with the new key signed by the old key.
-newrootrollover = common.create_intermediary_certificate('Root', oldroot)
+newrootrollover = common.create_intermediate_certificate('Root', oldroot)
newrootrollover.set_key_path(newroot.get_key_path())
newrootrollover.set_validity_range(JANUARY_2_2015_UTC,
common.JANUARY_1_2016_UTC)
# Intermediate signed by oldroot.
-oldintermediate = common.create_intermediary_certificate('Intermediate',
+oldintermediate = common.create_intermediate_certificate('Intermediate',
oldroot)
oldintermediate.set_validity_range(common.JANUARY_1_2015_UTC,
common.JANUARY_1_2016_UTC)
# Intermediate signed by newroot. Same key as oldintermediate.
-newintermediate = common.create_intermediary_certificate('Intermediate',
+newintermediate = common.create_intermediate_certificate('Intermediate',
newroot)
newintermediate.set_key_path(oldintermediate.get_key_path())
newintermediate.set_validity_range(JANUARY_2_2015_UTC,
diff --git a/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py b/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py
index 355f61e..1a64171 100755
--- a/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py
+++ b/net/data/verify_certificate_chain_unittest/generate-non-self-signed-root.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The trusted root
+"""Certificate chain with 1 intermediate and a trusted root. The trusted root
is NOT self signed, however its issuer is not included in the chain or root
store. Verification is expected to succeed since the root is trusted."""
@@ -12,15 +12,15 @@
shadow_root = common.create_self_signed_root_certificate('ShadowRoot')
# Non-self-signed root (part of trust store).
-root = common.create_intermediary_certificate('Root', shadow_root)
+root = common.create_intermediate_certificate('Root', shadow_root)
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-and-intermediary.py b/net/data/verify_certificate_chain_unittest/generate-target-and-intermediate.py
similarity index 73%
rename from net/data/verify_certificate_chain_unittest/generate-target-and-intermediary.py
rename to net/data/verify_certificate_chain_unittest/generate-target-and-intermediate.py
index 94525cc..f198774 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-and-intermediary.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-and-intermediate.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. Verification is
+"""Certificate chain with 1 intermediate and a trusted root. Verification is
expected to succeed."""
import common
@@ -11,13 +11,13 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py b/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py
index fa3cafb..bd19047 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-has-keycertsign-but-not-ca.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, a trusted root, and a target
+"""Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is not a CA, and yet has the keyCertSign bit set. Verification
is expected to fail, since keyCertSign should only be asserted when CA is
true."""
@@ -13,16 +13,16 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate (end entity but has keyCertSign bit set).
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.get_extensions().set_property('keyUsage',
'critical,digitalSignature,keyEncipherment,keyCertSign')
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py b/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py
index 5d29739..558e98c 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-has-pathlen-but-not-ca.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, a trusted root, and a target
+"""Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is not a CA, and yet has a pathlen set. Verification is
expected to fail, since pathlen should only be set for CAs."""
@@ -12,16 +12,16 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate (end entity, but has pathlen set).
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.get_extensions().set_property('basicConstraints',
'critical,CA:false,pathlen:1')
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py b/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py
index 83573ad..65423d5d 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-not-end-entity.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, a trusted root, and a target
+"""Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is also a CA. Verification is expected to succeed, as the test
code accepts any target certificate."""
@@ -12,13 +12,13 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate (is also a CA)
-target = common.create_intermediary_certificate('Target', intermediary)
+target = common.create_intermediate_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py b/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
index 75144a0..e8550d6 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-signed-by-512bit-rsa.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The target
+"""Certificate chain with 1 intermediate and a trusted root. The target
certificate is signed using a weak RSA key (512-bit modulus), and so
verification is expected to fail."""
@@ -12,14 +12,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with a very weak key size (512-bit RSA).
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.generate_rsa_key(512)
+# Intermediate with a very weak key size (512-bit RSA).
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.generate_rsa_key(512)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py b/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py
index 562ebb1..d052c54 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-signed-using-ecdsa.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with a trusted root using RSA, and intermediary using EC,
+"""Certificate chain with a trusted root using RSA, and intermediate using EC,
and a target certificate using RSA. Verification is expected to succeed."""
import common
@@ -11,14 +11,14 @@
# Self-signed root certificate (part of trust store), using RSA.
root = common.create_self_signed_root_certificate('Root')
-# Intermediary using an EC key for the P-384 curve.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
-intermediary.generate_ec_key('secp384r1')
+# Intermediate using an EC key for the P-384 curve.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
+intermediate.generate_ec_key('secp384r1')
# Target certificate contains an RSA key (but is signed using ECDSA).
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = True
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py b/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py
index 743ad25..28a2d83 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-signed-with-md5.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with an intermediary that uses MD5 to sign the target
+"""Certificate chain with an intermediate that uses MD5 to sign the target
certificate. This is expected to fail because MD5 is too weak."""
import common
@@ -11,14 +11,14 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.set_signature_hash('md5')
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py b/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py
index 7254299..4c0e19c 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-unknown-critical-extension.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary and a trusted root. The target
+"""Certificate chain with 1 intermediate and a trusted root. The target
certificate has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as
critical. Verifying this certificate chain is expected to fail because there is
an unrecognized critical extension."""
@@ -13,15 +13,15 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate (has unknown critical extension).
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
target.get_extensions().add_property('1.2.3.4',
'critical,DER:01:02:03:04')
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py b/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py
index 162f716..d941b18 100755
--- a/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py
+++ b/net/data/verify_certificate_chain_unittest/generate-target-wrong-signature.py
@@ -12,19 +12,19 @@
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate to include in the certificate chain.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate to include in the certificate chain.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Actual intermediate that was used to sign the target certificate. It has the
# same subject as expected, but a different RSA key from the certificate
# included in the actual chain.
-wrong_intermediary = common.create_intermediary_certificate('Intermediary',
+wrong_intermediate = common.create_intermediate_certificate('Intermediate',
root)
-# Target certificate, signed using |wrong_intermediary| NOT |intermediary|.
-target = common.create_end_entity_certificate('Target', wrong_intermediary)
+# Target certificate, signed using |wrong_intermediate| NOT |intermediate|.
+target = common.create_end_entity_certificate('Target', wrong_intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-unknown-root.py b/net/data/verify_certificate_chain_unittest/generate-unknown-root.py
index 4f0b5f5..523b590 100755
--- a/net/data/verify_certificate_chain_unittest/generate-unknown-root.py
+++ b/net/data/verify_certificate_chain_unittest/generate-unknown-root.py
@@ -3,8 +3,8 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 1 intermediary, but the root is not in trust store.
-Verification is expected to fail because the final intermediary (Intermediary)
+"""Certificate chain with 1 intermediate, but the root is not in trust store.
+Verification is expected to fail because the final intermediate (Intermediate)
does not chain to a known root."""
import common
@@ -12,13 +12,13 @@
# Self-signed root certificate, which is NOT added to the trust store.
root = common.create_self_signed_root_certificate('Root')
-# Intermediary certificate.
-intermediary = common.create_intermediary_certificate('Intermediary', root)
+# Intermediate certificate.
+intermediate = common.create_intermediate_certificate('Intermediate', root)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary)
+target = common.create_end_entity_certificate('Target', intermediate)
-chain = [target, intermediary]
+chain = [target, intermediate]
trusted = [] # Note that this lacks |root|
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py b/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py
index 0298956..02599ff 100755
--- a/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py
+++ b/net/data/verify_certificate_chain_unittest/generate-violates-basic-constraints-pathlen-0.py
@@ -3,30 +3,30 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 2 intermediaries. The first intermediary has a basic
+"""Certificate chain with 2 intermediates. The first intermediate has a basic
constraints path length of 0, so it is a violation for it to have a subordinate
-intermediary."""
+intermediate."""
import common
# Self-signed root certificate (part of trust store).
root = common.create_self_signed_root_certificate('Root')
-# Intermediary with pathlen 0
-intermediary1 = common.create_intermediary_certificate('Intermediary1', root)
-intermediary1.get_extensions().set_property('basicConstraints',
+# Intermediate with pathlen 0
+intermediate1 = common.create_intermediate_certificate('Intermediate1', root)
+intermediate1.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:0')
-# Another intermediary (with the same pathlen restriction)
-intermediary2 = common.create_intermediary_certificate('Intermediary2',
- intermediary1)
-intermediary2.get_extensions().set_property('basicConstraints',
+# Another intermediate (with the same pathlen restriction)
+intermediate2 = common.create_intermediate_certificate('Intermediate2',
+ intermediate1)
+intermediate2.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:0')
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary2)
+target = common.create_end_entity_certificate('Target', intermediate2)
-chain = [target, intermediary2, intermediary1]
+chain = [target, intermediate2, intermediate1]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-root.py b/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-root.py
index bda9c25..149c000 100755
--- a/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-root.py
+++ b/net/data/verify_certificate_chain_unittest/generate-violates-pathlen-1-root.py
@@ -3,7 +3,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
-"""Certificate chain with 2 intermediaries and one end entity certificate. The
+"""Certificate chain with 2 intermediates and one end entity certificate. The
root certificate has a pathlen:1 restriction so this is an invalid chain."""
import common
@@ -13,17 +13,17 @@
root.get_extensions().set_property('basicConstraints',
'critical,CA:true,pathlen:1')
-# Intermediary 1 (no pathlen restriction).
-intermediary1 = common.create_intermediary_certificate('Intermediary1', root)
+# Intermediate 1 (no pathlen restriction).
+intermediate1 = common.create_intermediate_certificate('Intermediate1', root)
-# Intermediary 2 (no pathlen restriction).
-intermediary2 = common.create_intermediary_certificate('Intermediary2',
- intermediary1)
+# Intermediate 2 (no pathlen restriction).
+intermediate2 = common.create_intermediate_certificate('Intermediate2',
+ intermediate1)
# Target certificate.
-target = common.create_end_entity_certificate('Target', intermediary2)
+target = common.create_end_entity_certificate('Target', intermediate2)
-chain = [target, intermediary2, intermediary1]
+chain = [target, intermediate2, intermediate1]
trusted = [root]
time = common.DEFAULT_TIME
verify_result = False
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem b/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem
deleted file mode 100644
index 04bbffe..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem
+++ /dev/null
@@ -1,281 +0,0 @@
-[Created by: generate-intermediary-basic-constraints-ca-false.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has a basic constraints extension that indicates it is NOT a CA. Verification
-is expected to fail.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:d7:2c:b6:2c:cc:74:93:54:76:43:6a:c8:78:5d:
- c4:cc:30:ab:d1:16:46:84:b6:d8:28:13:74:4f:7f:
- 6c:e1:ef:0c:12:07:c8:f5:2b:bd:98:3e:5f:ec:3c:
- 6b:96:6b:7d:42:d1:a0:1c:e3:9a:c5:04:10:9f:f6:
- d8:d2:e9:0b:98:3b:40:f1:3d:9f:39:fd:70:7b:d3:
- f6:af:83:14:48:89:1c:87:aa:f1:21:fc:ab:f4:1e:
- b3:66:3b:1e:ae:f9:9b:5d:9b:6d:6c:19:14:e2:38:
- 09:36:99:be:b6:c0:27:50:91:33:c5:8d:11:4b:83:
- 95:db:21:d6:3b:a8:7c:d9:a7:6b:04:cc:d4:81:28:
- 8e:bb:57:76:2a:d9:d9:fa:31:07:62:dc:34:af:2d:
- ec:7d:2f:8c:73:b9:57:44:cc:86:3b:49:d5:45:df:
- bd:11:97:4e:b5:d2:07:17:71:39:0c:54:5b:c7:76:
- db:69:64:e6:0d:3d:a2:c8:bc:45:35:06:f4:6f:fb:
- ff:e5:23:53:9d:36:92:b5:15:2e:c7:62:62:22:69:
- 66:62:2c:51:ee:1c:b7:2e:10:82:14:e2:ff:3f:f9:
- 4e:a5:ad:70:fe:c8:26:d3:99:fb:ee:ea:67:f9:8a:
- 06:b8:a1:60:99:4f:ef:95:0e:96:3a:c2:35:11:e9:
- 4e:7d
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 34:A4:95:47:59:7D:2A:43:E3:DD:5F:55:F7:D0:F4:C0:25:E5:AD:8E
- X509v3 Authority Key Identifier:
- keyid:9F:6B:93:D1:46:61:07:80:55:0A:40:C8:FE:A8:D8:DD:8E:B1:EF:DD
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 75:a4:8c:02:02:da:03:71:90:d9:46:cc:6a:21:36:ef:86:21:
- 68:60:4a:a9:ce:af:f6:49:cf:f4:6b:b0:96:42:60:d5:02:91:
- 62:93:01:8b:cb:0b:eb:a5:b0:b8:49:6c:8e:54:84:c2:53:d4:
- 46:09:d6:db:29:96:a0:45:e5:09:5b:c1:b7:ba:be:8a:43:62:
- f9:8b:e4:47:d5:a9:d9:03:0e:83:86:78:19:81:c8:3b:20:86:
- 1d:72:98:cd:06:73:fa:b1:e4:df:fd:08:9c:52:bb:f6:48:61:
- bc:6f:3f:1e:1c:ef:f5:4e:94:5b:ee:e7:96:44:ff:1a:8d:6c:
- a6:9c:d1:77:17:1f:c7:e1:53:d5:5e:a5:d8:55:c8:36:48:f6:
- 8c:25:c3:1b:27:09:58:8e:30:6a:ad:ad:5e:0a:2e:5f:6f:5a:
- cb:1a:fb:fe:c9:03:1f:bf:37:9c:b5:c3:93:b7:4c:a2:d5:e2:
- ac:af:94:91:85:22:8c:c7:8b:b0:39:4a:67:f0:82:dc:db:fe:
- 39:3c:1d:50:4c:70:44:7e:aa:73:e4:fd:51:48:12:ea:9c:18:
- b1:27:6b:96:e7:aa:cf:f6:58:bf:05:d0:a4:51:71:27:b6:2c:
- 3d:a7:50:4d:93:1a:8d:04:84:7e:d3:9f:0d:b5:a5:6b:d3:db:
- d4:3a:03:fb
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLLYs
-zHSTVHZDash4XcTMMKvRFkaEttgoE3RPf2zh7wwSB8j1K72YPl/sPGuWa31C0aAc
-45rFBBCf9tjS6QuYO0DxPZ85/XB70/avgxRIiRyHqvEh/Kv0HrNmOx6u+Ztdm21s
-GRTiOAk2mb62wCdQkTPFjRFLg5XbIdY7qHzZp2sEzNSBKI67V3Yq2dn6MQdi3DSv
-Lex9L4xzuVdEzIY7SdVF370Rl0610gcXcTkMVFvHdttpZOYNPaLIvEU1BvRv+//l
-I1OdNpK1FS7HYmIiaWZiLFHuHLcuEIIU4v8/+U6lrXD+yCbTmfvu6mf5iga4oWCZ
-T++VDpY6wjUR6U59AgMBAAGjgekwgeYwHQYDVR0OBBYEFDSklUdZfSpD491fVffQ
-9MAl5a2OMB8GA1UdIwQYMBaAFJ9rk9FGYQeAVQpAyP6o2N2Ose/dMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdaSMAgLaA3GQ2UbMaiE2
-74YhaGBKqc6v9knP9GuwlkJg1QKRYpMBi8sL66WwuElsjlSEwlPURgnW2ymWoEXl
-CVvBt7q+ikNi+YvkR9Wp2QMOg4Z4GYHIOyCGHXKYzQZz+rHk3/0InFK79khhvG8/
-Hhzv9U6UW+7nlkT/Go1sppzRdxcfx+FT1V6l2FXINkj2jCXDGycJWI4waq2tXgou
-X29ayxr7/skDH783nLXDk7dMotXirK+UkYUijMeLsDlKZ/CC3Nv+OTwdUExwRH6q
-c+T9UUgS6pwYsSdrlueqz/ZYvwXQpFFxJ7YsPadQTZMajQSEftOfDbWla9Pb1DoD
-+w==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b6:2b:92:72:9f:d2:59:95:3f:16:fd:eb:d3:37:
- 3e:4d:fa:bf:05:3a:e3:8b:b5:32:90:42:9c:d7:69:
- c5:30:e6:0f:d3:6d:fb:93:c0:0e:30:f2:9f:42:8d:
- 83:17:62:e0:ac:41:c4:2b:29:4f:e6:c7:64:27:a8:
- ca:c0:46:16:50:ba:e1:de:3a:ed:4b:1e:49:84:cf:
- 16:2c:5d:84:0c:8e:0d:42:c0:d2:01:e3:94:2a:79:
- d7:da:d7:a6:51:75:fe:a3:e5:1a:95:f5:38:a3:5b:
- f8:5c:8a:a9:90:f1:f9:83:4a:13:25:61:bc:33:fb:
- 19:69:71:c1:c1:a6:45:4a:bd:7f:3f:a6:92:43:fe:
- db:88:a2:15:a9:41:cf:9d:62:9b:b4:fc:71:8f:4f:
- be:5d:4a:48:8a:7a:de:57:11:82:44:49:a6:5c:25:
- a0:8c:0b:f0:ec:74:51:76:ae:f4:5c:14:c6:d0:90:
- b9:93:64:93:f8:04:82:99:28:98:fa:c8:a2:e8:98:
- 20:2d:7d:cd:d9:99:ef:74:eb:7a:63:06:4c:7a:86:
- 1e:e8:4b:8f:d0:8d:ab:d9:3a:8e:bc:ec:f2:2a:0d:
- e1:5f:89:54:0f:ef:b8:28:ff:d5:f6:ef:a7:14:94:
- 52:72:48:50:29:85:5b:d9:fd:1e:14:59:c8:69:df:
- 89:47
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 9F:6B:93:D1:46:61:07:80:55:0A:40:C8:FE:A8:D8:DD:8E:B1:EF:DD
- X509v3 Authority Key Identifier:
- keyid:D8:01:99:4C:28:49:4B:7F:FB:30:0A:92:A8:90:6F:8B:9C:45:05:7F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:FALSE
- Signature Algorithm: sha256WithRSAEncryption
- 7f:36:da:7c:f5:4a:3b:37:53:82:b4:98:99:0b:d7:c0:73:b9:
- 05:89:75:fa:97:e4:cc:9d:73:61:18:ad:f2:bd:57:3f:6b:d0:
- 45:a2:45:2a:27:68:13:f1:a3:80:15:85:13:52:4b:c6:8f:12:
- 78:ba:21:51:fb:9d:1c:88:5d:5c:f5:0b:e5:66:ef:b4:72:67:
- 16:cb:3d:79:83:56:9b:90:50:91:fe:f2:0c:f9:36:88:dd:14:
- ef:b7:d2:1e:a3:54:d3:67:9f:3e:bc:7b:8c:45:be:12:c0:a9:
- 21:cf:b7:ea:e9:9e:ec:e8:79:02:a0:48:3e:a8:b9:fc:62:9d:
- a3:ab:74:b6:22:97:ab:78:7f:60:8e:67:96:02:ff:13:6d:66:
- b9:df:a4:55:c7:e4:82:a9:f7:0d:30:d4:e9:6b:a9:25:68:f8:
- 3c:2f:73:38:cf:07:af:b5:ef:82:5a:5f:34:0c:d9:0a:56:ad:
- 30:c4:8a:2a:90:5c:92:e6:01:f5:49:4e:58:a0:13:0c:81:46:
- ef:01:bc:8f:48:15:49:da:5d:20:28:a7:2a:b9:2b:85:9c:f8:
- c4:5e:76:6f:ff:67:c0:2a:ee:96:91:2e:8d:b3:be:6b:66:51:
- 0e:d5:7f:c9:21:c0:af:79:cc:07:0a:cc:dc:85:00:85:cf:74:
- 9e:6f:2f:31
------BEGIN CERTIFICATE-----
-MIIDajCCAlKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiuScp/S
-WZU/Fv3r0zc+Tfq/BTrji7UykEKc12nFMOYP0237k8AOMPKfQo2DF2LgrEHEKylP
-5sdkJ6jKwEYWULrh3jrtSx5JhM8WLF2EDI4NQsDSAeOUKnnX2temUXX+o+UalfU4
-o1v4XIqpkPH5g0oTJWG8M/sZaXHBwaZFSr1/P6aSQ/7biKIVqUHPnWKbtPxxj0++
-XUpIinreVxGCREmmXCWgjAvw7HRRdq70XBTG0JC5k2ST+ASCmSiY+sii6JggLX3N
-2ZnvdOt6YwZMeoYe6EuP0I2r2TqOvOzyKg3hX4lUD++4KP/V9u+nFJRSckhQKYVb
-2f0eFFnIad+JRwIDAQABo4HIMIHFMB0GA1UdDgQWBBSfa5PRRmEHgFUKQMj+qNjd
-jrHv3TAfBgNVHSMEGDAWgBTYAZlMKElLf/swCpKokG+LnEUFfzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAH82
-2nz1Sjs3U4K0mJkL18BzuQWJdfqX5Mydc2EYrfK9Vz9r0EWiRSonaBPxo4AVhRNS
-S8aPEni6IVH7nRyIXVz1C+Vm77RyZxbLPXmDVpuQUJH+8gz5NojdFO+30h6jVNNn
-nz68e4xFvhLAqSHPt+rpnuzoeQKgSD6oufxinaOrdLYil6t4f2COZ5YC/xNtZrnf
-pFXH5IKp9w0w1OlrqSVo+DwvczjPB6+174JaXzQM2QpWrTDEiiqQXJLmAfVJTlig
-EwyBRu8BvI9IFUnaXSAopyq5K4Wc+MRedm//Z8Aq7paRLo2zvmtmUQ7Vf8khwK95
-zAcKzNyFAIXPdJ5vLzE=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:a6:91:a5:68:ad:ba:89:8f:b6:5c:19:a1:3d:10:
- ad:55:97:10:17:06:9a:7d:59:e7:7c:56:3d:1d:5f:
- 17:c7:a2:e5:e7:80:52:a8:cd:ef:ca:82:4a:77:e4:
- ac:77:7c:35:f1:1b:b3:7a:9a:58:78:9e:1c:00:c9:
- 67:9d:4d:d0:f4:92:f1:0a:82:8a:f0:d4:57:04:04:
- cc:12:e4:86:95:93:12:a7:9b:ee:6f:d2:85:5d:63:
- 3c:5c:94:91:db:d0:3c:f1:a8:ca:05:19:22:98:e0:
- ef:29:22:35:40:3c:7c:c4:74:5c:df:24:2b:e4:b8:
- bc:23:ba:db:aa:6b:ef:ba:bb:aa:c2:ab:ce:9f:07:
- 2e:36:da:21:67:4d:80:71:ba:4a:7b:62:16:08:51:
- 29:35:dd:c8:1d:8c:60:d8:8c:05:a2:ec:f0:5e:af:
- f4:f2:e8:95:03:c1:79:77:3e:ff:f4:31:ed:ab:cc:
- 1b:dd:7e:f6:2c:71:3a:1c:e3:ab:ab:a4:ab:79:12:
- 59:a5:f6:84:00:83:ff:8c:e5:3b:a0:4f:37:2a:b1:
- c4:a5:19:69:46:2c:87:bc:a5:0e:ee:31:13:2e:0e:
- ed:d2:e2:19:be:d0:14:b3:68:b5:34:c6:3f:6e:95:
- da:eb:2c:55:30:92:3d:f8:93:df:4e:ec:85:a7:b3:
- 06:71
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- D8:01:99:4C:28:49:4B:7F:FB:30:0A:92:A8:90:6F:8B:9C:45:05:7F
- X509v3 Authority Key Identifier:
- keyid:D8:01:99:4C:28:49:4B:7F:FB:30:0A:92:A8:90:6F:8B:9C:45:05:7F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 38:6a:c5:72:2a:2b:2b:2c:d4:6f:07:a5:14:46:10:e5:3b:68:
- 80:3c:d9:60:ef:12:ed:e6:1a:c0:76:4a:3d:9c:e1:86:71:b5:
- 15:de:eb:47:51:d6:85:3e:14:ef:18:e6:b0:3c:ac:6b:0b:48:
- 42:0f:76:3d:59:89:84:63:61:fe:6a:a0:47:0a:75:1a:64:92:
- e3:09:14:12:d9:af:36:ec:f4:c5:79:37:22:cd:88:b8:f8:3c:
- 55:0a:28:2e:21:26:45:cf:95:41:e4:6c:5a:ad:23:0a:cc:fd:
- 83:71:76:7d:63:e2:9f:6c:f2:07:ee:6e:e3:fd:dd:87:f0:23:
- 9c:04:5e:19:b2:67:38:00:91:ea:05:4c:3c:db:cd:19:d3:f6:
- 7c:fd:fa:1d:86:fc:49:fe:45:ac:99:28:b1:a6:e7:fb:90:a2:
- 98:59:a7:12:bc:26:ce:6d:b5:0f:62:19:40:a4:67:45:06:ec:
- 18:1e:c5:83:e4:a1:fb:e6:58:3c:6c:a3:12:29:46:22:0d:8a:
- 07:75:72:ab:6a:a9:c3:1c:0c:d3:a3:0b:fd:50:af:37:89:0b:
- f6:70:57:1c:fb:d6:e7:0f:e6:52:5e:f6:1f:02:1c:73:bb:2b:
- eb:21:1e:f0:aa:fe:b1:50:c0:12:fc:76:8c:d0:94:0a:ab:3b:
- a8:0a:6c:28
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKaRpWituomPtlwZoT0Q
-rVWXEBcGmn1Z53xWPR1fF8ei5eeAUqjN78qCSnfkrHd8NfEbs3qaWHieHADJZ51N
-0PSS8QqCivDUVwQEzBLkhpWTEqeb7m/ShV1jPFyUkdvQPPGoygUZIpjg7ykiNUA8
-fMR0XN8kK+S4vCO626pr77q7qsKrzp8HLjbaIWdNgHG6SntiFghRKTXdyB2MYNiM
-BaLs8F6v9PLolQPBeXc+//Qx7avMG91+9ixxOhzjq6ukq3kSWaX2hACD/4zlO6BP
-NyqxxKUZaUYsh7ylDu4xEy4O7dLiGb7QFLNotTTGP26V2ussVTCSPfiT307shaez
-BnECAwEAAaOByzCByDAdBgNVHQ4EFgQU2AGZTChJS3/7MAqSqJBvi5xFBX8wHwYD
-VR0jBBgwFoAU2AGZTChJS3/7MAqSqJBvi5xFBX8wNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA4asVyKisr
-LNRvB6UURhDlO2iAPNlg7xLt5hrAdko9nOGGcbUV3utHUdaFPhTvGOawPKxrC0hC
-D3Y9WYmEY2H+aqBHCnUaZJLjCRQS2a827PTFeTcizYi4+DxVCiguISZFz5VB5Gxa
-rSMKzP2DcXZ9Y+KfbPIH7m7j/d2H8COcBF4Zsmc4AJHqBUw8280Z0/Z8/fodhvxJ
-/kWsmSixpuf7kKKYWacSvCbObbUPYhlApGdFBuwYHsWD5KH75lg8bKMSKUYiDYoH
-dXKraqnDHAzTowv9UK83iQv2cFcc+9bnD+ZSXvYfAhxzuyvrIR7wqv6xUMAS/HaM
-0JQKqzuoCmwo
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem b/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem
deleted file mode 100644
index 3ff3682..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem
+++ /dev/null
@@ -1,282 +0,0 @@
-[Created by: generate-intermediary-basic-constraints-not-critical.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has a basic constraints extension but does not mark it as critical.
-Verification is expected to succeed, since although not critical, the
-basicConstraints indicates CA=true as expected.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:d2:25:d5:a0:7a:94:e6:21:0b:8b:e5:68:21:06:
- c4:a7:fe:fd:de:97:31:a6:80:a2:3d:be:f0:03:c2:
- de:d5:a1:a6:3f:6e:19:3b:fe:f4:66:8f:8f:c8:d3:
- e4:7f:73:fc:e7:1c:2f:b4:9f:5e:bf:25:71:2d:d0:
- 65:60:76:0d:a6:be:af:1a:1f:3c:00:bf:cd:8e:de:
- 04:6f:6c:8d:25:c5:7a:64:71:31:d7:4a:e9:bd:5f:
- fa:e6:b8:e8:55:a2:c7:2b:b4:7d:4e:e3:bc:23:c9:
- 0f:79:29:86:dd:4d:b3:dd:12:c5:1a:d3:fc:4a:31:
- 54:47:7b:62:20:f5:bb:7c:47:6d:7f:67:d5:69:4b:
- f8:99:4f:dd:13:56:a4:9d:0a:fc:d0:da:b5:bd:e0:
- 0c:c8:50:d6:e1:73:d8:59:37:95:99:70:31:3d:46:
- 44:d5:68:7b:45:4b:9e:4a:fd:25:33:05:7c:24:05:
- 0f:6c:00:4b:3e:0c:cf:56:e8:88:ef:67:bc:bd:66:
- b4:7c:bc:db:c6:4e:8b:44:0b:65:8f:c6:a9:57:d7:
- b0:8e:88:19:fc:d6:b7:02:b9:50:a0:e2:06:61:1d:
- d1:03:7a:ce:75:09:d2:64:d5:c6:61:3b:f1:28:5b:
- 4b:de:08:2f:b9:96:55:d9:4c:8c:48:d0:c6:2b:ee:
- 59:33
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- F9:45:14:0B:10:A3:AC:77:3B:19:DE:FB:66:FE:CF:E3:9A:F4:57:1A
- X509v3 Authority Key Identifier:
- keyid:73:DC:40:FE:F8:8F:F4:BD:DE:B0:63:30:AF:05:0B:6C:4E:99:54:7F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 41:3c:ca:d6:88:67:86:f8:dc:35:ab:37:d0:40:96:7b:4e:70:
- 2a:6b:cc:15:31:fd:06:87:ac:81:6d:89:ce:66:b2:26:73:bc:
- 71:3e:af:be:b2:ba:d5:bc:a5:b7:64:0c:7d:31:9b:0c:e1:0c:
- 73:14:0c:e0:fe:95:d3:ca:1d:d1:51:8a:fb:b1:e1:8d:68:58:
- 30:51:a6:2f:86:57:61:a6:20:7c:1f:0c:7f:14:c7:fe:fa:88:
- 14:7b:d9:41:5c:20:da:16:3c:ce:77:b8:ee:7c:33:d8:cf:2e:
- 6e:e3:43:01:00:0a:c0:1c:a0:eb:6b:36:a0:d6:bd:6e:91:a9:
- e1:8d:8d:b2:4e:12:d3:fa:56:84:be:eb:65:d8:9d:e2:c7:d4:
- 36:a2:7e:b8:b2:d4:5c:2f:c2:47:1e:ca:7a:fd:b4:30:3a:59:
- 19:8d:ca:7e:44:65:86:97:2d:f4:65:3b:f0:12:4b:d0:74:48:
- f9:dd:d3:d3:89:97:83:c6:4c:bb:da:e7:ce:e7:5e:93:f3:51:
- 4c:22:95:31:59:a9:3d:82:ec:8d:4c:8e:44:42:5f:13:d0:56:
- c2:35:e1:07:11:6d:23:92:3c:de:b1:3e:1c:4e:0e:e3:c6:06:
- 09:e1:dc:b8:4c:89:82:35:3c:51:60:1f:06:65:11:39:8b:b4:
- 20:04:f0:90
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJdWg
-epTmIQuL5WghBsSn/v3elzGmgKI9vvADwt7VoaY/bhk7/vRmj4/I0+R/c/znHC+0
-n16/JXEt0GVgdg2mvq8aHzwAv82O3gRvbI0lxXpkcTHXSum9X/rmuOhVoscrtH1O
-47wjyQ95KYbdTbPdEsUa0/xKMVRHe2Ig9bt8R21/Z9VpS/iZT90TVqSdCvzQ2rW9
-4AzIUNbhc9hZN5WZcDE9RkTVaHtFS55K/SUzBXwkBQ9sAEs+DM9W6IjvZ7y9ZrR8
-vNvGTotEC2WPxqlX17COiBn81rcCuVCg4gZhHdEDes51CdJk1cZhO/EoW0veCC+5
-llXZTIxI0MYr7lkzAgMBAAGjgekwgeYwHQYDVR0OBBYEFPlFFAsQo6x3Oxne+2b+
-z+Oa9FcaMB8GA1UdIwQYMBaAFHPcQP74j/S93rBjMK8FC2xOmVR/MD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAQTzK1ohnhvjcNas30ECW
-e05wKmvMFTH9BoesgW2JzmayJnO8cT6vvrK61bylt2QMfTGbDOEMcxQM4P6V08od
-0VGK+7HhjWhYMFGmL4ZXYaYgfB8MfxTH/vqIFHvZQVwg2hY8zne47nwz2M8ubuND
-AQAKwByg62s2oNa9bpGp4Y2Nsk4S0/pWhL7rZdid4sfUNqJ+uLLUXC/CRx7Kev20
-MDpZGY3KfkRlhpct9GU78BJL0HRI+d3T04mXg8ZMu9rnzudek/NRTCKVMVmpPYLs
-jUyOREJfE9BWwjXhBxFtI5I83rE+HE4O48YGCeHcuEyJgjU8UWAfBmUROYu0IATw
-kA==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:d5:4a:96:98:34:e1:a8:92:88:9a:0c:d0:b7:e3:
- a0:dc:71:4b:32:cd:59:a1:b9:9c:d5:e5:30:1b:ad:
- 7e:41:7f:e7:39:81:25:d1:e7:66:c2:5f:79:80:ea:
- ff:6b:ef:b9:95:9e:8b:a0:0c:6a:b6:c8:4b:50:2c:
- 7d:f1:ad:46:ed:9a:7c:7d:6a:65:70:de:c2:45:7e:
- 1b:28:af:dc:eb:3d:bb:4c:98:a9:8c:b3:a3:35:a1:
- 2b:cd:bb:8e:2a:2b:74:6d:0c:91:72:36:c2:2f:0e:
- 46:2a:77:34:ab:98:f8:28:c9:02:42:78:2f:b2:e0:
- 9a:0d:ae:03:94:c0:31:79:1e:72:ce:8b:7c:21:c8:
- d5:1c:9b:94:04:29:ce:1c:5f:22:e3:f0:20:62:2b:
- 7d:7d:c2:fa:29:5c:8b:2a:dd:0f:08:31:49:58:7d:
- 85:76:21:b4:46:0e:d8:26:dc:26:f9:0a:9b:58:a2:
- b8:29:b4:df:c0:4e:10:56:28:96:02:54:7c:e9:a3:
- 3f:84:12:6a:89:ed:f0:0d:a0:03:54:0c:b2:33:6d:
- 1b:a7:84:f2:a0:b0:57:5e:4b:c1:2f:6d:e9:22:52:
- 50:b1:3b:a7:7d:ee:a7:dc:6e:6a:bd:b6:a6:ea:66:
- f8:1f:30:60:18:d8:5b:a6:dd:9d:9b:d3:4e:2b:0a:
- c4:0b
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 73:DC:40:FE:F8:8F:F4:BD:DE:B0:63:30:AF:05:0B:6C:4E:99:54:7F
- X509v3 Authority Key Identifier:
- keyid:6C:05:B0:A0:A8:03:A4:A1:90:D1:A5:74:D2:13:D9:2E:57:83:36:73
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints:
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 81:08:b8:48:94:05:02:aa:61:ea:32:48:55:02:31:f6:e0:5d:
- 05:6f:32:9b:6a:a0:3b:6f:0e:1d:2a:01:1a:14:20:a2:1e:23:
- b4:70:61:86:55:b5:4c:5b:61:3f:dd:1e:38:a4:98:3f:bd:61:
- e4:1e:56:54:ed:0e:51:65:6c:73:af:99:86:fc:a7:50:48:87:
- 95:6f:5a:93:0d:c9:7a:ff:fb:39:d1:f4:40:2c:fe:1f:28:aa:
- 85:cf:12:bd:7b:df:2b:12:56:4a:91:4e:e4:80:00:52:4c:bb:
- b2:e6:05:27:47:e2:3f:bb:a4:d7:cc:92:c2:27:02:10:50:10:
- 0c:f8:ee:4c:93:90:89:8d:db:8a:f9:05:f1:ec:d7:cf:67:20:
- a4:da:90:e0:38:34:fd:79:9b:6b:04:a8:bd:6f:e8:82:4a:d9:
- 37:49:b3:10:50:e6:c5:56:d9:ac:9b:e8:97:52:41:a1:66:be:
- cb:64:1d:12:0d:86:8b:34:42:26:9a:ad:c3:8a:14:ff:35:0d:
- 82:8f:96:e0:af:b7:e7:20:30:3e:b3:fe:57:4a:80:5e:53:8b:
- ec:15:ca:a8:db:b7:c6:87:b7:ab:81:8b:42:23:4a:74:9c:9e:
- 59:b8:3c:8d:0e:d2:f3:9d:79:45:9a:0e:fd:8c:6b:9e:b5:c8:
- e7:03:64:79
------BEGIN CERTIFICATE-----
-MIIDajCCAlKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UqWmDTh
-qJKImgzQt+Og3HFLMs1Zobmc1eUwG61+QX/nOYEl0edmwl95gOr/a++5lZ6LoAxq
-tshLUCx98a1G7Zp8fWplcN7CRX4bKK/c6z27TJipjLOjNaErzbuOKit0bQyRcjbC
-Lw5GKnc0q5j4KMkCQngvsuCaDa4DlMAxeR5yzot8IcjVHJuUBCnOHF8i4/AgYit9
-fcL6KVyLKt0PCDFJWH2FdiG0Rg7YJtwm+QqbWKK4KbTfwE4QViiWAlR86aM/hBJq
-ie3wDaADVAyyM20bp4TyoLBXXkvBL23pIlJQsTunfe6n3G5qvbam6mb4HzBgGNhb
-pt2dm9NOKwrECwIDAQABo4HIMIHFMB0GA1UdDgQWBBRz3ED++I/0vd6wYzCvBQts
-TplUfzAfBgNVHSMEGDAWgBRsBbCgqAOkoZDRpXTSE9kuV4M2czA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAIEI
-uEiUBQKqYeoySFUCMfbgXQVvMptqoDtvDh0qARoUIKIeI7RwYYZVtUxbYT/dHjik
-mD+9YeQeVlTtDlFlbHOvmYb8p1BIh5VvWpMNyXr/+znR9EAs/h8oqoXPEr173ysS
-VkqRTuSAAFJMu7LmBSdH4j+7pNfMksInAhBQEAz47kyTkImN24r5BfHs189nIKTa
-kOA4NP15m2sEqL1v6IJK2TdJsxBQ5sVW2ayb6JdSQaFmvstkHRINhos0QiaarcOK
-FP81DYKPluCvt+cgMD6z/ldKgF5Ti+wVyqjbt8aHt6uBi0IjSnScnlm4PI0O0vOd
-eUWaDv2Ma561yOcDZHk=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b6:f1:d2:f8:c9:10:d5:cf:0c:55:ce:8c:38:a2:
- 8f:f5:f1:cf:20:85:56:92:df:42:8c:5c:1a:db:8e:
- 1d:2e:b4:b3:95:72:e4:67:76:7c:c5:61:62:2b:cf:
- 97:f7:84:29:80:ff:df:e8:e7:da:f6:05:11:1d:40:
- 1e:73:76:ff:e4:eb:fa:45:59:20:d9:35:cb:c7:4f:
- 2b:49:2a:61:7c:45:a1:fe:da:8c:89:05:38:84:ab:
- cb:0b:c9:36:3b:e5:3e:31:5e:0b:a6:27:63:b1:c2:
- 34:88:3a:e5:e3:43:93:0b:46:69:03:dd:31:16:65:
- 18:6e:64:4c:84:e4:a1:37:6b:15:ef:f3:8f:57:e8:
- 57:f6:a8:86:62:9b:92:d0:67:d3:ed:0f:89:d3:4e:
- 09:aa:e8:74:ab:ce:4b:51:63:52:55:f1:24:9d:42:
- 70:cb:14:0f:e3:b4:7f:ba:6a:3c:87:27:eb:3b:82:
- 64:99:6a:f9:be:20:5a:9e:b9:8a:8b:ab:94:ed:f3:
- 33:eb:ea:42:5c:7e:20:df:f4:9d:82:8f:ac:8e:52:
- 99:06:db:d0:9f:01:38:e7:b9:0c:d2:b4:ca:7f:74:
- 03:e2:f7:0b:0e:a9:40:14:6c:7f:1b:15:00:77:0a:
- 98:76:ee:bd:62:24:f6:a7:8b:d4:7e:4b:8d:c9:eb:
- 04:a7
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 6C:05:B0:A0:A8:03:A4:A1:90:D1:A5:74:D2:13:D9:2E:57:83:36:73
- X509v3 Authority Key Identifier:
- keyid:6C:05:B0:A0:A8:03:A4:A1:90:D1:A5:74:D2:13:D9:2E:57:83:36:73
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 52:82:fe:3f:2b:71:41:fd:4c:9b:db:c5:b1:60:72:a7:cf:f4:
- 29:91:36:0f:ce:92:72:95:3e:34:ab:84:0c:af:23:e8:e1:28:
- 35:29:c9:c8:78:9a:12:d7:f1:22:1c:21:e1:b0:b4:df:af:36:
- c4:ca:71:2a:6e:6f:4a:d5:65:58:31:7a:c2:d1:30:66:e0:0a:
- 61:54:e0:61:97:7b:41:72:58:d9:02:da:22:8b:21:e6:d5:31:
- 4c:d2:3c:11:d8:0d:12:f0:dc:eb:e0:1d:16:3a:74:de:9c:b4:
- b2:bb:69:ed:e1:53:14:9e:1c:06:3f:ff:e7:2f:8a:d1:f6:37:
- 89:76:b2:61:60:5f:48:ce:a3:8f:e0:b5:6f:92:18:21:e4:a8:
- 1f:12:70:86:54:2a:da:78:3d:5d:3c:13:b8:b4:7f:a5:81:f0:
- 55:cf:ea:56:b4:0a:8a:ca:2b:ca:be:08:9e:a6:4c:12:99:5f:
- 23:93:08:58:70:8f:c8:fb:88:11:fe:d6:16:c7:a3:3b:1f:6b:
- 78:b0:05:29:9f:7d:4c:01:ba:ed:8a:5f:a8:38:e9:a4:c2:44:
- ce:e8:37:1d:d8:1f:16:e4:ef:84:bb:1f:4b:3a:b0:9a:00:57:
- aa:ba:52:1c:f4:da:f7:69:5d:ef:8d:35:ef:5c:03:fa:8d:87:
- fc:92:60:28
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbx0vjJENXPDFXOjDii
-j/XxzyCFVpLfQoxcGtuOHS60s5Vy5Gd2fMVhYivPl/eEKYD/3+jn2vYFER1AHnN2
-/+Tr+kVZINk1y8dPK0kqYXxFof7ajIkFOISrywvJNjvlPjFeC6YnY7HCNIg65eND
-kwtGaQPdMRZlGG5kTITkoTdrFe/zj1foV/aohmKbktBn0+0PidNOCarodKvOS1Fj
-UlXxJJ1CcMsUD+O0f7pqPIcn6zuCZJlq+b4gWp65iourlO3zM+vqQlx+IN/0nYKP
-rI5SmQbb0J8BOOe5DNK0yn90A+L3Cw6pQBRsfxsVAHcKmHbuvWIk9qeL1H5Ljcnr
-BKcCAwEAAaOByzCByDAdBgNVHQ4EFgQUbAWwoKgDpKGQ0aV00hPZLleDNnMwHwYD
-VR0jBBgwFoAUbAWwoKgDpKGQ0aV00hPZLleDNnMwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBSgv4/K3FB
-/Uyb28WxYHKnz/QpkTYPzpJylT40q4QMryPo4Sg1KcnIeJoS1/EiHCHhsLTfrzbE
-ynEqbm9K1WVYMXrC0TBm4AphVOBhl3tBcljZAtoiiyHm1TFM0jwR2A0S8Nzr4B0W
-OnTenLSyu2nt4VMUnhwGP//nL4rR9jeJdrJhYF9IzqOP4LVvkhgh5KgfEnCGVCra
-eD1dPBO4tH+lgfBVz+pWtAqKyivKvgiepkwSmV8jkwhYcI/I+4gR/tYWx6M7H2t4
-sAUpn31MAbrtil+oOOmkwkTO6Dcd2B8W5O+Eux9LOrCaAFequlIc9Nr3aV3vjTXv
-XAP6jYf8kmAo
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-U1VDQ0VTUw==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem b/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem
deleted file mode 100644
index 016f94e..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem
+++ /dev/null
@@ -1,278 +0,0 @@
-[Created by: generate-intermediary-lacks-basic-constraints.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-lacks the basic constraints extension, and hence is expected to fail validation
-(RFC 5280 requires v3 signing certificates have a BasicConstaints).
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:f3:d6:19:96:48:0c:01:e2:21:3d:98:21:52:df:
- 5a:79:95:01:e5:c2:ab:77:e4:7b:10:17:64:75:a4:
- ca:b6:69:cc:a9:4a:1d:b6:7f:a0:16:89:32:21:c2:
- 2a:c2:58:28:d2:f3:ef:a5:2d:81:92:47:17:d5:61:
- 65:ab:43:22:ce:59:5b:20:31:be:6e:84:23:19:d5:
- 7e:a8:70:50:6c:de:06:b8:58:09:97:fd:02:98:31:
- 2d:3b:ab:1b:4a:82:6c:28:ab:c5:a3:6b:ea:40:2b:
- 48:02:73:e4:ce:ea:f6:3b:6a:80:1f:5b:59:30:86:
- 1b:5e:64:61:b5:94:d2:f0:c8:bb:88:b1:90:05:1a:
- e8:e6:97:dc:7d:e8:53:c8:9f:88:09:69:82:1f:1e:
- e2:d1:70:f3:85:06:63:18:0a:d2:f1:71:a3:25:a3:
- 42:76:3a:5e:02:78:e6:7a:c6:a4:82:dd:79:35:5a:
- da:8e:37:92:82:bf:01:13:1b:6e:52:97:97:32:f1:
- b2:4e:95:bc:55:89:61:61:73:b4:64:30:b1:89:87:
- 51:17:29:f3:67:de:5b:99:ee:47:71:07:8c:d5:17:
- 55:e0:70:bc:b6:06:6e:eb:7a:c6:69:69:97:e1:3d:
- 1d:be:93:da:a0:fa:cb:2f:f0:ed:5c:da:18:0e:67:
- 89:8d
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- FD:C8:4E:91:CD:73:65:1D:13:F9:EC:F0:91:13:F1:D0:01:AD:1E:7C
- X509v3 Authority Key Identifier:
- keyid:60:E7:1E:8E:53:95:1F:8F:00:D1:F7:9F:36:01:26:15:86:53:0E:F2
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 88:1d:e7:e6:1e:4b:93:a9:79:59:0e:10:43:1e:f7:79:a4:c7:
- 68:55:81:b6:b4:6d:b0:5b:b6:46:13:8b:4e:1c:d4:79:17:b1:
- 71:46:b6:69:21:92:fa:bf:bd:76:cc:6c:b1:04:58:28:41:79:
- 34:4f:09:e7:17:5c:d0:ac:fc:c5:2e:1e:5c:31:ca:ed:55:ea:
- df:4a:43:9a:72:37:0a:8a:69:dd:4e:e9:a3:ef:dd:48:45:41:
- 7b:55:e3:d1:98:69:a5:ec:0b:43:32:24:da:33:cd:fd:35:74:
- 17:81:b1:61:37:b1:12:5d:51:86:e6:a2:08:e5:c7:99:aa:f7:
- 23:c4:5f:83:c0:59:9c:36:f9:a0:4c:03:f7:40:42:fb:90:39:
- 5a:45:e5:e2:94:a3:58:c2:a1:d8:c9:aa:3e:83:98:b0:32:a1:
- 85:9a:b1:34:c7:67:a4:03:67:6e:5b:d7:83:b8:92:0f:af:81:
- b5:00:50:c4:0f:f6:bb:cd:7d:0f:a8:cd:28:bb:48:b8:32:82:
- ef:d1:cf:96:74:e4:25:74:ce:5e:4c:75:d2:80:55:a3:6b:a6:
- 76:eb:aa:3e:2b:55:d3:c9:bd:2b:32:d3:1d:01:00:cb:8d:c4:
- c0:b9:29:0b:10:e5:ab:34:2f:30:63:29:df:a8:4f:b3:28:dd:
- 0b:8c:ea:14
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz1hmW
-SAwB4iE9mCFS31p5lQHlwqt35HsQF2R1pMq2acypSh22f6AWiTIhwirCWCjS8++l
-LYGSRxfVYWWrQyLOWVsgMb5uhCMZ1X6ocFBs3ga4WAmX/QKYMS07qxtKgmwoq8Wj
-a+pAK0gCc+TO6vY7aoAfW1kwhhteZGG1lNLwyLuIsZAFGujml9x96FPIn4gJaYIf
-HuLRcPOFBmMYCtLxcaMlo0J2Ol4CeOZ6xqSC3Xk1WtqON5KCvwETG25Sl5cy8bJO
-lbxViWFhc7RkMLGJh1EXKfNn3luZ7kdxB4zVF1XgcLy2Bm7resZpaZfhPR2+k9qg
-+ssv8O1c2hgOZ4mNAgMBAAGjgekwgeYwHQYDVR0OBBYEFP3ITpHNc2UdE/ns8JET
-8dABrR58MB8GA1UdIwQYMBaAFGDnHo5TlR+PANH3nzYBJhWGUw7yMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAiB3n5h5Lk6l5WQ4QQx73
-eaTHaFWBtrRtsFu2RhOLThzUeRexcUa2aSGS+r+9dsxssQRYKEF5NE8J5xdc0Kz8
-xS4eXDHK7VXq30pDmnI3Copp3U7po+/dSEVBe1Xj0ZhppewLQzIk2jPN/TV0F4Gx
-YTexEl1RhuaiCOXHmar3I8Rfg8BZnDb5oEwD90BC+5A5WkXl4pSjWMKh2MmqPoOY
-sDKhhZqxNMdnpANnblvXg7iSD6+BtQBQxA/2u819D6jNKLtIuDKC79HPlnTkJXTO
-Xkx10oBVo2umduuqPitV08m9KzLTHQEAy43EwLkpCxDlqzQvMGMp36hPsyjdC4zq
-FA==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:a0:8f:6c:dd:c5:0d:76:a9:8a:da:5d:9f:94:cf:
- 9a:18:cd:32:ee:e1:c3:88:29:0d:40:7d:8b:37:9c:
- 18:b9:ed:11:81:5b:cc:8c:7c:4a:f3:e2:b9:eb:f7:
- 3c:74:5a:5c:78:37:e3:7e:a8:b9:34:d7:da:d2:dc:
- 52:de:c6:bb:ca:cd:39:c3:ea:8e:84:1b:e5:ad:4b:
- 67:1b:70:bd:70:0e:5e:20:95:37:bf:ae:d1:f4:b0:
- 97:c0:8a:d3:e5:2a:04:d8:eb:1d:c8:f0:95:1b:25:
- d4:49:ae:d4:5f:d9:bc:ea:19:2d:38:d3:d2:c4:8b:
- 77:37:45:ae:f9:70:b2:43:93:85:06:58:e0:3e:38:
- 11:32:d2:bc:a5:d4:df:09:2d:e9:c4:16:a7:f9:5b:
- 25:8d:57:f7:bf:01:4e:c8:25:b4:f8:5d:33:1d:7a:
- 04:4b:9d:fe:71:d4:65:78:4b:8d:52:ef:04:80:d4:
- 45:18:1d:d8:53:8e:2a:e8:23:3f:14:a4:b4:f1:00:
- ff:30:be:06:c5:61:ac:13:e8:cb:4c:ef:77:f7:6b:
- 1d:da:5a:d4:7f:f8:5a:87:cb:4b:45:05:8c:06:73:
- 7b:65:d5:71:c9:35:c7:6e:07:ce:0b:e2:54:e1:43:
- f0:da:a9:51:b8:ad:fe:da:de:29:8c:5f:2d:40:06:
- 7f:39
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 60:E7:1E:8E:53:95:1F:8F:00:D1:F7:9F:36:01:26:15:86:53:0E:F2
- X509v3 Authority Key Identifier:
- keyid:73:D9:03:F6:54:EA:FC:42:DA:77:EC:19:89:AD:6D:D2:A3:3E:E9:FD
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- Signature Algorithm: sha256WithRSAEncryption
- 43:31:7d:91:39:1d:8a:88:6c:d2:2d:36:b1:92:53:1d:18:24:
- e9:42:27:c3:d3:f1:77:69:6f:67:7b:39:46:32:fb:36:a1:8d:
- 07:ee:16:6b:ac:09:e3:78:38:7a:a7:4b:fe:3f:81:eb:f2:85:
- aa:d6:3e:5a:68:57:e3:98:0d:ae:ee:45:84:d1:ed:6d:9c:78:
- fe:63:50:94:55:5e:b5:41:ef:c9:16:ed:4f:38:03:cb:73:3c:
- 79:c1:c4:0c:c1:95:43:11:49:c0:bc:7e:9a:6a:05:d2:43:c4:
- 66:72:66:57:69:46:ed:a7:10:af:bf:e9:bb:48:72:4b:00:a2:
- 46:78:38:68:dd:6b:a9:ac:62:70:4b:0b:f3:29:fa:a7:a2:42:
- 4b:d7:88:1f:97:1f:71:60:20:82:89:d6:3a:60:d5:4b:08:28:
- 6a:6a:97:2e:c9:93:d8:a7:32:b7:e1:68:be:07:7a:3c:76:3b:
- 2c:1b:10:17:4c:c9:ea:ee:48:c9:ad:ac:2e:61:dd:16:eb:62:
- 1e:33:1d:6c:8a:b4:56:0f:3d:04:35:f3:8f:d0:12:f9:66:8d:
- 39:95:e9:44:41:32:7e:f3:17:2e:58:c9:0c:23:b1:e3:db:f7:
- ed:da:bd:94:0e:00:27:34:3d:3d:c6:48:d8:e4:a3:66:57:d9:
- 5e:13:3e:59
------BEGIN CERTIFICATE-----
-MIIDXDCCAkSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI9s3cUN
-dqmK2l2flM+aGM0y7uHDiCkNQH2LN5wYue0RgVvMjHxK8+K56/c8dFpceDfjfqi5
-NNfa0txS3sa7ys05w+qOhBvlrUtnG3C9cA5eIJU3v67R9LCXwIrT5SoE2OsdyPCV
-GyXUSa7UX9m86hktONPSxIt3N0Wu+XCyQ5OFBljgPjgRMtK8pdTfCS3pxBan+Vsl
-jVf3vwFOyCW0+F0zHXoES53+cdRleEuNUu8EgNRFGB3YU44q6CM/FKS08QD/ML4G
-xWGsE+jLTO9392sd2lrUf/hah8tLRQWMBnN7ZdVxyTXHbgfOC+JU4UPw2qlRuK3+
-2t4pjF8tQAZ/OQIDAQABo4G6MIG3MB0GA1UdDgQWBBRg5x6OU5UfjwDR9582ASYV
-hlMO8jAfBgNVHSMEGDAWgBRz2QP2VOr8Qtp37BmJrW3Soz7p/TA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IBAQBDMX2ROR2KiGzSLTaxklMd
-GCTpQifD0/F3aW9nezlGMvs2oY0H7hZrrAnjeDh6p0v+P4Hr8oWq1j5aaFfjmA2u
-7kWE0e1tnHj+Y1CUVV61Qe/JFu1POAPLczx5wcQMwZVDEUnAvH6aagXSQ8RmcmZX
-aUbtpxCvv+m7SHJLAKJGeDho3WuprGJwSwvzKfqnokJL14gflx9xYCCCidY6YNVL
-CChqapcuyZPYpzK34Wi+B3o8djssGxAXTMnq7kjJrawuYd0W62IeMx1sirRWDz0E
-NfOP0BL5Zo05lelEQTJ+8xcuWMkMI7Hj2/ft2r2UDgAnND09xkjY5KNmV9leEz5Z
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:ea:c6:b8:66:62:c2:1a:2a:7d:83:ca:b2:7b:11:
- e4:92:4a:b8:3a:39:35:73:aa:89:55:7d:f4:ec:40:
- 4b:2c:c7:56:58:ac:9d:25:ef:c3:26:86:98:c4:74:
- a4:3a:94:36:d8:78:7c:1a:f4:f7:5c:a0:56:69:fc:
- 23:c0:a4:06:5f:5b:ce:ea:cb:32:9b:c3:21:89:fd:
- 9f:4e:38:a2:b9:f4:de:af:44:1e:53:02:09:41:44:
- 92:bc:a5:4f:70:86:23:85:48:2a:51:01:70:ab:b0:
- c4:bd:97:3c:2f:d0:2c:3e:9c:be:40:2e:ee:be:f8:
- ed:63:a2:1b:fd:e2:0f:d1:b2:3b:b3:ce:da:84:59:
- 56:bb:77:17:93:ef:c0:b7:b4:11:db:b9:6e:b0:4a:
- 28:55:fb:56:4e:ed:22:b6:e3:4d:5b:ad:6a:af:ff:
- df:33:f9:18:a6:91:0a:b8:89:d3:28:55:18:c7:71:
- 19:32:bc:88:a8:ee:5b:c8:34:84:e5:f5:fe:6e:5e:
- c0:3b:73:9b:a4:bc:4c:6a:8a:5a:31:c0:34:f3:c3:
- 89:e0:57:97:64:01:dd:c2:9f:75:8e:e3:fd:b3:58:
- b5:0b:e3:4d:8f:94:e8:9b:0c:c2:12:af:13:31:30:
- d1:a6:1c:2c:f1:0a:7a:a4:17:e2:2f:6f:73:cb:22:
- 15:67
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 73:D9:03:F6:54:EA:FC:42:DA:77:EC:19:89:AD:6D:D2:A3:3E:E9:FD
- X509v3 Authority Key Identifier:
- keyid:73:D9:03:F6:54:EA:FC:42:DA:77:EC:19:89:AD:6D:D2:A3:3E:E9:FD
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- e0:b7:24:3a:ee:4c:8d:42:9f:b9:52:2b:7d:21:c5:7b:dd:2b:
- bc:6a:5d:86:57:ee:d5:1f:27:e6:e1:08:e3:72:a3:10:2b:97:
- 1b:98:b9:39:18:6e:7f:b8:b0:1c:f1:f5:d9:7e:1d:05:3f:5b:
- f4:cd:1e:66:7f:77:ed:ab:d0:51:b6:ad:6c:a6:66:ab:fc:31:
- a1:ac:ee:66:ae:3b:af:4e:3c:c6:29:07:dc:1a:ac:b5:10:3f:
- 3f:ad:27:1b:bc:32:19:ab:b3:75:62:47:23:d1:b8:60:78:ac:
- 96:0c:4f:b8:31:7b:40:7e:f3:f7:ba:a9:ae:9b:65:ef:c5:e3:
- fc:c8:28:c6:c0:74:48:00:33:48:a4:e6:3c:0c:5b:a0:1e:c2:
- 57:c5:0c:24:34:c3:36:c0:8a:f3:a6:c3:16:24:32:c3:dc:81:
- 76:54:3e:00:68:c8:6a:b6:ee:9f:ab:44:64:64:37:54:ff:1b:
- b9:a5:c2:bf:ff:a5:68:b3:5a:ef:d7:bc:64:39:24:2e:ad:c7:
- a3:9c:ef:60:cb:ab:de:45:f1:40:65:95:01:0c:52:ea:a8:d6:
- 8b:77:e0:2e:1f:2b:4f:a3:bc:b8:80:6b:8d:92:42:66:17:10:
- 4b:d4:b0:2d:8d:4c:77:50:74:83:0e:9a:4c:0d:3b:6b:3d:c6:
- 0a:2e:f6:5c
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOrGuGZiwhoqfYPKsnsR
-5JJKuDo5NXOqiVV99OxASyzHVlisnSXvwyaGmMR0pDqUNth4fBr091ygVmn8I8Ck
-Bl9bzurLMpvDIYn9n044orn03q9EHlMCCUFEkrylT3CGI4VIKlEBcKuwxL2XPC/Q
-LD6cvkAu7r747WOiG/3iD9GyO7PO2oRZVrt3F5PvwLe0Edu5brBKKFX7Vk7tIrbj
-TVutaq//3zP5GKaRCriJ0yhVGMdxGTK8iKjuW8g0hOX1/m5ewDtzm6S8TGqKWjHA
-NPPDieBXl2QB3cKfdY7j/bNYtQvjTY+U6JsMwhKvEzEw0aYcLPEKeqQX4i9vc8si
-FWcCAwEAAaOByzCByDAdBgNVHQ4EFgQUc9kD9lTq/ELad+wZia1t0qM+6f0wHwYD
-VR0jBBgwFoAUc9kD9lTq/ELad+wZia1t0qM+6f0wNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQDgtyQ67kyN
-Qp+5Uit9IcV73Su8al2GV+7VHyfm4QjjcqMQK5cbmLk5GG5/uLAc8fXZfh0FP1v0
-zR5mf3ftq9BRtq1spmar/DGhrO5mrjuvTjzGKQfcGqy1ED8/rScbvDIZq7N1Ykcj
-0bhgeKyWDE+4MXtAfvP3uqmum2XvxeP8yCjGwHRIADNIpOY8DFugHsJXxQwkNMM2
-wIrzpsMWJDLD3IF2VD4AaMhqtu6fq0RkZDdU/xu5pcK//6Vos1rv17xkOSQurcej
-nO9gy6veRfFAZZUBDFLqqNaLd+AuHytPo7y4gGuNkkJmFxBL1LAtjUx3UHSDDppM
-DTtrPcYKLvZc
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem b/net/data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem
deleted file mode 100644
index 6327545..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem
+++ /dev/null
@@ -1,281 +0,0 @@
-[Created by: generate-intermediary-lacks-signing-key-usage.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit.
-Hence validation is expected to fail.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b6:80:03:5a:ee:21:94:59:e3:bf:eb:26:bb:b5:
- 2e:39:80:35:38:e7:7e:1d:e6:17:d2:fb:50:be:d2:
- 03:33:14:ee:1f:a2:f8:78:bb:d0:60:e2:0c:ff:59:
- 80:52:fb:5a:3d:38:2d:26:9e:d6:af:df:f2:ff:49:
- f7:ec:8a:02:2b:51:02:d3:53:f9:6e:2b:ed:68:5e:
- 90:54:03:7b:f7:0c:08:93:59:9f:41:2c:27:05:6c:
- dd:dc:f8:a8:ea:78:c0:6d:a1:c8:11:cd:e8:40:cc:
- 6c:65:db:16:50:20:07:68:00:c0:7f:c5:89:fe:e8:
- 6a:0c:36:6a:ad:5a:ab:40:8e:4c:0e:e9:51:a0:6b:
- 28:b8:df:c0:7c:3c:6c:a7:b8:8b:9e:07:1f:e5:29:
- 01:5b:81:76:ca:53:80:b8:a4:8f:1a:35:66:b7:96:
- 24:ac:fb:44:a1:4c:71:c6:28:6d:91:75:59:1a:bf:
- e4:8e:15:71:43:3f:24:3f:b4:db:a0:2c:5e:af:46:
- 16:65:7e:25:0c:90:5e:16:7b:e3:a6:47:0f:03:fe:
- 31:cc:06:dc:ba:0e:0b:fa:6b:e5:4a:53:11:c4:00:
- 54:d5:76:09:97:12:38:31:12:9d:27:49:e8:4d:01:
- 18:0c:54:b3:c7:a8:c3:fc:60:3f:92:0b:ef:9f:72:
- 8e:59
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 76:E3:64:67:6F:B9:A6:B7:6E:DC:62:12:09:FE:30:0A:19:F4:BF:B3
- X509v3 Authority Key Identifier:
- keyid:5A:C6:0B:DA:37:A3:BB:21:85:17:C5:EF:0C:FA:BF:A9:79:B1:FE:29
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 92:d5:77:f8:65:61:e9:66:0d:f7:00:9b:46:28:26:52:37:9f:
- 3c:15:33:01:95:61:b9:0c:a1:c3:e7:f5:09:6a:4c:ba:0f:3b:
- 80:3a:65:c3:22:e7:9d:e7:4d:c3:ca:3a:bc:88:98:6c:a3:8e:
- 56:4e:64:98:b7:85:a7:aa:d3:e8:9a:b3:e4:2f:7d:18:bf:74:
- c7:29:d9:51:a7:39:4a:4b:e1:94:14:0b:f9:af:e9:89:26:98:
- cb:b2:b7:64:d4:ab:42:f5:68:cb:40:78:72:91:02:13:fe:05:
- 41:68:42:c2:e0:d5:ea:bd:56:52:6f:76:b3:20:f4:e6:39:2a:
- 83:ea:7a:c9:d2:37:4a:45:c4:ad:ac:6a:24:38:6e:fd:d6:ed:
- 4c:42:cf:87:2c:7d:21:e5:18:ee:3a:c0:1e:83:ac:25:70:9a:
- f5:fd:e7:4e:ab:67:0e:5d:00:9f:44:e4:e5:d6:d9:02:43:05:
- 91:c3:66:a6:1f:8a:ce:ae:c8:2b:4d:c6:0e:9e:5f:d7:ff:e7:
- b6:39:a7:f1:19:b0:3a:59:33:6a:72:a6:03:6b:42:e7:f8:07:
- a3:0d:2d:f7:31:c3:f4:e5:cf:8b:24:42:0c:29:40:5a:7d:df:
- 65:81:8c:0f:cb:86:e6:2b:39:26:58:0b:18:b8:4c:87:6c:10:
- 03:0b:7c:c4
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gANa
-7iGUWeO/6ya7tS45gDU4534d5hfS+1C+0gMzFO4fovh4u9Bg4gz/WYBS+1o9OC0m
-ntav3/L/SffsigIrUQLTU/luK+1oXpBUA3v3DAiTWZ9BLCcFbN3c+KjqeMBtocgR
-zehAzGxl2xZQIAdoAMB/xYn+6GoMNmqtWqtAjkwO6VGgayi438B8PGynuIueBx/l
-KQFbgXbKU4C4pI8aNWa3liSs+0ShTHHGKG2RdVkav+SOFXFDPyQ/tNugLF6vRhZl
-fiUMkF4We+OmRw8D/jHMBty6Dgv6a+VKUxHEAFTVdgmXEjgxEp0nSehNARgMVLPH
-qMP8YD+SC++fco5ZAgMBAAGjgekwgeYwHQYDVR0OBBYEFHbjZGdvuaa3btxiEgn+
-MAoZ9L+zMB8GA1UdIwQYMBaAFFrGC9o3o7shhRfF7wz6v6l5sf4pMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAktV3+GVh6WYN9wCbRigm
-UjefPBUzAZVhuQyhw+f1CWpMug87gDplwyLnnedNw8o6vIiYbKOOVk5kmLeFp6rT
-6Jqz5C99GL90xynZUac5SkvhlBQL+a/piSaYy7K3ZNSrQvVoy0B4cpECE/4FQWhC
-wuDV6r1WUm92syD05jkqg+p6ydI3SkXEraxqJDhu/dbtTELPhyx9IeUY7jrAHoOs
-JXCa9f3nTqtnDl0An0Tk5dbZAkMFkcNmph+Kzq7IK03GDp5f1//ntjmn8RmwOlkz
-anKmA2tC5/gHow0t9zHD9OXPiyRCDClAWn3fZYGMD8uG5is5JlgLGLhMh2wQAwt8
-xA==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:9b:71:4d:95:69:ff:1c:81:da:58:66:90:29:ae:
- 15:48:a6:43:09:a2:05:75:ca:16:d1:a5:69:e0:77:
- c8:c1:f4:e5:e2:4d:97:c6:09:e4:e0:98:64:c2:b7:
- 7f:11:5a:ee:7a:3e:c5:d8:24:b0:b8:a2:98:ac:05:
- bd:71:07:71:6a:11:67:17:55:5c:2d:d3:fe:4b:d0:
- e1:f3:d5:08:de:7e:c2:56:ff:e6:95:6f:11:7f:5a:
- 34:e7:0c:1c:e3:82:f6:f4:e1:ed:4e:ce:60:2f:f7:
- 5d:b8:b1:54:f0:c8:aa:28:5d:56:90:24:7b:cf:a7:
- 01:de:d9:63:16:a3:7b:5e:34:c9:8c:35:50:57:fc:
- be:6c:48:70:83:7a:52:d9:19:f8:e8:a2:91:f3:23:
- 34:f3:14:b6:3d:59:e6:86:05:9b:26:ec:14:fa:78:
- d3:91:a4:af:f7:c5:01:15:c0:3c:84:b8:5f:09:62:
- ab:c3:b3:51:df:14:20:47:ee:0b:5f:85:06:42:4d:
- b3:5a:e0:08:14:32:d8:0a:8b:7a:41:f5:0e:34:cc:
- 4a:a3:79:be:6d:b5:cd:d1:b8:e0:71:2a:81:e1:22:
- bc:6c:fe:89:59:97:ee:71:ad:d7:e1:d4:ea:01:85:
- 0a:ae:83:a1:09:65:3c:2e:68:29:e1:3f:b0:c2:c7:
- 90:85
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 5A:C6:0B:DA:37:A3:BB:21:85:17:C5:EF:0C:FA:BF:A9:79:B1:FE:29
- X509v3 Authority Key Identifier:
- keyid:D3:3B:10:26:28:99:EC:09:2A:08:9C:53:7D:24:9F:B1:F1:04:0B:B5
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 53:21:fb:72:d3:86:6c:af:f6:75:07:5c:bc:0c:7a:97:8f:05:
- b8:86:af:ee:af:ca:9b:c0:89:2f:28:cd:79:a7:a3:70:04:37:
- 8b:ca:4d:84:3a:72:d5:9a:2e:f9:85:64:59:5b:7f:7e:b4:bf:
- 09:74:af:fe:f1:d1:8c:47:3a:1b:87:9d:73:ce:a1:de:8f:33:
- f7:ad:b4:7d:83:d5:e2:60:ff:f4:b2:79:ee:6b:fb:db:ae:c5:
- f5:1c:e9:20:9a:b9:71:31:c9:55:02:a1:e1:9b:a6:b7:dd:c0:
- cc:e1:66:02:91:fe:a1:59:67:bf:3b:45:32:20:08:a0:08:66:
- eb:47:2d:db:24:6f:ab:3c:53:9b:96:81:5f:61:4a:fa:bb:70:
- 2a:31:a1:2b:ff:cc:ae:1c:c9:be:e5:a6:f1:6a:6e:b1:3f:4b:
- 30:59:e3:a7:9f:f2:6e:6d:9d:ed:5f:b9:cf:b2:07:66:84:63:
- 53:f4:64:c7:d1:b2:62:63:c6:ec:a2:09:89:c5:bc:75:96:bc:
- d2:a5:86:f7:9c:28:1c:47:45:30:e6:90:87:c6:e3:2b:be:d3:
- 8e:b7:89:30:f3:f3:83:14:f6:56:be:0c:e7:34:6e:6f:b4:f3:
- 0c:17:87:dd:a8:e2:8b:ec:34:24:dc:0c:16:dc:e4:c4:21:da:
- dc:ba:9d:a6
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3FNlWn/
-HIHaWGaQKa4VSKZDCaIFdcoW0aVp4HfIwfTl4k2Xxgnk4Jhkwrd/EVruej7F2CSw
-uKKYrAW9cQdxahFnF1VcLdP+S9Dh89UI3n7CVv/mlW8Rf1o05wwc44L29OHtTs5g
-L/dduLFU8MiqKF1WkCR7z6cB3tljFqN7XjTJjDVQV/y+bEhwg3pS2Rn46KKR8yM0
-8xS2PVnmhgWbJuwU+njTkaSv98UBFcA8hLhfCWKrw7NR3xQgR+4LX4UGQk2zWuAI
-FDLYCot6QfUONMxKo3m+bbXN0bjgcSqB4SK8bP6JWZfuca3X4dTqAYUKroOhCWU8
-Lmgp4T+wwseQhQIDAQABo4HLMIHIMB0GA1UdDgQWBBRaxgvaN6O7IYUXxe8M+r+p
-ebH+KTAfBgNVHSMEGDAWgBTTOxAmKJnsCSoInFN9JJ+x8QQLtTA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgWgMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AFMh+3LThmyv9nUHXLwMepePBbiGr+6vypvAiS8ozXmno3AEN4vKTYQ6ctWaLvmF
-ZFlbf360vwl0r/7x0YxHOhuHnXPOod6PM/ettH2D1eJg//Syee5r+9uuxfUc6SCa
-uXExyVUCoeGbprfdwMzhZgKR/qFZZ787RTIgCKAIZutHLdskb6s8U5uWgV9hSvq7
-cCoxoSv/zK4cyb7lpvFqbrE/SzBZ46ef8m5tne1fuc+yB2aEY1P0ZMfRsmJjxuyi
-CYnFvHWWvNKlhvecKBxHRTDmkIfG4yu+0463iTDz84MU9la+DOc0bm+08wwXh92o
-4ovsNCTcDBbc5MQh2ty6naY=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:99:27:87:07:8d:52:53:4f:bc:b6:55:16:e3:64:
- 12:13:89:32:c4:f9:6f:a2:9c:93:06:fc:4c:a9:4d:
- 09:1a:04:8a:24:58:74:7a:53:ad:d6:c6:29:0e:19:
- f2:cc:1e:02:72:2d:7f:52:4c:3a:88:dd:35:fc:c5:
- e6:d4:41:1a:b0:76:a7:b9:c1:db:d9:7a:a0:56:d8:
- e7:4c:a6:ed:45:ca:99:eb:4c:dd:44:5b:52:79:00:
- 1b:f0:ca:fc:19:c9:39:d7:1c:24:e5:90:f8:77:f7:
- 4a:cd:0c:ec:dc:c5:15:6d:43:de:43:b4:f9:03:b9:
- fa:b9:8f:4f:b4:e2:9f:dd:e8:d5:af:9f:ab:79:ce:
- 32:2f:be:04:85:e8:2f:5e:91:26:b5:08:a1:ef:11:
- f5:20:28:8d:09:9f:4e:b9:5a:ef:cf:45:b3:aa:6e:
- 14:1b:fe:1e:c3:4b:39:ad:76:9a:58:b5:be:c4:ae:
- ce:0e:03:ef:8e:5d:a7:03:00:e7:ed:88:0e:97:8e:
- 2d:bd:82:6e:d8:39:7f:c0:7e:4e:c8:1e:eb:60:cb:
- f7:97:dd:fb:79:ee:a8:00:4a:40:b7:1c:2f:1a:59:
- 5a:51:36:a9:aa:0b:97:a0:d0:d5:87:5e:b9:36:73:
- 5c:31:fc:b6:8c:ef:f1:2a:f5:ea:6d:2b:05:d2:8c:
- 60:87
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- D3:3B:10:26:28:99:EC:09:2A:08:9C:53:7D:24:9F:B1:F1:04:0B:B5
- X509v3 Authority Key Identifier:
- keyid:D3:3B:10:26:28:99:EC:09:2A:08:9C:53:7D:24:9F:B1:F1:04:0B:B5
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 2e:84:d8:57:d4:09:e8:0e:8f:b5:9c:8f:48:ef:62:40:49:3e:
- 9a:2e:b9:85:1c:77:f6:94:f3:73:0e:06:58:d4:63:5d:20:90:
- e4:4b:c8:39:64:ca:ec:04:8c:bb:dd:b2:58:81:3e:89:05:1d:
- 42:19:f9:d4:92:24:de:03:6c:69:36:74:95:65:b3:a4:06:83:
- 2b:9f:93:72:57:dc:53:09:be:d2:fb:23:39:df:85:73:9a:c2:
- c4:2d:7e:aa:36:01:dd:4e:a6:4f:fe:61:99:21:9c:89:a4:e7:
- f8:8e:03:92:f6:cc:24:08:db:c8:59:41:6e:ea:c2:c3:4a:54:
- d6:93:e5:3d:17:ff:24:a4:f7:55:2b:3c:d2:40:a7:2a:67:df:
- 67:66:f5:37:ef:aa:20:d2:5a:da:d1:19:08:43:be:ae:11:f3:
- 43:80:8a:ce:15:af:04:c5:b5:10:21:7c:f6:5e:7a:68:8e:59:
- 40:ca:4b:be:c7:59:1b:48:a4:a1:ee:ef:57:b4:5b:d9:93:3b:
- a2:36:3b:b6:f2:54:1e:c8:97:7e:5c:62:99:6c:f6:b0:bf:df:
- af:5a:52:64:99:39:93:20:dc:4f:5e:a6:fe:8d:19:e2:21:1f:
- 95:9d:7c:e8:8e:05:eb:74:ed:60:8e:ee:76:17:a8:40:56:36:
- ac:bf:61:b9
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJknhweNUlNPvLZVFuNk
-EhOJMsT5b6Kckwb8TKlNCRoEiiRYdHpTrdbGKQ4Z8sweAnItf1JMOojdNfzF5tRB
-GrB2p7nB29l6oFbY50ym7UXKmetM3URbUnkAG/DK/BnJOdccJOWQ+Hf3Ss0M7NzF
-FW1D3kO0+QO5+rmPT7Tin93o1a+fq3nOMi++BIXoL16RJrUIoe8R9SAojQmfTrla
-789Fs6puFBv+HsNLOa12mli1vsSuzg4D745dpwMA5+2IDpeOLb2Cbtg5f8B+Tsge
-62DL95fd+3nuqABKQLccLxpZWlE2qaoLl6DQ1YdeuTZzXDH8tozv8Sr16m0rBdKM
-YIcCAwEAAaOByzCByDAdBgNVHQ4EFgQU0zsQJiiZ7AkqCJxTfSSfsfEEC7UwHwYD
-VR0jBBgwFoAU0zsQJiiZ7AkqCJxTfSSfsfEEC7UwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAuhNhX1Ano
-Do+1nI9I72JAST6aLrmFHHf2lPNzDgZY1GNdIJDkS8g5ZMrsBIy73bJYgT6JBR1C
-GfnUkiTeA2xpNnSVZbOkBoMrn5NyV9xTCb7S+yM534VzmsLELX6qNgHdTqZP/mGZ
-IZyJpOf4jgOS9swkCNvIWUFu6sLDSlTWk+U9F/8kpPdVKzzSQKcqZ99nZvU376og
-0lra0RkIQ76uEfNDgIrOFa8ExbUQIXz2XnpojllAyku+x1kbSKSh7u9XtFvZkzui
-Nju28lQeyJd+XGKZbPawv9+vWlJkmTmTINxPXqb+jRniIR+VnXzojgXrdO1gju52
-F6hAVjasv2G5
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem b/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem
deleted file mode 100644
index d1544816..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem
+++ /dev/null
@@ -1,281 +0,0 @@
-[Created by: generate-intermediary-signed-with-md5.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-however is signed using the MD5 hash. Verification is expected to fail because
-MD5 is too weak.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:e9:b3:cb:c4:9b:c5:59:0a:ca:5e:ca:b3:7b:e1:
- bb:ec:3d:4b:10:7b:d4:ee:71:92:1c:c0:24:af:0b:
- c4:5e:55:3b:af:aa:e3:43:a3:d3:ae:1c:db:7b:fe:
- 2a:35:d0:d8:49:77:09:f5:5d:65:9b:84:42:93:da:
- 64:a4:12:f7:f5:6d:91:2f:7c:96:aa:7b:50:09:67:
- 1d:f6:76:a2:4f:64:6c:d7:78:c6:78:f4:5c:83:3a:
- 01:64:3c:15:37:4e:2a:b9:48:2a:ce:42:36:35:59:
- b0:b0:f6:4c:db:21:59:14:87:91:09:d8:18:76:b8:
- fb:0c:b4:e4:ab:5a:24:27:e5:47:9c:c7:eb:d0:74:
- 17:5b:13:9a:f7:96:b7:1d:de:84:8c:6a:fd:c7:92:
- 53:09:72:31:66:aa:54:07:3d:1c:2c:86:e9:68:d8:
- 12:f6:22:ec:37:b5:58:6c:26:fe:79:c5:d0:f7:42:
- 79:f9:ad:7a:3a:f4:0a:52:3e:5a:5b:45:d9:a8:d1:
- 18:35:db:9d:56:81:11:49:f9:77:0d:ff:a7:1e:39:
- 63:14:3b:64:3d:d0:2f:1b:47:c6:ad:6a:a8:d8:c9:
- 09:cd:58:0b:5d:de:ad:aa:56:38:bd:42:0f:f9:c6:
- 9d:c0:da:b0:06:03:a5:3f:43:5f:e1:83:74:cc:a7:
- ab:9f
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- E8:2D:DF:58:DB:57:BD:6D:98:31:15:C9:58:49:E0:02:47:79:10:9D
- X509v3 Authority Key Identifier:
- keyid:0E:AF:B4:0B:04:28:C3:55:B4:F8:2D:EB:A1:62:49:26:60:A2:A7:D8
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- a2:d6:e1:fe:94:8d:78:bc:5b:9e:53:1a:b9:6b:76:32:2e:66:
- 0b:b3:ce:8f:96:9a:33:37:b6:e2:fb:99:56:2e:3b:cb:3d:d3:
- 96:c7:b8:05:9a:00:e4:f4:72:f6:97:b2:b3:72:08:3d:17:59:
- af:98:b3:16:a2:cb:e7:b8:bf:c1:5b:49:92:28:9c:47:bd:29:
- 9e:56:f8:52:67:eb:de:23:69:52:79:32:1f:ba:b5:58:d3:b6:
- 19:58:ac:62:04:a5:29:9a:7b:df:90:ad:c1:b1:42:c4:6c:a6:
- 16:db:af:5e:ee:85:83:9e:c9:02:ba:c6:3c:63:55:93:58:36:
- b4:86:b8:fa:e4:09:6f:98:6f:23:2a:2c:98:04:e4:2c:fd:69:
- 61:b2:36:88:8f:a2:70:ec:2a:47:6d:e0:cb:f8:5c:07:25:71:
- f4:f6:af:50:a7:d7:49:d8:c8:08:4a:09:12:8c:21:bc:d7:54:
- f2:04:fc:f0:33:2f:aa:b1:a7:d3:0a:d0:96:0f:69:7c:a4:a8:
- cd:a5:a6:d3:d2:6a:b1:f2:b1:0a:81:18:68:18:23:c1:6f:9c:
- 40:9f:d2:2d:6d:e2:52:36:05:4e:99:ae:b2:e1:b3:da:40:99:
- 1f:c6:9f:ae:9b:43:1d:e3:db:58:7c:96:b5:b8:cc:b6:b7:e9:
- 1b:57:a0:61
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDps8vE
-m8VZCspeyrN74bvsPUsQe9TucZIcwCSvC8ReVTuvquNDo9OuHNt7/io10NhJdwn1
-XWWbhEKT2mSkEvf1bZEvfJaqe1AJZx32dqJPZGzXeMZ49FyDOgFkPBU3Tiq5SCrO
-QjY1WbCw9kzbIVkUh5EJ2Bh2uPsMtOSrWiQn5Uecx+vQdBdbE5r3lrcd3oSMav3H
-klMJcjFmqlQHPRwshulo2BL2Iuw3tVhsJv55xdD3Qnn5rXo69ApSPlpbRdmo0Rg1
-251WgRFJ+XcN/6ceOWMUO2Q90C8bR8ataqjYyQnNWAtd3q2qVji9Qg/5xp3A2rAG
-A6U/Q1/hg3TMp6ufAgMBAAGjgekwgeYwHQYDVR0OBBYEFOgt31jbV71tmDEVyVhJ
-4AJHeRCdMB8GA1UdIwQYMBaAFA6vtAsEKMNVtPgt66FiSSZgoqfYMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAotbh/pSNeLxbnlMauWt2
-Mi5mC7POj5aaMze24vuZVi47yz3Tlse4BZoA5PRy9peys3IIPRdZr5izFqLL57i/
-wVtJkiicR70pnlb4Umfr3iNpUnkyH7q1WNO2GVisYgSlKZp735CtwbFCxGymFtuv
-Xu6Fg57JArrGPGNVk1g2tIa4+uQJb5hvIyosmATkLP1pYbI2iI+icOwqR23gy/hc
-ByVx9PavUKfXSdjICEoJEowhvNdU8gT88DMvqrGn0wrQlg9pfKSozaWm09JqsfKx
-CoEYaBgjwW+cQJ/SLW3iUjYFTpmusuGz2kCZH8afrptDHePbWHyWtbjMtrfpG1eg
-YQ==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: md5WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:e9:c2:e1:d4:1c:a8:bf:ff:07:7f:17:bf:a4:f7:
- f5:bc:e3:1f:76:32:e2:a3:e4:5c:a2:5d:83:a4:ad:
- c7:19:12:8a:20:dc:5c:d3:db:22:97:e5:59:09:d8:
- 7f:95:bc:79:61:c2:66:d1:69:02:fc:98:02:12:8e:
- f4:4e:63:4d:1f:d0:df:f9:25:f0:86:f0:17:ba:3d:
- 1c:5c:7d:7c:0a:f5:fc:f5:f3:a1:1f:44:45:30:e5:
- f2:02:b8:e2:04:69:50:f7:b8:10:1d:35:92:56:3b:
- 06:42:fc:a7:e5:45:40:b0:0c:2f:2c:61:dd:0e:55:
- cb:23:7d:8b:48:b6:ac:68:b3:e3:3b:fc:07:a4:89:
- 17:3e:e3:fc:74:12:e6:2f:15:b8:78:dc:a2:6b:6b:
- 98:e2:36:f6:69:26:71:21:20:d1:60:4d:44:ea:32:
- fd:54:64:4a:f1:6a:94:f3:51:43:e8:f9:5f:68:9e:
- 03:a8:a8:6c:a2:0e:55:e5:d8:87:ad:62:db:61:5b:
- a8:4b:1a:dc:f3:14:9f:97:24:5c:32:98:e4:9b:8b:
- 1e:32:d4:12:d0:5b:a1:c1:f6:2e:85:42:c4:dc:60:
- 8f:b1:b2:8b:7a:63:3e:ad:95:62:60:2a:0e:88:dc:
- 5c:10:c6:90:ab:6b:75:d2:42:f4:b2:a9:81:5a:d8:
- 0e:41
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 0E:AF:B4:0B:04:28:C3:55:B4:F8:2D:EB:A1:62:49:26:60:A2:A7:D8
- X509v3 Authority Key Identifier:
- keyid:DE:7E:F6:82:CA:37:00:C9:C3:30:07:35:D1:BA:48:C5:9B:B6:2D:A7
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: md5WithRSAEncryption
- 03:a2:90:68:d8:0d:83:e4:1c:83:20:2e:0b:ff:60:1c:01:a9:
- ec:66:71:cd:3b:61:2c:10:95:ab:42:4e:fc:05:bb:40:d3:8c:
- 00:34:72:b3:8f:74:de:21:67:0a:e8:b4:93:3d:c3:a2:a0:a0:
- f0:4b:d9:7d:c6:2b:4f:dd:31:12:ad:72:3c:54:58:5c:21:3f:
- 75:39:46:80:da:f3:20:1d:93:a3:ef:bb:00:91:bd:8d:22:16:
- d9:5e:c7:a1:45:39:1a:76:d9:7d:e6:86:6c:65:0e:29:50:4b:
- 5f:40:ec:79:9c:9a:d0:d9:fa:6a:6a:90:62:db:fa:9e:28:1a:
- 40:e4:b3:45:90:41:26:09:d4:7c:f7:5c:58:ce:c5:67:6a:d1:
- 41:86:73:df:6e:cb:79:70:75:5f:d2:54:53:07:e0:53:d1:45:
- d9:4b:e7:f6:2b:60:fb:56:b4:17:79:be:2a:7e:98:0d:ad:ea:
- d1:79:5d:87:80:65:84:15:61:d8:dd:a8:3c:5f:f0:90:a6:0b:
- d8:c5:ca:d8:8d:fb:2f:1b:f8:a2:4d:ea:33:71:c2:30:a5:3b:
- 56:a4:73:79:51:b7:7a:e7:6c:f7:23:52:48:61:1c:82:54:97:
- 0d:54:e5:80:07:bb:84:d7:ee:90:ee:4d:85:df:f7:34:fb:d3:
- d8:bf:19:7f
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQQFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cLh1Byo
-v/8Hfxe/pPf1vOMfdjLio+Rcol2DpK3HGRKKINxc09sil+VZCdh/lbx5YcJm0WkC
-/JgCEo70TmNNH9Df+SXwhvAXuj0cXH18CvX89fOhH0RFMOXyArjiBGlQ97gQHTWS
-VjsGQvyn5UVAsAwvLGHdDlXLI32LSLasaLPjO/wHpIkXPuP8dBLmLxW4eNyia2uY
-4jb2aSZxISDRYE1E6jL9VGRK8WqU81FD6PlfaJ4DqKhsog5V5diHrWLbYVuoSxrc
-8xSflyRcMpjkm4seMtQS0FuhwfYuhULE3GCPsbKLemM+rZViYCoOiNxcEMaQq2t1
-0kL0sqmBWtgOQQIDAQABo4HLMIHIMB0GA1UdDgQWBBQOr7QLBCjDVbT4LeuhYkkm
-YKKn2DAfBgNVHSMEGDAWgBTefvaCyjcAycMwBzXRukjFm7YtpzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEEBQADggEB
-AAOikGjYDYPkHIMgLgv/YBwBqexmcc07YSwQlatCTvwFu0DTjAA0crOPdN4hZwro
-tJM9w6KgoPBL2X3GK0/dMRKtcjxUWFwhP3U5RoDa8yAdk6PvuwCRvY0iFtlex6FF
-ORp22X3mhmxlDilQS19A7HmcmtDZ+mpqkGLb+p4oGkDks0WQQSYJ1Hz3XFjOxWdq
-0UGGc99uy3lwdV/SVFMH4FPRRdlL5/YrYPtWtBd5vip+mA2t6tF5XYeAZYQVYdjd
-qDxf8JCmC9jFytiN+y8b+KJN6jNxwjClO1akc3lRt3rnbPcjUkhhHIJUlw1U5YAH
-u4TX7pDuTYXf9zT709i/GX8=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:c6:d0:57:18:e0:d7:81:35:67:b0:a4:a1:5b:fd:
- 8f:32:51:4f:d9:76:67:02:84:59:10:4d:4a:b9:ed:
- 1d:ef:fe:5e:d4:69:c1:24:e3:1f:91:08:d8:15:de:
- 68:ca:dc:c7:fc:ea:6f:27:a5:60:45:af:0f:f1:44:
- b8:d7:c7:96:70:d9:e1:dd:84:aa:ea:65:52:62:67:
- e1:06:cd:d9:18:ad:eb:a3:0a:60:4b:cd:76:71:44:
- 26:3c:22:c7:44:74:77:31:50:a5:b3:c4:ef:ac:14:
- 1e:ea:ff:74:a0:7b:e4:7a:ca:87:dd:45:0b:bc:75:
- 4b:92:44:0f:e8:f3:d2:6d:3e:47:4b:cf:77:a2:e9:
- ff:f9:e2:79:9f:88:d7:ff:e5:cc:93:91:91:24:e1:
- 9f:ef:a4:13:15:cc:03:3e:06:ba:9d:4c:de:52:b9:
- de:c6:57:af:76:d8:9e:4b:37:11:1d:52:57:fe:af:
- 8e:11:1d:fd:a8:55:3b:84:c9:10:ac:dc:51:62:e8:
- c8:54:5b:3d:60:0b:8e:ad:66:2a:26:92:81:c6:a1:
- be:31:51:d3:28:b1:9e:86:67:ca:c4:f2:88:47:1c:
- 03:c9:f8:ee:f8:87:4c:b4:9e:24:9d:c0:48:d8:ec:
- a7:8b:52:7a:d0:65:cf:06:2a:63:7f:1c:c9:15:44:
- 48:01
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- DE:7E:F6:82:CA:37:00:C9:C3:30:07:35:D1:BA:48:C5:9B:B6:2D:A7
- X509v3 Authority Key Identifier:
- keyid:DE:7E:F6:82:CA:37:00:C9:C3:30:07:35:D1:BA:48:C5:9B:B6:2D:A7
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 8c:97:4a:f9:c2:c2:57:2a:4b:a1:69:03:9e:c1:17:fb:4c:f2:
- 8e:36:0f:e2:c4:f6:4d:42:9c:ac:7f:67:7b:fd:7e:fd:14:3b:
- fb:df:08:3d:0e:23:fa:d1:47:d5:68:14:b2:1f:5c:40:db:fe:
- 8d:e6:fc:17:3a:c6:2f:5e:96:1a:3c:32:fa:63:c5:e5:cf:fc:
- db:6b:59:71:b8:f7:d2:70:78:cc:7f:8c:54:5f:c6:69:ba:98:
- 77:92:32:b3:a1:18:84:ed:3c:93:3f:12:93:64:e6:7f:92:8a:
- 4f:db:42:1d:c0:7c:0d:4a:d6:ef:ca:05:a3:5b:26:47:79:7e:
- 91:b0:e6:35:92:91:e2:2f:4d:18:17:44:b5:a7:de:8a:92:86:
- 4c:0c:de:0e:23:53:c0:30:1f:7a:c5:70:59:94:19:02:8a:f1:
- 23:f9:88:fb:09:af:b8:90:d6:c6:d5:46:92:74:44:8b:8e:66:
- b1:79:cb:82:3d:80:cc:cf:d9:03:5a:a3:71:a6:f5:f0:75:9f:
- 79:38:f0:fe:66:e5:d1:a1:9d:0a:48:e1:45:a1:42:fb:d3:16:
- 53:91:b9:c9:0d:27:8a:34:e0:59:8d:4f:e0:e7:7d:7d:0c:e6:
- ec:a1:ea:66:23:77:55:fc:f1:d0:13:32:1d:9e:0c:fd:3b:38:
- 1d:dc:2c:2b
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbQVxjg14E1Z7CkoVv9
-jzJRT9l2ZwKEWRBNSrntHe/+XtRpwSTjH5EI2BXeaMrcx/zqbyelYEWvD/FEuNfH
-lnDZ4d2EquplUmJn4QbN2Rit66MKYEvNdnFEJjwix0R0dzFQpbPE76wUHur/dKB7
-5HrKh91FC7x1S5JED+jz0m0+R0vPd6Lp//nieZ+I1//lzJORkSThn++kExXMAz4G
-up1M3lK53sZXr3bYnks3ER1SV/6vjhEd/ahVO4TJEKzcUWLoyFRbPWALjq1mKiaS
-gcahvjFR0yixnoZnysTyiEccA8n47viHTLSeJJ3ASNjsp4tSetBlzwYqY38cyRVE
-SAECAwEAAaOByzCByDAdBgNVHQ4EFgQU3n72gso3AMnDMAc10bpIxZu2LacwHwYD
-VR0jBBgwFoAU3n72gso3AMnDMAc10bpIxZu2LacwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCMl0r5wsJX
-KkuhaQOewRf7TPKONg/ixPZNQpysf2d7/X79FDv73wg9DiP60UfVaBSyH1xA2/6N
-5vwXOsYvXpYaPDL6Y8Xlz/zba1lxuPfScHjMf4xUX8Zpuph3kjKzoRiE7TyTPxKT
-ZOZ/kopP20IdwHwNStbvygWjWyZHeX6RsOY1kpHiL00YF0S1p96KkoZMDN4OI1PA
-MB96xXBZlBkCivEj+Yj7Ca+4kNbG1UaSdESLjmaxecuCPYDMz9kDWqNxpvXwdZ95
-OPD+ZuXRoZ0KSOFFoUL70xZTkbnJDSeKNOBZjU/g5319DObsoepmI3dV/PHQEzId
-ngz9Ozgd3Cwr
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem
deleted file mode 100644
index 7e7045c..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem
+++ /dev/null
@@ -1,284 +0,0 @@
-[Created by: generate-intermediary-unknown-critical-extension.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as critical.
