[Created by: generate-chains.py]

Certificate chain where the intermediate was signed by a different
certificate with a different key. The intermediate lacks an
authorityKeyIdentifier extension as some verifiers will not try verifying with
the bogus root if the authorityKeyIdentifier does not match the root's
subjectKeyIdentifier.


Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:09:02:a5:7e:5f:ed:29:b0:9c:e2:2b:f0:ed:48:a5:f4:32:81:64
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:e3:ca:56:56:53:39:63:22:cd:90:66:ef:
                    33:38:2d:22:ef:23:1b:4c:81:d0:2e:d0:8e:f8:63:
                    f4:36:e4:45:45:5c:98:6d:46:f1:d4:98:49:15:44:
                    6d:81:cd:55:14:95:f8:b0:80:e6:26:4e:ff:04:c7:
                    d7:71:ab:01:0c:0b:f1:7b:18:80:a2:e2:9c:29:0e:
                    7d:d5:c0:a7:b5:4a:04:42:5e:d5:4d:9c:68:ed:b4:
                    04:f2:3e:e3:ce:1e:89:2c:06:13:f3:85:ec:63:01:
                    a5:de:7c:01:ed:fd:35:60:d2:66:ac:d7:9b:3a:81:
                    07:7c:90:7f:ae:e2:ac:b3:41:1c:58:7b:21:c6:7d:
                    22:dc:e9:16:5c:53:a5:bc:4d:09:51:8b:6c:c8:93:
                    9a:65:cc:16:20:01:3c:cf:99:8e:9e:17:57:0b:d7:
                    9a:30:6f:db:ed:64:85:d1:ad:8b:a3:ad:f1:c0:6f:
                    de:3e:83:9a:33:fb:1c:d3:ed:a6:46:1c:3c:c0:41:
                    95