-Verifying this certificate chain is expected to fail because there is an
-unrecognized critical extension.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:cf:51:a6:c4:9e:d4:eb:c4:eb:d6:57:2b:80:e5:
- da:cd:db:3a:cf:b0:43:c5:18:9c:4e:b7:c4:9c:18:
- 73:e6:85:e6:00:00:76:25:9f:5d:8f:28:19:f2:05:
- 02:a9:5c:75:65:12:38:d7:7a:eb:e3:46:42:07:3d:
- 3b:c4:5d:32:7b:26:fb:1e:69:cb:36:ca:c2:da:2f:
- b4:ec:e3:bf:5e:9a:d3:8a:6d:3e:f2:53:dc:da:40:
- 3c:fe:fd:02:36:32:f5:b2:17:bf:05:97:f0:3e:8b:
- b7:15:a2:10:be:27:79:62:30:82:3e:57:60:60:13:
- 8e:fc:33:8e:72:cd:d9:d9:50:e9:62:04:8c:e4:db:
- f8:cf:1b:da:a2:f7:ee:4c:b8:7f:b2:bf:92:c9:2c:
- 44:a7:b5:ad:b9:75:06:c0:24:5a:0b:44:ca:4f:af:
- f6:2f:c2:00:12:bb:7b:0c:c4:54:47:f1:73:53:64:
- 72:40:9d:51:40:b3:21:73:ce:82:c5:f3:b7:14:ef:
- 31:50:5b:d5:0b:b7:92:0e:08:5c:ea:ed:73:86:e3:
- b1:6d:63:7f:56:7d:74:3e:3b:90:8c:2f:a2:6e:65:
- b9:4e:38:a3:54:fb:7b:de:69:6f:c0:57:ea:51:c0:
- 09:83:b4:a8:4d:ec:74:a6:ea:31:97:0c:9a:66:b7:
- 58:0f
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 89:EB:AF:F5:F3:C7:53:ED:03:95:5A:DB:94:4A:E0:BF:C3:D2:CE:FA
- X509v3 Authority Key Identifier:
- keyid:21:32:55:0D:16:9C:AD:C4:16:5D:BE:40:67:0D:B6:40:4E:E2:75:60
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 17:7b:87:2f:11:ac:6d:68:03:d3:07:31:20:18:b7:d4:9d:98:
- e4:aa:10:6d:f2:41:2f:3e:cf:1f:50:f9:f9:3f:6e:61:c2:b7:
- dd:e0:f6:5a:d6:66:bb:2d:31:98:6a:12:0a:17:e8:a1:4e:cd:
- fd:c4:ed:3e:01:a3:1c:ef:18:9e:fb:f8:46:c6:1b:ad:a4:ce:
- ba:84:79:a6:84:f0:2c:84:d4:6c:3f:f9:ff:f8:66:f1:9b:82:
- 8c:83:c8:79:5b:bd:f0:dd:e0:e5:76:55:92:97:d2:46:64:ea:
- 3e:99:bc:9d:b8:8f:15:41:f8:3f:1b:c0:df:cd:d5:01:88:74:
- 37:8e:58:f8:ad:7d:75:70:59:98:cc:c4:bd:fc:b9:bd:f5:69:
- fe:09:08:be:ea:e8:f3:ee:53:d8:05:4f:d5:d1:85:dc:7e:58:
- 64:cf:d4:41:c1:d0:ec:c4:2a:ca:ae:39:8e:57:63:e3:03:ff:
- 4f:d4:42:92:ec:ac:e8:f6:83:e5:51:0e:32:2c:6f:2d:15:72:
- 21:37:f0:18:77:3b:97:f5:71:84:1f:07:e0:76:b6:a0:f4:34:
- 16:b9:53:e2:4f:48:45:b6:7d:b3:0f:30:06:e6:89:89:a4:3f:
- e8:4c:2a:9c:1f:9c:91:c9:66:4e:28:39:3d:5b:21:19:03:dc:
- 02:56:69:e9
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUabE
-ntTrxOvWVyuA5drN2zrPsEPFGJxOt8ScGHPmheYAAHYln12PKBnyBQKpXHVlEjjX
-euvjRkIHPTvEXTJ7Jvseacs2ysLaL7Ts479emtOKbT7yU9zaQDz+/QI2MvWyF78F
-l/A+i7cVohC+J3liMII+V2BgE478M45yzdnZUOliBIzk2/jPG9qi9+5MuH+yv5LJ
-LESnta25dQbAJFoLRMpPr/YvwgASu3sMxFRH8XNTZHJAnVFAsyFzzoLF87cU7zFQ
-W9ULt5IOCFzq7XOG47FtY39WfXQ+O5CML6JuZblOOKNU+3veaW/AV+pRwAmDtKhN
-7HSm6jGXDJpmt1gPAgMBAAGjgekwgeYwHQYDVR0OBBYEFInrr/Xzx1PtA5Va25RK
-4L/D0s76MB8GA1UdIwQYMBaAFCEyVQ0WnK3EFl2+QGcNtkBO4nVgMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAF3uHLxGsbWgD0wcxIBi3
-1J2Y5KoQbfJBLz7PH1D5+T9uYcK33eD2WtZmuy0xmGoSChfooU7N/cTtPgGjHO8Y
-nvv4RsYbraTOuoR5poTwLITUbD/5//hm8ZuCjIPIeVu98N3g5XZVkpfSRmTqPpm8
-nbiPFUH4PxvA383VAYh0N45Y+K19dXBZmMzEvfy5vfVp/gkIvuro8+5T2AVP1dGF
-3H5YZM/UQcHQ7MQqyq45jldj4wP/T9RCkuys6PaD5VEOMixvLRVyITfwGHc7l/Vx
-hB8H4Ha2oPQ0FrlT4k9IRbZ9sw8wBuaJiaQ/6EwqnB+ckclmTig5PVshGQPcAlZp
-6Q==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:c7:80:3b:a7:4e:4e:fa:0a:39:4f:5b:5c:af:ba:
- 84:27:6a:8d:34:95:5e:91:93:c8:d0:1f:64:84:5f:
- 25:d9:3b:5d:f9:31:5f:4f:6f:04:be:50:35:09:5e:
- 78:f3:9a:15:b5:27:fa:24:70:04:26:29:08:95:a5:
- dd:b1:ee:4f:ee:d8:a0:59:51:ab:75:70:c2:7b:42:
- 06:e2:4d:d7:91:ec:e5:e7:f8:34:1e:01:63:45:11:
- 6a:fe:45:3e:e7:16:59:86:e7:4b:91:67:ec:1f:c1:
- 13:a4:62:cb:f6:0d:9b:2b:e5:1e:df:c4:35:f3:94:
- 60:9b:99:e1:54:ce:ff:7d:92:f1:9d:d4:f6:0e:99:
- 8c:dc:7b:b1:95:54:04:6f:40:1c:23:42:50:ab:96:
- f5:9e:93:27:f1:5c:e5:97:9c:c1:e4:ae:a8:cb:f9:
- 42:7e:14:02:e1:32:4b:4d:03:2d:2a:a6:7e:a1:77:
- c3:4e:4e:46:18:1a:95:d7:0d:48:8d:a1:d3:bb:b7:
- 55:07:01:d9:c0:27:fd:f7:ec:61:3a:57:84:b6:91:
- 78:dc:a9:19:a6:d4:83:c5:57:67:bd:b7:a0:6a:ec:
- 7b:83:1e:d9:bf:2f:b7:bf:d6:ce:18:5a:54:cf:8b:
- 1a:fc:5a:03:63:bc:d2:3a:01:db:91:e0:ce:96:19:
- 55:19
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 21:32:55:0D:16:9C:AD:C4:16:5D:BE:40:67:0D:B6:40:4E:E2:75:60
- X509v3 Authority Key Identifier:
- keyid:BA:1F:26:2C:E0:77:F2:16:78:6D:83:49:A1:30:9E:B4:AB:10:6A:22
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- 1.2.3.4: critical
- ....
- Signature Algorithm: sha256WithRSAEncryption
- 02:57:1a:5a:82:9a:29:1e:39:b4:aa:c4:e3:04:2b:6f:1c:0a:
- 79:df:d3:f8:c9:9f:94:b6:c1:7e:e5:47:8d:35:72:e2:09:ce:
- 6f:61:f1:7e:93:f3:37:11:0d:c0:28:05:bc:8d:dc:f8:2a:22:
- 0e:dc:79:b9:71:99:38:f5:c2:81:ac:0b:47:c2:39:96:2e:2b:
- 35:0a:fe:80:fe:50:da:74:03:1c:4b:36:be:4b:23:70:4f:a1:
- 1f:c8:3b:9a:6b:92:3d:61:9b:67:9a:8b:ea:0b:b0:8c:aa:6a:
- 02:fd:27:6f:a8:be:8f:d0:78:f2:84:76:da:e2:c5:10:3c:9f:
- 61:c4:3f:50:8e:40:ac:d8:aa:87:b6:7c:da:42:c5:05:c0:82:
- bc:9f:35:ae:22:34:32:11:71:ab:fd:27:af:ef:42:ec:cd:b7:
- d1:66:14:5f:f1:e5:10:c2:1f:ac:e4:96:1f:a9:9c:5a:ad:97:
- 4d:90:40:df:cb:77:15:ba:d5:f4:76:94:9f:d6:c2:4f:53:60:
- 3b:c3:a3:9c:02:4d:03:28:32:58:3d:0f:62:36:a9:7b:70:d9:
- f8:2b:05:cd:ca:c7:17:68:76:6b:cd:ad:7f:f1:65:a6:d1:be:
- b7:4c:83:bb:0d:5d:98:6e:02:d3:b6:ea:82:b6:44:0d:a1:b2:
- 37:4b:a0:a3
------BEGIN CERTIFICATE-----
-MIIDfTCCAmWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4A7p05O
-+go5T1tcr7qEJ2qNNJVekZPI0B9khF8l2Ttd+TFfT28EvlA1CV5485oVtSf6JHAE
-JikIlaXdse5P7tigWVGrdXDCe0IG4k3Xkezl5/g0HgFjRRFq/kU+5xZZhudLkWfs
-H8ETpGLL9g2bK+Ue38Q185Rgm5nhVM7/fZLxndT2DpmM3HuxlVQEb0AcI0JQq5b1
-npMn8Vzll5zB5K6oy/lCfhQC4TJLTQMtKqZ+oXfDTk5GGBqV1w1IjaHTu7dVBwHZ
-wCf99+xhOleEtpF43KkZptSDxVdnvbegaux7gx7Zvy+3v9bOGFpUz4sa/FoDY7zS
-OgHbkeDOlhlVGQIDAQABo4HbMIHYMB0GA1UdDgQWBBQhMlUNFpytxBZdvkBnDbZA
-TuJ1YDAfBgNVHSMEGDAWgBS6HyYs4HfyFnhtg0mhMJ60qxBqIjA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDgYDKgMEAQH/BAQBAgMEMA0G
-CSqGSIb3DQEBCwUAA4IBAQACVxpagpopHjm0qsTjBCtvHAp539P4yZ+UtsF+5UeN
-NXLiCc5vYfF+k/M3EQ3AKAW8jdz4KiIO3Hm5cZk49cKBrAtHwjmWLis1Cv6A/lDa
-dAMcSza+SyNwT6EfyDuaa5I9YZtnmovqC7CMqmoC/SdvqL6P0HjyhHba4sUQPJ9h
-xD9QjkCs2KqHtnzaQsUFwIK8nzWuIjQyEXGr/Sev70LszbfRZhRf8eUQwh+s5JYf
-qZxarZdNkEDfy3cVutX0dpSf1sJPU2A7w6OcAk0DKDJYPQ9iNql7cNn4KwXNyscX
-aHZrza1/8WWm0b63TIO7DV2YbgLTtuqCtkQNobI3S6Cj
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:9f:42:45:62:cb:c5:f3:07:65:8a:9b:4c:d4:91:
- 4a:66:e6:89:24:24:6f:91:3e:4a:50:63:42:47:e3:
- 67:10:71:ac:f3:81:82:3b:9f:56:7c:6a:36:a6:87:
- be:d5:e6:03:4b:bb:d3:c8:90:6a:6b:1d:4c:16:a1:
- c3:98:58:f7:39:de:90:27:df:40:c5:03:10:b2:b4:
- 1b:cb:28:5d:80:a4:83:60:f2:c0:ac:f5:1f:81:4d:
- 31:84:6f:04:96:7b:26:bf:b6:55:78:33:06:23:65:
- 1c:bc:65:ac:a3:31:27:49:38:ce:92:73:87:a7:b4:
- 53:4b:85:71:29:7a:f5:09:fc:03:9a:90:56:14:b1:
- b7:89:03:c4:61:b6:49:fc:3d:30:62:84:a2:46:66:
- 22:37:32:fd:a3:62:bb:99:62:53:ca:fc:1f:e9:29:
- c6:d4:8c:09:6f:02:d5:de:7c:de:12:d8:00:dd:df:
- 04:94:d4:36:b5:f6:d9:fe:a7:ff:46:e7:07:da:3e:
- d0:e3:ea:90:4c:7c:b7:ff:bc:85:99:d5:1f:46:f5:
- ac:57:e9:09:03:61:8c:0b:9d:a8:82:9c:17:43:27:
- de:80:d2:59:e3:ca:ed:23:41:1a:32:48:83:ca:bd:
- 8e:cb:bf:9c:f0:03:7d:e0:41:ce:72:05:27:59:3c:
- 10:5b
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- BA:1F:26:2C:E0:77:F2:16:78:6D:83:49:A1:30:9E:B4:AB:10:6A:22
- X509v3 Authority Key Identifier:
- keyid:BA:1F:26:2C:E0:77:F2:16:78:6D:83:49:A1:30:9E:B4:AB:10:6A:22
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 70:b4:15:ff:b7:d9:b7:51:10:ce:fa:e5:61:0e:f6:c7:b6:d7:
- be:59:ed:07:d5:77:95:e1:ef:3f:80:9e:99:d2:2c:1b:9a:a7:
- 35:1c:ec:84:9e:ce:27:52:3a:2c:00:06:4d:60:62:aa:4b:a7:
- 61:32:e3:64:f1:96:c7:d2:3f:fe:78:bc:f4:da:76:f9:44:d2:
- 9b:1a:94:1f:44:9a:49:c9:c0:1c:de:a9:63:d0:23:4a:c3:fb:
- 60:45:76:dd:12:ef:c1:95:4f:8e:bd:48:56:b8:f9:74:e2:5c:
- ae:90:5a:19:9e:90:13:0b:97:ff:cd:a9:45:54:68:aa:fa:f6:
- ea:3f:2e:fa:2a:40:48:42:cd:10:cc:c8:e6:a4:34:9d:8f:1c:
- 74:55:58:b2:99:cf:35:40:23:bf:90:5f:4c:60:30:5f:a0:b4:
- d6:0f:4f:42:03:71:82:f7:d3:f5:72:bb:a8:cf:24:ab:10:7e:
- c5:e1:84:a9:7e:25:b1:8a:80:db:ae:0e:49:f1:03:fb:11:1a:
- 63:58:42:7f:73:9b:f3:f8:d6:ae:81:0b:59:ca:98:ec:3d:9c:
- 85:6b:7d:70:e8:c2:04:47:f0:b6:7e:4a:96:70:c9:a8:11:b7:
- 23:54:55:d3:57:c3:7e:47:66:35:91:26:56:fd:37:14:35:a4:
- 6b:29:38:ee
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9CRWLLxfMHZYqbTNSR
-SmbmiSQkb5E+SlBjQkfjZxBxrPOBgjufVnxqNqaHvtXmA0u708iQamsdTBahw5hY
-9znekCffQMUDELK0G8soXYCkg2DywKz1H4FNMYRvBJZ7Jr+2VXgzBiNlHLxlrKMx
-J0k4zpJzh6e0U0uFcSl69Qn8A5qQVhSxt4kDxGG2Sfw9MGKEokZmIjcy/aNiu5li
-U8r8H+kpxtSMCW8C1d583hLYAN3fBJTUNrX22f6n/0bnB9o+0OPqkEx8t/+8hZnV
-H0b1rFfpCQNhjAudqIKcF0Mn3oDSWePK7SNBGjJIg8q9jsu/nPADfeBBznIFJ1k8
-EFsCAwEAAaOByzCByDAdBgNVHQ4EFgQUuh8mLOB38hZ4bYNJoTCetKsQaiIwHwYD
-VR0jBBgwFoAUuh8mLOB38hZ4bYNJoTCetKsQaiIwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBwtBX/t9m3
-URDO+uVhDvbHtte+We0H1XeV4e8/gJ6Z0iwbmqc1HOyEns4nUjosAAZNYGKqS6dh
-MuNk8ZbH0j/+eLz02nb5RNKbGpQfRJpJycAc3qlj0CNKw/tgRXbdEu/BlU+OvUhW
-uPl04lyukFoZnpATC5f/zalFVGiq+vbqPy76KkBIQs0QzMjmpDSdjxx0VViymc81
-QCO/kF9MYDBfoLTWD09CA3GC99P1cruozySrEH7F4YSpfiWxioDbrg5J8QP7ERpj
-WEJ/c5vz+NaugQtZypjsPZyFa31w6MIER/C2fkqWcMmoEbcjVFXTV8N+R2Y1kSZW
-/TcUNaRrKTju
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-RkFJTA==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem
deleted file mode 100644
index dffed19..0000000
--- a/net/data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem
+++ /dev/null
@@ -1,284 +0,0 @@
-[Created by: generate-intermediary-unknown-non-critical-extension.py]
-
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has an unknown X.509v3 extension that is marked as non-critical. Verification
-is expected to succeed because although unrecognized, the extension is not
-critical.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:e2:f4:a3:48:79:59:87:08:4d:c1:84:b4:97:67:
- 5d:f6:24:2b:74:f1:f0:1a:13:e0:a5:28:30:1f:c6:
- 04:fc:ce:9b:73:4a:95:1f:56:a0:9d:26:07:97:8f:
- 7c:06:c7:a2:fb:5f:85:41:d3:bd:50:83:61:72:5e:
- a0:f9:e1:39:c6:ae:77:05:8c:f7:8e:6f:ae:5d:14:
- 69:97:12:4a:c7:40:de:e7:ab:7a:83:9b:b3:e8:15:
- 90:ab:52:3a:ee:c4:36:9b:58:eb:51:c3:1d:c5:c8:
- eb:f7:65:e9:15:56:93:e4:55:37:97:29:f1:88:da:
- fc:1c:53:5f:24:07:f9:3e:14:86:b3:50:c6:94:06:
- 8e:b1:b1:ab:32:d4:f3:98:ee:f8:42:ed:65:43:36:
- bb:4f:59:a0:4d:77:a5:9e:a9:c2:40:40:df:cc:3c:
- d7:dc:56:bd:d4:2c:fe:b5:20:d6:a8:74:cd:99:4f:
- bf:eb:71:0b:20:95:f2:c3:21:92:42:d7:e6:ff:5b:
- 87:0b:c2:89:5c:e7:d6:30:77:cd:8d:c7:92:0d:74:
- 6f:88:d6:81:49:e8:f6:25:de:6d:51:3e:db:cd:e4:
- 91:99:98:5a:ff:7a:61:46:da:7a:ec:9b:22:a5:5f:
- 16:6e:cd:7a:ec:3b:b0:aa:1b:af:65:a6:3a:85:fc:
- a6:e9
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 82:EC:E0:87:C2:A2:2A:EF:4B:E0:B5:F8:75:6A:18:32:51:B4:0D:54
- X509v3 Authority Key Identifier:
- keyid:60:BD:98:38:CE:C3:01:40:CA:86:14:C7:F4:E4:D5:72:BA:ED:80:31
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 89:1e:64:8c:61:b5:87:aa:76:6d:f6:ef:87:b6:ca:3b:0f:47:
- a9:bb:9a:91:7f:7a:d8:65:e9:c7:b1:1a:ea:13:fb:9c:79:5e:
- df:33:f5:d9:bc:f1:f8:89:bc:59:31:27:c2:2d:3e:47:e9:13:
- 27:65:c8:cb:ba:e1:da:51:60:7a:93:aa:28:92:d5:81:89:09:
- b7:22:e7:4b:4f:82:0e:fb:2f:62:19:b4:ea:f5:47:34:fd:60:
- 7e:4c:e6:be:08:8e:f8:fd:89:62:ff:97:89:27:69:37:7f:e3:
- 76:ea:72:30:ca:de:73:bb:c7:65:1c:6d:5e:ab:f8:ba:da:57:
- 7d:28:1f:6a:64:76:aa:89:6b:ac:57:a3:e9:e2:c1:ca:f8:4b:
- 7c:0b:21:57:cc:71:c8:9b:7f:25:8f:09:61:6e:5c:a8:9b:0b:
- 79:98:7a:1e:82:95:22:fd:9e:9c:cd:20:73:0d:0e:d9:21:cb:
- 67:3d:e9:1e:24:ae:4f:84:1f:de:3e:27:ee:54:41:66:71:9c:
- b6:6b:08:7a:16:e7:c1:c7:7a:71:24:ed:c0:2a:d9:fd:2b:ff:
- e6:41:c9:63:93:90:52:35:21:4a:72:be:f9:9c:27:49:0d:b7:
- 01:af:cb:5f:53:ee:ef:58:69:16:ba:e6:5b:12:45:e0:d4:3d:
- ea:58:fe:a5
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9KNI
-eVmHCE3BhLSXZ132JCt08fAaE+ClKDAfxgT8zptzSpUfVqCdJgeXj3wGx6L7X4VB
-071Qg2FyXqD54TnGrncFjPeOb65dFGmXEkrHQN7nq3qDm7PoFZCrUjruxDabWOtR
-wx3FyOv3ZekVVpPkVTeXKfGI2vwcU18kB/k+FIazUMaUBo6xsasy1POY7vhC7WVD
-NrtPWaBNd6WeqcJAQN/MPNfcVr3ULP61INaodM2ZT7/rcQsglfLDIZJC1+b/W4cL
-wolc59Ywd82Nx5INdG+I1oFJ6PYl3m1RPtvN5JGZmFr/emFG2nrsmyKlXxZuzXrs
-O7CqG69lpjqF/KbpAgMBAAGjgekwgeYwHQYDVR0OBBYEFILs4IfCoirvS+C1+HVq
-GDJRtA1UMB8GA1UdIwQYMBaAFGC9mDjOwwFAyoYUx/Tk1XK67YAxMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAiR5kjGG1h6p2bfbvh7bK
-Ow9HqbuakX962GXpx7Ea6hP7nHle3zP12bzx+Im8WTEnwi0+R+kTJ2XIy7rh2lFg
-epOqKJLVgYkJtyLnS0+CDvsvYhm06vVHNP1gfkzmvgiO+P2JYv+XiSdpN3/jdupy
-MMrec7vHZRxtXqv4utpXfSgfamR2qolrrFej6eLByvhLfAshV8xxyJt/JY8JYW5c
-qJsLeZh6HoKVIv2enM0gcw0O2SHLZz3pHiSuT4Qf3j4n7lRBZnGctmsIehbnwcd6
-cSTtwCrZ/Sv/5kHJY5OQUjUhSnK++ZwnSQ23Aa/LX1Pu71hpFrrmWxJF4NQ96lj+
-pQ==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:de:7c:cd:1c:92:c3:9a:ff:be:f3:03:37:c7:6a:
- 3a:d4:ac:56:50:3a:b1:17:0d:73:09:ef:d9:16:4b:
- 38:de:a4:82:46:61:a8:ed:f8:b9:a0:21:7e:3c:26:
- f6:a8:c5:d3:34:99:9c:58:c6:e1:de:f6:1c:eb:49:
- a3:34:65:71:29:95:3a:2e:b4:5f:33:dd:2a:0b:5f:
- 7a:e0:47:3f:bc:00:15:a1:24:26:9f:c6:c7:d7:eb:
- e3:f3:37:19:d5:30:48:f2:7d:c5:77:11:cc:cc:17:
- 7e:91:c4:20:f8:a6:c3:28:00:ec:23:53:40:7b:0e:
- dc:14:6e:57:a5:ca:52:9f:2b:3b:34:ea:e4:ae:5c:
- ed:b4:8d:25:9a:08:00:26:d0:e4:34:d2:94:36:8c:
- e1:df:ef:31:f8:18:5b:ed:80:57:44:77:94:a2:fa:
- ae:5c:e0:ea:e1:30:e3:24:03:da:7c:5b:66:90:c7:
- 01:f1:f8:8d:ca:bc:d7:e3:25:35:28:3c:f6:f4:83:
- 13:2a:73:d0:f7:c2:69:11:b1:ed:43:6d:71:28:7e:
- 43:8d:f5:f0:78:e2:5a:31:39:38:ae:92:05:29:e0:
- 1f:04:6f:9d:a0:a1:b4:29:80:af:87:1c:0c:e5:7d:
- 6d:11:59:63:43:af:7f:a4:32:fa:0a:d1:7e:88:86:
- cd:61
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 60:BD:98:38:CE:C3:01:40:CA:86:14:C7:F4:E4:D5:72:BA:ED:80:31
- X509v3 Authority Key Identifier:
- keyid:B2:41:26:7A:EF:3A:C9:BF:FE:6A:E7:7F:04:60:B0:34:62:08:E3:93
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- 1.2.3.4:
- ....
- Signature Algorithm: sha256WithRSAEncryption
- 68:5c:74:6c:fd:93:14:86:9f:d9:3a:4b:67:1d:6e:2b:78:2f:
- 89:b4:b0:76:ac:3f:aa:ea:4a:ea:42:04:40:96:09:1a:b7:b7:
- 01:93:fb:55:0d:44:30:0e:16:b3:e8:bb:b2:77:17:79:93:37:
- 17:b5:62:c9:5b:15:76:90:2d:74:3d:1f:7e:59:61:59:e2:61:
- 81:18:46:6b:94:42:be:be:d3:1e:37:16:68:49:db:9e:f0:f1:
- 24:bb:e0:00:e0:57:e0:27:3f:59:e9:a8:92:31:80:2a:7a:cc:
- b1:47:5b:8d:3b:55:f5:5a:f0:9a:56:90:1a:8e:d2:ab:51:e2:
- 15:ca:9f:cb:a9:ec:10:f1:5d:58:72:84:75:63:bd:a7:7c:bf:
- 5b:80:65:d6:97:77:e2:8a:89:8a:ea:5b:1f:da:55:5e:7b:33:
- 37:e2:60:09:02:13:89:a3:ca:0f:bf:17:8e:47:fb:c1:8d:a8:
- fb:9f:20:64:a6:a4:a0:86:da:fa:7f:6a:e1:50:10:41:9b:21:
- e6:8e:9f:29:9c:cc:0b:83:a3:65:47:2a:15:8b:47:6a:48:89:
- e4:2c:97:d7:81:51:bb:bb:e0:db:22:e2:be:bf:53:63:26:77:
- 08:c3:b6:04:c7:9b:9c:03:91:00:63:bd:70:cb:e2:6c:c8:a7:
- 2c:5b:f6:28
------BEGIN CERTIFICATE-----
-MIIDejCCAmKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nzNHJLD
-mv++8wM3x2o61KxWUDqxFw1zCe/ZFks43qSCRmGo7fi5oCF+PCb2qMXTNJmcWMbh
-3vYc60mjNGVxKZU6LrRfM90qC1964Ec/vAAVoSQmn8bH1+vj8zcZ1TBI8n3FdxHM
-zBd+kcQg+KbDKADsI1NAew7cFG5XpcpSnys7NOrkrlzttI0lmggAJtDkNNKUNozh
-3+8x+Bhb7YBXRHeUovquXODq4TDjJAPafFtmkMcB8fiNyrzX4yU1KDz29IMTKnPQ
-98JpEbHtQ21xKH5DjfXweOJaMTk4rpIFKeAfBG+doKG0KYCvhxwM5X1tEVljQ69/
-pDL6CtF+iIbNYQIDAQABo4HYMIHVMB0GA1UdDgQWBBRgvZg4zsMBQMqGFMf05NVy
-uu2AMTAfBgNVHSMEGDAWgBSyQSZ67zrJv/5q538EYLA0YgjjkzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wCwYDKgMEBAQBAgMEMA0GCSqG
-SIb3DQEBCwUAA4IBAQBoXHRs/ZMUhp/ZOktnHW4reC+JtLB2rD+q6krqQgRAlgka
-t7cBk/tVDUQwDhaz6Luydxd5kzcXtWLJWxV2kC10PR9+WWFZ4mGBGEZrlEK+vtMe
-NxZoSdue8PEku+AA4FfgJz9Z6aiSMYAqesyxR1uNO1X1WvCaVpAajtKrUeIVyp/L
-qewQ8V1YcoR1Y72nfL9bgGXWl3fiiomK6lsf2lVeezM34mAJAhOJo8oPvxeOR/vB
-jaj7nyBkpqSghtr6f2rhUBBBmyHmjp8pnMwLg6NlRyoVi0dqSInkLJfXgVG7u+Db
-IuK+v1NjJncIw7YEx5ucA5EAY71wy+JsyKcsW/Yo
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:a8:e9:07:4a:9e:20:9a:c5:14:9a:16:49:17:bf:
- 0b:c1:7d:b6:91:54:cd:60:e6:df:bf:81:e1:bb:24:
- 47:df:ea:c8:27:93:bb:49:b7:b7:e6:48:ff:11:43:
- c1:8d:cb:54:f8:0d:49:05:e7:4b:a9:0d:cb:79:b8:
- 49:26:6b:1c:ad:7d:2c:e5:a3:0a:1b:ad:99:9c:d4:
- c2:d6:2c:de:ae:74:42:b7:06:ca:e0:57:06:e6:46:
- 5a:80:70:6f:f7:0c:76:c5:8f:de:cc:35:85:bf:f5:
- 79:29:63:79:22:fd:c0:48:1e:a0:4f:86:6b:2f:07:
- 72:55:1f:96:dc:81:c7:19:8d:bf:7f:56:21:fc:05:
- 6e:1a:3d:6d:f2:a7:37:6f:8d:c9:f5:5e:79:3a:89:
- 6b:b5:6b:d4:14:eb:c4:de:3d:68:8c:e6:f8:96:e3:
- b3:cb:73:09:6a:d1:8d:46:9e:c6:9f:1d:01:30:69:
- ea:a4:2a:3c:90:fe:40:92:9d:61:81:88:96:67:cb:
- ae:4c:f5:3d:31:37:8b:31:0a:a0:cf:87:80:f7:50:
- eb:93:32:bf:64:13:3e:0a:d8:98:80:4b:b7:b1:a9:
- 87:fe:b8:d3:d2:3b:a2:7d:20:cb:ff:6b:4e:67:88:
- 52:03:4c:a2:2a:81:0d:63:4e:d0:f8:2e:f6:38:c9:
- 9b:03
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- B2:41:26:7A:EF:3A:C9:BF:FE:6A:E7:7F:04:60:B0:34:62:08:E3:93
- X509v3 Authority Key Identifier:
- keyid:B2:41:26:7A:EF:3A:C9:BF:FE:6A:E7:7F:04:60:B0:34:62:08:E3:93
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 91:be:af:fa:3e:50:a9:b4:7e:d5:c6:a9:91:2f:d3:63:11:bc:
- 07:35:35:31:76:8e:69:e4:39:7d:82:65:be:6b:b0:9e:42:ce:
- 0c:02:5a:0d:73:93:ce:89:c1:c7:27:cb:19:26:a0:77:85:53:
- b5:1e:a8:60:9f:0c:b9:b4:fa:34:9f:4f:3a:0e:d6:ab:d3:a6:
- 47:32:d8:ec:c9:80:90:2e:7c:fa:5f:16:96:f6:ba:fd:13:10:
- 73:ec:3e:b0:3c:f5:7a:e1:8f:e3:32:59:d2:f1:3c:36:8c:92:
- 21:a1:29:21:39:1c:08:b1:f6:85:35:ab:36:97:56:fc:4c:85:
- 11:bc:69:72:05:f6:21:b8:85:bb:1e:cf:69:1a:3c:98:dd:93:
- 58:53:e0:f1:ce:d0:2a:68:d9:b3:b9:26:71:d9:61:01:a8:cd:
- bb:53:48:06:a5:c4:3f:d6:3b:aa:01:4d:01:fc:f2:79:96:a9:
- 13:d3:ba:25:2c:2a:3d:e5:bd:e1:f7:ae:f9:3a:ea:59:77:8c:
- 27:3c:f5:a4:01:f8:08:97:1b:28:1a:81:cb:ce:36:6b:2f:1e:
- 41:05:f6:d6:d9:4d:84:87:16:61:e4:34:4c:06:7e:a8:2b:2b:
- b5:a1:93:de:ca:52:f7:74:d9:ce:f7:f7:2b:0f:5d:f8:b6:9f:
- 93:34:b2:00
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjpB0qeIJrFFJoWSRe/
-C8F9tpFUzWDm37+B4bskR9/qyCeTu0m3t+ZI/xFDwY3LVPgNSQXnS6kNy3m4SSZr
-HK19LOWjChutmZzUwtYs3q50QrcGyuBXBuZGWoBwb/cMdsWP3sw1hb/1eSljeSL9
-wEgeoE+Gay8HclUfltyBxxmNv39WIfwFbho9bfKnN2+NyfVeeTqJa7Vr1BTrxN49
-aIzm+Jbjs8tzCWrRjUaexp8dATBp6qQqPJD+QJKdYYGIlmfLrkz1PTE3izEKoM+H
-gPdQ65Myv2QTPgrYmIBLt7Gph/6409I7on0gy/9rTmeIUgNMoiqBDWNO0Pgu9jjJ
-mwMCAwEAAaOByzCByDAdBgNVHQ4EFgQUskEmeu86yb/+aud/BGCwNGII45MwHwYD
-VR0jBBgwFoAUskEmeu86yb/+aud/BGCwNGII45MwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCRvq/6PlCp
-tH7VxqmRL9NjEbwHNTUxdo5p5Dl9gmW+a7CeQs4MAloNc5POicHHJ8sZJqB3hVO1
-Hqhgnwy5tPo0n086Dtar06ZHMtjsyYCQLnz6XxaW9rr9ExBz7D6wPPV64Y/jMlnS
-8Tw2jJIhoSkhORwIsfaFNas2l1b8TIURvGlyBfYhuIW7Hs9pGjyY3ZNYU+DxztAq
-aNmzuSZx2WEBqM27U0gGpcQ/1juqAU0B/PJ5lqkT07olLCo95b3h9675OupZd4wn
-PPWkAfgIlxsoGoHLzjZrLx5BBfbW2U2EhxZh5DRMBn6oKyu1oZPeylL3dNnO9/cr
-D134tp+TNLIA
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-U1VDQ0VTUw==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem
new file mode 100644
index 0000000..a2a73ca
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem
@@ -0,0 +1,281 @@
+[Created by: generate-intermediate-basic-constraints-ca-false.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+has a basic constraints extension that indicates it is NOT a CA. Verification
+is expected to fail.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:b7:1c:6d:3b:54:28:d0:fa:14:25:fe:22:77:55:
+ 16:d3:25:34:af:cd:e7:5a:8a:38:4b:82:99:95:6d:
+ e1:99:f7:f3:1d:53:2d:8e:90:b2:d5:4e:7e:e7:0c:
+ 9d:73:98:5e:3b:ed:bc:4f:fe:c7:38:f7:8a:ce:b7:
+ 08:0f:bd:78:18:9a:ec:f2:21:9e:25:ba:bc:24:3f:
+ 22:73:60:f7:2c:fa:9a:e9:aa:f8:75:65:4e:af:4e:
+ d9:01:f3:27:3e:c8:f5:b5:27:98:bd:a2:f6:34:ad:
+ 70:c8:5e:fb:3f:87:08:dc:d0:a6:30:c1:35:ee:95:
+ 7b:f2:7a:59:03:7e:03:39:fb:51:be:b3:13:54:cc:
+ 15:68:e1:b7:97:40:cf:e4:ff:84:a2:10:75:6d:d5:
+ 29:f8:91:8d:38:0a:92:c6:34:89:89:c2:d4:49:84:
+ 35:94:f9:08:ad:8c:44:10:3e:49:40:21:53:bb:6e:
+ 1b:20:1c:ce:e3:c8:a7:c7:e9:ab:4f:3f:f2:21:47:
+ 3a:d5:0a:59:6f:a9:59:42:ff:c5:7c:6a:c5:fc:79:
+ 29:05:a0:07:47:64:39:d0:bc:a1:86:64:c8:4c:08:
+ ec:f2:03:47:7c:00:ce:02:ff:5a:02:59:d3:ee:2c:
+ db:35:32:e9:24:a2:c2:f8:50:c8:3e:10:b1:dd:0a:
+ 5d:1b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 03:34:C9:78:9C:53:67:7A:2C:96:D9:3F:63:F2:18:3D:49:A8:44:87
+ X509v3 Authority Key Identifier:
+ keyid:9C:93:40:54:48:97:2B:0C:3B:AF:CE:5C:79:97:26:EC:32:33:4C:FB
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 72:78:37:46:b3:e3:d4:01:73:3a:59:1c:5f:13:27:10:46:dd:
+ ec:b1:9e:7c:6d:d8:a7:ac:b1:62:36:57:2a:44:17:d4:64:22:
+ 18:67:ae:84:0b:6b:53:49:76:15:a3:d3:7e:69:ae:d4:54:5d:
+ 46:11:0a:15:1c:ee:91:ab:da:6a:88:24:b0:ae:21:ee:a2:e6:
+ de:c4:cb:79:93:62:18:7d:4e:ee:d8:83:7d:65:63:f3:9c:08:
+ ca:28:5c:af:51:9f:36:b2:c3:06:3c:ec:cf:35:84:c5:9e:bc:
+ 75:03:be:e5:23:4e:7f:67:7d:86:14:df:21:4d:5e:d3:b7:86:
+ d6:14:cd:84:3a:3d:29:4f:de:e5:db:ac:96:a9:58:cf:02:e4:
+ c4:b1:26:08:34:f5:a4:3f:47:a1:0f:b3:0b:69:29:78:50:ba:
+ a9:eb:4a:44:fc:e7:bf:e9:ce:ba:8b:dc:b9:6a:25:c6:11:32:
+ 24:a0:59:7c:6e:4d:6c:cf:1b:f2:06:0f:5f:d7:4d:35:b1:f9:
+ a2:f7:c4:b0:b4:bb:ab:58:b5:ba:09:39:0d:50:d9:c2:a4:eb:
+ d9:79:23:40:ed:51:97:75:de:f5:14:c0:dc:ea:9f:6a:80:70:
+ ef:4e:b8:52:26:46:fc:70:e8:83:9c:2c:e8:63:b0:7f:81:a3:
+ 4e:91:35:02
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c6:22:75:92:c4:7c:6f:77:4d:46:f7:17:84:1b:
+ e2:08:1f:ff:71:7e:4d:6d:a4:e7:0f:58:46:84:61:
+ 22:02:70:4e:b8:45:3a:e2:10:d1:cf:ff:91:7c:12:
+ 8e:7d:19:ab:0a:46:ac:1b:d6:d6:05:b6:99:43:9b:
+ ab:e5:cf:ee:62:e9:94:21:84:72:5b:63:6e:5a:e1:
+ 25:42:c3:b7:ee:31:5f:e0:e7:69:19:01:a2:d5:54:
+ 70:f8:aa:aa:24:5b:3b:4d:2b:cd:2f:e4:2a:a4:be:
+ ba:2f:ab:a2:b6:f8:84:71:f3:23:bc:12:68:26:1e:
+ 49:d0:87:3e:46:46:33:47:70:f2:42:d4:3f:ba:9c:
+ 89:7d:4f:6e:a5:35:cf:d9:46:a8:63:c4:35:4a:e7:
+ 4f:f2:e0:51:90:8e:08:ed:2e:ae:18:ac:5d:16:44:
+ 25:32:fa:1b:3c:14:e9:37:69:9f:72:48:01:a5:1b:
+ f3:e1:e7:75:ec:ca:92:83:48:a4:67:e1:8d:c1:dd:
+ 15:02:e4:4a:82:93:d3:f3:27:9e:66:ce:a8:3a:17:
+ d2:c6:a7:08:31:ba:d2:e8:e7:fa:53:b6:4f:09:d8:
+ 7e:e4:53:b2:f1:03:d9:c4:31:0c:6d:32:a0:9d:08:
+ d3:c4:bb:db:45:11:68:80:ba:f8:52:dc:19:9e:67:
+ 68:99
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 9C:93:40:54:48:97:2B:0C:3B:AF:CE:5C:79:97:26:EC:32:33:4C:FB
+ X509v3 Authority Key Identifier:
+ keyid:6F:25:CD:4D:1F:09:D0:5A:D5:3A:23:08:72:F1:9D:08:8A:1D:CA:34
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:FALSE
+ Signature Algorithm: sha256WithRSAEncryption
+ 14:4a:f9:6f:29:a6:a1:1b:2b:d7:3d:5d:14:83:05:1a:46:ac:
+ 73:64:d5:b7:09:87:0f:08:1d:b2:ac:1c:db:79:05:e4:62:fa:
+ 37:7d:78:82:c9:7c:44:f3:01:9a:a6:31:78:ac:af:1e:53:9e:
+ 84:ab:95:f0:2e:48:62:d6:3e:a3:95:35:1e:18:c6:9e:0d:15:
+ 9e:94:0f:bd:8c:1b:f6:de:48:d8:cd:7c:9b:23:4d:bb:d0:f6:
+ df:bb:27:a6:55:82:07:3e:27:2e:80:6e:b3:67:06:67:6d:b6:
+ f8:5f:60:58:ab:d8:9d:f6:4b:6b:a8:9a:be:9e:c3:69:e8:15:
+ 00:61:9f:b2:24:6d:bd:d5:e3:7e:c7:83:66:4e:12:58:b7:c1:
+ c1:0e:de:1a:dc:ae:4d:19:78:b8:6c:48:fb:5b:fc:a2:86:0b:
+ 60:77:d7:cb:d6:e6:c9:13:5f:cf:d6:98:6c:ab:9e:9b:9d:99:
+ 4c:87:91:3e:d1:4a:ad:ef:84:f6:45:cc:da:99:fa:ff:57:df:
+ be:44:70:f9:0c:38:63:c0:31:44:45:05:46:9a:63:db:dd:a0:
+ f5:dc:1b:f8:51:d8:30:e5:47:23:29:d1:79:a5:e6:1e:87:2b:
+ c3:f8:0e:fe:de:13:bb:cd:a5:14:f3:d8:0b:34:73:47:68:07:
+ 8a:ac:e0:65
+-----BEGIN CERTIFICATE-----
+MIIDajCCAlKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiJ1ksR8
+b3dNRvcXhBviCB//cX5NbaTnD1hGhGEiAnBOuEU64hDRz/+RfBKOfRmrCkasG9bW
+BbaZQ5ur5c/uYumUIYRyW2NuWuElQsO37jFf4OdpGQGi1VRw+KqqJFs7TSvNL+Qq
+pL66L6uitviEcfMjvBJoJh5J0Ic+RkYzR3DyQtQ/upyJfU9upTXP2UaoY8Q1SudP
+8uBRkI4I7S6uGKxdFkQlMvobPBTpN2mfckgBpRvz4ed17MqSg0ikZ+GNwd0VAuRK
+gpPT8yeeZs6oOhfSxqcIMbrS6Of6U7ZPCdh+5FOy8QPZxDEMbTKgnQjTxLvbRRFo
+gLr4UtwZnmdomQIDAQABo4HIMIHFMB0GA1UdDgQWBBSck0BUSJcrDDuvzlx5lybs
+MjNM+zAfBgNVHSMEGDAWgBRvJc1NHwnQWtU6Iwhy8Z0Iih3KNDA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBABRK
++W8ppqEbK9c9XRSDBRpGrHNk1bcJhw8IHbKsHNt5BeRi+jd9eILJfETzAZqmMXis
+rx5TnoSrlfAuSGLWPqOVNR4Yxp4NFZ6UD72MG/beSNjNfJsjTbvQ9t+7J6ZVggc+
+Jy6AbrNnBmdttvhfYFir2J32S2uomr6ew2noFQBhn7Ikbb3V437Hg2ZOEli3wcEO
+3hrcrk0ZeLhsSPtb/KKGC2B318vW5skTX8/WmGyrnpudmUyHkT7RSq3vhPZFzNqZ
++v9X375EcPkMOGPAMURFBUaaY9vdoPXcG/hR2DDlRyMp0Xml5h6HK8P4Dv7eE7vN
+pRTz2As0c0doB4qs4GU=
+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c4:3e:31:36:4f:df:d0:36:0e:06:5c:89:2c:c8:
+ 01:c6:18:a4:e7:1f:82:11:af:30:66:28:7c:c3:14:
+ b2:ff:a4:6c:6a:c0:f4:ae:58:82:5f:91:e6:78:19:
+ d7:d2:87:5c:9e:75:3a:af:c0:fd:e8:18:c4:81:b4:
+ 51:be:f7:c3:0d:74:d7:8a:53:01:28:c9:da:93:f4:
+ a6:da:51:6a:d1:23:78:1b:ab:17:46:e6:bb:71:4e:
+ 33:8b:9d:e1:75:7e:56:3b:00:02:74:fe:1f:49:01:
+ 81:0f:59:05:d6:2a:a0:48:db:9f:fc:29:6e:77:6e:
+ e3:78:63:4d:12:9f:f5:54:63:a5:1e:b2:c4:83:62:
+ ac:79:76:bd:80:d9:4c:dd:99:44:91:c3:31:fd:0f:
+ 3a:d8:13:6d:3c:4f:98:5b:50:e0:1a:84:b5:3b:e2:
+ 0f:52:89:7f:b0:de:97:e2:f9:e5:0b:2c:c4:61:9a:
+ f3:4b:15:e3:f2:a3:30:44:b0:d4:a6:1a:dd:60:c0:
+ 85:21:30:ed:b5:1e:6f:9f:50:db:ad:42:a6:3a:04:
+ 7c:3f:ae:94:ed:eb:43:2a:d9:85:c8:1d:72:f4:61:
+ d5:27:7a:a4:62:93:56:37:4b:4e:d5:44:02:f0:29:
+ 1f:70:2c:76:fb:2f:5b:d4:dc:86:09:03:fe:d9:13:
+ 5f:27
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 6F:25:CD:4D:1F:09:D0:5A:D5:3A:23:08:72:F1:9D:08:8A:1D:CA:34
+ X509v3 Authority Key Identifier:
+ keyid:6F:25:CD:4D:1F:09:D0:5A:D5:3A:23:08:72:F1:9D:08:8A:1D:CA:34
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 5e:dc:6f:dc:d9:7f:6f:75:c7:c8:27:62:2f:02:7c:c2:26:35:
+ 82:6c:5e:93:88:34:9b:e2:fc:8a:89:9e:0a:a0:89:aa:08:e4:
+ 1c:59:38:4b:c7:5c:ba:92:d5:ce:1a:b0:30:25:ba:69:c9:52:
+ 6e:29:78:31:d6:49:c5:b3:64:e3:49:28:2d:3c:41:8a:10:c4:
+ 77:f1:a8:77:37:50:52:ec:ed:bb:1a:61:3f:29:ad:3e:1a:56:
+ 06:48:a0:89:17:91:77:67:bc:4d:68:9a:ac:a8:a8:ad:4a:05:
+ 2a:33:18:7a:5e:b9:32:f5:c4:7b:c0:23:90:fb:78:9a:0a:18:
+ f3:9b:46:f1:3c:c5:f0:3c:1b:06:56:39:3b:ba:da:5e:7e:5f:
+ 42:47:bc:fd:a6:bb:64:2d:db:9a:5b:60:61:e6:9d:a6:ac:c9:
+ 24:20:ff:cd:b7:5d:ee:8e:04:92:a1:10:34:26:48:b2:b6:3a:
+ c7:9a:66:2e:f0:64:f0:61:64:ef:28:85:c9:94:46:6b:fb:c5:
+ 0f:b9:f5:ef:51:5a:61:be:27:39:00:4c:00:7f:8a:49:14:7b:
+ 1a:40:e5:e7:fe:d6:d0:a7:df:33:5c:86:1e:e5:4a:64:ff:e8:
+ 8f:1f:9e:3c:d8:a9:a2:d2:0b:c3:53:b7:cf:f6:d1:92:84:be:
+ d9:e6:67:06
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem
new file mode 100644
index 0000000..60d7b29
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem
@@ -0,0 +1,282 @@
+[Created by: generate-intermediate-basic-constraints-not-critical.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+has a basic constraints extension but does not mark it as critical.
+Verification is expected to succeed, since although not critical, the
+basicConstraints indicates CA=true as expected.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:9f:2f:38:1d:84:e6:1c:ed:c4:47:2b:63:0b:41:
+ 73:dd:fe:74:c7:1a:d2:c8:7f:c1:90:ae:bf:6b:82:
+ a1:17:93:80:a1:92:39:52:66:81:93:90:e6:15:d7:
+ d6:bc:a4:03:eb:fc:50:b2:dc:f6:29:f7:a9:32:b6:
+ 23:6c:d4:d0:3e:d9:56:6e:9d:a0:91:10:2c:8a:1e:
+ 93:8d:38:37:ef:3e:7d:7a:de:15:07:c2:6c:62:1c:
+ 76:81:ce:a7:9e:be:44:57:1b:77:77:ed:fa:2f:e1:
+ c5:53:83:65:74:c6:11:3c:f2:4d:84:89:1d:3b:54:
+ 93:5e:38:44:f1:d4:03:ad:03:69:fd:eb:da:02:aa:
+ cf:6f:04:ea:22:0a:3f:a1:68:bc:56:a4:51:aa:93:
+ 8a:f2:22:47:42:04:98:48:68:40:2e:f6:a6:8d:38:
+ 84:ba:1a:56:0c:bc:53:85:77:b4:ba:e2:03:ac:10:
+ 0f:1d:52:64:ad:f5:92:20:38:dc:fa:dd:8b:c6:8d:
+ 96:30:ea:72:e2:aa:ff:5d:c3:fc:dc:1a:43:c6:da:
+ 48:56:f6:4c:d4:8d:00:da:28:5f:01:23:9b:b1:eb:
+ b7:92:b7:35:43:5e:c0:21:96:22:b6:bd:c6:5f:1b:
+ 0b:58:88:44:a5:ee:90:f4:e6:d0:94:41:2c:44:8c:
+ af:e9
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 05:31:5F:95:5B:3C:43:02:74:27:C6:2E:06:50:92:FF:5C:54:AE:73
+ X509v3 Authority Key Identifier:
+ keyid:77:27:6B:15:A8:06:86:AD:0D:67:E0:D6:5B:82:3A:F8:6B:00:A3:A7
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 00:ba:cd:3c:7b:0f:eb:b3:b1:5f:5b:0a:83:12:4d:d6:28:7e:
+ ff:d9:65:2c:23:f8:d2:68:cc:25:14:0c:6e:9b:37:bb:72:66:
+ 13:54:ff:b9:2f:f4:c8:9e:77:5b:31:2b:93:e6:94:cf:e9:bd:
+ 43:1a:e8:f6:c3:c5:61:fa:ff:a7:72:09:ba:2b:08:02:e4:a5:
+ 62:24:b1:b1:3b:0a:c0:bb:72:19:af:73:2d:9a:66:8e:f7:0f:
+ 30:9f:49:0f:aa:83:87:ed:45:9e:75:3a:50:32:d6:c4:cf:20:
+ a0:31:73:16:98:69:e9:d7:16:5b:6f:6f:0a:d8:96:82:a3:d6:
+ a8:a4:84:d7:1a:50:22:bd:14:d7:61:d9:43:a9:58:cf:46:e8:
+ 64:e9:1c:a9:d6:d3:49:45:1e:53:16:71:05:a7:0b:ae:d7:c0:
+ 43:8c:24:02:07:6f:99:ed:4b:f6:89:a8:31:f5:ba:56:e3:db:
+ 00:10:7e:0d:e0:46:96:b2:27:be:60:29:e8:91:e9:55:43:b1:
+ e6:74:e9:17:4e:bd:db:32:ec:61:7e:b0:d1:17:27:90:29:d9:
+ 2e:53:6a:8f:de:77:ae:f4:ff:f4:96:84:e6:8d:37:43:63:17:
+ 87:6a:8c:55:bd:ea:fd:2c:b2:83:10:3c:d7:f0:bd:21:45:ad:
+ ba:36:6d:43
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:94:4c:ba:e4:24:50:f0:02:98:a7:42:66:d3:d6:
+ 53:4d:ad:3f:76:fa:4f:72:61:fd:79:cc:43:e2:d6:
+ 2f:d9:99:84:0b:da:34:6f:65:ca:78:2b:a9:22:98:
+ 04:ba:93:89:e9:8c:d0:71:62:cd:a4:3a:35:e2:8c:
+ 2d:8a:48:36:2b:d1:99:52:27:c7:44:34:30:2c:87:
+ a7:47:e3:df:74:a3:6c:c6:3c:d2:ba:5c:3c:04:79:
+ 1f:11:36:58:7a:86:65:60:cc:a1:4c:ba:f9:72:7e:
+ 80:d3:1b:12:18:8a:44:b3:f3:fa:20:f8:8c:3d:63:
+ e3:96:0a:6b:0a:32:a1:f1:75:7c:6b:76:5f:1b:ef:
+ bd:64:c3:34:fd:2e:27:89:dd:ef:e5:74:08:08:a4:
+ 96:92:7b:f3:4b:f5:ee:eb:91:0b:bb:ca:53:e8:ed:
+ 48:a8:bb:7c:f8:9f:30:f7:15:05:32:7d:73:62:37:
+ 4f:f7:a1:d4:de:45:e2:f7:49:86:b9:c9:f8:84:cc:
+ 67:b2:f0:34:48:e6:54:e4:5d:1f:fb:03:fc:d8:15:
+ a1:17:0e:53:0d:c8:c9:a6:99:bf:f8:93:df:af:35:
+ e3:10:91:91:24:f3:eb:88:0b:d8:4f:16:36:a3:28:
+ ad:21:bd:22:bf:46:59:0a:ea:f0:fb:fc:01:c3:ba:
+ 42:e9
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 77:27:6B:15:A8:06:86:AD:0D:67:E0:D6:5B:82:3A:F8:6B:00:A3:A7
+ X509v3 Authority Key Identifier:
+ keyid:6C:17:23:18:CA:A6:A4:28:C6:08:4C:AA:9A:3F:18:FB:7B:67:B2:36
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints:
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ af:80:f1:f7:93:98:cd:84:13:e3:eb:ab:2d:ff:91:4c:72:5d:
+ d9:a9:b7:96:e8:bc:e9:f3:31:a0:46:7c:0d:49:a3:1f:5a:6a:
+ aa:82:9a:c2:1f:37:7a:9a:37:1a:96:fb:8e:fa:28:e1:eb:b8:
+ a3:d0:66:2d:9e:6e:ff:8e:c3:0a:17:23:ae:60:d5:9b:d2:fb:
+ 23:2b:a9:b0:22:cb:e6:85:29:11:d3:b5:71:3e:30:9a:9c:60:
+ 24:c5:a8:42:66:4f:5c:10:8b:fa:61:ad:d7:14:2b:51:0e:53:
+ 24:1a:c7:5f:d9:12:97:6a:8c:da:d5:f9:35:41:4c:d4:0e:a8:
+ 98:c6:e8:61:db:7b:95:d5:ca:26:ff:60:01:e2:c6:4e:f7:67:
+ ee:36:1f:2b:71:82:46:f5:11:44:ce:7b:ac:85:06:f1:09:35:
+ 07:62:08:36:ad:b6:5b:c6:70:a0:bb:f0:5b:2e:47:09:a2:69:
+ 79:a6:f1:77:fd:3c:b9:57:f4:c7:e6:f8:80:18:ba:d0:a0:c1:
+ b1:6f:b9:c8:3b:a2:c1:83:5c:e7:3a:05:19:36:c5:ae:54:dc:
+ df:1d:ad:18:e0:52:dd:71:ba:53:3e:2c:7d:eb:09:3a:cb:25:
+ 10:b3:52:50:7f:42:2b:a8:2c:a7:cc:02:8e:17:99:af:7e:d2:
+ 75:f4:15:f1
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:e2:4c:a9:08:30:3f:0e:6a:ec:ec:80:8e:07:cb:
+ fa:9b:01:b9:8a:37:f0:b1:f2:c2:43:79:90:7e:70:
+ 76:ac:5c:41:60:55:66:fb:4f:e6:79:c8:18:01:7f:
+ d5:bd:9a:d5:58:5a:00:bf:81:86:37:1e:68:1a:92:
+ da:dd:e8:20:1a:47:43:78:bb:7e:5c:82:c6:59:1b:
+ 37:c9:99:b2:ac:bb:d2:c0:cf:58:5a:25:13:a6:6b:
+ 9a:79:be:dc:f6:6f:6c:80:5d:58:c2:b5:67:ae:09:
+ 1b:ba:2a:f3:2a:00:d2:43:b6:59:df:38:7c:ef:c1:
+ be:1b:a1:e0:7d:9b:20:27:04:67:94:45:b3:2d:f6:
+ 77:91:3c:c4:94:5f:78:7a:79:2c:4b:21:23:8b:f4:
+ d3:60:73:10:59:c7:a1:84:3f:5a:4e:82:43:90:68:
+ 77:2a:f6:b1:d2:d4:cc:cd:76:36:13:95:c5:a7:f4:
+ 46:d8:b7:ee:ef:59:07:2c:69:4d:9c:22:e4:2d:f1:
+ a9:2c:50:35:50:c2:91:ea:37:d9:6c:b6:f2:ff:cd:
+ 7e:00:ae:51:e3:b4:10:5f:87:e3:92:fe:9e:62:a5:
+ 34:fe:15:c4:19:20:3a:68:fd:3c:be:ae:aa:a3:52:
+ 48:d3:05:95:99:f8:38:18:c5:44:d6:71:c4:bf:34:
+ e5:c7
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 6C:17:23:18:CA:A6:A4:28:C6:08:4C:AA:9A:3F:18:FB:7B:67:B2:36
+ X509v3 Authority Key Identifier:
+ keyid:6C:17:23:18:CA:A6:A4:28:C6:08:4C:AA:9A:3F:18:FB:7B:67:B2:36
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ d2:00:6a:7a:21:40:79:ad:84:23:e8:62:29:b5:47:0a:7a:91:
+ 08:3d:f3:af:0a:14:e9:93:08:7a:81:bf:44:6f:e9:59:5b:d6:
+ 8f:e1:bd:cd:9f:46:94:2e:7e:79:df:53:9e:85:e3:86:e0:15:
+ 65:e4:fd:b9:10:f7:19:6c:f1:ba:39:3b:2e:49:97:18:7d:95:
+ a9:e5:14:49:65:44:31:39:5b:75:c7:09:75:1f:b3:5a:5b:fe:
+ 09:1a:4a:af:ec:6b:58:5a:7b:ef:44:58:37:ab:23:72:bd:97:
+ 7b:02:63:65:cf:3d:f6:13:62:44:49:04:dc:85:fc:6f:31:80:
+ c7:e0:1e:5b:77:90:29:cb:06:67:4e:99:41:b1:66:d7:4b:a3:
+ fa:85:5c:bc:2e:c5:fa:a0:a1:8d:07:ba:52:31:cf:5e:2a:98:
+ f1:ba:dc:56:4b:b3:cc:11:b2:d1:2d:0a:eb:75:a8:fe:f6:02:
+ d8:9b:0f:5b:7e:11:50:b1:51:b9:31:11:c5:4b:fa:bf:34:4d:
+ 46:e9:27:39:61:ca:09:41:b2:67:fc:54:8a:38:0b:50:7d:f0:
+ e4:7a:a4:30:08:12:86:b3:fc:d2:43:0c:b5:50:4b:45:ee:cf:
+ 90:5b:3e:39:47:11:b6:6b:a6:24:fe:02:17:07:7c:06:15:23:
+ 0f:d8:0e:7b
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem b/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem
new file mode 100644
index 0000000..9027634
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem
@@ -0,0 +1,278 @@
+[Created by: generate-intermediate-lacks-basic-constraints.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+lacks the basic constraints extension, and hence is expected to fail validation
+(RFC 5280 requires v3 signing certificates have a BasicConstaints).
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:ac:3c:48:cb:8e:9b:00:37:e3:06:36:23:5e:3c:
+ 24:0b:d2:57:0e:52:8f:53:d0:48:ca:38:67:91:a7:
+ 10:d3:35:2d:67:f4:ad:2c:9e:c1:ee:f5:6b:62:23:
+ 34:03:32:76:29:96:fd:db:cc:a4:9a:d8:b6:97:c4:
+ a9:73:c1:a1:57:2f:cd:80:d1:d9:db:39:82:11:bb:
+ 95:3e:1b:b3:1e:ac:e7:c0:67:f3:1e:cb:4f:d4:a6:
+ c7:01:32:c5:45:ca:53:ff:cf:46:e1:b3:4f:55:01:
+ ef:76:44:92:55:55:d8:a4:db:5c:80:8f:48:51:86:
+ 6c:d9:b6:b7:5c:74:56:06:00:38:3f:d9:ee:c3:ae:
+ 78:a0:57:ff:fa:41:02:14:63:00:bb:1f:98:9a:f5:
+ 39:50:51:50:78:03:5d:13:a2:fd:a3:08:b0:ff:69:
+ ee:60:c8:af:1c:1e:8a:13:4b:0e:b9:48:29:92:f2:
+ 95:0a:d9:85:2f:ff:17:ab:c7:6f:e0:32:d1:16:9e:
+ 66:ae:81:87:b8:7e:70:ac:73:8c:67:de:dd:1a:e0:
+ 0e:0e:bb:ab:bc:f5:ef:38:d9:37:49:71:d1:7c:e6:
+ 64:f7:00:10:e4:83:ed:1e:58:05:44:89:f2:a9:a2:
+ 1d:57:5c:b5:db:bc:55:39:35:d7:f3:a5:b8:28:d1:
+ 45:5d
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 9E:25:C3:B0:61:AE:69:26:DE:05:F4:15:3C:58:B0:7C:6D:91:5C:5B
+ X509v3 Authority Key Identifier:
+ keyid:E5:AE:8F:CC:87:F7:B5:85:86:1E:4B:A6:CF:FC:B9:CA:10:C8:79:90
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ c5:3c:97:21:6a:dc:f8:0c:23:76:c2:4e:33:63:f4:7e:d1:61:
+ bd:f8:cf:6d:b5:ef:d6:f1:96:a0:84:07:42:ab:e2:34:90:3a:
+ 95:2a:db:f6:19:28:bd:19:22:65:20:b0:25:b0:f0:ca:d0:d3:
+ 44:41:fe:03:f2:9f:0c:df:02:dc:64:c6:47:13:1e:26:dd:6a:
+ 5d:52:8a:fe:d3:0a:9a:d1:8c:a5:93:ec:1a:d4:d5:ad:ba:cd:
+ 6b:c2:99:6b:04:b7:06:98:a8:53:dc:d9:97:97:da:ac:29:bb:
+ 09:4a:25:ca:08:83:eb:ed:1f:a7:ae:28:fc:51:09:a9:e4:95:
+ f2:66:97:f2:97:48:9e:01:44:40:5b:4a:91:a5:ed:f9:86:6b:
+ fb:e2:47:c8:47:aa:ad:8d:aa:79:30:fb:4f:f1:a7:7c:c3:23:
+ b3:23:4d:15:a3:04:67:ff:26:b1:50:c0:5a:13:f4:8a:61:da:
+ 98:a2:35:0e:ec:4f:2b:e7:e0:dc:29:0a:07:20:e4:22:97:b1:
+ da:0d:73:6f:32:03:f1:cd:4b:a2:7b:9b:c3:62:a8:dd:55:02:
+ 57:6b:2f:a4:d6:46:20:bc:bd:f7:52:e7:44:8e:3d:2c:73:05:
+ 55:ac:35:8b:af:39:32:a1:07:da:fd:bb:8c:bb:35:e0:e6:bb:
+ 0c:49:1a:e4
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c5:bf:ce:e4:8e:d2:b9:92:d9:78:eb:36:78:b0:
+ d4:2b:a9:22:cd:83:57:58:a2:0f:5b:e5:c8:e4:f4:
+ d6:41:2c:1f:5a:08:6b:12:7b:f6:8f:39:44:0f:f4:
+ d2:3e:56:cd:63:87:13:b1:88:1a:da:f1:13:2f:4a:
+ d0:76:78:61:6f:71:08:e0:0c:a2:9a:6a:6b:c7:8c:
+ 81:6f:e1:ea:22:09:83:fd:09:53:78:f0:1d:4e:f7:
+ b3:17:17:7e:fc:dc:a5:21:83:7f:46:8c:81:af:07:
+ 68:91:14:54:43:bf:d2:85:fa:58:91:61:cc:87:bc:
+ 8d:b3:97:c1:a5:42:de:73:49:29:c9:0c:48:92:15:
+ d9:0e:6b:3d:4a:4c:50:c6:8b:a5:69:6c:b2:2f:02:
+ 9e:0a:4f:27:1a:d0:1c:0e:b8:d9:fc:a7:62:92:69:
+ 0c:40:ec:49:3b:59:a5:38:fc:8e:cb:2f:91:9f:09:
+ 76:2c:b8:d4:25:7e:83:71:56:89:29:2c:a3:d8:bf:
+ 95:70:99:f5:cb:20:df:fa:fd:b8:89:e6:42:82:a9:
+ 01:d8:e0:42:f2:d2:c3:78:26:cc:fb:05:30:90:a0:
+ 83:bd:ce:b3:6d:bb:01:ae:84:aa:71:4f:d9:37:38:
+ 7e:07:35:6f:ed:88:c7:52:17:38:ac:c6:44:b5:fe:
+ 4a:b3
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ E5:AE:8F:CC:87:F7:B5:85:86:1E:4B:A6:CF:FC:B9:CA:10:C8:79:90
+ X509v3 Authority Key Identifier:
+ keyid:0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Signature Algorithm: sha256WithRSAEncryption
+ 12:11:99:0b:59:f6:cd:61:bf:99:bc:25:83:b2:e7:4b:42:ec:
+ ee:1d:03:3b:cf:5d:76:95:19:2c:d1:41:d0:f6:5c:08:9d:6f:
+ 66:50:07:ea:07:fa:88:01:96:05:39:8d:6a:e0:34:27:1e:a2:
+ 80:c2:9b:91:ba:17:35:49:ef:8c:42:9d:59:ac:42:3f:52:fa:
+ ef:5f:51:aa:3a:dc:b6:ee:d6:8c:20:89:de:36:7d:a2:e2:ff:
+ eb:13:9d:dc:99:d1:62:33:c5:82:19:12:18:d4:94:5b:5f:c4:
+ f7:74:55:f0:be:fa:0e:4d:7a:01:7e:53:b3:2d:4d:09:b6:7b:
+ 8e:0a:7c:3e:b9:39:a1:ee:b6:3d:3f:e8:4a:b0:1d:e4:ee:7b:
+ 96:75:19:b5:71:6a:ae:e0:af:14:59:9f:fc:2b:13:dd:70:c9:
+ da:dd:a9:3c:14:3e:f1:69:3b:ce:42:b4:c5:3f:12:f8:37:eb:
+ bf:0c:9d:48:a4:6e:4c:9f:e7:3c:4f:a5:91:32:8b:7f:2e:5f:
+ e7:bf:bc:f4:a0:5f:43:f7:3a:1f:78:a3:0e:8e:c0:46:16:9e:
+ 58:6a:0f:7e:e0:69:af:94:ec:bc:3a:7f:8b:44:ef:19:f8:14:
+ 16:a4:1d:bd:49:c6:96:da:ba:11:a8:bc:36:11:c7:ad:ab:e0:
+ a5:e2:05:77
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c3:da:da:10:95:78:5c:73:c8:43:66:41:23:8e:
+ 3e:3f:a1:00:57:de:60:d9:2a:84:57:85:08:c6:60:
+ 79:65:2d:51:c9:93:c1:e7:fa:5b:1a:eb:6f:79:44:
+ d5:71:f6:bd:f4:8c:86:0b:d9:e3:49:dd:a6:f3:5d:
+ 48:8a:25:4a:2a:20:80:c1:83:da:b8:c5:e0:20:de:
+ 40:67:bc:22:38:51:72:df:e3:b7:82:aa:47:ed:c9:
+ 74:a0:82:97:71:35:a8:2f:73:01:86:56:43:e8:88:
+ 42:f9:cc:9b:69:71:09:45:8c:39:82:14:db:2e:08:
+ 17:85:96:c5:69:46:73:55:9b:d8:12:4b:5f:32:70:
+ cc:52:4e:7e:77:94:78:0e:f4:dd:40:ff:d7:3b:cc:
+ f7:df:a9:a7:a1:a3:a3:4e:25:c8:e4:68:1c:e3:90:
+ c2:c5:bb:66:3a:c1:8b:e3:1b:df:b9:8c:0c:9a:3a:
+ 6a:a9:8e:8d:b3:54:49:14:af:28:51:29:b2:5b:7b:
+ 68:34:4c:f3:bb:a5:5d:51:0b:99:6b:b1:fe:b3:16:
+ d1:ef:2f:18:ee:8a:f8:05:9b:df:0d:92:3a:e0:62:
+ 7b:1d:bc:fb:60:45:ce:f9:e0:46:f6:16:39:08:a7:
+ 68:b5:da:e5:9f:7c:db:07:15:dc:47:e6:5d:a3:8c:
+ 06:7b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+ X509v3 Authority Key Identifier:
+ keyid:0F:59:3C:0D:B8:B1:5B:C5:96:9D:B4:E8:4F:CF:4B:A6:B3:AD:33:E7
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 3e:f9:8e:c2:1a:d7:ea:b1:71:03:6d:6d:a9:de:e9:45:1d:ab:
+ a3:26:4c:95:4b:15:ad:9d:be:94:aa:20:57:83:b2:32:96:06:
+ c1:37:9a:6a:18:41:ad:13:3b:52:23:a1:0a:1f:fc:8c:fa:3b:
+ 88:43:d1:5e:1e:59:80:06:a5:0a:5e:95:66:3d:3d:cb:4a:b4:
+ 38:77:a6:fa:04:29:e8:c1:b8:b5:f7:49:07:ae:53:dd:62:64:
+ 3c:70:4c:64:b5:54:84:4d:04:3f:6d:86:80:9d:e2:2b:a4:88:
+ 1c:38:74:fc:83:c3:60:c8:86:64:f5:d7:29:f7:e4:8e:02:a9:
+ 47:a6:e1:46:0f:c4:b5:22:59:f1:a7:1b:ae:86:7c:70:32:d4:
+ 8c:19:7f:a7:6d:82:0b:f3:42:37:02:b5:3d:f3:41:d5:7d:67:
+ 97:80:78:9a:e2:06:54:18:bc:b0:7f:5d:77:15:bb:89:cb:4d:
+ 29:0c:02:ab:b3:b7:40:44:3a:2c:4a:2e:54:43:7f:ff:b0:5f:
+ da:c5:5f:38:0e:ce:4e:18:ed:f3:f9:99:f0:7c:01:69:ca:0e:
+ 15:85:1e:ff:b7:2d:04:6c:3b:5b:f9:7f:70:bc:0c:ac:16:b7:
+ d1:b4:f1:74:84:ad:73:e7:9f:c7:c9:ea:93:d9:f1:c6:a7:59:
+ bf:92:4e:ec
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem b/net/data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem
new file mode 100644
index 0000000..536c478
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem
@@ -0,0 +1,281 @@
+[Created by: generate-intermediate-lacks-signing-key-usage.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+contains a keyUsage extension, HOWEVER it does not contain the keyCertSign bit.
+Hence validation is expected to fail.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:a3:21:17:35:c0:77:f1:a3:51:77:11:45:3e:92:
+ 5f:97:65:eb:99:cc:26:e2:8c:f8:4a:d8:3d:71:17:
+ a2:eb:6a:cf:2f:07:a8:fa:27:c1:f8:c5:50:22:42:
+ a2:6f:92:4b:67:c3:0c:a7:ec:35:87:05:ac:eb:e3:
+ 27:cd:62:3d:c4:2e:80:f6:2a:af:31:05:c7:1b:0f:
+ 3b:71:6d:90:77:0d:b4:48:e7:26:2e:4a:44:af:bb:
+ 76:e0:62:ec:e6:61:cc:5b:61:ea:03:ce:4d:46:d0:
+ 96:e2:d5:d9:67:6f:0c:f2:06:e3:9a:14:04:68:82:
+ 88:d6:8b:c1:7f:fb:81:8c:e6:dc:88:20:f7:53:ef:
+ d5:56:5b:5e:00:b3:5b:e8:ce:d0:d2:6a:ed:b8:4a:
+ f2:4b:56:fb:63:75:d4:6b:a3:8a:d4:3f:e6:9e:29:
+ 1b:a7:23:61:ba:f0:d6:19:fb:8c:ad:40:2f:7c:14:
+ 36:0f:4b:f1:6e:f0:b8:6e:7d:cc:82:11:63:48:15:
+ 2f:34:00:99:cd:be:b4:1a:be:d8:73:38:00:ac:c1:
+ 09:41:a2:c4:ec:74:69:15:52:c4:45:2d:20:ff:b5:
+ ce:d0:41:be:a2:b2:4d:ef:a7:3b:f1:df:9d:78:1a:
+ 9d:2c:6c:61:26:2e:f7:82:ab:50:76:6d:a3:d3:33:
+ 46:07
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 95:3C:F4:24:9F:9C:4A:CB:16:AA:A4:8A:AB:DF:D7:9D:6D:BA:AC:FA
+ X509v3 Authority Key Identifier:
+ keyid:29:73:E8:7F:69:DE:63:14:43:C6:6D:55:6C:C2:AE:84:FA:D5:FC:8C
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ a7:dc:31:88:64:26:72:62:34:8d:3a:75:7a:71:d4:ae:7a:2c:
+ f4:2d:44:e9:e9:e8:c5:4d:79:b2:dc:12:ea:75:60:44:cb:6e:
+ df:22:47:d5:ae:f6:03:dc:c4:6b:cf:90:75:29:49:50:04:e0:
+ 94:2a:b3:bf:d4:ae:e2:08:ad:52:22:65:91:33:09:79:cf:c9:
+ 27:9b:52:dd:a8:0d:f5:21:b6:58:c4:5f:1b:79:72:69:7a:7b:
+ 49:7d:64:67:d0:d6:1c:21:fe:e9:ae:39:1c:b4:3f:f2:f6:6d:
+ 7e:30:15:76:a3:af:eb:43:c0:ed:f3:8a:bc:48:5c:47:fc:44:
+ 09:da:7d:9a:20:f1:e2:1d:4d:40:34:0c:e1:68:16:9e:47:57:
+ 1a:6a:19:e4:b2:6e:dd:7c:69:5f:b8:2b:bd:e7:cb:e4:9c:9c:
+ 79:e1:a5:b3:82:a1:c9:5b:fd:73:d6:a8:1d:1d:d8:31:d6:37:
+ 00:e9:7a:d2:a2:ee:c0:42:21:22:da:70:6e:a8:8c:fa:0c:24:
+ c9:70:4b:49:0a:c1:db:35:f2:71:d7:30:41:a7:6b:05:92:c6:
+ cd:8c:d4:de:c2:6b:aa:b8:70:d2:fa:cf:9a:01:af:34:80:95:
+ ad:ab:59:86:f2:56:6d:d8:43:95:24:e3:f7:7b:b9:83:89:ed:
+ e7:7a:2f:35
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:cf:bd:56:f0:dc:36:bc:a8:05:9b:fd:e3:c1:86:
+ da:96:c5:0b:b0:7f:fd:e5:6d:f4:df:44:46:82:ed:
+ 45:60:4b:5d:c6:27:5a:d8:f1:3c:28:a5:eb:3f:a9:
+ 5f:bc:b2:a9:20:fe:09:fa:39:76:5f:2a:91:b2:ef:
+ c9:47:70:c9:d0:ce:66:57:25:d0:72:12:c5:2a:ab:
+ 5c:bc:b3:9a:ba:c8:e9:cb:81:6a:16:f1:7d:a9:9f:
+ e8:9a:0a:47:29:53:34:f7:99:70:14:c6:63:4c:aa:
+ ba:96:7c:78:c4:11:d1:cc:3b:35:56:e8:7f:41:9c:
+ 41:69:d2:b0:dd:36:00:ed:dd:a2:bd:e2:56:29:c5:
+ 8d:4e:7b:71:fb:f5:a1:7b:37:df:d2:66:d4:fe:c8:
+ 24:6d:a3:c4:43:e9:d3:3e:e3:08:78:95:e9:86:e3:
+ 73:09:f9:04:fe:1a:25:19:5b:7c:a8:da:62:05:aa:
+ 56:1b:2a:d4:33:ff:4f:a2:fe:34:90:ec:e9:94:f5:
+ 0a:92:e9:b3:bf:c4:d3:78:80:0a:5e:4e:11:58:94:
+ 66:a8:52:b8:6e:49:64:cb:45:ee:7c:46:80:d7:3d:
+ 40:df:9e:69:54:ce:a5:7f:db:6b:73:42:c5:9c:6e:
+ 7c:b6:9f:ac:b9:8c:cd:7f:da:00:7b:3b:c2:dd:4d:
+ 44:c7
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 29:73:E8:7F:69:DE:63:14:43:C6:6D:55:6C:C2:AE:84:FA:D5:FC:8C
+ X509v3 Authority Key Identifier:
+ keyid:77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ ad:b2:08:36:77:a1:da:aa:e4:31:7d:a8:61:03:be:0a:86:a2:
+ 15:3b:08:bb:c8:86:eb:f8:52:c0:63:27:db:5c:25:16:98:05:
+ b1:84:dc:12:74:ce:25:a6:2e:be:32:2c:1f:0a:04:4e:9e:bb:
+ a1:b6:34:ef:20:2d:a3:fe:cc:b3:40:2e:75:9c:2d:c3:c0:e7:
+ 8e:aa:9f:18:60:a9:61:18:4f:a5:d8:3d:c7:d3:09:62:6c:b8:
+ 5a:99:3b:34:70:7b:7d:61:cc:f8:c9:71:97:2c:59:96:d2:1a:
+ c5:4e:ce:df:65:cf:18:05:bd:9f:bc:86:ba:16:55:79:58:d8:
+ f7:32:44:b6:59:32:9f:5d:ef:04:25:2a:2d:54:36:9e:62:0f:
+ c4:df:1c:10:64:02:ba:64:f2:ea:3d:cc:5c:ea:2e:4d:72:fa:
+ e9:72:0f:77:af:5d:1e:32:b9:64:7c:c5:b2:77:36:64:e5:ba:
+ d0:a0:8c:97:7d:b3:76:6c:c1:15:70:f8:0c:50:b8:3c:d4:6c:
+ 4f:33:32:f2:c8:b8:35:cd:80:a2:3a:49:55:ba:2e:5b:c9:9a:
+ b6:77:fb:0f:01:2e:72:21:bc:88:f6:e3:71:8c:68:59:f3:1b:
+ d8:e1:d3:e3:6c:15:5d:8d:82:a3:db:84:44:58:3e:2f:a9:88:
+ 56:2a:a6:4b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:b3:13:19:f8:ad:c0:ff:5e:86:19:9a:3c:7f:0c:
+ 04:81:2c:bd:c4:ee:fe:6c:bb:b5:a2:ee:08:10:bd:
+ bb:b6:d1:6c:0d:e7:49:6a:45:0f:0f:46:2b:b6:49:
+ 49:92:7d:c8:b8:81:c1:3f:70:80:39:8a:29:de:77:
+ f0:a3:3e:ef:8f:8d:9c:74:ca:05:c6:5f:12:fc:d4:
+ 4f:47:64:5d:ea:4d:84:af:f0:d0:88:ff:58:98:ad:
+ 7f:6f:c0:22:bc:8e:a4:44:7b:2c:d3:3e:08:45:2a:
+ 13:20:90:1d:b6:0b:2c:4e:a4:40:c3:76:66:6f:eb:
+ 5c:49:fc:1d:81:8e:a7:cc:a3:91:bd:6f:fa:22:73:
+ 84:35:99:08:2c:3e:8e:0b:74:a6:16:79:b3:37:2f:
+ 66:5c:b1:4c:55:76:af:65:9c:cc:e6:af:b0:8c:c3:
+ 28:24:c9:a0:f2:b4:d0:74:d3:e0:72:af:0d:86:f0:
+ 21:4a:9e:4a:9f:95:7b:7a:73:4c:a9:b5:0a:ac:23:
+ f7:63:64:88:fc:00:9b:69:23:33:1a:75:bd:6d:f6:
+ f2:62:c7:68:19:d0:d1:55:2c:6d:f4:41:d8:3b:79:
+ 41:5f:44:97:b9:8f:5a:b4:0a:12:b9:94:0e:34:c7:
+ a7:93:cf:dd:f1:3d:bb:0f:11:33:fc:c8:c4:76:2d:
+ 9e:cd
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+ X509v3 Authority Key Identifier:
+ keyid:77:B3:BD:49:4D:67:D0:7E:4F:67:C3:26:C7:1E:66:42:F9:6D:E4:08
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 5d:bb:5a:36:f5:74:9c:51:8c:7c:b3:e0:71:91:0d:51:59:45:
+ 92:b8:3c:f1:0a:42:ac:c3:c7:9f:4e:2a:61:09:7d:46:27:c7:
+ a6:23:09:39:39:18:9e:78:3f:94:cf:d6:44:5e:8e:9f:c4:4e:
+ fd:b4:ab:4f:56:ea:90:6d:4d:51:88:55:e2:56:c0:03:14:a2:
+ 99:d2:1d:67:03:75:6d:5c:a0:c5:5c:78:a6:c5:8e:96:6e:7a:
+ 4f:a1:b0:4e:29:62:92:bc:44:88:a4:72:8d:64:16:da:ff:c4:
+ e8:4c:d3:eb:a6:03:85:eb:a8:42:ee:ae:c0:87:f2:43:41:05:
+ 43:e2:d5:ad:b6:59:dd:59:51:6c:2b:77:f3:51:a9:e0:9b:3e:
+ ba:04:64:d3:f3:ce:59:5a:ad:b1:56:da:91:80:89:d9:62:81:
+ 99:9c:a4:49:24:7a:bc:91:4e:ab:86:e6:0b:76:0d:34:2d:75:
+ fa:7b:13:f5:b3:52:22:c1:57:7c:cd:79:0c:2b:ba:8b:87:83:
+ 52:59:5b:69:55:9d:c4:0a:98:b0:b0:dd:88:86:8c:28:c3:b2:
+ bd:35:85:b1:f0:78:6a:99:ac:63:52:08:5b:69:97:55:c0:87:
+ 81:be:bd:09:7f:eb:56:a9:84:9f:f6:9c:df:f2:19:41:60:f1:
+ 06:d1:77:38
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem b/net/data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem
new file mode 100644
index 0000000..f3104f8
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem
@@ -0,0 +1,281 @@
+[Created by: generate-intermediate-signed-with-md5.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+however is signed using the MD5 hash. Verification is expected to fail because
+MD5 is too weak.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:bf:20:16:45:28:21:d2:a5:63:de:24:67:38:92:
+ 4c:f1:a4:c8:45:30:94:b8:aa:5f:7c:1a:3f:6c:28:
+ 2f:31:7e:a6:bb:af:45:46:68:a2:f2:5d:a4:94:4b:
+ 9b:c9:4c:e0:5d:be:ce:34:5e:08:df:a7:50:c0:30:
+ 94:98:0f:52:ec:ec:91:23:91:bc:24:60:65:9d:b7:
+ 74:38:7f:9d:d4:20:94:5c:1b:6f:71:82:e1:b5:98:
+ 95:3c:33:48:7e:6a:c6:e0:59:e6:a2:c5:0b:95:78:
+ 0e:7e:e3:a8:16:93:0a:43:df:ec:d7:03:c0:f1:60:
+ 13:45:9d:52:b5:37:66:03:79:78:8f:d6:53:87:7c:
+ dd:50:8a:16:54:33:bb:62:f2:42:a0:fa:49:c3:c1:
+ e2:c4:c8:d7:db:49:16:43:c8:69:0e:88:e2:f1:2d:
+ c6:59:c6:5a:e3:d8:57:e9:a7:10:48:73:c8:c8:f7:
+ a1:6d:57:25:b3:04:43:05:6a:90:1d:87:36:67:7f:
+ 3e:97:eb:5b:66:03:3a:10:56:32:1d:04:cc:43:90:
+ 82:9c:ed:d2:b4:4d:ba:d0:ac:23:26:f9:25:5e:63:
+ 6c:e1:83:07:2b:ec:38:9a:d1:82:bc:38:a0:64:58:
+ 19:c2:77:3c:e9:bd:20:d5:45:43:8d:ee:51:ba:98:
+ 95:65
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 7E:D1:A4:40:CE:81:CA:14:BD:C9:25:39:E5:F7:21:B6:24:90:61:1D
+ X509v3 Authority Key Identifier:
+ keyid:60:72:15:4D:8C:1A:E1:CD:8F:EF:00:AA:9B:37:4C:00:57:29:66:15
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 6f:98:46:c6:44:e8:ba:f3:06:49:81:74:87:9e:d5:a1:0c:54:
+ 66:56:88:7d:89:5e:cd:2f:1a:06:af:d8:c7:ed:9e:ad:8c:7a:
+ b0:3d:eb:93:3a:59:49:89:ba:ec:27:15:0e:08:d0:cd:ff:40:
+ 57:3f:c2:77:c1:08:cb:5d:4f:40:ec:20:b3:96:9b:43:fa:96:
+ 00:42:cd:dc:db:27:3e:98:fd:8a:45:80:ef:5c:86:20:12:a5:
+ 83:b3:74:66:09:57:1c:4d:7e:0e:00:c4:57:dc:86:c0:2b:db:
+ fb:3a:77:1c:5f:7d:8f:ae:47:16:96:85:48:a7:95:4c:bc:b1:
+ 18:09:34:c4:78:76:57:46:db:1e:b7:12:16:78:54:ec:2d:eb:
+ 44:00:54:48:1d:6b:b0:d1:98:a8:58:ab:3d:f2:f2:5b:06:44:
+ d1:d5:d6:f5:d1:f2:c4:46:93:9a:9b:29:a8:9f:91:3d:e5:16:
+ d6:d6:ba:55:76:1c:2d:90:76:2f:92:a1:e4:52:a4:f3:f3:2a:
+ 3c:b3:11:78:f6:9a:ce:17:c3:8f:da:57:fc:a2:02:06:59:9f:
+ 18:10:ba:45:b4:0d:3d:64:aa:6c:ae:5b:a6:c8:f3:8b:d0:b0:
+ b6:1b:4a:cc:6c:fe:f9:d6:e4:15:da:28:1b:22:b3:ce:b4:6f:
+ bf:39:9b:34
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: md5WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c7:04:ea:a3:74:51:66:9f:f2:6b:5d:9a:3d:96:
+ bd:5c:b3:9e:9c:df:64:42:c7:85:1e:56:7a:3e:d5:
+ 3d:c9:f3:17:46:a3:a0:98:f6:80:df:f4:54:ca:e2:
+ d5:e9:15:b8:3a:19:4e:1e:26:67:00:80:96:d5:bc:
+ 1e:af:a4:f3:23:de:15:72:89:1f:50:3f:8c:e1:62:
+ 6d:e1:0d:42:9f:67:76:aa:f5:20:b4:4d:58:fd:3d:
+ 63:57:bc:9c:23:fa:db:31:0c:09:37:0d:7c:f4:d1:
+ 06:c4:7f:b1:22:d1:df:05:43:a4:12:94:e2:02:ee:
+ b7:ae:cd:48:04:00:39:4f:dc:40:f7:62:a7:d9:3e:
+ 81:9c:5d:98:6f:8d:0f:da:b6:0e:ad:1d:5b:ff:b6:
+ 50:90:ab:55:c7:2a:db:d8:67:6c:0f:87:68:8a:2a:
+ 79:24:a7:64:d8:c1:72:15:ff:6e:ca:31:f1:92:42:
+ 2e:78:a5:ce:2b:07:8a:4b:a0:80:88:14:76:d6:e1:
+ ad:b2:75:9d:79:9b:d6:c2:cc:ac:74:67:d2:5b:90:
+ 6f:c4:8f:50:4c:ce:50:89:a4:69:ab:ca:d4:d1:a4:
+ 47:ae:0d:46:f3:5f:28:91:66:27:02:f0:7a:da:aa:
+ 80:be:c2:e7:83:89:06:49:de:9d:60:03:a3:fc:11:
+ e2:2b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 60:72:15:4D:8C:1A:E1:CD:8F:EF:00:AA:9B:37:4C:00:57:29:66:15
+ X509v3 Authority Key Identifier:
+ keyid:60:B4:95:7F:EA:F1:29:B2:E9:9D:64:83:A9:C8:A3:49:6F:3E:18:53
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: md5WithRSAEncryption
+ 0b:ea:a8:1e:f0:70:66:9b:e0:48:9a:fa:62:3b:80:b0:9f:41:
+ e3:60:35:9c:b4:6e:0c:32:17:9d:38:72:b3:de:69:45:69:b1:
+ 4b:87:2a:e1:68:59:d6:b9:03:c4:88:7e:e0:77:26:3d:c5:ad:
+ 55:3f:13:bc:13:42:0f:9c:be:f7:70:3e:19:79:96:3b:b8:12:
+ d6:8a:a2:04:d2:17:ee:bd:78:db:cc:9f:54:87:26:89:61:c9:
+ f1:3e:8f:2f:19:55:49:05:c0:35:b2:ea:c4:ec:9a:11:d6:88:
+ f2:4b:ad:68:0a:32:75:42:42:a0:6a:51:cb:0f:63:32:20:4a:
+ 59:89:e5:f9:61:ee:63:80:e0:71:03:d1:58:ea:d6:31:24:11:
+ ef:03:44:02:76:86:67:99:a5:71:18:a8:4e:be:fe:78:63:20:
+ 67:b1:5a:1d:52:2a:48:fb:8a:ee:99:af:8f:57:37:43:67:1c:
+ 54:00:d0:50:8c:ce:18:e0:ef:7b:cc:e1:13:d1:cc:3f:ea:3c:
+ ce:cf:07:fc:6e:4a:09:b1:1c:54:70:a4:21:47:5d:70:7d:b4:
+ 04:3e:30:50:1d:86:2a:a6:67:3f:bd:b0:cb:57:e0:26:81:45:
+ c0:9a:86:8c:e6:ab:d0:87:9a:05:ee:2c:c5:eb:c6:c7:c0:94:
+ 68:4a:48:20
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:d3:ee:d0:8d:92:7d:ce:5f:4e:f2:0c:55:4d:bd:
+ 2f:b3:ff:6a:ab:2c:28:5e:c6:bd:49:ae:80:f0:e6:
+ 2c:30:e8:0a:e7:2b:3f:d7:1e:a8:6d:f1:c4:46:0e:
+ f5:1d:3c:e1:05:5d:a9:91:69:57:43:22:33:bc:c1:
+ 18:6e:b1:48:1f:13:64:18:03:c1:63:14:97:21:5a:
+ 65:49:52:6a:57:9d:ad:7b:f6:06:6e:f0:af:a0:6d:
+ 2c:6d:53:9a:ad:82:56:2a:95:e1:a7:5a:a3:b4:77:
+ c7:d7:97:39:73:c8:de:a8:19:09:ba:69:69:01:25:
+ e6:68:e3:d0:5a:84:5d:3e:f0:8a:3b:c6:31:26:34:
+ 38:ed:8d:40:80:0f:5f:84:d7:e5:4f:24:ca:ff:c1:
+ 48:f5:74:3a:b3:1e:9f:b5:ef:bb:24:cb:91:f3:81:
+ 47:bd:80:eb:ef:dd:45:39:fd:d2:c3:be:3e:ba:e6:
+ 5b:09:e0:88:98:27:91:e5:9a:5b:88:d6:5e:17:7f:
+ 08:e2:2d:f4:3c:3f:08:54:7b:10:53:f4:7d:ef:67:
+ 04:6f:d6:74:08:d1:b9:03:2d:89:5d:ca:cf:de:3d:
+ d0:e5:e2:e5:2a:7f:21:29:23:7e:b2:75:d9:ea:5c:
+ 73:45:7e:33:83:b6:62:5e:01:3b:dd:11:99:c7:c5:
+ 7b:65
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 60:B4:95:7F:EA:F1:29:B2:E9:9D:64:83:A9:C8:A3:49:6F:3E:18:53
+ X509v3 Authority Key Identifier:
+ keyid:60:B4:95:7F:EA:F1:29:B2:E9:9D:64:83:A9:C8:A3:49:6F:3E:18:53
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 49:67:dc:58:22:e3:ee:0a:e8:1a:3d:38:1a:13:dd:d7:e0:45:
+ 67:69:b1:44:49:e2:96:15:86:94:8b:d4:fb:8a:94:d5:22:39:
+ 20:48:97:d2:09:a7:16:4b:40:f3:3c:37:3e:e8:81:28:08:cf:
+ 4a:2c:3e:79:d0:0d:90:4d:63:a5:63:ce:24:75:03:41:7f:79:
+ 17:3f:4d:df:60:98:a5:a3:c1:39:14:4b:7e:b7:0d:8a:9f:d6:
+ a4:0b:0c:34:c9:fe:3b:c0:89:9e:5e:27:3d:d8:3d:d5:28:46:
+ e4:b9:f5:28:39:b4:cf:1a:ea:fd:d3:14:bd:8b:87:78:35:80:
+ a1:bb:4e:59:cc:2a:f7:f7:40:bc:b7:75:cc:35:f5:3d:95:bb:
+ 32:7a:0c:9d:67:c7:ff:b0:da:e6:05:e6:12:d5:1e:19:3c:69:
+ 5d:d8:08:5e:bc:fe:df:ab:36:a4:70:3f:2c:6c:1c:8e:e3:f1:
+ 0b:b3:22:e4:5b:fd:86:23:7a:bd:9b:b9:56:08:e3:a2:6d:2b:
+ e3:cb:42:93:6f:c8:5f:57:bd:66:41:51:8a:5d:4b:7e:0f:36:
+ 82:61:8e:e0:4e:2c:9a:7a:45:e3:21:1c:b8:86:cf:a0:35:1b:
+ bf:55:36:86:05:1c:df:b0:e2:85:3b:a4:c7:7c:69:f9:56:b3:
+ 20:28:e4:c2
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem
new file mode 100644
index 0000000..49aa20d
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem
@@ -0,0 +1,284 @@
+[Created by: generate-intermediate-unknown-critical-extension.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as critical.
+Verifying this certificate chain is expected to fail because there is an
+unrecognized critical extension.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:c7:8a:82:ba:91:ca:1e:03:94:8f:9d:68:98:8b:
+ 95:3b:c1:e3:d1:5b:82:45:bf:72:24:cb:6f:de:91:
+ 2e:e3:49:ba:31:7b:57:db:90:36:32:e6:b4:41:8f:
+ 38:89:c6:6b:82:60:dc:98:e7:4b:06:55:41:db:9c:
+ a8:e0:97:15:5a:3c:06:ac:37:89:f5:9b:65:b6:93:
+ a7:2e:45:f3:b3:15:59:a7:6d:64:d5:cb:93:da:46:
+ b1:97:8a:79:f6:48:4b:4c:18:d6:38:cf:55:5b:6b:
+ 78:c2:f5:f0:37:54:67:8d:90:43:81:ec:15:1e:e7:
+ 75:55:57:7e:6a:74:71:73:6d:b4:d5:37:b5:28:40:
+ 2e:6f:a6:64:b8:77:fd:2c:6c:25:2c:27:cf:db:fa:
+ b4:c9:39:c2:d1:1e:e2:a1:73:bb:ec:81:dc:c3:ec:
+ d0:a0:08:1e:81:53:88:51:d2:83:d2:ba:33:3f:79:
+ 1e:2a:6f:80:7b:21:d8:bb:80:93:68:ea:f4:a9:d5:
+ 88:b8:ac:0b:ff:90:bd:cc:8a:6b:e7:e5:27:47:d9:
+ a0:68:5d:38:3c:b0:a3:4a:ae:5a:d9:a6:f8:51:61:
+ 28:fb:21:5c:01:aa:72:76:60:f6:e0:88:a1:44:b5:
+ fa:85:27:45:67:0f:c6:b1:11:00:81:23:3c:aa:a1:
+ 58:65
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 94:30:C8:2B:C4:EC:EB:81:5B:D2:2B:62:ED:34:29:BB:3C:40:FD:4B
+ X509v3 Authority Key Identifier:
+ keyid:C8:5D:13:08:EB:15:BB:7B:35:8E:74:DF:D3:C3:55:51:78:E1:4A:D3
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ ca:46:c4:08:c9:4e:1b:3f:96:fd:d7:9c:89:d6:ea:7f:76:53:
+ ac:03:55:eb:9a:d5:86:f8:66:cd:39:54:f0:7b:d1:74:62:83:
+ c7:58:46:b1:ad:da:b7:fd:03:94:3b:b8:a5:4a:01:45:53:2c:
+ c6:ae:55:52:08:78:de:66:49:a0:40:eb:7d:43:03:00:46:03:
+ 1d:6d:c5:83:57:f6:92:a5:c6:04:76:f1:de:bf:ec:90:8b:3b:
+ 99:70:80:41:10:93:07:2c:eb:cd:5b:b5:e6:12:76:41:db:81:
+ ab:f5:6a:a5:e4:67:45:39:fa:14:bf:0d:e7:e4:a9:f3:9a:57:
+ 4c:20:4e:68:fd:1a:35:00:66:b7:c6:fd:2f:14:db:7b:28:3a:
+ 59:31:5a:9d:96:d1:2e:27:d1:7a:c3:eb:b4:28:f1:e2:9a:d1:
+ 1d:be:6b:9d:81:4e:4c:7f:5d:fe:5f:20:8f:bb:f0:85:ee:bb:
+ 2d:66:40:bb:ec:40:c1:51:4f:f9:1d:24:4e:64:ad:64:1c:e5:
+ 68:3f:cb:b2:6c:c5:82:c9:e7:5d:7d:73:8d:ec:d9:b7:af:06:
+ 71:53:92:dd:aa:23:28:38:f0:06:d6:64:cb:f5:ac:f2:4c:e2:
+ 5a:55:c3:a6:d7:7e:32:21:19:54:c4:aa:cd:21:60:fd:b7:45:
+ 81:a1:53:ae
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:da:1c:0d:74:40:2d:01:10:9c:e0:0c:aa:01:c7:
+ ed:a4:03:b5:a0:b0:1d:c0:70:70:9a:76:6d:5d:4d:
+ 16:ed:39:87:76:43:e1:c1:3f:b9:f8:20:63:40:02:
+ d4:0f:f4:f5:4a:97:eb:46:ad:8c:29:cb:45:a7:33:
+ 16:b0:10:b3:bc:f6:9e:fb:e6:61:d5:7d:43:ce:27:
+ 43:ae:4f:b1:d1:47:6b:13:e5:20:66:09:b9:10:83:
+ a3:d4:40:6d:cc:fb:cb:28:1e:6e:bc:75:46:7b:9d:
+ f9:b4:5f:c9:43:24:d6:d7:c1:a8:6b:d6:52:1e:6d:
+ 9d:89:d6:41:eb:9f:db:32:e3:05:21:b1:b7:77:78:
+ e1:d4:f9:95:c5:84:63:91:88:ce:31:66:2c:51:89:
+ f3:a4:a3:0d:11:b2:a2:45:fd:59:1b:09:a9:bc:48:
+ 38:0d:25:c7:dd:c9:6a:15:5f:c5:5f:60:5e:c0:28:
+ 5d:19:ff:51:17:86:ea:b5:56:f6:1e:cc:ee:80:93:
+ f2:82:7b:2f:fa:96:1f:4b:15:b0:34:23:81:bb:b9:
+ a4:83:1a:2f:e0:6d:ee:48:96:4d:f1:7b:09:3e:1f:
+ 43:c6:76:8f:56:fd:1e:5f:21:6f:6f:49:b0:94:fa:
+ c9:be:76:61:f6:f8:51:72:40:99:d5:f2:f6:09:f7:
+ d9:8b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ C8:5D:13:08:EB:15:BB:7B:35:8E:74:DF:D3:C3:55:51:78:E1:4A:D3
+ X509v3 Authority Key Identifier:
+ keyid:3F:B3:AA:13:E1:86:96:B3:E3:8D:20:EC:BE:70:71:D0:1B:F8:67:9A
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ 1.2.3.4: critical
+ ....
+ Signature Algorithm: sha256WithRSAEncryption
+ dc:d2:aa:62:74:fa:cf:eb:4f:b3:cd:aa:a9:52:b0:fe:7a:0d:
+ 96:e4:07:8f:b6:d4:6d:ad:33:a6:4e:ad:2f:a5:ff:83:a0:75:
+ d1:ed:fc:c0:80:a6:73:73:49:6d:0d:3f:84:b5:d4:cf:07:74:
+ 3e:aa:bf:38:59:e4:fa:b6:d2:45:07:b3:a6:0b:b0:43:47:03:
+ 7e:45:c1:7b:f1:84:10:c3:0b:d7:2f:c9:be:ff:96:da:1b:4b:
+ cb:fa:05:ca:22:d2:e4:f0:f7:32:91:4f:95:05:6c:5d:be:6c:
+ 64:7b:cb:6d:a1:a9:d0:9c:5b:1d:3a:bd:4a:50:69:e2:06:fa:
+ 89:2b:3b:2e:12:f6:3f:d7:79:f1:36:ec:e3:6c:12:67:b2:a3:
+ b0:89:16:8c:2c:02:04:0d:89:e1:ca:69:d0:86:7e:fd:14:9d:
+ c8:ef:06:42:fc:46:b9:88:25:e2:b5:b7:8a:6b:ab:d6:1f:ec:
+ d1:12:b3:28:cd:9e:9f:56:8d:7c:49:6c:06:96:93:66:25:43:
+ b0:76:b0:9a:59:f8:9c:35:29:8c:db:a7:74:d7:ac:e7:99:ea:
+ 11:34:0b:6f:cf:bb:5e:28:2a:ab:9a:13:83:44:d7:01:3c:61:
+ c8:10:dd:0d:ef:66:3d:be:ee:72:70:d3:27:a2:b0:f7:f1:bc:
+ 50:e1:ac:3e
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:e7:de:8d:6f:81:af:35:2d:99:eb:62:b4:41:d8:
+ dd:55:5f:5a:12:02:46:8f:41:14:fe:f5:b0:32:ab:
+ fa:96:2a:e2:ba:e6:3a:1d:89:80:8f:20:6a:40:4a:
+ 5f:97:d3:5d:7f:e8:eb:26:f1:f9:1b:a2:a7:cd:54:
+ c0:d9:64:77:dc:ba:90:a4:b7:86:3f:8c:72:c2:ad:
+ 96:6c:f0:c0:30:d8:e0:71:f5:ff:f3:8c:18:34:3a:
+ 07:b2:79:32:92:91:d4:51:95:c4:bb:62:78:2e:30:
+ f8:b5:f1:91:26:9a:28:07:27:cc:57:d5:a2:1c:e9:
+ 20:ac:fa:3d:db:3b:70:81:17:3d:4b:54:a8:fe:2f:
+ 18:f7:7f:de:cb:4f:ec:70:c8:fa:a9:ed:64:41:36:
+ c2:74:a7:dd:e6:27:2b:af:79:ce:76:86:57:3a:2c:
+ d9:52:b8:bf:87:de:f1:5e:80:81:70:10:78:e7:89:
+ 0a:d1:14:74:f4:f0:93:cf:89:68:66:8f:d4:2a:8a:
+ c8:ff:96:fb:f6:cc:ee:dd:a6:62:f0:73:43:a6:29:
+ 7a:51:7e:63:e1:8f:d9:83:10:23:ed:1b:d4:26:2d:
+ 40:62:c5:ed:c5:af:4f:d9:9b:87:5b:3a:7e:2c:43:
+ 59:e3:f4:91:2f:ab:d0:04:a3:5e:da:ac:b0:c1:e2:
+ 15:99
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 3F:B3:AA:13:E1:86:96:B3:E3:8D:20:EC:BE:70:71:D0:1B:F8:67:9A
+ X509v3 Authority Key Identifier:
+ keyid:3F:B3:AA:13:E1:86:96:B3:E3:8D:20:EC:BE:70:71:D0:1B:F8:67:9A
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 84:9a:7d:63:f9:44:d8:2c:4e:b0:24:86:af:0c:ba:0e:29:33:
+ 67:68:7d:a2:1d:46:99:b0:fb:9d:65:69:da:f8:46:67:d9:c4:
+ 30:72:eb:57:79:4a:e8:2d:7b:57:d4:c2:18:13:19:d1:36:8c:
+ 45:9f:49:1e:a6:83:c5:41:41:fd:29:ac:a0:12:c7:0f:6e:a6:
+ 45:70:64:c3:9d:b0:22:2e:ed:c0:8d:6c:68:c0:94:d9:ba:e0:
+ 2f:5a:1c:29:ed:d0:d6:ec:0e:bb:41:ce:1e:e3:93:c4:85:80:
+ aa:a1:67:31:76:80:24:a4:70:ec:f3:6e:a3:63:8c:71:fd:38:
+ 65:1f:56:e9:75:74:15:3c:69:f3:e3:d3:9d:9a:9c:7d:f6:00:
+ 71:98:61:68:13:7c:23:79:e1:84:68:a6:3d:ce:19:1c:0a:62:
+ 48:d9:f9:4c:92:ff:b7:5b:e8:1d:e4:66:00:50:4d:38:c8:3a:
+ e3:e1:8e:ae:aa:32:30:65:78:25:b3:d0:eb:4f:de:ab:9d:51:
+ 40:7e:6f:d4:15:87:cf:41:7d:be:3d:32:45:a2:f1:a8:7c:11:
+ 97:90:a4:ea:d8:aa:c2:b7:08:34:a3:62:23:4b:a5:e3:9e:4d:
+ 90:7f:d7:4c:dc:4f:c8:ac:b2:b6:de:42:fd:05:98:f6:33:90:
+ 54:c3:6a:3f
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+RkFJTA==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem b/net/data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem
new file mode 100644
index 0000000..c7892e9
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem
@@ -0,0 +1,284 @@
+[Created by: generate-intermediate-unknown-non-critical-extension.py]
+
+Certificate chain with 1 intermediate and a trusted root. The intermediate
+has an unknown X.509v3 extension that is marked as non-critical. Verification
+is expected to succeed because although unrecognized, the extension is not
+critical.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:b6:04:af:e9:58:68:65:f6:6e:cd:e3:fe:93:35:
+ d3:c0:06:53:75:df:15:59:23:d3:fd:42:8c:36:a1:
+ df:6b:35:3f:7d:63:57:e4:17:d9:2a:63:77:7f:d6:
+ f5:b0:85:00:70:ab:f9:5e:f3:00:4d:0f:5e:28:b8:
+ 56:7b:15:f1:4e:eb:32:e0:bf:e4:83:2b:49:ff:ac:
+ 3e:09:38:40:75:73:11:ee:0c:8c:d9:e6:c6:d2:44:
+ ce:99:74:78:8b:90:19:b5:32:75:45:ba:e0:76:55:
+ 5f:c9:44:27:e2:91:8e:9a:21:aa:3d:be:e7:cf:1e:
+ af:08:4b:b0:cc:03:b8:c6:2b:92:ae:d6:1e:61:fa:
+ 18:4e:b5:98:cc:0b:55:16:77:4c:9c:26:99:0f:3b:
+ 91:22:87:19:36:b9:4f:72:c9:40:bb:d0:2b:8e:d7:
+ c3:1b:eb:2e:e4:82:a8:0e:7d:45:a1:c7:6a:e9:db:
+ d2:f7:30:9b:ad:4f:a7:04:17:2b:78:85:15:1a:8f:
+ f1:77:6c:51:c0:a8:fc:53:70:f0:32:8c:86:09:8b:
+ 00:9c:3f:32:ff:cc:86:4f:4c:32:6a:f9:53:5d:36:
+ f9:55:34:8c:e4:0e:56:af:bf:f6:92:25:8a:4e:d5:
+ 66:53:66:7b:b0:16:08:04:d2:56:de:c6:b0:75:2c:
+ b5:d5
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ A7:25:2F:78:CA:01:CA:68:1D:8F:FF:93:D6:FA:FA:A3:9C:BB:C8:0E
+ X509v3 Authority Key Identifier:
+ keyid:D5:16:02:7F:4F:D3:7F:21:1A:9D:CC:55:09:30:CF:EF:6C:08:1F:53
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ 6a:e8:e9:eb:26:54:d4:51:72:d0:4d:a3:7c:e4:5e:8d:bd:c7:
+ 5e:0a:ab:46:a0:88:20:15:68:56:3f:43:0d:13:60:30:eb:65:
+ 86:45:5b:0d:8b:c4:b0:7f:2f:18:fe:27:a7:6e:4b:10:99:05:
+ 25:f8:4b:9a:80:a3:36:f6:35:5e:0a:dc:0a:81:3c:fc:be:32:
+ 71:fc:ed:8c:d9:77:ce:25:3c:74:af:b7:ad:50:ee:dc:fe:35:
+ 91:15:cc:79:91:f0:48:74:68:8b:a0:e2:70:95:df:1d:b3:e5:
+ c5:48:bc:9c:c3:4c:95:50:94:8d:3c:42:9a:13:e3:03:b3:df:
+ 43:32:bf:0f:cd:50:d9:2c:52:1c:30:9e:5f:30:02:69:66:bc:
+ e5:92:63:43:ca:62:e8:d2:ae:dd:2a:e1:ac:ce:00:f0:d7:54:
+ 81:6b:b8:1f:b1:0e:e7:57:2b:71:17:50:4b:fb:e4:f0:37:2a:
+ da:37:e2:80:4a:87:9b:d6:d5:6d:6b:b4:af:4b:43:c9:08:9d:
+ 57:f1:98:3c:2a:b6:58:7d:a8:83:d3:f0:b1:df:c5:bd:8b:0c:
+ a8:48:91:0c:c8:eb:29:f8:54:70:b0:49:b7:f4:e3:80:cc:2e:
+ 37:23:23:f4:49:21:8d:22:12:8c:3e:24:a2:11:66:15:cd:68:
+ 96:19:3b:5f
+-----BEGIN CERTIFICATE-----
+MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BK/p
+WGhl9m7N4/6TNdPABlN13xVZI9P9Qow2od9rNT99Y1fkF9kqY3d/1vWwhQBwq/le
+8wBND14ouFZ7FfFO6zLgv+SDK0n/rD4JOEB1cxHuDIzZ5sbSRM6ZdHiLkBm1MnVF
+uuB2VV/JRCfikY6aIao9vufPHq8IS7DMA7jGK5Ku1h5h+hhOtZjMC1UWd0ycJpkP
+O5Eihxk2uU9yyUC70CuO18Mb6y7kgqgOfUWhx2rp29L3MJutT6cEFyt4hRUaj/F3
+bFHAqPxTcPAyjIYJiwCcPzL/zIZPTDJq+VNdNvlVNIzkDlavv/aSJYpO1WZTZnuw
+FggE0lbexrB1LLXVAgMBAAGjgekwgeYwHQYDVR0OBBYEFKclL3jKAcpoHY//k9b6
++qOcu8gOMB8GA1UdIwQYMBaAFNUWAn9P038hGp3MVQkwz+9sCB9TMD8GCCsGAQUF
+BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAaujp6yZU1FFy0E2jfORe
+jb3HXgqrRqCIIBVoVj9DDRNgMOtlhkVbDYvEsH8vGP4np25LEJkFJfhLmoCjNvY1
+XgrcCoE8/L4ycfztjNl3ziU8dK+3rVDu3P41kRXMeZHwSHRoi6DicJXfHbPlxUi8
+nMNMlVCUjTxCmhPjA7PfQzK/D81Q2SxSHDCeXzACaWa85ZJjQ8pi6NKu3SrhrM4A
+8NdUgWu4H7EO51crcRdQS/vk8Dcq2jfigEqHm9bVbWu0r0tDyQidV/GYPCq2WH2o
+g9Pwsd/FvYsMqEiRDMjrKfhUcLBJt/TjgMwuNyMj9EkhjSISjD4kohFmFc1olhk7
+Xw==
+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:94:b0:d4:b6:63:20:79:6f:d7:5f:3e:0a:32:b1:
+ 79:0a:be:db:d4:86:23:8d:f8:17:0d:3e:b8:49:ed:
+ d3:6a:39:db:e4:16:6b:f6:c9:03:d6:0f:60:a0:ae:
+ 6c:86:18:2d:50:06:70:48:5f:9b:14:17:4d:2b:d5:
+ e4:e9:8c:19:0b:78:19:0e:d9:82:39:8f:92:f8:bc:
+ 7f:cc:7a:6e:06:7c:75:e3:7e:7e:24:71:7e:19:ba:
+ 64:2f:7b:60:e5:ab:c0:1a:9a:44:9d:a4:db:eb:d5:
+ 5b:69:31:ab:9f:86:9c:ec:90:2f:c2:29:ea:19:15:
+ fb:85:50:89:71:67:28:70:46:f7:e4:1e:6d:e6:81:
+ 49:15:7e:e9:2e:9f:14:d6:f9:02:c9:91:8f:d1:a9:
+ 65:8a:cc:29:57:7b:e5:a8:08:db:19:a6:27:2f:89:
+ 4b:e1:ca:3e:1e:c4:f6:65:4f:b0:26:c4:29:13:44:
+ 3f:6c:49:ba:b7:99:2c:70:0c:54:7b:c2:9a:06:ce:
+ 95:51:62:16:a3:0c:9e:2c:34:d0:04:65:32:41:d7:
+ db:6e:38:e9:12:8c:91:a5:0d:fe:b2:c6:b7:74:f4:
+ 23:65:d9:ae:88:af:0f:12:6a:28:f0:7b:db:2b:e4:
+ 6d:1b:74:de:93:e9:f6:72:f1:1c:28:8f:8a:32:37:
+ a2:65
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ D5:16:02:7F:4F:D3:7F:21:1A:9D:CC:55:09:30:CF:EF:6C:08:1F:53
+ X509v3 Authority Key Identifier:
+ keyid:99:38:AC:DE:DD:17:19:E4:9D:92:02:FD:01:4D:40:C5:2C:4E:B7:4A
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ 1.2.3.4:
+ ....
+ Signature Algorithm: sha256WithRSAEncryption
+ 0b:1e:08:36:25:d9:1b:97:a3:07:63:ca:17:a1:df:42:14:a5:
+ 6d:75:63:a8:ba:b5:94:b1:59:0b:5c:18:a7:e2:8f:a7:8b:40:
+ f0:0f:cf:4d:8d:87:a0:77:44:b3:0a:b6:b2:a2:aa:25:0e:a5:
+ cf:4b:6b:77:6e:e1:e2:06:19:0d:97:d9:a9:95:72:26:24:07:
+ e5:cd:8c:c8:e1:c5:1f:6c:8e:42:dd:93:da:4c:6e:07:e5:6e:
+ b2:e0:e6:c2:04:1d:1f:e0:4f:f0:5d:00:63:2c:ea:35:e3:dc:
+ c3:14:6d:8f:86:23:ab:a8:d1:29:81:98:1e:b7:fb:34:4c:65:
+ 18:27:fa:f5:5e:54:e6:3e:1e:b9:24:4c:86:cd:94:81:8d:60:
+ 49:d7:a7:a7:de:a5:4d:30:32:88:0a:95:a9:36:01:51:20:1e:
+ 2f:e2:1f:b8:fb:fb:14:77:9a:37:c3:96:21:e5:8b:96:a9:a0:
+ 97:24:b8:1c:f5:dd:a2:1b:bb:04:c4:f3:b0:22:56:38:cc:20:
+ e1:5b:51:90:7c:14:5c:5e:ce:df:b1:a9:57:a2:3b:d6:0f:56:
+ 3b:96:94:7e:c5:c7:a8:6e:eb:77:fe:50:1e:21:c8:0b:c2:3f:
+ 6f:48:d0:dd:d4:f5:29:39:3f:e1:a7:bd:c8:ba:35:d3:28:72:
+ 92:d4:e6:33
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:a3:83:87:29:55:0b:8e:0a:7e:d7:d3:74:4f:6c:
+ 58:a6:8c:5c:09:8d:13:65:8b:94:04:8e:52:13:93:
+ 9e:8c:75:2b:37:f7:9f:ca:64:92:f2:42:e9:8d:d6:
+ 36:19:ab:14:e4:f3:76:16:65:68:3d:3b:51:eb:e5:
+ d0:33:af:8e:26:5b:f2:5c:4e:3d:7e:11:46:b6:2a:
+ 6d:fd:3a:54:57:91:8b:6c:e1:fb:8b:08:b8:80:d3:
+ 0d:2d:d0:b8:2e:1e:f0:b3:33:c5:15:0b:b0:ad:de:
+ 27:68:a4:3d:3b:6c:8d:4c:a6:d0:5c:7e:58:52:01:
+ 8f:fe:fb:86:5e:ce:ea:fc:33:77:28:c5:4c:ee:d0:
+ 0b:cb:a7:97:7f:05:70:53:a3:61:06:fa:b3:9d:7e:
+ d5:dd:3f:ef:58:04:f8:3c:91:fc:8d:fa:ca:cd:97:
+ a4:3b:44:ac:dd:64:a7:32:08:87:0f:73:36:d7:14:
+ e0:1d:b8:29:11:97:cb:9d:79:1f:bc:c8:cc:28:ae:
+ 8e:9a:2f:39:62:1f:28:aa:b9:c7:81:7c:34:96:44:
+ 39:e6:00:4b:5b:0e:4b:7a:fd:ca:bf:5d:67:50:91:
+ 3a:59:89:1b:3a:12:7c:7e:b9:58:54:e5:4f:97:00:
+ 35:c8:a7:b9:fd:3f:5e:08:5e:ac:0c:ba:61:e8:42:
+ 34:33
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 99:38:AC:DE:DD:17:19:E4:9D:92:02:FD:01:4D:40:C5:2C:4E:B7:4A
+ X509v3 Authority Key Identifier:
+ keyid:99:38:AC:DE:DD:17:19:E4:9D:92:02:FD:01:4D:40:C5:2C:4E:B7:4A
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 47:a7:24:e7:1f:29:34:d7:8e:3a:e1:af:aa:d3:3b:32:f4:d6:
+ 7d:ec:ab:7c:34:59:0b:b1:33:80:6a:d4:36:4a:78:d3:3a:d6:
+ 97:0d:8b:81:54:09:91:b5:30:79:78:e7:52:11:ba:e8:57:af:
+ f3:f8:f0:ff:17:9a:e3:d0:a0:89:81:50:e8:67:47:9b:b5:68:
+ ed:99:10:1b:d6:31:58:24:dd:74:3c:8b:76:77:46:a3:b9:ca:
+ b6:4b:3d:ca:b9:5b:ac:e7:92:8c:d3:f2:4a:ba:4b:2f:c6:11:
+ cf:38:15:59:5a:fa:2d:d2:72:31:8f:54:a4:7e:44:a7:26:9d:
+ 1b:38:e0:ac:75:72:9c:71:4c:78:54:80:8f:74:b7:11:b0:5c:
+ c7:69:a5:03:1e:cd:5e:c5:cd:60:0e:80:32:19:02:e0:8c:b4:
+ 76:e7:00:a1:e5:bc:29:31:61:a6:55:f0:72:92:78:69:6f:26:
+ 08:96:71:b9:42:a9:eb:cc:54:8e:d6:55:1a:26:2c:a0:b5:a6:
+ df:52:86:a1:df:26:da:26:86:d5:17:5b:c9:9b:90:c0:6c:ab:
+ 23:1a:82:2d:ff:b6:83:ae:3c:c1:c3:85:5e:49:aa:d6:ef:fd:
+ f4:4a:22:7c:90:b8:46:2e:15:63:93:0c:c5:2d:9e:f6:32:03:
+ 53:10:30:36
+-----BEGIN TRUSTED_CERTIFICATE-----
+MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKODhylVC44KftfTdE9s
+WKaMXAmNE2WLlASOUhOTnox1Kzf3n8pkkvJC6Y3WNhmrFOTzdhZlaD07Uevl0DOv
+jiZb8lxOPX4RRrYqbf06VFeRi2zh+4sIuIDTDS3QuC4e8LMzxRULsK3eJ2ikPTts
+jUym0Fx+WFIBj/77hl7O6vwzdyjFTO7QC8unl38FcFOjYQb6s51+1d0/71gE+DyR
+/I36ys2XpDtErN1kpzIIhw9zNtcU4B24KRGXy515H7zIzCiujpovOWIfKKq5x4F8
+NJZEOeYAS1sOS3r9yr9dZ1CROlmJGzoSfH65WFTlT5cANcinuf0/XgherAy6YehC
+NDMCAwEAAaOByzCByDAdBgNVHQ4EFgQUmTis3t0XGeSdkgL9AU1AxSxOt0owHwYD
+VR0jBBgwFoAUmTis3t0XGeSdkgL9AU1AxSxOt0owNwYIKwYBBQUHAQEEKzApMCcG
+CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
+IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBHpyTnHyk0
+14464a+q0zsy9NZ97Kt8NFkLsTOAatQ2SnjTOtaXDYuBVAmRtTB5eOdSEbroV6/z
++PD/F5rj0KCJgVDoZ0ebtWjtmRAb1jFYJN10PIt2d0ajucq2Sz3KuVus55KM0/JK
+uksvxhHPOBVZWvot0nIxj1SkfkSnJp0bOOCsdXKccUx4VICPdLcRsFzHaaUDHs1e
+xc1gDoAyGQLgjLR25wCh5bwpMWGmVfByknhpbyYIlnG5QqnrzFSO1lUaJiygtabf
+Uoah3ybaJobVF1vJm5DAbKsjGoIt/7aDrjzBw4VeSarW7/30SiJ8kLhGLhVjkwzF
+LZ72MgNTEDA2
+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
index fcd63fa..23a69d8 100644
--- a/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem
@@ -1,4 +1,4 @@
-[Created by: ./generate-key-rollover.py]
+[Created by: generate-key-rollover.py]
A certificate tree with two self-signed root certificates(oldroot, newroot),
and a third root certificate (newrootrollover) which has the same key as newroot
@@ -48,30 +48,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:be:12:1c:48:e4:73:1f:5c:d2:54:a9:7b:58:1c:
- 37:73:c2:49:26:3e:ed:b5:6b:55:17:c9:4c:52:34:
- ce:d9:76:86:32:74:74:ae:11:b2:99:1b:51:a0:33:
- 48:34:2f:b9:d3:2b:06:c2:5c:29:53:35:ce:7c:a6:
- 67:b2:6a:d4:33:c3:13:62:30:a1:53:5f:45:78:5b:
- bb:47:ad:07:a4:98:9a:e9:e3:b1:3b:e6:33:c2:c1:
- 5c:95:d7:c8:b9:a6:72:27:7a:79:da:c4:c8:5a:1a:
- 3e:5e:5e:a6:62:64:c6:72:86:b1:78:98:5b:63:27:
- 70:15:04:6b:b1:0f:11:9c:4d:3b:5c:e7:8d:c0:be:
- d5:84:46:6c:bd:11:1e:21:c1:82:9c:d0:aa:2d:2f:
- f8:2a:e9:3b:e4:35:15:6d:c7:4a:dd:a8:65:69:b8:
- 16:a1:8a:04:a2:44:68:40:b6:99:ae:61:df:9f:6c:
- 40:ef:79:c9:a3:6d:e4:2d:07:01:68:f1:21:4e:0e:
- 28:a7:fd:2f:ad:ee:7d:65:cf:36:fd:4f:1b:ba:10:
- 8e:86:fd:ec:37:67:0c:20:71:66:48:64:f3:82:af:
- f5:e1:73:c9:09:36:03:3f:c2:47:7a:f2:33:b9:f9:
- 9f:53:9b:24:5e:c3:cc:05:d9:a9:ed:d7:b2:2a:c5:
- b7:39
+ 00:ab:ca:16:55:35:25:9b:de:8e:fc:e9:5a:f9:04:
+ 3e:0e:6c:06:1e:1c:86:20:18:4f:41:da:3a:6d:16:
+ 9e:4e:3c:9b:11:67:bc:5a:3d:84:b2:79:05:d2:25:
+ 9a:6a:a8:80:6c:55:28:f2:5a:43:5f:c5:ef:e9:e3:
+ 1a:64:24:7e:57:4d:11:60:d7:e6:a9:2b:73:c7:93:
+ bb:67:b1:41:d5:df:21:5c:bd:98:93:a3:7d:0d:b0:
+ 86:5f:87:a9:d9:ab:ad:97:89:c5:12:c4:0f:71:d3:
+ 5b:79:18:53:64:7f:0a:a1:36:5e:00:5c:b9:ee:5e:
+ 14:10:17:f2:2a:60:0f:f7:ec:aa:d7:ad:d3:dc:8a:
+ 44:59:cf:c8:11:e7:42:1c:88:30:d7:1e:37:86:91:
+ 6b:ce:2a:bc:bb:f5:4a:cc:72:1a:9d:4f:5f:0e:c4:
+ c5:f7:b6:24:09:1c:22:f8:f7:a2:3d:45:c2:29:4d:
+ a3:f3:db:7a:a4:93:a2:48:d6:2b:90:da:0c:2b:d9:
+ 96:f0:d6:c7:eb:d0:eb:a8:08:72:55:a8:10:65:8f:
+ 38:6a:22:0c:9c:3d:68:1a:cd:16:da:73:24:2e:14:
+ 5d:08:05:fb:07:d1:52:53:4e:51:e4:b2:f3:17:4d:
+ f1:d0:c3:23:51:86:fb:a4:b9:09:37:9c:13:69:65:
+ 51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C9:45:0B:2A:F2:D8:8D:2A:D7:CE:AF:56:BF:82:B0:84:0C:C8:2E:F4
+ 90:8D:89:42:17:BF:F6:98:D1:AA:8C:BF:AF:C2:74:60:AB:ED:90:0F
X509v3 Authority Key Identifier:
- keyid:B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ keyid:A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
@@ -86,42 +86,42 @@
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 63:66:9e:6c:34:8c:5d:74:ae:90:25:55:ae:86:49:b9:3d:fd:
- 27:bc:4f:69:7b:70:cb:25:0e:a3:8c:7a:7d:9c:4f:0b:7c:f2:
- 85:a5:ea:82:d2:37:c2:74:a2:ae:a8:bf:62:f4:5f:d4:c6:41:
- 45:0c:cc:27:53:aa:8f:66:58:e9:b0:de:ae:98:14:bd:92:df:
- 9b:0f:f2:c5:3b:d2:bc:1c:3e:80:b4:09:0f:c1:9f:d6:3a:29:
- 52:71:b6:1a:92:95:5a:18:dc:b4:30:dc:61:61:93:54:d1:55:
- 83:92:5d:c0:c7:dc:ab:d7:08:dd:8a:44:cf:92:f9:4d:86:25:
- aa:ac:52:f6:0e:17:99:0b:31:d2:75:5e:33:f9:f5:b6:77:42:
- 07:62:a9:53:cc:f3:79:84:57:d9:14:3f:ab:4c:8b:ae:c7:9f:
- cf:7a:1f:bf:7e:1d:44:bd:76:b4:cd:8d:c8:1d:75:f7:3b:b5:
- bc:35:8b:3f:29:b1:cb:67:a4:17:af:a4:ca:9f:2b:e7:15:66:
- e4:c8:c1:7c:08:78:9e:5d:4b:c3:c6:58:66:96:42:e8:e6:40:
- fd:dc:24:ce:3b:58:11:38:40:0e:fc:a9:c0:2c:0f:e5:cc:bb:
- 02:32:31:b9:bc:6f:2d:1d:f6:2b:7c:d3:f8:24:f6:60:38:8a:
- 1f:dd:e1:50
+ 74:15:69:e0:48:a6:e3:fa:20:b6:3f:90:d7:61:d3:ea:b7:47:
+ 61:c7:81:6b:42:95:44:ac:1e:6f:3d:df:ad:2c:33:0d:e8:94:
+ 5b:d1:24:89:56:27:76:e4:6c:09:26:a7:e5:62:c9:96:83:ce:
+ 9d:08:f5:ee:c4:3d:fe:77:29:ae:8d:9f:7f:d5:81:b6:5d:b5:
+ 54:a0:1f:6c:54:1e:dd:a7:4e:78:e0:6c:60:1d:e8:1f:97:77:
+ 67:8d:57:80:00:17:80:cd:ab:ce:31:87:6e:9e:bf:3f:38:b9:
+ da:96:a3:d2:22:63:43:dd:5c:e8:42:ea:2d:eb:ab:81:33:e5:
+ 95:36:46:3c:dd:8e:ad:e2:43:40:6f:3c:ce:73:4d:52:71:9d:
+ 54:59:f4:73:a2:5a:48:a5:c7:bc:dd:f9:9f:91:39:b1:bc:ad:
+ 9a:59:ea:f6:33:42:72:66:2f:e9:78:8f:b6:09:15:35:d8:e6:
+ 70:0d:d3:da:a7:7e:55:d9:05:88:47:16:1d:cd:54:1c:15:11:
+ a6:d3:35:2a:4e:c5:0f:f7:b0:98:24:bf:7e:78:3e:5f:56:0c:
+ 87:72:c2:d1:7d:3e:3c:c6:98:50:a9:c7:cd:6f:0e:12:b4:32:
+ 7a:b8:01:6c:88:1c:8a:c2:19:24:1e:34:9b:da:45:eb:0a:f9:
+ 99:6e:54:c6
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EhxI
-5HMfXNJUqXtYHDdzwkkmPu21a1UXyUxSNM7ZdoYydHSuEbKZG1GgM0g0L7nTKwbC
-XClTNc58pmeyatQzwxNiMKFTX0V4W7tHrQekmJrp47E75jPCwVyV18i5pnInenna
-xMhaGj5eXqZiZMZyhrF4mFtjJ3AVBGuxDxGcTTtc543AvtWERmy9ER4hwYKc0Kot
-L/gq6TvkNRVtx0rdqGVpuBahigSiRGhAtpmuYd+fbEDvecmjbeQtBwFo8SFODiin
-/S+t7n1lzzb9Txu6EI6G/ew3ZwwgcWZIZPOCr/Xhc8kJNgM/wkd68jO5+Z9TmyRe
-w8wF2ant17Iqxbc5AgMBAAGjgekwgeYwHQYDVR0OBBYEFMlFCyry2I0q186vVr+C
-sIQMyC70MB8GA1UdIwQYMBaAFLE5eRM10ANr6cRjK8zWYcOC7BTBMD8GCCsGAQUF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-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAY2aebDSMXXSukCVVroZJ
-uT39J7xPaXtwyyUOo4x6fZxPC3zyhaXqgtI3wnSirqi/YvRf1MZBRQzMJ1Oqj2ZY
-6bDerpgUvZLfmw/yxTvSvBw+gLQJD8Gf1jopUnG2GpKVWhjctDDcYWGTVNFVg5Jd
-wMfcq9cI3YpEz5L5TYYlqqxS9g4XmQsx0nVeM/n1tndCB2KpU8zzeYRX2RQ/q0yL
-rsefz3ofv34dRL12tM2NyB119zu1vDWLPymxy2ekF6+kyp8r5xVm5MjBfAh4nl1L
-w8ZYZpZC6OZA/dwkzjtYEThADvypwCwP5cy7AjIxubxvLR32K3zT+CT2YDiKH93h
-UA==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdBVp4Eim4/ogtj+Q12HT
+6rdHYceBa0KVRKwebz3frSwzDeiUW9EkiVYnduRsCSan5WLJloPOnQj17sQ9/ncp
+ro2ff9WBtl21VKAfbFQe3adOeOBsYB3oH5d3Z41XgAAXgM2rzjGHbp6/Pzi52paj
+0iJjQ91c6ELqLeurgTPllTZGPN2OreJDQG88znNNUnGdVFn0c6JaSKXHvN35n5E5
+sbytmlnq9jNCcmYv6XiPtgkVNdjmcA3T2qd+VdkFiEcWHc1UHBURptM1Kk7FD/ew
+mCS/fng+X1YMh3LC0X0+PMaYUKnHzW8OErQyergBbIgcisIZJB40m9pF6wr5mW5U
+xg==
-----END CERTIFICATE-----
Certificate:
@@ -138,30 +138,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9c:d0:2e:3b:06:d6:ea:65:bd:dd:b2:d3:e8:88:
- ea:08:73:01:42:ac:ca:38:28:17:32:93:5e:16:a8:
- c1:79:44:9a:db:24:08:ba:81:52:63:9c:b4:ed:57:
- d4:b2:ac:54:64:3b:70:39:7e:37:da:11:e1:8c:ba:
- 09:bc:1a:9b:e7:fe:6d:75:f8:71:31:f0:ca:52:89:
- 2a:9e:d5:53:db:b8:c0:76:cf:bf:58:58:e1:bb:81:
- de:62:bb:06:58:1f:9b:64:03:75:7d:ee:76:6f:39:
- 47:cb:8e:34:32:07:83:89:b0:83:2a:78:d0:ac:e2:
- 86:0a:a8:ab:3b:97:81:de:9d:36:b4:03:b7:d5:06:
- 05:53:d7:80:03:44:86:53:72:db:7a:5f:c5:20:dd:
- c7:44:58:3b:40:7f:0e:39:bc:be:0d:ca:6a:f6:82:
- a2:97:a2:17:79:51:6f:42:5d:0d:6a:b7:a0:de:5f:
- 6a:00:be:e7:5a:b7:91:e9:fc:77:fd:75:88:8d:52:
- 76:3d:0e:91:4b:c7:db:96:a4:5f:39:59:55:62:65:
- 3b:15:7a:bc:7b:09:9f:3e:75:d9:9e:c5:00:b3:19:
- d4:26:7e:eb:db:62:07:c2:f5:b6:4e:87:2d:eb:56:
- 8b:5a:68:6c:85:2f:b4:3e:1d:dd:5d:31:49:98:8b:
- 06:55
+ 00:ad:d7:63:a2:51:33:32:fd:aa:73:2c:32:30:ac:
+ 2f:8d:37:5f:08:b2:9b:02:1a:f7:3c:eb:c2:9e:82:
+ d9:a2:0e:02:14:28:bc:18:e2:92:8e:db:66:14:36:
+ 3f:ef:43:47:ac:b4:e2:be:92:82:14:9a:bd:97:d7:
+ 19:6f:88:29:b1:85:68:bd:13:d5:93:2c:a0:c8:bb:
+ 76:9d:ad:f5:da:e8:55:ca:87:6d:07:20:f4:22:cf:
+ 5a:51:ea:e1:7b:c3:7e:f9:a8:85:95:c5:e9:88:bf:
+ 7b:5e:fd:49:d4:c4:ed:ce:b7:d2:71:23:59:00:a7:
+ 6f:85:40:a0:38:c6:2b:88:99:68:e9:97:7e:2f:92:
+ 97:18:0a:19:c2:4e:0a:28:2c:b3:b4:67:26:eb:1d:
+ 03:f6:16:58:20:88:81:ee:a8:ea:19:ae:25:e9:34:
+ 8d:87:f3:d2:3b:0e:b2:d8:31:14:ee:bd:c6:01:ec:
+ d4:41:f0:06:7b:3e:20:7b:06:88:86:29:d1:77:9a:
+ c0:bc:69:63:3f:2b:20:ac:aa:17:33:29:78:0a:11:
+ ff:92:f2:b3:4a:58:29:96:d3:f4:4f:70:ef:9c:81:
+ 55:1c:21:20:bf:54:5a:dd:60:b7:6e:53:41:a2:19:
+ 55:b5:f9:b8:6e:63:37:73:a0:b8:d4:c5:c1:a2:4e:
+ 0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -176,41 +176,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- a8:ad:48:d8:6e:1d:24:09:d2:b3:29:3c:48:60:27:7f:37:64:
- d5:f1:3b:b3:5c:43:de:7c:b4:5f:ee:3a:f2:1a:25:24:0a:8a:
- 25:6d:19:5b:dc:0c:4e:48:61:2f:60:d3:6b:f3:9c:03:2c:d3:
- fa:c8:9b:99:e7:2e:c5:43:c0:5f:14:cd:8b:92:62:4f:e5:3a:
- cd:b5:0a:d8:b2:01:c7:44:b4:3a:86:66:bf:fa:11:a5:f8:24:
- 3f:d1:1a:e8:eb:1e:ad:f0:70:31:6f:bc:21:cf:db:ce:63:4e:
- 84:e9:52:9e:bb:1b:c4:72:ae:e0:6c:88:9e:99:dc:79:d9:fd:
- 83:26:8e:f6:19:70:d9:5e:fc:f4:0c:d1:17:6f:af:10:f6:64:
- 16:08:d8:72:ba:3a:2d:66:28:5a:41:0d:f3:47:87:a7:9c:78:
- c6:cd:5e:25:71:0b:f2:93:b8:26:17:b2:19:17:cc:03:ed:c0:
- 6e:06:e2:4b:4a:57:5f:23:02:2a:69:06:7a:c4:b7:3e:2f:e8:
- f0:03:ae:b8:2d:df:63:22:20:73:23:75:d9:3c:d7:22:e4:b4:
- 65:65:ed:b9:e6:02:1d:b5:51:11:9c:db:92:e4:fe:8c:1d:bb:
- c5:95:87:5b:38:ee:ff:e4:01:d1:5d:84:b9:73:d3:da:23:ca:
- 5e:05:d3:7d
+ 7f:a1:7c:8f:ea:d9:b9:63:e1:b0:31:0a:2e:1c:8e:e9:d0:23:
+ ee:3e:8e:50:55:db:ba:10:93:a4:93:0b:bb:c1:a5:3d:32:90:
+ ee:40:bf:0f:df:25:f1:65:b3:30:6d:39:9b:d2:c1:b8:b7:a8:
+ 7e:23:dc:6a:c3:5a:9e:53:d7:86:4c:82:de:98:23:1a:6f:f9:
+ 0d:6d:b9:35:55:b9:94:03:8d:b7:6c:2e:64:79:ea:85:84:7e:
+ 51:18:37:42:80:f5:d4:16:3f:a0:a9:6b:bf:17:d1:19:99:ea:
+ 8d:5a:c9:30:b0:ca:c8:2c:17:ce:14:75:b3:c9:19:df:16:1b:
+ 9a:97:ae:50:69:a5:6c:02:57:84:f4:7f:30:90:ed:89:bb:0e:
+ c9:7b:34:d0:41:58:00:20:29:6b:f0:e8:97:81:92:3d:ba:e0:
+ 65:e9:7c:cb:5c:7b:50:c8:0f:d3:20:ab:42:2f:0d:44:6d:99:
+ c2:1d:42:e8:b2:10:82:9b:86:ba:a8:45:d2:2c:13:53:cf:ad:
+ 37:ac:ce:f3:e7:49:fe:59:d5:b6:5f:8b:6b:fd:5f:e0:f2:91:
+ ef:e3:f7:e0:b6:ee:e7:ae:77:0e:66:12:40:55:75:77:2a:05:
+ d4:bd:ab:7e:5a:67:d8:81:8b:15:fd:4c:60:63:c7:f7:5f:fa:
+ d4:d8:d9:d2
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAuOwbW
-6mW93bLT6IjqCHMBQqzKOCgXMpNeFqjBeUSa2yQIuoFSY5y07VfUsqxUZDtwOX43
-2hHhjLoJvBqb5/5tdfhxMfDKUokqntVT27jAds+/WFjhu4HeYrsGWB+bZAN1fe52
-bzlHy440MgeDibCDKnjQrOKGCqirO5eB3p02tAO31QYFU9eAA0SGU3Lbel/FIN3H
-RFg7QH8OOby+Dcpq9oKil6IXeVFvQl0Nareg3l9qAL7nWreR6fx3/XWIjVJ2PQ6R
-S8fblqRfOVlVYmU7FXq8ewmfPnXZnsUAsxnUJn7r22IHwvW2Toct61aLWmhshS+0
-Ph3dXTFJmIsGVQIDAQABo4HLMIHIMB0GA1UdDgQWBBSxOXkTNdADa+nEYyvM1mHD
-guwUwTAfBgNVHSMEGDAWgBQVnqat9Z+KocEImb9mb8/Kcs0MNDA3BggrBgEFBQcB
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArddjolEz
+Mv2qcywyMKwvjTdfCLKbAhr3POvCnoLZog4CFCi8GOKSjttmFDY/70NHrLTivpKC
+FJq9l9cZb4gpsYVovRPVkyygyLt2na312uhVyodtByD0Is9aUerhe8N++aiFlcXp
+iL97Xv1J1MTtzrfScSNZAKdvhUCgOMYriJlo6Zd+L5KXGAoZwk4KKCyztGcm6x0D
+9hZYIIiB7qjqGa4l6TSNh/PSOw6y2DEU7r3GAezUQfAGez4gewaIhinRd5rAvGlj
+PysgrKoXMyl4ChH/kvKzSlgpltP0T3DvnIFVHCEgv1Ra3WC3blNBohlVtfm4bmM3
+c6C41MXBok4OEQIDAQABo4HLMIHIMB0GA1UdDgQWBBSlJY7DFJyGGTD1BcWqyDcS
+9pRKRjAfBgNVHSMEGDAWgBSD+ZPVKfnEuqFf5Ml0GODfDhcYUDA3BggrBgEFBQcB
AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AKitSNhuHSQJ0rMpPEhgJ383ZNXxO7NcQ958tF/uOvIaJSQKiiVtGVvcDE5IYS9g
-02vznAMs0/rIm5nnLsVDwF8UzYuSYk/lOs21CtiyAcdEtDqGZr/6EaX4JD/RGujr
-Hq3wcDFvvCHP285jToTpUp67G8RyruBsiJ6Z3HnZ/YMmjvYZcNle/PQM0RdvrxD2
-ZBYI2HK6Oi1mKFpBDfNHh6eceMbNXiVxC/KTuCYXshkXzAPtwG4G4ktKV18jAipp
-BnrEtz4v6PADrrgt32MiIHMjddk81yLktGVl7bnmAh21URGc25Lk/owdu8WVh1s4
-7v/kAdFdhLlz09ojyl4F030=
+AH+hfI/q2blj4bAxCi4cjunQI+4+jlBV27oQk6STC7vBpT0ykO5Avw/fJfFlszBt
+OZvSwbi3qH4j3GrDWp5T14ZMgt6YIxpv+Q1tuTVVuZQDjbdsLmR56oWEflEYN0KA
+9dQWP6Cpa78X0RmZ6o1ayTCwysgsF84UdbPJGd8WG5qXrlBppWwCV4T0fzCQ7Ym7
+Dsl7NNBBWAAgKWvw6JeBkj264GXpfMtce1DID9Mgq0IvDURtmcIdQuiyEIKbhrqo
+RdIsE1PPrTeszvPnSf5Z1bZfi2v9X+Dyke/j9+C27ueudw5mEkBVdXcqBdS9q35a
+Z9iBixX9TGBjx/df+tTY2dI=
-----END CERTIFICATE-----
Certificate:
@@ -227,30 +227,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ae:ea:3b:3f:b6:e9:3d:ea:eb:3d:dd:e8:4d:45:
- 83:63:78:ea:07:90:3a:3c:4f:92:54:2b:2d:02:1b:
- eb:9e:81:72:68:2e:73:f8:4a:a1:de:0c:d6:f0:c2:
- 61:26:90:0b:48:59:ab:23:25:8f:e4:4a:6b:c9:2d:
- ba:a7:35:c4:22:df:76:99:d8:7b:f7:6d:ca:9b:da:
- d2:ed:7e:c8:93:b2:a7:f6:f0:05:6a:5d:c6:e1:79:
- d0:25:59:a9:50:1e:65:eb:1c:c9:cd:4e:6a:3a:2a:
- a4:1a:fa:81:a3:e7:ae:d7:de:43:d9:e8:0b:5c:b0:
- 6b:46:39:c5:9c:4a:6d:59:bf:da:70:2e:80:ac:c8:
- 80:e3:83:d1:71:7b:a7:0b:92:bf:a8:81:ad:5c:b2:
- d5:e9:b9:5f:b5:4f:93:43:67:72:36:b3:f7:17:b9:
- 1b:da:2a:13:83:70:36:ae:59:03:3d:f0:71:de:a2:
- 7a:41:ad:b5:e9:a2:51:e4:18:ec:88:ad:48:f1:df:
- 17:04:43:54:2a:af:3c:c0:f5:84:39:43:d1:a7:d2:
- 52:0f:3c:dd:ef:13:58:8c:1d:d4:dd:2e:6d:1a:e7:
- 73:9b:8b:f3:41:7b:9a:53:4e:0d:92:d3:5d:3f:fc:
- c3:61:dc:5f:a0:93:3c:08:cc:b4:9b:ce:9d:78:e3:
- 77:c9
+ 00:c8:01:d6:aa:f0:22:fa:55:68:e4:56:fa:87:9f:
+ 03:a4:78:36:40:64:b2:60:f7:20:25:47:92:b0:cb:
+ c7:9d:4c:c6:4d:78:0f:91:9e:a8:f1:0b:84:58:b1:
+ a9:06:2d:7d:09:82:f4:1a:60:67:7b:c3:47:69:05:
+ b5:59:90:02:2a:53:27:25:21:4d:9a:5f:b6:7b:58:
+ 25:77:b3:46:64:fc:ed:04:c0:e2:62:e5:96:f9:8a:
+ 8d:9a:e8:8d:bf:d9:19:38:97:52:ab:31:3c:1c:a2:
+ b9:21:ec:5f:aa:8c:21:44:c6:73:7f:0b:72:c9:61:
+ 1c:a7:cd:46:bb:da:5b:a7:1b:e2:18:fb:ff:18:81:
+ 5f:fb:75:29:21:9c:92:e0:d3:03:f5:b8:58:94:36:
+ 32:7a:9a:a7:ec:49:ab:ef:d4:8c:c4:65:aa:23:40:
+ 96:76:47:4b:06:0b:21:c4:44:9f:8d:12:ab:05:05:
+ e7:97:d9:9d:c0:f9:4d:77:14:0b:c5:d5:82:0c:d7:
+ 14:54:fa:07:dd:a3:78:30:5d:95:83:e4:1c:7f:c2:
+ 13:c6:b1:8b:10:87:9b:e9:3e:4f:d6:b6:b9:a8:9f:
+ 4c:47:f8:40:67:7d:4e:9b:87:4a:b6:92:eb:33:f1:
+ 73:a3:70:d6:fc:37:32:2a:b4:b8:56:90:63:5e:ec:
+ b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ 83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -265,41 +265,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 58:4b:60:7e:0b:c2:3d:20:f3:49:34:91:55:d3:5f:5b:ce:81:
- 31:da:71:9f:72:d7:f4:cc:be:cf:58:b8:97:aa:99:87:3d:34:
- 12:ac:40:1c:8e:02:46:83:ee:04:e1:7e:5e:57:ca:a4:ae:e1:
- d0:b4:12:e9:65:33:f5:4e:c4:f6:49:00:7f:83:6d:75:67:84:
- b2:db:52:5a:a2:3e:5d:2d:5c:f3:45:fe:6a:d3:c4:0a:76:52:
- c6:9b:b0:89:01:b9:b6:be:30:60:d9:b4:2e:1d:1e:bf:ef:d8:
- 12:90:9f:cb:67:29:20:61:9f:1a:67:64:88:4c:43:ec:10:7d:
- 87:11:00:44:6a:ce:37:af:73:f4:fa:d2:22:2f:24:3a:6f:79:
- 09:6c:8d:de:b5:71:0e:6e:b7:64:a9:be:73:a8:c1:c8:50:74:
- d2:c4:2b:ef:4f:25:20:8f:41:f0:1f:6e:52:77:eb:a0:1a:94:
- 87:7c:35:11:37:5c:33:f5:83:47:e0:f2:0e:97:af:23:61:23:
- 25:0b:92:6c:3b:30:a1:aa:c6:dc:4a:05:6e:43:76:58:82:66:
- cd:f6:d6:ef:9b:80:36:d6:95:b7:d1:ec:5c:53:f7:78:84:ef:
- 48:6a:2c:f7:93:97:f2:7a:ce:ec:f3:eb:63:e1:5a:e0:69:02:
- 5d:34:36:93
+ a9:e8:26:5f:c8:9e:6b:fc:cd:4d:d2:9e:de:f5:f1:08:04:66:
+ 23:6a:7e:ee:92:9f:eb:71:53:ea:97:8e:db:e4:47:72:7a:08:
+ 17:1c:72:4a:37:00:f5:e3:a8:77:d2:b1:d4:89:45:b2:e9:ba:
+ 00:61:6e:cb:03:b4:21:aa:ec:e4:f3:a4:41:b7:90:41:08:0f:
+ 0d:90:bd:55:4a:bc:1c:7f:2e:c1:97:6d:34:d1:8d:da:39:46:
+ 55:49:97:4c:f7:eb:29:62:b3:ed:ad:24:d8:05:9a:93:82:f2:
+ 12:34:24:78:60:a4:7b:a9:94:97:75:10:20:57:42:83:32:0d:
+ 19:d0:15:3b:55:84:d8:49:9b:a4:66:14:c9:90:f4:89:bc:23:
+ 2a:45:dd:19:25:68:6e:fe:44:60:c0:19:75:61:3f:85:4b:90:
+ 8c:45:3b:2e:9b:41:12:43:ee:2f:61:96:ff:af:4b:11:fe:af:
+ 02:af:0d:69:0d:ae:11:bc:eb:34:de:ac:24:3b:08:6e:b3:b2:
+ 1a:8e:46:d9:6b:91:08:4e:c3:5b:f6:3c:3f:90:8d:95:01:b9:
+ d9:30:aa:2d:79:00:bb:99:a1:ed:0a:1c:28:fc:5c:12:1c:3d:
+ 53:33:c8:ca:b1:9c:13:a2:2a:c7:1d:ce:b7:1e:2c:35:37:e8:
+ 10:af:0c:e6
-----BEGIN CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7qOz+26T3q6z3d6E1F
-g2N46geQOjxPklQrLQIb656Bcmguc/hKod4M1vDCYSaQC0hZqyMlj+RKa8ktuqc1
-xCLfdpnYe/dtypva0u1+yJOyp/bwBWpdxuF50CVZqVAeZescyc1OajoqpBr6gaPn
-rtfeQ9noC1ywa0Y5xZxKbVm/2nAugKzIgOOD0XF7pwuSv6iBrVyy1em5X7VPk0Nn
-cjaz9xe5G9oqE4NwNq5ZAz3wcd6iekGttemiUeQY7IitSPHfFwRDVCqvPMD1hDlD
-0afSUg883e8TWIwd1N0ubRrnc5uL80F7mlNODZLTXT/8w2HcX6CTPAjMtJvOnXjj
-d8kCAwEAAaOByzCByDAdBgNVHQ4EFgQUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwHwYD
-VR0jBBgwFoAUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBYS2B+C8I9
-IPNJNJFV019bzoEx2nGfctf0zL7PWLiXqpmHPTQSrEAcjgJGg+4E4X5eV8qkruHQ
-tBLpZTP1TsT2SQB/g211Z4Sy21Jaoj5dLVzzRf5q08QKdlLGm7CJAbm2vjBg2bQu
-HR6/79gSkJ/LZykgYZ8aZ2SITEPsEH2HEQBEas43r3P0+tIiLyQ6b3kJbI3etXEO
-brdkqb5zqMHIUHTSxCvvTyUgj0HwH25Sd+ugGpSHfDURN1wz9YNH4PIOl68jYSMl
-C5JsOzChqsbcSgVuQ3ZYgmbN9tbvm4A21pW30excU/d4hO9Iaiz3k5fyes7s8+tj
-4VrgaQJdNDaT
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCp6CZfyJ5r
+/M1N0p7e9fEIBGYjan7ukp/rcVPql47b5EdyeggXHHJKNwD146h30rHUiUWy6boA
+YW7LA7Qhquzk86RBt5BBCA8NkL1VSrwcfy7Bl2000Y3aOUZVSZdM9+spYrPtrSTY
+BZqTgvISNCR4YKR7qZSXdRAgV0KDMg0Z0BU7VYTYSZukZhTJkPSJvCMqRd0ZJWhu
+/kRgwBl1YT+FS5CMRTsum0ESQ+4vYZb/r0sR/q8Crw1pDa4RvOs03qwkOwhus7Ia
+jkbZa5EITsNb9jw/kI2VAbnZMKoteQC7maHtChwo/FwSHD1TM8jKsZwToirHHc63
+Hiw1N+gQrwzm
-----END CERTIFICATE-----
Certificate:
@@ -316,30 +316,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ae:ea:3b:3f:b6:e9:3d:ea:eb:3d:dd:e8:4d:45:
- 83:63:78:ea:07:90:3a:3c:4f:92:54:2b:2d:02:1b:
- eb:9e:81:72:68:2e:73:f8:4a:a1:de:0c:d6:f0:c2:
- 61:26:90:0b:48:59:ab:23:25:8f:e4:4a:6b:c9:2d:
- ba:a7:35:c4:22:df:76:99:d8:7b:f7:6d:ca:9b:da:
- d2:ed:7e:c8:93:b2:a7:f6:f0:05:6a:5d:c6:e1:79:
- d0:25:59:a9:50:1e:65:eb:1c:c9:cd:4e:6a:3a:2a:
- a4:1a:fa:81:a3:e7:ae:d7:de:43:d9:e8:0b:5c:b0:
- 6b:46:39:c5:9c:4a:6d:59:bf:da:70:2e:80:ac:c8:
- 80:e3:83:d1:71:7b:a7:0b:92:bf:a8:81:ad:5c:b2:
- d5:e9:b9:5f:b5:4f:93:43:67:72:36:b3:f7:17:b9:
- 1b:da:2a:13:83:70:36:ae:59:03:3d:f0:71:de:a2:
- 7a:41:ad:b5:e9:a2:51:e4:18:ec:88:ad:48:f1:df:
- 17:04:43:54:2a:af:3c:c0:f5:84:39:43:d1:a7:d2:
- 52:0f:3c:dd:ef:13:58:8c:1d:d4:dd:2e:6d:1a:e7:
- 73:9b:8b:f3:41:7b:9a:53:4e:0d:92:d3:5d:3f:fc:
- c3:61:dc:5f:a0:93:3c:08:cc:b4:9b:ce:9d:78:e3:
- 77:c9
+ 00:c8:01:d6:aa:f0:22:fa:55:68:e4:56:fa:87:9f:
+ 03:a4:78:36:40:64:b2:60:f7:20:25:47:92:b0:cb:
+ c7:9d:4c:c6:4d:78:0f:91:9e:a8:f1:0b:84:58:b1:
+ a9:06:2d:7d:09:82:f4:1a:60:67:7b:c3:47:69:05:
+ b5:59:90:02:2a:53:27:25:21:4d:9a:5f:b6:7b:58:
+ 25:77:b3:46:64:fc:ed:04:c0:e2:62:e5:96:f9:8a:
+ 8d:9a:e8:8d:bf:d9:19:38:97:52:ab:31:3c:1c:a2:
+ b9:21:ec:5f:aa:8c:21:44:c6:73:7f:0b:72:c9:61:
+ 1c:a7:cd:46:bb:da:5b:a7:1b:e2:18:fb:ff:18:81:
+ 5f:fb:75:29:21:9c:92:e0:d3:03:f5:b8:58:94:36:
+ 32:7a:9a:a7:ec:49:ab:ef:d4:8c:c4:65:aa:23:40:
+ 96:76:47:4b:06:0b:21:c4:44:9f:8d:12:ab:05:05:
+ e7:97:d9:9d:c0:f9:4d:77:14:0b:c5:d5:82:0c:d7:
+ 14:54:fa:07:dd:a3:78:30:5d:95:83:e4:1c:7f:c2:
+ 13:c6:b1:8b:10:87:9b:e9:3e:4f:d6:b6:b9:a8:9f:
+ 4c:47:f8:40:67:7d:4e:9b:87:4a:b6:92:eb:33:f1:
+ 73:a3:70:d6:fc:37:32:2a:b4:b8:56:90:63:5e:ec:
+ b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ 83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -354,41 +354,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 51:9b:dd:56:f2:b1:2b:e5:36:c8:2f:1d:a9:53:1f:89:e1:24:
- 33:bd:ac:56:c1:c3:1a:38:a6:7e:fc:61:9a:ae:7c:1f:13:3e:
- 37:e4:e6:a9:11:9e:2b:6e:ce:dd:12:0c:c1:b2:b7:eb:48:0e:
- c7:a5:65:f0:86:49:8a:dc:cf:1b:6d:33:af:af:96:51:49:01:
- e4:82:d6:e6:5a:d0:41:c7:05:9f:16:eb:06:bd:bc:ab:fe:a0:
- d7:ac:de:62:d1:71:7e:69:82:31:03:e3:60:28:e6:18:3b:e5:
- 93:2b:58:ee:d5:0b:7b:b6:af:f2:4f:22:eb:4d:b7:a6:74:68:
- b7:82:68:7f:a9:b6:ee:a0:20:d7:c6:16:0e:9c:1c:39:ea:24:
- 5e:60:12:fc:39:60:0d:54:3e:aa:b3:43:e1:0f:ef:d7:8f:3e:
- 09:a9:55:95:e9:3d:0c:4f:ad:cb:c2:f3:2c:10:43:67:54:f9:
- 66:54:81:ff:62:61:94:05:b0:42:af:f0:c5:ac:00:91:28:5c:
- aa:a3:61:44:ba:c2:a6:ab:f8:1d:7e:02:69:33:48:fe:ac:93:
- 7f:4c:99:91:d9:18:37:f9:70:3f:56:2a:ee:4a:e0:4d:f3:60:
- 12:5d:30:d8:37:bf:ca:40:85:29:0c:a7:8f:ab:ad:03:6d:7b:
- ba:62:7f:58
+ a4:6f:3a:2b:4c:55:63:68:09:a1:73:eb:b1:b6:69:07:de:8a:
+ 44:7d:10:bd:05:bf:a9:ef:06:af:c1:90:a6:75:1d:a8:51:e2:
+ f7:9a:4e:d7:23:6b:c1:34:83:64:9c:6d:15:0a:cc:b0:99:13:
+ 53:1f:0b:ef:23:82:6d:32:e1:ea:08:ce:65:21:d4:09:6a:6a:
+ d4:05:1b:96:2b:34:44:89:31:4e:14:11:b2:ff:ae:cf:60:56:
+ 2a:37:2f:18:2b:ae:aa:74:bb:d5:88:fb:3f:d4:ee:4c:f5:f3:
+ 4a:fa:6f:34:78:b7:bd:b1:d0:77:da:86:02:ce:a7:c3:11:f2:
+ 09:bf:3c:17:61:d2:4c:c5:26:07:ec:92:0a:ab:9e:6a:ae:72:
+ 66:34:a3:45:94:76:8c:e7:7c:f8:d3:43:41:b0:70:57:78:56:
+ ee:bc:54:8f:ba:ac:07:dd:cb:3d:a0:1a:79:cb:5b:20:4a:9b:
+ 1a:8d:93:3a:5e:38:11:ae:60:dd:1c:5f:63:5a:dd:06:a6:c3:
+ a1:20:4d:1e:a1:6a:a6:92:7c:1e:b4:01:a7:e3:6c:94:c8:30:
+ a6:bb:a7:2e:d7:66:2b:7f:a6:0b:3f:44:b5:62:2e:32:44:12:
+ 96:f0:bb:49:8a:49:f6:78:05:60:ed:64:13:93:67:35:4f:c8:
+ 38:98:2f:e5
-----BEGIN CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7qOz+26T3q6z3d6E1F
-g2N46geQOjxPklQrLQIb656Bcmguc/hKod4M1vDCYSaQC0hZqyMlj+RKa8ktuqc1
-xCLfdpnYe/dtypva0u1+yJOyp/bwBWpdxuF50CVZqVAeZescyc1OajoqpBr6gaPn
-rtfeQ9noC1ywa0Y5xZxKbVm/2nAugKzIgOOD0XF7pwuSv6iBrVyy1em5X7VPk0Nn
-cjaz9xe5G9oqE4NwNq5ZAz3wcd6iekGttemiUeQY7IitSPHfFwRDVCqvPMD1hDlD
-0afSUg883e8TWIwd1N0ubRrnc5uL80F7mlNODZLTXT/8w2HcX6CTPAjMtJvOnXjj
-d8kCAwEAAaOByzCByDAdBgNVHQ4EFgQUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBRm91W8rEr
-5TbILx2pUx+J4SQzvaxWwcMaOKZ+/GGarnwfEz435OapEZ4rbs7dEgzBsrfrSA7H
-pWXwhkmK3M8bbTOvr5ZRSQHkgtbmWtBBxwWfFusGvbyr/qDXrN5i0XF+aYIxA+Ng
-KOYYO+WTK1ju1Qt7tq/yTyLrTbemdGi3gmh/qbbuoCDXxhYOnBw56iReYBL8OWAN
-VD6qs0PhD+/Xjz4JqVWV6T0MT63LwvMsEENnVPlmVIH/YmGUBbBCr/DFrACRKFyq
-o2FEusKmq/gdfgJpM0j+rJN/TJmR2Rg3+XA/ViruSuBN82ASXTDYN7/KQIUpDKeP
-q60DbXu6Yn9Y
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCkbzorTFVj
+aAmhc+uxtmkH3opEfRC9Bb+p7wavwZCmdR2oUeL3mk7XI2vBNINknG0VCsywmRNT
+HwvvI4JtMuHqCM5lIdQJamrUBRuWKzREiTFOFBGy/67PYFYqNy8YK66qdLvViPs/
+1O5M9fNK+m80eLe9sdB32oYCzqfDEfIJvzwXYdJMxSYH7JIKq55qrnJmNKNFlHaM
+53z400NBsHBXeFbuvFSPuqwH3cs9oBp5y1sgSpsajZM6XjgRrmDdHF9jWt0GpsOh
+IE0eoWqmknwetAGn42yUyDCmu6cu12Yrf6YLP0S1Yi4yRBKW8LtJikn2eAVg7WQT
+k2c1T8g4mC/l
-----END CERTIFICATE-----
Certificate:
@@ -405,30 +405,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:44:ec:a7:15:00:1f:89:ac:91:f8:ec:7b:03:
- 46:0b:53:15:ed:23:40:35:94:f3:96:80:27:d3:4a:
- 84:92:68:c9:0c:e0:14:32:c7:31:67:49:29:58:77:
- ea:ce:8a:72:5b:93:b1:a0:a8:e5:84:c6:52:9d:5a:
- c0:41:bf:98:5f:18:5d:aa:d1:65:79:fb:e9:b0:84:
- 92:9d:2c:58:bc:f1:c4:29:59:ed:bc:ac:85:ce:d7:
- 0e:aa:08:e8:2d:90:25:cb:91:9d:7d:91:74:42:a0:
- ae:77:d2:11:7b:57:49:04:24:c0:94:f4:20:54:60:
- d9:1b:76:76:0b:2c:23:3c:67:90:8c:06:ed:4e:df:
- ac:24:22:26:f7:26:8f:5a:d2:5b:79:8a:6f:6e:53:
- 27:60:10:cb:c7:b4:9f:60:2d:8f:32:69:4b:01:d1:
- f0:6d:69:1a:22:14:06:66:63:97:e8:fc:79:41:8d:
- 15:44:44:d1:43:2a:37:5e:77:e4:06:e6:a9:85:13:
- e9:24:63:9d:09:d0:f5:13:d5:ba:59:2e:1c:d2:70:
- 06:b1:80:f7:57:d7:30:f7:14:f3:18:06:7f:84:38:
- b6:81:46:9f:a2:36:87:0e:5f:1a:45:38:b7:20:16:
- b7:c6:e1:91:3b:0e:0c:ab:b7:4e:3d:a4:6d:66:d8:
- 85:fb
+ 00:ef:e6:e9:e0:b4:83:30:dc:21:a0:1f:9d:c3:81:
+ 9d:a2:a1:ce:e5:ef:1f:94:e3:f0:14:05:12:2a:97:
+ 5e:00:ba:6a:c3:09:b3:06:a1:9e:da:6f:9d:f8:45:
+ a2:6c:1e:7d:a3:10:d2:db:38:24:ed:80:25:36:9c:
+ db:d3:07:af:39:f8:82:48:a3:cd:7f:f3:57:dd:f9:
+ fd:7c:03:d5:8e:5d:35:ae:ed:af:c6:a1:89:ca:2e:
+ 2e:cf:77:5a:26:c6:e4:1d:9d:97:c7:a7:cf:93:aa:
+ 24:22:d9:82:d5:98:47:c9:33:ba:77:7e:6a:a3:35:
+ 43:1c:56:a5:94:2d:48:0f:47:2d:33:cd:c4:46:2d:
+ 54:61:dd:b8:bc:8d:1c:97:7d:4b:f4:fc:6b:3e:4d:
+ 28:17:7f:9a:e9:e5:6d:6f:c4:1c:75:8d:a6:0d:b7:
+ 5e:37:de:e1:1a:b2:e5:a6:d6:79:e4:df:1f:d3:f6:
+ 68:ed:30:a3:9e:8d:ed:8b:55:3d:12:3f:0f:3f:90:
+ 4f:b5:74:02:b0:1f:40:ae:32:d9:8e:a5:3b:74:e0:
+ f3:1e:4e:4c:63:fd:37:4b:b8:2f:70:41:64:4f:ee:
+ 6b:2f:33:40:2f:8a:c6:5f:e3:6a:e4:a0:62:53:99:
+ de:8c:ca:b5:34:ca:c0:20:9e:16:73:13:e1:c9:dc:
+ 22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -443,41 +443,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 0e:00:56:5c:72:31:88:bd:95:13:f7:64:96:1c:63:c2:1c:11:
- 60:04:d2:c3:5f:7c:a2:d7:d1:33:6d:51:6b:77:61:78:a8:70:
- 2e:50:97:5d:c1:e8:9b:dd:c6:61:a7:d3:e1:2c:83:07:85:5c:
- c9:d7:1e:22:c2:5f:76:83:19:d7:de:4a:5e:82:0f:43:80:45:
- 02:d7:d0:3d:ca:c3:c0:fc:04:c8:f6:89:32:d7:47:c6:bf:1f:
- c6:bd:71:e1:07:00:90:12:ec:61:63:1b:6c:e9:58:2c:fc:4c:
- a9:8f:58:e1:b1:6e:a5:ca:4d:be:7e:32:16:74:5f:fd:35:e4:
- 37:aa:1a:c5:33:21:20:8a:3e:1c:af:da:f3:c7:a2:22:d3:93:
- 6c:5e:ac:0a:65:d5:db:e4:8b:11:5e:ca:eb:8f:da:c4:5d:2f:
- 7a:98:e8:3c:d1:89:15:05:02:86:ef:eb:17:18:81:28:ca:d6:
- 58:87:bd:d4:e2:50:41:92:d9:7f:b1:f7:53:8f:f3:cc:f3:1e:
- 1d:e4:5a:c2:60:1b:17:42:78:53:e9:2d:5d:bb:f9:21:50:ff:
- 87:53:be:5f:e6:d4:8f:25:7f:d7:83:d7:f8:4d:c1:7c:7a:40:
- 0b:11:f1:d9:c6:eb:97:45:00:d6:6b:84:1c:4f:fc:8e:1f:5b:
- b5:3d:60:0c
+ 0b:b4:ba:9b:02:15:72:58:48:09:c8:66:c4:7c:6e:07:5e:bf:
+ e1:a5:97:42:fd:5f:8f:5f:35:e7:60:78:73:a8:18:f8:c2:91:
+ b1:d4:1b:cb:11:17:e0:d5:30:69:90:b8:9a:f9:a1:95:47:c9:
+ 85:dd:6d:b9:56:a2:fb:16:2f:09:8c:c0:66:6d:af:7b:f2:42:
+ 67:0f:a3:b9:e8:69:36:89:92:1e:c8:54:11:fe:39:3f:71:85:
+ d9:65:30:0c:2a:b1:a6:b8:df:b0:40:7b:56:98:3d:c3:66:76:
+ be:85:ec:f2:6c:30:de:ce:b3:84:70:74:83:2b:20:42:5a:f0:
+ 9b:31:98:81:16:71:cf:cf:66:57:36:dd:13:cd:f0:74:0c:2f:
+ a1:26:71:1e:50:ce:57:c9:85:71:47:08:b2:a6:b4:2a:2f:6b:
+ 5f:1f:80:09:3d:b1:5e:ab:aa:e7:08:86:c7:75:2d:36:b1:f3:
+ 2c:e1:91:8c:1c:6b:0a:fe:80:38:34:61:f8:a2:ee:3e:9a:e4:
+ 38:95:dd:3d:21:1e:61:5c:53:a7:30:b8:2b:10:72:d8:5d:54:
+ a3:47:9c:6c:69:d6:42:a6:56:f2:b3:3e:98:22:c2:b0:6b:2e:
+ f3:3a:b8:71:52:53:b5:32:a5:a4:38:35:fc:f2:ed:9a:e3:52:
+ 57:75:df:07
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZE7KcVAB+JrJH47HsD
-RgtTFe0jQDWU85aAJ9NKhJJoyQzgFDLHMWdJKVh36s6KcluTsaCo5YTGUp1awEG/
-mF8YXarRZXn76bCEkp0sWLzxxClZ7byshc7XDqoI6C2QJcuRnX2RdEKgrnfSEXtX
-SQQkwJT0IFRg2Rt2dgssIzxnkIwG7U7frCQiJvcmj1rSW3mKb25TJ2AQy8e0n2At
-jzJpSwHR8G1pGiIUBmZjl+j8eUGNFURE0UMqN1535AbmqYUT6SRjnQnQ9RPVulku
-HNJwBrGA91fXMPcU8xgGf4Q4toFGn6I2hw5fGkU4tyAWt8bhkTsODKu3Tj2kbWbY
-hfsCAwEAAaOByzCByDAdBgNVHQ4EFgQUAs72rBo5HoXoctGKxh3oeo+dFWswHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAOAFZccjGI
-vZUT92SWHGPCHBFgBNLDX3yi19EzbVFrd2F4qHAuUJddweib3cZhp9PhLIMHhVzJ
-1x4iwl92gxnX3kpegg9DgEUC19A9ysPA/ATI9oky10fGvx/GvXHhBwCQEuxhYxts
-6Vgs/Eypj1jhsW6lyk2+fjIWdF/9NeQ3qhrFMyEgij4cr9rzx6Ii05NsXqwKZdXb
-5IsRXsrrj9rEXS96mOg80YkVBQKG7+sXGIEoytZYh73U4lBBktl/sfdTj/PM8x4d
-5FrCYBsXQnhT6S1du/khUP+HU75f5tSPJX/Xg9f4TcF8ekALEfHZxuuXRQDWa4Qc
-T/yOH1u1PWAM
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQALtLqbAhVy
+WEgJyGbEfG4HXr/hpZdC/V+PXzXnYHhzqBj4wpGx1BvLERfg1TBpkLia+aGVR8mF
+3W25VqL7Fi8JjMBmba978kJnD6O56Gk2iZIeyFQR/jk/cYXZZTAMKrGmuN+wQHtW
+mD3DZna+hezybDDezrOEcHSDKyBCWvCbMZiBFnHPz2ZXNt0TzfB0DC+hJnEeUM5X
+yYVxRwiyprQqL2tfH4AJPbFeq6rnCIbHdS02sfMs4ZGMHGsK/oA4NGH4ou4+muQ4
+ld09IR5hXFOnMLgrEHLYXVSjR5xsadZCplbysz6YIsKway7zOrhxUlO1MqWkODX8
+8u2a41JXdd8H
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
index 97d5674..b5b54e7 100644
--- a/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-newchain.pem
@@ -1,4 +1,4 @@
-[Created by: ./generate-key-rollover.py]
+[Created by: generate-key-rollover.py]
A certificate tree with two self-signed root certificates(oldroot, newroot),
and a third root certificate (newrootrollover) which has the same key as newroot
@@ -48,30 +48,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:be:12:1c:48:e4:73:1f:5c:d2:54:a9:7b:58:1c:
- 37:73:c2:49:26:3e:ed:b5:6b:55:17:c9:4c:52:34:
- ce:d9:76:86:32:74:74:ae:11:b2:99:1b:51:a0:33:
- 48:34:2f:b9:d3:2b:06:c2:5c:29:53:35:ce:7c:a6:
- 67:b2:6a:d4:33:c3:13:62:30:a1:53:5f:45:78:5b:
- bb:47:ad:07:a4:98:9a:e9:e3:b1:3b:e6:33:c2:c1:
- 5c:95:d7:c8:b9:a6:72:27:7a:79:da:c4:c8:5a:1a:
- 3e:5e:5e:a6:62:64:c6:72:86:b1:78:98:5b:63:27:
- 70:15:04:6b:b1:0f:11:9c:4d:3b:5c:e7:8d:c0:be:
- d5:84:46:6c:bd:11:1e:21:c1:82:9c:d0:aa:2d:2f:
- f8:2a:e9:3b:e4:35:15:6d:c7:4a:dd:a8:65:69:b8:
- 16:a1:8a:04:a2:44:68:40:b6:99:ae:61:df:9f:6c:
- 40:ef:79:c9:a3:6d:e4:2d:07:01:68:f1:21:4e:0e:
- 28:a7:fd:2f:ad:ee:7d:65:cf:36:fd:4f:1b:ba:10:
- 8e:86:fd:ec:37:67:0c:20:71:66:48:64:f3:82:af:
- f5:e1:73:c9:09:36:03:3f:c2:47:7a:f2:33:b9:f9:
- 9f:53:9b:24:5e:c3:cc:05:d9:a9:ed:d7:b2:2a:c5:
- b7:39
+ 00:ab:ca:16:55:35:25:9b:de:8e:fc:e9:5a:f9:04:
+ 3e:0e:6c:06:1e:1c:86:20:18:4f:41:da:3a:6d:16:
+ 9e:4e:3c:9b:11:67:bc:5a:3d:84:b2:79:05:d2:25:
+ 9a:6a:a8:80:6c:55:28:f2:5a:43:5f:c5:ef:e9:e3:
+ 1a:64:24:7e:57:4d:11:60:d7:e6:a9:2b:73:c7:93:
+ bb:67:b1:41:d5:df:21:5c:bd:98:93:a3:7d:0d:b0:
+ 86:5f:87:a9:d9:ab:ad:97:89:c5:12:c4:0f:71:d3:
+ 5b:79:18:53:64:7f:0a:a1:36:5e:00:5c:b9:ee:5e:
+ 14:10:17:f2:2a:60:0f:f7:ec:aa:d7:ad:d3:dc:8a:
+ 44:59:cf:c8:11:e7:42:1c:88:30:d7:1e:37:86:91:
+ 6b:ce:2a:bc:bb:f5:4a:cc:72:1a:9d:4f:5f:0e:c4:
+ c5:f7:b6:24:09:1c:22:f8:f7:a2:3d:45:c2:29:4d:
+ a3:f3:db:7a:a4:93:a2:48:d6:2b:90:da:0c:2b:d9:
+ 96:f0:d6:c7:eb:d0:eb:a8:08:72:55:a8:10:65:8f:
+ 38:6a:22:0c:9c:3d:68:1a:cd:16:da:73:24:2e:14:
+ 5d:08:05:fb:07:d1:52:53:4e:51:e4:b2:f3:17:4d:
+ f1:d0:c3:23:51:86:fb:a4:b9:09:37:9c:13:69:65:
+ 51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C9:45:0B:2A:F2:D8:8D:2A:D7:CE:AF:56:BF:82:B0:84:0C:C8:2E:F4
+ 90:8D:89:42:17:BF:F6:98:D1:AA:8C:BF:AF:C2:74:60:AB:ED:90:0F
X509v3 Authority Key Identifier:
- keyid:B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ keyid:A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
@@ -86,42 +86,42 @@
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 63:66:9e:6c:34:8c:5d:74:ae:90:25:55:ae:86:49:b9:3d:fd:
- 27:bc:4f:69:7b:70:cb:25:0e:a3:8c:7a:7d:9c:4f:0b:7c:f2:
- 85:a5:ea:82:d2:37:c2:74:a2:ae:a8:bf:62:f4:5f:d4:c6:41:
- 45:0c:cc:27:53:aa:8f:66:58:e9:b0:de:ae:98:14:bd:92:df:
- 9b:0f:f2:c5:3b:d2:bc:1c:3e:80:b4:09:0f:c1:9f:d6:3a:29:
- 52:71:b6:1a:92:95:5a:18:dc:b4:30:dc:61:61:93:54:d1:55:
- 83:92:5d:c0:c7:dc:ab:d7:08:dd:8a:44:cf:92:f9:4d:86:25:
- aa:ac:52:f6:0e:17:99:0b:31:d2:75:5e:33:f9:f5:b6:77:42:
- 07:62:a9:53:cc:f3:79:84:57:d9:14:3f:ab:4c:8b:ae:c7:9f:
- cf:7a:1f:bf:7e:1d:44:bd:76:b4:cd:8d:c8:1d:75:f7:3b:b5:
- bc:35:8b:3f:29:b1:cb:67:a4:17:af:a4:ca:9f:2b:e7:15:66:
- e4:c8:c1:7c:08:78:9e:5d:4b:c3:c6:58:66:96:42:e8:e6:40:
- fd:dc:24:ce:3b:58:11:38:40:0e:fc:a9:c0:2c:0f:e5:cc:bb:
- 02:32:31:b9:bc:6f:2d:1d:f6:2b:7c:d3:f8:24:f6:60:38:8a:
- 1f:dd:e1:50
+ 74:15:69:e0:48:a6:e3:fa:20:b6:3f:90:d7:61:d3:ea:b7:47:
+ 61:c7:81:6b:42:95:44:ac:1e:6f:3d:df:ad:2c:33:0d:e8:94:
+ 5b:d1:24:89:56:27:76:e4:6c:09:26:a7:e5:62:c9:96:83:ce:
+ 9d:08:f5:ee:c4:3d:fe:77:29:ae:8d:9f:7f:d5:81:b6:5d:b5:
+ 54:a0:1f:6c:54:1e:dd:a7:4e:78:e0:6c:60:1d:e8:1f:97:77:
+ 67:8d:57:80:00:17:80:cd:ab:ce:31:87:6e:9e:bf:3f:38:b9:
+ da:96:a3:d2:22:63:43:dd:5c:e8:42:ea:2d:eb:ab:81:33:e5:
+ 95:36:46:3c:dd:8e:ad:e2:43:40:6f:3c:ce:73:4d:52:71:9d:
+ 54:59:f4:73:a2:5a:48:a5:c7:bc:dd:f9:9f:91:39:b1:bc:ad:
+ 9a:59:ea:f6:33:42:72:66:2f:e9:78:8f:b6:09:15:35:d8:e6:
+ 70:0d:d3:da:a7:7e:55:d9:05:88:47:16:1d:cd:54:1c:15:11:
+ a6:d3:35:2a:4e:c5:0f:f7:b0:98:24:bf:7e:78:3e:5f:56:0c:
+ 87:72:c2:d1:7d:3e:3c:c6:98:50:a9:c7:cd:6f:0e:12:b4:32:
+ 7a:b8:01:6c:88:1c:8a:c2:19:24:1e:34:9b:da:45:eb:0a:f9:
+ 99:6e:54:c6
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EhxI
-5HMfXNJUqXtYHDdzwkkmPu21a1UXyUxSNM7ZdoYydHSuEbKZG1GgM0g0L7nTKwbC
-XClTNc58pmeyatQzwxNiMKFTX0V4W7tHrQekmJrp47E75jPCwVyV18i5pnInenna
-xMhaGj5eXqZiZMZyhrF4mFtjJ3AVBGuxDxGcTTtc543AvtWERmy9ER4hwYKc0Kot
-L/gq6TvkNRVtx0rdqGVpuBahigSiRGhAtpmuYd+fbEDvecmjbeQtBwFo8SFODiin
-/S+t7n1lzzb9Txu6EI6G/ew3ZwwgcWZIZPOCr/Xhc8kJNgM/wkd68jO5+Z9TmyRe
-w8wF2ant17Iqxbc5AgMBAAGjgekwgeYwHQYDVR0OBBYEFMlFCyry2I0q186vVr+C
-sIQMyC70MB8GA1UdIwQYMBaAFLE5eRM10ANr6cRjK8zWYcOC7BTBMD8GCCsGAQUF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-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAY2aebDSMXXSukCVVroZJ
-uT39J7xPaXtwyyUOo4x6fZxPC3zyhaXqgtI3wnSirqi/YvRf1MZBRQzMJ1Oqj2ZY
-6bDerpgUvZLfmw/yxTvSvBw+gLQJD8Gf1jopUnG2GpKVWhjctDDcYWGTVNFVg5Jd
-wMfcq9cI3YpEz5L5TYYlqqxS9g4XmQsx0nVeM/n1tndCB2KpU8zzeYRX2RQ/q0yL
-rsefz3ofv34dRL12tM2NyB119zu1vDWLPymxy2ekF6+kyp8r5xVm5MjBfAh4nl1L
-w8ZYZpZC6OZA/dwkzjtYEThADvypwCwP5cy7AjIxubxvLR32K3zT+CT2YDiKH93h
-UA==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdBVp4Eim4/ogtj+Q12HT
+6rdHYceBa0KVRKwebz3frSwzDeiUW9EkiVYnduRsCSan5WLJloPOnQj17sQ9/ncp
+ro2ff9WBtl21VKAfbFQe3adOeOBsYB3oH5d3Z41XgAAXgM2rzjGHbp6/Pzi52paj
+0iJjQ91c6ELqLeurgTPllTZGPN2OreJDQG88znNNUnGdVFn0c6JaSKXHvN35n5E5
+sbytmlnq9jNCcmYv6XiPtgkVNdjmcA3T2qd+VdkFiEcWHc1UHBURptM1Kk7FD/ew
+mCS/fng+X1YMh3LC0X0+PMaYUKnHzW8OErQyergBbIgcisIZJB40m9pF6wr5mW5U
+xg==
-----END CERTIFICATE-----
Certificate:
@@ -138,30 +138,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9c:d0:2e:3b:06:d6:ea:65:bd:dd:b2:d3:e8:88:
- ea:08:73:01:42:ac:ca:38:28:17:32:93:5e:16:a8:
- c1:79:44:9a:db:24:08:ba:81:52:63:9c:b4:ed:57:
- d4:b2:ac:54:64:3b:70:39:7e:37:da:11:e1:8c:ba:
- 09:bc:1a:9b:e7:fe:6d:75:f8:71:31:f0:ca:52:89:
- 2a:9e:d5:53:db:b8:c0:76:cf:bf:58:58:e1:bb:81:
- de:62:bb:06:58:1f:9b:64:03:75:7d:ee:76:6f:39:
- 47:cb:8e:34:32:07:83:89:b0:83:2a:78:d0:ac:e2:
- 86:0a:a8:ab:3b:97:81:de:9d:36:b4:03:b7:d5:06:
- 05:53:d7:80:03:44:86:53:72:db:7a:5f:c5:20:dd:
- c7:44:58:3b:40:7f:0e:39:bc:be:0d:ca:6a:f6:82:
- a2:97:a2:17:79:51:6f:42:5d:0d:6a:b7:a0:de:5f:
- 6a:00:be:e7:5a:b7:91:e9:fc:77:fd:75:88:8d:52:
- 76:3d:0e:91:4b:c7:db:96:a4:5f:39:59:55:62:65:
- 3b:15:7a:bc:7b:09:9f:3e:75:d9:9e:c5:00:b3:19:
- d4:26:7e:eb:db:62:07:c2:f5:b6:4e:87:2d:eb:56:
- 8b:5a:68:6c:85:2f:b4:3e:1d:dd:5d:31:49:98:8b:
- 06:55
+ 00:ad:d7:63:a2:51:33:32:fd:aa:73:2c:32:30:ac:
+ 2f:8d:37:5f:08:b2:9b:02:1a:f7:3c:eb:c2:9e:82:
+ d9:a2:0e:02:14:28:bc:18:e2:92:8e:db:66:14:36:
+ 3f:ef:43:47:ac:b4:e2:be:92:82:14:9a:bd:97:d7:
+ 19:6f:88:29:b1:85:68:bd:13:d5:93:2c:a0:c8:bb:
+ 76:9d:ad:f5:da:e8:55:ca:87:6d:07:20:f4:22:cf:
+ 5a:51:ea:e1:7b:c3:7e:f9:a8:85:95:c5:e9:88:bf:
+ 7b:5e:fd:49:d4:c4:ed:ce:b7:d2:71:23:59:00:a7:
+ 6f:85:40:a0:38:c6:2b:88:99:68:e9:97:7e:2f:92:
+ 97:18:0a:19:c2:4e:0a:28:2c:b3:b4:67:26:eb:1d:
+ 03:f6:16:58:20:88:81:ee:a8:ea:19:ae:25:e9:34:
+ 8d:87:f3:d2:3b:0e:b2:d8:31:14:ee:bd:c6:01:ec:
+ d4:41:f0:06:7b:3e:20:7b:06:88:86:29:d1:77:9a:
+ c0:bc:69:63:3f:2b:20:ac:aa:17:33:29:78:0a:11:
+ ff:92:f2:b3:4a:58:29:96:d3:f4:4f:70:ef:9c:81:
+ 55:1c:21:20:bf:54:5a:dd:60:b7:6e:53:41:a2:19:
+ 55:b5:f9:b8:6e:63:37:73:a0:b8:d4:c5:c1:a2:4e:
+ 0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -176,41 +176,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- a8:ad:48:d8:6e:1d:24:09:d2:b3:29:3c:48:60:27:7f:37:64:
- d5:f1:3b:b3:5c:43:de:7c:b4:5f:ee:3a:f2:1a:25:24:0a:8a:
- 25:6d:19:5b:dc:0c:4e:48:61:2f:60:d3:6b:f3:9c:03:2c:d3:
- fa:c8:9b:99:e7:2e:c5:43:c0:5f:14:cd:8b:92:62:4f:e5:3a:
- cd:b5:0a:d8:b2:01:c7:44:b4:3a:86:66:bf:fa:11:a5:f8:24:
- 3f:d1:1a:e8:eb:1e:ad:f0:70:31:6f:bc:21:cf:db:ce:63:4e:
- 84:e9:52:9e:bb:1b:c4:72:ae:e0:6c:88:9e:99:dc:79:d9:fd:
- 83:26:8e:f6:19:70:d9:5e:fc:f4:0c:d1:17:6f:af:10:f6:64:
- 16:08:d8:72:ba:3a:2d:66:28:5a:41:0d:f3:47:87:a7:9c:78:
- c6:cd:5e:25:71:0b:f2:93:b8:26:17:b2:19:17:cc:03:ed:c0:
- 6e:06:e2:4b:4a:57:5f:23:02:2a:69:06:7a:c4:b7:3e:2f:e8:
- f0:03:ae:b8:2d:df:63:22:20:73:23:75:d9:3c:d7:22:e4:b4:
- 65:65:ed:b9:e6:02:1d:b5:51:11:9c:db:92:e4:fe:8c:1d:bb:
- c5:95:87:5b:38:ee:ff:e4:01:d1:5d:84:b9:73:d3:da:23:ca:
- 5e:05:d3:7d
+ 7f:a1:7c:8f:ea:d9:b9:63:e1:b0:31:0a:2e:1c:8e:e9:d0:23:
+ ee:3e:8e:50:55:db:ba:10:93:a4:93:0b:bb:c1:a5:3d:32:90:
+ ee:40:bf:0f:df:25:f1:65:b3:30:6d:39:9b:d2:c1:b8:b7:a8:
+ 7e:23:dc:6a:c3:5a:9e:53:d7:86:4c:82:de:98:23:1a:6f:f9:
+ 0d:6d:b9:35:55:b9:94:03:8d:b7:6c:2e:64:79:ea:85:84:7e:
+ 51:18:37:42:80:f5:d4:16:3f:a0:a9:6b:bf:17:d1:19:99:ea:
+ 8d:5a:c9:30:b0:ca:c8:2c:17:ce:14:75:b3:c9:19:df:16:1b:
+ 9a:97:ae:50:69:a5:6c:02:57:84:f4:7f:30:90:ed:89:bb:0e:
+ c9:7b:34:d0:41:58:00:20:29:6b:f0:e8:97:81:92:3d:ba:e0:
+ 65:e9:7c:cb:5c:7b:50:c8:0f:d3:20:ab:42:2f:0d:44:6d:99:
+ c2:1d:42:e8:b2:10:82:9b:86:ba:a8:45:d2:2c:13:53:cf:ad:
+ 37:ac:ce:f3:e7:49:fe:59:d5:b6:5f:8b:6b:fd:5f:e0:f2:91:
+ ef:e3:f7:e0:b6:ee:e7:ae:77:0e:66:12:40:55:75:77:2a:05:
+ d4:bd:ab:7e:5a:67:d8:81:8b:15:fd:4c:60:63:c7:f7:5f:fa:
+ d4:d8:d9:d2
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAuOwbW
-6mW93bLT6IjqCHMBQqzKOCgXMpNeFqjBeUSa2yQIuoFSY5y07VfUsqxUZDtwOX43
-2hHhjLoJvBqb5/5tdfhxMfDKUokqntVT27jAds+/WFjhu4HeYrsGWB+bZAN1fe52
-bzlHy440MgeDibCDKnjQrOKGCqirO5eB3p02tAO31QYFU9eAA0SGU3Lbel/FIN3H
-RFg7QH8OOby+Dcpq9oKil6IXeVFvQl0Nareg3l9qAL7nWreR6fx3/XWIjVJ2PQ6R
-S8fblqRfOVlVYmU7FXq8ewmfPnXZnsUAsxnUJn7r22IHwvW2Toct61aLWmhshS+0
-Ph3dXTFJmIsGVQIDAQABo4HLMIHIMB0GA1UdDgQWBBSxOXkTNdADa+nEYyvM1mHD
-guwUwTAfBgNVHSMEGDAWgBQVnqat9Z+KocEImb9mb8/Kcs0MNDA3BggrBgEFBQcB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-AKitSNhuHSQJ0rMpPEhgJ383ZNXxO7NcQ958tF/uOvIaJSQKiiVtGVvcDE5IYS9g
-02vznAMs0/rIm5nnLsVDwF8UzYuSYk/lOs21CtiyAcdEtDqGZr/6EaX4JD/RGujr
-Hq3wcDFvvCHP285jToTpUp67G8RyruBsiJ6Z3HnZ/YMmjvYZcNle/PQM0RdvrxD2
-ZBYI2HK6Oi1mKFpBDfNHh6eceMbNXiVxC/KTuCYXshkXzAPtwG4G4ktKV18jAipp
-BnrEtz4v6PADrrgt32MiIHMjddk81yLktGVl7bnmAh21URGc25Lk/owdu8WVh1s4
-7v/kAdFdhLlz09ojyl4F030=
+AH+hfI/q2blj4bAxCi4cjunQI+4+jlBV27oQk6STC7vBpT0ykO5Avw/fJfFlszBt
+OZvSwbi3qH4j3GrDWp5T14ZMgt6YIxpv+Q1tuTVVuZQDjbdsLmR56oWEflEYN0KA
+9dQWP6Cpa78X0RmZ6o1ayTCwysgsF84UdbPJGd8WG5qXrlBppWwCV4T0fzCQ7Ym7
+Dsl7NNBBWAAgKWvw6JeBkj264GXpfMtce1DID9Mgq0IvDURtmcIdQuiyEIKbhrqo
+RdIsE1PPrTeszvPnSf5Z1bZfi2v9X+Dyke/j9+C27ueudw5mEkBVdXcqBdS9q35a
+Z9iBixX9TGBjx/df+tTY2dI=
-----END CERTIFICATE-----
Certificate:
@@ -227,30 +227,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ae:ea:3b:3f:b6:e9:3d:ea:eb:3d:dd:e8:4d:45:
- 83:63:78:ea:07:90:3a:3c:4f:92:54:2b:2d:02:1b:
- eb:9e:81:72:68:2e:73:f8:4a:a1:de:0c:d6:f0:c2:
- 61:26:90:0b:48:59:ab:23:25:8f:e4:4a:6b:c9:2d:
- ba:a7:35:c4:22:df:76:99:d8:7b:f7:6d:ca:9b:da:
- d2:ed:7e:c8:93:b2:a7:f6:f0:05:6a:5d:c6:e1:79:
- d0:25:59:a9:50:1e:65:eb:1c:c9:cd:4e:6a:3a:2a:
- a4:1a:fa:81:a3:e7:ae:d7:de:43:d9:e8:0b:5c:b0:
- 6b:46:39:c5:9c:4a:6d:59:bf:da:70:2e:80:ac:c8:
- 80:e3:83:d1:71:7b:a7:0b:92:bf:a8:81:ad:5c:b2:
- d5:e9:b9:5f:b5:4f:93:43:67:72:36:b3:f7:17:b9:
- 1b:da:2a:13:83:70:36:ae:59:03:3d:f0:71:de:a2:
- 7a:41:ad:b5:e9:a2:51:e4:18:ec:88:ad:48:f1:df:
- 17:04:43:54:2a:af:3c:c0:f5:84:39:43:d1:a7:d2:
- 52:0f:3c:dd:ef:13:58:8c:1d:d4:dd:2e:6d:1a:e7:
- 73:9b:8b:f3:41:7b:9a:53:4e:0d:92:d3:5d:3f:fc:
- c3:61:dc:5f:a0:93:3c:08:cc:b4:9b:ce:9d:78:e3:
- 77:c9
+ 00:c8:01:d6:aa:f0:22:fa:55:68:e4:56:fa:87:9f:
+ 03:a4:78:36:40:64:b2:60:f7:20:25:47:92:b0:cb:
+ c7:9d:4c:c6:4d:78:0f:91:9e:a8:f1:0b:84:58:b1:
+ a9:06:2d:7d:09:82:f4:1a:60:67:7b:c3:47:69:05:
+ b5:59:90:02:2a:53:27:25:21:4d:9a:5f:b6:7b:58:
+ 25:77:b3:46:64:fc:ed:04:c0:e2:62:e5:96:f9:8a:
+ 8d:9a:e8:8d:bf:d9:19:38:97:52:ab:31:3c:1c:a2:
+ b9:21:ec:5f:aa:8c:21:44:c6:73:7f:0b:72:c9:61:
+ 1c:a7:cd:46:bb:da:5b:a7:1b:e2:18:fb:ff:18:81:
+ 5f:fb:75:29:21:9c:92:e0:d3:03:f5:b8:58:94:36:
+ 32:7a:9a:a7:ec:49:ab:ef:d4:8c:c4:65:aa:23:40:
+ 96:76:47:4b:06:0b:21:c4:44:9f:8d:12:ab:05:05:
+ e7:97:d9:9d:c0:f9:4d:77:14:0b:c5:d5:82:0c:d7:
+ 14:54:fa:07:dd:a3:78:30:5d:95:83:e4:1c:7f:c2:
+ 13:c6:b1:8b:10:87:9b:e9:3e:4f:d6:b6:b9:a8:9f:
+ 4c:47:f8:40:67:7d:4e:9b:87:4a:b6:92:eb:33:f1:
+ 73:a3:70:d6:fc:37:32:2a:b4:b8:56:90:63:5e:ec:
+ b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ 83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -265,41 +265,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 58:4b:60:7e:0b:c2:3d:20:f3:49:34:91:55:d3:5f:5b:ce:81:
- 31:da:71:9f:72:d7:f4:cc:be:cf:58:b8:97:aa:99:87:3d:34:
- 12:ac:40:1c:8e:02:46:83:ee:04:e1:7e:5e:57:ca:a4:ae:e1:
- d0:b4:12:e9:65:33:f5:4e:c4:f6:49:00:7f:83:6d:75:67:84:
- b2:db:52:5a:a2:3e:5d:2d:5c:f3:45:fe:6a:d3:c4:0a:76:52:
- c6:9b:b0:89:01:b9:b6:be:30:60:d9:b4:2e:1d:1e:bf:ef:d8:
- 12:90:9f:cb:67:29:20:61:9f:1a:67:64:88:4c:43:ec:10:7d:
- 87:11:00:44:6a:ce:37:af:73:f4:fa:d2:22:2f:24:3a:6f:79:
- 09:6c:8d:de:b5:71:0e:6e:b7:64:a9:be:73:a8:c1:c8:50:74:
- d2:c4:2b:ef:4f:25:20:8f:41:f0:1f:6e:52:77:eb:a0:1a:94:
- 87:7c:35:11:37:5c:33:f5:83:47:e0:f2:0e:97:af:23:61:23:
- 25:0b:92:6c:3b:30:a1:aa:c6:dc:4a:05:6e:43:76:58:82:66:
- cd:f6:d6:ef:9b:80:36:d6:95:b7:d1:ec:5c:53:f7:78:84:ef:
- 48:6a:2c:f7:93:97:f2:7a:ce:ec:f3:eb:63:e1:5a:e0:69:02:
- 5d:34:36:93
+ a9:e8:26:5f:c8:9e:6b:fc:cd:4d:d2:9e:de:f5:f1:08:04:66:
+ 23:6a:7e:ee:92:9f:eb:71:53:ea:97:8e:db:e4:47:72:7a:08:
+ 17:1c:72:4a:37:00:f5:e3:a8:77:d2:b1:d4:89:45:b2:e9:ba:
+ 00:61:6e:cb:03:b4:21:aa:ec:e4:f3:a4:41:b7:90:41:08:0f:
+ 0d:90:bd:55:4a:bc:1c:7f:2e:c1:97:6d:34:d1:8d:da:39:46:
+ 55:49:97:4c:f7:eb:29:62:b3:ed:ad:24:d8:05:9a:93:82:f2:
+ 12:34:24:78:60:a4:7b:a9:94:97:75:10:20:57:42:83:32:0d:
+ 19:d0:15:3b:55:84:d8:49:9b:a4:66:14:c9:90:f4:89:bc:23:
+ 2a:45:dd:19:25:68:6e:fe:44:60:c0:19:75:61:3f:85:4b:90:
+ 8c:45:3b:2e:9b:41:12:43:ee:2f:61:96:ff:af:4b:11:fe:af:
+ 02:af:0d:69:0d:ae:11:bc:eb:34:de:ac:24:3b:08:6e:b3:b2:
+ 1a:8e:46:d9:6b:91:08:4e:c3:5b:f6:3c:3f:90:8d:95:01:b9:
+ d9:30:aa:2d:79:00:bb:99:a1:ed:0a:1c:28:fc:5c:12:1c:3d:
+ 53:33:c8:ca:b1:9c:13:a2:2a:c7:1d:ce:b7:1e:2c:35:37:e8:
+ 10:af:0c:e6
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7qOz+26T3q6z3d6E1F
-g2N46geQOjxPklQrLQIb656Bcmguc/hKod4M1vDCYSaQC0hZqyMlj+RKa8ktuqc1
-xCLfdpnYe/dtypva0u1+yJOyp/bwBWpdxuF50CVZqVAeZescyc1OajoqpBr6gaPn
-rtfeQ9noC1ywa0Y5xZxKbVm/2nAugKzIgOOD0XF7pwuSv6iBrVyy1em5X7VPk0Nn
-cjaz9xe5G9oqE4NwNq5ZAz3wcd6iekGttemiUeQY7IitSPHfFwRDVCqvPMD1hDlD
-0afSUg883e8TWIwd1N0ubRrnc5uL80F7mlNODZLTXT/8w2HcX6CTPAjMtJvOnXjj
-d8kCAwEAAaOByzCByDAdBgNVHQ4EFgQUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwHwYD
-VR0jBBgwFoAUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBYS2B+C8I9
-IPNJNJFV019bzoEx2nGfctf0zL7PWLiXqpmHPTQSrEAcjgJGg+4E4X5eV8qkruHQ
-tBLpZTP1TsT2SQB/g211Z4Sy21Jaoj5dLVzzRf5q08QKdlLGm7CJAbm2vjBg2bQu
-HR6/79gSkJ/LZykgYZ8aZ2SITEPsEH2HEQBEas43r3P0+tIiLyQ6b3kJbI3etXEO
-brdkqb5zqMHIUHTSxCvvTyUgj0HwH25Sd+ugGpSHfDURN1wz9YNH4PIOl68jYSMl
-C5JsOzChqsbcSgVuQ3ZYgmbN9tbvm4A21pW30excU/d4hO9Iaiz3k5fyes7s8+tj
-4VrgaQJdNDaT
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCp6CZfyJ5r
+/M1N0p7e9fEIBGYjan7ukp/rcVPql47b5EdyeggXHHJKNwD146h30rHUiUWy6boA
+YW7LA7Qhquzk86RBt5BBCA8NkL1VSrwcfy7Bl2000Y3aOUZVSZdM9+spYrPtrSTY
+BZqTgvISNCR4YKR7qZSXdRAgV0KDMg0Z0BU7VYTYSZukZhTJkPSJvCMqRd0ZJWhu
+/kRgwBl1YT+FS5CMRTsum0ESQ+4vYZb/r0sR/q8Crw1pDa4RvOs03qwkOwhus7Ia
+jkbZa5EITsNb9jw/kI2VAbnZMKoteQC7maHtChwo/FwSHD1TM8jKsZwToirHHc63
+Hiw1N+gQrwzm
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem
index 6669c2a..f262083 100644
--- a/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-oldchain.pem
@@ -1,4 +1,4 @@
-[Created by: ./generate-key-rollover.py]
+[Created by: generate-key-rollover.py]
A certificate tree with two self-signed root certificates(oldroot, newroot),
and a third root certificate (newrootrollover) which has the same key as newroot
@@ -48,30 +48,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:be:12:1c:48:e4:73:1f:5c:d2:54:a9:7b:58:1c:
- 37:73:c2:49:26:3e:ed:b5:6b:55:17:c9:4c:52:34:
- ce:d9:76:86:32:74:74:ae:11:b2:99:1b:51:a0:33:
- 48:34:2f:b9:d3:2b:06:c2:5c:29:53:35:ce:7c:a6:
- 67:b2:6a:d4:33:c3:13:62:30:a1:53:5f:45:78:5b:
- bb:47:ad:07:a4:98:9a:e9:e3:b1:3b:e6:33:c2:c1:
- 5c:95:d7:c8:b9:a6:72:27:7a:79:da:c4:c8:5a:1a:
- 3e:5e:5e:a6:62:64:c6:72:86:b1:78:98:5b:63:27:
- 70:15:04:6b:b1:0f:11:9c:4d:3b:5c:e7:8d:c0:be:
- d5:84:46:6c:bd:11:1e:21:c1:82:9c:d0:aa:2d:2f:
- f8:2a:e9:3b:e4:35:15:6d:c7:4a:dd:a8:65:69:b8:
- 16:a1:8a:04:a2:44:68:40:b6:99:ae:61:df:9f:6c:
- 40:ef:79:c9:a3:6d:e4:2d:07:01:68:f1:21:4e:0e:
- 28:a7:fd:2f:ad:ee:7d:65:cf:36:fd:4f:1b:ba:10:
- 8e:86:fd:ec:37:67:0c:20:71:66:48:64:f3:82:af:
- f5:e1:73:c9:09:36:03:3f:c2:47:7a:f2:33:b9:f9:
- 9f:53:9b:24:5e:c3:cc:05:d9:a9:ed:d7:b2:2a:c5:
- b7:39
+ 00:ab:ca:16:55:35:25:9b:de:8e:fc:e9:5a:f9:04:
+ 3e:0e:6c:06:1e:1c:86:20:18:4f:41:da:3a:6d:16:
+ 9e:4e:3c:9b:11:67:bc:5a:3d:84:b2:79:05:d2:25:
+ 9a:6a:a8:80:6c:55:28:f2:5a:43:5f:c5:ef:e9:e3:
+ 1a:64:24:7e:57:4d:11:60:d7:e6:a9:2b:73:c7:93:
+ bb:67:b1:41:d5:df:21:5c:bd:98:93:a3:7d:0d:b0:
+ 86:5f:87:a9:d9:ab:ad:97:89:c5:12:c4:0f:71:d3:
+ 5b:79:18:53:64:7f:0a:a1:36:5e:00:5c:b9:ee:5e:
+ 14:10:17:f2:2a:60:0f:f7:ec:aa:d7:ad:d3:dc:8a:
+ 44:59:cf:c8:11:e7:42:1c:88:30:d7:1e:37:86:91:
+ 6b:ce:2a:bc:bb:f5:4a:cc:72:1a:9d:4f:5f:0e:c4:
+ c5:f7:b6:24:09:1c:22:f8:f7:a2:3d:45:c2:29:4d:
+ a3:f3:db:7a:a4:93:a2:48:d6:2b:90:da:0c:2b:d9:
+ 96:f0:d6:c7:eb:d0:eb:a8:08:72:55:a8:10:65:8f:
+ 38:6a:22:0c:9c:3d:68:1a:cd:16:da:73:24:2e:14:
+ 5d:08:05:fb:07:d1:52:53:4e:51:e4:b2:f3:17:4d:
+ f1:d0:c3:23:51:86:fb:a4:b9:09:37:9c:13:69:65:
+ 51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C9:45:0B:2A:F2:D8:8D:2A:D7:CE:AF:56:BF:82:B0:84:0C:C8:2E:F4
+ 90:8D:89:42:17:BF:F6:98:D1:AA:8C:BF:AF:C2:74:60:AB:ED:90:0F
X509v3 Authority Key Identifier:
- keyid:B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ keyid:A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
@@ -86,42 +86,42 @@
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 63:66:9e:6c:34:8c:5d:74:ae:90:25:55:ae:86:49:b9:3d:fd:
- 27:bc:4f:69:7b:70:cb:25:0e:a3:8c:7a:7d:9c:4f:0b:7c:f2:
- 85:a5:ea:82:d2:37:c2:74:a2:ae:a8:bf:62:f4:5f:d4:c6:41:
- 45:0c:cc:27:53:aa:8f:66:58:e9:b0:de:ae:98:14:bd:92:df:
- 9b:0f:f2:c5:3b:d2:bc:1c:3e:80:b4:09:0f:c1:9f:d6:3a:29:
- 52:71:b6:1a:92:95:5a:18:dc:b4:30:dc:61:61:93:54:d1:55:
- 83:92:5d:c0:c7:dc:ab:d7:08:dd:8a:44:cf:92:f9:4d:86:25:
- aa:ac:52:f6:0e:17:99:0b:31:d2:75:5e:33:f9:f5:b6:77:42:
- 07:62:a9:53:cc:f3:79:84:57:d9:14:3f:ab:4c:8b:ae:c7:9f:
- cf:7a:1f:bf:7e:1d:44:bd:76:b4:cd:8d:c8:1d:75:f7:3b:b5:
- bc:35:8b:3f:29:b1:cb:67:a4:17:af:a4:ca:9f:2b:e7:15:66:
- e4:c8:c1:7c:08:78:9e:5d:4b:c3:c6:58:66:96:42:e8:e6:40:
- fd:dc:24:ce:3b:58:11:38:40:0e:fc:a9:c0:2c:0f:e5:cc:bb:
- 02:32:31:b9:bc:6f:2d:1d:f6:2b:7c:d3:f8:24:f6:60:38:8a:
- 1f:dd:e1:50
+ 74:15:69:e0:48:a6:e3:fa:20:b6:3f:90:d7:61:d3:ea:b7:47:
+ 61:c7:81:6b:42:95:44:ac:1e:6f:3d:df:ad:2c:33:0d:e8:94:
+ 5b:d1:24:89:56:27:76:e4:6c:09:26:a7:e5:62:c9:96:83:ce:
+ 9d:08:f5:ee:c4:3d:fe:77:29:ae:8d:9f:7f:d5:81:b6:5d:b5:
+ 54:a0:1f:6c:54:1e:dd:a7:4e:78:e0:6c:60:1d:e8:1f:97:77:
+ 67:8d:57:80:00:17:80:cd:ab:ce:31:87:6e:9e:bf:3f:38:b9:
+ da:96:a3:d2:22:63:43:dd:5c:e8:42:ea:2d:eb:ab:81:33:e5:
+ 95:36:46:3c:dd:8e:ad:e2:43:40:6f:3c:ce:73:4d:52:71:9d:
+ 54:59:f4:73:a2:5a:48:a5:c7:bc:dd:f9:9f:91:39:b1:bc:ad:
+ 9a:59:ea:f6:33:42:72:66:2f:e9:78:8f:b6:09:15:35:d8:e6:
+ 70:0d:d3:da:a7:7e:55:d9:05:88:47:16:1d:cd:54:1c:15:11:
+ a6:d3:35:2a:4e:c5:0f:f7:b0:98:24:bf:7e:78:3e:5f:56:0c:
+ 87:72:c2:d1:7d:3e:3c:c6:98:50:a9:c7:cd:6f:0e:12:b4:32:
+ 7a:b8:01:6c:88:1c:8a:c2:19:24:1e:34:9b:da:45:eb:0a:f9:
+ 99:6e:54:c6
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EhxI
-5HMfXNJUqXtYHDdzwkkmPu21a1UXyUxSNM7ZdoYydHSuEbKZG1GgM0g0L7nTKwbC
-XClTNc58pmeyatQzwxNiMKFTX0V4W7tHrQekmJrp47E75jPCwVyV18i5pnInenna
-xMhaGj5eXqZiZMZyhrF4mFtjJ3AVBGuxDxGcTTtc543AvtWERmy9ER4hwYKc0Kot
-L/gq6TvkNRVtx0rdqGVpuBahigSiRGhAtpmuYd+fbEDvecmjbeQtBwFo8SFODiin
-/S+t7n1lzzb9Txu6EI6G/ew3ZwwgcWZIZPOCr/Xhc8kJNgM/wkd68jO5+Z9TmyRe
-w8wF2ant17Iqxbc5AgMBAAGjgekwgeYwHQYDVR0OBBYEFMlFCyry2I0q186vVr+C
-sIQMyC70MB8GA1UdIwQYMBaAFLE5eRM10ANr6cRjK8zWYcOC7BTBMD8GCCsGAQUF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-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAY2aebDSMXXSukCVVroZJ
-uT39J7xPaXtwyyUOo4x6fZxPC3zyhaXqgtI3wnSirqi/YvRf1MZBRQzMJ1Oqj2ZY
-6bDerpgUvZLfmw/yxTvSvBw+gLQJD8Gf1jopUnG2GpKVWhjctDDcYWGTVNFVg5Jd
-wMfcq9cI3YpEz5L5TYYlqqxS9g4XmQsx0nVeM/n1tndCB2KpU8zzeYRX2RQ/q0yL
-rsefz3ofv34dRL12tM2NyB119zu1vDWLPymxy2ekF6+kyp8r5xVm5MjBfAh4nl1L
-w8ZYZpZC6OZA/dwkzjtYEThADvypwCwP5cy7AjIxubxvLR32K3zT+CT2YDiKH93h
-UA==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdBVp4Eim4/ogtj+Q12HT
+6rdHYceBa0KVRKwebz3frSwzDeiUW9EkiVYnduRsCSan5WLJloPOnQj17sQ9/ncp
+ro2ff9WBtl21VKAfbFQe3adOeOBsYB3oH5d3Z41XgAAXgM2rzjGHbp6/Pzi52paj
+0iJjQ91c6ELqLeurgTPllTZGPN2OreJDQG88znNNUnGdVFn0c6JaSKXHvN35n5E5
+sbytmlnq9jNCcmYv6XiPtgkVNdjmcA3T2qd+VdkFiEcWHc1UHBURptM1Kk7FD/ew
+mCS/fng+X1YMh3LC0X0+PMaYUKnHzW8OErQyergBbIgcisIZJB40m9pF6wr5mW5U
+xg==
-----END CERTIFICATE-----
Certificate:
@@ -138,30 +138,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9c:d0:2e:3b:06:d6:ea:65:bd:dd:b2:d3:e8:88:
- ea:08:73:01:42:ac:ca:38:28:17:32:93:5e:16:a8:
- c1:79:44:9a:db:24:08:ba:81:52:63:9c:b4:ed:57:
- d4:b2:ac:54:64:3b:70:39:7e:37:da:11:e1:8c:ba:
- 09:bc:1a:9b:e7:fe:6d:75:f8:71:31:f0:ca:52:89:
- 2a:9e:d5:53:db:b8:c0:76:cf:bf:58:58:e1:bb:81:
- de:62:bb:06:58:1f:9b:64:03:75:7d:ee:76:6f:39:
- 47:cb:8e:34:32:07:83:89:b0:83:2a:78:d0:ac:e2:
- 86:0a:a8:ab:3b:97:81:de:9d:36:b4:03:b7:d5:06:
- 05:53:d7:80:03:44:86:53:72:db:7a:5f:c5:20:dd:
- c7:44:58:3b:40:7f:0e:39:bc:be:0d:ca:6a:f6:82:
- a2:97:a2:17:79:51:6f:42:5d:0d:6a:b7:a0:de:5f:
- 6a:00:be:e7:5a:b7:91:e9:fc:77:fd:75:88:8d:52:
- 76:3d:0e:91:4b:c7:db:96:a4:5f:39:59:55:62:65:
- 3b:15:7a:bc:7b:09:9f:3e:75:d9:9e:c5:00:b3:19:
- d4:26:7e:eb:db:62:07:c2:f5:b6:4e:87:2d:eb:56:
- 8b:5a:68:6c:85:2f:b4:3e:1d:dd:5d:31:49:98:8b:
- 06:55
+ 00:ad:d7:63:a2:51:33:32:fd:aa:73:2c:32:30:ac:
+ 2f:8d:37:5f:08:b2:9b:02:1a:f7:3c:eb:c2:9e:82:
+ d9:a2:0e:02:14:28:bc:18:e2:92:8e:db:66:14:36:
+ 3f:ef:43:47:ac:b4:e2:be:92:82:14:9a:bd:97:d7:
+ 19:6f:88:29:b1:85:68:bd:13:d5:93:2c:a0:c8:bb:
+ 76:9d:ad:f5:da:e8:55:ca:87:6d:07:20:f4:22:cf:
+ 5a:51:ea:e1:7b:c3:7e:f9:a8:85:95:c5:e9:88:bf:
+ 7b:5e:fd:49:d4:c4:ed:ce:b7:d2:71:23:59:00:a7:
+ 6f:85:40:a0:38:c6:2b:88:99:68:e9:97:7e:2f:92:
+ 97:18:0a:19:c2:4e:0a:28:2c:b3:b4:67:26:eb:1d:
+ 03:f6:16:58:20:88:81:ee:a8:ea:19:ae:25:e9:34:
+ 8d:87:f3:d2:3b:0e:b2:d8:31:14:ee:bd:c6:01:ec:
+ d4:41:f0:06:7b:3e:20:7b:06:88:86:29:d1:77:9a:
+ c0:bc:69:63:3f:2b:20:ac:aa:17:33:29:78:0a:11:
+ ff:92:f2:b3:4a:58:29:96:d3:f4:4f:70:ef:9c:81:
+ 55:1c:21:20:bf:54:5a:dd:60:b7:6e:53:41:a2:19:
+ 55:b5:f9:b8:6e:63:37:73:a0:b8:d4:c5:c1:a2:4e:
+ 0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -176,41 +176,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 56:90:dd:ae:50:4b:18:56:7f:e9:1c:e4:29:7c:60:7e:87:27:
- b5:cd:2b:00:67:2b:f7:a2:32:db:38:92:18:46:00:22:c4:2d:
- 1f:ff:32:5f:62:69:30:db:c8:aa:63:68:6a:0f:db:2d:13:15:
- 8f:74:22:54:67:fb:95:19:35:49:66:1e:a1:65:67:3c:71:02:
- 85:34:f7:3b:20:51:03:e9:a1:b9:7d:9b:3b:21:d4:7a:28:6e:
- bd:01:50:a6:7e:2b:a0:bc:ad:d5:55:63:3d:04:f3:f0:aa:c3:
- 4e:b3:aa:b8:68:89:a0:8c:b7:9e:38:37:81:2c:01:57:93:7c:
- 3f:aa:54:2e:35:66:a4:c0:81:ca:06:5c:c6:ab:72:f4:38:08:
- cd:60:40:53:42:48:71:0a:e7:f5:82:3c:bb:51:89:a4:8b:1e:
- c9:44:4c:7f:10:7d:d3:f4:60:04:07:36:b2:44:82:b2:0a:3c:
- e9:82:55:4a:37:cf:47:b6:d3:ea:e5:fc:b8:49:4c:6b:77:a6:
- 42:29:1c:1f:97:78:18:f7:88:da:52:42:87:19:e4:13:0d:91:
- 73:cc:98:6a:22:70:e2:5c:54:d0:96:b7:94:37:3c:0f:f6:9a:
- e3:02:fb:95:63:5a:87:d4:0d:16:16:bd:95:fa:88:c3:a8:e4:
- d0:91:dd:be
+ e0:0c:55:1f:da:4b:3e:e7:ec:e0:41:89:52:3d:0e:be:9d:31:
+ 1d:53:82:7a:99:d3:9d:35:65:97:4d:ba:67:c4:27:db:19:40:
+ d9:0b:15:0d:6a:44:86:be:59:07:14:dc:1a:2c:94:41:2d:eb:
+ 70:be:c8:54:89:18:e7:27:fb:bb:4f:41:a6:60:70:1d:7f:bf:
+ ea:87:01:df:7f:67:68:8a:8f:ff:89:89:b3:c0:95:a6:74:63:
+ 83:ba:b1:55:6d:1a:16:64:94:47:c2:6a:05:c2:62:eb:22:d5:
+ ae:1a:a2:fb:93:0d:ca:a1:8a:39:32:25:97:a4:b2:72:73:7c:
+ 81:30:33:18:a4:fd:b6:e1:b6:6b:53:ac:26:31:ea:19:b6:d3:
+ bb:31:6e:7a:91:01:e2:22:4a:f8:a5:38:9b:12:c6:e5:4a:bb:
+ e4:49:35:59:07:1b:6a:25:58:b2:aa:04:02:90:fd:0a:55:cf:
+ 0e:1d:95:c6:d0:c1:c7:fa:a0:c4:e3:9e:75:58:f0:c6:63:d7:
+ 10:b3:ac:45:7e:60:86:cc:95:ab:7b:46:72:27:12:05:5d:ea:
+ c8:09:47:b1:9a:6c:ef:d9:1a:0b:01:bb:6d:a4:f3:35:50:09:
+ 9a:86:68:a0:34:4c:7d:70:55:9d:88:d8:9a:3d:28:fb:8b:3c:
+ 53:96:8c:e9
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAuOwbW
-6mW93bLT6IjqCHMBQqzKOCgXMpNeFqjBeUSa2yQIuoFSY5y07VfUsqxUZDtwOX43
-2hHhjLoJvBqb5/5tdfhxMfDKUokqntVT27jAds+/WFjhu4HeYrsGWB+bZAN1fe52
-bzlHy440MgeDibCDKnjQrOKGCqirO5eB3p02tAO31QYFU9eAA0SGU3Lbel/FIN3H
-RFg7QH8OOby+Dcpq9oKil6IXeVFvQl0Nareg3l9qAL7nWreR6fx3/XWIjVJ2PQ6R
-S8fblqRfOVlVYmU7FXq8ewmfPnXZnsUAsxnUJn7r22IHwvW2Toct61aLWmhshS+0
-Ph3dXTFJmIsGVQIDAQABo4HLMIHIMB0GA1UdDgQWBBSxOXkTNdADa+nEYyvM1mHD
-guwUwTAfBgNVHSMEGDAWgBQCzvasGjkehehy0YrGHeh6j50VazA3BggrBgEFBQcB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-AFaQ3a5QSxhWf+kc5Cl8YH6HJ7XNKwBnK/eiMts4khhGACLELR//Ml9iaTDbyKpj
-aGoP2y0TFY90IlRn+5UZNUlmHqFlZzxxAoU09zsgUQPpobl9mzsh1Hoobr0BUKZ+
-K6C8rdVVYz0E8/Cqw06zqrhoiaCMt544N4EsAVeTfD+qVC41ZqTAgcoGXMarcvQ4
-CM1gQFNCSHEK5/WCPLtRiaSLHslETH8QfdP0YAQHNrJEgrIKPOmCVUo3z0e20+rl
-/LhJTGt3pkIpHB+XeBj3iNpSQocZ5BMNkXPMmGoicOJcVNCWt5Q3PA/2muMC+5Vj
-WofUDRYWvZX6iMOo5NCR3b4=
+AOAMVR/aSz7n7OBBiVI9Dr6dMR1TgnqZ0501ZZdNumfEJ9sZQNkLFQ1qRIa+WQcU
+3BoslEEt63C+yFSJGOcn+7tPQaZgcB1/v+qHAd9/Z2iKj/+JibPAlaZ0Y4O6sVVt
+GhZklEfCagXCYusi1a4aovuTDcqhijkyJZeksnJzfIEwMxik/bbhtmtTrCYx6hm2
+07sxbnqRAeIiSvilOJsSxuVKu+RJNVkHG2olWLKqBAKQ/QpVzw4dlcbQwcf6oMTj
+nnVY8MZj1xCzrEV+YIbMlat7RnInEgVd6sgJR7GabO/ZGgsBu22k8zVQCZqGaKA0
+TH1wVZ2I2Jo9KPuLPFOWjOk=
-----END CERTIFICATE-----
Certificate:
@@ -227,30 +227,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:44:ec:a7:15:00:1f:89:ac:91:f8:ec:7b:03:
- 46:0b:53:15:ed:23:40:35:94:f3:96:80:27:d3:4a:
- 84:92:68:c9:0c:e0:14:32:c7:31:67:49:29:58:77:
- ea:ce:8a:72:5b:93:b1:a0:a8:e5:84:c6:52:9d:5a:
- c0:41:bf:98:5f:18:5d:aa:d1:65:79:fb:e9:b0:84:
- 92:9d:2c:58:bc:f1:c4:29:59:ed:bc:ac:85:ce:d7:
- 0e:aa:08:e8:2d:90:25:cb:91:9d:7d:91:74:42:a0:
- ae:77:d2:11:7b:57:49:04:24:c0:94:f4:20:54:60:
- d9:1b:76:76:0b:2c:23:3c:67:90:8c:06:ed:4e:df:
- ac:24:22:26:f7:26:8f:5a:d2:5b:79:8a:6f:6e:53:
- 27:60:10:cb:c7:b4:9f:60:2d:8f:32:69:4b:01:d1:
- f0:6d:69:1a:22:14:06:66:63:97:e8:fc:79:41:8d:
- 15:44:44:d1:43:2a:37:5e:77:e4:06:e6:a9:85:13:
- e9:24:63:9d:09:d0:f5:13:d5:ba:59:2e:1c:d2:70:
- 06:b1:80:f7:57:d7:30:f7:14:f3:18:06:7f:84:38:
- b6:81:46:9f:a2:36:87:0e:5f:1a:45:38:b7:20:16:
- b7:c6:e1:91:3b:0e:0c:ab:b7:4e:3d:a4:6d:66:d8:
- 85:fb
+ 00:ef:e6:e9:e0:b4:83:30:dc:21:a0:1f:9d:c3:81:
+ 9d:a2:a1:ce:e5:ef:1f:94:e3:f0:14:05:12:2a:97:
+ 5e:00:ba:6a:c3:09:b3:06:a1:9e:da:6f:9d:f8:45:
+ a2:6c:1e:7d:a3:10:d2:db:38:24:ed:80:25:36:9c:
+ db:d3:07:af:39:f8:82:48:a3:cd:7f:f3:57:dd:f9:
+ fd:7c:03:d5:8e:5d:35:ae:ed:af:c6:a1:89:ca:2e:
+ 2e:cf:77:5a:26:c6:e4:1d:9d:97:c7:a7:cf:93:aa:
+ 24:22:d9:82:d5:98:47:c9:33:ba:77:7e:6a:a3:35:
+ 43:1c:56:a5:94:2d:48:0f:47:2d:33:cd:c4:46:2d:
+ 54:61:dd:b8:bc:8d:1c:97:7d:4b:f4:fc:6b:3e:4d:
+ 28:17:7f:9a:e9:e5:6d:6f:c4:1c:75:8d:a6:0d:b7:
+ 5e:37:de:e1:1a:b2:e5:a6:d6:79:e4:df:1f:d3:f6:
+ 68:ed:30:a3:9e:8d:ed:8b:55:3d:12:3f:0f:3f:90:
+ 4f:b5:74:02:b0:1f:40:ae:32:d9:8e:a5:3b:74:e0:
+ f3:1e:4e:4c:63:fd:37:4b:b8:2f:70:41:64:4f:ee:
+ 6b:2f:33:40:2f:8a:c6:5f:e3:6a:e4:a0:62:53:99:
+ de:8c:ca:b5:34:ca:c0:20:9e:16:73:13:e1:c9:dc:
+ 22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -265,41 +265,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 0e:00:56:5c:72:31:88:bd:95:13:f7:64:96:1c:63:c2:1c:11:
- 60:04:d2:c3:5f:7c:a2:d7:d1:33:6d:51:6b:77:61:78:a8:70:
- 2e:50:97:5d:c1:e8:9b:dd:c6:61:a7:d3:e1:2c:83:07:85:5c:
- c9:d7:1e:22:c2:5f:76:83:19:d7:de:4a:5e:82:0f:43:80:45:
- 02:d7:d0:3d:ca:c3:c0:fc:04:c8:f6:89:32:d7:47:c6:bf:1f:
- c6:bd:71:e1:07:00:90:12:ec:61:63:1b:6c:e9:58:2c:fc:4c:
- a9:8f:58:e1:b1:6e:a5:ca:4d:be:7e:32:16:74:5f:fd:35:e4:
- 37:aa:1a:c5:33:21:20:8a:3e:1c:af:da:f3:c7:a2:22:d3:93:
- 6c:5e:ac:0a:65:d5:db:e4:8b:11:5e:ca:eb:8f:da:c4:5d:2f:
- 7a:98:e8:3c:d1:89:15:05:02:86:ef:eb:17:18:81:28:ca:d6:
- 58:87:bd:d4:e2:50:41:92:d9:7f:b1:f7:53:8f:f3:cc:f3:1e:
- 1d:e4:5a:c2:60:1b:17:42:78:53:e9:2d:5d:bb:f9:21:50:ff:
- 87:53:be:5f:e6:d4:8f:25:7f:d7:83:d7:f8:4d:c1:7c:7a:40:
- 0b:11:f1:d9:c6:eb:97:45:00:d6:6b:84:1c:4f:fc:8e:1f:5b:
- b5:3d:60:0c
+ 0b:b4:ba:9b:02:15:72:58:48:09:c8:66:c4:7c:6e:07:5e:bf:
+ e1:a5:97:42:fd:5f:8f:5f:35:e7:60:78:73:a8:18:f8:c2:91:
+ b1:d4:1b:cb:11:17:e0:d5:30:69:90:b8:9a:f9:a1:95:47:c9:
+ 85:dd:6d:b9:56:a2:fb:16:2f:09:8c:c0:66:6d:af:7b:f2:42:
+ 67:0f:a3:b9:e8:69:36:89:92:1e:c8:54:11:fe:39:3f:71:85:
+ d9:65:30:0c:2a:b1:a6:b8:df:b0:40:7b:56:98:3d:c3:66:76:
+ be:85:ec:f2:6c:30:de:ce:b3:84:70:74:83:2b:20:42:5a:f0:
+ 9b:31:98:81:16:71:cf:cf:66:57:36:dd:13:cd:f0:74:0c:2f:
+ a1:26:71:1e:50:ce:57:c9:85:71:47:08:b2:a6:b4:2a:2f:6b:
+ 5f:1f:80:09:3d:b1:5e:ab:aa:e7:08:86:c7:75:2d:36:b1:f3:
+ 2c:e1:91:8c:1c:6b:0a:fe:80:38:34:61:f8:a2:ee:3e:9a:e4:
+ 38:95:dd:3d:21:1e:61:5c:53:a7:30:b8:2b:10:72:d8:5d:54:
+ a3:47:9c:6c:69:d6:42:a6:56:f2:b3:3e:98:22:c2:b0:6b:2e:
+ f3:3a:b8:71:52:53:b5:32:a5:a4:38:35:fc:f2:ed:9a:e3:52:
+ 57:75:df:07
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZE7KcVAB+JrJH47HsD
-RgtTFe0jQDWU85aAJ9NKhJJoyQzgFDLHMWdJKVh36s6KcluTsaCo5YTGUp1awEG/
-mF8YXarRZXn76bCEkp0sWLzxxClZ7byshc7XDqoI6C2QJcuRnX2RdEKgrnfSEXtX
-SQQkwJT0IFRg2Rt2dgssIzxnkIwG7U7frCQiJvcmj1rSW3mKb25TJ2AQy8e0n2At
-jzJpSwHR8G1pGiIUBmZjl+j8eUGNFURE0UMqN1535AbmqYUT6SRjnQnQ9RPVulku
-HNJwBrGA91fXMPcU8xgGf4Q4toFGn6I2hw5fGkU4tyAWt8bhkTsODKu3Tj2kbWbY
-hfsCAwEAAaOByzCByDAdBgNVHQ4EFgQUAs72rBo5HoXoctGKxh3oeo+dFWswHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAOAFZccjGI
-vZUT92SWHGPCHBFgBNLDX3yi19EzbVFrd2F4qHAuUJddweib3cZhp9PhLIMHhVzJ
-1x4iwl92gxnX3kpegg9DgEUC19A9ysPA/ATI9oky10fGvx/GvXHhBwCQEuxhYxts
-6Vgs/Eypj1jhsW6lyk2+fjIWdF/9NeQ3qhrFMyEgij4cr9rzx6Ii05NsXqwKZdXb
-5IsRXsrrj9rEXS96mOg80YkVBQKG7+sXGIEoytZYh73U4lBBktl/sfdTj/PM8x4d
-5FrCYBsXQnhT6S1du/khUP+HU75f5tSPJX/Xg9f4TcF8ekALEfHZxuuXRQDWa4Qc
-T/yOH1u1PWAM
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQALtLqbAhVy
+WEgJyGbEfG4HXr/hpZdC/V+PXzXnYHhzqBj4wpGx1BvLERfg1TBpkLia+aGVR8mF
+3W25VqL7Fi8JjMBmba978kJnD6O56Gk2iZIeyFQR/jk/cYXZZTAMKrGmuN+wQHtW
+mD3DZna+hezybDDezrOEcHSDKyBCWvCbMZiBFnHPz2ZXNt0TzfB0DC+hJnEeUM5X
+yYVxRwiyprQqL2tfH4AJPbFeq6rnCIbHdS02sfMs4ZGMHGsK/oA4NGH4ou4+muQ4
+ld09IR5hXFOnMLgrEHLYXVSjR5xsadZCplbysz6YIsKway7zOrhxUlO1MqWkODX8
+8u2a41JXdd8H
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem b/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem
index 94105ff..d4cad40 100644
--- a/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem
+++ b/net/data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem
@@ -1,4 +1,4 @@
-[Created by: ./generate-key-rollover.py]
+[Created by: generate-key-rollover.py]
A certificate tree with two self-signed root certificates(oldroot, newroot),
and a third root certificate (newrootrollover) which has the same key as newroot
@@ -48,30 +48,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:be:12:1c:48:e4:73:1f:5c:d2:54:a9:7b:58:1c:
- 37:73:c2:49:26:3e:ed:b5:6b:55:17:c9:4c:52:34:
- ce:d9:76:86:32:74:74:ae:11:b2:99:1b:51:a0:33:
- 48:34:2f:b9:d3:2b:06:c2:5c:29:53:35:ce:7c:a6:
- 67:b2:6a:d4:33:c3:13:62:30:a1:53:5f:45:78:5b:
- bb:47:ad:07:a4:98:9a:e9:e3:b1:3b:e6:33:c2:c1:
- 5c:95:d7:c8:b9:a6:72:27:7a:79:da:c4:c8:5a:1a:
- 3e:5e:5e:a6:62:64:c6:72:86:b1:78:98:5b:63:27:
- 70:15:04:6b:b1:0f:11:9c:4d:3b:5c:e7:8d:c0:be:
- d5:84:46:6c:bd:11:1e:21:c1:82:9c:d0:aa:2d:2f:
- f8:2a:e9:3b:e4:35:15:6d:c7:4a:dd:a8:65:69:b8:
- 16:a1:8a:04:a2:44:68:40:b6:99:ae:61:df:9f:6c:
- 40:ef:79:c9:a3:6d:e4:2d:07:01:68:f1:21:4e:0e:
- 28:a7:fd:2f:ad:ee:7d:65:cf:36:fd:4f:1b:ba:10:
- 8e:86:fd:ec:37:67:0c:20:71:66:48:64:f3:82:af:
- f5:e1:73:c9:09:36:03:3f:c2:47:7a:f2:33:b9:f9:
- 9f:53:9b:24:5e:c3:cc:05:d9:a9:ed:d7:b2:2a:c5:
- b7:39
+ 00:ab:ca:16:55:35:25:9b:de:8e:fc:e9:5a:f9:04:
+ 3e:0e:6c:06:1e:1c:86:20:18:4f:41:da:3a:6d:16:
+ 9e:4e:3c:9b:11:67:bc:5a:3d:84:b2:79:05:d2:25:
+ 9a:6a:a8:80:6c:55:28:f2:5a:43:5f:c5:ef:e9:e3:
+ 1a:64:24:7e:57:4d:11:60:d7:e6:a9:2b:73:c7:93:
+ bb:67:b1:41:d5:df:21:5c:bd:98:93:a3:7d:0d:b0:
+ 86:5f:87:a9:d9:ab:ad:97:89:c5:12:c4:0f:71:d3:
+ 5b:79:18:53:64:7f:0a:a1:36:5e:00:5c:b9:ee:5e:
+ 14:10:17:f2:2a:60:0f:f7:ec:aa:d7:ad:d3:dc:8a:
+ 44:59:cf:c8:11:e7:42:1c:88:30:d7:1e:37:86:91:
+ 6b:ce:2a:bc:bb:f5:4a:cc:72:1a:9d:4f:5f:0e:c4:
+ c5:f7:b6:24:09:1c:22:f8:f7:a2:3d:45:c2:29:4d:
+ a3:f3:db:7a:a4:93:a2:48:d6:2b:90:da:0c:2b:d9:
+ 96:f0:d6:c7:eb:d0:eb:a8:08:72:55:a8:10:65:8f:
+ 38:6a:22:0c:9c:3d:68:1a:cd:16:da:73:24:2e:14:
+ 5d:08:05:fb:07:d1:52:53:4e:51:e4:b2:f3:17:4d:
+ f1:d0:c3:23:51:86:fb:a4:b9:09:37:9c:13:69:65:
+ 51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C9:45:0B:2A:F2:D8:8D:2A:D7:CE:AF:56:BF:82:B0:84:0C:C8:2E:F4
+ 90:8D:89:42:17:BF:F6:98:D1:AA:8C:BF:AF:C2:74:60:AB:ED:90:0F
X509v3 Authority Key Identifier:
- keyid:B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ keyid:A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
@@ -86,42 +86,42 @@
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 63:66:9e:6c:34:8c:5d:74:ae:90:25:55:ae:86:49:b9:3d:fd:
- 27:bc:4f:69:7b:70:cb:25:0e:a3:8c:7a:7d:9c:4f:0b:7c:f2:
- 85:a5:ea:82:d2:37:c2:74:a2:ae:a8:bf:62:f4:5f:d4:c6:41:
- 45:0c:cc:27:53:aa:8f:66:58:e9:b0:de:ae:98:14:bd:92:df:
- 9b:0f:f2:c5:3b:d2:bc:1c:3e:80:b4:09:0f:c1:9f:d6:3a:29:
- 52:71:b6:1a:92:95:5a:18:dc:b4:30:dc:61:61:93:54:d1:55:
- 83:92:5d:c0:c7:dc:ab:d7:08:dd:8a:44:cf:92:f9:4d:86:25:
- aa:ac:52:f6:0e:17:99:0b:31:d2:75:5e:33:f9:f5:b6:77:42:
- 07:62:a9:53:cc:f3:79:84:57:d9:14:3f:ab:4c:8b:ae:c7:9f:
- cf:7a:1f:bf:7e:1d:44:bd:76:b4:cd:8d:c8:1d:75:f7:3b:b5:
- bc:35:8b:3f:29:b1:cb:67:a4:17:af:a4:ca:9f:2b:e7:15:66:
- e4:c8:c1:7c:08:78:9e:5d:4b:c3:c6:58:66:96:42:e8:e6:40:
- fd:dc:24:ce:3b:58:11:38:40:0e:fc:a9:c0:2c:0f:e5:cc:bb:
- 02:32:31:b9:bc:6f:2d:1d:f6:2b:7c:d3:f8:24:f6:60:38:8a:
- 1f:dd:e1:50
+ 74:15:69:e0:48:a6:e3:fa:20:b6:3f:90:d7:61:d3:ea:b7:47:
+ 61:c7:81:6b:42:95:44:ac:1e:6f:3d:df:ad:2c:33:0d:e8:94:
+ 5b:d1:24:89:56:27:76:e4:6c:09:26:a7:e5:62:c9:96:83:ce:
+ 9d:08:f5:ee:c4:3d:fe:77:29:ae:8d:9f:7f:d5:81:b6:5d:b5:
+ 54:a0:1f:6c:54:1e:dd:a7:4e:78:e0:6c:60:1d:e8:1f:97:77:
+ 67:8d:57:80:00:17:80:cd:ab:ce:31:87:6e:9e:bf:3f:38:b9:
+ da:96:a3:d2:22:63:43:dd:5c:e8:42:ea:2d:eb:ab:81:33:e5:
+ 95:36:46:3c:dd:8e:ad:e2:43:40:6f:3c:ce:73:4d:52:71:9d:
+ 54:59:f4:73:a2:5a:48:a5:c7:bc:dd:f9:9f:91:39:b1:bc:ad:
+ 9a:59:ea:f6:33:42:72:66:2f:e9:78:8f:b6:09:15:35:d8:e6:
+ 70:0d:d3:da:a7:7e:55:d9:05:88:47:16:1d:cd:54:1c:15:11:
+ a6:d3:35:2a:4e:c5:0f:f7:b0:98:24:bf:7e:78:3e:5f:56:0c:
+ 87:72:c2:d1:7d:3e:3c:c6:98:50:a9:c7:cd:6f:0e:12:b4:32:
+ 7a:b8:01:6c:88:1c:8a:c2:19:24:1e:34:9b:da:45:eb:0a:f9:
+ 99:6e:54:c6
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EhxI
-5HMfXNJUqXtYHDdzwkkmPu21a1UXyUxSNM7ZdoYydHSuEbKZG1GgM0g0L7nTKwbC
-XClTNc58pmeyatQzwxNiMKFTX0V4W7tHrQekmJrp47E75jPCwVyV18i5pnInenna
-xMhaGj5eXqZiZMZyhrF4mFtjJ3AVBGuxDxGcTTtc543AvtWERmy9ER4hwYKc0Kot
-L/gq6TvkNRVtx0rdqGVpuBahigSiRGhAtpmuYd+fbEDvecmjbeQtBwFo8SFODiin
-/S+t7n1lzzb9Txu6EI6G/ew3ZwwgcWZIZPOCr/Xhc8kJNgM/wkd68jO5+Z9TmyRe
-w8wF2ant17Iqxbc5AgMBAAGjgekwgeYwHQYDVR0OBBYEFMlFCyry2I0q186vVr+C
-sIQMyC70MB8GA1UdIwQYMBaAFLE5eRM10ANr6cRjK8zWYcOC7BTBMD8GCCsGAQUF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-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAY2aebDSMXXSukCVVroZJ
-uT39J7xPaXtwyyUOo4x6fZxPC3zyhaXqgtI3wnSirqi/YvRf1MZBRQzMJ1Oqj2ZY
-6bDerpgUvZLfmw/yxTvSvBw+gLQJD8Gf1jopUnG2GpKVWhjctDDcYWGTVNFVg5Jd
-wMfcq9cI3YpEz5L5TYYlqqxS9g4XmQsx0nVeM/n1tndCB2KpU8zzeYRX2RQ/q0yL
-rsefz3ofv34dRL12tM2NyB119zu1vDWLPymxy2ekF6+kyp8r5xVm5MjBfAh4nl1L
-w8ZYZpZC6OZA/dwkzjtYEThADvypwCwP5cy7AjIxubxvLR32K3zT+CT2YDiKH93h
-UA==
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAdBVp4Eim4/ogtj+Q12HT
+6rdHYceBa0KVRKwebz3frSwzDeiUW9EkiVYnduRsCSan5WLJloPOnQj17sQ9/ncp
+ro2ff9WBtl21VKAfbFQe3adOeOBsYB3oH5d3Z41XgAAXgM2rzjGHbp6/Pzi52paj
+0iJjQ91c6ELqLeurgTPllTZGPN2OreJDQG88znNNUnGdVFn0c6JaSKXHvN35n5E5
+sbytmlnq9jNCcmYv6XiPtgkVNdjmcA3T2qd+VdkFiEcWHc1UHBURptM1Kk7FD/ew
+mCS/fng+X1YMh3LC0X0+PMaYUKnHzW8OErQyergBbIgcisIZJB40m9pF6wr5mW5U
+xg==
-----END CERTIFICATE-----
Certificate:
@@ -138,30 +138,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9c:d0:2e:3b:06:d6:ea:65:bd:dd:b2:d3:e8:88:
- ea:08:73:01:42:ac:ca:38:28:17:32:93:5e:16:a8:
- c1:79:44:9a:db:24:08:ba:81:52:63:9c:b4:ed:57:
- d4:b2:ac:54:64:3b:70:39:7e:37:da:11:e1:8c:ba:
- 09:bc:1a:9b:e7:fe:6d:75:f8:71:31:f0:ca:52:89:
- 2a:9e:d5:53:db:b8:c0:76:cf:bf:58:58:e1:bb:81:
- de:62:bb:06:58:1f:9b:64:03:75:7d:ee:76:6f:39:
- 47:cb:8e:34:32:07:83:89:b0:83:2a:78:d0:ac:e2:
- 86:0a:a8:ab:3b:97:81:de:9d:36:b4:03:b7:d5:06:
- 05:53:d7:80:03:44:86:53:72:db:7a:5f:c5:20:dd:
- c7:44:58:3b:40:7f:0e:39:bc:be:0d:ca:6a:f6:82:
- a2:97:a2:17:79:51:6f:42:5d:0d:6a:b7:a0:de:5f:
- 6a:00:be:e7:5a:b7:91:e9:fc:77:fd:75:88:8d:52:
- 76:3d:0e:91:4b:c7:db:96:a4:5f:39:59:55:62:65:
- 3b:15:7a:bc:7b:09:9f:3e:75:d9:9e:c5:00:b3:19:
- d4:26:7e:eb:db:62:07:c2:f5:b6:4e:87:2d:eb:56:
- 8b:5a:68:6c:85:2f:b4:3e:1d:dd:5d:31:49:98:8b:
- 06:55
+ 00:ad:d7:63:a2:51:33:32:fd:aa:73:2c:32:30:ac:
+ 2f:8d:37:5f:08:b2:9b:02:1a:f7:3c:eb:c2:9e:82:
+ d9:a2:0e:02:14:28:bc:18:e2:92:8e:db:66:14:36:
+ 3f:ef:43:47:ac:b4:e2:be:92:82:14:9a:bd:97:d7:
+ 19:6f:88:29:b1:85:68:bd:13:d5:93:2c:a0:c8:bb:
+ 76:9d:ad:f5:da:e8:55:ca:87:6d:07:20:f4:22:cf:
+ 5a:51:ea:e1:7b:c3:7e:f9:a8:85:95:c5:e9:88:bf:
+ 7b:5e:fd:49:d4:c4:ed:ce:b7:d2:71:23:59:00:a7:
+ 6f:85:40:a0:38:c6:2b:88:99:68:e9:97:7e:2f:92:
+ 97:18:0a:19:c2:4e:0a:28:2c:b3:b4:67:26:eb:1d:
+ 03:f6:16:58:20:88:81:ee:a8:ea:19:ae:25:e9:34:
+ 8d:87:f3:d2:3b:0e:b2:d8:31:14:ee:bd:c6:01:ec:
+ d4:41:f0:06:7b:3e:20:7b:06:88:86:29:d1:77:9a:
+ c0:bc:69:63:3f:2b:20:ac:aa:17:33:29:78:0a:11:
+ ff:92:f2:b3:4a:58:29:96:d3:f4:4f:70:ef:9c:81:
+ 55:1c:21:20:bf:54:5a:dd:60:b7:6e:53:41:a2:19:
+ 55:b5:f9:b8:6e:63:37:73:a0:b8:d4:c5:c1:a2:4e:
+ 0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B1:39:79:13:35:D0:03:6B:E9:C4:63:2B:CC:D6:61:C3:82:EC:14:C1
+ A5:25:8E:C3:14:9C:86:19:30:F5:05:C5:AA:C8:37:12:F6:94:4A:46
X509v3 Authority Key Identifier:
- keyid:15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ keyid:83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -176,41 +176,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- a8:ad:48:d8:6e:1d:24:09:d2:b3:29:3c:48:60:27:7f:37:64:
- d5:f1:3b:b3:5c:43:de:7c:b4:5f:ee:3a:f2:1a:25:24:0a:8a:
- 25:6d:19:5b:dc:0c:4e:48:61:2f:60:d3:6b:f3:9c:03:2c:d3:
- fa:c8:9b:99:e7:2e:c5:43:c0:5f:14:cd:8b:92:62:4f:e5:3a:
- cd:b5:0a:d8:b2:01:c7:44:b4:3a:86:66:bf:fa:11:a5:f8:24:
- 3f:d1:1a:e8:eb:1e:ad:f0:70:31:6f:bc:21:cf:db:ce:63:4e:
- 84:e9:52:9e:bb:1b:c4:72:ae:e0:6c:88:9e:99:dc:79:d9:fd:
- 83:26:8e:f6:19:70:d9:5e:fc:f4:0c:d1:17:6f:af:10:f6:64:
- 16:08:d8:72:ba:3a:2d:66:28:5a:41:0d:f3:47:87:a7:9c:78:
- c6:cd:5e:25:71:0b:f2:93:b8:26:17:b2:19:17:cc:03:ed:c0:
- 6e:06:e2:4b:4a:57:5f:23:02:2a:69:06:7a:c4:b7:3e:2f:e8:
- f0:03:ae:b8:2d:df:63:22:20:73:23:75:d9:3c:d7:22:e4:b4:
- 65:65:ed:b9:e6:02:1d:b5:51:11:9c:db:92:e4:fe:8c:1d:bb:
- c5:95:87:5b:38:ee:ff:e4:01:d1:5d:84:b9:73:d3:da:23:ca:
- 5e:05:d3:7d
+ 7f:a1:7c:8f:ea:d9:b9:63:e1:b0:31:0a:2e:1c:8e:e9:d0:23:
+ ee:3e:8e:50:55:db:ba:10:93:a4:93:0b:bb:c1:a5:3d:32:90:
+ ee:40:bf:0f:df:25:f1:65:b3:30:6d:39:9b:d2:c1:b8:b7:a8:
+ 7e:23:dc:6a:c3:5a:9e:53:d7:86:4c:82:de:98:23:1a:6f:f9:
+ 0d:6d:b9:35:55:b9:94:03:8d:b7:6c:2e:64:79:ea:85:84:7e:
+ 51:18:37:42:80:f5:d4:16:3f:a0:a9:6b:bf:17:d1:19:99:ea:
+ 8d:5a:c9:30:b0:ca:c8:2c:17:ce:14:75:b3:c9:19:df:16:1b:
+ 9a:97:ae:50:69:a5:6c:02:57:84:f4:7f:30:90:ed:89:bb:0e:
+ c9:7b:34:d0:41:58:00:20:29:6b:f0:e8:97:81:92:3d:ba:e0:
+ 65:e9:7c:cb:5c:7b:50:c8:0f:d3:20:ab:42:2f:0d:44:6d:99:
+ c2:1d:42:e8:b2:10:82:9b:86:ba:a8:45:d2:2c:13:53:cf:ad:
+ 37:ac:ce:f3:e7:49:fe:59:d5:b6:5f:8b:6b:fd:5f:e0:f2:91:
+ ef:e3:f7:e0:b6:ee:e7:ae:77:0e:66:12:40:55:75:77:2a:05:
+ d4:bd:ab:7e:5a:67:d8:81:8b:15:fd:4c:60:63:c7:f7:5f:fa:
+ d4:d8:d9:d2
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAuOwbW
-6mW93bLT6IjqCHMBQqzKOCgXMpNeFqjBeUSa2yQIuoFSY5y07VfUsqxUZDtwOX43
-2hHhjLoJvBqb5/5tdfhxMfDKUokqntVT27jAds+/WFjhu4HeYrsGWB+bZAN1fe52
-bzlHy440MgeDibCDKnjQrOKGCqirO5eB3p02tAO31QYFU9eAA0SGU3Lbel/FIN3H
-RFg7QH8OOby+Dcpq9oKil6IXeVFvQl0Nareg3l9qAL7nWreR6fx3/XWIjVJ2PQ6R
-S8fblqRfOVlVYmU7FXq8ewmfPnXZnsUAsxnUJn7r22IHwvW2Toct61aLWmhshS+0
-Ph3dXTFJmIsGVQIDAQABo4HLMIHIMB0GA1UdDgQWBBSxOXkTNdADa+nEYyvM1mHD
-guwUwTAfBgNVHSMEGDAWgBQVnqat9Z+KocEImb9mb8/Kcs0MNDA3BggrBgEFBQcB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-AKitSNhuHSQJ0rMpPEhgJ383ZNXxO7NcQ958tF/uOvIaJSQKiiVtGVvcDE5IYS9g
-02vznAMs0/rIm5nnLsVDwF8UzYuSYk/lOs21CtiyAcdEtDqGZr/6EaX4JD/RGujr
-Hq3wcDFvvCHP285jToTpUp67G8RyruBsiJ6Z3HnZ/YMmjvYZcNle/PQM0RdvrxD2
-ZBYI2HK6Oi1mKFpBDfNHh6eceMbNXiVxC/KTuCYXshkXzAPtwG4G4ktKV18jAipp
-BnrEtz4v6PADrrgt32MiIHMjddk81yLktGVl7bnmAh21URGc25Lk/owdu8WVh1s4
-7v/kAdFdhLlz09ojyl4F030=
+AH+hfI/q2blj4bAxCi4cjunQI+4+jlBV27oQk6STC7vBpT0ykO5Avw/fJfFlszBt
+OZvSwbi3qH4j3GrDWp5T14ZMgt6YIxpv+Q1tuTVVuZQDjbdsLmR56oWEflEYN0KA
+9dQWP6Cpa78X0RmZ6o1ayTCwysgsF84UdbPJGd8WG5qXrlBppWwCV4T0fzCQ7Ym7
+Dsl7NNBBWAAgKWvw6JeBkj264GXpfMtce1DID9Mgq0IvDURtmcIdQuiyEIKbhrqo
+RdIsE1PPrTeszvPnSf5Z1bZfi2v9X+Dyke/j9+C27ueudw5mEkBVdXcqBdS9q35a
+Z9iBixX9TGBjx/df+tTY2dI=
-----END CERTIFICATE-----
Certificate:
@@ -227,30 +227,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ae:ea:3b:3f:b6:e9:3d:ea:eb:3d:dd:e8:4d:45:
- 83:63:78:ea:07:90:3a:3c:4f:92:54:2b:2d:02:1b:
- eb:9e:81:72:68:2e:73:f8:4a:a1:de:0c:d6:f0:c2:
- 61:26:90:0b:48:59:ab:23:25:8f:e4:4a:6b:c9:2d:
- ba:a7:35:c4:22:df:76:99:d8:7b:f7:6d:ca:9b:da:
- d2:ed:7e:c8:93:b2:a7:f6:f0:05:6a:5d:c6:e1:79:
- d0:25:59:a9:50:1e:65:eb:1c:c9:cd:4e:6a:3a:2a:
- a4:1a:fa:81:a3:e7:ae:d7:de:43:d9:e8:0b:5c:b0:
- 6b:46:39:c5:9c:4a:6d:59:bf:da:70:2e:80:ac:c8:
- 80:e3:83:d1:71:7b:a7:0b:92:bf:a8:81:ad:5c:b2:
- d5:e9:b9:5f:b5:4f:93:43:67:72:36:b3:f7:17:b9:
- 1b:da:2a:13:83:70:36:ae:59:03:3d:f0:71:de:a2:
- 7a:41:ad:b5:e9:a2:51:e4:18:ec:88:ad:48:f1:df:
- 17:04:43:54:2a:af:3c:c0:f5:84:39:43:d1:a7:d2:
- 52:0f:3c:dd:ef:13:58:8c:1d:d4:dd:2e:6d:1a:e7:
- 73:9b:8b:f3:41:7b:9a:53:4e:0d:92:d3:5d:3f:fc:
- c3:61:dc:5f:a0:93:3c:08:cc:b4:9b:ce:9d:78:e3:
- 77:c9
+ 00:c8:01:d6:aa:f0:22:fa:55:68:e4:56:fa:87:9f:
+ 03:a4:78:36:40:64:b2:60:f7:20:25:47:92:b0:cb:
+ c7:9d:4c:c6:4d:78:0f:91:9e:a8:f1:0b:84:58:b1:
+ a9:06:2d:7d:09:82:f4:1a:60:67:7b:c3:47:69:05:
+ b5:59:90:02:2a:53:27:25:21:4d:9a:5f:b6:7b:58:
+ 25:77:b3:46:64:fc:ed:04:c0:e2:62:e5:96:f9:8a:
+ 8d:9a:e8:8d:bf:d9:19:38:97:52:ab:31:3c:1c:a2:
+ b9:21:ec:5f:aa:8c:21:44:c6:73:7f:0b:72:c9:61:
+ 1c:a7:cd:46:bb:da:5b:a7:1b:e2:18:fb:ff:18:81:
+ 5f:fb:75:29:21:9c:92:e0:d3:03:f5:b8:58:94:36:
+ 32:7a:9a:a7:ec:49:ab:ef:d4:8c:c4:65:aa:23:40:
+ 96:76:47:4b:06:0b:21:c4:44:9f:8d:12:ab:05:05:
+ e7:97:d9:9d:c0:f9:4d:77:14:0b:c5:d5:82:0c:d7:
+ 14:54:fa:07:dd:a3:78:30:5d:95:83:e4:1c:7f:c2:
+ 13:c6:b1:8b:10:87:9b:e9:3e:4f:d6:b6:b9:a8:9f:
+ 4c:47:f8:40:67:7d:4e:9b:87:4a:b6:92:eb:33:f1:
+ 73:a3:70:d6:fc:37:32:2a:b4:b8:56:90:63:5e:ec:
+ b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 15:9E:A6:AD:F5:9F:8A:A1:C1:08:99:BF:66:6F:CF:CA:72:CD:0C:34
+ 83:F9:93:D5:29:F9:C4:BA:A1:5F:E4:C9:74:18:E0:DF:0E:17:18:50
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -265,41 +265,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 51:9b:dd:56:f2:b1:2b:e5:36:c8:2f:1d:a9:53:1f:89:e1:24:
- 33:bd:ac:56:c1:c3:1a:38:a6:7e:fc:61:9a:ae:7c:1f:13:3e:
- 37:e4:e6:a9:11:9e:2b:6e:ce:dd:12:0c:c1:b2:b7:eb:48:0e:
- c7:a5:65:f0:86:49:8a:dc:cf:1b:6d:33:af:af:96:51:49:01:
- e4:82:d6:e6:5a:d0:41:c7:05:9f:16:eb:06:bd:bc:ab:fe:a0:
- d7:ac:de:62:d1:71:7e:69:82:31:03:e3:60:28:e6:18:3b:e5:
- 93:2b:58:ee:d5:0b:7b:b6:af:f2:4f:22:eb:4d:b7:a6:74:68:
- b7:82:68:7f:a9:b6:ee:a0:20:d7:c6:16:0e:9c:1c:39:ea:24:
- 5e:60:12:fc:39:60:0d:54:3e:aa:b3:43:e1:0f:ef:d7:8f:3e:
- 09:a9:55:95:e9:3d:0c:4f:ad:cb:c2:f3:2c:10:43:67:54:f9:
- 66:54:81:ff:62:61:94:05:b0:42:af:f0:c5:ac:00:91:28:5c:
- aa:a3:61:44:ba:c2:a6:ab:f8:1d:7e:02:69:33:48:fe:ac:93:
- 7f:4c:99:91:d9:18:37:f9:70:3f:56:2a:ee:4a:e0:4d:f3:60:
- 12:5d:30:d8:37:bf:ca:40:85:29:0c:a7:8f:ab:ad:03:6d:7b:
- ba:62:7f:58
+ a4:6f:3a:2b:4c:55:63:68:09:a1:73:eb:b1:b6:69:07:de:8a:
+ 44:7d:10:bd:05:bf:a9:ef:06:af:c1:90:a6:75:1d:a8:51:e2:
+ f7:9a:4e:d7:23:6b:c1:34:83:64:9c:6d:15:0a:cc:b0:99:13:
+ 53:1f:0b:ef:23:82:6d:32:e1:ea:08:ce:65:21:d4:09:6a:6a:
+ d4:05:1b:96:2b:34:44:89:31:4e:14:11:b2:ff:ae:cf:60:56:
+ 2a:37:2f:18:2b:ae:aa:74:bb:d5:88:fb:3f:d4:ee:4c:f5:f3:
+ 4a:fa:6f:34:78:b7:bd:b1:d0:77:da:86:02:ce:a7:c3:11:f2:
+ 09:bf:3c:17:61:d2:4c:c5:26:07:ec:92:0a:ab:9e:6a:ae:72:
+ 66:34:a3:45:94:76:8c:e7:7c:f8:d3:43:41:b0:70:57:78:56:
+ ee:bc:54:8f:ba:ac:07:dd:cb:3d:a0:1a:79:cb:5b:20:4a:9b:
+ 1a:8d:93:3a:5e:38:11:ae:60:dd:1c:5f:63:5a:dd:06:a6:c3:
+ a1:20:4d:1e:a1:6a:a6:92:7c:1e:b4:01:a7:e3:6c:94:c8:30:
+ a6:bb:a7:2e:d7:66:2b:7f:a6:0b:3f:44:b5:62:2e:32:44:12:
+ 96:f0:bb:49:8a:49:f6:78:05:60:ed:64:13:93:67:35:4f:c8:
+ 38:98:2f:e5
-----BEGIN CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMjEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7qOz+26T3q6z3d6E1F
-g2N46geQOjxPklQrLQIb656Bcmguc/hKod4M1vDCYSaQC0hZqyMlj+RKa8ktuqc1
-xCLfdpnYe/dtypva0u1+yJOyp/bwBWpdxuF50CVZqVAeZescyc1OajoqpBr6gaPn
-rtfeQ9noC1ywa0Y5xZxKbVm/2nAugKzIgOOD0XF7pwuSv6iBrVyy1em5X7VPk0Nn
-cjaz9xe5G9oqE4NwNq5ZAz3wcd6iekGttemiUeQY7IitSPHfFwRDVCqvPMD1hDlD
-0afSUg883e8TWIwd1N0ubRrnc5uL80F7mlNODZLTXT/8w2HcX6CTPAjMtJvOnXjj
-d8kCAwEAAaOByzCByDAdBgNVHQ4EFgQUFZ6mrfWfiqHBCJm/Zm/PynLNDDQwHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBRm91W8rEr
-5TbILx2pUx+J4SQzvaxWwcMaOKZ+/GGarnwfEz435OapEZ4rbs7dEgzBsrfrSA7H
-pWXwhkmK3M8bbTOvr5ZRSQHkgtbmWtBBxwWfFusGvbyr/qDXrN5i0XF+aYIxA+Ng
-KOYYO+WTK1ju1Qt7tq/yTyLrTbemdGi3gmh/qbbuoCDXxhYOnBw56iReYBL8OWAN
-VD6qs0PhD+/Xjz4JqVWV6T0MT63LwvMsEENnVPlmVIH/YmGUBbBCr/DFrACRKFyq
-o2FEusKmq/gdfgJpM0j+rJN/TJmR2Rg3+XA/ViruSuBN82ASXTDYN7/KQIUpDKeP
-q60DbXu6Yn9Y
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCkbzorTFVj
+aAmhc+uxtmkH3opEfRC9Bb+p7wavwZCmdR2oUeL3mk7XI2vBNINknG0VCsywmRNT
+HwvvI4JtMuHqCM5lIdQJamrUBRuWKzREiTFOFBGy/67PYFYqNy8YK66qdLvViPs/
+1O5M9fNK+m80eLe9sdB32oYCzqfDEfIJvzwXYdJMxSYH7JIKq55qrnJmNKNFlHaM
+53z400NBsHBXeFbuvFSPuqwH3cs9oBp5y1sgSpsajZM6XjgRrmDdHF9jWt0GpsOh
+IE0eoWqmknwetAGn42yUyDCmu6cu12Yrf6YLP0S1Yi4yRBKW8LtJikn2eAVg7WQT
+k2c1T8g4mC/l
-----END CERTIFICATE-----
Certificate:
@@ -316,30 +316,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:44:ec:a7:15:00:1f:89:ac:91:f8:ec:7b:03:
- 46:0b:53:15:ed:23:40:35:94:f3:96:80:27:d3:4a:
- 84:92:68:c9:0c:e0:14:32:c7:31:67:49:29:58:77:
- ea:ce:8a:72:5b:93:b1:a0:a8:e5:84:c6:52:9d:5a:
- c0:41:bf:98:5f:18:5d:aa:d1:65:79:fb:e9:b0:84:
- 92:9d:2c:58:bc:f1:c4:29:59:ed:bc:ac:85:ce:d7:
- 0e:aa:08:e8:2d:90:25:cb:91:9d:7d:91:74:42:a0:
- ae:77:d2:11:7b:57:49:04:24:c0:94:f4:20:54:60:
- d9:1b:76:76:0b:2c:23:3c:67:90:8c:06:ed:4e:df:
- ac:24:22:26:f7:26:8f:5a:d2:5b:79:8a:6f:6e:53:
- 27:60:10:cb:c7:b4:9f:60:2d:8f:32:69:4b:01:d1:
- f0:6d:69:1a:22:14:06:66:63:97:e8:fc:79:41:8d:
- 15:44:44:d1:43:2a:37:5e:77:e4:06:e6:a9:85:13:
- e9:24:63:9d:09:d0:f5:13:d5:ba:59:2e:1c:d2:70:
- 06:b1:80:f7:57:d7:30:f7:14:f3:18:06:7f:84:38:
- b6:81:46:9f:a2:36:87:0e:5f:1a:45:38:b7:20:16:
- b7:c6:e1:91:3b:0e:0c:ab:b7:4e:3d:a4:6d:66:d8:
- 85:fb
+ 00:ef:e6:e9:e0:b4:83:30:dc:21:a0:1f:9d:c3:81:
+ 9d:a2:a1:ce:e5:ef:1f:94:e3:f0:14:05:12:2a:97:
+ 5e:00:ba:6a:c3:09:b3:06:a1:9e:da:6f:9d:f8:45:
+ a2:6c:1e:7d:a3:10:d2:db:38:24:ed:80:25:36:9c:
+ db:d3:07:af:39:f8:82:48:a3:cd:7f:f3:57:dd:f9:
+ fd:7c:03:d5:8e:5d:35:ae:ed:af:c6:a1:89:ca:2e:
+ 2e:cf:77:5a:26:c6:e4:1d:9d:97:c7:a7:cf:93:aa:
+ 24:22:d9:82:d5:98:47:c9:33:ba:77:7e:6a:a3:35:
+ 43:1c:56:a5:94:2d:48:0f:47:2d:33:cd:c4:46:2d:
+ 54:61:dd:b8:bc:8d:1c:97:7d:4b:f4:fc:6b:3e:4d:
+ 28:17:7f:9a:e9:e5:6d:6f:c4:1c:75:8d:a6:0d:b7:
+ 5e:37:de:e1:1a:b2:e5:a6:d6:79:e4:df:1f:d3:f6:
+ 68:ed:30:a3:9e:8d:ed:8b:55:3d:12:3f:0f:3f:90:
+ 4f:b5:74:02:b0:1f:40:ae:32:d9:8e:a5:3b:74:e0:
+ f3:1e:4e:4c:63:fd:37:4b:b8:2f:70:41:64:4f:ee:
+ 6b:2f:33:40:2f:8a:c6:5f:e3:6a:e4:a0:62:53:99:
+ de:8c:ca:b5:34:ca:c0:20:9e:16:73:13:e1:c9:dc:
+ 22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
X509v3 Authority Key Identifier:
- keyid:02:CE:F6:AC:1A:39:1E:85:E8:72:D1:8A:C6:1D:E8:7A:8F:9D:15:6B
+ keyid:BE:C9:6B:AC:94:B5:1F:E4:8D:C6:90:9D:C0:D7:12:16:5E:50:47:16
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -354,41 +354,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 0e:00:56:5c:72:31:88:bd:95:13:f7:64:96:1c:63:c2:1c:11:
- 60:04:d2:c3:5f:7c:a2:d7:d1:33:6d:51:6b:77:61:78:a8:70:
- 2e:50:97:5d:c1:e8:9b:dd:c6:61:a7:d3:e1:2c:83:07:85:5c:
- c9:d7:1e:22:c2:5f:76:83:19:d7:de:4a:5e:82:0f:43:80:45:
- 02:d7:d0:3d:ca:c3:c0:fc:04:c8:f6:89:32:d7:47:c6:bf:1f:
- c6:bd:71:e1:07:00:90:12:ec:61:63:1b:6c:e9:58:2c:fc:4c:
- a9:8f:58:e1:b1:6e:a5:ca:4d:be:7e:32:16:74:5f:fd:35:e4:
- 37:aa:1a:c5:33:21:20:8a:3e:1c:af:da:f3:c7:a2:22:d3:93:
- 6c:5e:ac:0a:65:d5:db:e4:8b:11:5e:ca:eb:8f:da:c4:5d:2f:
- 7a:98:e8:3c:d1:89:15:05:02:86:ef:eb:17:18:81:28:ca:d6:
- 58:87:bd:d4:e2:50:41:92:d9:7f:b1:f7:53:8f:f3:cc:f3:1e:
- 1d:e4:5a:c2:60:1b:17:42:78:53:e9:2d:5d:bb:f9:21:50:ff:
- 87:53:be:5f:e6:d4:8f:25:7f:d7:83:d7:f8:4d:c1:7c:7a:40:
- 0b:11:f1:d9:c6:eb:97:45:00:d6:6b:84:1c:4f:fc:8e:1f:5b:
- b5:3d:60:0c
+ 0b:b4:ba:9b:02:15:72:58:48:09:c8:66:c4:7c:6e:07:5e:bf:
+ e1:a5:97:42:fd:5f:8f:5f:35:e7:60:78:73:a8:18:f8:c2:91:
+ b1:d4:1b:cb:11:17:e0:d5:30:69:90:b8:9a:f9:a1:95:47:c9:
+ 85:dd:6d:b9:56:a2:fb:16:2f:09:8c:c0:66:6d:af:7b:f2:42:
+ 67:0f:a3:b9:e8:69:36:89:92:1e:c8:54:11:fe:39:3f:71:85:
+ d9:65:30:0c:2a:b1:a6:b8:df:b0:40:7b:56:98:3d:c3:66:76:
+ be:85:ec:f2:6c:30:de:ce:b3:84:70:74:83:2b:20:42:5a:f0:
+ 9b:31:98:81:16:71:cf:cf:66:57:36:dd:13:cd:f0:74:0c:2f:
+ a1:26:71:1e:50:ce:57:c9:85:71:47:08:b2:a6:b4:2a:2f:6b:
+ 5f:1f:80:09:3d:b1:5e:ab:aa:e7:08:86:c7:75:2d:36:b1:f3:
+ 2c:e1:91:8c:1c:6b:0a:fe:80:38:34:61:f8:a2:ee:3e:9a:e4:
+ 38:95:dd:3d:21:1e:61:5c:53:a7:30:b8:2b:10:72:d8:5d:54:
+ a3:47:9c:6c:69:d6:42:a6:56:f2:b3:3e:98:22:c2:b0:6b:2e:
+ f3:3a:b8:71:52:53:b5:32:a5:a4:38:35:fc:f2:ed:9a:e3:52:
+ 57:75:df:07
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZE7KcVAB+JrJH47HsD
-RgtTFe0jQDWU85aAJ9NKhJJoyQzgFDLHMWdJKVh36s6KcluTsaCo5YTGUp1awEG/
-mF8YXarRZXn76bCEkp0sWLzxxClZ7byshc7XDqoI6C2QJcuRnX2RdEKgrnfSEXtX
-SQQkwJT0IFRg2Rt2dgssIzxnkIwG7U7frCQiJvcmj1rSW3mKb25TJ2AQy8e0n2At
-jzJpSwHR8G1pGiIUBmZjl+j8eUGNFURE0UMqN1535AbmqYUT6SRjnQnQ9RPVulku
-HNJwBrGA91fXMPcU8xgGf4Q4toFGn6I2hw5fGkU4tyAWt8bhkTsODKu3Tj2kbWbY
-hfsCAwEAAaOByzCByDAdBgNVHQ4EFgQUAs72rBo5HoXoctGKxh3oeo+dFWswHwYD
-VR0jBBgwFoAUAs72rBo5HoXoctGKxh3oeo+dFWswNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAOAFZccjGI
-vZUT92SWHGPCHBFgBNLDX3yi19EzbVFrd2F4qHAuUJddweib3cZhp9PhLIMHhVzJ
-1x4iwl92gxnX3kpegg9DgEUC19A9ysPA/ATI9oky10fGvx/GvXHhBwCQEuxhYxts
-6Vgs/Eypj1jhsW6lyk2+fjIWdF/9NeQ3qhrFMyEgij4cr9rzx6Ii05NsXqwKZdXb
-5IsRXsrrj9rEXS96mOg80YkVBQKG7+sXGIEoytZYh73U4lBBktl/sfdTj/PM8x4d
-5FrCYBsXQnhT6S1du/khUP+HU75f5tSPJX/Xg9f4TcF8ekALEfHZxuuXRQDWa4Qc
-T/yOH1u1PWAM
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQALtLqbAhVy
+WEgJyGbEfG4HXr/hpZdC/V+PXzXnYHhzqBj4wpGx1BvLERfg1TBpkLia+aGVR8mF
+3W25VqL7Fi8JjMBmba978kJnD6O56Gk2iZIeyFQR/jk/cYXZZTAMKrGmuN+wQHtW
+mD3DZna+hezybDDezrOEcHSDKyBCWvCbMZiBFnHPz2ZXNt0TzfB0DC+hJnEeUM5X
+yYVxRwiyprQqL2tfH4AJPbFeq6rnCIbHdS02sfMs4ZGMHGsK/oA4NGH4ou4+muQ4
+ld09IR5hXFOnMLgrEHLYXVSjR5xsadZCplbysz6YIsKway7zOrhxUlO1MqWkODX8
+8u2a41JXdd8H
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem b/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem
index 11dddad..f80c4c8 100644
--- a/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem
+++ b/net/data/verify_certificate_chain_unittest/non-self-signed-root.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-non-self-signed-root.py]
+[Created by: generate-non-self-signed-root.py]
-Certificate chain with 1 intermediary and a trusted root. The trusted root
+Certificate chain with 1 intermediate and a trusted root. The trusted root
is NOT self signed, however its issuer is not included in the chain or root
store. Verification is expected to succeed since the root is trusted.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c2:27:87:8d:77:16:37:79:6a:b5:5d:e7:ee:9f:
- a4:5e:f6:f3:9e:a0:f9:9c:05:1a:5f:67:d8:72:c7:
- 89:73:a5:21:d5:d6:df:39:0d:f7:e7:cb:1e:82:ec:
- ae:15:ee:5a:bf:57:12:29:b2:44:8b:40:4b:d6:ea:
- a5:34:05:34:5f:37:2e:32:c0:ed:6a:0c:21:ac:c5:
- 16:80:61:96:e1:82:e3:15:62:34:23:0a:de:ca:ee:
- 43:f8:3a:e7:42:5f:3a:79:f4:bc:cf:e7:da:c4:3a:
- d6:d0:5f:bf:13:58:e7:69:0f:bc:38:7c:05:82:a9:
- 92:b8:eb:f5:fb:2a:53:ef:5d:12:5e:dc:55:12:b1:
- 66:67:3f:7c:00:89:b9:50:ea:9c:7f:90:48:02:40:
- b3:f5:98:0d:73:ca:d8:f7:3d:0b:48:fe:99:12:90:
- 92:37:93:34:5b:75:60:1c:16:c2:98:ec:2f:9a:f8:
- e3:1f:8d:56:ea:c6:35:14:67:66:21:e5:83:69:59:
- ce:c3:a6:f5:1e:94:e8:14:ce:73:83:52:af:ed:df:
- 63:58:d2:45:07:87:18:ec:7c:11:85:c8:22:b8:ff:
- b2:6d:05:2c:70:86:d1:5b:f9:8a:94:22:73:58:f1:
- 9e:b2:4f:ea:50:7e:7c:db:2e:6a:ab:bc:b5:73:b5:
- 49:3f
+ 00:a5:fd:12:f2:87:40:5c:07:a7:7c:a8:7a:2c:2c:
+ 9e:de:bc:e5:8e:c6:55:90:ce:5d:a9:e6:c8:7d:5a:
+ 9f:b1:f7:32:b4:90:9c:80:12:a2:43:fa:71:95:54:
+ 76:45:b3:28:cc:93:05:f1:f4:e9:5d:1d:4e:5d:1a:
+ a1:ad:a5:4b:4f:50:7a:c2:cd:63:2c:de:5d:54:74:
+ 09:8b:d2:5b:1f:0e:49:b4:ce:cc:24:f4:9d:f7:ca:
+ 65:6e:58:02:c0:8d:06:35:81:01:b1:2d:37:07:1e:
+ 9b:07:fa:a3:12:6b:32:bb:98:f1:41:03:2f:17:b5:
+ 5a:d3:bd:b0:2a:0c:be:2f:34:29:ba:87:44:a5:d9:
+ b7:1c:c0:ff:c5:dd:bf:21:78:38:71:ce:7a:54:d1:
+ 97:d9:aa:86:84:eb:2c:17:bf:61:1b:4b:10:54:a2:
+ a1:a6:ec:01:04:f8:f3:c8:6c:2f:30:15:e0:da:94:
+ 49:98:01:de:e6:c4:04:57:bb:f5:6d:09:53:e1:ff:
+ 76:94:cc:ba:2c:74:70:b7:f9:d4:10:35:8a:b0:8c:
+ 4c:5b:5f:5c:db:e3:a5:b6:c9:d5:b4:13:7c:17:77:
+ fd:ac:0d:65:fb:0a:a4:d4:0e:a5:2e:8f:ef:0d:5c:
+ c1:9b:00:c1:dd:0d:4f:c3:7e:3b:3b:a7:4a:d2:99:
+ f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 0B:2F:1A:F2:F7:59:E8:BE:B9:20:D5:71:5F:D3:A1:CA:FB:88:4B:65
+ 8E:F7:4C:4C:A6:3A:4A:DA:FB:BE:DE:D3:24:D2:56:B5:3D:55:43:18
X509v3 Authority Key Identifier:
- keyid:A5:03:4B:C2:60:A5:9F:86:00:2A:8E:36:33:89:B2:7B:17:24:C2:BC
+ keyid:25:1D:DB:44:41:CD:DE:76:AA:96:3B:9B:5B:17:24:39:86:B7:DD:E0
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 12:45:9a:a3:e1:5b:0d:8f:1c:b7:39:60:63:7a:e0:fd:34:46:
- 7e:44:1b:32:44:c7:7f:03:fb:94:68:a2:6b:a1:7f:06:c2:60:
- 8d:be:65:fc:a3:45:f9:15:2c:17:16:25:98:03:a2:85:88:b6:
- 4b:4d:86:26:ae:8a:0b:43:46:cd:cc:a3:28:5f:44:3c:92:8a:
- ae:f3:de:02:93:1b:b7:a3:8e:6e:79:d5:a0:09:d2:c4:65:ff:
- 1b:f5:80:16:66:20:c7:1d:0c:af:32:ff:ec:f6:a4:0f:53:79:
- 41:0c:b6:57:9f:b9:1b:81:9c:56:29:3e:62:f6:f5:75:9f:97:
- ff:0a:9f:5c:c8:58:f5:d0:e7:ad:c1:4b:ba:62:c1:a3:c6:59:
- 9a:01:11:46:40:c1:54:b6:23:ae:33:58:f9:05:6b:f2:32:0d:
- 09:2e:5f:ff:74:c5:7d:ce:c9:96:a5:8d:ba:4c:d7:49:3c:8b:
- 13:73:36:05:12:56:bf:f8:ad:b5:7a:0a:82:ca:bc:b4:00:d2:
- 9f:39:88:2b:b8:d0:c0:49:8a:f6:3a:e3:3e:3e:fe:b4:4e:20:
- 1e:60:e8:cb:4d:18:80:94:26:47:bf:be:49:8a:2d:e2:41:4a:
- cd:c3:7e:23:82:90:ba:43:a6:8b:7e:b3:57:f8:ec:59:3c:97:
- 38:52:a0:0d
+ 6e:29:ba:73:d2:ce:13:e8:a8:61:cc:1c:c9:63:c3:e5:62:72:
+ 3d:bd:19:d9:10:ce:04:5c:b4:1a:0c:52:c6:57:4d:d0:a7:2d:
+ a7:11:90:78:72:8c:1c:56:4f:e4:be:4e:de:6e:f3:e1:eb:7e:
+ 9c:05:86:e4:f2:22:69:7b:7d:43:df:4e:a9:11:4d:8a:68:33:
+ a3:7d:9b:b1:04:9c:c2:bf:d4:9f:78:d9:8f:a5:51:9a:20:8a:
+ 79:c8:40:49:e4:30:d1:b9:9b:09:5e:3d:5e:93:f5:84:e5:2b:
+ 9f:1e:56:1c:2d:ef:09:34:8c:db:a0:b6:f0:91:88:91:6b:1f:
+ 4e:86:11:b6:62:33:63:8b:03:b2:40:d2:b8:28:33:e1:33:5d:
+ ae:e4:0c:08:4b:ab:05:08:6c:4a:b2:b7:cd:cd:28:7f:4a:5c:
+ 4c:9d:fa:93:c7:00:fa:47:4e:00:ca:2d:2b:c9:ed:da:e8:33:
+ 23:b6:98:f1:e5:6f:1b:cc:8b:e2:27:b2:1d:46:53:39:29:45:
+ 46:1a:50:94:c0:e7:5e:a4:ef:a3:ee:13:7a:81:89:e2:4e:f9:
+ 5e:1c:e3:ee:fe:d9:6d:7b:85:c6:99:ed:b0:30:d4:ef:16:65:
+ 1f:37:d9:f9:c1:54:c2:d9:18:3f:e9:89:a3:28:6a:ad:fc:a2:
+ 01:b8:82:d3
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ4eN
-dxY3eWq1Xefun6Re9vOeoPmcBRpfZ9hyx4lzpSHV1t85Dffnyx6C7K4V7lq/VxIp
-skSLQEvW6qU0BTRfNy4ywO1qDCGsxRaAYZbhguMVYjQjCt7K7kP4OudCXzp59LzP
-59rEOtbQX78TWOdpD7w4fAWCqZK46/X7KlPvXRJe3FUSsWZnP3wAiblQ6px/kEgC
-QLP1mA1zytj3PQtI/pkSkJI3kzRbdWAcFsKY7C+a+OMfjVbqxjUUZ2Yh5YNpWc7D
-pvUelOgUznODUq/t32NY0kUHhxjsfBGFyCK4/7JtBSxwhtFb+YqUInNY8Z6yT+pQ
-fnzbLmqrvLVztUk/AgMBAAGjgekwgeYwHQYDVR0OBBYEFAsvGvL3Wei+uSDVcV/T
-ocr7iEtlMB8GA1UdIwQYMBaAFKUDS8JgpZ+GACqONjOJsnsXJMK8MD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAEkWao+FbDY8ctzlgY3rg
-/TRGfkQbMkTHfwP7lGiia6F/BsJgjb5l/KNF+RUsFxYlmAOihYi2S02GJq6KC0NG
-zcyjKF9EPJKKrvPeApMbt6OObnnVoAnSxGX/G/WAFmYgxx0MrzL/7PakD1N5QQy2
-V5+5G4GcVik+Yvb1dZ+X/wqfXMhY9dDnrcFLumLBo8ZZmgERRkDBVLYjrjNY+QVr
-8jINCS5f/3TFfc7JlqWNukzXSTyLE3M2BRJWv/ittXoKgsq8tADSnzmIK7jQwEmK
-9jrjPj7+tE4gHmDoy00YgJQmR7++SYot4kFKzcN+I4KQukOmi36zV/jsWTyXOFKg
-DQ==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-----END CERTIFICATE-----
Certificate:
@@ -103,35 +103,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b0:65:a4:4b:a6:56:90:82:42:cf:e8:65:86:d1:
- 96:7f:13:8d:b9:46:5a:16:ce:c2:fa:0d:52:ae:93:
- 62:dc:72:05:a2:31:b7:29:88:77:31:c3:2e:3f:4d:
- 17:16:08:3a:96:d2:49:1b:bf:0f:a0:56:ac:d2:5a:
- b8:ff:e3:46:f1:56:83:c3:72:32:8a:7d:f6:55:a5:
- 05:8a:68:ca:2e:9b:2a:80:63:4d:fd:46:f2:9f:c9:
- 95:43:06:79:c4:88:78:b3:73:fb:05:0c:4f:57:75:
- 9c:ef:eb:9f:b3:5e:65:b6:b3:b1:b7:8d:1c:c4:d9:
- 03:76:72:4f:b8:4f:dc:36:19:4c:62:d8:0c:e4:c1:
- 9b:9f:0c:3e:e2:54:69:f5:a6:53:a1:16:88:be:ee:
- a8:3e:20:28:3d:a9:3c:12:41:cc:91:ca:b7:fc:d7:
- 15:d3:1c:63:9e:7b:1d:c4:b4:08:65:2e:bc:b5:61:
- b8:84:de:3b:69:05:9c:52:6e:60:d1:79:17:36:69:
- 06:21:ed:43:07:bf:21:28:0a:6b:48:79:53:21:da:
- 02:07:79:b6:30:4c:f2:6f:9f:30:55:a2:20:ae:cf:
- 8c:ac:c6:b0:30:b0:01:80:83:ed:b0:5a:9b:92:35:
- d9:7d:51:c5:f5:76:1e:c5:53:c1:33:71:41:35:40:
- 55:d7
+ 00:dd:9f:7d:91:ef:30:35:17:fe:58:20:b0:99:23:
+ d3:ce:e4:f6:b2:05:82:69:5b:4c:e4:94:40:41:ad:
+ d6:6b:b3:44:08:50:be:9f:b3:f4:26:d6:10:50:52:
+ e3:a4:71:bd:3d:ed:f0:a8:30:da:21:06:aa:d9:ae:
+ 62:51:ed:06:c1:6e:f5:e2:23:a8:62:db:04:b7:0f:
+ 69:84:39:1f:3d:46:28:ae:a0:56:fe:aa:9b:68:0e:
+ 30:65:6a:38:f8:a6:66:12:78:99:cc:8e:c9:80:15:
+ ab:5a:66:75:71:42:4d:8c:32:2c:15:a7:6d:c9:51:
+ c8:d8:88:28:56:03:e4:ab:98:3b:52:d9:01:f0:4d:
+ 18:71:cf:d3:82:cb:62:af:6c:12:8a:a2:4b:44:c7:
+ a7:61:fd:d6:34:89:c6:f0:6e:2c:77:fd:cc:93:a9:
+ 90:5b:85:e7:46:1c:04:41:3d:df:02:79:c3:e6:98:
+ 66:28:b0:39:9b:59:ce:5e:8c:d1:63:b1:28:a3:05:
+ a3:79:93:3a:dd:92:8b:d2:07:15:96:61:27:98:ae:
+ 53:78:3f:da:79:09:01:e7:dc:03:c4:05:8f:e5:52:
+ b3:bc:d8:8f:6d:0a:89:21:a6:cf:b5:db:1c:65:67:
+ 4c:5f:5e:33:24:d7:3c:3e:61:ce:9a:4e:6e:e7:a5:
+ 30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- A5:03:4B:C2:60:A5:9F:86:00:2A:8E:36:33:89:B2:7B:17:24:C2:BC
+ 25:1D:DB:44:41:CD:DE:76:AA:96:3B:9B:5B:17:24:39:86:B7:DD:E0
X509v3 Authority Key Identifier:
- keyid:D4:83:FC:D5:EF:E0:C4:8E:32:6D:A2:30:65:12:B4:CD:3A:B2:95:88
+ keyid:63:A2:D5:4E:83:BA:38:5F:50:C5:93:E5:5C:93:9D:DE:55:08:73:A9
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -146,41 +146,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 67:ed:d6:55:16:b2:0d:af:79:6e:53:48:70:4c:93:be:5e:ed:
- 50:ea:d7:92:e4:7c:6c:78:05:0c:00:90:15:de:10:18:e5:cc:
- 50:24:23:e6:3e:5f:b0:f4:6f:f9:74:44:db:38:d1:45:c5:84:
- 59:58:cc:b6:f9:e9:1f:ed:41:e8:b9:aa:4b:d8:6e:88:76:d9:
- 2f:44:bf:5d:4f:6e:72:8f:b8:35:d3:e6:a3:a2:ef:3d:e6:f3:
- be:90:73:a8:80:ed:72:bb:ac:20:96:38:c6:3f:d1:fe:64:3e:
- 1a:ce:21:65:cd:1f:28:54:4a:fb:44:dc:43:cc:b4:61:dd:58:
- 83:1b:08:0c:31:f6:bc:bf:02:99:45:16:88:84:68:91:13:aa:
- af:f6:6d:4e:8d:dd:26:1d:3a:35:ab:75:7e:f7:64:62:8c:b7:
- 34:f9:5b:73:9b:e9:40:12:1c:f2:32:b9:e0:8c:86:fc:f2:b0:
- 33:6d:56:f2:a0:f7:9c:ea:d7:45:41:8d:de:49:26:90:45:32:
- 35:cf:e2:ce:43:b0:af:28:35:6a:0f:86:87:2b:57:eb:88:92:
- 89:7a:9d:b5:f3:3c:46:11:56:2e:fc:73:32:56:a9:4b:c1:87:
- f7:f8:46:d5:5d:ad:b2:e7:a2:88:5d:7d:b5:68:b4:ea:a7:1f:
- 35:1d:f9:a6
+ c5:e9:f1:a5:8e:03:ae:78:a2:51:87:0b:ee:26:02:97:5e:31:
+ 41:72:f2:7c:00:46:1b:45:51:02:03:4e:16:d0:69:61:e9:7e:
+ aa:fc:5f:5e:6b:63:99:98:c0:cf:36:96:ae:82:56:70:13:33:
+ 8d:f2:00:7a:b3:50:c7:15:ad:56:1b:ab:1a:6f:27:a4:e1:65:
+ da:22:4c:11:32:02:23:30:f8:7c:63:4d:c6:3b:5f:5b:55:37:
+ 82:29:0d:74:ff:49:4c:10:25:60:4b:3f:e8:06:1f:47:67:38:
+ 26:df:c4:92:d8:c4:9a:c8:bd:e6:1f:b9:52:2e:70:f7:21:48:
+ 43:6b:f5:40:07:c7:fd:15:51:80:54:c6:c8:74:14:a9:56:bd:
+ ad:b4:d4:da:a3:1d:b4:c4:91:73:0a:3d:1e:71:e0:97:e2:d4:
+ 79:8d:00:42:a7:8a:28:a2:2c:49:94:3f:23:e6:66:75:42:88:
+ 66:e5:98:14:b0:8d:76:d3:80:32:60:e9:05:18:65:ff:c8:4d:
+ 3b:ea:b3:d1:77:1b:7f:d1:99:c9:b5:58:72:ea:49:d4:31:68:
+ 28:2d:04:3c:49:99:f0:3a:74:11:91:0e:82:46:84:c7:54:7c:
+ 0b:9b:1a:64:ea:e3:9c:d4:c2:b9:90:e8:0e:2c:82:8b:2a:e1:
+ d1:03:32:77
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGWkS6ZW
-kIJCz+hlhtGWfxONuUZaFs7C+g1SrpNi3HIFojG3KYh3McMuP00XFgg6ltJJG78P
-oFas0lq4/+NG8VaDw3Iyin32VaUFimjKLpsqgGNN/Ubyn8mVQwZ5xIh4s3P7BQxP
-V3Wc7+ufs15ltrOxt40cxNkDdnJPuE/cNhlMYtgM5MGbnww+4lRp9aZToRaIvu6o
-PiAoPak8EkHMkcq3/NcV0xxjnnsdxLQIZS68tWG4hN47aQWcUm5g0XkXNmkGIe1D
-B78hKAprSHlTIdoCB3m2MEzyb58wVaIgrs+MrMawMLABgIPtsFqbkjXZfVHF9XYe
-xVPBM3FBNUBV1wIDAQABo4HLMIHIMB0GA1UdDgQWBBSlA0vCYKWfhgAqjjYzibJ7
-FyTCvDAfBgNVHSMEGDAWgBTUg/zV7+DEjjJtojBlErTNOrKViDA3BggrBgEFBQcB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-AGft1lUWsg2veW5TSHBMk75e7VDq15LkfGx4BQwAkBXeEBjlzFAkI+Y+X7D0b/l0
-RNs40UXFhFlYzLb56R/tQei5qkvYboh22S9Ev11PbnKPuDXT5qOi7z3m876Qc6iA
-7XK7rCCWOMY/0f5kPhrOIWXNHyhUSvtE3EPMtGHdWIMbCAwx9ry/AplFFoiEaJET
-qq/2bU6N3SYdOjWrdX73ZGKMtzT5W3Ob6UASHPIyueCMhvzysDNtVvKg95zq10VB
-jd5JJpBFMjXP4s5DsK8oNWoPhocrV+uIkol6nbXzPEYRVi78czJWqUvBh/f4RtVd
-rbLnoohdfbVotOqnHzUd+aY=
+AMXp8aWOA654olGHC+4mApdeMUFy8nwARhtFUQIDThbQaWHpfqr8X15rY5mYwM82
+lq6CVnATM43yAHqzUMcVrVYbqxpvJ6ThZdoiTBEyAiMw+HxjTcY7X1tVN4IpDXT/
+SUwQJWBLP+gGH0dnOCbfxJLYxJrIveYfuVIucPchSENr9UAHx/0VUYBUxsh0FKlW
+va201NqjHbTEkXMKPR5x4Jfi1HmNAEKniiiiLEmUPyPmZnVCiGblmBSwjXbTgDJg
+6QUYZf/ITTvqs9F3G3/Rmcm1WHLqSdQxaCgtBDxJmfA6dBGRDoJGhMdUfAubGmTq
+45zUwrmQ6A4sgosq4dEDMnc=
-----END CERTIFICATE-----
Certificate:
@@ -197,30 +197,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:37:9c:ac:42:96:1c:fb:44:86:df:16:85:d2:
- de:49:73:74:b8:5b:3e:8c:34:4b:42:57:7e:7a:9a:
- fd:cf:7f:03:c7:39:22:02:3f:44:1b:62:4b:4a:1b:
- 9b:d8:8e:7b:a5:b5:92:39:a1:03:bc:3c:1a:1f:5f:
- 36:54:9d:b4:6d:98:c2:24:a9:fd:f7:6e:8e:41:18:
- e1:9b:ae:ef:61:98:5f:91:53:f0:8a:8e:d4:18:cf:
- 4f:dd:ff:75:01:16:10:f1:76:10:28:ba:70:96:8b:
- b7:ac:df:17:68:61:03:56:77:e5:bd:04:58:d8:44:
- d6:65:21:97:28:46:5d:a3:62:6d:3d:a1:03:6d:da:
- f7:46:f5:76:5c:1a:cd:19:b4:25:cd:17:d7:0e:ac:
- 6a:3c:d1:35:a0:20:cc:5e:62:7b:e1:11:d6:92:09:
- 34:3e:1d:d7:d5:27:b9:3b:5b:42:1e:11:f4:1a:2f:
- de:93:81:2f:6b:d1:9f:40:9f:d7:8e:7c:9b:37:7b:
- d8:3f:ba:e3:00:d7:f7:3c:20:0e:81:b4:df:cc:46:
- 3c:10:0d:04:8a:b5:ef:ba:e7:ec:7e:0b:98:a1:18:
- fb:39:db:2c:76:ae:1b:91:94:22:f4:35:b0:1a:73:
- 4d:7b:eb:c5:b3:80:80:74:90:79:b9:2f:fd:35:39:
- 02:ad
+ 00:d4:fa:c0:4f:fa:75:57:2e:07:a4:26:6d:43:48:
+ a2:47:06:03:dd:a3:f2:10:d1:66:21:4f:fa:28:42:
+ b9:4f:c1:f5:4c:fa:dc:ad:92:30:50:2a:ce:ac:db:
+ 05:cd:c2:19:26:b8:de:46:0e:ec:14:9b:27:92:71:
+ bd:e9:a5:28:55:eb:27:71:dc:ff:d7:2b:ea:ed:f0:
+ 5b:e3:38:bc:35:f8:7b:ec:5d:ba:67:8d:d8:8a:95:
+ bb:a2:01:32:3e:a6:d2:d3:a2:c7:70:f5:7c:fb:53:
+ 6f:b8:11:48:af:0c:a0:60:87:98:43:87:ff:d2:c2:
+ 18:b5:50:67:18:ee:06:8f:80:ff:4b:02:c6:c3:01:
+ 34:e2:7e:fa:60:62:23:2c:8a:68:ae:5a:0f:ad:1a:
+ 52:1f:7f:58:ae:9a:50:6e:fb:c7:53:1a:b6:b7:92:
+ 5d:ba:65:53:4c:73:b4:ed:c5:b5:b4:3a:f6:cb:79:
+ b3:87:f9:69:ac:29:e5:e4:bb:54:89:bf:45:bf:0c:
+ b9:83:6c:31:3e:a5:6e:7d:50:f1:68:f8:3d:ca:c2:
+ 3f:9f:5c:61:35:21:bc:6a:a2:77:2c:53:22:71:2e:
+ 96:70:f9:c2:c3:f6:3a:8c:3a:a4:00:f9:55:d4:01:
+ 6e:be:fc:f9:9a:2b:78:7e:3c:25:e9:09:87:47:5e:
+ a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- D4:83:FC:D5:EF:E0:C4:8E:32:6D:A2:30:65:12:B4:CD:3A:B2:95:88
+ 63:A2:D5:4E:83:BA:38:5F:50:C5:93:E5:5C:93:9D:DE:55:08:73:A9
X509v3 Authority Key Identifier:
- keyid:EE:5C:5F:80:3F:59:C4:A6:5B:70:C2:1C:BA:E4:5D:40:F9:E9:60:8D
+ keyid:F9:8A:EA:DF:3D:59:DD:70:5F:B5:B8:D5:24:99:76:02:DC:6E:30:8F
Authority Information Access:
CA Issuers - URI:http://url-for-aia/ShadowRoot.cer
@@ -235,41 +235,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 8c:2a:1f:ee:90:15:b8:41:8b:cc:b4:45:2b:6f:5b:9e:49:f7:
- a1:9f:9e:2a:ce:8a:c3:ae:57:95:62:b5:f2:c9:a4:6a:57:49:
- 39:00:32:c4:23:4c:b8:15:21:4a:8f:0a:83:98:d8:ba:83:dc:
- da:88:4c:7e:60:21:1a:ed:75:6d:5e:5d:83:90:e0:71:23:13:
- 4f:2d:94:c0:fb:91:7f:b6:59:41:d6:b3:3e:42:ef:31:02:23:
- 18:a6:d2:9b:00:c6:8c:5a:3d:2c:cb:5e:dc:53:69:ac:71:b8:
- 68:90:62:5a:ba:2f:1f:20:9d:77:f3:b0:aa:2e:52:61:a5:60:
- 53:5b:5c:ab:c9:56:7e:01:4c:bf:26:ab:13:47:c1:28:72:13:
- a5:d8:b8:4c:65:09:9f:7f:a1:67:93:fc:0d:71:a3:4c:1d:3f:
- 95:9c:4a:28:8d:52:0d:48:fe:34:04:c2:d2:80:61:86:1c:e6:
- 18:cd:bb:62:ca:d2:e6:76:a8:f3:14:e3:41:75:5d:3b:e7:5a:
- 29:6c:6e:2c:bc:53:6f:39:e8:82:ab:73:d1:d5:b9:d3:f8:30:
- 5c:d7:19:d3:49:11:25:7c:01:3a:2a:a6:7f:19:b3:08:bf:0f:
- dc:4f:7b:fa:5b:20:b8:7e:eb:ea:8f:0a:56:c4:16:cd:e1:2b:
- a2:bb:66:f0
+ ce:fc:9e:82:80:f8:42:20:0d:93:e5:35:7d:8b:44:89:7b:dd:
+ a6:2b:dd:69:ee:16:da:2c:98:76:31:ae:7e:b3:c2:30:e5:9d:
+ 6b:be:11:48:70:d8:bd:d6:01:22:93:c7:14:da:0f:46:2f:98:
+ e7:b1:0b:33:10:75:77:3e:3a:e4:ba:ee:10:98:bd:b3:0a:34:
+ f7:85:09:d2:73:d4:7f:61:e1:5d:e4:eb:d6:7b:c6:f3:a9:a0:
+ 4d:15:46:f9:de:c5:31:10:5b:87:c4:58:99:51:64:7e:0b:31:
+ 22:73:ca:54:34:bd:e6:30:44:0a:59:01:ba:1a:7a:e6:83:76:
+ 3c:5e:8b:d4:06:72:b6:a8:62:07:eb:01:97:02:2d:69:95:4a:
+ 2b:77:27:a3:30:e5:22:7d:96:81:c9:ba:90:22:f4:fe:6c:bc:
+ a2:eb:96:81:4c:1a:83:4f:af:9e:21:77:5e:68:87:f3:eb:f8:
+ 10:7d:38:00:9b:83:0c:2d:9f:7f:b8:93:23:c4:f4:b2:77:c7:
+ cf:1d:bb:12:e4:30:f3:bb:5c:ec:82:1c:47:bf:31:93:93:b2:
+ a0:6f:f8:d2:ec:67:7e:95:4e:f5:eb:d4:64:c5:32:2c:0f:b4:
+ 6c:e4:64:ef:b5:a5:07:cf:f8:b2:f1:c9:67:10:e6:1a:0d:a3:
+ 9c:44:65:6e
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDApTaGFk
b3dSb290MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UE
-AwwEUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKY3nKxClhz7
-RIbfFoXS3klzdLhbPow0S0JXfnqa/c9/A8c5IgI/RBtiS0obm9iOe6W1kjmhA7w8
-Gh9fNlSdtG2YwiSp/fdujkEY4Zuu72GYX5FT8IqO1BjPT93/dQEWEPF2ECi6cJaL
-t6zfF2hhA1Z35b0EWNhE1mUhlyhGXaNibT2hA23a90b1dlwazRm0Jc0X1w6sajzR
-NaAgzF5ie+ER1pIJND4d19UnuTtbQh4R9Bov3pOBL2vRn0Cf1458mzd72D+64wDX
-9zwgDoG038xGPBANBIq177rn7H4LmKEY+znbLHauG5GUIvQ1sBpzTXvrxbOAgHSQ
-ebkv/TU5Aq0CAwEAAaOB1zCB1DAdBgNVHQ4EFgQU1IP81e/gxI4ybaIwZRK0zTqy
-lYgwHwYDVR0jBBgwFoAU7lxfgD9ZxKZbcMIcuuRdQPnpYI0wPQYIKwYBBQUHAQEE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-DQEBCwUAA4IBAQCMKh/ukBW4QYvMtEUrb1ueSfehn54qzorDrleVYrXyyaRqV0k5
-ADLEI0y4FSFKjwqDmNi6g9zaiEx+YCEa7XVtXl2DkOBxIxNPLZTA+5F/tllB1rM+
-Qu8xAiMYptKbAMaMWj0sy17cU2mscbhokGJaui8fIJ1387CqLlJhpWBTW1yryVZ+
-AUy/JqsTR8EochOl2LhMZQmff6Fnk/wNcaNMHT+VnEoojVINSP40BMLSgGGGHOYY
-zbtiytLmdqjzFONBdV0751opbG4svFNvOeiCq3PR1bnT+DBc1xnTSRElfAE6KqZ/
-GbMIvw/cT3v6WyC4fuvqjwpWxBbN4Suiu2bw
+DQEBCwUAA4IBAQDO/J6CgPhCIA2T5TV9i0SJe92mK91p7hbaLJh2Ma5+s8Iw5Z1r
+vhFIcNi91gEik8cU2g9GL5jnsQszEHV3Pjrkuu4QmL2zCjT3hQnSc9R/YeFd5OvW
+e8bzqaBNFUb53sUxEFuHxFiZUWR+CzEic8pUNL3mMEQKWQG6Gnrmg3Y8XovUBnK2
+qGIH6wGXAi1plUordyejMOUifZaBybqQIvT+bLyi65aBTBqDT6+eIXdeaIfz6/gQ
+fTgAm4MMLZ9/uJMjxPSyd8fPHbsS5DDzu1zsghxHvzGTk7Kgb/jS7Gd+lU7169Rk
+xTIsD7Rs5GTvtaUHz/iy8clnEOYaDaOcRGVu
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem b/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem
deleted file mode 100644
index 51446ab..0000000
--- a/net/data/verify_certificate_chain_unittest/target-and-intermediary.pem
+++ /dev/null
@@ -1,280 +0,0 @@
-[Created by: generate-target-and-intermediary.py]
-
-Certificate chain with 1 intermediary and a trusted root. Verification is
-expected to succeed.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:dc:50:a0:d0:af:3b:b6:d5:af:48:be:31:08:db:
- 91:81:c5:c8:d7:22:88:d4:74:1e:12:de:7a:79:79:
- 10:71:de:b5:8a:4e:d1:1d:46:6b:46:62:e8:de:f8:
- 01:f5:9d:6b:35:f6:a6:b7:f2:7f:4c:5f:f9:ad:10:
- f6:7e:9c:87:dc:27:e5:3f:19:1c:f0:c5:69:06:51:
- 96:bf:d0:c5:ef:b8:e3:2c:47:6a:8f:44:68:70:ed:
- 18:b9:f1:85:7b:2e:42:bc:44:5d:e3:d3:df:95:93:
- 8c:1d:ad:bc:9e:45:ad:6e:4f:78:68:6e:8f:ee:16:
- a9:6e:9d:50:6b:9c:72:a0:d7:fe:ff:68:4b:1c:df:
- 18:fd:26:fb:65:be:c9:63:30:30:15:7d:f9:83:95:
- c4:5e:2e:e5:d1:f0:ce:9c:5e:4a:6c:ec:6f:26:f6:
- 79:38:bc:15:e2:50:68:f0:46:c2:7f:7d:0a:c2:79:
- 08:b7:ea:41:18:d5:65:29:3e:6d:bb:80:8e:a2:0d:
- c3:c4:8a:e2:dd:3c:19:01:e9:ea:0c:bb:db:6c:c7:
- ed:6d:c5:7e:78:5f:5d:e2:87:d9:fa:90:3a:1d:c3:
- b6:d8:7f:78:77:7b:e8:2c:bb:ed:04:18:72:a7:0f:
- b2:ef:96:65:b4:39:a0:e9:59:b3:64:f4:db:9d:53:
- 42:9f
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 86:F0:37:63:2C:67:7D:F8:D4:71:4D:9B:A3:47:47:BA:F5:F0:0E:90
- X509v3 Authority Key Identifier:
- keyid:42:1A:C3:C4:D6:79:39:E2:20:E5:63:13:EB:41:7B:8C:0E:28:72:8E
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediary.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- 4e:86:be:e0:4b:d5:15:99:49:09:6c:9a:6d:9a:82:e2:41:3e:
- 99:a5:e3:23:dd:43:d7:22:8d:c6:4f:4c:51:47:cb:32:44:b8:
- 3a:f0:b6:88:0c:fd:08:d1:ea:0d:b0:72:fe:a0:48:6b:5d:a2:
- 9e:f2:2d:12:6a:bf:68:ce:2e:d0:35:5f:da:32:c9:74:4b:29:
- 53:81:69:a1:a1:1a:de:c8:5e:c1:73:21:b6:02:81:d8:57:ef:
- 68:c3:24:f7:05:fa:ae:ed:d7:8a:62:e3:09:bf:fc:d0:41:93:
- e8:12:a5:fc:c3:46:d8:2b:f6:e3:cc:36:a7:39:cd:32:9e:9d:
- e1:79:68:ff:15:b9:10:5f:86:ad:4d:a0:dc:60:2f:1f:36:6f:
- d3:7a:60:81:c5:38:71:d0:fa:28:ae:ba:80:0e:cf:9c:ef:4d:
- 1f:d4:0c:27:0f:55:a8:49:65:c1:d6:af:6d:b1:1d:fb:90:38:
- ad:8b:5e:ba:82:68:60:2a:e4:7a:b8:07:aa:91:37:84:d6:18:
- 38:ba:37:a6:d9:bb:3b:45:da:59:8c:c5:90:11:1d:85:fe:af:
- fa:62:87:84:5d:5a:90:91:c3:6c:53:e1:d3:74:e7:51:19:b6:
- b5:e7:12:1a:73:35:34:16:dd:e4:31:62:58:de:3a:fb:40:80:
- 21:4f:f5:13
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUKDQ
-rzu21a9IvjEI25GBxcjXIojUdB4S3np5eRBx3rWKTtEdRmtGYuje+AH1nWs19qa3
-8n9MX/mtEPZ+nIfcJ+U/GRzwxWkGUZa/0MXvuOMsR2qPRGhw7Ri58YV7LkK8RF3j
-09+Vk4wdrbyeRa1uT3hobo/uFqlunVBrnHKg1/7/aEsc3xj9JvtlvsljMDAVffmD
-lcReLuXR8M6cXkps7G8m9nk4vBXiUGjwRsJ/fQrCeQi36kEY1WUpPm27gI6iDcPE
-iuLdPBkB6eoMu9tsx+1txX54X13ih9n6kDodw7bYf3h3e+gsu+0EGHKnD7LvlmW0
-OaDpWbNk9NudU0KfAgMBAAGjgekwgeYwHQYDVR0OBBYEFIbwN2MsZ3341HFNm6NH
-R7r18A6QMB8GA1UdIwQYMBaAFEIaw8TWeTniIOVjE+tBe4wOKHKOMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAToa+4EvVFZlJCWyabZqC
-4kE+maXjI91D1yKNxk9MUUfLMkS4OvC2iAz9CNHqDbBy/qBIa12invItEmq/aM4u
-0DVf2jLJdEspU4FpoaEa3shewXMhtgKB2FfvaMMk9wX6ru3XimLjCb/80EGT6BKl
-/MNG2Cv248w2pznNMp6d4Xlo/xW5EF+GrU2g3GAvHzZv03pggcU4cdD6KK66gA7P
-nO9NH9QMJw9VqEllwdavbbEd+5A4rYteuoJoYCrkergHqpE3hNYYOLo3ptm7O0Xa
-WYzFkBEdhf6v+mKHhF1akJHDbFPh03TnURm2tecSGnM1NBbd5DFiWN46+0CAIU/1
-Ew==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:a4:16:0d:45:92:8b:7b:8e:42:07:a1:f4:01:dc:
- 31:0e:68:b4:3f:f3:b7:0d:8f:08:f4:f0:bb:2b:45:
- 37:98:b4:3b:6f:61:7c:23:2e:6e:cf:33:a3:d1:09:
- 16:74:3f:ac:4f:59:f1:92:42:35:e6:8a:e9:98:5e:
- 39:a2:0d:45:26:8f:7d:bb:ad:bf:f8:66:a3:b0:eb:
- 7f:eb:79:60:9a:70:03:5d:9f:46:a8:47:64:7d:a9:
- eb:a7:7d:77:60:3a:f5:5f:e8:bc:54:f3:d7:25:5e:
- 5b:62:3a:4a:df:f3:21:df:e4:bc:89:69:26:fa:d7:
- 24:16:f1:06:d0:57:a1:a0:aa:f2:bd:9f:0c:59:50:
- 57:c2:5d:25:24:05:eb:91:58:bb:1a:82:df:eb:03:
- ec:55:ed:d4:46:b5:fe:2e:fa:08:14:d7:76:71:99:
- 2b:34:10:2d:20:21:ed:78:91:f9:05:04:14:42:a0:
- ed:95:46:a3:a2:e6:55:1e:87:0b:1b:57:8e:e4:7c:
- c5:c5:39:83:b1:c6:91:e1:54:8a:6f:6a:9b:a5:80:
- 93:ec:00:81:6f:20:70:6c:31:95:42:76:a3:82:17:
- d8:d2:ff:3a:09:53:be:76:ea:e1:a9:fb:a9:a5:5f:
- 2b:5f:f9:5a:78:97:2e:f9:9d:31:42:2a:f9:1c:26:
- 16:7d
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 42:1A:C3:C4:D6:79:39:E2:20:E5:63:13:EB:41:7B:8C:0E:28:72:8E
- X509v3 Authority Key Identifier:
- keyid:FE:3F:EE:E8:53:09:31:CA:D4:66:C1:C7:FE:E0:74:C3:D7:81:44:5F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- af:11:72:82:33:e5:f9:b1:10:fc:c2:4a:9e:c8:8e:b4:16:51:
- 62:8d:b5:e3:e3:c7:30:32:52:52:55:aa:6b:c4:c2:67:de:71:
- 37:2d:85:68:80:c8:b7:9b:4b:05:6f:97:e1:82:03:f4:b7:07:
- b8:c2:a8:02:7a:60:34:c8:07:9b:7e:c3:02:bd:11:26:51:b4:
- 4d:e2:6c:e4:38:bc:4c:e7:35:91:24:f1:40:6e:69:7f:ac:b4:
- ee:12:8a:1c:41:f6:96:13:93:67:c4:11:18:67:80:e6:41:ef:
- 2b:3e:47:1a:57:b1:66:ac:87:93:ed:6c:fe:a2:c4:5a:47:75:
- d0:1b:01:b6:74:b6:f8:7b:aa:e3:91:c3:45:56:2b:a4:d2:67:
- 94:18:71:e7:ea:41:14:bb:12:4e:56:d8:5a:95:89:bc:e6:89:
- be:9a:03:8c:b8:2b:18:56:7c:41:db:2d:e3:86:b5:de:aa:cb:
- 11:da:91:8f:f2:75:1d:d2:b6:0b:bd:d6:b5:65:a5:96:1a:44:
- fd:66:80:89:bf:a5:a9:c4:fb:3f:2b:cc:f5:e7:a6:e6:bd:5f:
- e3:df:51:76:e3:e8:1c:e5:53:e9:6e:cf:e8:54:5f:f3:7f:ca:
- 3a:b2:b2:07:7d:6c:29:a9:01:17:cf:f9:e8:0a:13:88:13:d3:
- ad:ac:be:ad
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBYNRZKL
-e45CB6H0AdwxDmi0P/O3DY8I9PC7K0U3mLQ7b2F8Iy5uzzOj0QkWdD+sT1nxkkI1
-5orpmF45og1FJo99u62/+GajsOt/63lgmnADXZ9GqEdkfanrp313YDr1X+i8VPPX
-JV5bYjpK3/Mh3+S8iWkm+tckFvEG0FehoKryvZ8MWVBXwl0lJAXrkVi7GoLf6wPs
-Ve3URrX+LvoIFNd2cZkrNBAtICHteJH5BQQUQqDtlUajouZVHocLG1eO5HzFxTmD
-scaR4VSKb2qbpYCT7ACBbyBwbDGVQnajghfY0v86CVO+durhqfuppV8rX/laeJcu
-+Z0xQir5HCYWfQIDAQABo4HLMIHIMB0GA1UdDgQWBBRCGsPE1nk54iDlYxPrQXuM
-DihyjjAfBgNVHSMEGDAWgBT+P+7oUwkxytRmwcf+4HTD14FEXzA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AK8RcoIz5fmxEPzCSp7IjrQWUWKNtePjxzAyUlJVqmvEwmfecTcthWiAyLebSwVv
-l+GCA/S3B7jCqAJ6YDTIB5t+wwK9ESZRtE3ibOQ4vEznNZEk8UBuaX+stO4SihxB
-9pYTk2fEERhngOZB7ys+RxpXsWash5PtbP6ixFpHddAbAbZ0tvh7quORw0VWK6TS
-Z5QYcefqQRS7Ek5W2FqVibzmib6aA4y4KxhWfEHbLeOGtd6qyxHakY/ydR3Stgu9
-1rVlpZYaRP1mgIm/panE+z8rzPXnpua9X+PfUXbj6BzlU+luz+hUX/N/yjqysgd9
-bCmpARfP+egKE4gT062svq0=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:ea:28:d6:83:e1:ad:7f:df:9a:70:91:b6:2a:45:
- 28:bb:1a:00:d2:1f:0c:6e:14:10:27:c0:65:c9:90:
- 40:45:83:6c:af:9a:66:ed:cb:59:2f:f7:82:67:74:
- aa:1d:73:ec:f3:98:cb:38:9c:f6:6b:4f:bc:6b:5d:
- f7:15:89:ed:02:f8:ed:17:69:df:a2:8d:ee:f5:d1:
- 84:92:42:b8:9f:fe:77:fd:d5:06:7b:6f:59:8a:2a:
- c7:32:f5:ff:ad:f9:8a:59:e7:93:11:79:fe:f6:2a:
- cb:99:db:a9:d7:05:a8:be:af:db:2e:b1:8a:56:8e:
- f7:ec:b4:b0:a3:a4:96:39:79:69:3c:3b:ce:fe:42:
- 15:a8:56:bb:88:94:42:a5:0b:04:b4:e9:fa:c9:1a:
- 14:7d:c0:82:d5:d8:3a:de:ec:6f:a6:be:5c:43:6d:
- 85:f8:84:57:cd:06:b0:e1:63:a5:ab:05:14:2f:2d:
- fb:04:99:fb:7e:ce:06:cf:3b:29:27:7a:70:1a:6b:
- fb:6a:f3:a6:23:31:dd:93:80:67:b9:09:03:92:e2:
- a9:c4:71:85:1b:a5:f9:1c:ff:86:b0:72:e3:23:58:
- 15:6c:4e:55:7f:89:91:35:0a:b3:41:ba:3c:17:76:
- da:e6:39:6e:58:92:67:9d:06:c5:c8:84:e0:61:49:
- ea:b3
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- FE:3F:EE:E8:53:09:31:CA:D4:66:C1:C7:FE:E0:74:C3:D7:81:44:5F
- X509v3 Authority Key Identifier:
- keyid:FE:3F:EE:E8:53:09:31:CA:D4:66:C1:C7:FE:E0:74:C3:D7:81:44:5F
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 9f:ae:51:c1:f5:31:bf:30:6c:e1:b5:38:07:b5:c2:56:38:6b:
- 3c:f3:49:50:93:5f:75:9e:94:15:5c:15:0a:91:87:6a:c1:fa:
- 36:d6:4a:72:6f:cd:8c:9d:77:e7:61:96:14:88:4f:b2:71:d7:
- 81:8f:06:9f:c7:14:49:0c:de:7c:73:ba:00:c8:44:58:ac:0a:
- 4b:27:bb:3d:cb:fd:4d:14:dd:f7:61:b7:a0:f4:00:8a:ff:54:
- 6b:c0:6a:6d:21:43:b8:9b:cb:f9:ad:9d:fe:2a:09:3d:a1:dd:
- de:17:7d:6f:74:44:79:0c:12:4e:d0:68:4f:b2:35:60:ef:95:
- da:a5:25:f8:e4:4c:ea:83:38:c1:26:83:db:13:78:58:1c:50:
- e3:20:93:b0:c8:5e:a0:76:5f:c2:fe:cc:16:3d:f6:2f:33:08:
- fe:61:af:57:cd:c6:ae:8a:d2:7b:98:e8:eb:98:9b:89:ff:47:
- 24:d6:bf:a3:29:f6:e3:7e:e2:08:0b:a6:06:11:36:07:ea:61:
- 5f:58:16:d3:c1:29:b4:c8:39:7c:32:98:17:82:e7:8c:0f:2e:
- 34:bc:a3:78:62:15:29:95:4e:ca:c4:40:8b:29:2e:5c:8c:9b:
- 14:ee:90:68:08:91:ef:64:fe:8f:61:89:cd:6b:44:dd:24:cf:
- 7c:3d:a3:86
------BEGIN TRUSTED_CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOoo1oPhrX/fmnCRtipF
-KLsaANIfDG4UECfAZcmQQEWDbK+aZu3LWS/3gmd0qh1z7POYyzic9mtPvGtd9xWJ
-7QL47Rdp36KN7vXRhJJCuJ/+d/3VBntvWYoqxzL1/635ilnnkxF5/vYqy5nbqdcF
-qL6v2y6xilaO9+y0sKOkljl5aTw7zv5CFahWu4iUQqULBLTp+skaFH3AgtXYOt7s
-b6a+XENthfiEV80GsOFjpasFFC8t+wSZ+37OBs87KSd6cBpr+2rzpiMx3ZOAZ7kJ
-A5LiqcRxhRul+Rz/hrBy4yNYFWxOVX+JkTUKs0G6PBd22uY5bliSZ50GxciE4GFJ
-6rMCAwEAAaOByzCByDAdBgNVHQ4EFgQU/j/u6FMJMcrUZsHH/uB0w9eBRF8wHwYD
-VR0jBBgwFoAU/j/u6FMJMcrUZsHH/uB0w9eBRF8wNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCfrlHB9TG/
-MGzhtTgHtcJWOGs880lQk191npQVXBUKkYdqwfo21kpyb82MnXfnYZYUiE+ycdeB
-jwafxxRJDN58c7oAyERYrApLJ7s9y/1NFN33Ybeg9ACK/1RrwGptIUO4m8v5rZ3+
-Kgk9od3eF31vdER5DBJO0GhPsjVg75XapSX45EzqgzjBJoPbE3hYHFDjIJOwyF6g
-dl/C/swWPfYvMwj+Ya9XzcauitJ7mOjrmJuJ/0ck1r+jKfbjfuIIC6YGETYH6mFf
-WBbTwSm0yDl8MpgXgueMDy40vKN4YhUplU7KxECLKS5cjJsU7pBoCJHvZP6PYYnN
-a0TdJM98PaOG
------END TRUSTED_CERTIFICATE-----
-
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
------BEGIN VERIFY_RESULT-----
-U1VDQ0VTUw==
------END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/target-and-intermediate.pem b/net/data/verify_certificate_chain_unittest/target-and-intermediate.pem
new file mode 100644
index 0000000..89ff641
--- /dev/null
+++ b/net/data/verify_certificate_chain_unittest/target-and-intermediate.pem
@@ -0,0 +1,280 @@
+[Created by: generate-target-and-intermediate.py]
+
+Certificate chain with 1 intermediate and a trusted root. Verification is
+expected to succeed.
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Intermediate
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Target
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:99:a4:c0:d4:dd:a9:aa:60:8b:ae:df:d6:20:ae:
+ b9:f2:f2:ae:44:0e:1f:13:9c:cc:bb:03:81:36:91:
+ 75:72:b4:f8:36:61:2b:7d:70:a9:da:e5:35:7e:e5:
+ 39:a6:fa:da:45:37:fd:77:04:af:21:c3:43:c4:15:
+ 9e:07:a1:4e:19:04:66:e7:bf:ae:76:b1:95:8a:9b:
+ b8:79:12:b7:ca:d3:ec:72:16:4b:47:08:89:1f:d5:
+ 5d:cf:e2:a6:1e:c3:c9:28:54:41:f6:68:e4:01:a9:
+ df:4a:f1:ab:d5:45:26:1a:4e:f9:f7:11:1e:c2:43:
+ 52:d9:2e:95:52:35:71:dc:6a:eb:56:ee:81:73:6a:
+ 86:5b:bd:4f:a6:8f:4b:b3:4e:35:06:d5:35:8a:aa:
+ d5:f7:bd:6a:e1:79:6a:61:37:dc:a8:06:d9:5a:31:
+ ea:3b:2e:8c:8f:de:1e:47:02:c7:ca:27:00:b9:49:
+ 7b:29:c4:f4:82:f2:bc:58:52:bb:f2:36:1c:10:4f:
+ a7:93:fa:46:d0:92:80:15:e7:b9:da:1d:70:21:2b:
+ 9c:47:9c:17:5a:26:2d:94:8a:ce:ae:ba:ac:cb:31:
+ 96:a9:e8:9e:51:73:4f:8c:bf:8c:57:d8:c8:61:0e:
+ c0:45:09:e4:56:a0:47:f9:df:97:af:9c:76:63:54:
+ c6:9b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 05:BE:F6:16:F8:E7:6A:1B:E6:6D:6D:5A:A4:AF:01:89:8B:98:88:E3
+ X509v3 Authority Key Identifier:
+ keyid:6E:35:75:BC:3A:85:BC:B6:F7:B8:01:75:BD:9E:A8:36:8D:1E:C7:D9
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Intermediate.crl
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ a4:7d:30:26:06:98:4b:33:c7:b7:84:04:cb:1b:1f:29:1c:b4:
+ 44:6e:6f:b2:5e:40:ce:e9:5d:e5:3d:ed:5c:a4:34:67:08:c0:
+ 10:55:f3:c8:90:43:65:d9:fc:b9:64:43:1a:fc:cb:6c:3f:fc:
+ 2a:48:87:60:6b:95:a6:4f:d6:6f:ac:e3:39:19:54:5d:96:6b:
+ 80:15:db:e3:9f:84:90:4d:23:b1:74:f2:f8:d1:4e:8e:6b:05:
+ 2c:28:94:05:03:90:04:98:08:e3:73:34:b6:05:1e:8e:b0:52:
+ 33:cf:41:ff:99:cd:26:70:12:b1:0a:5c:c7:ed:d3:87:be:fa:
+ f1:24:34:42:22:35:a0:e5:7c:ef:18:b8:61:ce:a1:0a:99:7a:
+ 2d:3f:b9:48:36:a2:3c:5e:70:e4:36:32:a2:9d:1d:3a:37:fa:
+ bf:e4:b4:89:0d:48:e7:9d:f5:9f:48:13:ec:6a:8b:e6:b3:3f:
+ 23:f7:94:b1:2d:cf:b4:26:f4:1b:b5:01:3b:92:bb:63:4e:d6:
+ ee:ed:c0:2e:77:53:5b:3e:a5:8c:c6:b9:40:67:bb:cd:67:65:
+ 6b:41:46:7e:90:f9:2a:a7:5f:09:92:37:13:23:19:2d:66:cb:
+ 73:7e:a3:42:dd:da:ed:f6:08:8a:8a:97:ef:4b:f7:5d:22:81:
+ 82:95:87:7c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Intermediate
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:d2:ee:b5:26:40:84:3d:98:ee:bc:3e:62:1a:09:
+ 5e:53:b1:72:28:f6:70:c0:a1:08:65:6f:54:24:4c:
+ fc:bf:fe:14:25:fa:5d:a5:17:f1:00:64:b3:33:6f:
+ 09:3a:0f:cc:25:87:f6:20:e4:f4:49:f3:5a:5d:a4:
+ d5:02:e7:db:20:c9:66:b4:cf:44:4d:58:4b:48:13:
+ 7b:83:60:14:28:f7:5a:5b:f8:f5:34:40:81:32:bd:
+ d2:8c:34:4f:d6:5d:5f:65:dd:74:56:7a:07:7a:82:
+ c3:0b:42:d5:cb:09:30:76:41:6e:08:28:ad:0c:27:
+ 51:9c:86:e1:fe:e8:85:68:aa:59:d0:f8:39:c2:59:
+ 6e:95:90:de:c9:f8:df:77:5e:56:3f:d5:9d:f8:09:
+ 29:ed:7c:cc:92:e7:c3:40:27:76:fc:08:4f:ae:98:
+ c9:7c:95:43:05:cc:1f:f5:b2:0b:51:ec:09:cd:22:
+ 3d:7e:e4:5a:b9:4f:86:62:76:d7:c0:42:23:bb:97:
+ e1:b3:ae:af:9d:56:89:00:68:01:b0:cb:11:cc:f4:
+ ea:cd:1e:7d:32:81:d9:93:20:00:22:ed:31:78:3c:
+ 62:de:73:3f:1d:38:17:4e:04:a2:58:45:36:26:95:
+ 93:ab:36:f1:54:01:81:b1:c2:70:f5:06:17:47:40:
+ 0e:fb
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 6E:35:75:BC:3A:85:BC:B6:F7:B8:01:75:BD:9E:A8:36:8D:1E:C7:D9
+ X509v3 Authority Key Identifier:
+ keyid:4F:DE:F3:E5:5E:F5:98:0D:CA:3A:20:2B:E9:C8:B4:5D:D0:1D:86:BF
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 10:e4:01:2e:8b:a4:ea:e0:cc:ac:c2:57:68:b7:97:98:e2:57:
+ d6:ff:e2:70:d9:de:bd:7e:44:59:da:3c:cc:1e:62:5d:a8:77:
+ 70:b5:fc:4c:21:50:b1:5f:4d:d8:dc:18:bf:d7:1e:40:fa:11:
+ 8e:40:e6:b8:38:87:a3:10:ed:97:93:ae:a6:7f:6c:cf:75:43:
+ e1:88:b9:84:b3:f3:73:05:fb:24:de:2b:f1:20:65:3f:70:25:
+ 87:4d:e0:66:73:ca:29:52:60:88:e9:e3:5f:cc:2b:83:1c:b3:
+ 8c:4d:12:7b:35:70:fd:d1:1a:08:85:94:77:39:3c:b0:c5:d7:
+ 7e:a5:71:f3:ca:a7:98:30:69:62:f6:96:d4:f9:30:07:aa:56:
+ da:ba:16:fc:1b:57:24:a0:f1:84:e2:4a:a2:97:a4:a1:82:05:
+ 1a:02:c7:41:2f:98:c8:e5:27:b4:85:98:72:d0:a0:e1:b5:c1:
+ 57:ab:aa:6b:71:79:d0:4d:91:68:18:25:f8:b4:b7:cb:1d:0c:
+ 74:6a:77:66:48:3f:24:b0:92:d9:22:6f:6e:54:b7:f8:8c:21:
+ 57:0e:a9:cc:52:ff:56:2e:42:fa:08:2e:fe:29:3c:f1:86:8b:
+ 74:88:68:82:3f:16:2d:06:12:57:a6:e2:b1:b7:1b:5d:3a:a1:
+ 75:c7:24:d7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=Root
+ Validity
+ Not Before: Jan 1 12:00:00 2015 GMT
+ Not After : Jan 1 12:00:00 2016 GMT
+ Subject: CN=Root
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:ba:0d:d2:51:af:0c:48:94:37:cf:ea:83:8f:d6:
+ 39:b5:c9:58:fe:59:5b:e5:61:b6:21:98:86:16:a0:
+ 85:e6:cd:c8:21:81:65:4c:65:97:55:72:76:2f:c6:
+ 0d:25:f8:c8:28:9f:20:d1:56:4c:06:99:ff:6d:0f:
+ 24:d3:92:f1:31:25:5a:13:6c:be:4b:19:6a:65:af:
+ 2f:32:be:a9:0f:f8:9b:6d:6f:10:7c:e9:24:61:4d:
+ fe:ba:e9:b5:b4:54:5e:82:f7:02:7a:e2:e2:d7:53:
+ 6a:69:f4:9a:41:27:0f:50:dc:64:a1:47:84:53:3f:
+ f1:38:cd:80:a3:5a:2b:dd:96:81:8a:ea:e3:94:72:
+ f7:aa:f8:2f:cc:a9:d0:9e:36:9f:56:0c:45:ec:dd:
+ 6a:05:52:85:60:99:d7:94:9f:76:7e:1d:8f:3f:50:
+ fb:33:bc:ca:f8:10:2e:db:15:b2:49:57:d8:f4:59:
+ fa:73:3b:03:32:86:a7:f1:46:a1:62:ac:67:10:73:
+ 70:51:07:ff:d2:04:33:d8:7c:e2:a8:ff:8e:53:24:
+ e8:e4:96:da:fb:d1:ea:2f:9c:a9:b5:8f:c5:50:fb:
+ 90:67:b1:8c:5b:8d:f7:5f:af:da:a4:fa:3c:fb:4f:
+ 05:bf:56:4c:dd:d6:6e:43:54:fd:f4:a0:c9:13:93:
+ 55:07
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Subject Key Identifier:
+ 4F:DE:F3:E5:5E:F5:98:0D:CA:3A:20:2B:E9:C8:B4:5D:D0:1D:86:BF
+ X509v3 Authority Key Identifier:
+ keyid:4F:DE:F3:E5:5E:F5:98:0D:CA:3A:20:2B:E9:C8:B4:5D:D0:1D:86:BF
+
+ Authority Information Access:
+ CA Issuers - URI:http://url-for-aia/Root.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://url-for-crl/Root.crl
+
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Signature Algorithm: sha256WithRSAEncryption
+ 75:4e:86:e1:25:9e:a8:7b:0e:65:db:bb:ca:49:e3:0c:70:df:
+ 07:bd:1a:83:d8:48:e1:b7:0b:39:ed:da:61:a0:98:1d:de:9b:
+ 5f:66:a6:33:79:43:46:1b:7d:bf:b4:e4:37:8c:96:5e:89:a8:
+ 8f:92:04:0f:c5:e4:0d:81:a3:76:98:c1:b0:b2:70:70:11:f6:
+ 8e:34:3a:82:ae:6b:7d:e9:ff:b4:58:85:20:b0:85:fc:86:89:
+ 40:08:62:e5:0f:34:83:82:90:da:2a:59:e4:53:53:ee:61:ac:
+ 46:51:ab:cb:81:1d:c1:f7:f0:c2:64:55:b9:fd:2a:67:44:3a:
+ 6a:af:f9:c2:55:c8:35:e6:8b:3a:d1:06:82:8f:14:ee:f1:11:
+ 25:db:a2:98:cc:be:bd:63:21:65:77:6e:6a:f8:d1:7e:a1:c6:
+ df:48:0e:74:0d:e3:03:51:ff:f9:98:92:3c:f8:36:75:90:5e:
+ 09:6c:7f:3f:c1:5e:40:03:72:de:ab:ed:6f:bb:fe:f7:9d:14:
+ 92:5c:69:13:ba:cf:7a:d8:4b:f1:29:04:6e:bc:5f:c9:8e:52:
+ b6:db:58:41:bb:8d:32:e7:5b:4b:74:bf:4c:8d:ec:07:0b:7d:
+ 3c:d6:2f:4d:27:11:31:15:6f:38:0d:ba:2a:53:76:2a:47:e6:
+ 32:52:df:ea
+-----BEGIN TRUSTED_CERTIFICATE-----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+-----END TRUSTED_CERTIFICATE-----
+
+-----BEGIN TIME-----
+MTUwMzAyMTIwMDAwWg==
+-----END TIME-----
+
+-----BEGIN VERIFY_RESULT-----
+U1VDQ0VTUw==
+-----END VERIFY_RESULT-----
diff --git a/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem b/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem
index f008c4e..2cfe408 100644
--- a/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem
+++ b/net/data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-target-has-keycertsign-but-not-ca.py]
+[Created by: generate-target-has-keycertsign-but-not-ca.py]
-Certificate chain with 1 intermediary, a trusted root, and a target
+Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is not a CA, and yet has the keyCertSign bit set. Verification
is expected to fail, since keyCertSign should only be asserted when CA is
true.
@@ -10,7 +10,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -19,80 +19,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a6:ec:9f:55:56:11:c4:7a:fc:00:75:b9:b4:bb:
- 08:8f:8f:88:ad:df:22:e4:5d:b4:f1:7d:af:a4:62:
- df:64:86:46:34:cb:a4:32:21:b0:53:7c:94:5e:8a:
- e6:6d:56:8b:28:93:23:79:ef:0b:7f:96:5a:19:09:
- 3a:b7:30:77:e3:db:54:a5:c0:f7:df:3c:bd:f5:26:
- 9f:ab:73:f9:c5:02:e8:67:cf:4d:d5:0e:31:4d:ab:
- b7:d5:55:1a:f2:dc:1a:87:45:61:3c:ea:56:19:a3:
- a7:f7:34:82:30:6f:48:54:fd:ce:05:cc:fe:95:2b:
- a3:d8:b5:8f:20:26:60:e9:22:07:2e:e3:54:22:fe:
- e2:2e:fc:33:2b:9d:6d:ed:1f:56:6d:7b:4a:69:15:
- c0:f3:d5:0a:f8:c2:9b:82:b0:91:36:7c:5a:06:6b:
- eb:02:85:58:5c:15:14:c4:c9:72:8c:21:29:29:e7:
- 23:ca:56:07:7e:28:fa:f0:99:69:ad:10:bc:6c:43:
- 31:1c:d1:bc:79:51:dd:92:54:f9:f3:0c:f8:ee:a4:
- 8a:96:1d:17:ef:70:64:71:f4:30:54:b5:77:53:26:
- 11:80:ce:dc:cb:38:98:98:69:20:e1:ae:f7:1b:61:
- 53:32:59:27:8d:e9:84:b8:6f:c1:9f:03:95:ac:9a:
- 8c:35
+ 00:aa:e6:1b:b4:96:49:1d:88:99:c3:be:30:44:ed:
+ 2a:6e:80:18:66:5a:66:26:44:14:8f:1a:1d:69:81:
+ 8b:44:fb:ee:76:a1:c6:6d:e1:c1:ad:50:aa:99:a2:
+ d5:ce:ac:f4:86:04:93:02:d9:33:aa:24:ef:36:ef:
+ 5c:93:9a:69:00:45:95:c3:82:37:67:df:25:3e:ea:
+ dc:d0:fb:08:7f:89:aa:ad:df:a6:b6:c8:09:a3:74:
+ dc:17:12:b4:03:7d:7d:86:7d:57:1e:ff:d2:16:f7:
+ 9f:85:79:6e:5c:01:e3:cf:64:9d:55:e1:77:2c:43:
+ 89:30:d1:eb:d0:2e:68:e6:d1:c1:2a:92:58:c8:e2:
+ 9b:95:be:f6:d0:42:2d:38:fe:c8:17:a3:cf:37:76:
+ af:b1:0e:32:a5:6d:58:c9:de:4b:f4:2f:fa:8c:e4:
+ 9c:c6:1c:88:7c:55:01:4b:48:81:b0:0f:4f:19:f7:
+ fa:12:e7:9e:27:27:85:47:e6:b8:07:d9:59:a3:9a:
+ ac:3f:7d:a6:14:16:c8:8b:8d:70:d7:7b:fa:46:d4:
+ 32:fc:50:c7:83:82:e3:18:69:a5:a4:56:df:24:a3:
+ c5:7d:d5:f3:24:a4:67:22:4c:c8:b6:93:c2:05:fc:
+ 01:1b:ae:9d:a4:76:f4:bb:d6:b6:a9:32:2c:3a:fe:
+ 91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 64:67:70:1F:EA:D4:3D:30:5E:54:D3:BF:DF:83:3D:14:94:C3:DD:58
+ 55:B5:67:E4:CD:8D:51:AD:5E:A2:25:B0:94:40:72:52:F4:17:24:4E
X509v3 Authority Key Identifier:
- keyid:F3:98:98:C6:42:9E:AB:03:53:76:3F:43:FB:C9:9D:E4:0B:FF:BF:B5
+ keyid:71:AE:42:1C:8C:C1:FB:35:F7:C0:9F:63:95:A7:7B:4F:9D:8E:D2:7A
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment, Certificate Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 65:55:d3:04:1b:96:89:b8:44:32:01:15:ee:43:85:c0:c9:ee:
- f9:19:6c:ef:f4:5a:92:22:b2:62:b1:18:38:c5:42:06:e5:c7:
- be:83:9c:96:6b:72:d7:2a:0c:68:40:d6:30:91:4b:4e:e1:d4:
- 13:05:c5:5a:91:c1:11:ce:57:2e:31:87:2a:f3:70:e4:77:3a:
- 60:82:fa:58:56:18:1f:bf:4a:dd:89:48:c6:ab:4c:01:06:d5:
- ec:8d:aa:55:eb:07:0f:bd:bd:2b:67:f6:3f:43:15:c7:a4:77:
- 88:fa:f8:9f:3b:fa:0b:a2:fe:55:7c:f1:0b:49:da:b7:08:24:
- 34:68:db:a8:76:37:60:02:be:32:54:29:b4:b7:69:c4:05:66:
- 60:a4:86:9f:a1:13:d7:c3:f6:ed:a0:97:37:17:35:97:05:c9:
- ce:f9:af:e0:42:c3:e5:32:15:d7:1e:6c:3b:41:93:df:ba:b0:
- aa:60:e8:66:46:55:b3:00:65:e2:1c:70:85:c7:81:21:3f:8e:
- 41:69:19:a0:ac:8b:54:bc:d0:4b:78:db:f8:11:d7:93:eb:a4:
- 48:04:1b:76:96:e2:ae:d5:2b:dd:ea:e4:a5:02:ca:02:86:11:
- 82:cc:3c:70:10:3a:35:81:0e:52:ad:71:11:be:d9:f2:9c:3f:
- 85:53:b8:df
+ 25:e8:87:e7:07:ba:bd:47:c3:dd:5a:3c:29:bc:af:cb:fb:cd:
+ c6:55:e6:9c:7b:cd:0e:8f:1a:0a:e4:cb:06:db:42:44:02:e5:
+ 37:6e:1a:a3:7d:23:96:c6:b2:67:cb:5a:1e:71:a1:e3:4f:15:
+ 80:7f:a1:0d:59:60:b0:6f:c9:ab:0f:ef:20:d3:c2:45:e0:99:
+ aa:7e:e1:b7:31:dc:4b:b2:16:78:c5:06:27:a8:5e:c5:7b:3b:
+ dc:81:81:0d:eb:31:13:d5:4b:23:2e:4e:2c:86:fd:ce:58:96:
+ b5:cc:33:80:5c:7b:8a:ce:74:97:aa:df:fc:7c:1e:42:7d:12:
+ 58:bb:84:0f:2d:30:7c:a9:0c:1e:5c:c4:c6:ce:2b:c0:9d:bb:
+ 7d:c2:51:04:5d:70:c3:63:43:59:57:40:e4:69:52:be:72:79:
+ b4:c5:74:51:30:af:9c:30:8e:33:89:be:69:69:4a:01:03:07:
+ d9:df:8b:0c:69:ff:cc:57:45:7c:c6:23:e5:4a:1f:19:94:19:
+ 25:9d:eb:87:04:51:06:ba:9c:6b:72:da:2b:05:ef:72:21:e9:
+ 95:5e:61:83:6a:7a:b6:30:f8:97:a1:99:dd:12:ea:47:50:ee:
+ 26:02:3b:81:94:a8:19:29:a7:ad:b6:7c:28:10:53:09:53:a4:
+ 61:74:57:ed
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7J9V
-VhHEevwAdbm0uwiPj4it3yLkXbTxfa+kYt9khkY0y6QyIbBTfJReiuZtVosokyN5
-7wt/lloZCTq3MHfj21SlwPffPL31Jp+rc/nFAuhnz03VDjFNq7fVVRry3BqHRWE8
-6lYZo6f3NIIwb0hU/c4FzP6VK6PYtY8gJmDpIgcu41Qi/uIu/DMrnW3tH1Zte0pp
-FcDz1Qr4wpuCsJE2fFoGa+sChVhcFRTEyXKMISkp5yPKVgd+KPrwmWmtELxsQzEc
-0bx5Ud2SVPnzDPjupIqWHRfvcGRx9DBUtXdTJhGAztzLOJiYaSDhrvcbYVMyWSeN
-6YS4b8GfA5Wsmow1AgMBAAGjgekwgeYwHQYDVR0OBBYEFGRncB/q1D0wXlTTv9+D
-PRSUw91YMB8GA1UdIwQYMBaAFPOYmMZCnqsDU3Y/Q/vJneQL/7+1MD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgKkMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAZVXTBBuWibhEMgEV7kOF
-wMnu+Rls7/RakiKyYrEYOMVCBuXHvoOclmty1yoMaEDWMJFLTuHUEwXFWpHBEc5X
-LjGHKvNw5Hc6YIL6WFYYH79K3YlIxqtMAQbV7I2qVesHD729K2f2P0MVx6R3iPr4
-nzv6C6L+VXzxC0natwgkNGjbqHY3YAK+MlQptLdpxAVmYKSGn6ET18P27aCXNxc1
-lwXJzvmv4ELD5TIV1x5sO0GT37qwqmDoZkZVswBl4hxwhceBIT+OQWkZoKyLVLzQ
-S3jb+BHXk+ukSAQbdpbirtUr3erkpQLKAoYRgsw8cBA6NYEOUq1xEb7Z8pw/hVO4
-3w==
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgKkMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAJeiH5we6vUfD3Vo8Kbyv
+y/vNxlXmnHvNDo8aCuTLBttCRALlN24ao30jlsayZ8taHnGh408VgH+hDVlgsG/J
+qw/vINPCReCZqn7htzHcS7IWeMUGJ6hexXs73IGBDesxE9VLIy5OLIb9zliWtcwz
+gFx7is50l6rf/HweQn0SWLuEDy0wfKkMHlzExs4rwJ27fcJRBF1ww2NDWVdA5GlS
+vnJ5tMV0UTCvnDCOM4m+aWlKAQMH2d+LDGn/zFdFfMYj5UofGZQZJZ3rhwRRBrqc
+a3LaKwXvciHplV5hg2p6tjD4l6GZ3RLqR1DuJgI7gZSoGSmnrbZ8KBBTCVOkYXRX
+7Q==
-----END CERTIFICATE-----
Certificate:
@@ -104,35 +104,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a8:d0:63:48:13:03:82:fe:27:31:f5:c0:25:67:
- 0e:46:56:3b:d0:db:01:06:88:ae:64:12:2a:b3:8f:
- 79:c1:20:87:75:e7:11:2d:97:09:b4:55:e6:c4:14:
- 7e:61:4e:98:6c:1d:dc:ec:2c:ef:16:40:99:d1:29:
- dd:0d:74:77:c7:f9:2f:5f:bd:55:63:35:3c:a2:36:
- e1:42:12:49:a1:83:0b:7b:53:f1:9d:53:02:97:3e:
- cf:27:50:2e:41:63:3a:6f:c2:b0:2a:b6:f9:bd:bb:
- d8:0a:42:0d:99:e5:5a:ea:c8:26:bc:54:6f:b6:36:
- d2:28:d4:d6:53:b5:f6:0e:8d:dd:e0:46:98:32:61:
- 42:20:ee:44:f0:a1:06:e4:9e:8c:c3:b6:cd:1b:7e:
- ef:3c:68:d6:80:5e:49:b4:66:3f:2a:5c:e1:c3:fd:
- 43:ce:b7:c7:ec:fa:1f:1d:94:e4:21:4e:51:5f:5d:
- 5a:fd:3f:84:a5:15:2a:64:2c:d5:70:4f:24:dd:96:
- 67:43:c6:1d:62:53:ed:2f:ef:64:8c:a9:b2:c3:c7:
- f3:a2:55:08:ed:dc:2a:5f:51:50:05:59:e8:e2:0e:
- cf:8d:06:5b:7b:19:56:b9:3b:dc:75:ce:b0:4e:74:
- 62:d7:31:a4:7b:1f:44:ca:3f:79:8d:5c:b7:41:a6:
- c0:bf
+ 00:c4:8f:d1:37:69:c5:65:2a:c8:df:6e:82:4d:1a:
+ ea:2c:59:9d:43:07:8b:d1:c3:01:3a:1d:7a:9f:81:
+ ad:b8:fb:10:35:ae:84:80:07:69:5b:47:eb:af:1c:
+ 7b:43:21:f3:3c:13:8a:3b:62:c0:20:fa:96:06:9b:
+ 50:04:82:05:c2:7a:e3:53:d1:34:ab:2e:94:a9:6b:
+ 5f:6c:a9:66:0d:df:d0:73:79:f0:bd:ac:9c:99:68:
+ e7:1c:25:6f:c6:68:36:07:99:57:23:17:a8:8e:4e:
+ 8c:b9:41:ef:25:7e:92:3d:08:8a:82:c2:de:fe:a3:
+ cc:05:ed:b5:8b:b8:2f:09:eb:87:29:4d:55:f1:4e:
+ ee:3a:91:54:dc:6f:6a:9e:d8:17:2a:3a:46:00:65:
+ f4:4d:ae:26:35:72:97:06:41:ef:4e:bd:af:83:ec:
+ 9b:e2:96:24:61:2b:88:71:77:a7:e8:cf:2e:3e:79:
+ 5b:a2:33:11:94:aa:e7:65:6b:06:a2:4e:94:c8:d7:
+ 56:0f:cc:12:b9:9c:c1:b5:f6:bf:2a:a0:f8:b1:74:
+ 34:54:0e:cb:f0:87:87:f6:93:3f:f4:5f:10:81:90:
+ 78:51:ae:41:19:6e:c9:89:8c:9d:d9:85:64:18:de:
+ e5:d6:8c:a8:5a:4b:60:b0:44:5f:7a:1e:f4:d1:5b:
+ 94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- F3:98:98:C6:42:9E:AB:03:53:76:3F:43:FB:C9:9D:E4:0B:FF:BF:B5
+ 71:AE:42:1C:8C:C1:FB:35:F7:C0:9F:63:95:A7:7B:4F:9D:8E:D2:7A
X509v3 Authority Key Identifier:
- keyid:97:E9:16:F3:C4:AD:14:F3:56:CD:F3:E6:E5:60:D4:8F:EF:F7:BA:06
+ keyid:F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -147,41 +147,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 05:1f:e8:41:f2:76:1f:cd:2a:92:f9:cc:61:a9:6f:14:40:12:
- 69:19:1c:44:1d:3e:2e:c5:d0:a8:25:e3:bc:62:a3:6c:0f:e8:
- b9:dc:b0:92:cd:7a:ae:1d:4e:de:cc:90:3f:97:98:d4:d4:b0:
- a2:73:f7:b4:83:94:fb:ac:83:d3:39:af:13:64:61:bd:80:8d:
- dc:de:af:50:1a:15:12:c2:99:04:d4:c6:b8:31:12:2c:15:0a:
- 7c:13:ad:c8:be:37:fb:fa:43:ae:70:fd:64:70:a8:fb:77:fd:
- 09:7e:7e:e1:ff:27:e6:91:d8:c4:62:54:ad:cd:04:51:b0:da:
- 09:df:99:ac:91:0b:f8:31:e3:2e:18:64:f4:76:55:dd:d9:b3:
- 90:3a:07:91:e5:89:f7:83:48:15:5d:b3:bb:76:e6:d6:4a:1f:
- 3b:a4:3e:89:36:de:a8:80:09:2c:1f:23:a7:8a:cb:c3:e7:46:
- f3:f3:1e:0f:8b:88:bb:a9:87:9e:a7:64:2e:64:be:48:c1:91:
- d2:ef:c1:82:b9:1a:f4:08:d9:b1:a0:1f:ff:16:af:c4:b2:bc:
- 01:0f:e4:a0:f0:eb:81:aa:37:32:70:61:16:52:01:f6:39:10:
- a3:b0:8c:ec:2c:3f:ac:1b:cd:12:91:44:2f:6a:2e:4f:d4:8d:
- 92:a5:55:1b
+ 7b:29:bd:b8:c7:76:7f:09:90:d3:5d:e7:20:9e:f6:a0:bd:dc:
+ a1:cb:7c:c8:c8:17:d5:80:81:79:6a:88:e5:e8:c8:e3:56:37:
+ 60:3f:9c:2a:14:86:fe:e0:79:2f:d6:ec:67:51:d4:d8:65:9d:
+ ce:3b:59:b6:42:06:7b:c8:2a:79:7f:40:2f:ed:fb:50:d3:78:
+ 9e:99:fe:1d:fe:a1:4f:1d:58:c9:2d:b4:75:72:3f:6a:7a:db:
+ 2e:7b:81:3b:00:3f:e4:95:47:63:42:90:fd:25:ba:db:53:0a:
+ 01:37:28:78:7d:c6:cf:54:5e:2b:94:88:79:bb:4c:f7:06:e3:
+ 7a:be:44:29:c3:2e:17:ea:61:c4:8f:16:f0:b6:e0:60:fe:19:
+ 08:48:fd:a8:bf:95:ef:e5:32:1c:cf:e5:59:6b:04:1d:4c:6d:
+ ea:9b:4d:b4:f9:14:c2:00:a3:32:d6:1b:54:00:5a:17:29:8f:
+ 85:0c:eb:ed:41:70:6f:52:f8:37:92:ed:2b:ae:8c:b8:e4:51:
+ aa:68:62:12:9b:97:62:1a:5b:27:46:b5:5f:8c:0e:c9:93:15:
+ d7:d8:85:99:67:56:ef:31:4a:55:1f:67:7c:09:fc:03:c9:a0:
+ 67:b8:ed:32:d7:c0:0b:bd:b6:47:b9:50:78:f2:0a:ec:1d:bd:
+ d5:e9:06:b3
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNBjSBMD
-gv4nMfXAJWcORlY70NsBBoiuZBIqs495wSCHdecRLZcJtFXmxBR+YU6YbB3c7Czv
-FkCZ0SndDXR3x/kvX71VYzU8ojbhQhJJoYMLe1PxnVMClz7PJ1AuQWM6b8KwKrb5
-vbvYCkINmeVa6sgmvFRvtjbSKNTWU7X2Do3d4EaYMmFCIO5E8KEG5J6Mw7bNG37v
-PGjWgF5JtGY/Klzhw/1DzrfH7PofHZTkIU5RX11a/T+EpRUqZCzVcE8k3ZZnQ8Yd
-YlPtL+9kjKmyw8fzolUI7dwqX1FQBVno4g7PjQZbexlWuTvcdc6wTnRi1zGkex9E
-yj95jVy3QabAvwIDAQABo4HLMIHIMB0GA1UdDgQWBBTzmJjGQp6rA1N2P0P7yZ3k
-C/+/tTAfBgNVHSMEGDAWgBSX6RbzxK0U81bN8+blYNSP7/e6BjA3BggrBgEFBQcB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-AAUf6EHydh/NKpL5zGGpbxRAEmkZHEQdPi7F0Kgl47xio2wP6LncsJLNeq4dTt7M
-kD+XmNTUsKJz97SDlPusg9M5rxNkYb2Ajdzer1AaFRLCmQTUxrgxEiwVCnwTrci+
-N/v6Q65w/WRwqPt3/Ql+fuH/J+aR2MRiVK3NBFGw2gnfmayRC/gx4y4YZPR2Vd3Z
-s5A6B5HlifeDSBVds7t25tZKHzukPok23qiACSwfI6eKy8PnRvPzHg+LiLuph56n
-ZC5kvkjBkdLvwYK5GvQI2bGgH/8Wr8SyvAEP5KDw64GqNzJwYRZSAfY5EKOwjOws
-P6wbzRKRRC9qLk/UjZKlVRs=
+AHspvbjHdn8JkNNd5yCe9qC93KHLfMjIF9WAgXlqiOXoyONWN2A/nCoUhv7geS/W
+7GdR1Nhlnc47WbZCBnvIKnl/QC/t+1DTeJ6Z/h3+oU8dWMkttHVyP2p62y57gTsA
+P+SVR2NCkP0luttTCgE3KHh9xs9UXiuUiHm7TPcG43q+RCnDLhfqYcSPFvC24GD+
+GQhI/ai/le/lMhzP5VlrBB1MbeqbTbT5FMIAozLWG1QAWhcpj4UM6+1BcG9S+DeS
+7SuujLjkUapoYhKbl2IaWydGtV+MDsmTFdfYhZlnVu8xSlUfZ3wJ/APJoGe47TLX
+wAu9tke5UHjyCuwdvdXpBrM=
-----END CERTIFICATE-----
Certificate:
@@ -198,30 +198,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ba:52:6a:89:3e:75:9b:d6:ed:f4:d1:1c:fb:aa:
- 99:8f:5e:89:59:2a:75:5a:54:77:9c:b5:91:d5:2a:
- f8:8a:a3:74:d2:75:39:24:cc:c5:f7:42:83:11:a7:
- 6c:cd:c2:2b:e1:18:84:b6:26:d8:12:fd:e2:a8:6a:
- 4d:4d:8f:a1:25:07:08:d2:73:a0:17:c7:54:11:a5:
- fb:0e:36:cd:e2:24:a8:dc:85:a1:22:a2:7c:c3:20:
- 02:60:ec:40:ba:1e:5b:03:51:68:d7:f2:28:f6:3d:
- 3f:b3:30:34:0e:33:6c:44:c4:31:a9:ee:cf:42:96:
- c2:eb:06:52:92:86:80:b9:0b:99:41:4b:64:aa:b7:
- 55:2b:21:25:92:46:1d:e2:31:3d:0b:54:ad:a9:c7:
- 2a:29:be:5c:bb:ba:99:59:69:70:71:75:bb:9a:a1:
- 7c:fa:36:79:bd:b4:f3:6c:4b:6c:c9:ea:32:03:dd:
- 64:9e:94:82:33:d1:d9:f8:48:04:ae:79:35:5c:a4:
- 43:54:c1:ec:3c:97:bf:3a:40:f6:e6:9d:7b:bf:a1:
- 67:b0:59:de:78:ff:33:94:f2:2b:15:d0:0a:89:0c:
- 2c:ee:9f:dc:f8:48:f0:68:0c:19:59:86:86:41:1c:
- 19:02:89:4f:0c:ea:43:b2:a8:b9:c9:c1:1d:76:c0:
- 3d:19
+ 00:cd:6b:8f:1c:b6:4c:54:b3:0d:f7:e0:b8:5a:a6:
+ d3:cc:0b:63:89:cb:3a:5a:87:3c:39:65:aa:63:32:
+ 79:fe:5c:67:f6:00:8c:32:b6:75:01:2f:7b:45:d3:
+ a4:53:f4:7a:47:7e:2d:ca:5a:d2:22:eb:22:8c:02:
+ e3:c1:91:ad:71:f8:67:43:62:8f:f1:60:17:77:ea:
+ a3:d6:78:64:b2:58:c2:fd:20:e0:a2:06:d5:18:a8:
+ 36:9e:2e:b0:97:20:c7:72:a4:51:0d:d5:f0:f0:1f:
+ b2:05:8e:82:98:9e:b5:67:dd:55:bb:c1:03:e1:9f:
+ 45:73:74:d7:11:aa:5b:de:c1:5d:5e:f2:29:85:29:
+ 03:e3:14:fa:e8:91:f5:29:a3:8c:c0:78:1c:4c:18:
+ 2b:49:2b:20:31:1e:bf:e1:55:7f:ed:76:25:4d:95:
+ a5:40:4c:cc:f4:8e:de:85:d3:88:0a:86:27:95:f4:
+ c8:4b:00:8d:16:b7:33:e9:76:12:aa:85:43:1e:89:
+ bb:ae:16:f2:f1:26:c4:a7:b9:44:89:76:1b:1a:2c:
+ 34:50:4b:e0:68:bc:f1:fb:be:22:14:b0:2b:67:78:
+ 22:f0:71:07:43:21:a3:24:d7:4e:28:a0:7d:04:16:
+ b1:a2:d8:35:2a:2b:2e:13:8e:6b:e9:c9:7f:78:7e:
+ 98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 97:E9:16:F3:C4:AD:14:F3:56:CD:F3:E6:E5:60:D4:8F:EF:F7:BA:06
+ F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
X509v3 Authority Key Identifier:
- keyid:97:E9:16:F3:C4:AD:14:F3:56:CD:F3:E6:E5:60:D4:8F:EF:F7:BA:06
+ keyid:F7:A4:4C:CA:BB:81:7B:10:63:6B:CC:BC:73:ED:C6:1C:56:55:40:1C
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -236,41 +236,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- a5:32:dc:be:9a:58:7d:66:69:99:07:13:d9:ec:20:99:72:37:
- c1:8b:4d:e1:8e:79:0b:7f:ed:1c:89:a1:9b:18:66:bd:1b:fe:
- ec:74:f6:aa:7b:57:71:06:07:ea:02:41:6e:83:b4:68:39:15:
- c8:c5:16:d7:4e:10:75:f5:05:b4:f2:c6:e4:bd:b4:64:21:16:
- c8:14:dd:06:88:f7:81:89:76:44:c8:70:99:70:f2:67:e6:4c:
- 72:3e:75:24:d7:2f:83:b2:4e:6b:f8:4d:f0:e7:16:25:02:16:
- c3:fa:8a:9c:c2:75:60:6b:ed:40:1d:b2:14:97:6a:26:a1:72:
- b9:53:f1:95:fb:6e:d9:11:b3:d4:67:ff:ba:0a:06:c3:5b:fb:
- 84:e7:b1:48:07:fb:db:d7:6f:c9:7e:6f:e6:b4:3b:8c:e0:3c:
- 73:fe:80:8e:cd:35:3c:4f:51:f8:ac:fc:b4:d0:0a:5e:b9:d7:
- 95:f2:e6:fb:a8:de:25:ab:20:da:d5:e6:e2:d3:5b:6b:9b:db:
- 2c:77:0e:59:01:7a:29:07:1f:53:72:2b:f3:06:86:1b:04:a0:
- 01:82:aa:59:4f:a5:e6:8b:2a:01:24:8b:77:5b:bb:8d:36:94:
- 4a:02:ab:61:5c:0a:ba:87:ee:53:53:a7:5d:e3:6a:bc:73:9f:
- fe:e9:fc:9f
+ 50:5f:b0:32:ec:41:85:3d:75:ff:8d:05:17:be:20:98:81:da:
+ 48:39:17:20:24:a7:31:cf:63:35:90:29:26:d0:60:29:e1:68:
+ fe:35:fd:6c:61:c0:3a:cd:08:92:9b:cc:ad:73:d4:dd:a5:51:
+ 0e:a9:65:04:7d:16:77:8b:b8:b4:9d:fb:c4:7a:4a:ab:8a:9e:
+ d0:70:47:45:74:a4:57:ab:c2:cd:b3:c5:44:6b:7e:3b:78:8f:
+ 5b:7f:f0:f7:c3:ef:24:a2:40:fe:c6:71:cd:a8:a6:ac:63:22:
+ 57:39:f5:98:c3:91:79:bf:47:6a:0b:c6:b1:61:c6:35:1b:1c:
+ 10:cc:e7:bc:20:83:f6:48:26:4a:80:47:e0:22:fa:04:1f:b0:
+ 06:9c:54:fa:46:45:9b:d5:20:a2:f0:ee:be:b5:a2:83:92:86:
+ 5d:f5:40:f5:32:d0:85:35:eb:af:5d:9b:04:5d:21:b3:35:90:
+ e8:5f:0a:6c:90:85:eb:86:31:e4:89:81:c6:aa:73:4d:1e:3e:
+ af:40:07:f1:38:ae:30:ab:2d:aa:6d:2f:b2:1d:ff:d8:18:2e:
+ f3:d0:74:8e:ff:6d:24:97:30:cb:b6:e5:6f:cb:6b:c2:27:5e:
+ a5:f1:63:c0:d9:0d:c5:08:7f:86:8c:47:c4:9b:cb:e2:d9:da:
+ 17:51:5b:12
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpSaok+dZvW7fTRHPuq
-mY9eiVkqdVpUd5y1kdUq+IqjdNJ1OSTMxfdCgxGnbM3CK+EYhLYm2BL94qhqTU2P
-oSUHCNJzoBfHVBGl+w42zeIkqNyFoSKifMMgAmDsQLoeWwNRaNfyKPY9P7MwNA4z
-bETEManuz0KWwusGUpKGgLkLmUFLZKq3VSshJZJGHeIxPQtUranHKim+XLu6mVlp
-cHF1u5qhfPo2eb2082xLbMnqMgPdZJ6UgjPR2fhIBK55NVykQ1TB7DyXvzpA9uad
-e7+hZ7BZ3nj/M5TyKxXQCokMLO6f3PhI8GgMGVmGhkEcGQKJTwzqQ7KoucnBHXbA
-PRkCAwEAAaOByzCByDAdBgNVHQ4EFgQUl+kW88StFPNWzfPm5WDUj+/3ugYwHwYD
-VR0jBBgwFoAUl+kW88StFPNWzfPm5WDUj+/3ugYwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQClMty+mlh9
-ZmmZBxPZ7CCZcjfBi03hjnkLf+0ciaGbGGa9G/7sdPaqe1dxBgfqAkFug7RoORXI
-xRbXThB19QW08sbkvbRkIRbIFN0GiPeBiXZEyHCZcPJn5kxyPnUk1y+Dsk5r+E3w
-5xYlAhbD+oqcwnVga+1AHbIUl2omoXK5U/GV+27ZEbPUZ/+6CgbDW/uE57FIB/vb
-12/Jfm/mtDuM4Dxz/oCOzTU8T1H4rPy00ApeudeV8ub7qN4lqyDa1ebi01trm9ss
-dw5ZAXopBx9TcivzBoYbBKABgqpZT6XmiyoBJIt3W7uNNpRKAqthXAq6h+5TU6dd
-42q8c5/+6fyf
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBQX7Ay7EGF
+PXX/jQUXviCYgdpIORcgJKcxz2M1kCkm0GAp4Wj+Nf1sYcA6zQiSm8ytc9TdpVEO
+qWUEfRZ3i7i0nfvEekqrip7QcEdFdKRXq8LNs8VEa347eI9bf/D3w+8kokD+xnHN
+qKasYyJXOfWYw5F5v0dqC8axYcY1GxwQzOe8IIP2SCZKgEfgIvoEH7AGnFT6RkWb
+1SCi8O6+taKDkoZd9UD1MtCFNeuvXZsEXSGzNZDoXwpskIXrhjHkiYHGqnNNHj6v
+QAfxOK4wqy2qbS+yHf/YGC7z0HSO/20klzDLtuVvy2vCJ16l8WPA2Q3FCH+GjEfE
+m8vi2doXUVsS
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem b/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
index 34c777c..0628545 100644
--- a/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
+++ b/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-target-has-pathlen-but-not-ca.py]
+[Created by: generate-target-has-pathlen-but-not-ca.py]
-Certificate chain with 1 intermediary, a trusted root, and a target
+Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is not a CA, and yet has a pathlen set. Verification is
expected to fail, since pathlen should only be set for CAs.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,82 +18,82 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:e4:03:84:57:5e:99:af:4e:fe:20:15:48:81:f8:
- 76:01:11:a3:33:b0:2e:ff:3d:ec:69:be:76:8d:9b:
- c6:9b:5d:cb:b1:a6:eb:84:60:8e:99:fd:31:c1:66:
- 9f:bb:3d:bb:16:e0:c8:d8:f5:cd:23:10:8a:c5:96:
- e7:df:ed:96:d9:76:eb:82:23:e2:8c:7d:00:a9:71:
- ff:71:df:2e:14:b4:ab:3e:29:e8:11:c2:44:75:f9:
- 9f:e9:cd:cf:2f:0c:db:7b:47:b2:80:c1:90:45:a8:
- 01:6d:26:88:ff:3b:d8:54:7b:cd:ff:dc:aa:bd:38:
- 49:b0:02:d8:80:e2:79:07:33:5a:74:cd:ce:8e:df:
- 75:33:41:e7:5e:fb:25:c0:45:fb:48:32:78:47:1a:
- 70:03:d6:56:66:32:6e:2d:35:6b:76:8c:a6:33:4c:
- 1d:60:91:10:5f:70:f3:13:ec:b4:03:4f:cf:99:f9:
- 8e:e8:99:85:23:0b:cc:3d:17:5b:ec:df:aa:eb:8a:
- a7:52:67:10:dd:66:c5:b2:95:9f:72:2b:4e:fa:19:
- 31:99:62:d7:60:fd:9d:9e:e0:ca:29:13:ec:e3:c6:
- af:47:e0:84:73:ab:3b:2d:58:f5:d8:d1:0c:ee:f6:
- 23:b1:5c:55:1e:33:40:87:84:f9:d8:8a:ac:ac:46:
- ed:93
+ 00:ca:73:f9:c5:cb:c6:2c:26:07:85:8f:4b:a4:ac:
+ 52:18:84:42:ca:cb:34:59:92:5a:d8:f7:1f:df:51:
+ ed:6a:d5:e2:e1:dc:06:fb:72:0d:f3:e7:9f:38:0d:
+ 46:f4:19:77:31:33:4c:5b:ac:dd:6c:8c:06:68:4c:
+ 48:84:e2:c7:17:28:a9:0b:4e:07:07:b6:7b:cc:a9:
+ ef:6c:ae:22:6e:03:d6:d4:5b:f1:d9:aa:9e:61:54:
+ c7:14:79:cb:d6:c2:8f:da:87:e8:ae:d2:b3:66:4f:
+ d3:4c:56:b8:e0:80:f8:45:b7:11:35:53:ec:d4:49:
+ f8:05:70:f3:5b:56:b2:05:6d:3e:46:f8:be:67:71:
+ 48:a6:65:dd:55:62:a3:23:b0:94:e1:f2:3b:17:54:
+ 40:cc:37:90:d9:78:5a:d8:29:99:3f:02:16:a8:5b:
+ 5e:64:f4:f2:84:ad:25:c6:cf:2c:5b:e7:6c:bf:88:
+ 63:0c:8a:9b:fb:d9:b1:30:5a:21:74:1f:e4:5a:54:
+ 23:3a:a1:02:34:97:2c:a2:af:08:05:f0:db:52:58:
+ 7f:86:80:12:a3:f9:78:c0:ad:d6:8b:12:53:72:55:
+ 24:ca:3e:70:f2:7f:78:8f:b7:a1:32:f1:2c:7f:23:
+ db:7b:ce:79:cf:cc:6d:d8:f7:14:54:5c:e0:db:7d:
+ 60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 3F:B5:B3:28:77:02:A4:B0:9D:4B:DE:37:42:2E:E6:59:0A:D8:38:84
+ 99:D8:C1:91:A6:13:EB:0F:B4:6F:F2:B0:C4:0C:D9:0A:25:8E:53:10
X509v3 Authority Key Identifier:
- keyid:77:62:DF:59:FD:79:52:7B:9A:CF:99:3C:7C:BD:87:CE:41:27:57:F6
+ keyid:5B:9F:DF:D5:C6:FF:4F:39:52:EA:EF:97:5B:C1:ED:E1:CC:44:4E:B6
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
- Digital Signature, Key Encipherment, Certificate Sign
+ Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE, pathlen:1
Signature Algorithm: sha256WithRSAEncryption
- 0f:6a:84:9e:41:23:9d:77:90:68:4b:93:39:8e:74:cc:f5:3f:
- 0a:1c:8f:d9:45:bc:5d:42:d1:23:11:e6:a6:2f:52:58:23:5f:
- ba:ef:a2:3a:c7:3e:bd:24:a3:47:d3:5a:f7:00:37:0d:a4:c8:
- cd:ee:92:73:67:4c:d0:3f:63:08:c4:90:a8:42:5f:0e:cb:1e:
- 96:ae:c7:16:5f:4d:69:e4:3c:8c:a9:47:7e:ad:aa:52:dd:b3:
- 77:d8:f6:bf:f3:e3:c5:46:ec:c3:21:af:52:62:76:e5:99:0a:
- ba:a2:1c:54:62:8f:3f:0b:b8:c1:9e:e3:6e:50:4e:36:17:d0:
- ee:e1:a2:2e:29:c0:1e:a3:94:a3:69:1f:4d:13:50:4c:44:5c:
- 0f:c3:80:94:3f:6f:60:02:98:da:4f:3a:40:e4:ee:01:af:f1:
- b3:7b:4a:2e:3a:57:3b:8e:9c:8a:0c:3e:4c:49:e2:22:09:ef:
- dc:ea:fc:e2:04:20:5c:8e:a5:82:a9:0e:83:b3:ef:cc:09:ff:
- a9:bc:fa:47:0f:61:3f:7f:d6:df:ec:57:b2:da:16:70:42:8e:
- 68:28:f5:4d:cb:fb:85:16:e4:78:3b:5e:8a:96:f0:73:d6:f7:
- b0:ce:4d:18:6a:b9:1b:99:33:01:15:ce:90:c2:13:8e:14:e6:
- 0e:32:84:28
+ 70:43:96:4c:98:6f:28:18:8a:59:39:82:cc:24:47:f8:58:f8:
+ f8:43:04:09:1e:a6:51:59:bc:60:36:ff:a1:41:51:e1:4c:40:
+ 6b:5e:8b:73:3c:c4:37:65:f4:b0:57:01:8f:c6:ba:0c:5b:97:
+ a1:6b:3a:ea:53:79:8f:9a:99:f8:ca:01:a5:15:ac:60:4c:a7:
+ a7:68:07:72:3c:ed:06:70:d8:a4:d0:c0:5f:88:f2:6a:c0:a1:
+ 2b:e7:58:68:23:d3:7e:f0:98:99:7d:3d:91:25:e3:84:4f:ef:
+ 55:a4:ee:f7:1f:dc:f2:af:a8:74:96:6c:26:c4:d8:b6:84:dc:
+ b7:e7:7d:9d:2b:7b:3b:e6:e4:ad:76:e0:aa:ea:a4:26:97:4b:
+ 20:cd:b1:bd:a8:6e:b3:08:47:31:a2:01:7b:b5:6c:72:d0:f0:
+ 12:ac:bd:4f:be:de:23:cb:34:14:d2:11:42:3f:d5:70:76:4c:
+ 99:db:ce:bc:0e:d5:2e:4b:6f:c3:1b:5d:c6:58:89:74:5f:1d:
+ 62:cf:df:1e:4c:13:08:88:cb:66:6f:00:c2:c5:6f:bb:b4:9e:
+ 1f:8a:7d:9d:0b:a6:11:6f:28:bb:5e:46:ab:71:d4:eb:00:8c:
+ 71:6b:32:85:3d:17:ca:d0:15:90:66:7a:b2:96:0c:c1:9d:2e:
+ 53:36:97:5b
-----BEGIN CERTIFICATE-----
MIIDnjCCAoagAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkA4RX
-XpmvTv4gFUiB+HYBEaMzsC7/PexpvnaNm8abXcuxpuuEYI6Z/THBZp+7PbsW4MjY
-9c0jEIrFluff7ZbZduuCI+KMfQCpcf9x3y4UtKs+KegRwkR1+Z/pzc8vDNt7R7KA
-wZBFqAFtJoj/O9hUe83/3Kq9OEmwAtiA4nkHM1p0zc6O33UzQede+yXARftIMnhH
-GnAD1lZmMm4tNWt2jKYzTB1gkRBfcPMT7LQDT8+Z+Y7omYUjC8w9F1vs36rriqdS
-ZxDdZsWylZ9yK076GTGZYtdg/Z2e4MopE+zjxq9H4IRzqzstWPXY0Qzu9iOxXFUe
-M0CHhPnYiqysRu2TAgMBAAGjgfowgfcwHQYDVR0OBBYEFD+1syh3AqSwnUveN0Iu
-5lkK2DiEMB8GA1UdIwQYMBaAFHdi31n9eVJ7ms+ZPHy9h85BJ1f2MD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgKkMB0GA1UdJQQWMBQGCCsGAQUF
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAgEBMA0GCSqGSIb3DQEBCwUAA4IB
-AQAPaoSeQSOdd5BoS5M5jnTM9T8KHI/ZRbxdQtEjEeamL1JYI1+676I6xz69JKNH
-01r3ADcNpMjN7pJzZ0zQP2MIxJCoQl8Oyx6WrscWX01p5DyMqUd+rapS3bN32Pa/
-8+PFRuzDIa9SYnblmQq6ohxUYo8/C7jBnuNuUE42F9Du4aIuKcAeo5SjaR9NE1BM
-RFwPw4CUP29gApjaTzpA5O4Br/Gze0ouOlc7jpyKDD5MSeIiCe/c6vziBCBcjqWC
-qQ6Ds+/MCf+pvPpHD2E/f9bf7Fey2hZwQo5oKPVNy/uFFuR4O16KlvBz1vewzk0Y
-arkbmTMBFc6QwhOOFOYOMoQo
+AQBwQ5ZMmG8oGIpZOYLMJEf4WPj4QwQJHqZRWbxgNv+hQVHhTEBrXotzPMQ3ZfSw
+VwGPxroMW5ehazrqU3mPmpn4ygGlFaxgTKenaAdyPO0GcNik0MBfiPJqwKEr51ho
+I9N+8JiZfT2RJeOET+9VpO73H9zyr6h0lmwmxNi2hNy3532dK3s75uStduCq6qQm
+l0sgzbG9qG6zCEcxogF7tWxy0PASrL1Pvt4jyzQU0hFCP9VwdkyZ2868DtUuS2/D
+G13GWIl0Xx1iz98eTBMIiMtmbwDCxW+7tJ4fin2dC6YRbyi7XkarcdTrAIxxazKF
+PRfK0BWQZnqylgzBnS5TNpdb
-----END CERTIFICATE-----
Certificate:
@@ -105,35 +105,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cd:be:5e:d6:3b:af:1c:51:0b:b8:31:41:16:86:
- a1:04:5b:d4:c3:d1:e8:16:12:b0:7a:f8:d4:b6:61:
- 9b:5a:51:bb:7d:a5:e6:cf:70:48:1d:4e:21:74:de:
- f8:de:c7:8d:b2:e1:b5:a0:b9:4a:7c:76:b1:24:e6:
- 6d:7b:17:79:28:99:85:44:d5:9c:c7:b3:7c:64:fd:
- 3a:97:76:94:88:aa:dc:eb:c3:6e:ab:43:42:d2:89:
- b3:cb:56:dc:89:f6:4c:65:e0:be:1e:72:01:c7:c6:
- 50:e6:5b:df:a2:de:4f:43:9d:3d:e8:c8:25:2e:50:
- 1b:61:0e:2c:45:22:f0:93:7b:d6:05:9f:a4:23:fb:
- 78:b1:15:49:fe:eb:73:29:b0:eb:9f:e8:6e:3b:92:
- 86:c0:d0:20:e7:4c:b7:69:7f:d3:0f:54:39:05:3a:
- 46:9b:47:4d:fa:7e:8c:ce:45:a5:1f:2c:6f:f7:33:
- 36:10:bc:67:d9:b6:15:86:71:5f:7a:7a:af:4e:71:
- 59:1d:46:d1:76:96:d8:4b:fc:a0:b9:11:e4:5f:5d:
- fe:f4:bf:c8:48:54:66:60:be:4b:8b:70:4a:33:e0:
- ea:02:7a:cd:a1:37:3d:67:ad:93:f3:d0:a5:9e:f2:
- a4:ff:18:3e:77:97:d2:2c:58:12:a5:d6:55:03:6d:
- a1:cb
+ 00:c8:43:a7:fe:04:ff:78:d4:be:60:bd:16:7d:46:
+ a2:cf:a8:74:42:6b:2b:49:13:61:2e:78:e7:7c:49:
+ 52:0b:df:bf:b0:e1:5e:dd:f5:39:99:11:ff:d2:14:
+ 8f:db:de:10:55:90:29:05:b3:49:db:80:87:d1:82:
+ 6b:15:97:4b:da:5e:d7:da:11:0c:84:1e:db:d9:57:
+ 4d:52:cf:31:a0:1f:bd:4f:79:22:7a:ee:5a:ae:9d:
+ 22:df:71:d3:20:12:e5:c8:7e:1e:76:d3:6f:07:6e:
+ 5c:c3:89:11:a2:35:50:05:4d:6f:30:d8:3c:ef:38:
+ 80:51:e3:ee:7d:66:81:7f:7c:c4:e7:d0:d4:53:1d:
+ 00:3d:03:cb:87:f4:3d:b9:13:cd:16:ef:b2:51:3f:
+ 1c:96:0a:71:90:ca:25:c4:10:71:aa:ba:27:c8:67:
+ 94:af:63:7c:29:2a:2e:a8:4e:03:7e:6c:5c:2f:96:
+ 8d:9d:ca:c5:6f:f1:e7:8d:92:a9:ed:aa:87:3a:74:
+ 12:c7:ea:3f:ad:a2:6a:76:d8:f6:c9:96:27:6e:8b:
+ a3:b8:cc:d4:2b:9b:61:be:2b:11:c5:bb:da:ef:14:
+ 23:5d:5d:96:69:c0:a7:7a:16:db:3a:4e:e4:22:84:
+ 55:02:26:7b:a5:8e:84:12:e4:36:fc:c5:07:d9:ee:
+ c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 77:62:DF:59:FD:79:52:7B:9A:CF:99:3C:7C:BD:87:CE:41:27:57:F6
+ 5B:9F:DF:D5:C6:FF:4F:39:52:EA:EF:97:5B:C1:ED:E1:CC:44:4E:B6
X509v3 Authority Key Identifier:
- keyid:AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+ keyid:8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -148,41 +148,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 4f:dc:80:b5:cb:13:5d:2d:af:b6:6d:7b:51:4e:81:36:16:d1:
- 36:bb:5d:37:be:6e:4d:40:87:57:5e:db:a9:75:ae:46:e4:74:
- c4:dc:e5:fd:bc:04:2f:ca:7f:b4:67:db:65:f7:d6:37:94:74:
- a4:f9:8a:e2:da:d5:64:9e:00:4d:85:39:07:6f:e0:96:d7:2b:
- ef:73:d3:a4:77:6b:e1:ee:d4:f7:54:ba:30:23:a3:95:2c:c8:
- 38:21:0c:14:fb:f4:44:27:9a:f3:81:2f:89:59:3e:12:52:52:
- bf:4e:7c:93:7c:db:b7:df:9b:fb:b6:3c:70:fc:67:07:a6:42:
- 99:6d:95:c0:64:f8:99:50:aa:2f:b6:19:d8:63:80:0f:22:c3:
- b4:d6:b0:09:9b:62:a0:37:0e:21:e5:ef:c2:61:ed:7e:2f:f5:
- 7d:09:19:f4:6f:8a:c8:7a:0e:0a:44:41:9b:22:01:d4:7c:c9:
- a8:da:d5:91:d9:a6:1f:1f:b8:4a:6a:bd:bc:7e:36:33:7a:e0:
- 9c:58:c1:75:71:9f:14:04:ce:c9:1f:e6:dc:40:95:ee:ed:b3:
- 6c:77:5c:31:9a:90:bd:99:80:ab:8f:ef:8d:a6:e0:64:ba:16:
- 03:a2:21:5d:75:bd:d9:50:7f:d2:02:44:58:9e:b5:c2:1d:37:
- 50:8f:27:21
+ 14:37:73:58:3c:37:40:b3:ff:a3:e4:f3:2d:f1:26:6b:c9:82:
+ 17:c5:97:4d:bd:84:6a:19:25:08:20:a9:7d:38:fb:3d:a4:7f:
+ 06:80:7e:fb:6e:7e:bf:26:90:4b:96:ab:a7:f9:49:a5:d6:77:
+ 67:b5:ab:bb:ad:ea:84:5a:43:13:f9:b3:1a:80:b1:59:cc:d4:
+ 1d:33:e8:0d:b0:af:9a:80:44:0e:a6:01:f3:a4:e2:87:2b:db:
+ 47:be:0f:28:08:d9:ab:7c:d9:4c:86:d0:ba:bc:1b:dc:99:9b:
+ 33:ea:a7:3e:ef:52:b8:70:a8:27:e7:83:59:cd:57:38:7f:a1:
+ 36:53:4f:a0:1b:69:7d:e4:fa:9f:2b:52:50:09:23:62:c6:c0:
+ 01:a6:85:76:45:80:6a:b6:54:bd:60:5d:5a:3a:04:92:ab:e3:
+ bd:0c:94:7f:5f:79:9c:3f:6e:12:c3:96:b0:78:44:9b:03:1e:
+ 79:11:fb:8d:a5:1d:55:c9:b3:e5:a0:26:18:10:68:92:b8:54:
+ 68:d0:2d:e1:99:0c:08:9c:cc:40:50:34:69:9f:13:e6:d7:87:
+ 85:e7:57:63:3e:17:0f:ce:02:7b:78:e5:18:ef:1a:55:b1:6a:
+ 55:f8:44:3e:92:1d:08:a1:7d:bb:fc:00:be:e3:1b:83:aa:b8:
+ 75:f0:05:45
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb5e1juv
-HFELuDFBFoahBFvUw9HoFhKwevjUtmGbWlG7faXmz3BIHU4hdN743seNsuG1oLlK
-fHaxJOZtexd5KJmFRNWcx7N8ZP06l3aUiKrc68Nuq0NC0omzy1bcifZMZeC+HnIB
-x8ZQ5lvfot5PQ5096MglLlAbYQ4sRSLwk3vWBZ+kI/t4sRVJ/utzKbDrn+huO5KG
-wNAg50y3aX/TD1Q5BTpGm0dN+n6MzkWlHyxv9zM2ELxn2bYVhnFfenqvTnFZHUbR
-dpbYS/yguRHkX13+9L/ISFRmYL5Li3BKM+DqAnrNoTc9Z62T89ClnvKk/xg+d5fS
-LFgSpdZVA22hywIDAQABo4HLMIHIMB0GA1UdDgQWBBR3Yt9Z/XlSe5rPmTx8vYfO
-QSdX9jAfBgNVHSMEGDAWgBSqFrz5fq30cdbUlNlhSwE4spWLhDA3BggrBgEFBQcB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-AE/cgLXLE10tr7Zte1FOgTYW0Ta7XTe+bk1Ah1de26l1rkbkdMTc5f28BC/Kf7Rn
-22X31jeUdKT5iuLa1WSeAE2FOQdv4JbXK+9z06R3a+Hu1PdUujAjo5UsyDghDBT7
-9EQnmvOBL4lZPhJSUr9OfJN827ffm/u2PHD8ZwemQpltlcBk+JlQqi+2GdhjgA8i
-w7TWsAmbYqA3DiHl78Jh7X4v9X0JGfRvish6DgpEQZsiAdR8yaja1ZHZph8fuEpq
-vbx+NjN64JxYwXVxnxQEzskf5txAle7ts2x3XDGakL2ZgKuP742m4GS6FgOiIV11
-vdlQf9ICRFietcIdN1CPJyE=
+ABQ3c1g8N0Cz/6Pk8y3xJmvJghfFl029hGoZJQggqX04+z2kfwaAfvtufr8mkEuW
+q6f5SaXWd2e1q7ut6oRaQxP5sxqAsVnM1B0z6A2wr5qARA6mAfOk4ocr20e+DygI
+2at82UyG0Lq8G9yZmzPqpz7vUrhwqCfng1nNVzh/oTZTT6AbaX3k+p8rUlAJI2LG
+wAGmhXZFgGq2VL1gXVo6BJKr470MlH9feZw/bhLDlrB4RJsDHnkR+42lHVXJs+Wg
+JhgQaJK4VGjQLeGZDAiczEBQNGmfE+bXh4XnV2M+Fw/OAnt45RjvGlWxalX4RD6S
+HQihfbv8AL7jG4OquHXwBUU=
-----END CERTIFICATE-----
Certificate:
@@ -199,30 +199,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:eb:e2:5f:c7:d4:38:fe:e8:6d:64:82:8e:c6:d8:
- d7:a5:a4:ca:65:5f:55:b6:c5:5c:9c:f6:cc:af:d6:
- 4b:ec:a1:5c:c3:55:08:19:1c:0e:99:4a:4d:b2:14:
- 22:36:a0:db:eb:c3:1c:6f:d6:05:69:a5:5b:61:59:
- 7a:fb:88:da:28:1d:95:c6:fe:31:51:06:ac:f7:41:
- a6:10:08:25:7f:41:f1:01:39:48:27:c1:34:73:2f:
- c2:05:b1:97:42:80:de:d4:3a:44:db:a0:34:8c:b8:
- 5c:de:ab:42:c8:1e:f1:08:7e:10:3a:ee:16:8e:61:
- ee:ab:aa:f5:7a:2b:ab:af:a2:69:da:f4:b5:95:32:
- 17:bc:cf:ba:ad:a7:7b:fc:ea:9b:43:bc:ae:07:c3:
- 92:15:ce:4a:fb:ee:33:e6:89:7d:09:88:f9:a5:af:
- 0b:4d:c1:7f:28:30:d8:93:75:92:b5:27:2c:01:bd:
- 52:05:5d:42:a5:dc:f3:1f:1e:b2:3c:a1:17:19:9b:
- 30:ec:18:85:41:e3:72:d2:93:ef:a0:4d:0b:d4:8a:
- fa:89:0d:b6:46:fe:bc:f0:82:de:99:4c:1e:57:1c:
- 8d:71:b3:9c:41:ea:03:8f:a1:d6:f2:a4:9d:1c:b8:
- 50:c8:c0:19:6a:18:4d:c0:7f:7d:f8:b3:af:c6:62:
- 09:9b
+ 00:d3:fa:b1:7f:2b:e4:ff:ad:10:e9:54:54:ef:6a:
+ 81:02:0b:b6:83:70:89:ae:d9:4d:54:ea:95:99:88:
+ 3d:59:7d:97:1e:fd:b9:9b:53:8b:14:1e:a4:68:07:
+ ed:68:65:68:7d:4f:ba:28:38:ff:87:33:98:2c:32:
+ d0:e5:00:78:0f:6a:20:32:7d:9e:7d:9b:af:e9:39:
+ fe:5c:bc:04:1c:06:1a:11:1a:46:24:34:f7:e3:af:
+ 56:6d:38:8f:46:39:a6:01:fa:56:f9:d7:9e:73:35:
+ 1a:23:94:12:0f:0d:d3:ec:fe:09:57:f6:a0:9c:18:
+ a7:ba:4b:c9:37:a3:0c:60:77:4b:77:5f:c8:9c:7e:
+ b1:5c:b3:43:72:da:c9:6c:c8:71:24:ab:2f:c4:83:
+ bd:b0:4f:60:af:46:0d:7b:34:8f:e9:70:a2:85:ed:
+ 6e:05:df:e3:c1:40:3d:17:b1:f0:a3:7d:e2:17:6f:
+ 3d:fe:11:81:90:1f:c2:f8:bc:2c:d5:9c:fc:04:47:
+ 24:c4:5e:cf:20:0f:31:e8:7d:ea:b5:69:b8:0f:35:
+ 19:5d:13:08:db:d6:a2:dc:7a:33:92:b3:9c:fc:35:
+ de:cf:55:96:f7:52:6e:a9:e2:93:b0:52:07:8d:0f:
+ 95:9c:0e:0d:1b:48:0e:b8:41:4f:eb:68:da:e5:6d:
+ a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+ 8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
X509v3 Authority Key Identifier:
- keyid:AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+ keyid:8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -237,41 +237,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 07:d5:33:48:84:04:40:42:f1:f2:ff:d9:07:5e:5f:bf:d9:72:
- 07:6f:a9:6a:f1:5f:f3:59:69:99:41:cd:9d:37:65:cb:2e:c8:
- 06:f3:0a:0c:da:46:28:6d:d6:06:08:20:5b:ca:ed:c9:14:6e:
- 11:5a:9f:df:33:06:67:44:e7:63:ba:b2:42:53:2e:31:0b:ce:
- ef:c1:74:60:76:96:0b:3f:da:9b:f2:a1:d1:89:99:34:f0:f9:
- ae:8c:39:fd:3d:a6:be:7f:f5:82:f0:25:62:b0:b7:b4:bc:1b:
- 51:c3:60:05:af:bc:22:b9:62:49:c0:27:12:72:c2:ac:d9:1e:
- 17:ff:e7:57:f6:b2:f8:37:dd:76:1a:dc:e0:89:4f:b3:8a:74:
- 0b:76:5f:48:fc:6c:af:6d:42:85:25:b4:44:ca:27:ed:2e:fb:
- d8:df:1a:a1:82:bd:6c:25:35:62:cb:50:db:27:9e:b2:65:cc:
- 58:fa:fd:1e:6a:2a:77:cd:3f:b4:6b:e6:71:ec:85:f5:7b:73:
- a9:73:05:78:1f:26:21:dc:8b:a4:f5:e1:06:a6:97:13:9f:5f:
- 84:03:12:59:37:81:17:21:2d:39:db:b7:b0:f4:17:73:90:7c:
- a1:2f:53:c0:4a:af:53:54:2c:5b:9c:8a:e3:66:80:40:30:96:
- e3:d8:b2:23
+ 3b:f2:cd:03:ef:d9:61:67:ea:7b:dd:e9:88:13:07:8d:94:51:
+ 62:bb:56:d6:c1:be:8a:d0:a0:81:fe:1d:90:6d:85:94:2c:ac:
+ 33:fb:5d:f6:c9:74:72:7b:f7:5a:b8:e4:b6:dd:30:bb:93:3b:
+ 74:22:e9:fe:e9:5c:b2:8b:d4:a1:21:0c:e6:3c:ee:86:ae:9e:
+ 8a:fd:88:bb:a7:fd:20:bb:9c:ff:d4:ca:6f:66:60:19:14:d1:
+ d1:f2:d6:f3:b2:58:c8:4d:15:30:e1:e0:fc:40:ad:55:25:ba:
+ 8d:25:68:26:c4:64:68:7e:94:e6:f4:96:5a:c4:e6:ba:85:5b:
+ b2:32:d1:82:32:8b:f4:3f:6f:4e:d5:de:2e:d7:09:3c:1f:7e:
+ 93:3a:22:d8:ef:40:41:47:28:80:03:77:0d:f9:51:28:28:b6:
+ 53:24:66:f7:3b:56:6c:53:58:55:b2:49:7c:c4:1a:3d:a1:37:
+ 29:19:8a:9a:99:84:7f:63:ac:21:85:f5:02:5a:5a:1c:7c:0a:
+ 8b:bc:83:ff:80:57:2e:ce:62:c5:79:58:24:12:e8:af:a4:6c:
+ ce:a8:92:2b:25:c4:e3:b6:27:f7:d5:dd:e6:fa:cc:91:6c:59:
+ 5e:f5:a4:e2:4f:0b:18:fa:4e:9c:88:66:20:25:af:87:14:01:
+ 27:08:89:6a
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOviX8fUOP7obWSCjsbY
-16WkymVfVbbFXJz2zK/WS+yhXMNVCBkcDplKTbIUIjag2+vDHG/WBWmlW2FZevuI
-2igdlcb+MVEGrPdBphAIJX9B8QE5SCfBNHMvwgWxl0KA3tQ6RNugNIy4XN6rQsge
-8Qh+EDruFo5h7quq9Xorq6+iadr0tZUyF7zPuq2ne/zqm0O8rgfDkhXOSvvuM+aJ
-fQmI+aWvC03Bfygw2JN1krUnLAG9UgVdQqXc8x8esjyhFxmbMOwYhUHjctKT76BN
-C9SK+okNtkb+vPCC3plMHlccjXGznEHqA4+h1vKknRy4UMjAGWoYTcB/ffizr8Zi
-CZsCAwEAAaOByzCByDAdBgNVHQ4EFgQUqha8+X6t9HHW1JTZYUsBOLKVi4QwHwYD
-VR0jBBgwFoAUqha8+X6t9HHW1JTZYUsBOLKVi4QwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAH1TNIhARA
-QvHy/9kHXl+/2XIHb6lq8V/zWWmZQc2dN2XLLsgG8woM2kYobdYGCCBbyu3JFG4R
-Wp/fMwZnROdjurJCUy4xC87vwXRgdpYLP9qb8qHRiZk08PmujDn9Paa+f/WC8CVi
-sLe0vBtRw2AFr7wiuWJJwCcScsKs2R4X/+dX9rL4N912GtzgiU+zinQLdl9I/Gyv
-bUKFJbREyiftLvvY3xqhgr1sJTViy1DbJ56yZcxY+v0eaip3zT+0a+Zx7IX1e3Op
-cwV4HyYh3Iuk9eEGppcTn1+EAxJZN4EXIS0527ew9BdzkHyhL1PASq9TVCxbnIrj
-ZoBAMJbj2LIj
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA78s0D79lh
+Z+p73emIEweNlFFiu1bWwb6K0KCB/h2QbYWULKwz+132yXRye/dauOS23TC7kzt0
+Iun+6Vyyi9ShIQzmPO6Grp6K/Yi7p/0gu5z/1MpvZmAZFNHR8tbzsljITRUw4eD8
+QK1VJbqNJWgmxGRofpTm9JZaxOa6hVuyMtGCMov0P29O1d4u1wk8H36TOiLY70BB
+RyiAA3cN+VEoKLZTJGb3O1ZsU1hVskl8xBo9oTcpGYqamYR/Y6whhfUCWlocfAqL
+vIP/gFcuzmLFeVgkEuivpGzOqJIrJcTjtif31d3m+syRbFle9aTiTwsY+k6ciGYg
+Ja+HFAEnCIlq
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem b/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
index 249d42a..ee5a515 100644
--- a/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
+++ b/net/data/verify_certificate_chain_unittest/target-not-end-entity.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-target-not-end-entity.py]
+[Created by: generate-target-not-end-entity.py]
-Certificate chain with 1 intermediary, a trusted root, and a target
+Certificate chain with 1 intermediate, a trusted root, and a target
certificate that is also a CA. Verification is expected to succeed, as the test
code accepts any target certificate.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,79 +18,79 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ee:c2:63:d9:42:ea:55:e7:60:10:b7:7a:07:f3:
- 2c:85:b7:38:91:0c:ec:29:d5:fd:ca:14:ad:58:8b:
- 12:c2:fd:b6:2e:fb:50:dc:04:e9:c3:20:d1:db:23:
- da:0e:5e:93:94:cf:82:54:fd:e7:5d:9a:ee:01:37:
- 84:67:e9:f4:93:7b:ef:be:b1:e1:a3:5a:5a:eb:31:
- b1:29:8e:05:1a:90:d5:15:aa:5e:de:29:1b:1f:80:
- eb:17:fa:89:4b:d4:5b:77:0f:d1:e0:7b:f2:8d:a6:
- b4:aa:22:44:42:3e:bb:af:b7:5e:06:ae:0b:c0:20:
- 6e:ea:90:ef:4c:cb:34:5a:6b:37:29:a7:07:0c:66:
- 65:16:36:29:f0:d7:c8:e7:cc:88:2f:cc:bd:63:33:
- 2d:f5:91:8d:9b:69:f6:f3:05:d3:ca:87:96:ed:79:
- e4:0f:85:a4:41:62:aa:f2:f9:89:fe:a7:92:e5:7c:
- 0a:6e:74:70:b0:be:b2:67:12:2c:c4:44:77:54:f0:
- d6:07:26:aa:ad:8f:9c:f2:12:c2:c1:23:2d:54:8c:
- 09:df:94:59:7c:8b:e0:62:f1:2d:7b:cc:26:f3:11:
- 7b:97:04:3b:2a:02:c5:8f:2f:28:c5:c4:52:dc:4c:
- 5b:6f:0b:8c:e4:89:0a:85:d0:a3:d4:02:74:35:48:
- c7:c5
+ 00:f5:cd:3c:3f:41:74:34:24:e9:1d:74:42:a1:a8:
+ 16:8e:38:0b:ef:74:5b:38:0c:fb:18:b5:f6:08:f3:
+ 7e:d6:03:ac:02:7c:38:07:dc:c2:3e:78:bd:a7:2d:
+ 44:3d:6b:b4:74:42:71:c4:0c:93:c7:9a:ba:83:e9:
+ 6a:12:39:ab:fd:63:f5:e9:d7:97:33:93:7c:1b:77:
+ 78:c6:7a:7b:32:31:c3:68:aa:b0:b9:78:7b:c2:5a:
+ 85:0b:04:b4:c1:2b:fd:ce:71:02:6a:b1:0c:f6:1a:
+ 65:99:58:29:6e:95:21:69:7c:2a:c0:ff:18:90:28:
+ 92:ad:40:f5:83:67:63:04:14:21:aa:d2:29:35:22:
+ 03:f8:28:27:8a:69:82:de:aa:f4:1e:5e:93:19:27:
+ 74:4a:6b:d5:82:d3:2e:66:cb:23:e9:34:d1:70:0f:
+ 84:cb:1d:87:55:9e:1c:f2:b9:5a:e8:d0:43:dc:89:
+ a3:5c:28:61:fc:89:97:ab:ff:4a:2c:bc:c0:58:f2:
+ 68:f8:d7:9f:3e:e8:b1:8c:70:5a:d0:f7:1a:d3:dd:
+ d1:24:ba:fe:15:f8:bd:ea:16:8d:ee:9e:7e:99:30:
+ 22:6c:24:21:67:d1:fa:50:61:ce:65:48:5f:0e:79:
+ 02:0d:e9:b1:69:d3:4c:e7:2d:5d:57:8b:d5:e8:42:
+ d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 75:E4:93:1E:26:35:79:D3:34:F7:E2:FD:A3:1C:38:1C:68:8B:F6:CD
+ B4:44:21:DE:96:81:AA:7F:9A:5B:79:CB:57:AA:3D:13:A5:4B:6A:93
X509v3 Authority Key Identifier:
- keyid:58:01:24:B6:3B:E6:E7:85:87:83:6F:54:23:6A:C2:D4:E0:9D:6C:37
+ keyid:01:CB:1D:FC:13:00:C9:67:B2:D6:76:F2:0A:4F:9D:6A:D4:E2:9D:3D
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 86:0e:74:e2:4f:1c:93:23:8a:9c:37:4a:42:ff:ab:4b:7b:5c:
- 38:c3:67:11:1d:60:03:b3:1e:57:15:8f:1f:b2:94:45:f0:44:
- 31:f1:7e:30:0e:f9:cc:48:7b:a3:27:2b:bf:9a:bd:e9:a1:69:
- e2:1f:e7:91:ef:98:e9:58:5e:f8:7c:a0:8d:e5:81:85:af:8c:
- a6:04:c5:57:3e:cb:5f:33:dc:ca:b6:72:5b:e7:82:9b:68:91:
- 73:aa:f2:47:b9:6b:e2:7d:12:b4:85:87:2a:a9:49:a0:cd:79:
- 41:8d:60:33:43:e8:aa:55:4b:60:8a:41:26:ca:e1:75:35:bd:
- 45:00:a7:1a:2e:16:15:14:1f:be:9d:aa:25:54:e2:0d:f2:da:
- 96:27:72:2c:75:4b:d7:06:5f:9d:47:37:25:08:7f:1f:ad:df:
- e7:6f:1d:f6:95:63:e8:08:02:c9:51:dc:ae:4a:31:eb:c5:61:
- 24:79:4c:d1:88:79:1f:04:ae:35:79:24:bc:29:4d:0c:c0:05:
- 99:91:db:f3:83:af:95:4f:f3:13:35:b4:a9:40:04:81:cb:f5:
- 39:e1:55:96:cf:42:86:68:26:f8:cc:82:6a:b9:10:77:41:55:
- 03:16:9d:0e:57:37:33:a0:53:ca:7e:0b:1c:85:9e:c2:81:8d:
- c8:3e:b8:62
+ 0e:8f:41:87:a8:42:bd:13:c8:62:be:1d:f6:ad:a4:cd:00:5d:
+ 21:61:73:5f:75:27:67:16:98:11:ca:0f:cd:9d:bf:96:2a:75:
+ 62:35:68:e0:af:f7:6f:c4:75:69:f2:a7:89:27:96:64:4f:0e:
+ 7e:f0:82:89:65:1e:a2:08:cd:8b:f1:e5:a0:32:c5:93:2a:62:
+ 4c:3c:d2:9f:95:55:5d:87:a8:fe:ef:fa:92:aa:08:76:38:67:
+ 0a:d3:f9:0a:b9:93:69:e6:d3:78:ab:9f:eb:ef:35:a7:24:ae:
+ 10:d7:3d:17:bd:86:07:c0:64:0f:d6:fc:55:c1:54:70:6c:22:
+ 4f:ae:c1:64:ca:fc:dc:97:eb:8b:d2:22:52:d8:52:2c:4d:d4:
+ 5c:df:10:52:ab:ab:b2:89:10:e8:ed:00:19:8a:65:e8:4e:8c:
+ e2:5d:5b:cd:35:4c:55:24:30:be:57:f7:f0:51:ef:52:9d:34:
+ 60:0d:1e:f5:ba:8a:33:83:ac:db:dc:d9:2b:0b:f3:46:1c:98:
+ 3a:5e:5c:c7:36:7e:62:62:a4:13:68:2e:35:32:a1:bd:9d:e9:
+ 67:bb:58:85:3b:ea:94:1f:c7:91:35:b0:2c:ce:25:2b:9c:9f:
+ 60:7a:09:fa:32:1c:9d:4e:ca:ef:20:9d:ca:e1:ad:20:cd:63:
+ 20:ce:48:fd
-----BEGIN CERTIFICATE-----
MIIDfzCCAmegAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuwmPZ
-QupV52AQt3oH8yyFtziRDOwp1f3KFK1YixLC/bYu+1DcBOnDINHbI9oOXpOUz4JU
-/eddmu4BN4Rn6fSTe+++seGjWlrrMbEpjgUakNUVql7eKRsfgOsX+olL1Ft3D9Hg
-e/KNprSqIkRCPruvt14GrgvAIG7qkO9MyzRaazcppwcMZmUWNinw18jnzIgvzL1j
-My31kY2bafbzBdPKh5bteeQPhaRBYqry+Yn+p5LlfApudHCwvrJnEizERHdU8NYH
-Jqqtj5zyEsLBIy1UjAnflFl8i+Bi8S17zCbzEXuXBDsqAsWPLyjFxFLcTFtvC4zk
-iQqF0KPUAnQ1SMfFAgMBAAGjgdswgdgwHQYDVR0OBBYEFHXkkx4mNXnTNPfi/aMc
-OBxoi/bNMB8GA1UdIwQYMBaAFFgBJLY75ueFh4NvVCNqwtTgnWw3MD8GCCsGAQUF
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1zTw/
+QXQ0JOkddEKhqBaOOAvvdFs4DPsYtfYI837WA6wCfDgH3MI+eL2nLUQ9a7R0QnHE
+DJPHmrqD6WoSOav9Y/Xp15czk3wbd3jGensyMcNoqrC5eHvCWoULBLTBK/3OcQJq
+sQz2GmWZWClulSFpfCrA/xiQKJKtQPWDZ2MEFCGq0ik1IgP4KCeKaYLeqvQeXpMZ
+J3RKa9WC0y5myyPpNNFwD4TLHYdVnhzyuVro0EPciaNcKGH8iZer/0osvMBY8mj4
+158+6LGMcFrQ9xrT3dEkuv4V+L3qFo3unn6ZMCJsJCFn0fpQYc5lSF8OeQIN6bFp
+00znLV1Xi9XoQtTnAgMBAAGjgdswgdgwHQYDVR0OBBYEFLREId6Wgap/mlt5y1eq
+PROlS2qTMB8GA1UdIwQYMBaAFAHLHfwTAMlnstZ28gpPnWrU4p09MD8GCCsGAQUF
BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w
-DQYJKoZIhvcNAQELBQADggEBAIYOdOJPHJMjipw3SkL/q0t7XDjDZxEdYAOzHlcV
-jx+ylEXwRDHxfjAO+cxIe6MnK7+avemhaeIf55HvmOlYXvh8oI3lgYWvjKYExVc+
-y18z3Mq2clvngptokXOq8ke5a+J9ErSFhyqpSaDNeUGNYDND6KpVS2CKQSbK4XU1
-vUUApxouFhUUH76dqiVU4g3y2pYncix1S9cGX51HNyUIfx+t3+dvHfaVY+gIAslR
-3K5KMevFYSR5TNGIeR8ErjV5JLwpTQzABZmR2/ODr5VP8xM1tKlABIHL9TnhVZbP
-QoZoJvjMgmq5EHdBVQMWnQ5XNzOgU8p+CxyFnsKBjcg+uGI=
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w
+DQYJKoZIhvcNAQELBQADggEBAA6PQYeoQr0TyGK+HfatpM0AXSFhc191J2cWmBHK
+D82dv5YqdWI1aOCv92/EdWnyp4knlmRPDn7wgollHqIIzYvx5aAyxZMqYkw80p+V
+VV2HqP7v+pKqCHY4ZwrT+Qq5k2nm03irn+vvNackrhDXPRe9hgfAZA/W/FXBVHBs
+Ik+uwWTK/NyX64vSIlLYUixN1FzfEFKrq7KJEOjtABmKZehOjOJdW801TFUkML5X
+9/BR71KdNGANHvW6ijODrNvc2SsL80YcmDpeXMc2fmJipBNoLjUyob2d6We7WIU7
+6pQfx5E1sCzOJSucn2B6CfoyHJ1Oyu8gncrhrSDNYyDOSP0=
-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c7:c3:50:5c:f2:60:57:55:0d:be:39:c4:be:74:
- 76:26:ce:b2:4c:be:ac:dc:17:ac:a0:a4:c3:5f:ae:
- 64:59:da:20:77:7c:88:28:0e:75:7e:ef:70:80:9c:
- 0c:8e:94:1c:48:ea:4f:b3:34:1e:e4:cf:af:f8:29:
- 13:06:6f:19:0f:e7:9a:df:59:8c:44:d3:0e:26:70:
- 5f:c7:a5:3a:36:4d:4b:50:9c:bd:14:fb:21:4a:f8:
- d6:2b:49:94:2b:df:4c:8c:89:32:d7:53:f8:59:14:
- e9:23:76:f3:fb:b4:27:2d:c9:28:17:cc:fe:06:2c:
- bd:b5:97:30:83:40:9e:c7:ff:9e:0a:99:a7:f0:e8:
- 0c:c7:73:ca:3f:48:3a:75:97:bd:de:9a:84:6d:5b:
- 13:dc:0c:64:1e:66:4f:72:10:28:cd:34:bb:15:f1:
- ca:65:3f:03:db:aa:fa:4d:4c:26:64:8a:3f:6f:67:
- 51:fa:15:2d:71:7c:fd:0b:12:9e:12:c2:77:9c:f2:
- a8:86:78:f2:6f:9f:79:c9:50:51:28:41:13:79:79:
- 7c:a1:93:dd:71:f7:08:92:99:f7:9c:37:ff:2b:82:
- b6:4e:a9:93:47:83:dc:36:83:40:13:22:96:eb:5e:
- 2f:ad:a1:d6:70:38:c5:2b:3a:0b:ce:4c:fc:81:c1:
- 49:f5
+ 00:d0:8e:2e:ba:a1:8d:d9:60:16:cd:17:31:c9:08:
+ 43:93:94:76:48:55:a2:78:19:17:70:8e:95:25:ac:
+ f9:b9:81:33:66:8c:2c:79:b7:d9:f5:89:92:1b:d2:
+ 4e:01:e9:69:e6:61:b4:d7:96:78:6d:a0:23:cf:67:
+ 11:cd:fb:fe:3d:d6:b8:ad:64:3f:f6:b9:f5:17:05:
+ 89:1c:fb:3d:94:c3:18:43:e4:1e:15:0f:8d:26:25:
+ de:db:f0:c0:d6:67:cc:90:f8:33:1c:d1:81:4b:63:
+ 3e:c9:76:61:65:80:b4:13:97:9d:2e:99:ca:a2:6b:
+ cc:10:a6:3b:2f:20:90:ee:a5:6c:cf:f6:a0:7a:7b:
+ ce:59:c6:19:42:3f:9f:69:ab:f3:c1:2f:26:8d:fe:
+ ac:b8:ec:33:d2:d6:bb:4e:3f:80:c0:d9:12:33:35:
+ 05:2d:30:ce:6b:1c:12:ea:89:6f:8a:93:15:0e:0c:
+ c0:10:7a:99:1e:3f:fb:85:88:09:82:16:f0:62:ed:
+ fb:26:63:93:71:72:9b:15:11:19:c3:36:5b:10:c1:
+ b1:12:51:2e:6a:af:c1:d1:9d:fd:8b:7f:13:19:5d:
+ ce:00:49:3d:33:32:d1:6b:c5:14:4e:10:92:4d:1f:
+ 28:07:01:29:8f:fe:5d:ff:98:b8:2f:99:fc:68:21:
+ 1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 58:01:24:B6:3B:E6:E7:85:87:83:6F:54:23:6A:C2:D4:E0:9D:6C:37
+ 01:CB:1D:FC:13:00:C9:67:B2:D6:76:F2:0A:4F:9D:6A:D4:E2:9D:3D
X509v3 Authority Key Identifier:
- keyid:92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D
+ keyid:2D:38:72:D3:21:CA:2A:39:AD:2D:B4:9A:10:5C:CB:58:56:82:C4:AA
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 3d:c9:5f:4a:71:a9:28:ca:c0:27:47:f1:23:b0:87:2c:5f:4c:
- 20:de:1e:60:8b:6d:c3:42:2c:bf:ed:82:26:00:b6:f8:4f:7e:
- ac:37:ec:43:ea:7a:a5:58:fc:34:cd:af:54:2d:3e:30:e8:44:
- 8d:37:8d:5b:5c:b8:52:bd:f1:d5:ab:c7:61:d9:83:b5:f5:51:
- 41:ed:f0:1c:02:c7:ae:4f:57:60:49:c8:6d:3e:44:53:13:ce:
- 97:47:78:b5:04:23:fd:0a:49:e5:99:67:90:07:e7:a5:66:61:
- 2b:93:5f:b5:dd:d0:fe:92:e8:36:3e:4f:cb:a7:f0:64:d2:88:
- 11:e5:78:42:89:a7:3f:b6:fe:93:3a:d8:52:d0:8c:9d:ea:89:
- 21:56:67:04:21:c5:c2:83:42:13:43:ee:5c:1c:2f:00:97:45:
- 56:4a:18:21:ad:2d:b3:b6:38:ed:5e:df:fe:13:43:53:90:2a:
- 05:ab:47:6a:dd:9e:9e:51:a2:f2:98:08:03:4c:3f:17:5f:55:
- e7:b0:f3:ae:62:be:a3:0f:5f:d2:3c:b9:c3:48:55:a9:f6:0d:
- 4b:fd:15:54:f5:0b:57:30:c7:f5:fb:61:ff:0a:82:35:58:21:
- f0:05:90:a2:d6:52:d4:6b:53:a8:ea:98:68:53:59:0c:11:db:
- b2:af:fd:3e
+ 11:b8:7a:ac:f4:c5:c5:cc:bc:46:f9:9e:03:6d:69:f7:3c:15:
+ 71:be:be:15:0d:a4:b9:23:cd:e0:15:a4:51:36:86:2a:65:7e:
+ 7e:29:bc:58:d1:9d:11:2d:0e:22:61:65:ca:a4:9e:61:3f:16:
+ 23:ca:ff:91:62:34:55:56:1c:b8:83:b7:62:cb:9a:07:46:53:
+ 35:53:8a:04:7e:fa:12:72:af:af:04:1d:18:a4:c1:ba:5b:c7:
+ db:01:97:58:01:d1:73:e9:85:fb:16:27:0f:d2:eb:ce:35:7e:
+ e1:a1:91:52:d7:91:03:59:ab:c0:ed:a6:bc:7b:70:bc:af:73:
+ 20:10:a6:a8:f4:45:28:0e:8b:a8:f7:e8:03:64:c6:f1:3d:12:
+ dc:f2:30:75:85:a9:68:44:ad:fb:ab:36:ed:8f:84:25:79:d3:
+ d6:f1:c8:10:1a:ac:c4:fc:65:6b:0c:77:ef:d3:61:de:91:74:
+ df:da:f3:f2:f1:07:93:5f:e0:c9:6a:6d:58:29:e1:ef:98:93:
+ 3a:13:82:09:ec:90:82:5a:d7:ef:1d:d4:50:b8:e6:ff:ef:8f:
+ 8f:9e:38:72:e5:f3:58:f9:04:90:b3:a9:a3:fd:dc:82:ab:44:
+ be:bc:47:f7:79:15:31:91:1c:c1:3c:5c:86:d1:78:bc:1e:0c:
+ 9e:af:18:60
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8NQXPJg
-V1UNvjnEvnR2Js6yTL6s3BesoKTDX65kWdogd3yIKA51fu9wgJwMjpQcSOpPszQe
-5M+v+CkTBm8ZD+ea31mMRNMOJnBfx6U6Nk1LUJy9FPshSvjWK0mUK99MjIky11P4
-WRTpI3bz+7QnLckoF8z+Biy9tZcwg0Cex/+eCpmn8OgMx3PKP0g6dZe93pqEbVsT
-3AxkHmZPchAozTS7FfHKZT8D26r6TUwmZIo/b2dR+hUtcXz9CxKeEsJ3nPKohnjy
-b595yVBRKEETeXl8oZPdcfcIkpn3nDf/K4K2TqmTR4PcNoNAEyKW614vraHWcDjF
-KzoLzkz8gcFJ9QIDAQABo4HLMIHIMB0GA1UdDgQWBBRYASS2O+bnhYeDb1QjasLU
-4J1sNzAfBgNVHSMEGDAWgBSSACPHwzMUYj1ZyVKkzKBcFt01LTA3BggrBgEFBQcB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-AD3JX0pxqSjKwCdH8SOwhyxfTCDeHmCLbcNCLL/tgiYAtvhPfqw37EPqeqVY/DTN
-r1QtPjDoRI03jVtcuFK98dWrx2HZg7X1UUHt8BwCx65PV2BJyG0+RFMTzpdHeLUE
-I/0KSeWZZ5AH56VmYSuTX7Xd0P6S6DY+T8un8GTSiBHleEKJpz+2/pM62FLQjJ3q
-iSFWZwQhxcKDQhND7lwcLwCXRVZKGCGtLbO2OO1e3/4TQ1OQKgWrR2rdnp5RovKY
-CANMPxdfVeew865ivqMPX9I8ucNIVan2DUv9FVT1C1cwx/X7Yf8KgjVYIfAFkKLW
-UtRrU6jqmGhTWQwR27Kv/T4=
+ABG4eqz0xcXMvEb5ngNtafc8FXG+vhUNpLkjzeAVpFE2hiplfn4pvFjRnREtDiJh
+ZcqknmE/FiPK/5FiNFVWHLiDt2LLmgdGUzVTigR++hJyr68EHRikwbpbx9sBl1gB
+0XPphfsWJw/S6841fuGhkVLXkQNZq8Dtprx7cLyvcyAQpqj0RSgOi6j36ANkxvE9
+EtzyMHWFqWhErfurNu2PhCV509bxyBAarMT8ZWsMd+/TYd6RdN/a8/LxB5Nf4Mlq
+bVgp4e+YkzoTggnskIJa1+8d1FC45v/vj4+eOHLl81j5BJCzqaP93IKrRL68R/d5
+FTGRHME8XIbReLweDJ6vGGA=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9d:bb:c1:61:ff:52:46:21:fd:d7:06:43:c7:e0:
- 5d:5c:c8:02:0a:44:68:63:45:92:58:8d:2f:d6:b3:
- 86:f1:01:ee:fd:34:97:4b:d6:64:fc:4f:8f:88:50:
- 56:1a:e6:20:00:9f:8c:8d:e0:c0:30:41:28:99:10:
- 14:b6:28:6c:b9:37:ef:5c:c4:ee:eb:37:ff:06:07:
- f3:5c:17:8b:aa:d6:5c:8e:19:01:8d:66:3b:8f:c9:
- e2:83:0a:0f:8c:7b:21:da:cb:4d:ea:81:11:17:92:
- 83:f5:35:19:d5:b5:92:49:3d:08:a5:c3:95:37:76:
- ad:38:9c:fd:11:ff:d4:7f:09:60:10:ea:07:93:5c:
- 2f:4c:95:53:a1:cb:3b:b1:a8:9a:9d:b9:a4:87:af:
- 78:78:6e:dc:76:bb:00:74:cd:54:75:6a:17:45:b8:
- 55:d8:87:87:88:7a:d4:98:30:05:92:df:65:07:aa:
- d7:08:b7:18:b8:35:79:bb:5e:13:e2:c3:07:65:42:
- d4:52:e3:91:41:9d:38:cb:1e:9e:5d:3b:51:7d:95:
- f4:3b:6f:31:77:57:4b:e8:74:59:82:47:60:f9:91:
- 83:19:20:54:03:a0:cb:76:5e:50:32:ec:32:57:f6:
- d0:1d:f7:46:7d:c1:ff:a7:b8:1d:80:66:f0:d9:c9:
- 59:d9
+ 00:c4:68:12:a9:88:50:04:f4:70:9b:0a:1e:d1:83:
+ 30:a0:36:08:fe:20:f5:bc:b4:a5:32:74:dd:4c:ab:
+ cc:73:a4:ce:25:ab:04:38:71:2d:5c:06:de:3b:c3:
+ 2f:b8:d9:91:f3:28:9a:70:f4:7f:be:d5:0e:4e:00:
+ db:ce:d7:c6:9f:b2:aa:0b:5e:3a:b5:e3:ad:80:78:
+ 53:f1:38:61:05:7f:00:19:e4:ec:77:b5:1d:b6:c9:
+ 35:10:ca:18:c2:71:ae:c8:34:77:dc:46:26:a1:60:
+ a4:f0:dc:49:5a:fe:af:91:98:41:1c:90:50:7d:be:
+ 94:61:0e:58:b6:21:48:83:2e:5f:c1:a6:0c:a6:72:
+ 95:4a:a5:c5:a1:d9:bd:14:dd:7c:f4:1a:db:b1:1c:
+ 09:0c:2b:60:e7:28:c0:fc:e1:36:0a:f4:68:dc:ee:
+ 89:d8:0f:47:9c:e4:7b:ca:fe:65:57:2c:3b:3b:e5:
+ b4:89:c5:04:52:55:02:dc:09:44:fd:6a:19:fc:e4:
+ 52:6f:78:96:41:79:3f:b8:85:5a:fe:7f:8f:5d:fc:
+ ee:ba:35:1d:eb:64:2d:e0:7b:f2:8c:17:d3:33:21:
+ 9c:2d:e6:85:d2:e3:2c:0f:5b:57:2c:c5:c6:de:93:
+ 24:a2:6e:1b:72:49:f5:c8:05:e2:0e:ae:68:7a:f6:
+ b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D
+ 2D:38:72:D3:21:CA:2A:39:AD:2D:B4:9A:10:5C:CB:58:56:82:C4:AA
X509v3 Authority Key Identifier:
- keyid:92:00:23:C7:C3:33:14:62:3D:59:C9:52:A4:CC:A0:5C:16:DD:35:2D
+ keyid:2D:38:72:D3:21:CA:2A:39:AD:2D:B4:9A:10:5C:CB:58:56:82:C4:AA
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 7a:76:9e:1b:08:ba:ae:df:d7:32:30:27:f7:6d:e0:00:f2:4f:
- f0:cf:dd:b5:3e:65:71:d9:97:18:5c:fc:5f:a4:61:88:41:73:
- e6:45:d2:09:3a:a5:6d:09:ab:29:13:dc:0a:43:fd:8a:1f:be:
- 7f:a5:a2:07:cc:9c:63:d5:30:51:93:eb:fc:27:17:08:d4:15:
- 80:84:1c:5e:1b:bd:00:a0:21:0d:08:8a:44:64:40:73:6c:b5:
- 50:2b:82:5f:c8:d8:fd:26:f6:91:38:df:d2:58:20:a0:ae:f2:
- 14:54:e5:d2:ff:ef:87:57:7d:bd:5e:68:b8:1b:62:e0:ae:f4:
- 08:cd:53:35:1e:a4:cf:3c:21:22:55:1e:e4:51:87:f9:74:38:
- 10:29:86:64:87:8b:55:9b:96:5a:81:e4:93:2d:c0:fb:06:7f:
- dd:17:b1:d3:24:75:73:97:df:31:d6:01:a4:be:70:e2:af:ee:
- c3:bc:fc:a1:cd:93:2d:4d:b6:b5:95:02:28:38:68:27:59:38:
- 95:d9:64:20:1e:e5:46:f1:bb:f3:5a:2c:b3:f8:d8:cc:fd:34:
- 09:fb:0b:02:b7:e5:de:0f:ea:2a:2b:0d:81:55:4d:84:d6:f6:
- ba:a4:47:fe:f1:f9:7d:3f:f9:a1:46:bf:fd:dd:89:8b:b4:22:
- 1d:86:9f:c5
+ 09:ee:80:43:2f:77:6c:2b:2f:51:79:35:59:ad:f0:a5:51:45:
+ 22:6a:0a:20:c7:eb:d1:98:c2:43:06:5a:5c:92:cb:44:24:7b:
+ 97:8e:18:b8:23:3c:8b:31:6d:54:0e:73:11:90:9e:8b:2c:a4:
+ 78:53:e6:8e:55:93:64:cc:14:04:54:a1:b6:ec:28:59:67:3a:
+ 64:0f:9d:51:ec:ba:35:06:af:5f:96:b5:3c:fe:62:0e:13:5a:
+ ee:29:af:55:d9:22:71:b3:c8:61:1a:36:4c:c8:f9:39:80:c2:
+ 06:c2:54:93:fb:2f:1b:f7:01:66:42:2a:e2:08:7b:ee:3e:0d:
+ e0:c6:07:fd:f1:cf:5e:d1:77:b2:46:21:c6:c5:9f:db:15:75:
+ 7e:ea:ec:5d:da:02:2a:42:35:7a:b5:a2:2e:86:08:8b:29:ea:
+ e9:f3:b5:cd:9d:46:96:86:c7:82:ed:64:ab:74:29:53:1c:3e:
+ f5:69:51:5b:11:1c:0d:c4:f0:01:31:a6:32:d2:68:af:1d:52:
+ c1:c4:d9:a2:9e:da:a2:bd:19:71:fa:26:f5:28:43:6a:fd:5c:
+ 97:d2:bb:e0:cd:56:0e:b8:0e:f9:4d:d5:dd:a0:4e:ae:46:68:
+ 00:93:d6:fd:ec:85:78:f4:c9:93:96:34:65:cc:f0:72:e7:0e:
+ 00:3d:d0:6b
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ27wWH/UkYh/dcGQ8fg
-XVzIAgpEaGNFkliNL9azhvEB7v00l0vWZPxPj4hQVhrmIACfjI3gwDBBKJkQFLYo
-bLk371zE7us3/wYH81wXi6rWXI4ZAY1mO4/J4oMKD4x7IdrLTeqBEReSg/U1GdW1
-kkk9CKXDlTd2rTic/RH/1H8JYBDqB5NcL0yVU6HLO7Gomp25pIeveHhu3Ha7AHTN
-VHVqF0W4VdiHh4h61JgwBZLfZQeq1wi3GLg1ebteE+LDB2VC1FLjkUGdOMsenl07
-UX2V9DtvMXdXS+h0WYJHYPmRgxkgVAOgy3ZeUDLsMlf20B33Rn3B/6e4HYBm8NnJ
-WdkCAwEAAaOByzCByDAdBgNVHQ4EFgQUkgAjx8MzFGI9WclSpMygXBbdNS0wHwYD
-VR0jBBgwFoAUkgAjx8MzFGI9WclSpMygXBbdNS0wNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB6dp4bCLqu
-39cyMCf3beAA8k/wz921PmVx2ZcYXPxfpGGIQXPmRdIJOqVtCaspE9wKQ/2KH75/
-paIHzJxj1TBRk+v8JxcI1BWAhBxeG70AoCENCIpEZEBzbLVQK4JfyNj9JvaRON/S
-WCCgrvIUVOXS/++HV329Xmi4G2LgrvQIzVM1HqTPPCEiVR7kUYf5dDgQKYZkh4tV
-m5ZageSTLcD7Bn/dF7HTJHVzl98x1gGkvnDir+7DvPyhzZMtTba1lQIoOGgnWTiV
-2WQgHuVG8bvzWiyz+NjM/TQJ+wsCt+XeD+oqKw2BVU2E1va6pEf+8fl9P/mhRr/9
-3YmLtCIdhp/F
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAJ7oBDL3ds
+Ky9ReTVZrfClUUUiagogx+vRmMJDBlpckstEJHuXjhi4IzyLMW1UDnMRkJ6LLKR4
+U+aOVZNkzBQEVKG27ChZZzpkD51R7Lo1Bq9flrU8/mIOE1ruKa9V2SJxs8hhGjZM
+yPk5gMIGwlST+y8b9wFmQiriCHvuPg3gxgf98c9e0XeyRiHGxZ/bFXV+6uxd2gIq
+QjV6taIuhgiLKerp87XNnUaWhseC7WSrdClTHD71aVFbERwNxPABMaYy0mivHVLB
+xNmintqivRlx+ib1KENq/VyX0rvgzVYOuA75TdXdoE6uRmgAk9b97IV49MmTljRl
+zPBy5w4APdBr
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem
index 8c8bd24..d55d955 100644
--- a/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem
+++ b/net/data/verify_certificate_chain_unittest/target-signed-by-512bit-rsa.pem
@@ -1,6 +1,6 @@
[Created by: generate-target-signed-by-512bit-rsa.py]
-Certificate chain with 1 intermediary and a trusted root. The target
+Certificate chain with 1 intermediate and a trusted root. The target
certificate is signed using a weak RSA key (512-bit modulus), and so
verification is expected to fail.
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,64 +18,64 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a0:09:f8:e1:95:28:53:9e:e3:c1:a5:c0:76:05:
- 74:88:fb:fb:d0:c9:c2:3e:61:e3:a1:e3:b0:c8:81:
- a3:d1:bf:0c:f4:d8:06:3d:8f:58:45:e1:f0:00:8e:
- b1:8c:ab:bc:83:ae:d1:39:3d:6c:52:ef:76:f1:6f:
- 93:b0:b2:26:b7:b4:ab:fd:25:44:94:85:4a:c1:ad:
- 2a:6c:59:11:3c:33:63:39:e9:f1:c6:96:05:7a:a4:
- 8b:3c:74:10:cb:ae:19:eb:cd:df:eb:b0:68:91:cd:
- 5c:56:8d:41:d4:b4:4f:db:45:50:4d:01:01:10:09:
- be:84:a3:3a:98:55:a2:a6:ea:6b:fc:c7:4f:ae:cd:
- 31:60:80:2b:86:27:cf:64:f8:4f:35:32:83:02:57:
- ab:85:9e:ae:e0:39:06:03:d8:8e:c5:6f:01:5f:f6:
- 08:1f:ae:c9:a1:32:65:35:c5:9b:d7:2c:e1:6f:93:
- 41:f7:40:ff:b1:36:08:5e:35:9e:42:2b:a4:d8:0a:
- c2:ce:e4:94:cf:51:7c:76:18:d0:0a:4e:e8:37:b3:
- 44:f4:0b:31:fa:49:96:94:c8:c0:ef:3a:10:ca:4d:
- eb:ed:24:a7:d4:ec:bf:d5:5d:80:ed:d7:3a:b1:7c:
- 3f:0f:b7:cb:48:59:73:fb:af:43:5e:3e:6b:e7:a5:
- ed:01
+ 00:b8:8a:4e:71:4c:e6:58:02:9d:bc:08:20:2d:8d:
+ 74:e3:04:2f:59:9e:43:73:e0:ca:83:1b:3a:e2:30:
+ 78:de:f8:07:a1:17:62:5d:4e:35:e8:03:40:2a:1e:
+ 2e:8e:91:a4:96:bf:a7:34:45:13:19:b2:d7:b0:72:
+ d0:10:e2:ad:ab:a8:f8:41:c5:ec:ee:1c:14:cb:cf:
+ 4f:cd:37:71:bd:2d:11:8d:95:e4:fa:2b:16:8c:bf:
+ 82:1c:22:85:25:4a:88:01:af:1e:fe:e7:53:d5:03:
+ d4:36:14:ae:81:d2:3d:73:6c:96:e0:e7:d2:a4:fb:
+ 17:1d:df:6a:93:68:b5:f8:a8:70:df:d0:b6:9d:fb:
+ e5:80:a3:a8:85:df:82:f3:05:23:9f:b6:62:89:b7:
+ 72:0c:99:49:5b:07:bd:c5:fb:4c:f4:32:83:a5:3c:
+ c6:8c:6b:c1:a1:c0:ab:73:68:fb:91:14:12:3a:c5:
+ 31:89:ac:a2:4b:b6:20:3b:03:1f:50:48:ff:7b:3b:
+ be:53:e5:46:e2:ad:18:7a:d3:3e:f9:bb:d0:0b:ac:
+ 0c:23:d8:9c:92:07:6c:ee:a6:64:0d:77:ef:aa:f4:
+ 64:5a:aa:ed:52:cb:20:9a:57:d5:ab:be:8c:07:71:
+ b3:a4:43:8b:d9:7e:6f:46:2c:70:9f:c0:e3:68:89:
+ e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 01:E0:D2:38:1C:28:DC:51:7E:F9:E6:25:7A:C5:47:ED:81:6C:FC:5F
+ 3D:5B:07:9A:2F:A5:14:87:32:C3:F8:54:71:62:3F:A1:E6:60:7F:D0
X509v3 Authority Key Identifier:
- keyid:B8:D0:79:3D:EA:8A:56:E5:90:68:D6:6C:E9:91:14:0C:AE:5A:48:10
+ keyid:7C:0E:01:A5:04:38:CE:0F:6A:AB:34:B2:CD:77:19:DB:84:C1:EC:44
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- be:ba:eb:82:1f:02:6b:d0:9e:c9:55:09:b1:e9:e1:82:8c:50:
- 39:7e:f5:ff:0f:4f:ef:d8:7d:52:10:07:5e:c1:c4:0e:d5:94:
- 67:d2:0e:2e:22:e6:5a:91:b5:f7:05:e3:a4:be:bc:6c:fb:38:
- 2c:df:47:55:61:bc:4c:39:14:68
+ 6a:f4:be:75:7e:66:b3:42:6e:fb:64:ed:d2:a1:d8:3d:08:04:
+ bf:93:17:0b:9b:79:df:ca:73:95:b4:5a:78:e3:96:d0:7f:5e:
+ 3c:2c:df:00:da:37:fc:61:22:9a:81:d1:bb:5d:13:6a:e4:21:
+ 18:bf:dc:49:36:4e:7a:aa:b8:6f
-----BEGIN CERTIFICATE-----
MIICyzCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCfjh
-lShTnuPBpcB2BXSI+/vQycI+YeOh47DIgaPRvwz02AY9j1hF4fAAjrGMq7yDrtE5
-PWxS73bxb5Owsia3tKv9JUSUhUrBrSpsWRE8M2M56fHGlgV6pIs8dBDLrhnrzd/r
-sGiRzVxWjUHUtE/bRVBNAQEQCb6EozqYVaKm6mv8x0+uzTFggCuGJ89k+E81MoMC
-V6uFnq7gOQYD2I7FbwFf9ggfrsmhMmU1xZvXLOFvk0H3QP+xNgheNZ5CK6TYCsLO
-5JTPUXx2GNAKTug3s0T0CzH6SZaUyMDvOhDKTevtJKfU7L/VXYDt1zqxfD8Pt8tI
-WXP7r0NePmvnpe0BAgMBAAGjgekwgeYwHQYDVR0OBBYEFAHg0jgcKNxRfvnmJXrF
-R+2BbPxfMB8GA1UdIwQYMBaAFLjQeT3qilblkGjWbOmRFAyuWkgQMD8GCCsGAQUF
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ik5x
+TOZYAp28CCAtjXTjBC9ZnkNz4MqDGzriMHje+AehF2JdTjXoA0AqHi6OkaSWv6c0
+RRMZstewctAQ4q2rqPhBxezuHBTLz0/NN3G9LRGNleT6KxaMv4IcIoUlSogBrx7+
+51PVA9Q2FK6B0j1zbJbg59Kk+xcd32qTaLX4qHDf0Lad++WAo6iF34LzBSOftmKJ
+t3IMmUlbB73F+0z0MoOlPMaMa8GhwKtzaPuRFBI6xTGJrKJLtiA7Ax9QSP97O75T
+5UbirRh60z75u9ALrAwj2JySB2zupmQNd++q9GRaqu1SyyCaV9WrvowHcbOkQ4vZ
+fm9GLHCfwONoieUrAgMBAAGjgekwgeYwHQYDVR0OBBYEFD1bB5ovpRSHMsP4VHFi
+P6HmYH/QMB8GA1UdIwQYMBaAFHwOAaUEOM4Paqs0ss13GduEwexEMD8GCCsGAQUF
BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBAL6664IfAmvQnslVCbHp4YKM
-UDl+9f8PT+/YfVIQB17BxA7VlGfSDi4i5lqRtfcF46S+vGz7OCzfR1VhvEw5FGg=
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAANBAGr0vnV+ZrNCbvtk7dKh2D0I
+BL+TFwubed/Kc5W0WnjjltB/Xjws3wDaN/xhIpqB0btdE2rkIRi/3Ek2TnqquG8=
-----END CERTIFICATE-----
Certificate:
@@ -87,22 +87,22 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (512 bit)
Modulus:
- 00:da:fa:51:64:db:d4:40:cf:aa:60:3f:0b:9a:0e:
- 26:21:59:0e:f1:8b:e2:75:11:de:2d:1c:e5:dc:9b:
- e2:16:ce:cf:50:a1:aa:c9:e0:19:9f:5c:e5:44:69:
- 0d:f9:0c:d7:c5:1e:cf:11:65:77:cd:37:5f:d8:fe:
- 6f:e0:99:b3:f7
+ 00:ba:89:53:56:03:c7:9f:d6:cc:d0:48:7d:3b:52:
+ 02:ee:7e:58:eb:d8:9c:8e:3c:d6:65:b2:8d:94:0d:
+ 87:48:e1:65:65:56:91:5b:1a:52:3a:84:96:46:2a:
+ 8b:1b:7d:0c:43:57:04:0d:38:55:21:5b:0b:45:06:
+ a6:1e:67:ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- B8:D0:79:3D:EA:8A:56:E5:90:68:D6:6C:E9:91:14:0C:AE:5A:48:10
+ 7C:0E:01:A5:04:38:CE:0F:6A:AB:34:B2:CD:77:19:DB:84:C1:EC:44
X509v3 Authority Key Identifier:
- keyid:68:06:12:0B:9D:1F:3A:7C:E5:87:20:3C:ED:A3:49:5D:3E:74:28:69
+ keyid:71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -117,37 +117,37 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 8c:35:af:f3:d9:62:41:91:93:ed:8b:f6:42:3e:94:80:cf:31:
- ed:0f:a5:52:2e:51:3f:f3:3f:56:38:c5:f0:25:c5:f1:13:8c:
- 6a:80:28:58:79:e1:eb:39:25:5a:af:31:07:24:da:8c:ae:17:
- c7:56:fd:c1:d4:3a:2c:7e:7e:a4:ff:eb:66:74:96:66:e8:26:
- 52:1d:c5:d6:0a:64:ea:cd:b7:df:b8:49:b1:c4:44:c6:d0:e3:
- 94:0f:b2:b2:cb:75:5a:bf:48:c6:ad:82:46:74:a7:53:bd:55:
- 00:67:6e:ba:2c:b8:15:43:30:64:d8:10:3a:67:b0:31:df:f6:
- 9e:7e:7c:0b:63:d6:6d:b0:5d:9a:61:96:51:03:71:d3:fb:da:
- 30:b8:d1:a6:8a:4a:a2:36:58:84:34:c0:30:5a:d8:51:30:d0:
- 89:8c:1e:c3:45:32:85:17:ba:01:4d:60:04:91:23:ee:df:71:
- 0d:82:90:67:2f:04:4e:e2:64:a9:48:55:03:e7:0b:a1:b4:e3:
- e7:e9:54:3b:bc:83:f0:b3:bb:3f:1a:fd:03:95:28:0e:d2:3b:
- 8b:62:fe:bb:b7:9a:1d:15:d3:96:47:be:c9:4e:21:77:63:60:
- 3b:27:b3:3d:7e:8b:fd:3b:55:17:cf:8b:99:81:6d:92:66:5b:
- 35:62:4a:96
+ 8e:cc:d3:f3:5a:fb:ca:83:4e:55:e3:ae:2a:b7:b7:ac:9e:87:
+ f0:62:58:23:29:3d:63:7e:8d:42:60:ea:dc:3e:ec:66:19:4b:
+ e6:d6:a7:b7:e1:ea:33:88:3c:ea:8b:87:b9:e7:64:0d:35:b3:
+ 0e:ab:81:71:0c:1c:0a:f3:0a:49:23:4e:d6:21:de:7f:e5:fd:
+ 6d:8b:7a:33:2f:a6:ab:4e:b8:02:cc:01:1e:18:9a:90:f3:56:
+ f8:8a:b5:2f:68:12:c6:83:b2:91:59:00:51:86:75:68:45:3b:
+ 27:c4:e0:0d:ed:e7:51:2d:47:60:26:19:02:fd:43:27:81:ad:
+ 33:cb:eb:98:9a:a1:2e:81:d3:81:52:4a:1d:19:e9:30:f9:fc:
+ 6b:e7:26:c8:c1:6c:65:e4:66:d4:cc:82:16:0a:a6:b9:68:3a:
+ eb:ee:cd:86:aa:a7:80:ed:4f:77:47:d2:c6:1b:eb:53:de:f3:
+ eb:24:60:41:ac:77:08:43:1b:76:ce:a6:4b:f1:4e:1d:32:2b:
+ 31:bd:59:52:f1:60:e7:f5:db:6d:bf:be:af:55:9b:11:63:f7:
+ 6e:19:2c:17:4b:db:fe:40:27:ae:02:f5:c2:17:62:21:7b:ac:
+ 38:d6:17:3e:5c:80:61:6d:95:63:e4:64:d3:07:23:9f:14:bb:
+ df:b2:eb:c2
-----BEGIN CERTIFICATE-----
MIICpTCCAY2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANr6UWTb1EDPqmA/C5oO
-JiFZDvGL4nUR3i0c5dyb4hbOz1ChqsngGZ9c5URpDfkM18UezxFld803X9j+b+CZ
-s/cCAwEAAaOByzCByDAdBgNVHQ4EFgQUuNB5PeqKVuWQaNZs6ZEUDK5aSBAwHwYD
-VR0jBBgwFoAUaAYSC50fOnzlhyA87aNJXT50KGkwNwYIKwYBBQUHAQEEKzApMCcG
+ZXJtZWRpYXRlMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALqJU1YDx5/WzNBIfTtS
+Au5+WOvYnI481mWyjZQNh0jhZWVWkVsaUjqElkYqixt9DENXBA04VSFbC0UGph5n
+ylsCAwEAAaOByzCByDAdBgNVHQ4EFgQUfA4BpQQ4zg9qqzSyzXcZ24TB7EQwHwYD
+VR0jBBgwFoAUcVlJTaVDScUO5HjpXLdOgKiju14wNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCMNa/z2WJB
-kZPti/ZCPpSAzzHtD6VSLlE/8z9WOMXwJcXxE4xqgChYeeHrOSVarzEHJNqMrhfH
-Vv3B1Dosfn6k/+tmdJZm6CZSHcXWCmTqzbffuEmxxETG0OOUD7Kyy3Vav0jGrYJG
-dKdTvVUAZ266LLgVQzBk2BA6Z7Ax3/aefnwLY9ZtsF2aYZZRA3HT+9owuNGmikqi
-NliENMAwWthRMNCJjB7DRTKFF7oBTWAEkSPu33ENgpBnLwRO4mSpSFUD5wuhtOPn
-6VQ7vIPws7s/Gv0DlSgO0juLYv67t5odFdOWR77JTiF3Y2A7J7M9fov9O1UXz4uZ
-gW2SZls1YkqW
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCOzNPzWvvK
+g05V464qt7esnofwYlgjKT1jfo1CYOrcPuxmGUvm1qe34eoziDzqi4e552QNNbMO
+q4FxDBwK8wpJI07WId5/5f1ti3ozL6arTrgCzAEeGJqQ81b4irUvaBLGg7KRWQBR
+hnVoRTsnxOAN7edRLUdgJhkC/UMnga0zy+uYmqEugdOBUkodGekw+fxr5ybIwWxl
+5GbUzIIWCqa5aDrr7s2GqqeA7U93R9LGG+tT3vPrJGBBrHcIQxt2zqZL8U4dMisx
+vVlS8WDn9dttv76vVZsRY/duGSwXS9v+QCeuAvXCF2Ihe6w41hc+XIBhbZVj5GTT
+ByOfFLvfsuvC
-----END CERTIFICATE-----
Certificate:
@@ -164,30 +164,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cc:43:57:ce:f5:69:b5:17:2d:24:1e:10:48:61:
- 1e:6e:27:06:10:ae:6d:cd:70:97:4c:39:7b:0d:68:
- 76:49:5b:2a:56:cf:24:d3:35:e4:f9:44:b0:60:c2:
- db:ee:58:f0:2c:3f:25:53:95:bf:fc:3b:cf:1a:5c:
- de:94:67:30:7f:6b:7b:c1:9c:d9:55:91:8b:34:57:
- a7:4f:d0:d7:38:8c:e6:57:ae:f6:61:66:bb:fb:4e:
- d3:b0:d0:c0:74:83:e3:43:7a:15:ab:29:fa:3f:65:
- b5:58:3b:0b:76:cf:b9:85:d9:2a:5b:bf:81:4d:d7:
- bb:72:cf:30:91:1a:0a:4f:6c:64:48:13:fe:cc:14:
- 21:f0:74:b8:90:73:f7:d5:fe:5b:dd:b2:7a:71:1a:
- e3:c3:22:5a:37:38:db:d0:39:62:b3:87:0e:7d:a8:
- 93:68:82:01:29:36:eb:30:20:66:d9:2a:f8:e9:7d:
- 53:ac:93:c1:68:c1:21:66:26:9e:4d:34:8a:14:c2:
- 38:c0:6e:57:9a:c8:93:c1:7d:7d:d8:22:6e:bb:5e:
- ff:dd:e0:af:e4:af:32:6d:f2:e7:57:d4:53:8d:ea:
- f9:ca:72:d3:3a:4e:19:e3:b8:b7:4f:fb:d8:5b:41:
- da:0e:17:59:e2:88:cd:c2:b7:6b:d4:64:50:f0:1e:
- 36:9d
+ 00:ca:5e:08:17:b7:7c:c4:55:39:a2:1c:7f:97:49:
+ b0:bb:88:3e:9e:ed:46:36:41:c2:a7:5e:2b:ce:bb:
+ 7b:d2:d2:a8:3b:a3:53:27:39:ac:3a:76:48:a2:85:
+ 97:3f:ba:98:9f:14:f9:b9:31:64:e5:27:a8:9a:23:
+ ae:7d:12:39:65:c0:10:f3:6d:2d:a3:45:3d:c3:69:
+ e6:cf:3e:4d:8a:5c:37:a5:6c:32:17:7c:ab:8f:62:
+ 0e:e4:57:6b:e1:64:22:8d:3b:ad:c6:93:60:4a:c4:
+ 32:6d:be:c4:6b:06:e1:4b:e0:89:3c:ef:ad:78:94:
+ bd:3d:d1:bb:19:1a:86:98:43:0e:84:bb:68:11:47:
+ 9a:06:49:33:e9:48:e6:f2:00:0e:ef:e7:4d:2a:1b:
+ b2:aa:5b:a8:8d:59:ac:b7:c8:77:5d:c9:9f:d3:e8:
+ c7:f2:88:0a:ce:6e:34:b5:8f:5a:63:24:68:42:2f:
+ 60:2c:a5:82:44:e9:12:1f:c3:7a:01:c3:e7:e3:24:
+ 97:0b:bc:5e:48:e1:33:4b:a0:cd:fa:ce:75:90:97:
+ 20:f4:0b:4c:8e:69:c5:8b:cd:1c:ac:8a:7f:d4:18:
+ 22:c7:10:09:52:dc:3a:17:3d:3a:5c:03:99:ee:f8:
+ 9d:a0:bf:ef:72:33:df:43:8d:9f:1b:1c:e3:22:24:
+ 73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 68:06:12:0B:9D:1F:3A:7C:E5:87:20:3C:ED:A3:49:5D:3E:74:28:69
+ 71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
X509v3 Authority Key Identifier:
- keyid:68:06:12:0B:9D:1F:3A:7C:E5:87:20:3C:ED:A3:49:5D:3E:74:28:69
+ keyid:71:59:49:4D:A5:43:49:C5:0E:E4:78:E9:5C:B7:4E:80:A8:A3:BB:5E
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -202,41 +202,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 2a:56:07:28:0a:b2:16:a5:3e:e3:cc:7e:10:47:8d:88:04:be:
- 92:d6:ef:fa:c2:e3:5f:5f:57:3a:75:5a:8e:8e:62:e0:94:26:
- 32:d2:ab:d3:d7:88:7e:d0:14:b1:1b:1a:5d:15:87:15:45:ae:
- 47:50:0b:50:dd:52:55:03:0b:cb:91:13:b0:96:20:24:c5:aa:
- 13:f5:4f:60:20:b6:46:6a:a6:cf:9d:4e:88:09:77:ad:4d:6f:
- ea:d6:18:81:ac:7c:ad:59:9c:bb:f5:c5:62:e5:e4:b3:61:b2:
- fb:f4:22:4e:38:a4:42:3a:e1:00:54:78:dd:24:90:20:47:d2:
- 74:2b:89:44:64:04:02:3b:f9:8b:fa:35:aa:90:c1:73:82:95:
- 94:fa:5f:85:e9:af:e1:3e:33:2b:1b:91:31:1d:94:ee:1c:0c:
- e5:22:de:48:d4:2d:f7:3a:16:7e:f2:40:dc:ce:ec:3e:41:0d:
- 12:3e:9c:ff:15:2b:9b:b3:80:87:02:50:76:ae:e1:05:dd:89:
- 72:fc:49:e5:81:1f:91:cc:c8:27:b7:2c:b2:ef:71:a0:97:76:
- 49:da:71:75:24:5e:45:2d:5b:2b:79:d2:b0:a3:b8:85:13:d5:
- 68:d7:53:f0:d1:b8:87:d1:84:7c:9e:e1:18:23:f4:cc:2a:8d:
- f3:93:51:5e
+ 20:51:cc:39:0f:3c:0c:67:47:0c:73:f0:00:0d:57:fb:6f:fe:
+ 4c:e3:c1:d1:a6:f7:40:54:4c:91:0f:ca:e1:eb:b3:7a:44:0e:
+ 57:f5:81:1f:9a:4f:81:57:d8:91:01:7b:09:6a:61:19:04:8f:
+ 00:7a:d1:5b:3f:cb:1b:c0:53:a4:da:dc:40:a5:ef:9b:59:1a:
+ fc:99:b2:0d:66:22:ee:d7:da:69:72:4d:b1:44:e9:2d:57:84:
+ 52:d5:2b:c5:77:ac:a7:d0:f2:27:12:6b:5c:42:7a:3d:fc:e8:
+ 04:91:98:aa:1d:3f:40:9d:9b:e2:43:24:47:7b:b8:24:23:a3:
+ 47:24:cd:9a:44:87:f8:a7:c4:07:90:9a:73:60:e1:0e:7b:82:
+ a1:ef:73:4e:02:46:6d:06:e2:58:8f:79:47:79:a6:59:75:cf:
+ ac:5d:e2:37:6c:88:3f:bf:57:00:f5:fb:09:53:f4:5f:06:42:
+ 58:5e:75:48:96:7d:4f:dd:3b:45:d3:7c:61:8f:75:20:17:a0:
+ 2e:1c:08:4b:22:3f:37:be:d7:43:89:da:59:ac:79:87:1e:6a:
+ cc:53:4d:5b:e9:0a:d6:40:a5:a0:28:99:57:44:5d:d2:7b:bf:
+ 02:38:a3:c4:df:14:a9:c1:b2:ec:15:21:7b:84:a1:a1:56:f8:
+ b9:45:42:cd
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMxDV871abUXLSQeEEhh
-Hm4nBhCubc1wl0w5ew1odklbKlbPJNM15PlEsGDC2+5Y8Cw/JVOVv/w7zxpc3pRn
-MH9re8Gc2VWRizRXp0/Q1ziM5leu9mFmu/tO07DQwHSD40N6Fasp+j9ltVg7C3bP
-uYXZKlu/gU3Xu3LPMJEaCk9sZEgT/swUIfB0uJBz99X+W92yenEa48MiWjc429A5
-YrOHDn2ok2iCASk26zAgZtkq+Ol9U6yTwWjBIWYmnk00ihTCOMBuV5rIk8F9fdgi
-brte/93gr+SvMm3y51fUU43q+cpy0zpOGeO4t0/72FtB2g4XWeKIzcK3a9RkUPAe
-Np0CAwEAAaOByzCByDAdBgNVHQ4EFgQUaAYSC50fOnzlhyA87aNJXT50KGkwHwYD
-VR0jBBgwFoAUaAYSC50fOnzlhyA87aNJXT50KGkwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAqVgcoCrIW
-pT7jzH4QR42IBL6S1u/6wuNfX1c6dVqOjmLglCYy0qvT14h+0BSxGxpdFYcVRa5H
-UAtQ3VJVAwvLkROwliAkxaoT9U9gILZGaqbPnU6ICXetTW/q1hiBrHytWZy79cVi
-5eSzYbL79CJOOKRCOuEAVHjdJJAgR9J0K4lEZAQCO/mL+jWqkMFzgpWU+l+F6a/h
-PjMrG5ExHZTuHAzlIt5I1C33OhZ+8kDczuw+QQ0SPpz/FSubs4CHAlB2ruEF3Yly
-/EnlgR+RzMgntyyy73Ggl3ZJ2nF1JF5FLVsredKwo7iFE9Vo11Pw0biH0YR8nuEY
-I/TMKo3zk1Fe
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAgUcw5DzwM
+Z0cMc/AADVf7b/5M48HRpvdAVEyRD8rh67N6RA5X9YEfmk+BV9iRAXsJamEZBI8A
+etFbP8sbwFOk2txApe+bWRr8mbINZiLu19ppck2xROktV4RS1SvFd6yn0PInEmtc
+Qno9/OgEkZiqHT9AnZviQyRHe7gkI6NHJM2aRIf4p8QHkJpzYOEOe4Kh73NOAkZt
+BuJYj3lHeaZZdc+sXeI3bIg/v1cA9fsJU/RfBkJYXnVIln1P3TtF03xhj3UgF6Au
+HAhLIj83vtdDidpZrHmHHmrMU01b6QrWQKWgKJlXRF3Se78COKPE3xSpwbLsFSF7
+hKGhVvi5RULN
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
index 6109796..620b9cc 100644
--- a/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
+++ b/net/data/verify_certificate_chain_unittest/target-signed-using-ecdsa.pem
@@ -1,6 +1,6 @@
[Created by: generate-target-signed-using-ecdsa.py]
-Certificate chain with a trusted root using RSA, and intermediary using EC,
+Certificate chain with a trusted root using RSA, and intermediate using EC,
and a target certificate using RSA. Verification is expected to succeed.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: ecdsa-with-SHA256
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,67 +17,67 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:f5:15:82:5b:5b:ef:98:fd:63:b3:5b:08:9c:21:
- 8b:be:10:f1:3a:ab:17:e8:f2:9c:37:24:80:41:6a:
- 87:71:1d:9a:ea:c3:a6:f7:25:e3:09:03:3f:92:2e:
- e1:bc:9e:fd:70:65:e9:29:21:4f:46:01:12:20:e2:
- 08:d9:bd:86:40:5d:3d:b9:6a:c5:ad:3f:dc:82:00:
- 75:7b:da:26:a1:c9:49:f2:b5:30:6c:40:07:94:c6:
- f4:41:1f:88:3a:d7:89:ab:86:79:50:cc:85:8e:f6:
- a4:fc:7b:03:70:74:1e:6e:09:98:ff:b4:8a:ea:c0:
- c1:e3:07:ff:8d:f8:e8:bc:f5:fd:6e:aa:db:fc:26:
- 2e:44:bd:52:e3:66:f5:58:6d:ea:0c:30:19:ed:8f:
- db:cd:1f:40:20:2f:36:35:d7:63:b5:d7:2c:e8:4b:
- d3:e2:90:82:2f:27:4d:22:8a:94:e3:fb:c7:40:77:
- e2:e0:56:c7:70:b6:ae:9b:e9:7c:fa:b5:d0:40:34:
- dd:0b:59:96:0d:ba:84:47:87:62:c1:3e:1f:21:5b:
- 3b:15:56:3a:8b:e8:4e:6c:02:c8:da:dc:b3:2b:a3:
- b9:7e:c6:dc:06:94:9b:0c:ea:fc:7e:02:d3:3f:d2:
- 87:30:da:c4:41:1a:5f:1f:89:c9:6f:39:96:e5:fd:
- 3a:c9
+ 00:c1:2c:42:ca:d9:bd:0d:55:79:40:9a:cf:f4:1b:
+ de:4e:e7:8b:77:40:55:83:bf:2c:27:72:58:db:62:
+ 24:12:e2:e5:4e:36:09:95:e0:0d:5b:09:d9:f8:bf:
+ e5:f8:3a:d4:9a:c9:5a:ff:16:44:16:21:15:bc:cf:
+ f6:99:ad:5c:bf:74:9a:02:3e:91:99:28:2b:76:eb:
+ fe:14:8c:24:a2:f9:41:b3:7a:86:b2:15:34:a4:fc:
+ 93:49:42:b6:ee:20:70:61:f8:8e:ae:8b:55:aa:4f:
+ 3f:ec:1e:63:45:24:c4:01:c1:68:c2:cf:a7:c5:29:
+ 58:a7:c2:cc:89:00:25:b0:1a:b1:a0:dd:52:e4:3c:
+ 41:ff:2a:3b:97:07:63:70:13:01:3d:eb:1d:a1:12:
+ f2:27:0a:c0:47:8a:96:f4:c9:f0:2f:b1:2a:7a:fa:
+ 57:f8:60:98:c5:b8:03:ce:36:fc:32:73:39:13:46:
+ 5b:71:02:42:22:45:4c:11:1d:3d:e1:77:53:9c:8d:
+ 0b:a0:bf:68:67:b4:b2:2b:6a:9a:1f:da:dd:dd:c2:
+ 0d:0c:12:00:ff:d9:d2:36:77:52:72:32:30:ea:68:
+ bb:62:55:37:24:aa:13:92:a4:b5:8c:9d:71:19:6b:
+ 4a:1a:38:b0:21:79:14:70:d3:e9:7e:92:91:fc:8a:
+ c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 0A:36:4B:AA:5E:42:C2:6B:CE:3C:58:0C:33:53:9B:ED:09:42:89:B9
+ E2:9C:21:ED:AF:F9:55:73:3F:68:B8:CD:03:B2:45:FB:C8:4F:35:8C
X509v3 Authority Key Identifier:
- keyid:A4:A1:01:1C:8F:94:62:C3:11:19:36:76:04:DC:A9:AF:6F:B6:11:9C
+ keyid:71:4E:D7:4E:A8:0A:43:13:41:FE:F4:50:09:92:D0:56:1D:44:8A:3F
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: ecdsa-with-SHA256
- 30:64:02:30:3b:0e:cc:c2:70:77:25:fe:01:46:fb:e7:fe:ee:
- 68:07:50:f1:14:b8:9a:6f:53:bb:1f:4f:7f:ba:62:d2:76:06:
- 4b:d4:93:8a:1b:f6:3c:96:91:8c:57:90:a2:99:5d:0b:02:30:
- 3e:98:92:c5:01:13:f9:d4:21:bc:44:14:a6:9b:b9:8e:f0:86:
- ec:67:c8:12:07:74:41:8c:f0:f3:e8:b7:cc:e3:23:a0:a1:05:
- 2f:66:73:be:62:9b:1c:ce:70:fe:eb:09
+ 30:65:02:30:16:0c:16:b2:2c:2e:68:f7:e6:c9:e6:fc:25:67:
+ ab:1b:cd:65:0b:30:ca:d4:92:0b:0a:26:40:cd:7b:47:b5:37:
+ 8b:84:12:b2:51:53:3e:a9:b8:d0:fa:0b:e5:ec:54:2e:02:31:
+ 00:e5:d7:43:9b:58:f1:7e:90:79:de:63:49:7f:5b:fe:7a:34:
+ 2e:5a:d1:92:13:66:3a:e0:1c:ea:77:e1:98:1c:a9:38:d5:ce:
+ 98:7b:1f:5b:8a:d4:01:cb:35:7a:d5:74:8a
-----BEGIN CERTIFICATE-----
-MIIC6zCCAnKgAwIBAgIBATAKBggqhkjOPQQDAjAXMRUwEwYDVQQDDAxJbnRlcm1l
-ZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYDVQQD
-DAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FYJbW++Y
-/WOzWwicIYu+EPE6qxfo8pw3JIBBaodxHZrqw6b3JeMJAz+SLuG8nv1wZekpIU9G
-ARIg4gjZvYZAXT25asWtP9yCAHV72iahyUnytTBsQAeUxvRBH4g614mrhnlQzIWO
-9qT8ewNwdB5uCZj/tIrqwMHjB/+N+Oi89f1uqtv8Ji5EvVLjZvVYbeoMMBntj9vN
-H0AgLzY112O11yzoS9PikIIvJ00iipTj+8dAd+LgVsdwtq6b6Xz6tdBANN0LWZYN
-uoRHh2LBPh8hWzsVVjqL6E5sAsja3LMro7l+xtwGlJsM6vx+AtM/0ocw2sRBGl8f
-iclvOZbl/TrJAgMBAAGjgekwgeYwHQYDVR0OBBYEFAo2S6peQsJrzjxYDDNTm+0J
-Qom5MB8GA1UdIwQYMBaAFKShARyPlGLDERk2dgTcqa9vthGcMD8GCCsGAQUFBwEB
-BDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVkaWFy
-eS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0ludGVy
-bWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
-BggrBgEFBQcDAjAKBggqhkjOPQQDAgNnADBkAjA7DszCcHcl/gFG++f+7mgHUPEU
-uJpvU7sfT3+6YtJ2BkvUk4ob9jyWkYxXkKKZXQsCMD6YksUBE/nUIbxEFKabuY7w
-huxnyBIHdEGM8PPot8zjI6ChBS9mc75imxzOcP7rCQ==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-----END CERTIFICATE-----
Certificate:
@@ -89,24 +89,24 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (384 bit)
pub:
- 04:ca:bc:6c:d5:4b:51:ef:d3:7d:8a:46:12:ab:5f:
- d4:f3:3c:7d:eb:40:8b:de:0f:79:6d:6f:a4:40:0f:
- 96:51:8a:00:20:48:7a:d3:d4:30:2e:5b:1d:9f:e1:
- 00:3e:54:cb:93:62:21:7c:09:57:2e:43:38:08:77:
- 5c:1c:8b:aa:17:c1:22:c0:db:01:bf:c0:80:0a:24:
- 68:0d:2d:ce:51:e4:a3:2a:c9:42:0b:7c:57:82:31:
- 94:2f:b7:a8:42:9c:4e
+ 04:ff:41:5f:16:8c:e0:75:59:3b:4a:9c:84:3e:79:
+ 93:48:a5:98:7e:93:58:58:d5:c9:ca:60:b8:6d:0c:
+ 84:81:40:de:22:95:f1:6e:56:49:8f:02:45:ce:fe:
+ e8:71:71:02:25:a7:47:5f:63:0e:4a:46:4d:e0:b3:
+ 73:9e:d8:91:2a:ad:51:47:80:b0:f5:4a:5e:0d:93:
+ a6:78:93:a7:f9:1d:ad:b6:23:78:2e:23:e0:62:f6:
+ 77:f8:1c:db:31:82:c1
ASN1 OID: secp384r1
X509v3 extensions:
X509v3 Subject Key Identifier:
- A4:A1:01:1C:8F:94:62:C3:11:19:36:76:04:DC:A9:AF:6F:B6:11:9C
+ 71:4E:D7:4E:A8:0A:43:13:41:FE:F4:50:09:92:D0:56:1D:44:8A:3F
X509v3 Authority Key Identifier:
- keyid:E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53
+ keyid:39:BF:53:7E:B4:7B:97:5D:7A:E5:12:6D:FA:8B:79:C5:67:3E:1E:E4
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -121,37 +121,37 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 22:50:e8:71:34:bf:8b:44:c5:4e:82:31:fd:50:48:f4:fa:3a:
- 01:4a:f9:71:a6:a9:a2:d0:1e:bc:d3:1d:dc:ac:8f:4e:db:58:
- 8a:6b:a2:64:29:6e:f5:1b:0b:87:2e:f5:bd:dd:92:7a:5f:4e:
- a6:aa:1d:b4:7c:f2:eb:5a:2b:17:83:99:29:1f:2b:12:45:9b:
- 1a:cd:d3:b1:71:a3:d9:7d:cf:78:f4:64:ce:03:a5:0b:c7:98:
- e8:73:58:e2:26:47:5c:c0:ed:ac:c0:11:b8:39:11:19:39:fc:
- 01:b6:4c:a2:f5:4a:ae:a3:9e:3c:82:73:3e:b5:2c:28:63:ec:
- 14:a2:9f:a7:d7:4b:3e:f3:56:50:f6:9e:87:9b:d1:38:fa:78:
- 2e:7f:29:fe:4a:a8:d6:43:c4:05:d6:d6:67:7f:52:90:36:53:
- ff:a6:78:1f:7f:f7:ad:66:65:7d:4b:57:3c:d6:b3:19:9d:08:
- af:d2:5b:1a:76:42:ff:b2:6b:2c:0d:d1:1d:05:c0:d8:28:02:
- 9b:cb:f6:1d:7a:35:93:b9:c9:76:2d:d3:ef:f4:07:bf:d6:8b:
- 33:2a:83:69:8a:68:63:0a:b9:45:f6:e4:12:38:37:87:d6:53:
- 46:33:ae:f8:72:d3:e5:e9:93:bb:ba:db:8d:73:01:b1:79:0f:
- d8:1c:a0:d0
+ d2:53:ac:75:a8:06:52:55:48:4f:d0:a3:92:51:d4:23:06:f7:
+ 98:2b:b4:15:2e:65:26:44:c0:75:64:c5:df:73:cd:dc:a3:5a:
+ 7f:86:f6:e8:6b:bd:8f:3a:7e:20:6e:b9:df:4c:07:78:f5:1d:
+ b4:4c:d0:8b:0b:71:ad:74:6d:f7:48:fb:a8:45:e6:2f:87:d8:
+ 89:e3:de:b4:15:fa:71:47:19:c6:88:a2:9c:66:cd:44:05:22:
+ f8:d8:0b:1f:72:4d:ef:98:76:15:7d:41:20:53:2b:ef:e1:35:
+ 31:7c:b7:8e:70:c0:23:5a:ab:9a:58:5e:0b:02:d6:9c:7c:6e:
+ d0:29:ad:19:95:e2:1f:e8:18:c7:c3:25:cf:21:30:52:28:32:
+ fa:cf:07:4a:19:f2:39:bd:bb:05:96:4e:11:91:9f:b4:ae:5c:
+ 9e:bc:ac:f4:4a:b8:9a:73:40:4b:88:05:6d:3c:9e:c7:7d:0a:
+ 16:4f:d1:96:67:17:fa:e6:43:8c:0e:4c:26:2e:4c:51:8b:18:
+ ee:8d:e4:69:09:ca:7f:ea:8d:33:38:fa:45:e5:d7:06:74:1d:
+ bd:05:32:c7:1f:fd:84:9e:42:f7:7d:f2:24:ab:54:50:ba:69:
+ 3e:84:15:fe:f9:20:5a:77:8a:20:af:f3:97:35:1e:16:ee:92:
+ ef:9d:c7:5d
-----BEGIN CERTIFICATE-----
MIICvzCCAaegAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEyrxs1UtR79N9ikYSq1/U
-8zx960CL3g95bW+kQA+WUYoAIEh609QwLlsdn+EAPlTLk2IhfAlXLkM4CHdcHIuq
-F8EiwNsBv8CACiRoDS3OUeSjKslCC3xXgjGUL7eoQpxOo4HLMIHIMB0GA1UdDgQW
-BBSkoQEcj5RiwxEZNnYE3Kmvb7YRnDAfBgNVHSMEGDAWgBTprHMJtobNlUIpXeXs
-x5kpEpGMUzA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwt
+ZXJtZWRpYXRlMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE/0FfFozgdVk7SpyEPnmT
+SKWYfpNYWNXJymC4bQyEgUDeIpXxblZJjwJFzv7ocXECJadHX2MOSkZN4LNzntiR
+Kq1RR4Cw9UpeDZOmeJOn+R2ttiN4LiPgYvZ3+BzbMYLBo4HLMIHIMB0GA1UdDgQW
+BBRxTtdOqApDE0H+9FAJktBWHUSKPzAfBgNVHSMEGDAWgBQ5v1N+tHuXXXrlEm36
+i3nFZz4e5DA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwt
Zm9yLWFpYS9Sb290LmNlcjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZv
ci1jcmwvUm9vdC5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8w
-DQYJKoZIhvcNAQELBQADggEBACJQ6HE0v4tExU6CMf1QSPT6OgFK+XGmqaLQHrzT
-Hdysj07bWIpromQpbvUbC4cu9b3dknpfTqaqHbR88utaKxeDmSkfKxJFmxrN07Fx
-o9l9z3j0ZM4DpQvHmOhzWOImR1zA7azAEbg5ERk5/AG2TKL1Sq6jnjyCcz61LChj
-7BSin6fXSz7zVlD2noeb0Tj6eC5/Kf5KqNZDxAXW1md/UpA2U/+meB9/961mZX1L
-VzzWsxmdCK/SWxp2Qv+yaywN0R0FwNgoApvL9h16NZO5yXYt0+/0B7/WizMqg2mK
-aGMKuUX25BI4N4fWU0Yzrvhy0+Xpk7u6241zAbF5D9gcoNA=
+DQYJKoZIhvcNAQELBQADggEBANJTrHWoBlJVSE/Qo5JR1CMG95grtBUuZSZEwHVk
+xd9zzdyjWn+G9uhrvY86fiBuud9MB3j1HbRM0IsLca10bfdI+6hF5i+H2Inj3rQV
++nFHGcaIopxmzUQFIvjYCx9yTe+YdhV9QSBTK+/hNTF8t45wwCNaq5pYXgsC1px8
+btAprRmV4h/oGMfDJc8hMFIoMvrPB0oZ8jm9uwWWThGRn7SuXJ68rPRKuJpzQEuI
+BW08nsd9ChZP0ZZnF/rmQ4wOTCYuTFGLGO6N5GkJyn/qjTM4+kXl1wZ0Hb0FMscf
+/YSeQvd98iSrVFC6aT6EFf75IFp3iiCv85c1Hhbuku+dx10=
-----END CERTIFICATE-----
Certificate:
@@ -168,30 +168,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b8:3c:af:88:6d:5e:96:7e:58:90:09:5d:40:54:
- 11:4f:55:ff:bb:e7:94:1b:ba:d7:df:b9:47:c3:ff:
- 84:71:22:da:a8:89:e6:98:71:4b:ae:d8:c1:19:df:
- 4f:69:bf:c2:3d:da:0a:a8:65:08:a8:c3:2c:aa:34:
- c7:a2:b9:00:45:6f:2e:69:6e:90:ee:9b:a2:f6:20:
- 0d:75:17:c2:33:e0:59:2c:7d:d6:3d:23:34:0e:e6:
- e0:49:74:3b:21:04:9f:6b:25:92:1a:2e:0f:e5:4a:
- 0a:96:85:0d:69:dc:ab:31:23:19:b7:d0:54:e6:18:
- c6:a1:ef:c6:e1:8b:da:a4:c2:78:7a:61:19:d7:83:
- 5f:81:34:37:3e:1a:e2:b4:56:64:eb:db:af:7c:83:
- c7:67:58:f1:69:c4:02:3a:05:1c:d9:56:5c:32:32:
- bd:a7:e9:5f:82:b3:bb:1e:a6:e8:9c:86:86:ee:de:
- 9b:19:d7:19:4f:89:cf:98:76:81:6d:dc:10:7d:d3:
- 92:b8:7b:0d:c8:2f:2d:fc:ee:d7:68:fb:d5:87:7e:
- 64:9a:32:73:57:58:5b:31:fc:da:d3:2c:2c:22:1d:
- d6:db:71:a6:58:0b:84:0d:28:de:82:ad:d1:4e:2c:
- 4b:b4:df:1d:78:34:59:52:a3:16:bd:0b:77:26:4d:
- 4b:6f
+ 00:dd:a5:d8:2e:59:ed:a6:74:62:3b:71:d5:2f:0c:
+ b5:e6:a8:d6:d3:d2:f3:38:d5:6a:14:e4:ec:7e:d0:
+ 46:81:35:0e:27:96:4e:25:0c:9f:81:85:18:03:d2:
+ 22:1b:14:cc:54:4b:96:0e:35:0c:4c:0f:20:69:3d:
+ ff:48:26:b4:28:6c:6a:1f:95:87:df:09:9e:ab:60:
+ 43:97:3c:3a:7b:4a:d3:c6:66:ba:1a:79:71:58:29:
+ cb:78:38:19:de:12:c6:09:fa:f9:fd:13:a0:e1:0e:
+ d5:e6:c2:36:d9:dc:c5:f4:ef:08:42:e8:bf:43:d1:
+ b5:8a:c9:81:b1:9c:16:8f:8d:b2:aa:9e:61:30:ed:
+ fc:12:f0:a6:f5:9e:6a:1e:6e:d7:7c:3f:ff:76:fa:
+ 6f:53:8b:49:08:84:9a:69:37:bc:f5:ee:e7:ba:ee:
+ 39:5b:31:28:05:5a:39:d3:75:5a:1a:b2:5a:ef:48:
+ d4:f5:5c:ab:99:b0:41:cd:50:cd:f4:36:c3:4d:e9:
+ 42:2c:9d:2c:86:ea:a8:e4:d0:c9:1f:d0:c3:92:1b:
+ ef:c0:2c:a2:ed:2a:23:2f:ba:c0:27:a5:13:98:1d:
+ d3:ba:71:91:29:ae:2c:85:44:ff:bd:b5:c2:bc:e3:
+ fc:ff:c1:78:51:57:e9:5e:ee:1e:c2:29:d1:8c:91:
+ 60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53
+ 39:BF:53:7E:B4:7B:97:5D:7A:E5:12:6D:FA:8B:79:C5:67:3E:1E:E4
X509v3 Authority Key Identifier:
- keyid:E9:AC:73:09:B6:86:CD:95:42:29:5D:E5:EC:C7:99:29:12:91:8C:53
+ keyid:39:BF:53:7E:B4:7B:97:5D:7A:E5:12:6D:FA:8B:79:C5:67:3E:1E:E4
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -206,41 +206,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 76:62:2d:4c:94:4e:63:cb:7f:35:52:08:e2:8a:f3:d1:03:55:
- 31:f4:e8:e0:79:68:23:f0:19:d5:7f:b2:dd:27:0a:a2:bb:6c:
- f3:85:ae:48:83:3c:37:7e:62:69:e9:af:e0:4d:60:f0:8b:bf:
- 1b:2c:da:90:10:fc:8c:83:b1:55:46:a6:fe:d1:d1:21:6f:91:
- e1:cc:d6:c6:8c:1e:b1:03:e5:d7:5b:5f:3c:a7:2d:16:a1:71:
- 54:e1:8a:4b:62:61:18:42:b1:f4:ec:6e:33:5a:3b:52:2a:8e:
- 1a:60:75:73:89:78:72:86:9f:42:82:e5:d7:0e:5c:ce:36:a7:
- 2d:8e:78:0a:e9:95:2d:72:d2:42:6f:b6:7c:7e:28:29:2d:85:
- 3c:46:ab:6f:04:a8:f4:a2:ec:c4:24:7e:7a:a9:96:ec:b3:49:
- 8b:ec:2a:00:88:c0:a6:50:01:a5:f0:df:ef:1c:6c:f8:bf:8e:
- 64:ab:ff:43:bf:05:ce:82:b6:d4:cc:30:47:d8:74:7f:4e:4c:
- dc:cc:a6:92:e3:96:37:97:b1:03:27:93:38:62:4d:b7:ae:fe:
- a2:2b:61:05:32:27:28:27:c3:1f:e9:50:91:0a:4a:4b:ca:a3:
- b0:8e:d4:56:30:ad:e8:76:49:e4:0e:36:83:15:22:8a:bc:59:
- 27:1c:62:f3
+ 0d:d6:63:36:cb:eb:0f:98:6d:d8:0a:17:d2:6e:77:43:17:e8:
+ e6:36:c6:2a:40:2c:1e:64:f3:84:13:31:b9:fd:b7:6f:1d:b0:
+ d3:49:55:4b:76:ac:9d:6b:9c:3e:2b:fd:c6:d2:0c:df:9b:ef:
+ 4a:cf:2b:9c:61:5e:6b:2a:7d:b4:08:8e:a7:2a:aa:a9:a5:0d:
+ 8e:e1:0a:99:fc:f7:fa:f2:34:50:6a:aa:3b:30:ac:7c:93:b1:
+ dc:56:9e:2c:98:12:05:26:51:ff:c5:bf:06:44:24:7e:98:21:
+ aa:32:5e:f6:25:74:6d:31:f4:6b:f6:b0:70:30:87:04:b6:89:
+ 3d:a0:0f:cc:a6:d4:bd:93:df:98:bc:a9:92:ca:3f:ff:ef:29:
+ 4b:f1:3a:6a:c8:69:89:a6:93:01:54:49:af:20:4f:4d:4d:df:
+ 8a:4e:4a:ba:4b:a8:5e:85:46:96:a2:64:6f:78:f9:d7:6b:e5:
+ db:fb:39:42:3a:18:c7:08:ce:93:41:e3:3c:78:01:64:36:8b:
+ de:78:9e:13:42:52:72:13:f6:81:df:5e:7a:45:08:4f:0d:99:
+ f8:af:1e:71:d6:55:85:3a:2c:79:17:e3:df:8e:46:8d:39:13:
+ a4:c9:e7:3d:f2:9d:ef:e7:b9:12:6e:e3:76:3f:e7:c6:5c:fe:
+ 1e:af:1b:50
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALg8r4htXpZ+WJAJXUBU
-EU9V/7vnlBu619+5R8P/hHEi2qiJ5phxS67YwRnfT2m/wj3aCqhlCKjDLKo0x6K5
-AEVvLmlukO6bovYgDXUXwjPgWSx91j0jNA7m4El0OyEEn2slkhouD+VKCpaFDWnc
-qzEjGbfQVOYYxqHvxuGL2qTCeHphGdeDX4E0Nz4a4rRWZOvbr3yDx2dY8WnEAjoF
-HNlWXDIyvafpX4Kzux6m6JyGhu7emxnXGU+Jz5h2gW3cEH3Tkrh7DcgvLfzu12j7
-1Yd+ZJoyc1dYWzH82tMsLCId1ttxplgLhA0o3oKt0U4sS7TfHXg0WVKjFr0LdyZN
-S28CAwEAAaOByzCByDAdBgNVHQ4EFgQU6axzCbaGzZVCKV3l7MeZKRKRjFMwHwYD
-VR0jBBgwFoAU6axzCbaGzZVCKV3l7MeZKRKRjFMwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB2Yi1MlE5j
-y381UgjiivPRA1Ux9OjgeWgj8BnVf7LdJwqiu2zzha5Igzw3fmJp6a/gTWDwi78b
-LNqQEPyMg7FVRqb+0dEhb5HhzNbGjB6xA+XXW188py0WoXFU4YpLYmEYQrH07G4z
-WjtSKo4aYHVziXhyhp9CguXXDlzONqctjngK6ZUtctJCb7Z8figpLYU8RqtvBKj0
-ouzEJH56qZbss0mL7CoAiMCmUAGl8N/vHGz4v45kq/9DvwXOgrbUzDBH2HR/Tkzc
-zKaS45Y3l7EDJ5M4Yk23rv6iK2EFMicoJ8Mf6VCRCkpLyqOwjtRWMK3odknkDjaD
-FSKKvFknHGLz
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAN1mM2y+sP
+mG3YChfSbndDF+jmNsYqQCweZPOEEzG5/bdvHbDTSVVLdqyda5w+K/3G0gzfm+9K
+zyucYV5rKn20CI6nKqqppQ2O4QqZ/Pf68jRQaqo7MKx8k7HcVp4smBIFJlH/xb8G
+RCR+mCGqMl72JXRtMfRr9rBwMIcEtok9oA/MptS9k9+YvKmSyj//7ylL8TpqyGmJ
+ppMBVEmvIE9NTd+KTkq6S6hehUaWomRvePnXa+Xb+zlCOhjHCM6TQeM8eAFkNove
+eJ4TQlJyE/aB3156RQhPDZn4rx5x1lWFOix5F+PfjkaNOROkyec98p3v57kSbuN2
+P+fGXP4erxtQ
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem b/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem
index dd82071..1e60c4a0 100644
--- a/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem
+++ b/net/data/verify_certificate_chain_unittest/target-signed-with-md5.pem
@@ -1,6 +1,6 @@
[Created by: generate-target-signed-with-md5.py]
-Certificate chain with an intermediary that uses MD5 to sign the target
+Certificate chain with an intermediate that uses MD5 to sign the target
certificate. This is expected to fail because MD5 is too weak.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: md5WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c5:55:ac:42:f6:5f:21:93:e6:93:07:6a:dc:a0:
- 4c:66:21:42:8c:2e:f4:d0:61:30:ac:bf:9a:3b:b3:
- 59:21:e4:29:9f:33:5d:5e:6f:a1:de:4d:c2:b3:22:
- f3:16:0a:81:f0:51:90:f8:45:e0:5e:9b:7d:3a:e4:
- 60:d2:a8:a1:b1:2f:13:8c:41:dc:c3:58:1d:66:6c:
- 67:13:5e:21:51:f7:49:21:5d:29:dd:91:fd:a7:36:
- 10:bb:d1:30:71:16:ee:4b:7f:1b:ba:02:c3:79:0c:
- 4d:e7:98:59:b1:0f:c8:61:a3:f9:5c:fa:03:08:29:
- 41:af:60:50:b8:80:3b:f6:fe:75:0f:bb:d4:92:d9:
- f5:3a:25:41:12:f1:cd:ad:2c:08:c9:f9:a3:17:78:
- 86:2a:18:13:b1:20:15:83:de:04:ac:2a:c6:42:5c:
- d1:f9:e6:12:1c:1b:51:7a:2c:cd:40:94:c8:76:17:
- d7:20:4a:f8:e4:c8:3c:57:7c:c8:c6:6d:bd:2a:5e:
- a9:03:7e:14:9d:a5:4e:1f:b1:aa:94:2f:64:34:6e:
- d1:cb:5f:41:84:f7:86:95:04:90:ce:77:27:f6:7d:
- 8e:5b:9c:52:7a:5e:dd:e2:f6:e6:fd:10:8d:e2:7d:
- 34:f0:54:1b:c2:54:45:fe:01:97:90:f7:33:03:db:
- 0c:bd
+ 00:bc:8a:b8:3e:5c:f9:f0:cc:33:10:6f:ab:ec:81:
+ 53:1c:4f:d3:c7:e2:c6:ac:57:9b:b0:a1:37:3d:2a:
+ b8:4f:eb:23:8b:64:6d:2f:5b:f5:02:dc:5b:d5:11:
+ ea:29:38:4c:76:40:f4:b0:b0:47:9f:6c:8d:89:91:
+ f4:0d:e5:cb:bb:c2:2a:cc:c1:9b:3a:56:f6:26:8e:
+ 4a:df:2c:b3:7c:35:3f:71:a9:37:49:3c:1a:40:fd:
+ 5e:6f:1b:5e:a0:61:64:d1:40:80:d7:dd:2b:d4:32:
+ 4c:80:f8:5a:8c:b2:ff:b6:ea:91:73:59:00:5e:02:
+ a8:49:1b:2b:fa:c2:9b:35:44:79:74:7b:02:8e:68:
+ 47:76:43:8d:23:d0:d0:f9:c4:8c:a1:aa:99:cb:55:
+ 24:a1:11:1c:88:0d:8a:5c:d9:46:a6:8f:ac:3f:83:
+ e3:4e:35:90:03:fe:0e:2d:d7:c6:9b:a3:36:d7:7f:
+ af:32:89:83:94:40:e7:87:1b:fe:f5:1b:1e:75:ba:
+ f2:b5:70:f3:75:f8:85:b3:58:9d:5f:56:6b:60:0f:
+ 53:12:82:dc:01:67:28:66:2c:3e:f6:df:08:fb:b9:
+ da:ce:00:60:b3:b4:65:fd:1d:1e:14:7c:90:9b:0b:
+ d4:ca:ff:96:12:c0:2c:cd:fb:c3:4f:62:d0:67:59:
+ bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- DF:16:6B:0E:36:1E:E4:F1:15:A2:3A:9E:07:4A:F9:6D:81:82:7A:D5
+ 2F:67:2E:92:9E:39:55:C4:47:23:6A:10:A9:37:87:97:74:0F:55:57
X509v3 Authority Key Identifier:
- keyid:E2:CD:39:61:AF:F5:B9:CE:D9:7C:36:97:5D:28:36:61:63:0B:CA:49
+ keyid:A7:A7:7E:EF:32:C8:D1:7C:DF:CA:EE:F4:4F:7A:EA:67:43:53:57:CF
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: md5WithRSAEncryption
- 35:9f:32:4a:5f:2e:b6:3f:d4:03:97:8f:0d:70:8b:5a:8d:62:
- 30:77:44:37:e0:85:5f:e8:fc:8a:f6:e2:cb:df:05:f3:08:2d:
- 05:dc:bb:16:1f:69:06:2e:4b:2b:1b:6f:a1:b3:77:02:1e:7d:
- 49:da:a0:d9:6a:ac:bd:5e:4d:65:10:51:ee:e6:2a:33:e5:b9:
- b5:5b:83:67:3d:c1:9d:c5:a6:c4:6e:7b:3b:ad:88:02:dc:ef:
- 98:c4:cf:1d:cc:ab:45:23:53:27:ee:7f:87:f4:e6:13:5a:3a:
- 3d:30:1e:66:b7:6e:67:e7:ae:1b:c6:4e:26:14:0f:cf:71:8a:
- 0c:ee:60:14:25:45:a1:4b:2f:46:73:41:11:59:9f:e7:9f:12:
- 01:7e:dc:e4:68:96:31:a5:c0:cc:03:fc:e3:b0:c5:c2:65:57:
- ef:48:a4:85:eb:6e:d9:95:2f:d8:b1:48:46:b1:d5:30:84:d6:
- c0:aa:32:41:a2:8a:be:35:b4:97:e5:1d:f7:36:f4:47:36:68:
- f9:6b:10:39:1f:13:e8:b3:f5:7c:57:71:df:a8:e8:40:28:ed:
- 65:3a:ba:7a:98:fa:4d:14:e9:5e:f5:a3:92:03:aa:d5:0b:72:
- 29:7e:30:80:03:40:b9:eb:72:e2:ac:43:3a:2c:f6:c9:a3:13:
- c7:c9:05:b9
+ 30:9f:40:ac:31:10:78:0f:06:4b:ed:6d:de:05:20:c6:29:64:
+ 66:a8:2a:4d:ac:b3:3d:40:d5:70:80:24:08:13:00:73:0b:90:
+ 32:c3:fe:35:b3:8c:77:bb:d6:79:a9:84:e3:76:89:d9:0f:19:
+ 2e:68:6a:ec:09:ef:9c:57:32:ee:9f:e5:0e:5e:4c:6b:87:eb:
+ e0:7b:e9:ed:b0:db:ef:34:7a:41:aa:7b:0d:b7:37:89:17:99:
+ b8:43:db:93:19:30:91:7c:25:fe:1d:cd:69:02:b8:6d:c6:08:
+ fa:7f:d8:3c:e5:9a:9d:fd:af:13:53:5a:54:a7:5d:d1:e3:46:
+ 3a:c9:8b:ac:e3:cb:e8:67:a8:e0:cf:bb:ab:45:5c:d6:d5:51:
+ d2:2a:d2:b2:f8:3f:05:d2:20:e8:95:17:7d:43:fe:af:cd:1c:
+ fa:d2:8f:8f:3b:b1:2b:3d:22:06:d8:c7:0d:00:64:8a:35:40:
+ 32:6e:2c:07:be:5f:e7:9d:06:4f:b1:99:a9:fb:2e:03:80:79:
+ 5e:19:60:a9:7f:e5:12:bb:ba:a8:f2:34:d7:00:29:11:ab:8d:
+ 51:52:67:33:99:5c:08:de:85:a6:ea:42:9d:08:76:d1:f1:23:
+ fa:c0:4c:ff:38:5a:de:1b:7a:16:e7:79:cf:a0:d0:2f:b7:e5:
+ d4:8e:92:4f
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQQFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVaxC
-9l8hk+aTB2rcoExmIUKMLvTQYTCsv5o7s1kh5CmfM11eb6HeTcKzIvMWCoHwUZD4
-ReBem3065GDSqKGxLxOMQdzDWB1mbGcTXiFR90khXSndkf2nNhC70TBxFu5Lfxu6
-AsN5DE3nmFmxD8hho/lc+gMIKUGvYFC4gDv2/nUPu9SS2fU6JUES8c2tLAjJ+aMX
-eIYqGBOxIBWD3gSsKsZCXNH55hIcG1F6LM1AlMh2F9cgSvjkyDxXfMjGbb0qXqkD
-fhSdpU4fsaqUL2Q0btHLX0GE94aVBJDOdyf2fY5bnFJ6Xt3i9ub9EI3ifTTwVBvC
-VEX+AZeQ9zMD2wy9AgMBAAGjgekwgeYwHQYDVR0OBBYEFN8Waw42HuTxFaI6ngdK
-+W2BgnrVMB8GA1UdIwQYMBaAFOLNOWGv9bnO2Xw2l10oNmFjC8pJMD8GCCsGAQUF
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
+VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8irg+
+XPnwzDMQb6vsgVMcT9PH4sasV5uwoTc9KrhP6yOLZG0vW/UC3FvVEeopOEx2QPSw
+sEefbI2JkfQN5cu7wirMwZs6VvYmjkrfLLN8NT9xqTdJPBpA/V5vG16gYWTRQIDX
+3SvUMkyA+FqMsv+26pFzWQBeAqhJGyv6wps1RHl0ewKOaEd2Q40j0ND5xIyhqpnL
+VSShERyIDYpc2Uamj6w/g+NONZAD/g4t18abozbXf68yiYOUQOeHG/71Gx51uvK1
+cPN1+IWzWJ1fVmtgD1MSgtwBZyhmLD723wj7udrOAGCztGX9HR4UfJCbC9TK/5YS
+wCzN+8NPYtBnWbxxAgMBAAGjgekwgeYwHQYDVR0OBBYEFC9nLpKeOVXERyNqEKk3
+h5d0D1VXMB8GA1UdIwQYMBaAFKenfu8yyNF838ru9E966mdDU1fPMD8GCCsGAQUF
BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQQFAAOCAQEANZ8ySl8utj/UA5ePDXCL
-Wo1iMHdEN+CFX+j8ivbiy98F8wgtBdy7Fh9pBi5LKxtvobN3Ah59Sdqg2WqsvV5N
-ZRBR7uYqM+W5tVuDZz3BncWmxG57O62IAtzvmMTPHcyrRSNTJ+5/h/TmE1o6PTAe
-ZrduZ+euG8ZOJhQPz3GKDO5gFCVFoUsvRnNBEVmf558SAX7c5GiWMaXAzAP847DF
-wmVX70ikhetu2ZUv2LFIRrHVMITWwKoyQaKKvjW0l+Ud9zb0RzZo+WsQOR8T6LP1
-fFdx36joQCjtZTq6epj6TRTpXvWjkgOq1QtyKX4wgANAuety4qxDOiz2yaMTx8kF
-uQ==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-----END CERTIFICATE-----
Certificate:
@@ -102,35 +102,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b0:67:b9:ee:01:e6:50:d2:01:11:81:3a:70:41:
- c3:36:af:95:28:11:ed:90:02:37:9a:f9:fe:23:38:
- d6:72:c5:38:da:62:a4:84:dc:50:12:0e:03:e2:34:
- 4d:d8:88:b7:aa:09:31:14:71:b5:e5:f9:80:06:c5:
- 72:8a:1a:dd:72:a8:c9:76:79:3b:14:34:0a:bc:7a:
- d4:a6:75:58:c0:f1:77:d7:23:bb:5b:a1:54:d2:cf:
- ec:0f:b7:ab:53:01:7d:1d:54:40:68:12:fb:75:68:
- 56:d5:0d:5c:00:de:81:5f:a5:14:fd:5d:77:b8:1f:
- 3e:ee:84:99:a5:b5:0d:13:9a:fe:cf:b8:b0:e1:4c:
- db:87:64:e1:36:a0:04:02:5d:fd:58:9e:e5:70:85:
- 63:65:50:93:b8:3e:6c:85:10:67:bc:3d:e2:77:38:
- b2:75:b5:e3:57:55:b2:44:68:3c:ab:65:2b:cb:8b:
- 11:29:d5:7c:b8:24:88:25:d1:80:0b:04:3f:0e:e9:
- 1d:79:db:39:7d:ab:81:67:fb:cf:ae:a3:da:ea:f1:
- 12:ac:cd:87:96:5c:ed:fd:db:bc:e2:3a:4e:33:05:
- af:1a:d3:03:85:ec:74:23:04:12:7e:62:a1:56:4c:
- 45:9c:95:80:55:b6:2f:13:82:27:24:c4:a0:68:33:
- e6:71
+ 00:b1:0a:34:0b:b1:d9:65:b5:ea:7a:ac:f5:96:11:
+ 68:ba:f0:c9:6b:57:c7:97:7e:f4:bb:5d:31:4e:43:
+ 9b:04:7f:a7:2e:fd:4c:e0:03:c7:0d:ac:70:24:0e:
+ bc:26:a2:5d:48:71:04:9b:43:8c:97:e4:2c:df:7c:
+ 59:39:eb:a3:94:b3:5b:87:d5:11:b6:c1:4a:e9:7b:
+ e8:f8:c5:31:3b:2c:4d:f0:47:34:75:a8:88:6d:22:
+ a9:24:dc:00:1f:a0:36:1e:e3:a7:92:b1:00:9d:f8:
+ ef:27:46:63:60:23:67:48:e6:5d:66:b3:3d:b6:84:
+ 04:3f:b1:1b:2f:b7:8e:71:26:28:32:ff:de:fa:b0:
+ cb:e2:90:5a:72:9a:83:1d:de:c7:ad:b1:5d:68:11:
+ 9e:6a:ac:44:6b:06:cc:93:6c:a9:13:af:a4:72:e2:
+ 34:4d:c4:d7:8f:ee:99:f4:e4:db:d1:19:45:bf:97:
+ 76:59:7d:b9:32:63:07:a0:1c:e3:19:98:f6:aa:d8:
+ ba:44:f6:ec:5f:eb:46:d1:63:70:56:00:a1:f1:ce:
+ 18:c3:a5:77:27:81:e6:18:65:78:9a:c4:87:f9:36:
+ 2e:b6:fc:5c:75:a9:a9:59:6a:df:99:26:07:c9:1d:
+ 1a:a8:4f:6e:b6:10:92:4f:96:c1:74:30:4a:5c:8b:
+ bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- E2:CD:39:61:AF:F5:B9:CE:D9:7C:36:97:5D:28:36:61:63:0B:CA:49
+ A7:A7:7E:EF:32:C8:D1:7C:DF:CA:EE:F4:4F:7A:EA:67:43:53:57:CF
X509v3 Authority Key Identifier:
- keyid:BD:2A:00:54:BB:89:72:89:4F:27:75:12:AA:89:38:AB:A0:06:F7:D1
+ keyid:7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -145,41 +145,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 3d:9a:bd:e5:a7:4d:e4:0e:ea:6a:34:da:9e:48:c7:8a:e4:34:
- 6c:19:fe:d0:2f:2f:7b:01:14:46:3a:45:d7:a7:46:6e:83:bb:
- 54:cc:4e:af:cf:ef:fc:6d:90:e4:54:38:94:2d:cb:55:85:bd:
- 1d:9f:9e:cd:ac:68:b3:7f:ed:bb:1f:30:30:14:15:ba:17:e4:
- 62:db:6b:70:5a:1f:c2:e7:43:c6:30:d0:0f:be:78:06:4e:09:
- 0b:00:96:63:d2:14:84:93:88:5d:e6:bf:93:1c:e9:18:9d:df:
- 7d:db:34:39:e5:94:f8:c9:84:b6:ff:a0:e7:5c:51:5e:ba:40:
- 82:5a:7e:64:ca:bf:e3:0e:c8:76:0b:5c:be:29:b1:62:79:18:
- b2:d6:c3:ee:d0:05:61:96:be:a8:dc:c5:65:72:cc:f7:f8:6e:
- 27:85:c3:9b:68:6d:3d:a5:e5:34:20:ff:19:12:62:7c:5d:b8:
- 95:8f:a8:a8:a8:90:41:e0:83:f1:e3:3f:67:26:bc:b1:6c:76:
- b1:5e:25:60:49:7d:78:bf:bb:11:22:43:ac:d3:5f:c0:c9:73:
- 76:d5:9c:97:b0:ec:17:36:0d:4b:83:3e:77:d0:84:62:76:98:
- af:6d:42:ac:cb:40:bb:04:1d:9e:0a:a3:97:11:f2:b0:3f:6b:
- b6:fd:ff:da
+ 96:e8:cf:14:ab:83:41:2e:62:24:7e:03:ad:0e:ae:8e:6a:93:
+ ed:3d:86:68:84:b5:76:2b:88:c3:67:b6:15:b6:38:b2:27:f3:
+ 2a:1b:83:42:60:11:ee:94:ba:d8:d8:35:74:92:c1:5f:b4:b3:
+ f0:fc:5e:eb:51:93:be:00:11:79:db:94:86:0f:19:26:bb:f6:
+ b1:ec:93:66:34:df:3e:7e:6e:80:17:3e:4a:9b:53:04:05:22:
+ 88:de:65:e3:50:c1:81:fa:1d:fc:76:09:f6:25:89:9d:4f:d3:
+ ff:76:b0:3e:81:d3:79:8f:05:48:68:36:93:43:ac:b8:41:37:
+ 98:54:bc:71:90:ed:12:c0:1f:f7:b4:a7:7b:56:34:e3:97:01:
+ 41:56:9a:c6:37:3f:8e:34:9b:51:37:77:4f:67:d6:72:66:d1:
+ 89:64:10:80:5f:13:15:34:03:a9:c5:6e:07:6c:77:78:99:27:
+ f4:e0:44:0e:5f:a0:67:dd:f7:4d:4a:93:b3:71:d2:8e:1b:d6:
+ 29:5a:8f:f1:f7:c8:9c:33:ae:28:15:7b:10:ee:92:bd:d5:3c:
+ b3:81:5a:52:5d:96:43:ae:bd:03:83:36:e8:c5:f8:23:03:26:
+ eb:2f:70:4a:bb:d8:e1:6a:a0:7d:23:b1:4f:32:28:65:23:84:
+ 02:95:8e:2d
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGe57gHm
-UNIBEYE6cEHDNq+VKBHtkAI3mvn+IzjWcsU42mKkhNxQEg4D4jRN2Ii3qgkxFHG1
-5fmABsVyihrdcqjJdnk7FDQKvHrUpnVYwPF31yO7W6FU0s/sD7erUwF9HVRAaBL7
-dWhW1Q1cAN6BX6UU/V13uB8+7oSZpbUNE5r+z7iw4Uzbh2ThNqAEAl39WJ7lcIVj
-ZVCTuD5shRBnvD3idziydbXjV1WyRGg8q2Ury4sRKdV8uCSIJdGACwQ/Dukdeds5
-fauBZ/vPrqPa6vESrM2Hllzt/du84jpOMwWvGtMDhex0IwQSfmKhVkxFnJWAVbYv
-E4InJMSgaDPmcQIDAQABo4HLMIHIMB0GA1UdDgQWBBTizTlhr/W5ztl8NpddKDZh
-YwvKSTAfBgNVHSMEGDAWgBS9KgBUu4lyiU8ndRKqiTiroAb30TA3BggrBgEFBQcB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-AD2aveWnTeQO6mo02p5Ix4rkNGwZ/tAvL3sBFEY6RdenRm6Du1TMTq/P7/xtkORU
-OJQty1WFvR2fns2saLN/7bsfMDAUFboX5GLba3BaH8LnQ8Yw0A++eAZOCQsAlmPS
-FISTiF3mv5Mc6Rid333bNDnllPjJhLb/oOdcUV66QIJafmTKv+MOyHYLXL4psWJ5
-GLLWw+7QBWGWvqjcxWVyzPf4bieFw5tobT2l5TQg/xkSYnxduJWPqKiokEHgg/Hj
-P2cmvLFsdrFeJWBJfXi/uxEiQ6zTX8DJc3bVnJew7Bc2DUuDPnfQhGJ2mK9tQqzL
-QLsEHZ4Ko5cR8rA/a7b9/9o=
+AJbozxSrg0EuYiR+A60Oro5qk+09hmiEtXYriMNnthW2OLIn8yobg0JgEe6UutjY
+NXSSwV+0s/D8XutRk74AEXnblIYPGSa79rHsk2Y03z5+boAXPkqbUwQFIojeZeNQ
+wYH6Hfx2CfYliZ1P0/92sD6B03mPBUhoNpNDrLhBN5hUvHGQ7RLAH/e0p3tWNOOX
+AUFWmsY3P440m1E3d09n1nJm0YlkEIBfExU0A6nFbgdsd3iZJ/TgRA5foGfd901K
+k7Nx0o4b1ilaj/H3yJwzrigVexDukr3VPLOBWlJdlkOuvQODNujF+CMDJusvcEq7
+2OFqoH0jsU8yKGUjhAKVji0=
-----END CERTIFICATE-----
Certificate:
@@ -196,30 +196,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a0:9b:ff:8c:74:7b:c9:1e:3c:34:5b:7c:c0:35:
- a4:88:6a:26:ed:0b:52:e9:58:e6:b5:bd:fd:f6:ae:
- 0f:08:09:24:ef:62:fb:1c:61:7f:8a:ca:5f:d4:b5:
- 2b:45:c2:21:1f:1a:a1:ef:f9:d8:0d:be:31:88:bd:
- d7:35:8e:0d:de:e8:be:60:63:f6:3c:6a:cd:e7:1d:
- 78:36:86:91:a1:e9:5c:2d:c6:9a:95:b9:e7:c3:66:
- 6f:b5:0c:4b:aa:9a:51:ea:b3:a3:9e:57:d6:17:c9:
- ae:4c:3f:32:ef:28:5a:99:6a:dc:50:54:f5:cc:80:
- 51:76:6c:50:4d:52:01:45:92:af:a2:ca:a7:c1:9e:
- 76:24:29:9c:d1:73:95:0a:a1:16:73:0f:56:9d:e8:
- fe:c2:bb:e4:64:99:a3:d4:46:7d:7a:f7:25:d3:49:
- c0:da:38:18:78:9c:2a:40:60:c2:b8:98:8a:84:ed:
- d2:84:e0:39:a6:31:64:36:2a:59:ca:ba:dc:c2:6d:
- a2:ac:1a:93:58:27:76:95:ea:5d:12:8d:7a:a5:b6:
- 50:3b:1c:25:3f:75:ee:eb:db:12:78:67:47:0d:86:
- 49:77:ce:f5:d0:37:03:55:eb:98:93:bf:f1:10:5b:
- 87:aa:a1:ef:76:30:e1:e4:77:54:b1:52:e8:c9:81:
- 4d:5b
+ 00:a7:f5:bd:ee:ad:ff:30:37:e6:5a:68:20:1a:22:
+ b1:f5:bb:5e:24:38:bd:b7:c1:34:d4:97:8b:16:97:
+ 34:17:bc:61:df:ff:ff:6b:9c:b6:34:79:7d:5a:e7:
+ 3b:cf:07:73:b8:2d:03:59:56:68:4a:85:25:58:f4:
+ 68:01:61:84:52:99:2f:6a:7e:cb:13:61:8b:6e:3b:
+ f5:8e:c2:48:cc:1e:50:28:4f:5f:4b:6b:32:d3:f3:
+ 76:c9:6f:a3:aa:40:1b:06:59:19:cd:42:70:f4:85:
+ fe:86:38:ca:84:42:5f:bb:d3:a7:41:42:46:59:14:
+ 3f:11:1d:62:d9:e1:16:3f:06:a7:59:f3:ff:ba:f1:
+ 88:7b:0c:68:10:49:ac:8d:75:87:08:94:f6:ec:ce:
+ 4c:6d:e6:77:85:25:c8:8f:42:0a:1d:d3:00:cc:89:
+ 31:dc:32:07:d7:2e:62:16:73:8b:5d:c4:c9:1b:87:
+ 7c:46:64:2d:cc:e0:fb:69:d2:e1:bd:23:2b:d9:15:
+ 62:22:a4:cd:75:64:f1:78:76:cc:07:11:59:08:60:
+ 03:dd:cb:67:3e:a7:b8:12:fa:96:54:6f:6d:9f:05:
+ 11:89:71:13:50:94:bb:bb:17:7e:80:ed:40:b1:ba:
+ f2:36:2d:45:bb:73:78:5e:b7:5e:2f:e7:f8:66:ec:
+ 1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- BD:2A:00:54:BB:89:72:89:4F:27:75:12:AA:89:38:AB:A0:06:F7:D1
+ 7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87
X509v3 Authority Key Identifier:
- keyid:BD:2A:00:54:BB:89:72:89:4F:27:75:12:AA:89:38:AB:A0:06:F7:D1
+ keyid:7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 43:7c:24:ea:dc:11:3a:08:d7:6e:dd:8c:b9:21:1a:d7:88:d8:
- f1:4c:90:a0:b7:67:a7:3c:d2:8d:a4:68:50:34:db:a4:f1:69:
- d4:e0:8b:4c:b3:39:62:11:b5:4a:df:3a:60:87:eb:f6:79:2c:
- ef:4d:67:91:93:5f:b3:d1:63:1b:2e:12:74:4e:e2:60:d8:c1:
- 1f:e8:b2:5d:d4:56:2d:85:27:64:36:b0:e4:17:5e:d1:9c:ce:
- 56:e2:f4:68:d3:80:6f:44:d6:e4:7b:5b:c6:5e:3e:ea:69:9d:
- 97:4b:0d:83:3b:a7:52:f5:78:96:9f:af:15:e2:bf:59:a7:5f:
- 5b:d4:21:d1:49:b2:f4:b5:26:b1:b1:cf:74:d0:ba:26:b1:2e:
- 0e:ef:74:29:ed:f5:35:18:2f:cc:8b:80:39:41:8f:ea:ab:81:
- 6a:89:71:b8:22:e6:bc:e5:33:34:f7:dd:6c:37:0a:e1:21:a7:
- 7f:2d:29:f6:aa:02:d8:47:3f:a6:3d:0e:85:20:59:f8:5f:49:
- 06:f7:3a:9a:b8:d9:3a:08:ce:9a:60:aa:dd:72:07:1e:bb:8f:
- 86:fd:6a:3e:dc:4a:3f:5e:c2:b7:e6:0e:89:75:08:89:e3:bf:
- 2b:6c:cc:02:63:e0:1c:04:21:79:64:c0:7c:89:73:2b:e9:85:
- 49:80:5e:f4
+ a6:5d:56:c1:c7:29:8f:3a:1d:86:2c:5f:1e:ff:83:7a:c0:44:
+ 81:81:f7:16:9d:84:70:66:f8:1a:f4:8e:50:a7:dd:d2:1a:2e:
+ f9:6e:cc:e6:39:7c:fb:7e:29:54:24:3d:4a:82:e1:a5:d6:7e:
+ 4c:c8:58:b8:d6:f7:d2:90:ca:d9:8f:e9:c8:59:bc:73:1c:37:
+ 19:7c:a4:2b:ec:68:de:e9:04:fa:14:f0:07:bd:2f:3f:16:a4:
+ 50:8f:e8:89:ea:c1:31:d1:ce:6e:b1:21:11:5b:69:dc:28:e7:
+ 8a:33:8d:40:52:f8:86:8e:b0:a1:7a:a5:46:f2:8d:d7:d1:2e:
+ c8:2f:0f:ac:20:38:25:d6:4e:b2:72:fc:88:f3:47:93:bc:ec:
+ 47:0c:1c:cf:22:65:40:04:70:15:fa:79:ec:09:a2:69:a9:09:
+ 78:f7:3e:84:f3:7f:fa:a2:11:ad:45:72:5d:9d:55:58:fa:b1:
+ c6:67:4e:41:b4:bd:88:a0:e2:55:ae:26:3a:72:78:3d:e4:ab:
+ ad:f7:83:69:24:cd:22:4f:2e:23:a1:05:19:bd:57:d3:e8:b3:
+ 3d:9f:bd:ed:0b:95:bf:e5:47:8f:da:dd:9d:6b:27:61:bd:49:
+ 15:9c:9d:6b:40:2b:54:5f:3f:56:d5:08:29:6c:46:49:2d:3f:
+ d1:91:ff:f8
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKCb/4x0e8kePDRbfMA1
-pIhqJu0LUulY5rW9/fauDwgJJO9i+xxhf4rKX9S1K0XCIR8aoe/52A2+MYi91zWO
-Dd7ovmBj9jxqzecdeDaGkaHpXC3GmpW558Nmb7UMS6qaUeqzo55X1hfJrkw/Mu8o
-Wplq3FBU9cyAUXZsUE1SAUWSr6LKp8GediQpnNFzlQqhFnMPVp3o/sK75GSZo9RG
-fXr3JdNJwNo4GHicKkBgwriYioTt0oTgOaYxZDYqWcq63MJtoqwak1gndpXqXRKN
-eqW2UDscJT917uvbEnhnRw2GSXfO9dA3A1XrmJO/8RBbh6qh73Yw4eR3VLFS6MmB
-TVsCAwEAAaOByzCByDAdBgNVHQ4EFgQUvSoAVLuJcolPJ3USqok4q6AG99EwHwYD
-VR0jBBgwFoAUvSoAVLuJcolPJ3USqok4q6AG99EwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBDfCTq3BE6
-CNdu3Yy5IRrXiNjxTJCgt2enPNKNpGhQNNuk8WnU4ItMszliEbVK3zpgh+v2eSzv
-TWeRk1+z0WMbLhJ0TuJg2MEf6LJd1FYthSdkNrDkF17RnM5W4vRo04BvRNbke1vG
-Xj7qaZ2XSw2DO6dS9XiWn68V4r9Zp19b1CHRSbL0tSaxsc900LomsS4O73Qp7fU1
-GC/Mi4A5QY/qq4FqiXG4Iua85TM0991sNwrhIad/LSn2qgLYRz+mPQ6FIFn4X0kG
-9zqauNk6CM6aYKrdcgceu4+G/Wo+3Eo/XsK35g6JdQiJ478rbMwCY+AcBCF5ZMB8
-iXMr6YVJgF70
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCmXVbBxymP
+Oh2GLF8e/4N6wESBgfcWnYRwZvga9I5Qp93SGi75bszmOXz7filUJD1KguGl1n5M
+yFi41vfSkMrZj+nIWbxzHDcZfKQr7Gje6QT6FPAHvS8/FqRQj+iJ6sEx0c5usSER
+W2ncKOeKM41AUviGjrCheqVG8o3X0S7ILw+sIDgl1k6ycvyI80eTvOxHDBzPImVA
+BHAV+nnsCaJpqQl49z6E83/6ohGtRXJdnVVY+rHGZ05BtL2IoOJVriY6cng95Kut
+94NpJM0iTy4joQUZvVfT6LM9n73tC5W/5UeP2t2daydhvUkVnJ1rQCtUXz9W1Qgp
+bEZJLT/Rkf/4
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem b/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem
index f02ac62..20ae9b5 100644
--- a/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem
+++ b/net/data/verify_certificate_chain_unittest/target-unknown-critical-extension.pem
@@ -1,16 +1,16 @@
-[Created by: ./generate-target-unknown-critical-extension.py]
+[Created by: generate-target-unknown-critical-extension.py]
-Certificate chain with 1 intermediary and a trusted root. The intermediary
-has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as critical.
-Verifying this certificate chain is expected to fail because there is an
-unrecognized critical extension.
+Certificate chain with 1 intermediate and a trusted root. The target
+certificate has an unknown X.509v3 extension (OID=1.2.3.4) that is marked as
+critical. Verifying this certificate chain is expected to fail because there is
+an unrecognized critical extension.
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -19,38 +19,38 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c9:42:1d:0f:19:4b:d8:78:b9:3f:4d:43:a8:a9:
- 92:67:ed:f3:55:a4:f5:9e:f4:d0:21:3c:25:cc:28:
- 1d:db:22:5c:c0:eb:e8:78:fe:6c:71:72:ed:0c:cd:
- 76:80:44:dc:72:d1:92:29:7d:e8:7f:e0:42:60:d6:
- cb:b1:53:06:0d:6c:8b:f4:d3:ce:42:af:34:bc:57:
- 63:34:dd:b2:00:26:3f:a9:7f:c8:ce:f6:1a:66:75:
- db:7c:b6:57:ef:ee:3d:e7:d7:b8:38:3a:83:5d:7a:
- 63:1f:91:c4:f1:15:da:9b:e9:f7:ef:d5:d6:26:16:
- 96:c1:94:55:3f:3e:67:13:26:bf:3d:0c:93:ab:1b:
- a2:58:10:38:60:11:18:15:c5:3c:db:71:62:ef:27:
- 1f:a9:62:61:1f:f6:55:51:d9:7c:2d:b6:e3:2d:c3:
- 86:2b:cd:5c:30:d3:a0:0d:a4:e4:34:fb:bb:59:09:
- d5:7b:8f:b2:49:10:0d:d7:2d:0e:34:72:25:7b:b4:
- 0e:e9:fd:cb:ce:50:ee:d2:71:40:14:3d:06:ad:71:
- 52:43:cc:e9:77:4e:c4:8c:af:8c:a2:41:40:4a:82:
- 82:83:a2:58:e3:5e:40:fa:74:f0:fb:bd:46:aa:55:
- 9d:6d:5b:db:af:6a:1f:7c:46:cf:1a:1f:d3:17:c3:
- 02:2f
+ 00:d5:9d:3b:85:e5:81:69:52:70:67:33:4a:2b:76:
+ 6a:e5:61:db:af:e5:32:74:85:dd:54:d2:c7:76:5a:
+ 5c:38:d8:46:fc:b4:33:f5:9d:8e:80:83:ab:31:96:
+ 41:c4:c2:52:af:8c:4d:0e:5c:69:c5:5d:cc:b4:1b:
+ ef:de:61:58:88:e2:c4:bf:6a:cb:74:bd:f5:bd:61:
+ 57:1c:22:9f:6d:e8:38:c6:70:b8:1e:a5:2b:4f:35:
+ 9f:65:fc:c1:36:17:3e:d7:fa:33:21:70:fb:e0:ce:
+ ab:23:41:3f:fc:7b:74:1d:6b:ba:21:b7:5b:fd:a1:
+ 77:11:1a:8d:5b:2a:be:38:2e:79:a0:b7:2d:45:5c:
+ d7:32:fd:4c:70:f1:95:1c:38:a3:15:4f:57:f3:75:
+ 59:fe:75:14:39:ea:44:16:b9:2e:06:df:67:30:dd:
+ 5a:b1:7e:95:09:fd:12:cc:87:b1:66:fa:7e:b9:e5:
+ b5:38:0a:46:73:53:1a:b2:aa:12:e3:6d:99:56:e8:
+ c7:cc:eb:6b:00:9b:c1:ba:02:23:2b:32:be:9b:f8:
+ ab:b2:b5:be:50:f6:7f:95:b6:6b:1c:e6:ad:f1:69:
+ 5a:e0:41:1e:85:64:91:37:7b:9a:28:43:a5:ee:33:
+ 25:ab:82:97:03:07:94:b8:d3:34:95:bf:33:d2:14:
+ b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 07:DB:E2:A1:15:3D:67:0C:54:ED:D5:22:AD:DE:59:73:9E:0F:F5:24
+ B3:FD:B6:08:AB:82:83:50:E7:F0:85:51:1C:CC:78:E5:22:50:91:60
X509v3 Authority Key Identifier:
- keyid:07:D2:5E:3F:28:F7:AD:46:16:25:D0:4D:DD:6D:77:7B:26:81:89:85
+ keyid:5B:B2:D8:DC:1B:60:39:B5:6B:10:A5:70:37:93:E7:3C:F5:52:46:C8
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
@@ -59,42 +59,42 @@
1.2.3.4: critical
....
Signature Algorithm: sha256WithRSAEncryption
- 66:78:33:4b:09:c3:20:05:e2:d2:a3:7f:90:2f:96:15:b8:d0:
- ca:7e:97:c6:12:53:4b:18:92:03:77:b6:2c:8b:57:8e:84:7d:
- 14:ee:df:cc:99:0d:f9:2e:21:dd:ca:4d:00:77:87:88:4d:13:
- 28:36:4a:88:82:52:d2:b8:1d:75:67:1f:b5:0a:ea:bd:6a:b8:
- 98:79:ea:cf:6e:2c:5f:21:94:e4:a9:29:d5:37:87:58:6a:d7:
- 5b:0b:f5:35:59:c9:68:dd:f9:e7:c6:67:1a:ef:26:17:cf:89:
- e7:18:8c:be:41:c4:07:d3:b7:1a:20:44:4f:20:12:8c:2e:5a:
- 39:7c:8b:f3:12:f7:bd:b6:f1:7b:8c:48:7f:c5:29:7f:7a:9e:
- 1e:28:13:08:36:56:ca:8d:17:f2:37:ce:59:0a:e7:ca:19:90:
- c7:c8:b4:45:ab:3b:f7:0e:10:db:81:4b:2d:74:05:46:ab:5c:
- 7e:c2:88:83:87:09:4d:5a:a3:40:56:f5:d5:da:fd:a2:2d:99:
- 8c:d1:bf:0b:d0:8c:ce:79:12:0c:37:fc:b2:08:68:b2:fe:5e:
- cc:3e:99:85:40:74:27:88:7f:f6:43:0f:60:dd:b7:6e:31:e3:
- d4:39:87:8e:b1:cf:2d:b7:2f:bb:f9:ec:f8:86:96:1e:fc:68:
- 0d:45:21:2c
+ 39:19:04:31:e9:20:03:1b:e9:d3:91:25:94:68:4f:8d:07:16:
+ 08:e8:7f:99:01:37:56:8d:f4:15:6b:a8:7c:e4:3d:32:ad:3d:
+ 62:0f:5e:93:6f:b9:21:ba:e8:c3:48:13:e5:eb:ad:26:f0:9b:
+ 4c:fe:76:8e:73:a2:be:01:b5:48:7c:11:7e:cc:47:4b:0c:0c:
+ 17:65:54:ab:0e:79:6c:e5:75:67:52:ab:f7:26:97:36:3d:71:
+ 6d:88:54:b9:ef:b1:00:42:56:64:88:db:0f:9c:be:25:e0:6e:
+ 2b:df:c6:55:3a:89:af:92:1c:21:71:6e:22:ab:5a:b8:de:53:
+ a1:8d:84:0f:0e:55:43:08:45:0b:fd:4a:6f:fa:e4:89:55:a0:
+ 8d:10:c0:3a:06:42:7c:f1:b8:7a:19:a7:61:cc:c0:b1:e2:f1:
+ 14:d5:bd:ff:41:a5:50:f6:ac:a4:3f:ec:6a:6a:3e:7b:60:29:
+ f4:9d:c8:57:81:12:59:7b:0f:b2:2a:43:29:03:a5:eb:e7:e8:
+ cd:15:fe:53:07:e0:12:0a:35:29:e8:fe:7f:51:ae:19:98:d5:
+ 89:9c:05:0a:ba:51:89:0f:1f:3c:8e:2a:eb:e7:93:0a:fd:c1:
+ f3:0e:ce:67:5b:f2:73:dc:e6:2e:db:2b:88:11:3b:07:d8:ff:
+ 79:0c:6a:e1
-----BEGIN CERTIFICATE-----
MIIDnTCCAoWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQh0P
-GUvYeLk/TUOoqZJn7fNVpPWe9NAhPCXMKB3bIlzA6+h4/mxxcu0MzXaARNxy0ZIp
-feh/4EJg1suxUwYNbIv0085CrzS8V2M03bIAJj+pf8jO9hpmddt8tlfv7j3n17g4
-OoNdemMfkcTxFdqb6ffv1dYmFpbBlFU/PmcTJr89DJOrG6JYEDhgERgVxTzbcWLv
-Jx+pYmEf9lVR2XwttuMtw4YrzVww06ANpOQ0+7tZCdV7j7JJEA3XLQ40ciV7tA7p
-/cvOUO7ScUAUPQatcVJDzOl3TsSMr4yiQUBKgoKDoljjXkD6dPD7vUaqVZ1tW9uv
-ah98Rs8aH9MXwwIvAgMBAAGjgfkwgfYwHQYDVR0OBBYEFAfb4qEVPWcMVO3VIq3e
-WXOeD/UkMB8GA1UdIwQYMBaAFAfSXj8o961GFiXQTd1td3smgYmFMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAOBgMqAwQBAf8EBAECAwQwDQYJKoZIhvcNAQELBQADggEB
-AGZ4M0sJwyAF4tKjf5AvlhW40Mp+l8YSU0sYkgN3tiyLV46EfRTu38yZDfkuId3K
-TQB3h4hNEyg2SoiCUtK4HXVnH7UK6r1quJh56s9uLF8hlOSpKdU3h1hq11sL9TVZ
-yWjd+efGZxrvJhfPiecYjL5BxAfTtxogRE8gEowuWjl8i/MS97228XuMSH/FKX96
-nh4oEwg2VsqNF/I3zlkK58oZkMfItEWrO/cOENuBSy10BUarXH7CiIOHCU1ao0BW
-9dXa/aItmYzRvwvQjM55Egw3/LIIaLL+Xsw+mYVAdCeIf/ZDD2Ddt24x49Q5h46x
-zy23L7v57PiGlh78aA1FISw=
+ADkZBDHpIAMb6dORJZRoT40HFgjof5kBN1aN9BVrqHzkPTKtPWIPXpNvuSG66MNI
+E+XrrSbwm0z+do5zor4BtUh8EX7MR0sMDBdlVKsOeWzldWdSq/cmlzY9cW2IVLnv
+sQBCVmSI2w+cviXgbivfxlU6ia+SHCFxbiKrWrjeU6GNhA8OVUMIRQv9Sm/65IlV
+oI0QwDoGQnzxuHoZp2HMwLHi8RTVvf9BpVD2rKQ/7GpqPntgKfSdyFeBEll7D7Iq
+QykDpevn6M0V/lMH4BIKNSno/n9RrhmY1YmcBQq6UYkPHzyOKuvnkwr9wfMOzmdb
+8nPc5i7bK4gROwfY/3kMauE=
-----END CERTIFICATE-----
Certificate:
@@ -106,35 +106,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:e1:3b:e0:9e:b3:37:a6:d2:5d:5a:cf:1d:6c:d4:
- e7:9d:92:0e:29:b6:da:7e:48:32:ea:dd:a8:6e:a5:
- 4f:d4:07:23:be:f5:b2:e2:e9:57:1b:a1:bc:67:5a:
- 27:15:9d:f7:51:07:23:d9:0a:0f:21:36:4b:b1:c3:
- 48:71:f5:f8:67:6f:a4:9c:54:8b:e8:d2:79:da:6e:
- 70:06:b8:ae:b5:6f:82:ab:89:5a:68:19:56:c7:8a:
- 93:25:f9:4b:7e:8b:de:2f:1a:92:c4:be:c4:9f:ea:
- 34:fe:95:f5:74:ab:fc:47:8b:34:7d:28:d3:7a:7b:
- 29:70:3e:aa:b9:d9:be:53:fe:79:3a:ea:79:c7:d7:
- 1d:b1:c3:47:e6:7d:8e:ed:40:2a:47:d9:71:5f:c2:
- 6c:cb:52:be:1b:83:01:de:06:97:d4:98:ea:37:67:
- f6:fb:67:69:c7:b1:fe:07:ad:be:0a:f8:c8:a8:5d:
- 98:0b:f6:02:7b:cb:19:f6:23:58:79:f9:d3:8c:a5:
- 09:73:c9:2b:ae:76:33:3f:2d:a9:49:93:39:89:92:
- bc:5e:27:1c:ae:a6:29:43:97:a1:04:d0:6c:b6:b6:
- b8:c3:62:5e:43:7c:ca:27:50:e2:91:da:bb:cc:c6:
- e5:7b:5a:31:62:77:a6:4d:6a:ee:84:ea:7a:87:de:
- a9:bd
+ 00:b9:ec:7c:da:f2:c7:b4:02:ee:82:a9:58:98:60:
+ 67:07:a2:c2:9d:2c:a1:76:50:f7:4a:0a:04:80:45:
+ 7b:3d:f6:31:fe:1d:e9:45:40:76:1d:38:df:c9:e1:
+ 42:df:13:7e:16:26:2b:41:14:6b:6e:5e:f3:39:4e:
+ 61:9d:fd:5f:bf:2a:f9:b7:cf:3f:af:34:b1:17:ef:
+ 97:1f:bf:3d:4c:0a:93:91:bd:ee:11:7a:64:ee:69:
+ 22:75:60:8b:c3:10:cd:9e:91:8a:d8:54:c7:43:f4:
+ fb:88:db:09:7a:22:5d:26:58:ab:7d:d0:41:11:47:
+ 10:62:ed:cc:e6:bb:d2:da:a4:7c:e9:0a:39:5b:9f:
+ 93:b0:06:27:50:38:ea:63:e2:6b:a0:eb:c5:d3:7f:
+ 87:71:d8:08:64:d5:87:0a:6e:59:99:d7:74:7c:da:
+ eb:30:68:9d:f8:09:31:c7:66:5f:9a:fb:2d:9b:f1:
+ c1:ff:cb:57:67:46:03:99:a3:4b:e0:bc:2b:17:f4:
+ 0b:7b:61:3f:5e:cf:c9:41:9b:15:ee:f9:90:46:ad:
+ b4:a2:86:3f:87:3c:dd:7e:97:6f:97:30:88:f8:e6:
+ 88:83:15:ad:77:6a:fd:1e:f1:ae:88:a2:f5:52:6d:
+ 6e:d9:5d:5d:c1:1b:0a:49:10:f4:5a:e8:42:53:67:
+ d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 07:D2:5E:3F:28:F7:AD:46:16:25:D0:4D:DD:6D:77:7B:26:81:89:85
+ 5B:B2:D8:DC:1B:60:39:B5:6B:10:A5:70:37:93:E7:3C:F5:52:46:C8
X509v3 Authority Key Identifier:
- keyid:C8:0F:45:73:03:B2:2C:B8:35:14:0F:C4:D7:4B:E4:E2:9D:B2:AB:CE
+ keyid:50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -149,41 +149,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 2a:af:ec:1b:fc:c9:ad:bf:ad:97:8d:ed:f4:44:87:7f:72:86:
- c0:4d:85:dd:eb:6c:d3:c7:17:df:11:0a:f5:e5:2b:c2:53:41:
- 58:73:66:da:29:8a:43:af:5e:24:b2:16:26:b6:89:7e:4a:6f:
- 46:13:05:c4:3f:13:6c:ed:b8:37:a7:a9:f6:c9:c8:b9:b3:a1:
- 7c:eb:99:57:fb:8d:12:c5:47:ff:1e:02:b2:47:dc:e9:6f:41:
- 17:0a:3b:ff:ba:14:76:cc:14:35:ec:71:b0:1a:d4:eb:b0:6c:
- a3:96:eb:7d:50:59:d7:01:a0:ee:67:b8:c8:b6:ed:78:02:b1:
- 0b:72:9c:ea:c3:3b:14:3d:89:fc:89:c2:af:6c:18:ae:b0:13:
- 31:04:a2:89:4f:a6:99:58:00:c6:00:e1:39:79:d4:31:0b:0f:
- d5:92:86:a2:e7:ec:c6:b8:f2:62:21:bb:0d:d5:91:b8:f2:5f:
- db:dc:b1:b2:b2:28:fd:d5:14:54:a6:cf:8d:bd:33:ca:22:27:
- 72:d8:27:85:03:21:7f:8e:4f:2d:e6:bf:22:08:86:03:a8:f3:
- 9f:42:2f:81:8f:1e:44:39:e3:23:b2:9d:3d:64:7e:e2:b3:93:
- 8d:46:a0:b7:08:4e:d5:e6:14:af:1d:5d:b6:74:7c:91:36:37:
- 0c:c0:ab:14
+ 12:72:ee:b6:62:1b:0d:70:52:a6:02:3c:13:2a:88:cf:cb:9a:
+ e2:07:5f:cf:3e:be:75:d3:f9:a6:23:47:ca:fb:88:87:bd:e1:
+ 52:8e:8b:fe:e9:c1:7a:8c:30:91:c5:0c:fe:9d:31:fa:fc:c0:
+ d7:fe:7a:7a:18:6f:3c:67:50:b0:22:b2:09:48:ca:dc:d7:d3:
+ 29:86:eb:f4:cf:e0:3e:6e:d1:88:fa:20:93:b3:05:4c:c6:29:
+ 06:df:4a:8b:72:3e:c8:3c:2b:33:56:26:de:91:1a:11:bc:21:
+ 7b:b8:b5:b6:7c:ca:0d:f7:d6:e8:b0:a8:99:e8:7a:2b:f0:c4:
+ 78:e5:54:9e:3f:73:dc:85:41:97:11:36:45:73:b9:f2:49:8d:
+ d7:83:cf:b4:1a:ed:33:dc:0b:cd:7e:83:77:ce:aa:2f:0e:1f:
+ 4d:e0:19:96:cd:74:79:de:18:8b:ad:9f:0c:96:20:14:63:5e:
+ e2:58:8e:4a:d8:fd:59:0d:a6:a4:02:85:ac:23:d4:43:b2:da:
+ 2d:6b:87:79:9e:2e:1e:f4:d3:95:ef:3d:91:7a:f7:17:16:c7:
+ 9f:1f:b7:42:7e:f4:fa:d9:81:18:26:23:03:1e:86:99:7d:28:
+ ef:a3:ac:be:bb:55:fa:38:62:3c:e6:6e:47:4b:f1:45:ef:de:
+ 38:ea:c3:a3
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TvgnrM3
-ptJdWs8dbNTnnZIOKbbafkgy6t2obqVP1AcjvvWy4ulXG6G8Z1onFZ33UQcj2QoP
-ITZLscNIcfX4Z2+knFSL6NJ52m5wBriutW+Cq4laaBlWx4qTJflLfoveLxqSxL7E
-n+o0/pX1dKv8R4s0fSjTenspcD6qudm+U/55Oup5x9cdscNH5n2O7UAqR9lxX8Js
-y1K+G4MB3gaX1JjqN2f2+2dpx7H+B62+CvjIqF2YC/YCe8sZ9iNYefnTjKUJc8kr
-rnYzPy2pSZM5iZK8XiccrqYpQ5ehBNBstra4w2JeQ3zKJ1Dikdq7zMble1oxYnem
-TWruhOp6h96pvQIDAQABo4HLMIHIMB0GA1UdDgQWBBQH0l4/KPetRhYl0E3dbXd7
-JoGJhTAfBgNVHSMEGDAWgBTID0VzA7IsuDUUD8TXS+TinbKrzjA3BggrBgEFBQcB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-ACqv7Bv8ya2/rZeN7fREh39yhsBNhd3rbNPHF98RCvXlK8JTQVhzZtopikOvXiSy
-Fia2iX5Kb0YTBcQ/E2ztuDenqfbJyLmzoXzrmVf7jRLFR/8eArJH3OlvQRcKO/+6
-FHbMFDXscbAa1OuwbKOW631QWdcBoO5nuMi27XgCsQtynOrDOxQ9ifyJwq9sGK6w
-EzEEoolPpplYAMYA4Tl51DELD9WShqLn7Ma48mIhuw3VkbjyX9vcsbKyKP3VFFSm
-z429M8oiJ3LYJ4UDIX+OTy3mvyIIhgOo859CL4GPHkQ54yOynT1kfuKzk41GoLcI
-TtXmFK8dXbZ0fJE2NwzAqxQ=
+ABJy7rZiGw1wUqYCPBMqiM/LmuIHX88+vnXT+aYjR8r7iIe94VKOi/7pwXqMMJHF
+DP6dMfr8wNf+enoYbzxnULAisglIytzX0ymG6/TP4D5u0Yj6IJOzBUzGKQbfSoty
+Psg8KzNWJt6RGhG8IXu4tbZ8yg331uiwqJnoeivwxHjlVJ4/c9yFQZcRNkVzufJJ
+jdeDz7Qa7TPcC81+g3fOqi8OH03gGZbNdHneGIutnwyWIBRjXuJYjkrY/VkNpqQC
+hawj1EOy2i1rh3meLh7005XvPZF69xcWx58ft0J+9PrZgRgmIwMehpl9KO+jrL67
+Vfo4YjzmbkdL8UXv3jjqw6M=
-----END CERTIFICATE-----
Certificate:
@@ -200,30 +200,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:dc:6a:1a:05:36:f1:a3:7c:28:e9:97:2f:7b:85:
- d5:c1:91:33:0a:72:2d:bb:45:ae:c6:29:54:22:05:
- c2:e9:f4:be:f2:39:ec:e0:64:66:1d:e3:c9:42:3e:
- 6c:c8:3b:65:0a:e4:2c:74:e4:c9:17:c8:8b:27:6e:
- c0:4c:9a:b4:85:ae:ff:3f:e3:1e:d0:21:1c:8b:84:
- e0:3b:f6:59:00:a7:ab:59:f3:58:67:d7:af:97:74:
- a9:b1:1f:78:80:ad:e3:09:31:81:c2:11:55:10:d0:
- 93:ca:eb:de:a7:72:76:09:33:6a:89:f9:51:b1:de:
- ca:4a:48:e8:9f:1c:5f:df:bc:7d:a7:f5:27:6b:77:
- a3:53:e5:c3:e4:3d:9e:82:72:9e:d2:1b:76:52:8c:
- f0:53:b6:98:5f:6c:54:1b:da:9a:72:14:ee:c3:51:
- b4:c7:6b:f0:75:b2:2c:6e:b4:b7:29:54:92:ab:69:
- 57:af:3c:6d:96:e8:05:c8:a4:d0:7a:c2:42:7d:8b:
- 7f:3c:8f:9d:1d:c1:35:af:41:7b:f5:0e:60:88:72:
- 90:22:ac:37:2f:7b:b4:47:01:62:b8:fe:73:4b:d2:
- 7b:56:8d:b2:37:d3:18:2f:dc:fb:d1:fb:e9:14:19:
- b1:d8:76:eb:34:d2:c0:40:a8:22:68:33:44:a7:84:
- 90:e1
+ 00:a9:09:72:27:8b:f5:e4:bb:33:ee:14:1d:da:11:
+ 7c:b1:f1:53:3a:a3:77:3f:b2:f5:1f:b6:23:a3:69:
+ f8:9d:52:97:4c:92:af:07:46:c5:82:3f:97:a5:b2:
+ fc:e0:b3:3e:29:53:e5:75:07:04:30:7b:bb:55:a3:
+ af:ec:c3:bd:a0:c5:f1:58:4b:a8:5a:77:49:c7:fc:
+ a2:13:97:5c:3a:95:58:9b:95:4c:a0:18:b3:3a:18:
+ 1d:fe:5f:c1:c7:9b:d3:9a:0d:f3:4c:a6:3d:28:21:
+ 50:9d:ae:90:ae:aa:96:23:d6:4f:9b:ec:ff:59:67:
+ 0a:ff:8a:89:df:bc:99:ff:f6:75:b5:da:c7:79:d8:
+ 54:c8:f3:96:3a:c6:e9:60:0c:ee:9e:52:e1:e9:5f:
+ 58:1e:29:a3:1a:c3:4f:91:8c:2e:85:33:87:f0:c7:
+ c6:74:91:cc:fb:dd:ca:1e:71:6f:e2:c1:41:bc:ef:
+ e8:7f:48:07:a9:5c:aa:21:60:43:fd:3e:98:8b:4c:
+ 8d:95:55:48:3b:35:1a:2a:f4:e3:ef:85:01:11:c4:
+ f4:a3:15:e3:68:df:bb:94:f9:26:10:35:83:96:83:
+ 00:ce:cf:71:d4:e9:01:18:80:c2:dd:f0:9d:52:f6:
+ fa:11:de:a1:7f:79:d9:13:a6:eb:33:3e:04:57:b6:
+ 75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C8:0F:45:73:03:B2:2C:B8:35:14:0F:C4:D7:4B:E4:E2:9D:B2:AB:CE
+ 50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
X509v3 Authority Key Identifier:
- keyid:C8:0F:45:73:03:B2:2C:B8:35:14:0F:C4:D7:4B:E4:E2:9D:B2:AB:CE
+ keyid:50:25:07:BE:12:C8:A2:18:2F:32:21:59:CC:2B:5A:A7:4E:19:5D:55
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -238,41 +238,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 54:39:78:5b:30:97:aa:99:fb:e5:0a:39:27:2a:ea:ad:9f:37:
- 3e:aa:5a:b8:c4:51:66:83:6e:36:5c:c3:1b:da:de:cd:a7:6e:
- bd:55:47:7c:3e:53:12:6a:51:02:13:c2:98:03:32:b6:5b:d9:
- 5e:26:b2:9a:d1:21:ca:39:cd:20:be:ad:d8:3a:23:a2:de:d7:
- 18:b2:99:bb:d4:1a:82:43:7c:6e:20:3c:01:f1:22:5f:72:ac:
- 43:9a:87:07:37:5d:a8:34:26:19:89:aa:f3:18:e3:ee:c6:67:
- 43:49:64:e4:b3:d8:2c:11:8c:f7:8b:48:7f:fd:e1:6b:e9:a5:
- 87:55:bf:f1:9d:54:fe:b5:7f:c4:5c:8b:08:cf:4f:47:21:58:
- 06:5e:ab:40:be:b7:28:0c:27:55:82:6b:e8:17:5e:dd:f8:79:
- 61:f2:7e:18:59:7a:24:7e:e3:08:3c:d9:d1:81:73:36:51:99:
- a1:ea:bf:18:ff:94:40:d7:ff:5f:1a:8a:b1:ae:78:c1:91:7b:
- 55:1a:d8:b1:91:02:b6:5e:94:32:84:5f:77:f8:89:89:00:5c:
- 74:be:77:1b:95:3e:60:2d:6a:67:a3:e9:42:03:51:af:1f:10:
- d8:21:6f:36:29:33:72:90:f4:7e:05:17:bb:a5:aa:fb:d6:56:
- fc:40:2e:0e
+ 3d:e1:85:32:4c:43:1e:f2:0d:ff:d3:ec:90:97:7d:8f:9c:16:
+ b1:6e:cb:55:f1:4f:d9:46:1c:c8:d7:3c:3e:8c:2c:8a:21:b8:
+ 38:a4:a9:a8:ac:69:51:32:3c:99:57:f8:73:2a:56:4a:ba:6e:
+ 6a:a8:89:f0:03:14:d2:7f:d2:22:55:84:47:e7:05:9c:3b:72:
+ 5d:39:02:b0:fc:68:90:14:02:12:d8:9b:85:1c:cf:77:92:c7:
+ 73:80:38:e4:f4:f9:72:b7:dd:ca:0f:3d:f2:1c:6a:82:1f:21:
+ 90:d3:e3:77:e5:ee:e9:0e:23:9e:69:f6:29:38:51:4f:e9:73:
+ 7d:3d:32:54:b2:96:04:9b:62:36:99:8b:ea:9c:3f:87:7f:5e:
+ e8:ed:28:c8:15:ac:59:f8:f5:d9:3b:b3:fd:d4:a9:e4:55:1b:
+ 07:ee:d9:18:77:d4:68:8d:b0:ce:a3:60:fe:60:2c:ca:b4:2f:
+ 08:8a:19:1a:fc:a3:6b:1b:b4:72:28:7a:63:cc:cc:cd:18:ae:
+ 99:86:4d:67:12:48:a6:33:f3:19:ce:fa:5a:a5:d7:0d:4d:50:
+ c6:1f:f2:d9:e6:41:d6:29:4a:a6:3c:ff:80:4f:e6:e8:90:f5:
+ ab:cb:bf:93:3b:90:da:e6:fb:d5:59:c3:9f:ec:91:bf:3e:0a:
+ a3:23:ef:ee
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANxqGgU28aN8KOmXL3uF
-1cGRMwpyLbtFrsYpVCIFwun0vvI57OBkZh3jyUI+bMg7ZQrkLHTkyRfIiyduwEya
-tIWu/z/jHtAhHIuE4Dv2WQCnq1nzWGfXr5d0qbEfeICt4wkxgcIRVRDQk8rr3qdy
-dgkzaon5UbHeykpI6J8cX9+8faf1J2t3o1Plw+Q9noJyntIbdlKM8FO2mF9sVBva
-mnIU7sNRtMdr8HWyLG60tylUkqtpV688bZboBcik0HrCQn2LfzyPnR3BNa9Be/UO
-YIhykCKsNy97tEcBYrj+c0vSe1aNsjfTGC/c+9H76RQZsdh26zTSwECoImgzRKeE
-kOECAwEAAaOByzCByDAdBgNVHQ4EFgQUyA9FcwOyLLg1FA/E10vk4p2yq84wHwYD
-VR0jBBgwFoAUyA9FcwOyLLg1FA/E10vk4p2yq84wNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkJcieL9eS7M+4UHdoR
+fLHxUzqjdz+y9R+2I6Np+J1Sl0ySrwdGxYI/l6Wy/OCzPilT5XUHBDB7u1Wjr+zD
+vaDF8VhLqFp3Scf8ohOXXDqVWJuVTKAYszoYHf5fwceb05oN80ymPSghUJ2ukK6q
+liPWT5vs/1lnCv+Kid+8mf/2dbXax3nYVMjzljrG6WAM7p5S4elfWB4poxrDT5GM
+LoUzh/DHxnSRzPvdyh5xb+LBQbzv6H9IB6lcqiFgQ/0+mItMjZVVSDs1Gir04++F
+ARHE9KMV42jfu5T5JhA1g5aDAM7PcdTpARiAwt3wnVL2+hHeoX952ROm6zM+BFe2
+dbkCAwEAAaOByzCByDAdBgNVHQ4EFgQUUCUHvhLIohgvMiFZzCtap04ZXVUwHwYD
+VR0jBBgwFoAUUCUHvhLIohgvMiFZzCtap04ZXVUwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBUOXhbMJeq
-mfvlCjknKuqtnzc+qlq4xFFmg242XMMb2t7Np269VUd8PlMSalECE8KYAzK2W9le
-JrKa0SHKOc0gvq3YOiOi3tcYspm71BqCQ3xuIDwB8SJfcqxDmocHN12oNCYZiarz
-GOPuxmdDSWTks9gsEYz3i0h//eFr6aWHVb/xnVT+tX/EXIsIz09HIVgGXqtAvrco
-DCdVgmvoF17d+Hlh8n4YWXokfuMIPNnRgXM2UZmh6r8Y/5RA1/9fGoqxrnjBkXtV
-GtixkQK2XpQyhF93+ImJAFx0vncblT5gLWpno+lCA1GvHxDYIW82KTNykPR+BRe7
-par71lb8QC4O
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA94YUyTEMe
+8g3/0+yQl32PnBaxbstV8U/ZRhzI1zw+jCyKIbg4pKmorGlRMjyZV/hzKlZKum5q
+qInwAxTSf9IiVYRH5wWcO3JdOQKw/GiQFAIS2JuFHM93ksdzgDjk9Plyt93KDz3y
+HGqCHyGQ0+N35e7pDiOeafYpOFFP6XN9PTJUspYEm2I2mYvqnD+Hf17o7SjIFaxZ
++PXZO7P91KnkVRsH7tkYd9RojbDOo2D+YCzKtC8Iihka/KNrG7RyKHpjzMzNGK6Z
+hk1nEkimM/MZzvpapdcNTVDGH/LZ5kHWKUqmPP+AT+bokPWry7+TO5Da5vvVWcOf
+7JG/PgqjI+/u
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem b/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
index 9d162b0..e027308 100644
--- a/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
+++ b/net/data/verify_certificate_chain_unittest/target-wrong-signature.pem
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cd:40:90:3b:6e:2e:d4:5d:a8:08:3e:d4:69:a0:
- ec:3b:62:99:ec:81:30:1b:6e:d0:92:8b:bd:df:17:
- 3a:fb:ce:bd:2a:32:5b:bb:5e:da:53:6c:b9:3d:4b:
- a8:0b:12:41:61:d3:f9:3f:23:b9:71:3f:33:8a:bf:
- 57:48:bd:99:e1:5d:c7:99:72:fd:ac:f4:4f:e1:cd:
- ca:b8:0c:81:57:64:c5:56:1f:d9:ed:f8:df:c6:60:
- 70:82:ee:b5:23:4a:a4:b5:d6:b4:e3:84:74:c9:ca:
- da:d7:a7:11:51:c4:56:36:6c:b4:53:0e:35:e5:63:
- fa:fd:75:df:72:01:31:17:e9:4d:35:8c:ae:a9:c1:
- 3b:ae:ac:06:75:e0:77:2b:36:97:e5:bb:99:34:b6:
- dc:f4:11:f6:2f:33:4e:db:4b:73:18:78:51:e6:12:
- d1:be:94:2a:02:33:d9:bc:8a:36:dc:12:f0:2f:ae:
- 57:4b:66:f0:ba:e6:1b:65:01:de:95:06:63:22:9b:
- d0:58:42:55:99:34:06:ec:5a:00:f2:77:ed:71:23:
- 24:7d:66:9a:e0:8c:d3:64:91:0a:a6:5b:36:43:36:
- e3:07:33:a0:c3:fa:46:9c:3e:81:b2:2c:a6:51:92:
- a7:7a:01:cb:95:1a:ea:cf:3c:fa:93:2d:81:5b:29:
- 98:d5
+ 00:95:c5:73:7e:a9:8f:9f:25:a3:b1:9f:29:c6:2e:
+ d6:b2:3d:5b:a4:10:08:53:40:f7:91:79:45:96:d0:
+ 66:85:85:ea:56:e6:db:07:fd:82:1d:e3:e6:11:f2:
+ da:13:64:45:bf:c6:e1:a7:4c:da:29:e7:ba:2f:27:
+ d8:cd:59:3d:69:a3:af:d6:64:4b:3e:a4:12:07:5d:
+ d4:7d:07:85:6d:9c:9d:fe:fd:8f:ff:74:b3:c9:c9:
+ 86:64:7c:ee:ca:74:1b:2f:3f:7c:37:8b:d9:fa:05:
+ 0a:3a:9b:93:45:d0:8d:16:3e:7a:ce:0b:bb:8f:1b:
+ cc:15:4b:a2:76:08:f5:fb:e0:98:cc:1d:a4:1a:c1:
+ f5:23:b0:28:1c:fe:5f:a4:24:68:59:fc:1d:63:bc:
+ 60:9a:a6:16:2c:db:0d:66:9d:d7:6e:13:6a:53:8c:
+ 5b:61:a7:3f:9f:be:c8:2a:f9:ce:ea:47:d2:d2:1b:
+ 95:de:af:5d:b0:39:3d:71:f5:be:5f:80:bd:3b:3e:
+ 2e:79:e8:a2:de:9c:2b:da:e5:88:cd:4e:9c:cf:cd:
+ bc:88:2e:cc:9e:3b:e4:52:2b:49:0f:31:90:3f:15:
+ 0d:b5:68:ea:5e:7e:6e:f9:6c:ba:57:bd:41:33:51:
+ 27:66:f9:2b:3f:ae:7c:87:07:a1:19:a5:0f:ba:bd:
+ f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 7F:F7:32:82:5E:B7:BD:FB:F8:64:38:93:2A:B1:6E:10:D6:4A:B4:28
+ 5E:72:8E:7C:0B:A6:A7:E8:2C:3E:36:CA:37:EF:8E:4E:46:CB:97:34
X509v3 Authority Key Identifier:
- keyid:E1:EB:47:46:C2:78:53:C4:B6:58:28:94:20:81:58:06:93:17:36:7F
+ keyid:DF:46:5C:25:13:E9:22:B2:C9:E4:1A:32:22:C4:97:1F:E6:0C:55:AA
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 80:dc:43:74:98:bf:da:2c:ea:5f:60:45:7f:d9:90:46:b1:f1:
- ba:ea:9f:e3:39:40:4e:43:51:30:f1:a6:1a:c7:52:48:ed:de:
- 2a:d8:6d:0d:b6:b2:69:a7:d7:e6:e9:4d:c3:73:c6:e5:3f:56:
- 06:04:79:d2:a5:56:b7:a6:a5:a8:a2:2c:4f:0e:fa:fe:4f:39:
- 11:5a:83:76:af:5e:0f:5d:df:0e:c6:c2:ea:79:19:04:92:a1:
- c7:57:b2:16:83:c3:44:d1:47:89:e1:14:eb:1c:2c:f0:a9:63:
- ed:31:fc:43:d0:93:c5:4c:7f:d3:68:6e:9b:81:2c:4f:70:71:
- 90:af:98:ce:f6:73:97:5b:dc:13:d3:d9:01:8e:5f:34:a8:00:
- 1d:71:89:a7:6e:12:f3:df:9d:4b:18:1f:0f:84:59:2b:7f:d0:
- 05:5d:5f:e7:97:b7:26:ab:c1:12:87:19:28:6a:43:dc:c0:76:
- 38:8a:fc:16:93:92:d3:2e:69:1f:9b:f3:1d:75:0d:32:89:f6:
- ca:a4:8c:f2:c6:0a:17:e4:29:c3:bc:a6:33:df:c2:cd:42:97:
- 28:65:1f:99:c9:6b:41:0e:4b:59:de:32:f2:1e:f7:62:88:66:
- c6:d1:e7:9a:25:78:86:7d:e3:f3:4e:f7:18:11:ce:bc:37:56:
- 78:f4:04:b1
+ 15:7a:35:37:ba:ff:11:3b:c0:ad:82:51:d0:e9:23:50:77:06:
+ 56:e0:84:94:2d:e4:76:94:d5:af:65:26:26:06:77:f2:6c:03:
+ f4:77:6c:a3:ba:92:26:c7:a0:ea:24:06:98:78:18:24:70:44:
+ 08:03:d0:ef:0b:db:d9:f2:3d:35:38:17:41:69:46:62:1a:af:
+ a7:44:be:1d:27:02:b3:79:1a:30:ab:06:79:6a:bd:3f:72:21:
+ f2:34:47:07:ef:08:69:ae:40:1f:61:68:a7:a8:a8:5c:85:6e:
+ 39:61:39:ad:8a:3a:a5:d8:64:94:bd:e2:dc:1f:68:45:f0:2c:
+ bf:08:d0:74:75:1c:80:30:86:87:b0:f4:eb:69:e8:16:52:45:
+ bc:c3:3b:08:c9:90:9f:f8:c9:01:9b:2f:29:2b:dc:2c:af:59:
+ cb:3e:07:8a:e7:e0:ca:64:2a:43:39:bf:a5:0e:d6:14:08:e9:
+ 9a:c1:76:7d:fb:a1:39:05:a6:43:0a:ba:ed:70:5b:f5:b8:ac:
+ 15:91:a4:37:24:c7:1e:d2:69:41:08:e2:2f:76:bb:e1:f8:b9:
+ 0d:7a:a9:57:af:25:8c:5c:73:f2:d8:2b:a6:23:c8:42:b4:28:
+ ed:fe:79:2b:11:4a:2e:3c:ef:3f:13:e6:51:68:d8:1a:c3:3b:
+ b3:22:62:c9
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQJA7
-bi7UXagIPtRpoOw7YpnsgTAbbtCSi73fFzr7zr0qMlu7XtpTbLk9S6gLEkFh0/k/
-I7lxPzOKv1dIvZnhXceZcv2s9E/hzcq4DIFXZMVWH9nt+N/GYHCC7rUjSqS11rTj
-hHTJytrXpxFRxFY2bLRTDjXlY/r9dd9yATEX6U01jK6pwTuurAZ14HcrNpflu5k0
-ttz0EfYvM07bS3MYeFHmEtG+lCoCM9m8ijbcEvAvrldLZvC65htlAd6VBmMim9BY
-QlWZNAbsWgDyd+1xIyR9ZprgjNNkkQqmWzZDNuMHM6DD+kacPoGyLKZRkqd6AcuV
-GurPPPqTLYFbKZjVAgMBAAGjgekwgeYwHQYDVR0OBBYEFH/3MoJet737+GQ4kyqx
-bhDWSrQoMB8GA1UdIwQYMBaAFOHrR0bCeFPEtlgolCCBWAaTFzZ/MD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAgNxDdJi/2izqX2BFf9mQ
-RrHxuuqf4zlATkNRMPGmGsdSSO3eKthtDbayaafX5ulNw3PG5T9WBgR50qVWt6al
-qKIsTw76/k85EVqDdq9eD13fDsbC6nkZBJKhx1eyFoPDRNFHieEU6xws8Klj7TH8
-Q9CTxUx/02hum4EsT3BxkK+YzvZzl1vcE9PZAY5fNKgAHXGJp24S89+dSxgfD4RZ
-K3/QBV1f55e3JqvBEocZKGpD3MB2OIr8FpOS0y5pH5vzHXUNMon2yqSM8sYKF+Qp
-w7ymM9/CzUKXKGUfmclrQQ5LWd4y8h73YohmxtHnmiV4hn3j8073GBHOvDdWePQE
-sQ==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-----END CERTIFICATE-----
Certificate:
@@ -103,35 +103,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:c8:7f:42:62:ee:29:ef:bb:58:84:48:c3:aa:61:
- ca:32:b1:ec:f0:e6:34:0b:f4:7e:d2:21:46:bb:bb:
- b5:fb:43:ef:e8:66:88:2e:a3:86:4f:2e:95:51:f8:
- 82:dd:c4:7a:9f:3b:6e:81:4d:32:eb:a6:c7:05:4a:
- 1d:f1:bd:31:9a:2d:45:0b:2e:a9:9b:d4:13:a4:55:
- 40:1c:12:db:4b:76:2b:31:cc:8b:fb:f7:a4:52:e1:
- de:f7:0f:b8:17:47:a4:0a:1e:53:b9:7c:a6:cc:ac:
- ed:40:72:d1:9c:93:85:05:2e:77:1e:60:ab:7d:fc:
- 46:0f:f1:47:65:09:53:62:c6:90:db:5d:4e:ee:cd:
- e9:ea:f0:18:f0:ba:a3:91:e2:bf:7b:24:e9:eb:13:
- 48:4e:05:63:f4:40:b8:f1:84:7b:d6:91:e9:90:50:
- c2:7a:f7:44:2e:70:ad:73:c1:5a:3c:32:5e:3c:9b:
- 15:5f:9a:b2:48:03:50:a6:72:2f:10:94:81:e5:27:
- bf:28:01:6a:a2:ef:3f:6c:10:b0:a2:02:72:27:d8:
- 1c:0c:d4:4d:06:55:48:19:ab:6d:67:56:cd:2d:55:
- 63:e5:50:63:02:7d:cc:c6:28:ef:29:ed:db:50:f2:
- 31:23:dd:52:f3:27:7e:fd:e1:5f:6f:f5:0f:69:58:
- 2b:01
+ 00:ba:c2:3e:70:32:82:15:bd:6f:24:c3:e0:9f:a9:
+ af:46:01:cb:23:03:07:17:d8:73:73:d0:8d:46:88:
+ 3f:9b:40:30:ea:cb:76:d1:dc:e5:79:c6:ed:5e:94:
+ 68:49:fe:8e:be:ff:74:b4:b1:a0:fd:ec:3f:4c:f5:
+ 26:40:97:d8:b2:fd:a8:e1:9a:1e:47:48:58:8a:39:
+ 0f:a8:53:76:1d:d8:55:b7:ff:15:7a:1a:28:70:a7:
+ 50:6f:f7:2f:d8:dd:22:bf:08:32:82:66:33:fd:7d:
+ df:55:7f:71:5b:bd:c0:c6:f4:cd:a4:52:30:a9:bd:
+ a1:a3:61:e3:7a:93:40:a7:41:b3:10:43:0f:79:12:
+ 50:34:0a:a4:ad:07:53:e6:7a:b6:8c:a5:00:82:0c:
+ 9f:eb:c9:f8:51:68:2c:4e:3a:da:7e:7d:6d:15:b1:
+ ff:37:dd:e6:25:cf:5e:8f:fe:b1:09:7e:f8:60:3b:
+ 20:3e:99:64:e1:9a:58:ee:01:28:71:cf:ac:dd:66:
+ 40:0d:d9:7b:85:8f:f2:35:90:2a:75:26:96:b4:3a:
+ f2:ef:5c:06:f1:2c:ec:07:83:d6:23:a4:ab:f4:28:
+ ad:1f:8d:cf:e2:d8:b9:1f:48:76:6f:7c:e7:8a:17:
+ 5b:b5:9b:ff:17:13:6e:f4:05:47:78:91:c7:7a:03:
+ 33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- C4:E1:12:23:5E:5D:61:E9:F8:C1:9E:0E:57:94:54:97:B2:4E:0B:65
+ D0:3F:2D:C4:6A:01:B8:7A:61:4F:B0:35:18:E6:D0:F9:55:5D:7B:B7
X509v3 Authority Key Identifier:
- keyid:81:56:F3:D5:96:CB:97:DE:87:18:26:E0:E7:E9:59:9E:58:FC:8B:76
+ keyid:D4:FF:80:DD:86:D2:53:18:54:65:B3:62:9A:07:67:BB:21:7D:19:77
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -146,41 +146,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 4a:7b:2a:d9:aa:69:78:28:dc:2d:46:22:f2:ec:d3:09:b7:b7:
- 91:2b:6d:a0:07:b9:8a:9e:5c:11:73:ba:1d:61:ed:07:b2:a3:
- 7e:3c:48:f3:95:59:ed:98:e9:40:9c:88:47:47:23:9e:37:ce:
- f3:49:b5:53:51:be:4a:8b:77:ac:ef:76:2a:3b:11:d1:92:61:
- cc:f4:04:85:09:c2:83:db:21:cc:20:a6:49:3d:54:da:e8:ba:
- e2:0f:f6:15:fd:cb:83:8a:82:17:b2:c3:43:dd:a4:0a:42:61:
- 59:75:5c:c6:5b:7e:5f:97:e6:ea:7e:bc:19:17:5b:df:9e:72:
- a4:31:fd:64:6d:34:5b:05:39:5d:f3:2d:35:44:0a:cc:da:cb:
- af:86:06:14:0f:ae:47:9e:ff:f1:55:dc:32:4b:9b:43:df:60:
- d9:ee:0a:09:95:08:43:c3:c3:18:30:c6:56:f1:d0:b9:17:c9:
- 19:5f:a5:c3:a2:76:c0:ad:b2:73:24:0e:34:03:f0:83:17:a5:
- ac:b1:4f:9e:38:3d:7d:82:f6:90:ca:43:f5:37:c4:1a:19:2e:
- a5:a9:40:64:0a:fb:d1:eb:42:c2:42:f1:08:26:6b:d6:c3:59:
- bc:14:99:95:b3:62:80:92:93:49:4f:95:fe:71:e8:7c:3d:ee:
- 21:99:7a:aa
+ 44:69:05:6c:d0:10:da:90:f7:62:5f:8a:80:93:39:f0:ee:6f:
+ c5:18:df:47:40:d0:b4:73:8a:d6:68:7f:99:92:e4:34:bd:ef:
+ d7:c8:8c:d9:09:b1:24:06:86:ab:9f:58:1a:d3:38:73:9b:80:
+ f3:9b:a9:8c:db:ef:0d:94:54:91:45:04:42:9b:98:3c:fc:39:
+ 53:85:36:1d:06:59:c5:1e:50:7c:1e:e0:ec:ad:d8:44:98:13:
+ a2:6b:bc:10:39:3e:3e:5b:3a:30:de:2a:a0:08:05:21:cd:d1:
+ 57:50:05:c2:84:c3:e8:0d:69:59:76:3d:32:aa:9a:82:0d:59:
+ c6:1a:8e:fa:08:3c:18:08:b2:8b:f2:39:05:02:0e:af:7c:28:
+ 7e:16:44:d8:b2:e0:32:19:d7:c5:54:4c:e9:87:e0:1f:30:73:
+ 6a:2b:ef:9f:9d:5e:31:a6:02:39:9d:5b:e1:c5:b6:d1:cd:95:
+ ba:ee:5c:3a:97:58:49:ef:26:cf:e6:eb:72:47:5b:6e:f4:cc:
+ 3b:1c:08:c7:2e:89:f6:91:ef:94:e3:33:83:7c:9b:d8:10:01:
+ d7:ac:0f:4c:c6:01:c7:0d:84:48:bd:a7:e8:4d:09:40:a8:b2:
+ f3:0a:21:71:74:0f:ab:ca:23:aa:99:80:6d:0c:42:73:14:00:
+ 31:1e:67:51
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH9CYu4p
-77tYhEjDqmHKMrHs8OY0C/R+0iFGu7u1+0Pv6GaILqOGTy6VUfiC3cR6nztugU0y
-66bHBUod8b0xmi1FCy6pm9QTpFVAHBLbS3YrMcyL+/ekUuHe9w+4F0ekCh5TuXym
-zKztQHLRnJOFBS53HmCrffxGD/FHZQlTYsaQ211O7s3p6vAY8LqjkeK/eyTp6xNI
-TgVj9EC48YR71pHpkFDCevdELnCtc8FaPDJePJsVX5qySANQpnIvEJSB5Se/KAFq
-ou8/bBCwogJyJ9gcDNRNBlVIGattZ1bNLVVj5VBjAn3MxijvKe3bUPIxI91S8yd+
-/eFfb/UPaVgrAQIDAQABo4HLMIHIMB0GA1UdDgQWBBTE4RIjXl1h6fjBng5XlFSX
-sk4LZTAfBgNVHSMEGDAWgBSBVvPVlsuX3ocYJuDn6VmeWPyLdjA3BggrBgEFBQcB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-AEp7KtmqaXgo3C1GIvLs0wm3t5ErbaAHuYqeXBFzuh1h7Qeyo348SPOVWe2Y6UCc
-iEdHI543zvNJtVNRvkqLd6zvdio7EdGSYcz0BIUJwoPbIcwgpkk9VNrouuIP9hX9
-y4OKgheyw0PdpApCYVl1XMZbfl+X5up+vBkXW9+ecqQx/WRtNFsFOV3zLTVECsza
-y6+GBhQPrkee//FV3DJLm0PfYNnuCgmVCEPDwxgwxlbx0LkXyRlfpcOidsCtsnMk
-DjQD8IMXpayxT544PX2C9pDKQ/U3xBoZLqWpQGQK+9HrQsJC8Qgma9bDWbwUmZWz
-YoCSk0lPlf5x6Hw97iGZeqo=
+AERpBWzQENqQ92JfioCTOfDub8UY30dA0LRzitZof5mS5DS979fIjNkJsSQGhquf
+WBrTOHObgPObqYzb7w2UVJFFBEKbmDz8OVOFNh0GWcUeUHwe4Oyt2ESYE6JrvBA5
+Pj5bOjDeKqAIBSHN0VdQBcKEw+gNaVl2PTKqmoINWcYajvoIPBgIsovyOQUCDq98
+KH4WRNiy4DIZ18VUTOmH4B8wc2or75+dXjGmAjmdW+HFttHNlbruXDqXWEnvJs/m
+63JHW270zDscCMcuifaR75TjM4N8m9gQAdesD0zGAccNhEi9p+hNCUCosvMKIXF0
+D6vKI6qZgG0MQnMUADEeZ1E=
-----END CERTIFICATE-----
Certificate:
@@ -197,30 +197,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ce:b8:01:ca:69:e8:5c:e1:16:2a:54:88:85:15:
- 66:e9:09:2e:04:cf:e8:7f:98:b0:63:1a:39:b9:25:
- 0d:dd:d8:81:f6:e3:d3:3b:98:39:70:09:eb:ed:63:
- 35:91:6a:bf:c4:4e:38:fa:04:a7:1c:bd:32:92:3b:
- 5b:2b:29:f3:94:bc:b2:e6:69:7c:32:57:40:36:1b:
- 6a:1f:9d:12:10:96:db:75:2b:77:bb:50:95:0e:03:
- 65:d7:28:85:12:c8:54:89:38:be:2c:83:81:59:31:
- c7:36:d8:d8:89:28:f3:87:7d:ab:b8:24:c0:d9:43:
- a8:c8:0d:18:fa:98:4c:32:90:73:4c:86:ec:b1:c1:
- 52:1f:af:03:73:84:7c:80:ee:72:56:4e:49:91:0e:
- 1d:16:bc:ad:39:5a:dd:52:96:cb:87:09:e0:15:6a:
- a4:ac:24:5c:c0:93:13:4b:09:1e:b7:bd:a6:0b:0a:
- 94:96:5d:b5:7f:3a:ea:25:cd:c3:c5:7a:49:6a:89:
- 42:db:e6:b5:71:fc:46:45:19:d2:33:d8:e4:95:a4:
- 53:12:fd:09:f1:94:d8:24:28:d3:cc:ec:21:bd:cb:
- 46:1b:24:d9:5a:70:86:1d:cb:7f:6c:be:24:7c:e4:
- 37:72:3e:4f:c5:3e:01:68:d8:3b:ae:4a:ab:b2:90:
- 3c:cd
+ 00:c8:51:b0:c3:f3:b1:5d:6e:4a:c2:41:9e:b7:88:
+ 48:d3:62:d1:49:3a:0b:ab:c9:26:f3:8a:bb:ee:1e:
+ b8:4a:cb:9a:47:3f:8c:87:a2:81:f5:91:05:7c:47:
+ 45:d6:5f:a1:7d:e7:dd:cd:33:eb:4e:90:65:be:31:
+ d7:2d:98:03:45:48:03:03:72:8f:0f:43:3d:3a:ad:
+ cf:bc:f5:f5:bb:7d:1d:94:1d:d4:2c:b6:3b:4a:68:
+ 9e:30:54:c2:c1:69:10:f8:7c:d5:73:ae:2f:22:65:
+ 94:5c:17:1e:41:eb:5a:10:80:6c:eb:04:1d:09:0e:
+ 79:51:71:ce:e7:4f:90:23:4f:84:b5:4e:97:70:79:
+ eb:28:47:0a:8c:b8:43:a6:f5:df:4d:fd:44:46:18:
+ 06:97:6c:52:65:4a:89:25:af:73:6e:43:6a:93:b0:
+ ec:29:97:63:a4:36:95:db:71:b6:61:c3:25:0d:3f:
+ 53:2f:de:d0:b4:16:c2:b6:70:3a:34:53:02:3d:50:
+ eb:32:4a:22:62:3c:9a:74:da:b2:60:af:37:41:4c:
+ c1:df:90:74:5a:ae:5d:a4:48:dd:1b:86:06:0f:cb:
+ 3e:e5:4d:ec:62:86:04:1a:cb:0f:2a:04:a0:45:d5:
+ c1:79:9e:07:df:5d:2d:c3:0c:c4:57:0a:be:7e:41:
+ 43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 81:56:F3:D5:96:CB:97:DE:87:18:26:E0:E7:E9:59:9E:58:FC:8B:76
+ D4:FF:80:DD:86:D2:53:18:54:65:B3:62:9A:07:67:BB:21:7D:19:77
X509v3 Authority Key Identifier:
- keyid:81:56:F3:D5:96:CB:97:DE:87:18:26:E0:E7:E9:59:9E:58:FC:8B:76
+ keyid:D4:FF:80:DD:86:D2:53:18:54:65:B3:62:9A:07:67:BB:21:7D:19:77
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -235,41 +235,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 49:ab:00:40:12:3b:b6:18:a4:f7:c0:e3:94:db:49:b3:45:02:
- 45:ac:38:50:2c:4f:b9:a3:31:4f:99:e5:1a:3d:a7:76:23:1f:
- 47:83:c4:ea:11:1e:98:f4:a5:d2:d3:76:d1:e7:47:23:09:5f:
- e6:de:ef:d3:9e:aa:fa:42:4f:2e:14:2e:78:ee:0f:3f:ac:53:
- 1c:d5:7f:b2:ec:4e:34:bd:c6:10:f4:be:fa:31:e4:a3:67:7e:
- 3e:31:e7:55:ad:17:8c:b3:72:e0:19:5e:77:59:06:bb:56:8e:
- 81:ec:c8:b5:c1:95:d6:6c:53:9c:86:a0:19:72:1d:47:ea:be:
- ad:bc:4d:cd:26:f8:87:75:ff:08:1d:9a:d5:f8:7c:ae:3f:57:
- 97:3a:54:aa:90:5a:b5:93:97:3f:47:be:34:2d:14:bf:7d:fd:
- be:67:88:22:7e:b7:b5:3a:a0:3a:b0:d2:0f:9d:28:1e:fb:1a:
- c0:11:ed:ba:a6:4e:c5:6f:2a:4b:90:84:26:1d:2b:f0:14:40:
- 7a:55:22:c7:7d:39:ee:42:30:7f:b5:4a:0b:d5:1b:12:42:36:
- 62:86:b2:02:68:24:8a:c3:a6:7e:18:b1:15:5d:d4:f0:62:2c:
- cf:09:0d:7d:8f:80:a5:13:8d:9a:53:87:70:f0:94:b1:62:71:
- e3:b9:b0:d1
+ 46:ee:68:7d:1f:94:16:70:57:11:6b:6b:18:96:45:c3:d7:17:
+ 50:9b:f1:e6:b1:bf:ad:97:3f:ca:3e:75:37:4e:c6:b6:d3:68:
+ 57:f5:59:a6:44:b4:3f:e5:fe:a3:05:65:02:f5:7c:dc:da:8e:
+ 1f:2d:fb:9c:23:f0:c0:a6:fc:f5:f3:a9:80:f9:eb:64:f0:8b:
+ 2a:f1:f5:68:8d:8c:c2:37:c4:8e:d5:bb:5b:e6:fb:ec:06:f9:
+ 80:28:56:c2:de:9c:16:78:3f:a8:16:15:e9:26:72:8f:45:c3:
+ e7:d4:78:84:3c:b4:a0:72:5e:5d:09:d8:d1:7f:66:ca:74:d6:
+ 26:c0:72:c0:2a:89:fa:b4:5f:fe:92:4f:01:97:0e:81:88:01:
+ 6b:2e:ed:af:36:30:c7:62:fd:42:63:10:3f:c4:ad:eb:ee:c5:
+ fd:bc:57:08:0f:a3:0c:e5:8c:de:ab:05:b5:b4:e9:c9:d1:c8:
+ 66:e2:ea:4a:b0:33:e5:a4:47:22:67:7c:70:e9:02:e0:22:75:
+ 35:4a:39:0e:2c:27:e5:29:d6:d2:f5:39:c9:03:39:7a:35:f5:
+ ff:1d:88:8d:e1:be:6b:6b:c7:4c:0c:6d:02:d4:33:7a:f5:ea:
+ 29:55:a9:79:94:bc:a3:01:64:4a:99:99:fc:c6:e5:38:a2:8f:
+ 18:cc:e7:1f
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM64Acpp6FzhFipUiIUV
-ZukJLgTP6H+YsGMaObklDd3Ygfbj0zuYOXAJ6+1jNZFqv8ROOPoEpxy9MpI7Wysp
-85S8suZpfDJXQDYbah+dEhCW23Urd7tQlQ4DZdcohRLIVIk4viyDgVkxxzbY2Iko
-84d9q7gkwNlDqMgNGPqYTDKQc0yG7LHBUh+vA3OEfIDuclZOSZEOHRa8rTla3VKW
-y4cJ4BVqpKwkXMCTE0sJHre9pgsKlJZdtX866iXNw8V6SWqJQtvmtXH8RkUZ0jPY
-5JWkUxL9CfGU2CQo08zsIb3LRhsk2Vpwhh3Lf2y+JHzkN3I+T8U+AWjYO65Kq7KQ
-PM0CAwEAAaOByzCByDAdBgNVHQ4EFgQUgVbz1ZbLl96HGCbg5+lZnlj8i3YwHwYD
-VR0jBBgwFoAUgVbz1ZbLl96HGCbg5+lZnlj8i3YwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBJqwBAEju2
-GKT3wOOU20mzRQJFrDhQLE+5ozFPmeUaPad2Ix9Hg8TqER6Y9KXS03bR50cjCV/m
-3u/Tnqr6Qk8uFC547g8/rFMc1X+y7E40vcYQ9L76MeSjZ34+MedVrReMs3LgGV53
-WQa7Vo6B7Mi1wZXWbFOchqAZch1H6r6tvE3NJviHdf8IHZrV+HyuP1eXOlSqkFq1
-k5c/R740LRS/ff2+Z4gifre1OqA6sNIPnSge+xrAEe26pk7FbypLkIQmHSvwFEB6
-VSLHfTnuQjB/tUoL1RsSQjZihrICaCSKw6Z+GLEVXdTwYizPCQ19j4ClE42aU4dw
-8JSxYnHjubDR
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBG7mh9H5QW
+cFcRa2sYlkXD1xdQm/Hmsb+tlz/KPnU3Tsa202hX9VmmRLQ/5f6jBWUC9Xzc2o4f
+LfucI/DApvz186mA+etk8Isq8fVojYzCN8SO1btb5vvsBvmAKFbC3pwWeD+oFhXp
+JnKPRcPn1HiEPLSgcl5dCdjRf2bKdNYmwHLAKon6tF/+kk8Blw6BiAFrLu2vNjDH
+Yv1CYxA/xK3r7sX9vFcID6MM5YzeqwW1tOnJ0chm4upKsDPlpEciZ3xw6QLgInU1
+SjkOLCflKdbS9TnJAzl6NfX/HYiN4b5ra8dMDG0C1DN69eopVal5lLyjAWRKmZn8
+xuU4oo8YzOcf
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/unknown-root.pem b/net/data/verify_certificate_chain_unittest/unknown-root.pem
index a3ee2f7..1900cb0 100644
--- a/net/data/verify_certificate_chain_unittest/unknown-root.pem
+++ b/net/data/verify_certificate_chain_unittest/unknown-root.pem
@@ -1,7 +1,7 @@
[Created by: generate-unknown-root.py]
-Certificate chain with 1 intermediary, but the root is not in trust store.
-Verification is expected to fail because the final intermediary (Intermediary)
+Certificate chain with 1 intermediate, but the root is not in trust store.
+Verification is expected to fail because the final intermediate (Intermediate)
does not chain to a known root.
Certificate:
@@ -9,7 +9,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary
+ Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:f3:f6:f4:c5:f5:4f:a3:17:ee:19:45:0e:97:90:
- 31:60:2a:a5:31:0d:e4:c7:f4:fa:4d:e4:99:f5:3c:
- db:ad:6b:2d:f2:8d:07:4f:dc:c1:e3:3f:53:b6:48:
- 31:8e:8e:a6:b3:d6:a4:3c:fb:21:00:01:a6:35:79:
- 50:a6:d0:43:10:8d:13:1b:6f:a9:4b:a3:9b:77:11:
- af:0f:7c:f9:f0:e6:03:c5:b5:b4:49:7a:9d:8f:a1:
- 42:89:a5:41:5d:c7:e1:7d:4a:e5:af:8f:66:ad:93:
- b0:f6:60:52:f4:0c:2d:d1:60:ca:a4:4c:fa:0d:55:
- 0d:46:60:69:10:a7:8e:06:bd:ad:28:65:63:a5:63:
- 36:d8:eb:8e:e1:cc:fd:53:76:80:d3:1d:e2:b8:46:
- f9:24:e7:3a:86:30:f9:14:34:a2:42:81:b7:2b:a4:
- 41:14:7a:9c:77:83:51:cb:b9:08:31:29:a2:b0:25:
- 92:1e:7f:43:90:1c:6a:43:ca:64:04:37:c8:26:b7:
- 7b:ae:cb:8b:2e:e7:6f:09:c4:3e:87:0d:b1:ef:70:
- 58:cd:b5:d7:c7:6b:dd:7b:3c:46:0c:4d:5f:21:1d:
- 78:b9:cf:46:5e:f8:35:48:7d:14:0b:3e:a4:2a:1c:
- 4e:78:6d:27:76:61:e5:c5:74:16:fb:f1:77:9c:f3:
- 51:7f
+ 00:a3:7b:69:ed:ad:13:3f:59:75:63:cf:2a:9e:b0:
+ 78:06:62:e2:5e:40:3f:12:2e:61:1c:7f:2e:f8:4f:
+ 0e:92:28:80:18:d8:e2:e2:f4:b4:63:84:c8:0b:4d:
+ ae:1b:f0:4d:d5:49:91:89:b9:a4:11:b3:77:72:ba:
+ 12:16:3e:29:7c:51:28:99:37:69:57:6d:3b:68:e1:
+ 58:83:c0:ad:13:af:63:2e:85:63:ab:92:11:7a:92:
+ 8b:fa:66:33:f9:3b:c9:ab:22:75:9f:6c:91:1b:22:
+ 6b:c9:2d:c8:6d:58:2b:bc:a9:f3:cf:24:8f:7a:37:
+ 9b:83:67:e5:b2:eb:ea:35:c6:9d:e4:a8:24:74:18:
+ 5b:8b:62:6b:cd:92:d7:c3:6c:b1:40:e1:2f:a3:16:
+ 52:92:df:59:70:bc:cc:37:27:8f:8e:3d:b9:fc:d6:
+ ca:fb:63:89:b3:d0:64:24:2b:97:e3:a7:bc:6f:76:
+ 7e:e6:82:36:9f:c4:ea:b2:96:60:ac:86:57:09:55:
+ d7:3b:45:a8:23:b8:b1:4a:92:f8:a9:66:1f:1a:0f:
+ c5:f6:da:4e:6d:02:56:1b:8a:9f:52:9f:bd:b5:16:
+ a6:fb:85:3d:fa:04:1d:8e:25:b4:03:9e:74:e4:98:
+ 4a:da:39:7b:d0:f2:7d:f9:f4:97:ce:d1:d8:4d:31:
+ 88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- F8:48:56:E7:65:49:C4:48:98:8E:F0:F5:EA:01:C4:01:C8:4D:56:D9
+ 94:D6:3E:50:DE:FF:47:B8:65:1A:C6:33:78:79:87:8D:F2:32:32:BA
X509v3 Authority Key Identifier:
- keyid:41:D3:BE:10:2F:EE:43:B6:25:B0:04:4E:39:CF:78:F9:0E:ED:E1:9D
+ keyid:CC:11:88:FF:DF:7E:14:06:07:B5:10:B6:C1:BC:CB:2B:65:FC:83:77
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary.crl
+ URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 48:65:f4:55:86:82:85:93:a0:4d:b0:ce:b8:b2:21:f5:bf:56:
- 66:ef:e3:f5:24:52:da:a5:15:21:f7:b4:a1:7c:2f:69:de:1e:
- 6a:90:8d:98:e9:38:29:b8:51:44:7b:43:68:92:95:e4:50:7c:
- 32:94:72:6c:96:4a:77:07:ce:0c:55:df:19:50:29:e5:ee:ff:
- c4:54:c9:75:2d:c2:fd:f1:41:5c:c4:28:3c:15:df:1a:12:73:
- aa:a6:af:2a:3e:f5:a6:17:68:5b:80:d8:6d:fa:6d:37:26:a1:
- 01:0e:0a:c1:a8:ed:ef:2b:65:1c:43:4d:dd:aa:7b:e1:6d:a6:
- a6:23:66:11:58:73:f0:e2:98:d2:ba:db:94:ed:c9:fc:41:6f:
- 4b:99:7c:be:2e:e9:57:e2:c6:26:24:db:2a:02:4e:3c:7e:8b:
- d8:96:27:43:7b:b4:1e:25:2f:19:c0:e4:05:b9:5e:0e:57:29:
- 9e:81:9c:1e:d8:48:4b:d0:c8:ff:1a:a7:7f:71:4a:9f:51:0d:
- 8a:11:6e:74:86:8e:89:d8:fd:a4:69:bb:67:78:2d:2d:44:75:
- 9b:63:31:ef:b1:3e:38:11:ce:01:ae:b0:fa:a4:3f:b0:df:be:
- 13:9a:5e:11:f6:bb:eb:8e:3a:7d:09:be:76:9b:e5:d4:91:f3:
- dc:e5:23:df
+ b4:9a:15:da:2b:7d:d4:26:f2:41:a2:04:1e:13:f3:b3:28:bf:
+ a3:85:34:fc:42:b1:57:05:0f:97:e5:f5:d9:d4:0e:eb:43:e8:
+ 63:ce:5b:23:8b:48:ab:2f:25:03:81:43:ba:7e:9a:14:e4:4e:
+ 9c:5b:d3:08:56:b7:00:7c:7f:fd:9e:ab:50:ce:09:95:2c:21:
+ 00:74:22:26:83:fb:08:47:34:1b:67:0e:eb:e0:c4:ab:3d:00:
+ 76:b2:9a:b1:00:c8:d0:17:0d:2e:81:43:71:51:f8:d7:f5:ad:
+ e9:f0:81:12:2a:e0:6f:c7:10:11:d7:f4:55:73:a4:7c:cb:97:
+ 6c:fd:2b:34:bf:7e:a9:57:d8:e1:a9:05:01:5a:09:2b:49:bf:
+ bc:99:a3:a5:7c:b0:df:7a:32:0f:c2:94:0f:e0:15:f2:86:8f:
+ c3:19:44:49:02:10:56:f6:a9:58:38:7f:4d:f1:66:58:00:f9:
+ 17:18:ab:b4:0c:c1:9e:f3:8d:5d:61:4d:02:8c:3a:97:89:8d:
+ 5f:d0:98:f3:57:5c:85:35:b0:94:f8:02:7c:6f:bf:69:bf:7b:
+ 91:5a:c3:38:88:0d:ec:42:3b:b5:29:6b:0a:2d:10:19:ae:bc:
+ 6c:18:95:2e:cd:74:04:af:95:79:ab:8e:4a:cc:53:6e:4d:ad:
+ 83:58:6d:c5
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz9vTF
-9U+jF+4ZRQ6XkDFgKqUxDeTH9PpN5Jn1PNutay3yjQdP3MHjP1O2SDGOjqaz1qQ8
-+yEAAaY1eVCm0EMQjRMbb6lLo5t3Ea8PfPnw5gPFtbRJep2PoUKJpUFdx+F9SuWv
-j2atk7D2YFL0DC3RYMqkTPoNVQ1GYGkQp44Gva0oZWOlYzbY647hzP1TdoDTHeK4
-Rvkk5zqGMPkUNKJCgbcrpEEUepx3g1HLuQgxKaKwJZIef0OQHGpDymQEN8gmt3uu
-y4su528JxD6HDbHvcFjNtdfHa917PEYMTV8hHXi5z0Ze+DVIfRQLPqQqHE54bSd2
-YeXFdBb78Xec81F/AgMBAAGjgekwgeYwHQYDVR0OBBYEFPhIVudlScRImI7w9eoB
-xAHITVbZMB8GA1UdIwQYMBaAFEHTvhAv7kO2JbAETjnPePkO7eGdMD8GCCsGAQUF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-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEASGX0VYaChZOgTbDOuLIh
-9b9WZu/j9SRS2qUVIfe0oXwvad4eapCNmOk4KbhRRHtDaJKV5FB8MpRybJZKdwfO
-DFXfGVAp5e7/xFTJdS3C/fFBXMQoPBXfGhJzqqavKj71phdoW4DYbfptNyahAQ4K
-wajt7ytlHENN3ap74W2mpiNmEVhz8OKY0rrblO3J/EFvS5l8vi7pV+LGJiTbKgJO
-PH6L2JYnQ3u0HiUvGcDkBbleDlcpnoGcHthIS9DI/xqnf3FKn1ENihFudIaOidj9
-pGm7Z3gtLUR1m2Mx77E+OBHOAa6w+qQ/sN++E5peEfa76446fQm+dpvl1JHz3OUj
-3w==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-----END CERTIFICATE-----
Certificate:
@@ -103,35 +103,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary
+ Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:cd:6f:e8:b3:ea:d4:9e:d9:23:03:8a:4a:f3:6c:
- 84:cd:0c:28:7c:c2:07:60:89:c5:9a:9f:74:b8:d0:
- ac:e4:30:f1:4b:1c:c5:7f:9d:d2:0f:4e:e0:e5:45:
- 4a:cc:93:70:a0:df:3c:4c:fc:0c:a5:d5:c9:86:fd:
- ba:4e:67:c0:af:c3:04:98:cb:bb:f6:25:a6:af:7f:
- 7b:a3:29:b9:86:60:87:80:67:90:ab:e7:64:86:ec:
- e6:30:f6:dd:5b:3a:69:4f:b1:58:f8:4b:15:ae:13:
- c8:84:24:bf:9a:a0:6c:8a:b3:36:31:84:2f:a4:3e:
- 4a:f2:9f:07:91:a4:8b:dc:fa:5b:65:3c:4e:93:19:
- 02:a5:3a:78:5d:f2:51:bd:d7:96:16:6e:c5:8b:17:
- d0:21:77:2f:96:4a:44:c8:17:2d:73:d5:da:24:40:
- d1:a4:b7:f2:c4:b2:e2:16:6a:19:9b:72:cb:58:62:
- eb:30:2f:2f:c5:35:1c:74:2f:ba:e6:93:7e:dc:78:
- bc:ad:e3:89:c9:72:9a:f5:01:95:61:02:9f:82:40:
- f9:c1:c8:6e:36:b7:14:4a:13:36:bb:d0:1b:25:bd:
- d6:5e:11:e7:d9:ea:a7:db:6d:d3:92:98:b1:2a:c1:
- cf:00:52:c1:78:c9:0a:30:41:30:09:c8:90:0a:04:
- 8f:0d
+ 00:b6:cf:57:a5:6e:7c:9a:78:f2:c1:bd:99:eb:7c:
+ af:6a:c8:38:2e:8e:cf:e5:20:c0:f9:57:5c:e2:83:
+ 29:33:2c:b1:9d:2b:91:ce:4c:da:27:62:5f:18:08:
+ a8:f1:03:eb:0e:be:f2:1e:00:8c:63:f2:8f:d3:c1:
+ e4:df:0a:d3:d4:82:0d:6c:c4:98:87:eb:5b:81:66:
+ 43:f3:38:5e:d4:8b:91:47:70:8b:89:90:a0:0b:9d:
+ 63:56:4f:58:4b:e2:36:e1:97:df:37:71:7a:90:f5:
+ 62:2c:3e:57:71:6a:75:db:10:66:22:4c:fd:e9:a0:
+ 78:5e:4c:e3:8c:d5:c2:c9:a0:10:3d:ec:bd:7b:76:
+ 9f:5f:54:e3:c3:88:9b:d7:7f:8c:80:79:87:0f:3c:
+ aa:28:d9:f5:63:e8:f3:a5:6b:2b:e0:45:1c:af:94:
+ 00:84:b4:e4:fc:3a:5d:9c:bc:05:c2:04:b7:3a:23:
+ 84:56:66:a2:50:fc:8d:00:06:52:7f:a2:d3:9e:0b:
+ fa:d5:ba:1b:1e:10:e9:13:60:56:a6:cd:ab:67:90:
+ 66:0c:3d:71:c0:46:42:13:48:74:a8:a8:6d:0c:a8:
+ 6d:7b:6b:57:f1:ba:c0:c5:c8:cd:d9:75:20:d3:59:
+ ed:32:ed:5c:b6:63:b4:9b:0b:3a:05:7b:ad:38:70:
+ e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 41:D3:BE:10:2F:EE:43:B6:25:B0:04:4E:39:CF:78:F9:0E:ED:E1:9D
+ CC:11:88:FF:DF:7E:14:06:07:B5:10:B6:C1:BC:CB:2B:65:FC:83:77
X509v3 Authority Key Identifier:
- keyid:A7:80:43:01:58:B0:DD:7A:AD:7C:38:10:73:02:DE:2C:E6:E4:9E:A9
+ keyid:A7:26:DB:0B:03:E6:0B:32:0B:8C:34:AD:CE:60:CD:4C:89:9B:59:6E
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -146,41 +146,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 90:b6:a5:85:fe:d4:51:b9:f7:92:ae:60:80:ab:54:09:3d:63:
- 43:fd:ce:e0:ea:e3:f2:c0:db:f5:1b:a7:db:f1:b3:21:d0:e4:
- 7f:63:c1:75:13:ca:3d:6b:70:76:55:23:cc:c8:74:80:b8:82:
- c0:cd:63:41:77:4c:27:8a:32:34:f7:9d:8d:0e:9f:15:ee:22:
- 4f:ed:d7:32:f2:c9:95:bd:35:87:d8:c5:58:19:ba:06:58:a4:
- 96:bc:2d:4e:1b:ed:2f:23:ac:b1:2f:b7:e0:88:a9:fc:68:c0:
- 8d:8a:41:e6:d3:ba:b9:88:77:54:37:5a:e5:a9:b3:f2:85:7b:
- b4:7d:69:83:37:81:12:54:21:4c:d1:69:98:a2:fd:ef:a3:65:
- e9:32:f6:63:1e:54:ce:a9:75:74:53:61:b4:f0:78:72:c4:f0:
- 04:f0:f3:a8:70:93:f6:35:89:0f:6f:49:7a:0e:57:e0:af:33:
- 35:89:b6:cd:ef:81:aa:8c:10:11:e9:57:a1:66:4c:30:9c:11:
- 6a:c6:85:4b:d1:94:88:6e:aa:5f:8e:fb:d2:31:3d:ee:19:19:
- 01:3c:4a:05:72:9c:aa:ae:ef:af:b0:f1:9f:e0:ae:d6:8e:09:
- d1:05:ee:6b:77:08:11:52:8c:91:a0:2f:9b:ac:88:98:14:14:
- a4:08:b5:7d
+ 69:10:d5:c3:ff:f0:65:c6:79:55:be:ba:6b:7c:7f:49:a2:47:
+ b0:d7:e9:28:9f:14:f6:11:6a:d7:1f:e3:11:30:c1:d0:0c:21:
+ 8c:b3:21:95:c1:f3:2e:7c:8a:34:f6:d6:c7:49:9a:75:4c:93:
+ 35:c4:88:f7:be:d6:ed:e0:75:22:29:4d:0f:59:80:1a:1b:9b:
+ a4:fd:86:af:1e:76:44:03:f9:42:f2:74:1e:6b:74:fc:fa:64:
+ 67:33:4a:14:93:fc:84:1f:92:0c:62:ac:aa:e1:f0:6f:3e:09:
+ 90:d5:67:68:2a:28:9c:5f:86:29:8d:48:ef:3e:a5:48:60:08:
+ b5:cf:ac:ba:ff:ba:d7:7d:9a:8e:b4:63:10:e3:14:12:12:89:
+ 37:00:42:fb:4c:e5:b7:0d:e5:b8:28:5b:9f:79:48:aa:e4:ef:
+ 17:ec:eb:f1:c3:82:d9:48:ec:cd:f4:f7:1f:8f:e2:9e:ec:71:
+ a6:7a:ce:c0:fc:14:8f:48:17:56:10:02:27:aa:d9:10:bb:fc:
+ 6d:e2:d8:b6:66:27:08:e5:31:4d:fb:24:45:0f:da:7a:9c:8d:
+ e5:91:0c:80:91:1e:44:78:01:28:ca:db:40:87:db:38:0f:18:
+ 1a:a9:ff:68:8c:03:b2:89:82:e2:80:ee:3c:77:e2:4e:85:a5:
+ cf:72:3f:24
-----BEGIN CERTIFICATE-----
MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW/os+rU
-ntkjA4pK82yEzQwofMIHYInFmp90uNCs5DDxSxzFf53SD07g5UVKzJNwoN88TPwM
-pdXJhv26TmfAr8MEmMu79iWmr397oym5hmCHgGeQq+dkhuzmMPbdWzppT7FY+EsV
-rhPIhCS/mqBsirM2MYQvpD5K8p8HkaSL3PpbZTxOkxkCpTp4XfJRvdeWFm7FixfQ
-IXcvlkpEyBctc9XaJEDRpLfyxLLiFmoZm3LLWGLrMC8vxTUcdC+65pN+3Hi8reOJ
-yXKa9QGVYQKfgkD5wchuNrcUShM2u9AbJb3WXhHn2eqn223TkpixKsHPAFLBeMkK
-MEEwCciQCgSPDQIDAQABo4HLMIHIMB0GA1UdDgQWBBRB074QL+5DtiWwBE45z3j5
-Du3hnTAfBgNVHSMEGDAWgBSngEMBWLDdeq18OBBzAt4s5uSeqTA3BggrBgEFBQcB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-AJC2pYX+1FG595KuYICrVAk9Y0P9zuDq4/LA2/Ubp9vxsyHQ5H9jwXUTyj1rcHZV
-I8zIdIC4gsDNY0F3TCeKMjT3nY0OnxXuIk/t1zLyyZW9NYfYxVgZugZYpJa8LU4b
-7S8jrLEvt+CIqfxowI2KQebTurmId1Q3WuWps/KFe7R9aYM3gRJUIUzRaZii/e+j
-Zeky9mMeVM6pdXRTYbTweHLE8ATw86hwk/Y1iQ9vSXoOV+CvMzWJts3vgaqMEBHp
-V6FmTDCcEWrGhUvRlIhuql+O+9IxPe4ZGQE8SgVynKqu76+w8Z/grtaOCdEF7mt3
-CBFSjJGgL5usiJgUFKQItX0=
+AGkQ1cP/8GXGeVW+umt8f0miR7DX6SifFPYRatcf4xEwwdAMIYyzIZXB8y58ijT2
+1sdJmnVMkzXEiPe+1u3gdSIpTQ9ZgBobm6T9hq8edkQD+ULydB5rdPz6ZGczShST
+/IQfkgxirKrh8G8+CZDVZ2gqKJxfhimNSO8+pUhgCLXPrLr/utd9mo60YxDjFBIS
+iTcAQvtM5bcN5bgoW595SKrk7xfs6/HDgtlI7M309x+P4p7scaZ6zsD8FI9IF1YQ
+Aieq2RC7/G3i2LZmJwjlMU37JEUP2nqcjeWRDICRHkR4ASjK20CH2zgPGBqp/2iM
+A7KJguKA7jx34k6Fpc9yPyQ=
-----END CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem b/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem
index a0cd187..04d29bf 100644
--- a/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem
+++ b/net/data/verify_certificate_chain_unittest/violates-basic-constraints-pathlen-0.pem
@@ -1,15 +1,15 @@
[Created by: generate-violates-basic-constraints-pathlen-0.py]
-Certificate chain with 2 intermediaries. The first intermediary has a basic
+Certificate chain with 2 intermediates. The first intermediate has a basic
constraints path length of 0, so it is a violation for it to have a subordinate
-intermediary.
+intermediate.
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary2
+ Issuer: CN=Intermediate2
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -18,80 +18,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b2:f1:24:bb:4b:3d:6d:80:7f:67:ad:2e:0e:e8:
- 07:e4:4b:6c:28:0d:2e:d9:9d:9d:e5:31:0a:7f:37:
- 3f:9c:c1:c3:03:8e:b8:72:5a:1c:52:d4:4e:84:7a:
- 9c:4d:f6:2a:a8:4b:f2:5c:5b:6c:f4:23:73:b3:4e:
- 0a:b9:66:16:ae:e4:c4:8b:d7:1b:b5:d0:5e:5f:03:
- 21:ce:63:b8:3a:da:e0:3c:f8:0a:7e:4b:99:f9:c6:
- 0d:01:a2:ab:18:d8:a7:a0:84:8c:3f:09:fd:10:41:
- 7c:6f:b0:51:34:4f:5d:39:b5:3f:6d:a0:68:87:6d:
- 09:47:db:0d:2a:62:99:83:02:0c:b9:d7:93:0b:bf:
- 17:5f:06:58:22:27:62:fc:1c:d9:02:b9:1e:e9:f0:
- fb:e1:a4:cc:fd:e3:9e:a8:a5:2d:f9:af:8b:b8:1e:
- 68:dc:f1:52:a2:55:94:20:da:82:14:b7:c0:a0:c5:
- 53:ff:00:0f:76:f9:fd:bf:53:71:99:60:2f:00:c9:
- 9e:d0:07:eb:3c:d0:47:5c:7b:65:cb:62:db:9b:74:
- ed:b8:51:a0:ed:ed:af:e9:6f:44:0e:8c:a4:42:ee:
- fc:92:bb:19:1a:b3:42:74:27:39:47:b8:d4:06:ed:
- bd:99:72:0c:83:15:10:ff:4a:66:66:0f:d6:14:ef:
- dd:17
+ 00:c3:d8:cf:ca:eb:7a:63:bc:cd:53:50:a0:a5:e7:
+ 24:1c:5e:ab:ee:eb:48:d3:60:73:ab:a5:c3:b5:e0:
+ ea:b2:71:0b:99:48:4c:0c:78:6f:67:a8:98:13:f7:
+ 99:59:a0:fc:78:d8:7e:05:cc:1c:4c:4d:ff:c0:a7:
+ 85:8f:c0:f8:c2:10:51:a2:a6:9b:38:a1:a8:7f:e3:
+ 7c:df:be:f7:8c:62:9a:83:c6:a5:ab:63:26:9e:71:
+ 25:26:7d:dc:05:09:b3:76:e8:de:90:07:6d:6d:d1:
+ 33:a5:3a:64:90:c0:50:2e:d6:a9:84:2e:f2:7c:11:
+ 49:4c:c5:e2:50:c3:b9:9c:0f:ac:8f:07:19:74:63:
+ 00:12:8a:ec:6f:4f:86:8a:9b:af:2a:c2:21:f1:98:
+ 88:eb:4a:23:2c:7d:25:9f:fd:2a:3e:b0:3d:f5:66:
+ bf:a7:07:42:7d:04:70:62:d3:4b:88:92:af:74:6e:
+ 20:4c:55:5e:9e:de:29:a6:58:66:1a:8d:c4:af:b5:
+ 22:44:29:ee:b6:03:66:8e:4b:a6:ca:77:3d:91:08:
+ c0:b2:e0:70:c8:e6:d1:fb:db:09:86:7c:ad:f5:20:
+ 76:10:1d:fc:bf:98:05:0b:b1:6e:47:d8:ce:4b:aa:
+ 02:7c:ec:3e:8a:b0:22:f9:3d:fc:8e:60:45:1b:cc:
+ c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 33:73:C0:44:EE:71:53:CD:C0:EA:D9:FC:FF:BE:B7:DD:16:66:19:84
+ 4C:E1:88:56:8D:23:98:7B:19:E1:6E:D8:1C:E5:06:73:6B:D5:1E:03
X509v3 Authority Key Identifier:
- keyid:FD:31:C0:C5:57:AB:1E:A5:78:24:73:72:58:9F:75:7D:78:17:42:AC
+ keyid:CB:CE:B8:91:FA:EC:E9:A4:15:CA:75:30:F1:C6:9A:B8:19:35:FA:29
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary2.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate2.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary2.crl
+ URI:http://url-for-crl/Intermediate2.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 61:39:30:49:95:f7:63:44:f3:a5:97:35:48:84:ea:94:cd:94:
- 37:ce:09:7a:b1:58:21:3e:f8:9c:a4:a9:65:bf:1d:a1:cb:eb:
- 09:95:f7:f6:ad:a4:65:95:a1:51:c4:18:06:43:d2:93:eb:16:
- 41:65:33:8a:42:cc:90:9d:e9:66:1f:d6:98:31:f1:48:f4:a8:
- a3:89:50:29:bc:f2:2d:af:8b:f7:af:9e:62:02:21:06:75:3d:
- 4a:8d:98:a0:df:4d:5d:db:9a:af:2a:0f:32:50:aa:61:c3:19:
- 87:99:54:60:3a:16:c5:46:ea:ed:54:ab:91:34:5f:8e:60:33:
- 10:e4:e1:4d:05:8d:36:5b:47:1c:c3:f2:58:7f:22:07:c7:95:
- 02:24:8e:03:f4:1f:06:25:d7:49:76:f8:f1:02:25:7c:9a:cf:
- 0f:4d:8f:08:e7:bf:fd:13:31:43:e5:56:20:eb:0a:43:ca:41:
- 0d:7c:4f:68:f6:d1:d1:67:ca:24:4f:e3:8e:8e:12:39:2f:7b:
- e8:9a:5c:c9:b5:19:01:1a:46:7e:54:21:ad:7e:c5:cd:e2:40:
- c3:13:aa:b5:e5:16:b3:18:dc:c8:61:d7:73:b7:3b:23:00:04:
- ce:dc:5a:22:1a:0b:da:8a:99:10:96:33:32:ae:4e:83:f4:d0:
- 93:e7:75:56
+ a6:96:6f:71:a0:4e:f8:17:93:ad:30:1f:2e:e5:6e:bc:4e:83:
+ 32:07:95:9f:f6:02:e8:06:5e:a6:51:0a:23:f6:46:06:3c:3d:
+ e6:4d:cc:ac:8c:29:e8:ce:0e:a4:db:11:7d:4f:6e:b7:78:e2:
+ 40:1e:0e:74:83:d5:16:7c:c5:6e:3e:41:59:be:d5:0c:ab:05:
+ 9f:2f:22:8c:3b:58:ed:72:49:11:b0:0b:21:b9:5d:e0:b8:3f:
+ cd:a0:a0:95:64:c6:8e:45:7d:aa:1b:67:69:13:54:40:0d:99:
+ 74:da:b1:9f:5b:9f:ba:e3:b6:aa:5b:e4:b6:d9:6c:46:d3:50:
+ 1a:d9:5a:54:b9:2d:a1:da:97:00:7a:6a:71:2a:8e:45:9c:6d:
+ e8:3d:a2:cb:29:44:45:11:5c:a9:64:60:81:88:e4:93:a2:61:
+ ec:87:74:69:bc:9c:61:92:94:eb:42:33:12:29:82:5d:fe:30:
+ 9b:9c:bf:47:50:a9:f6:ae:ea:d4:97:39:87:d5:02:c4:45:09:
+ a8:f3:f3:bf:e0:35:45:89:a9:bc:57:34:bf:d4:81:a0:09:4e:
+ 2d:15:61:39:0c:43:53:2e:50:fb:31:ab:91:0d:ce:9c:cb:c1:
+ e2:39:e2:76:60:ab:6b:5d:33:b6:0f:a7:c8:f0:61:ed:37:81:
+ 83:3a:2b:b4
-----BEGIN CERTIFICATE-----
MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl
-cm1lZGlhcnkyMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowETEPMA0G
-A1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvEk
-u0s9bYB/Z60uDugH5EtsKA0u2Z2d5TEKfzc/nMHDA464clocUtROhHqcTfYqqEvy
-XFts9CNzs04KuWYWruTEi9cbtdBeXwMhzmO4OtrgPPgKfkuZ+cYNAaKrGNinoISM
-Pwn9EEF8b7BRNE9dObU/baBoh20JR9sNKmKZgwIMudeTC78XXwZYIidi/BzZArke
-6fD74aTM/eOeqKUt+a+LuB5o3PFSolWUINqCFLfAoMVT/wAPdvn9v1NxmWAvAMme
-0AfrPNBHXHtly2Lbm3TtuFGg7e2v6W9EDoykQu78krsZGrNCdCc5R7jUBu29mXIM
-gxUQ/0pmZg/WFO/dFwIDAQABo4HrMIHoMB0GA1UdDgQWBBQzc8BE7nFTzcDq2fz/
-vrfdFmYZhDAfBgNVHSMEGDAWgBT9McDFV6sepXgkc3JYn3V9eBdCrDBABggrBgEF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-ZGlhcnkyLmNlcjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vdXJsLWZvci1jcmwv
-SW50ZXJtZWRpYXJ5Mi5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
-AQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAYTkwSZX3Y0TzpZc1
-SITqlM2UN84JerFYIT74nKSpZb8docvrCZX39q2kZZWhUcQYBkPSk+sWQWUzikLM
-kJ3pZh/WmDHxSPSoo4lQKbzyLa+L96+eYgIhBnU9So2YoN9NXduaryoPMlCqYcMZ
-h5lUYDoWxUbq7VSrkTRfjmAzEOThTQWNNltHHMPyWH8iB8eVAiSOA/QfBiXXSXb4
-8QIlfJrPD02PCOe//RMxQ+VWIOsKQ8pBDXxPaPbR0WfKJE/jjo4SOS976JpcybUZ
-ARpGflQhrX7FzeJAwxOqteUWsxjcyGHXc7c7IwAEztxaIhoL2oqZEJYzMq5Og/TQ
-k+d1Vg==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-----END CERTIFICATE-----
Certificate:
@@ -99,88 +99,88 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary1
+ Issuer: CN=Intermediate1
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary2
+ Subject: CN=Intermediate2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b9:4e:dc:bd:a8:9e:1d:81:d7:bb:c3:4d:8a:5d:
- 34:3f:b2:71:12:c0:0d:76:05:d6:b3:6a:b6:3d:b5:
- 97:a8:8d:a0:ba:d9:2f:3c:da:b0:8f:5f:18:f0:83:
- fb:59:ef:91:8d:5a:57:57:63:36:a1:ff:54:9a:f5:
- 10:ab:4a:6b:16:fc:c6:f2:4e:9f:97:ec:22:6f:97:
- dd:0e:63:ef:ce:71:4f:f6:8e:04:68:22:c9:6d:b4:
- d2:fe:7b:46:aa:e9:05:a0:c0:b0:25:42:cd:ba:e8:
- 8d:bb:cb:3e:5f:e4:54:b7:dd:48:c6:08:52:30:54:
- e2:f4:c1:ae:ee:71:71:a7:33:ce:c1:b1:55:e4:77:
- 15:72:c5:ea:5f:ed:b3:a6:ef:a7:cc:f6:eb:6c:42:
- 1d:45:c3:75:15:d5:bd:09:44:52:b9:f5:5d:1f:10:
- e1:fc:31:9e:37:90:ca:7c:8d:16:c4:f7:76:39:b7:
- 57:ea:5b:75:3d:6c:50:60:26:ed:8b:2a:e4:a2:b8:
- a2:34:ba:51:89:ce:3c:e3:68:c3:3c:4a:58:cb:be:
- 79:34:54:2d:61:38:7b:7a:89:3f:4c:5f:3f:c9:c6:
- fc:d0:81:de:0c:21:2e:5a:2a:74:cd:fe:d7:c9:de:
- b3:3a:60:d6:16:e7:91:13:87:a4:f4:f8:67:4b:17:
- e6:13
+ 00:ad:d8:fa:e5:f4:8b:41:38:13:dc:61:ad:db:db:
+ 3d:f6:be:e2:fd:9d:63:a2:eb:4a:8d:c8:03:6b:d2:
+ c3:18:29:e6:93:92:5f:d0:c5:b2:3c:05:cd:79:c9:
+ 25:dd:e8:fc:68:83:f1:d9:95:15:22:8f:27:eb:bf:
+ 1f:ed:78:ce:34:b7:60:66:ee:4a:40:9f:e3:95:d0:
+ 32:47:67:80:6c:37:1c:3d:3a:e8:3e:14:2d:5b:97:
+ b3:40:85:28:a9:10:f0:fb:c9:eb:51:be:b6:c6:8a:
+ ca:60:cd:31:b7:b0:d3:bd:eb:5c:8a:14:89:38:47:
+ cb:18:2b:11:f7:a7:9e:9d:f3:76:82:97:c4:78:61:
+ 8c:ec:90:ac:f2:a8:2e:bf:d8:30:48:52:94:7f:48:
+ f6:fb:4b:e6:0a:63:89:ad:8a:4d:8d:3e:dc:45:06:
+ 89:e9:94:24:5b:d4:94:50:de:05:cf:87:59:66:fb:
+ 70:62:84:3c:fe:d9:1b:02:92:30:80:cb:45:43:e4:
+ 55:47:97:2e:99:59:22:86:6f:51:3a:24:13:26:e8:
+ 10:c9:92:35:13:6f:4a:39:c5:71:d2:c3:63:a5:11:
+ f8:6e:dc:fa:75:5c:4b:29:24:04:9f:e3:f4:f0:49:
+ 55:7e:0a:8c:6c:44:b4:a4:35:c7:b0:54:10:a4:b1:
+ 6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- FD:31:C0:C5:57:AB:1E:A5:78:24:73:72:58:9F:75:7D:78:17:42:AC
+ CB:CE:B8:91:FA:EC:E9:A4:15:CA:75:30:F1:C6:9A:B8:19:35:FA:29
X509v3 Authority Key Identifier:
- keyid:09:87:C1:14:11:81:04:D8:AF:CF:66:4A:4F:8D:1C:A5:BB:04:CF:DA
+ keyid:58:20:BB:27:E1:6D:B0:95:1A:D3:40:A1:81:79:89:63:34:21:9F:13
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary1.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate1.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary1.crl
+ URI:http://url-for-crl/Intermediate1.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha256WithRSAEncryption
- 51:f3:32:1a:03:bd:bd:a1:40:7d:4a:55:ef:6e:5e:58:57:8c:
- 50:75:7c:e6:d0:44:ff:7e:0c:f7:9d:c2:67:99:83:e2:da:19:
- e6:0b:54:8a:61:7d:16:86:99:2d:b7:32:2d:c6:a0:7a:1a:e2:
- c2:46:8c:a1:b7:f8:bb:d4:22:b1:ae:d0:2f:a9:98:32:4e:14:
- 20:6c:22:cf:df:c8:08:ce:f4:4c:8b:5c:03:33:0a:d1:32:2b:
- 5a:0d:d2:99:18:79:a1:e8:ed:8d:31:85:9e:dd:30:52:30:1f:
- ff:af:1f:09:08:98:a0:75:11:02:e6:6c:2b:7e:67:df:89:91:
- 1e:57:b4:a2:ba:1e:7b:86:68:f3:62:7a:69:c1:4e:b3:76:58:
- 74:e5:84:3d:0f:6d:1b:22:97:e9:7f:0b:c7:2f:00:c5:4d:1a:
- fd:47:ff:9f:c0:84:0b:ee:dc:cd:c2:43:7f:0f:7a:a6:28:6e:
- c3:2c:7a:a1:cf:4f:16:3f:f5:fc:40:c7:65:91:a5:bc:5c:82:
- 9c:a0:fb:0a:1d:69:89:85:e5:9e:10:41:7e:4d:83:02:4f:64:
- 54:04:86:97:d7:5e:6c:e1:ef:65:b0:a4:69:b8:e3:d4:0e:cd:
- 20:04:1a:05:56:e9:e1:c3:e9:2f:9a:7b:43:59:73:ff:0b:82:
- 38:e8:b3:b5
+ 5c:fb:a9:0c:98:92:b4:e2:3c:b1:57:ae:7d:4c:17:b3:44:0e:
+ df:f8:c5:96:e3:1c:10:c2:1b:cf:26:b8:b8:45:3b:e2:3a:54:
+ d9:2a:ce:2d:70:ef:7d:e7:0a:f8:c4:3e:c2:11:65:58:c2:9c:
+ 57:0f:82:6f:ad:d5:c3:75:fe:7a:eb:3e:51:13:a9:04:18:37:
+ 6a:e1:86:11:7f:3b:9d:5a:eb:29:ec:ef:d1:3b:df:13:f4:66:
+ 87:31:2e:b7:75:b0:31:02:b6:47:98:d6:f5:3d:35:7e:18:ac:
+ 53:86:4e:d2:d4:93:ac:7a:20:04:8f:58:9b:15:58:ad:7a:b3:
+ 3e:a0:11:57:92:96:2a:d4:b9:16:e9:f0:8b:70:67:4b:21:58:
+ 80:8e:43:21:ba:62:22:46:96:d2:f0:48:82:69:c5:51:ba:22:
+ 32:a0:50:cf:48:1f:1a:35:05:41:23:4e:93:a2:43:e6:83:d9:
+ ae:32:1e:95:72:24:61:79:09:4c:62:d0:1c:42:60:c5:8c:0c:
+ 6f:a1:8c:29:8c:68:e3:b8:da:44:83:f6:04:ab:e2:85:e4:6a:
+ f6:ca:ed:95:e3:a0:81:4e:79:1e:cb:46:a1:83:4b:19:23:52:
+ ae:b3:80:d7:7c:4f:05:8c:78:55:e2:fc:ec:80:74:5b:3e:7d:
+ 16:e3:71:5a
-----BEGIN CERTIFICATE-----
MIIDjDCCAnSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl
-cm1lZGlhcnkxMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQG
-A1UEAwwNSW50ZXJtZWRpYXJ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBALlO3L2onh2B17vDTYpdND+ycRLADXYF1rNqtj21l6iNoLrZLzzasI9fGPCD
-+1nvkY1aV1djNqH/VJr1EKtKaxb8xvJOn5fsIm+X3Q5j785xT/aOBGgiyW200v57
-RqrpBaDAsCVCzbrojbvLPl/kVLfdSMYIUjBU4vTBru5xcaczzsGxVeR3FXLF6l/t
-s6bvp8z262xCHUXDdRXVvQlEUrn1XR8Q4fwxnjeQynyNFsT3djm3V+pbdT1sUGAm
-7Ysq5KK4ojS6UYnOPONowzxKWMu+eTRULWE4e3qJP0xfP8nG/NCB3gwhLloqdM3+
-18neszpg1hbnkROHpPT4Z0sX5hMCAwEAAaOB4DCB3TAdBgNVHQ4EFgQU/THAxVer
-HqV4JHNyWJ91fXgXQqwwHwYDVR0jBBgwFoAUCYfBFBGBBNivz2ZKT40cpbsEz9ow
+cm1lZGlhdGUxMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQG
+A1UEAwwNSW50ZXJtZWRpYXRlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+ggEBAK3Y+uX0i0E4E9xhrdvbPfa+4v2dY6LrSo3IA2vSwxgp5pOSX9DFsjwFzXnJ
+Jd3o/GiD8dmVFSKPJ+u/H+14zjS3YGbuSkCf45XQMkdngGw3HD066D4ULVuXs0CF
+KKkQ8PvJ61G+tsaKymDNMbew073rXIoUiThHyxgrEfennp3zdoKXxHhhjOyQrPKo
+Lr/YMEhSlH9I9vtL5gpjia2KTY0+3EUGiemUJFvUlFDeBc+HWWb7cGKEPP7ZGwKS
+MIDLRUPkVUeXLplZIoZvUTokEyboEMmSNRNvSjnFcdLDY6UR+G7c+nVcSykkBJ/j
+9PBJVX4KjGxEtKQ1x7BUEKSxb5UCAwEAAaOB4DCB3TAdBgNVHQ4EFgQUy864kfrs
+6aQVynUw8caauBk1+ikwHwYDVR0jBBgwFoAUWCC7J+FtsJUa00ChgXmJYzQhnxMw
QAYIKwYBBQUHAQEENDAyMDAGCCsGAQUFBzAChiRodHRwOi8vdXJsLWZvci1haWEv
-SW50ZXJtZWRpYXJ5MS5jZXIwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL3VybC1m
-b3ItY3JsL0ludGVybWVkaWFyeTEuY3JsMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMB
-Af8ECDAGAQH/AgEAMA0GCSqGSIb3DQEBCwUAA4IBAQBR8zIaA729oUB9SlXvbl5Y
-V4xQdXzm0ET/fgz3ncJnmYPi2hnmC1SKYX0WhpkttzItxqB6GuLCRoyht/i71CKx
-rtAvqZgyThQgbCLP38gIzvRMi1wDMwrRMitaDdKZGHmh6O2NMYWe3TBSMB//rx8J
-CJigdREC5mwrfmffiZEeV7Siuh57hmjzYnppwU6zdlh05YQ9D20bIpfpfwvHLwDF
-TRr9R/+fwIQL7tzNwkN/D3qmKG7DLHqhz08WP/X8QMdlkaW8XIKcoPsKHWmJheWe
-EEF+TYMCT2RUBIaX115s4e9lsKRpuOPUDs0gBBoFVunhw+kvmntDWXP/C4I46LO1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-----END CERTIFICATE-----
Certificate:
@@ -192,35 +192,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary1
+ Subject: CN=Intermediate1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:ab:e9:a0:28:67:38:13:72:12:a0:3b:f2:f9:13:
- c2:2b:c1:a2:07:e6:45:35:cf:ff:1a:46:b0:d2:58:
- 12:63:fc:3d:b3:85:50:68:9c:57:21:ff:31:ff:24:
- 48:db:13:de:b1:f4:f8:39:7a:f3:34:dd:51:58:1a:
- 12:73:9d:85:e0:d0:f8:be:fd:9d:e2:34:ce:36:e0:
- a0:48:53:36:23:bf:52:d2:ac:da:d1:ef:6c:da:9f:
- 11:3b:6c:e1:67:6a:f1:df:97:2c:1a:12:c7:c3:72:
- 0f:98:21:6a:40:2b:f0:28:b8:c2:ef:7f:cb:ee:7a:
- e9:8f:17:fe:0a:a1:ff:d5:15:4c:63:5b:53:55:15:
- 01:b9:5d:91:77:b0:23:03:0e:45:00:84:52:33:2b:
- 11:51:99:e8:0d:5b:45:ef:d2:e2:c9:0e:a2:ae:43:
- c2:92:5c:b0:36:76:06:21:91:d0:42:e8:0f:6f:80:
- 61:98:12:a6:c0:c3:b7:64:7e:77:0c:76:12:1f:50:
- 73:f8:bb:28:1a:5d:7b:68:36:01:fa:09:e7:9a:90:
- b6:c5:3d:e9:16:a0:7b:c2:76:19:f0:e9:bc:15:0d:
- 55:df:ea:67:2a:b2:e0:69:f8:c1:49:c4:a6:51:e9:
- 43:d2:df:2a:de:e3:a0:66:3f:0c:18:b8:f8:8d:bb:
- 43:15
+ 00:e6:65:53:d1:2e:4e:ad:28:ff:05:13:1b:64:08:
+ aa:e6:b7:44:64:94:4c:0e:a4:68:80:12:7d:07:ce:
+ 6a:ec:c8:4b:cc:a1:3f:af:f4:c8:45:0e:b2:66:46:
+ b3:fd:ef:68:5d:04:c0:95:e9:71:45:b2:26:12:16:
+ 78:b1:75:15:39:a1:da:2a:b0:d7:7c:52:11:8b:1a:
+ b0:46:19:fb:71:d0:8f:13:3d:2e:ee:bc:75:97:4d:
+ b1:b6:7b:d5:b6:36:44:5b:75:d1:00:b3:a3:60:9f:
+ 92:34:c1:50:52:30:89:54:35:24:fa:7d:ea:5a:32:
+ ca:11:aa:12:1c:55:74:fd:5b:98:ad:0d:04:d3:b3:
+ 12:cd:a4:f9:7c:54:e1:1f:01:cd:ad:c6:0e:cc:ae:
+ 8c:89:d3:ff:a6:f7:2b:9f:67:d8:55:c2:a9:4a:5f:
+ e8:d6:96:0d:14:68:79:23:84:d0:5f:59:99:f6:8e:
+ 9c:34:da:b6:d2:37:cc:de:8d:44:ba:e4:bb:f0:6f:
+ f1:60:d2:0d:22:28:41:98:e8:9a:dd:18:b5:30:45:
+ fd:3b:7a:27:0f:16:08:07:02:83:aa:e0:68:ba:47:
+ 44:48:84:ea:da:51:c1:ec:7b:cb:1e:25:11:3d:fd:
+ ce:53:1a:39:0a:fc:42:82:3d:cc:a5:93:00:c6:27:
+ 62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 09:87:C1:14:11:81:04:D8:AF:CF:66:4A:4F:8D:1C:A5:BB:04:CF:DA
+ 58:20:BB:27:E1:6D:B0:95:1A:D3:40:A1:81:79:89:63:34:21:9F:13
X509v3 Authority Key Identifier:
- keyid:A4:9D:E4:F8:B0:AF:D5:A4:2F:B9:3F:42:B8:C3:D5:60:9D:64:C2:8C
+ keyid:7A:3D:6D:AF:22:3F:64:CA:5C:C8:B3:3D:D5:E5:3B:32:A0:02:CF:29
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -235,41 +235,41 @@
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha256WithRSAEncryption
- 7d:97:b6:93:81:ef:63:d9:d6:31:8d:ba:e0:61:36:7c:06:cd:
- b5:2f:3f:4a:04:84:c2:c4:51:07:49:55:53:4f:22:b6:2f:15:
- d9:62:8a:65:97:15:84:a1:e2:2e:4e:66:59:02:b2:8f:b6:d6:
- 84:d6:ed:d4:df:45:a3:75:93:58:88:76:8d:6c:01:81:cc:c5:
- 91:99:cc:9c:65:f9:c9:f0:86:ed:3a:fe:d0:a0:2e:6c:04:d2:
- 49:f8:d4:31:9f:ce:db:93:bb:5a:73:4d:5d:24:83:4b:55:fe:
- 49:79:67:64:83:18:56:d9:ad:90:96:0b:ab:49:de:08:80:7a:
- 93:54:b1:38:19:c2:0b:6f:e1:b1:50:52:19:67:15:a9:aa:5a:
- c5:ed:73:30:63:1a:64:24:d4:8b:95:c9:c4:54:78:62:ce:42:
- f7:98:f1:94:2e:4d:93:7e:df:6f:cd:6f:41:c4:ef:c8:ed:f7:
- 73:92:af:ee:19:b5:e5:47:82:f7:47:41:35:29:8c:88:3b:62:
- 18:c0:f6:80:56:3f:f8:9e:b4:6e:33:2c:ce:41:da:56:83:c7:
- c7:30:c6:0f:f5:49:f5:79:d6:7b:c5:33:4c:0f:2a:e9:13:27:
- 0b:e3:b8:63:74:14:c0:2e:19:24:00:a4:f8:17:d7:cd:b5:1b:
- c1:38:25:9a
+ 37:db:eb:ca:f7:4c:e8:8d:30:46:40:83:77:7b:84:85:66:06:
+ 20:10:22:e9:f3:f0:5e:41:27:7d:dd:01:2a:c0:20:74:a6:f5:
+ d3:30:01:40:4a:4c:60:b0:9d:da:2f:71:90:c5:19:97:cc:af:
+ a2:e3:cc:fe:6e:e6:fa:5d:11:50:e6:ef:a9:b0:15:f8:da:26:
+ 51:b9:2e:1e:82:44:ec:13:e5:8d:27:2d:b1:31:97:cd:43:04:
+ 8a:70:ca:51:e3:2c:9e:93:9a:48:36:a1:46:56:08:e1:43:1c:
+ d7:96:aa:44:c2:3a:a2:e7:91:ac:91:28:fb:03:9c:e7:13:d1:
+ eb:c0:33:7b:3b:ff:c2:fc:af:68:36:54:57:f4:b8:2a:9d:de:
+ 78:3c:8e:ad:0d:d8:dd:4b:e7:50:41:0a:ae:7a:08:d7:5e:3b:
+ 2a:71:d5:88:ec:99:02:b3:cd:5a:31:26:41:79:e2:3a:49:55:
+ 40:7f:26:7f:34:f6:7a:76:28:5e:3d:e9:20:1e:a2:f4:6b:d5:
+ e0:6d:bd:2e:30:1a:69:70:ae:03:d3:ce:b3:76:04:2f:ef:86:
+ 4f:77:44:19:6f:94:6a:09:86:60:28:75:63:22:3a:13:5a:d5:
+ 13:af:23:08:9c:1f:0d:dc:0f:62:b4:97:85:05:5a:ea:c5:60:
+ 8a:02:4d:51
-----BEGIN CERTIFICATE-----
MIIDcTCCAlmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQGA1UEAwwNSW50
-ZXJtZWRpYXJ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKvpoChn
-OBNyEqA78vkTwivBogfmRTXP/xpGsNJYEmP8PbOFUGicVyH/Mf8kSNsT3rH0+Dl6
-8zTdUVgaEnOdheDQ+L79neI0zjbgoEhTNiO/UtKs2tHvbNqfETts4Wdq8d+XLBoS
-x8NyD5ghakAr8Ci4wu9/y+566Y8X/gqh/9UVTGNbU1UVAbldkXewIwMORQCEUjMr
-EVGZ6A1bRe/S4skOoq5DwpJcsDZ2BiGR0ELoD2+AYZgSpsDDt2R+dwx2Eh9Qc/i7
-KBpde2g2AfoJ55qQtsU96Rage8J2GfDpvBUNVd/qZyqy4Gn4wUnEplHpQ9LfKt7j
-oGY/DBi4+I27QxUCAwEAAaOBzjCByzAdBgNVHQ4EFgQUCYfBFBGBBNivz2ZKT40c
-pbsEz9owHwYDVR0jBBgwFoAUpJ3k+LCv1aQvuT9CuMPVYJ1kwowwNwYIKwYBBQUH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-A4IBAQB9l7aTge9j2dYxjbrgYTZ8Bs21Lz9KBITCxFEHSVVTTyK2LxXZYopllxWE
-oeIuTmZZArKPttaE1u3U30WjdZNYiHaNbAGBzMWRmcycZfnJ8IbtOv7QoC5sBNJJ
-+NQxn87bk7tac01dJINLVf5JeWdkgxhW2a2QlgurSd4IgHqTVLE4GcILb+GxUFIZ
-ZxWpqlrF7XMwYxpkJNSLlcnEVHhizkL3mPGULk2Tft9vzW9BxO/I7fdzkq/uGbXl
-R4L3R0E1KYyIO2IYwPaAVj/4nrRuMyzOQdpWg8fHMMYP9Un1edZ7xTNMDyrpEycL
-47hjdBTALhkkAKT4F9fNtRvBOCWa
+A4IBAQA32+vK90zojTBGQIN3e4SFZgYgECLp8/BeQSd93QEqwCB0pvXTMAFASkxg
+sJ3aL3GQxRmXzK+i48z+bub6XRFQ5u+psBX42iZRuS4egkTsE+WNJy2xMZfNQwSK
+cMpR4yyek5pINqFGVgjhQxzXlqpEwjqi55GskSj7A5znE9HrwDN7O//C/K9oNlRX
+9Lgqnd54PI6tDdjdS+dQQQquegjXXjsqcdWI7JkCs81aMSZBeeI6SVVAfyZ/NPZ6
+dihePekgHqL0a9Xgbb0uMBppcK4D086zdgQv74ZPd0QZb5RqCYZgKHVjIjoTWtUT
+ryMInB8N3A9itJeFBVrqxWCKAk1R
-----END CERTIFICATE-----
Certificate:
@@ -286,30 +286,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9e:1f:9a:ec:aa:50:56:02:47:76:c8:ff:b9:91:
- c0:58:8d:08:b9:87:d9:ac:9e:7c:6e:2e:b7:60:68:
- d6:ab:1c:3d:f3:e2:a8:e6:05:58:ff:52:27:7c:f9:
- 7e:96:2d:19:71:35:84:eb:8d:3c:db:27:f7:5f:2f:
- d1:56:af:73:a8:26:84:f5:bb:7f:7a:7c:40:81:66:
- e9:e5:c1:53:eb:ac:d5:65:47:3d:a1:0a:67:c6:c8:
- 3b:cb:2f:a9:1e:9c:d5:30:6b:7b:50:cb:ad:46:6b:
- 33:44:91:14:94:20:ad:e2:79:1b:62:bb:1d:7e:a7:
- 2a:45:03:4b:d4:64:1b:15:82:c6:dc:cb:48:84:c5:
- 77:22:2a:20:6d:d8:bd:25:8d:55:11:95:46:73:97:
- fa:53:66:2e:ec:1a:73:66:09:f7:ef:e4:f8:df:ea:
- ce:90:c8:f8:38:67:bb:3c:c2:48:e7:69:01:98:6b:
- c1:3e:8f:17:05:0f:c0:d0:eb:49:f1:c7:ab:c6:07:
- 49:85:a7:57:ac:11:42:e5:de:bf:a1:65:4b:e6:ba:
- e8:44:64:2d:84:d8:a4:4a:ba:62:56:76:49:bf:67:
- 19:91:e1:29:e9:fb:aa:de:ef:df:58:01:08:65:14:
- 8e:71:b5:3b:43:fb:6c:65:9a:d6:6e:42:65:24:2d:
- f4:99
+ 00:cd:87:9d:f4:66:f8:77:5c:e3:56:6d:cb:12:dc:
+ a9:36:79:d5:1b:11:9f:92:20:8d:e6:d7:7d:41:8e:
+ 90:90:2a:a8:63:3d:59:25:a6:7a:86:73:7f:10:da:
+ 9f:c1:a5:69:4d:a3:67:61:b8:f8:9b:9b:ec:4a:3a:
+ f1:73:f1:83:c4:ab:34:1f:0b:ed:05:f3:6d:c5:ee:
+ 64:18:34:69:5f:09:1f:48:e5:d2:2d:12:4c:17:a3:
+ 7e:74:9f:93:04:ea:00:15:e3:b9:0d:ef:c5:ed:19:
+ 97:2b:12:05:7f:5c:32:2d:c5:30:46:7c:a7:02:27:
+ 29:b2:99:e1:43:95:f6:67:1c:ee:ad:9b:8e:fb:f8:
+ 57:1a:47:13:5a:1a:2f:27:e8:d5:03:2a:e5:f9:92:
+ 53:1d:03:5f:d6:2f:18:65:ce:3a:6e:ab:bf:b6:c5:
+ 72:e1:c9:a0:d6:3c:a2:8e:4f:3e:8f:06:52:19:a8:
+ 1a:f0:06:55:d2:f9:be:23:27:0a:de:33:26:ec:a0:
+ 41:d3:6b:56:25:70:09:ac:28:45:82:33:cb:db:85:
+ 59:50:61:9c:12:e0:04:cc:c5:81:3c:77:d7:9d:8e:
+ 59:d3:70:4d:4e:47:0a:f7:ef:6c:33:54:db:61:ee:
+ 31:cb:8d:43:59:ec:a1:3d:a4:c6:06:6e:05:b2:14:
+ d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- A4:9D:E4:F8:B0:AF:D5:A4:2F:B9:3F:42:B8:C3:D5:60:9D:64:C2:8C
+ 7A:3D:6D:AF:22:3F:64:CA:5C:C8:B3:3D:D5:E5:3B:32:A0:02:CF:29
X509v3 Authority Key Identifier:
- keyid:A4:9D:E4:F8:B0:AF:D5:A4:2F:B9:3F:42:B8:C3:D5:60:9D:64:C2:8C
+ keyid:7A:3D:6D:AF:22:3F:64:CA:5C:C8:B3:3D:D5:E5:3B:32:A0:02:CF:29
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -324,41 +324,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 39:75:b8:af:a2:4e:d6:2f:15:08:4e:6d:06:1f:e7:65:29:96:
- c2:77:96:ed:1b:b2:48:e3:f9:cf:fd:8c:40:d1:67:37:1a:7c:
- e8:40:f0:ca:ee:72:9e:ef:6d:eb:e7:e9:5c:c4:61:e5:65:0e:
- 25:62:8e:ca:b1:5d:08:d2:21:6d:cb:0f:d6:f3:41:4a:66:56:
- 5b:06:3a:a7:6e:df:ad:6c:4d:18:01:95:b4:c9:7e:f4:80:e7:
- 75:17:e0:41:25:7e:03:1b:5b:bd:a0:2d:1c:f8:f5:18:e6:0b:
- 4c:69:7e:aa:54:78:f3:b4:84:b8:eb:8c:37:e9:60:dd:df:b8:
- f8:43:57:37:99:db:b1:ed:99:2e:1f:f2:af:94:33:97:86:83:
- 58:6d:e6:37:56:36:f8:68:e6:32:70:3f:5b:9b:13:75:a5:fc:
- c0:5a:e5:61:61:37:d2:b6:d8:d5:5c:55:21:d5:8e:3a:ed:bf:
- 83:81:76:e7:71:2b:3f:5b:0f:77:43:20:3a:d2:f6:ef:53:c8:
- 29:19:2c:0a:4d:a6:2e:fb:9b:3b:10:73:e1:dc:ac:0e:8d:e4:
- bd:36:da:e9:1e:0a:e6:57:b4:1d:ea:d8:cd:a0:dd:e3:88:8d:
- a5:b4:43:7f:fd:b1:3c:29:e5:6a:b4:c9:4e:e6:77:83:ae:c6:
- f7:04:47:a2
+ 20:3e:c4:b6:78:84:bd:36:33:6b:38:8e:f2:1f:1a:46:a7:d9:
+ 02:86:39:d2:3f:14:bd:a9:82:21:b0:9d:da:a9:4f:0a:e8:65:
+ 0b:7f:b7:cd:d9:3c:de:7f:08:d6:d9:60:ba:b2:be:4d:8a:77:
+ e4:4d:fe:8c:5d:27:e6:8a:0c:6c:e1:3c:7b:e2:d2:4c:ac:34:
+ fe:1e:b1:28:e6:b7:49:a8:09:bf:67:80:0f:8f:02:49:d4:52:
+ 6e:bf:d1:a7:b8:b4:22:90:f8:83:d5:85:7f:46:99:2d:df:cb:
+ 56:31:0c:0e:92:9b:eb:28:6e:c2:7c:ba:37:5d:3f:f0:f8:b5:
+ e2:0a:02:ea:78:c3:5c:8d:24:92:95:52:bf:68:3e:2b:fc:17:
+ bc:bb:3c:7c:38:f8:6e:5f:d3:1d:9e:4c:c5:3a:47:93:4d:a6:
+ c2:00:f2:2a:7a:a1:f0:76:48:5a:ef:77:1c:47:10:40:d8:d5:
+ 84:45:13:f6:5e:7c:d2:0e:bd:e3:e3:b1:3d:d5:93:e1:c4:95:
+ a1:ba:84:0d:a0:1c:b0:cd:b6:b4:a2:52:2e:37:c2:f3:30:3e:
+ 91:0b:24:9d:3d:77:02:ce:83:b0:73:21:ba:3f:f6:b9:c7:5d:
+ 08:5c:f0:33:8d:de:1e:56:e8:82:2f:5d:e6:8c:0c:ac:77:c7:
+ bf:91:2a:25
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4fmuyqUFYCR3bI/7mR
-wFiNCLmH2ayefG4ut2Bo1qscPfPiqOYFWP9SJ3z5fpYtGXE1hOuNPNsn918v0Vav
-c6gmhPW7f3p8QIFm6eXBU+us1WVHPaEKZ8bIO8svqR6c1TBre1DLrUZrM0SRFJQg
-reJ5G2K7HX6nKkUDS9RkGxWCxtzLSITFdyIqIG3YvSWNVRGVRnOX+lNmLuwac2YJ
-9+/k+N/qzpDI+DhnuzzCSOdpAZhrwT6PFwUPwNDrSfHHq8YHSYWnV6wRQuXev6Fl
-S+a66ERkLYTYpEq6YlZ2Sb9nGZHhKen7qt7v31gBCGUUjnG1O0P7bGWa1m5CZSQt
-9JkCAwEAAaOByzCByDAdBgNVHQ4EFgQUpJ3k+LCv1aQvuT9CuMPVYJ1kwowwHwYD
-VR0jBBgwFoAUpJ3k+LCv1aQvuT9CuMPVYJ1kwowwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA5dbivok7W
-LxUITm0GH+dlKZbCd5btG7JI4/nP/YxA0Wc3GnzoQPDK7nKe723r5+lcxGHlZQ4l
-Yo7KsV0I0iFtyw/W80FKZlZbBjqnbt+tbE0YAZW0yX70gOd1F+BBJX4DG1u9oC0c
-+PUY5gtMaX6qVHjztIS464w36WDd37j4Q1c3mdux7ZkuH/KvlDOXhoNYbeY3Vjb4
-aOYycD9bmxN1pfzAWuVhYTfSttjVXFUh1Y467b+DgXbncSs/Ww93QyA60vbvU8gp
-GSwKTaYu+5s7EHPh3KwOjeS9NtrpHgrmV7Qd6tjNoN3jiI2ltEN//bE8KeVqtMlO
-5neDrsb3BEei
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAgPsS2eIS9
+NjNrOI7yHxpGp9kChjnSPxS9qYIhsJ3aqU8K6GULf7fN2TzefwjW2WC6sr5Ninfk
+Tf6MXSfmigxs4Tx74tJMrDT+HrEo5rdJqAm/Z4APjwJJ1FJuv9GnuLQikPiD1YV/
+Rpkt38tWMQwOkpvrKG7CfLo3XT/w+LXiCgLqeMNcjSSSlVK/aD4r/Be8uzx8OPhu
+X9MdnkzFOkeTTabCAPIqeqHwdkha73ccRxBA2NWERRP2XnzSDr3j47E91ZPhxJWh
+uoQNoBywzba0olIuN8LzMD6RCySdPXcCzoOwcyG6P/a5x10IXPAzjd4eVuiCL13m
+jAysd8e/kSol
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem b/net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem
index c639e56..62ef958 100644
--- a/net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem
+++ b/net/data/verify_certificate_chain_unittest/violates-pathlen-1-root.pem
@@ -1,6 +1,6 @@
[Created by: generate-violates-pathlen-1-root.py]
-Certificate chain with 2 intermediaries and one end entity certificate. The
+Certificate chain with 2 intermediates and one end entity certificate. The
root certificate has a pathlen:1 restriction so this is an invalid chain.
Certificate:
@@ -8,7 +8,7 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary2
+ Issuer: CN=Intermediate2
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
@@ -17,80 +17,80 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:bf:b8:e9:8b:9f:2a:8d:58:f0:93:6a:7a:d2:d4:
- 29:ec:ce:35:c9:5e:c0:f7:27:2a:78:a3:76:53:25:
- 54:09:43:e0:30:df:a1:f3:e2:a2:45:21:d7:b0:e6:
- ff:d0:cc:81:eb:2b:78:9a:b6:85:97:87:d5:b2:9f:
- 3b:f2:d7:55:3d:fe:0f:ba:20:39:a6:0d:c8:7c:ea:
- 23:8a:63:38:8e:70:44:ff:d2:18:66:3e:ad:10:68:
- ee:ec:21:f7:18:e4:7f:37:09:c6:e6:a8:d1:a2:4c:
- 1f:e5:7a:69:04:13:df:09:5e:13:61:7c:15:09:9c:
- 55:af:27:66:87:0e:bd:fc:2a:9d:7f:1c:73:b5:84:
- c2:d6:2b:d9:5d:f6:19:52:58:bb:8c:8c:5f:a7:9c:
- de:d7:8d:5f:ef:8f:f3:24:e1:0d:10:59:58:c6:72:
- 8c:d7:fc:fe:bc:22:a7:58:4d:83:f2:48:4b:cd:55:
- 36:45:28:e4:cf:93:75:78:0f:5e:35:c0:b7:52:e5:
- e2:91:42:04:bb:9c:0c:cf:eb:89:66:5f:90:46:b2:
- 76:b0:82:c4:af:34:fd:a6:fd:93:7f:54:ce:4f:be:
- a4:32:8e:9c:3f:40:c9:6c:db:be:85:0c:e6:df:2b:
- 7c:9b:ef:8b:7a:4b:15:dc:09:10:3b:b1:b7:e7:c7:
- c1:21
+ 00:cb:62:aa:87:80:66:83:c5:88:0f:18:6f:ba:e4:
+ 3d:6e:3a:0e:02:40:9a:90:1c:2c:ef:63:5c:28:3a:
+ 27:79:e7:53:c0:d8:0e:e9:95:ec:ee:19:45:6a:39:
+ 1f:09:80:db:eb:0c:fc:ec:ff:e1:3d:42:8a:ab:ba:
+ 6e:43:bf:bc:50:6b:15:da:0d:af:84:f1:7e:8d:b1:
+ c6:b6:ee:50:2a:73:3f:38:de:46:49:c1:eb:52:4a:
+ 03:54:0b:67:d7:3b:1d:3d:ae:b5:0d:e1:2b:b5:a1:
+ 9d:ea:56:aa:13:8b:80:2d:fb:ea:7f:83:15:d5:df:
+ 09:a7:d5:ab:a8:5f:50:02:e1:82:7d:73:c3:6a:c6:
+ d9:bc:47:21:cd:d7:00:a2:06:7c:a7:2f:3e:e6:dd:
+ 35:b0:fe:35:8d:7f:1e:68:ff:15:ee:d0:3f:69:05:
+ b5:2f:bb:27:bc:3a:9d:29:31:3d:af:29:a6:d6:a7:
+ 45:0b:b9:f0:4f:a6:b3:13:f7:97:f5:6a:0f:1e:d1:
+ d8:9c:05:78:2e:b5:b9:de:ab:f4:26:90:93:49:f3:
+ b1:18:fe:3e:03:74:39:92:dd:7e:17:6d:31:c8:e7:
+ 3f:a0:d7:13:dc:fe:76:ec:1a:c1:7f:4e:ad:0f:cc:
+ b3:d4:27:9b:2f:a5:e9:d9:81:ad:f6:ab:da:7f:d4:
+ 71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 11:74:6B:48:F5:42:3C:04:F3:A2:04:42:E5:F2:BC:1C:AD:AB:CB:E2
+ CA:5D:98:89:E9:73:51:6B:E4:E7:3E:9B:EF:A8:A0:0A:BC:48:07:92
X509v3 Authority Key Identifier:
- keyid:9A:80:A6:AF:E0:4A:48:D1:70:0A:10:7A:0D:74:57:B8:CE:48:5B:7D
+ keyid:FD:E5:DE:B3:E1:33:73:97:CA:6B:94:1B:A6:4C:98:A0:8A:75:8F:F7
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary2.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate2.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary2.crl
+ URI:http://url-for-crl/Intermediate2.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
- 6e:0e:da:63:ae:72:b5:ee:9b:ee:f6:34:18:30:e5:4c:9b:b7:
- a8:21:ef:fe:fe:55:c9:27:4d:13:ab:32:be:89:76:93:b8:2a:
- be:c2:3f:6d:f6:23:6d:ed:b2:4f:77:7e:b7:7c:f4:5a:a3:de:
- 80:09:f6:c0:3b:87:34:2d:97:5c:1a:a0:0d:e4:9f:28:93:d4:
- d6:38:ca:ea:c8:4e:ec:71:07:b8:c7:cb:c0:59:77:e5:99:80:
- 34:7b:9f:77:8f:63:b0:d0:3d:ce:a9:c4:aa:ba:49:02:5e:31:
- 84:a3:7f:8e:51:5c:06:a4:44:49:04:c4:27:7e:04:f7:13:18:
- 61:67:d1:4d:23:b0:16:f2:47:79:bd:e5:40:52:77:06:73:8b:
- 4b:c6:c4:5c:09:46:29:a3:36:b5:3c:75:6d:94:71:13:db:ff:
- e8:62:e4:76:59:06:88:9d:c5:5b:d7:af:ae:16:72:80:60:6a:
- 23:01:4d:fa:90:33:ad:01:38:47:d6:5d:91:28:9f:78:6f:ba:
- da:62:5b:17:fa:9f:5a:6e:28:5f:59:96:de:64:a8:3b:b7:de:
- fe:f7:b5:3c:79:e9:fe:15:b2:73:0f:65:5f:83:2e:6b:85:55:
- 04:42:da:87:48:6b:7d:1c:a2:b0:e2:60:7f:c9:22:70:d1:a4:
- 51:94:40:3c
+ 6c:a3:b3:78:4e:dc:a2:d9:f4:d4:37:13:e2:1d:63:41:8c:db:
+ 37:8a:b5:9c:6f:03:20:b8:56:3f:45:c9:53:e2:d7:07:12:e3:
+ 4f:70:21:11:af:68:91:67:2c:12:b0:c3:8a:c6:52:24:55:ab:
+ 4c:37:f3:cc:9c:4f:51:d6:0e:a4:be:c0:a6:4e:7a:8b:a3:db:
+ ae:3e:d8:36:71:19:f4:34:1e:d8:52:4f:75:fb:47:0e:df:fe:
+ 67:93:04:5b:88:84:7c:a4:21:aa:2c:3e:84:94:fa:96:5a:93:
+ 90:32:4f:5a:64:aa:e5:be:b1:38:24:20:a3:8e:f0:5c:96:d0:
+ da:b3:12:82:00:fb:88:24:51:c5:65:6c:90:64:7f:80:38:32:
+ 74:bf:6f:a5:5e:88:96:ff:6f:5d:22:44:bc:85:27:b5:06:8e:
+ db:7b:ab:b1:e0:96:f2:1c:f7:21:36:97:c7:0f:7d:99:b9:ca:
+ 22:74:5b:b2:70:c7:8a:4e:ae:b8:03:14:f0:ea:ad:4a:4b:97:
+ d4:b1:33:91:c6:1b:4d:2a:85:03:c9:f2:60:22:47:d8:74:bd:
+ 97:83:ec:d4:cd:20:48:f6:b2:5e:5a:a8:ed:99:cf:58:d4:02:
+ 2a:23:3e:9b:b3:21:c1:82:b6:4e:31:01:73:e0:a5:06:e0:b5:
+ 4d:18:35:9e
-----BEGIN CERTIFICATE-----
MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl
-cm1lZGlhcnkyMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowETEPMA0G
-A1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jp
-i58qjVjwk2p60tQp7M41yV7A9ycqeKN2UyVUCUPgMN+h8+KiRSHXsOb/0MyB6yt4
-mraFl4fVsp878tdVPf4PuiA5pg3IfOojimM4jnBE/9IYZj6tEGju7CH3GOR/NwnG
-5qjRokwf5XppBBPfCV4TYXwVCZxVrydmhw69/CqdfxxztYTC1ivZXfYZUli7jIxf
-p5ze141f74/zJOENEFlYxnKM1/z+vCKnWE2D8khLzVU2RSjkz5N1eA9eNcC3UuXi
-kUIEu5wMz+uJZl+QRrJ2sILErzT9pv2Tf1TOT76kMo6cP0DJbNu+hQzm3yt8m++L
-eksV3AkQO7G358fBIQIDAQABo4HrMIHoMB0GA1UdDgQWBBQRdGtI9UI8BPOiBELl
-8rwcravL4jAfBgNVHSMEGDAWgBSagKav4EpI0XAKEHoNdFe4zkhbfTBABggrBgEF
+cm1lZGlhdGUyMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowETEPMA0G
+A1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Kq
+h4Bmg8WIDxhvuuQ9bjoOAkCakBws72NcKDoneedTwNgO6ZXs7hlFajkfCYDb6wz8
+7P/hPUKKq7puQ7+8UGsV2g2vhPF+jbHGtu5QKnM/ON5GScHrUkoDVAtn1zsdPa61
+DeErtaGd6laqE4uALfvqf4MV1d8Jp9WrqF9QAuGCfXPDasbZvEchzdcAogZ8py8+
+5t01sP41jX8eaP8V7tA/aQW1L7snvDqdKTE9rymm1qdFC7nwT6azE/eX9WoPHtHY
+nAV4LrW53qv0JpCTSfOxGP4+A3Q5kt1+F20xyOc/oNcT3P527BrBf06tD8yz1Ceb
+L6Xp2YGt9qvaf9RxaQIDAQABo4HrMIHoMB0GA1UdDgQWBBTKXZiJ6XNRa+TnPpvv
+qKAKvEgHkjAfBgNVHSMEGDAWgBT95d6z4TNzl8prlBumTJiginWP9zBABggrBgEF
BQcBAQQ0MDIwMAYIKwYBBQUHMAKGJGh0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1l
-ZGlhcnkyLmNlcjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vdXJsLWZvci1jcmwv
-SW50ZXJtZWRpYXJ5Mi5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
-AQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAbg7aY65yte6b7vY0
-GDDlTJu3qCHv/v5VySdNE6syvol2k7gqvsI/bfYjbe2yT3d+t3z0WqPegAn2wDuH
-NC2XXBqgDeSfKJPU1jjK6shO7HEHuMfLwFl35ZmANHufd49jsNA9zqnEqrpJAl4x
-hKN/jlFcBqRESQTEJ34E9xMYYWfRTSOwFvJHeb3lQFJ3BnOLS8bEXAlGKaM2tTx1
-bZRxE9v/6GLkdlkGiJ3FW9evrhZygGBqIwFN+pAzrQE4R9ZdkSifeG+62mJbF/qf
-Wm4oX1mW3mSoO7fe/ve1PHnp/hWycw9lX4Mua4VVBELah0hrfRyisOJgf8kicNGk
-UZRAPA==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-----END CERTIFICATE-----
Certificate:
@@ -98,88 +98,88 @@
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediary1
+ Issuer: CN=Intermediate1
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary2
+ Subject: CN=Intermediate2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:9b:e8:f6:41:79:62:c9:06:fd:13:2c:f5:cc:07:
- a9:dd:5c:1e:90:76:a5:71:fa:f3:5c:34:1f:c9:3a:
- 33:77:05:a0:27:7b:6a:eb:8b:d8:de:25:65:6f:b6:
- d6:e1:82:34:0a:7b:13:d3:85:37:7d:d9:70:04:43:
- b3:e3:46:8b:60:e1:99:ba:28:5b:ef:c2:7e:b3:c4:
- 20:6f:94:f2:47:79:66:ce:0f:5d:79:58:aa:f7:62:
- 80:38:14:4a:17:34:59:86:39:1d:ed:38:b8:14:f4:
- 10:0c:1f:2c:8e:49:e5:5d:fd:d2:0f:37:5c:b8:e5:
- a9:86:07:0e:5e:27:ee:05:a0:ad:b5:b6:86:43:30:
- 8b:0d:35:b5:86:cd:98:98:e8:d6:04:53:4e:2b:81:
- be:d2:96:6f:cf:2f:72:2d:f5:6c:c8:ba:f5:42:7a:
- f1:67:33:03:bb:cf:6d:67:03:f3:1a:3c:39:d9:cf:
- 8f:ad:03:ca:2c:dc:e3:33:92:24:18:46:86:8e:dc:
- 27:b8:76:57:3a:7d:a2:89:96:18:07:96:04:d9:75:
- 8c:e6:1b:cf:1f:e9:6c:5d:8d:77:2f:4d:9d:00:bb:
- 16:e9:c5:da:7d:5f:45:e8:3d:17:d8:72:a6:bf:68:
- 1f:0a:a5:88:c1:74:45:53:b9:0c:d5:05:a5:ba:ed:
- 55:73
+ 00:cf:d2:9b:08:f9:4a:42:eb:7d:64:c4:af:15:8e:
+ 1a:df:56:db:70:cd:5f:55:81:80:8b:cc:6e:2e:8a:
+ ed:cc:3e:cf:73:08:a8:6a:f6:d5:ab:71:ac:8e:dc:
+ 3f:ab:85:9a:c6:2e:d5:83:98:24:71:1d:81:c5:28:
+ 05:4a:ed:25:b7:d1:a0:1a:1c:d4:36:65:aa:33:5c:
+ a1:71:de:de:4e:ff:78:ef:54:1e:2e:6f:55:d2:58:
+ fc:c4:ef:b7:1d:88:5a:b7:01:25:43:84:9a:f8:20:
+ af:70:11:76:ec:c9:57:8b:1c:19:eb:fa:25:a4:f6:
+ 96:cf:b9:4e:6d:ec:a5:f6:92:01:09:ee:ec:b9:84:
+ 51:58:1c:a8:67:6d:46:9b:87:09:5d:3e:35:d3:d7:
+ cd:2f:67:96:07:c7:4c:93:df:f9:7b:48:84:3b:4f:
+ 6b:0d:57:15:69:8b:eb:9c:00:df:6d:59:26:7b:34:
+ 4c:da:6b:62:5b:16:5b:b5:df:2e:b0:97:90:54:98:
+ 84:83:07:f0:78:c0:6c:21:8f:5e:96:d1:8c:e7:0b:
+ ad:c9:be:38:c4:a9:d5:dd:96:6e:fa:3d:e9:de:04:
+ e0:eb:7a:8f:e7:54:9c:e8:bd:cd:df:42:91:19:2c:
+ 73:b0:ef:f4:f6:49:fc:ae:9a:88:50:ac:72:a1:84:
+ 03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 9A:80:A6:AF:E0:4A:48:D1:70:0A:10:7A:0D:74:57:B8:CE:48:5B:7D
+ FD:E5:DE:B3:E1:33:73:97:CA:6B:94:1B:A6:4C:98:A0:8A:75:8F:F7
X509v3 Authority Key Identifier:
- keyid:1D:4A:1C:48:70:30:B6:65:73:56:A7:6E:A0:48:35:81:6E:3B:95:8A
+ keyid:6A:CF:A7:31:B7:5A:1E:F0:D3:D0:55:74:2A:18:ED:26:B6:46:99:A2
Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediary1.cer
+ CA Issuers - URI:http://url-for-aia/Intermediate1.cer
X509v3 CRL Distribution Points:
Full Name:
- URI:http://url-for-crl/Intermediary1.crl
+ URI:http://url-for-crl/Intermediate1.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 47:1c:62:1b:7e:69:aa:b6:d8:6c:50:44:09:e8:15:b5:fe:ee:
- 86:5c:69:6d:4c:7a:90:1f:2e:4f:e8:21:a3:44:38:d6:07:0b:
- 43:cf:dd:13:64:64:42:a9:ae:62:f6:1b:ea:03:2e:3b:4f:ed:
- 8a:45:8e:ec:09:d8:1a:67:eb:ef:c6:77:fc:cf:03:9f:b4:4a:
- 59:76:4e:2b:b0:d3:41:5a:a0:8c:bb:1c:61:67:52:7d:48:2e:
- 3f:c2:7d:a6:60:95:25:75:47:9c:1a:c3:1e:25:cd:e9:7d:2b:
- 71:26:fc:97:f1:2e:c6:2f:d4:2a:bb:27:d4:76:7e:c9:bc:05:
- 92:24:86:56:46:27:e0:14:af:d7:c6:72:d2:dc:be:93:2f:b3:
- 44:d3:e1:4a:08:75:47:50:16:e6:50:36:61:e3:6f:b7:a6:40:
- 1c:61:14:ae:66:20:93:0b:fb:6d:b1:a9:4d:d5:ec:8d:2b:d6:
- 84:36:c4:61:70:e5:99:4f:7e:af:97:d2:42:91:11:a7:1f:0e:
- 32:fc:09:37:44:a2:c9:bb:35:82:73:85:e5:90:b4:80:a7:4b:
- 40:ce:cb:62:ca:e1:2b:36:f6:e7:bc:3a:67:71:6d:ab:4b:87:
- cf:72:70:ad:ef:7a:85:ab:72:5d:c7:c1:ac:5e:b5:81:dc:ff:
- 96:6f:08:02
+ cb:42:61:28:aa:f4:9b:98:aa:7e:16:fc:c4:8e:58:6c:c4:3d:
+ 2e:47:9e:bf:ea:f6:61:db:95:30:77:23:c2:ea:21:67:d0:9c:
+ a5:4d:48:7b:ba:19:f9:9d:e2:f8:28:b0:f9:90:aa:f5:1e:53:
+ 02:e1:0c:b2:83:89:fe:63:ef:4e:3b:21:51:3d:cd:19:82:43:
+ c9:a1:fe:2b:ff:e7:ff:a5:19:ad:17:42:22:b8:15:01:80:17:
+ 1b:83:68:58:33:22:71:e5:03:20:f3:f2:11:b8:9b:93:be:11:
+ d0:6c:96:53:97:9e:d8:0e:f8:20:91:7d:61:a0:82:98:a2:67:
+ 06:3a:61:ee:d7:46:f1:02:77:75:28:50:cf:62:15:17:c9:9d:
+ 5b:ea:e4:1f:00:59:52:ad:66:07:46:34:df:13:3b:32:63:6a:
+ b5:a4:36:71:bd:e5:fa:85:40:98:3e:0b:1d:65:e6:b6:a0:c5:
+ b4:1b:3f:06:d4:8e:cf:4b:97:5b:7c:f2:f4:57:ba:89:a9:a9:
+ d4:b2:b3:7f:70:71:85:ca:8e:dd:3f:3b:5e:64:a7:a2:84:91:
+ 45:9e:14:4a:7e:02:1c:b0:45:4f:ee:90:8e:1a:d6:27:09:19:
+ 5d:f1:6c:8a:4b:2d:85:05:0a:83:af:1c:1a:0c:0e:b7:33:d2:
+ b7:c6:0a:f3
-----BEGIN CERTIFICATE-----
MIIDiTCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1JbnRl
-cm1lZGlhcnkxMB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQG
-A1UEAwwNSW50ZXJtZWRpYXJ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAJvo9kF5YskG/RMs9cwHqd1cHpB2pXH681w0H8k6M3cFoCd7auuL2N4lZW+2
-1uGCNAp7E9OFN33ZcARDs+NGi2DhmbooW+/CfrPEIG+U8kd5Zs4PXXlYqvdigDgU
-Shc0WYY5He04uBT0EAwfLI5J5V390g83XLjlqYYHDl4n7gWgrbW2hkMwiw01tYbN
-mJjo1gRTTiuBvtKWb88vci31bMi69UJ68WczA7vPbWcD8xo8OdnPj60Dyizc4zOS
-JBhGho7cJ7h2Vzp9oomWGAeWBNl1jOYbzx/pbF2Ndy9NnQC7FunF2n1fReg9F9hy
-pr9oHwqliMF0RVO5DNUFpbrtVXMCAwEAAaOB3TCB2jAdBgNVHQ4EFgQUmoCmr+BK
-SNFwChB6DXRXuM5IW30wHwYDVR0jBBgwFoAUHUocSHAwtmVzVqduoEg1gW47lYow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-SW50ZXJtZWRpYXJ5MS5jZXIwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL3VybC1m
-b3ItY3JsL0ludGVybWVkaWFyeTEuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB
-Af8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBHHGIbfmmqtthsUEQJ6BW1/u6G
-XGltTHqQHy5P6CGjRDjWBwtDz90TZGRCqa5i9hvqAy47T+2KRY7sCdgaZ+vvxnf8
-zwOftEpZdk4rsNNBWqCMuxxhZ1J9SC4/wn2mYJUldUecGsMeJc3pfStxJvyX8S7G
-L9QquyfUdn7JvAWSJIZWRifgFK/XxnLS3L6TL7NE0+FKCHVHUBbmUDZh42+3pkAc
-YRSuZiCTC/ttsalN1eyNK9aENsRhcOWZT36vl9JCkRGnHw4y/Ak3RKLJuzWCc4Xl
-kLSAp0tAzstiyuErNvbnvDpncW2rS4fPcnCt73qFq3Jdx8GsXrWB3P+WbwgC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-----END CERTIFICATE-----
Certificate:
@@ -191,35 +191,35 @@
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediary1
+ Subject: CN=Intermediate1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:b9:d1:e1:e9:55:23:09:13:95:52:d6:31:f6:16:
- 49:28:4d:e9:02:bd:42:73:3b:f6:9a:d4:05:86:6e:
- fd:c4:26:b1:59:d5:e1:be:64:f0:84:39:f0:d9:cf:
- 0a:62:98:68:c6:7b:a1:6c:73:4c:79:5e:92:88:ba:
- db:e2:16:f9:0a:5b:46:f7:ef:6b:77:4b:98:d9:40:
- ca:1b:2d:7b:fa:9a:92:11:fe:85:6c:ef:2e:39:6f:
- 2f:16:32:cc:45:c7:a7:bd:62:2a:d7:49:9d:c1:cc:
- 0d:a8:b1:91:e0:f7:b8:e5:77:f4:0a:ef:01:de:e1:
- 65:4c:e0:e6:29:3f:2d:3f:aa:0d:a4:38:69:90:5d:
- 83:b4:e9:b0:04:c4:f4:a4:b9:5f:c0:a8:88:68:13:
- 86:a1:9b:fe:24:d3:ef:cc:34:be:3d:bb:70:58:64:
- 74:54:7d:c8:6a:a3:d3:37:9e:91:5c:fe:16:15:5f:
- 00:45:2f:f9:81:3a:7f:ef:bb:03:60:b8:08:ce:9f:
- 88:20:62:ba:4d:8a:18:8a:57:1d:ea:12:1e:62:d7:
- eb:01:80:e6:a9:72:d2:2f:84:aa:16:20:e8:f8:47:
- e1:4e:43:46:16:20:51:cd:20:39:a3:47:70:0f:9f:
- 4e:e6:7b:fa:5d:c2:9e:67:ce:22:e1:e8:1c:89:bd:
- a0:49
+ 00:db:38:a4:dd:a1:12:62:44:8f:17:f5:d0:26:2d:
+ 52:d6:74:74:29:d1:7c:9d:97:a2:a2:18:10:ff:08:
+ 38:d8:b1:9b:ff:ff:91:f1:e0:36:31:37:e1:e7:32:
+ ca:40:12:7a:6a:4f:fa:44:91:40:1f:51:14:85:32:
+ 9f:16:e1:2d:35:65:5f:3b:a8:6d:a4:e9:eb:51:d0:
+ 1f:f7:9c:1e:22:82:48:2d:72:82:a3:59:82:f1:02:
+ 0f:73:ce:1e:92:0d:1c:23:31:a7:4a:80:f1:65:13:
+ a5:57:2b:ab:16:f4:87:ca:45:79:8e:46:68:4b:97:
+ 00:b2:98:61:c7:0d:21:47:58:dc:ff:85:4e:46:9e:
+ 7c:2a:90:a0:8c:22:a2:91:06:51:61:e1:75:7d:66:
+ a4:4f:7e:12:4b:8b:f1:aa:a5:aa:fb:73:d8:ca:a2:
+ 2b:c3:ba:3c:b4:03:4c:c8:9a:b6:8e:6d:9d:3f:45:
+ 2b:35:3c:f7:86:f6:83:1a:b8:0e:41:a8:7f:62:2d:
+ d7:95:f8:39:f8:7c:bf:e9:2d:3a:1d:7b:16:b4:55:
+ 46:d4:5c:bb:d1:19:24:97:c3:14:97:94:d4:43:b4:
+ 94:07:be:12:72:ba:de:60:7a:75:3b:da:df:81:cc:
+ 55:18:07:85:44:9c:95:da:30:e7:a1:01:e9:2a:85:
+ 64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 1D:4A:1C:48:70:30:B6:65:73:56:A7:6E:A0:48:35:81:6E:3B:95:8A
+ 6A:CF:A7:31:B7:5A:1E:F0:D3:D0:55:74:2A:18:ED:26:B6:46:99:A2
X509v3 Authority Key Identifier:
- keyid:88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F6
+ keyid:46:4A:98:70:E1:6E:F7:E1:51:0F:EE:4D:43:FA:ED:D8:F3:23:58:BF
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -234,41 +234,41 @@
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
- 7c:45:39:85:85:2e:2a:47:1a:05:7c:45:0b:9d:1c:94:58:c9:
- a6:ab:95:85:fb:64:da:a3:cf:96:98:80:8c:c4:fe:5d:10:db:
- 94:df:6c:eb:15:45:d3:e8:d1:80:39:0e:b9:28:4a:b8:0c:aa:
- 87:cc:4b:b2:14:4d:fe:2c:a6:36:5e:40:5c:10:49:e2:90:1d:
- 46:ad:d1:b5:25:85:35:3d:99:da:0b:da:ad:f0:9d:94:50:6e:
- b8:4c:1c:86:d6:68:cc:d9:7f:7e:b8:8d:0c:43:0c:e9:6a:05:
- 00:0e:7d:00:88:62:70:4f:f9:a1:68:48:9f:c4:c7:cd:78:63:
- c6:6c:ec:84:c3:09:65:64:14:27:f4:f9:df:a1:f4:bc:c1:43:
- 88:88:ba:98:ba:14:66:8a:47:42:49:dc:9a:35:84:e0:8b:17:
- 9e:5b:bd:8f:4f:b3:01:2e:61:3e:12:45:ab:63:38:77:b1:f2:
- 21:57:04:49:53:e4:23:4b:58:81:23:42:9a:a5:fe:1c:08:7b:
- d6:bf:7e:ec:9d:b1:15:b7:27:2a:f2:96:81:05:52:ad:97:92:
- 71:20:34:33:99:77:a3:e9:92:e1:68:73:ea:31:eb:54:cb:f9:
- 97:61:03:56:de:4c:35:c5:cd:d4:75:a7:e4:f2:5c:66:f5:5d:
- 34:ab:8f:f8
+ 97:fe:af:92:37:5a:ea:1f:72:3a:0a:87:37:b2:e1:67:bf:37:
+ 66:1c:34:85:aa:86:38:36:c2:5e:cf:bb:de:4c:05:06:d8:61:
+ 96:4e:e7:3a:28:65:fb:1d:ee:c2:ff:e4:93:17:3d:6c:fa:1b:
+ 04:d0:06:6d:fb:41:3c:81:ff:e5:39:14:d1:37:b1:ad:fa:2f:
+ c8:fa:ce:7f:7a:85:b1:11:22:7d:24:d4:b8:93:cb:41:75:b2:
+ 7c:09:cc:af:79:af:e5:a6:49:f6:42:d3:f0:38:47:b7:28:10:
+ 56:5e:ea:65:09:11:e7:4b:42:66:3f:e5:83:08:19:cf:da:69:
+ 6a:45:51:c9:d0:93:43:71:2d:94:d4:33:b3:77:2c:a9:9e:76:
+ b8:49:70:17:ae:80:2e:3b:d0:91:63:28:9e:86:11:88:8e:0b:
+ c3:10:04:13:87:b0:5e:29:67:e8:03:ba:3d:40:04:3d:df:a5:
+ 68:34:1d:3f:7e:c8:ff:38:00:4d:da:a1:2f:e6:76:54:26:d7:
+ 42:11:fa:b0:be:8d:a1:67:95:ec:04:ff:21:db:99:ad:90:50:
+ cf:38:54:8a:4f:68:ca:e5:aa:00:9d:79:4a:57:ed:58:b0:b1:
+ bc:0b:31:c2:c6:6b:c5:5b:e0:5f:3e:b3:8c:56:8a:04:9a:45:
+ 23:3a:e2:dd
-----BEGIN CERTIFICATE-----
MIIDbjCCAlagAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowGDEWMBQGA1UEAwwNSW50
-ZXJtZWRpYXJ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnR4elV
-IwkTlVLWMfYWSShN6QK9QnM79prUBYZu/cQmsVnV4b5k8IQ58NnPCmKYaMZ7oWxz
-THlekoi62+IW+QpbRvfva3dLmNlAyhste/qakhH+hWzvLjlvLxYyzEXHp71iKtdJ
-ncHMDaixkeD3uOV39ArvAd7hZUzg5ik/LT+qDaQ4aZBdg7TpsATE9KS5X8CoiGgT
-hqGb/iTT78w0vj27cFhkdFR9yGqj0zeekVz+FhVfAEUv+YE6f++7A2C4CM6fiCBi
-uk2KGIpXHeoSHmLX6wGA5qly0i+EqhYg6PhH4U5DRhYgUc0gOaNHcA+fTuZ7+l3C
-nmfOIuHoHIm9oEkCAwEAAaOByzCByDAdBgNVHQ4EFgQUHUocSHAwtmVzVqduoEg1
-gW47lYowHwYDVR0jBBgwFoAUiBzW5g2Pg96dnC4+HuVhguotEfYwNwYIKwYBBQUH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-AQB8RTmFhS4qRxoFfEULnRyUWMmmq5WF+2Tao8+WmICMxP5dENuU32zrFUXT6NGA
-OQ65KEq4DKqHzEuyFE3+LKY2XkBcEEnikB1GrdG1JYU1PZnaC9qt8J2UUG64TByG
-1mjM2X9+uI0MQwzpagUADn0AiGJwT/mhaEifxMfNeGPGbOyEwwllZBQn9PnfofS8
-wUOIiLqYuhRmikdCSdyaNYTgixeeW72PT7MBLmE+EkWrYzh3sfIhVwRJU+QjS1iB
-I0Kapf4cCHvWv37snbEVtycq8paBBVKtl5JxIDQzmXej6ZLhaHPqMetUy/mXYQNW
-3kw1xc3Udafk8lxm9V00q4/4
+AQCX/q+SN1rqH3I6Coc3suFnvzdmHDSFqoY4NsJez7veTAUG2GGWTuc6KGX7He7C
+/+STFz1s+hsE0AZt+0E8gf/lORTRN7Gt+i/I+s5/eoWxESJ9JNS4k8tBdbJ8Ccyv
+ea/lpkn2QtPwOEe3KBBWXuplCRHnS0JmP+WDCBnP2mlqRVHJ0JNDcS2U1DOzdyyp
+nna4SXAXroAuO9CRYyiehhGIjgvDEAQTh7BeKWfoA7o9QAQ936VoNB0/fsj/OABN
+2qEv5nZUJtdCEfqwvo2hZ5XsBP8h25mtkFDPOFSKT2jK5aoAnXlKV+1YsLG8CzHC
+xmvFW+BfPrOMVooEmkUjOuLd
-----END CERTIFICATE-----
Certificate:
@@ -285,30 +285,30 @@
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
- 00:a3:90:0c:56:93:34:da:26:53:6e:a9:d5:07:b9:
- 83:30:70:85:69:ed:18:67:72:bb:1d:c4:06:ff:a8:
- b8:00:75:fd:38:ac:f1:e2:4a:86:21:4d:01:77:fc:
- f3:2d:90:94:7e:14:2c:8a:89:c2:cd:42:a5:ae:fe:
- 7a:ca:9d:44:78:21:f6:ab:6d:d3:c8:8a:07:57:eb:
- 22:10:cf:1e:44:f2:a4:23:e7:10:46:1e:d4:21:60:
- 9c:01:72:ff:ca:20:c8:48:c4:ad:b0:17:28:f3:14:
- af:49:65:52:52:58:9a:1b:68:1a:9d:77:e9:61:52:
- 54:0b:81:e4:0b:c7:2d:b3:2d:aa:9e:16:1f:51:ec:
- 7d:e7:2d:2c:e6:c4:88:81:3e:1b:e1:e7:1f:21:12:
- 21:47:ec:14:a5:d9:ab:a2:2b:ac:1f:3c:b2:a5:c1:
- 69:4e:55:88:66:e8:5a:4d:9d:08:27:1c:fe:cd:62:
- b0:95:62:c4:4b:ff:12:11:4c:d8:10:66:a4:d0:29:
- da:d5:79:b7:ee:19:d5:b9:33:92:c5:61:89:56:a8:
- 4f:48:cf:9a:a0:3e:95:f0:1f:b7:c9:de:82:89:09:
- b0:87:a5:c5:71:2c:71:3b:72:4a:0a:51:c4:c4:7d:
- ac:84:c3:9b:60:3d:ff:0c:52:05:23:4d:57:57:06:
- 60:17
+ 00:ae:d8:f0:4c:e2:aa:62:09:4f:6c:9e:00:49:b4:
+ b3:65:74:d7:78:f8:8d:42:96:f8:95:0e:58:91:bc:
+ b5:0c:9e:0c:df:0d:ab:e4:0b:8c:4d:77:24:45:0f:
+ 02:97:7c:d7:c4:10:41:7f:1f:10:80:46:85:6b:c1:
+ bb:88:81:fc:af:9e:35:f1:88:62:ff:58:e8:67:13:
+ a1:0d:10:9c:ea:0e:5d:fa:2c:b3:a2:e4:aa:53:55:
+ f4:01:1d:f9:bf:05:7e:36:f6:93:df:ce:44:e6:a9:
+ 8e:2d:93:75:1c:a1:55:18:41:f3:7f:1e:62:76:18:
+ 3f:0f:ca:5b:d5:0b:49:d1:ff:6a:1c:d5:2f:9d:c9:
+ 63:b7:1c:b7:03:39:5a:41:c5:b2:19:86:dd:f8:a1:
+ df:e8:75:4b:91:69:0b:96:83:c7:df:c5:c8:f0:a9:
+ ea:7c:d3:fe:11:29:39:ca:ce:1e:5e:9a:00:0c:16:
+ 1d:aa:c4:f0:4f:4f:d8:12:57:06:04:3c:04:e3:89:
+ d8:fb:71:9f:d5:14:c0:e9:ad:c9:c9:61:7f:00:6a:
+ e7:3f:c3:fc:99:b7:94:2a:dd:16:d7:f5:7d:77:1d:
+ de:87:e7:0b:18:fa:35:e6:23:7b:c9:d1:6a:88:20:
+ bf:ed:ec:2a:2a:e1:65:96:1e:68:15:bd:1b:ae:31:
+ cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
- 88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F6
+ 46:4A:98:70:E1:6E:F7:E1:51:0F:EE:4D:43:FA:ED:D8:F3:23:58:BF
X509v3 Authority Key Identifier:
- keyid:88:1C:D6:E6:0D:8F:83:DE:9D:9C:2E:3E:1E:E5:61:82:EA:2D:11:F6
+ keyid:46:4A:98:70:E1:6E:F7:E1:51:0F:EE:4D:43:FA:ED:D8:F3:23:58:BF
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
@@ -323,41 +323,41 @@
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:1
Signature Algorithm: sha256WithRSAEncryption
- 2e:81:16:b6:af:49:9b:93:4d:84:34:9c:f0:43:ee:76:91:f5:
- 88:9e:6b:cd:a8:95:f2:5e:10:19:f0:41:98:b2:ac:38:2a:ac:
- 3e:4c:0f:49:0b:b9:fd:97:d3:c9:61:6c:8b:7d:26:06:1d:65:
- 7e:e8:92:23:07:82:cc:3c:c9:c7:32:7b:2e:e2:3e:e8:42:52:
- 29:9f:6d:8f:7d:34:57:37:7a:71:8f:f1:28:33:70:aa:59:88:
- 12:95:74:82:60:d0:14:50:b5:d4:5a:ad:7c:03:85:ab:84:c9:
- e5:bf:7a:4a:3e:1a:d0:44:0b:bc:e1:ae:3b:48:e9:00:1c:92:
- 1b:b5:40:a4:e6:65:88:ec:3b:6e:ab:da:37:10:b7:6d:45:e5:
- 70:89:eb:e4:21:68:2e:77:e6:de:25:e3:5d:7a:a0:f1:33:4c:
- cc:e2:8b:a9:c8:fd:dc:0b:4b:9e:4c:5c:7c:86:0f:d4:ab:f9:
- e0:c8:c0:82:76:38:55:d3:dc:4d:57:d0:ca:76:63:9f:92:5c:
- ff:5f:1b:bd:b6:39:5e:0f:5f:93:0b:86:23:9e:08:d3:e4:11:
- 02:5f:5f:bd:00:af:d3:22:c0:14:3a:f4:4b:8b:fb:be:5e:b7:
- 1c:34:e1:20:69:5d:7c:d9:f5:86:28:ab:92:a6:31:6b:fe:1d:
- 03:00:f0:89
+ 75:7f:28:f3:9e:92:a5:65:6a:9a:ed:7f:29:3e:17:88:10:6a:
+ cc:a7:0d:b7:80:f0:d4:38:d0:f2:ed:a6:51:3e:7f:20:98:f3:
+ bc:18:ad:c3:3d:83:bb:b4:37:f0:27:68:eb:71:e4:a0:33:f0:
+ 6b:57:be:f2:9d:f6:45:ac:7b:83:bd:f9:bc:90:6e:38:20:4a:
+ 69:00:f3:2c:b0:b2:68:a4:14:b8:2d:09:f5:87:63:57:97:0a:
+ c5:64:41:c4:ab:b3:09:91:4e:ab:c6:b6:0f:1b:d4:86:16:12:
+ 02:86:3f:c7:4b:46:05:55:28:8b:f8:a5:f1:a3:1a:8c:d0:1c:
+ b6:83:56:01:9f:fd:68:f6:e1:6d:ff:ce:3a:59:7d:0e:5e:be:
+ 72:e7:b3:7c:c3:b6:a4:a1:a9:bc:a4:af:60:55:5b:07:51:19:
+ db:5b:1a:89:b9:ab:bb:cb:7a:ed:33:b1:c7:10:f6:6b:c7:a8:
+ 93:fb:fb:b7:f0:40:db:22:73:86:7d:da:db:33:a8:f4:e3:fc:
+ 45:6e:69:49:ba:18:7c:c0:59:75:b9:82:64:ae:8d:db:ae:27:
+ 03:14:2d:e2:e0:38:d3:af:0c:65:3b:4b:d7:c2:94:d4:9a:4d:
+ e6:58:31:d8:b6:c0:b1:c7:71:21:3f:a1:bf:84:d1:a1:c0:d9:
+ 06:47:08:0b
-----BEGIN TRUSTED_CERTIFICATE-----
MIIDaDCCAlCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKOQDFaTNNomU26p1Qe5
-gzBwhWntGGdyux3EBv+ouAB1/Tis8eJKhiFNAXf88y2QlH4ULIqJws1Cpa7+esqd
-RHgh9qtt08iKB1frIhDPHkTypCPnEEYe1CFgnAFy/8ogyEjErbAXKPMUr0llUlJY
-mhtoGp136WFSVAuB5AvHLbMtqp4WH1HsfectLObEiIE+G+HnHyESIUfsFKXZq6Ir
-rB88sqXBaU5ViGboWk2dCCcc/s1isJVixEv/EhFM2BBmpNAp2tV5t+4Z1bkzksVh
-iVaoT0jPmqA+lfAft8negokJsIelxXEscTtySgpRxMR9rITDm2A9/wxSBSNNV1cG
-YBcCAwEAAaOBzjCByzAdBgNVHQ4EFgQUiBzW5g2Pg96dnC4+HuVhguotEfYwHwYD
-VR0jBBgwFoAUiBzW5g2Pg96dnC4+HuVhguotEfYwNwYIKwYBBQUHAQEEKzApMCcG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-AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMA0GCSqGSIb3DQEBCwUAA4IBAQAugRa2
-r0mbk02ENJzwQ+52kfWInmvNqJXyXhAZ8EGYsqw4Kqw+TA9JC7n9l9PJYWyLfSYG
-HWV+6JIjB4LMPMnHMnsu4j7oQlIpn22PfTRXN3pxj/EoM3CqWYgSlXSCYNAUULXU
-Wq18A4WrhMnlv3pKPhrQRAu84a47SOkAHJIbtUCk5mWI7Dtuq9o3ELdtReVwievk
-IWgud+beJeNdeqDxM0zM4oupyP3cC0ueTFx8hg/Uq/ngyMCCdjhV09xNV9DKdmOf
-klz/Xxu9tjleD1+TC4YjngjT5BECX1+9AK/TIsAUOvRLi/u+XrccNOEgaV182fWG
-KKuSpjFr/h0DAPCJ
+AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMA0GCSqGSIb3DQEBCwUAA4IBAQB1fyjz
+npKlZWqa7X8pPheIEGrMpw23gPDUONDy7aZRPn8gmPO8GK3DPYO7tDfwJ2jrceSg
+M/BrV77ynfZFrHuDvfm8kG44IEppAPMssLJopBS4LQn1h2NXlwrFZEHEq7MJkU6r
+xrYPG9SGFhIChj/HS0YFVSiL+KXxoxqM0By2g1YBn/1o9uFt/846WX0OXr5y57N8
+w7akoam8pK9gVVsHURnbWxqJuau7y3rtM7HHEPZrx6iT+/u38EDbInOGfdrbM6j0
+4/xFbmlJuhh8wFl1uYJkro3bricDFC3i4DjTrwxlO0vXwpTUmk3mWDHYtsCxx3Eh
+P6G/hNGhwNkGRwgL
-----END TRUSTED_CERTIFICATE-----
-----BEGIN TIME-----
diff --git a/net/net.gypi b/net/net.gypi
index 8a4a799..744f6e8 100644
--- a/net/net.gypi
+++ b/net/net.gypi
@@ -2458,17 +2458,17 @@
'data/url_request_unittest/with-headers.html',
'data/url_request_unittest/with-headers.html.mock-http-headers',
'data/verify_certificate_chain_unittest/basic-constraints-pathlen-0-self-issued.pem',
- 'data/verify_certificate_chain_unittest/expired-intermediary.pem',
+ 'data/verify_certificate_chain_unittest/expired-intermediate.pem',
'data/verify_certificate_chain_unittest/expired-root.pem',
'data/verify_certificate_chain_unittest/expired-target-notBefore.pem',
'data/verify_certificate_chain_unittest/expired-target.pem',
- 'data/verify_certificate_chain_unittest/intermediary-basic-constraints-ca-false.pem',
- 'data/verify_certificate_chain_unittest/intermediary-basic-constraints-not-critical.pem',
- 'data/verify_certificate_chain_unittest/intermediary-lacks-basic-constraints.pem',
- 'data/verify_certificate_chain_unittest/intermediary-lacks-signing-key-usage.pem',
- 'data/verify_certificate_chain_unittest/intermediary-signed-with-md5.pem',
- 'data/verify_certificate_chain_unittest/intermediary-unknown-critical-extension.pem',
- 'data/verify_certificate_chain_unittest/intermediary-unknown-non-critical-extension.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-basic-constraints-ca-false.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-basic-constraints-not-critical.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-lacks-basic-constraints.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-lacks-signing-key-usage.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-signed-with-md5.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-unknown-critical-extension.pem',
+ 'data/verify_certificate_chain_unittest/intermediate-unknown-non-critical-extension.pem',
'data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal-anchor.pem',
'data/verify_certificate_chain_unittest/issuer-and-subject-not-byte-for-byte-equal.pem',
'data/verify_certificate_chain_unittest/key-rollover-longrolloverchain.pem',
@@ -2476,7 +2476,7 @@
'data/verify_certificate_chain_unittest/key-rollover-oldchain.pem',
'data/verify_certificate_chain_unittest/key-rollover-rolloverchain.pem',
'data/verify_certificate_chain_unittest/non-self-signed-root.pem',
- 'data/verify_certificate_chain_unittest/target-and-intermediary.pem',
+ 'data/verify_certificate_chain_unittest/target-and-intermediate.pem',
'data/verify_certificate_chain_unittest/target-has-keycertsign-but-not-ca.pem',
'data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem',
'data/verify_certificate_chain_unittest/target-not-end-entity.pem',
Reply all
Reply to author
Forward
0 new messages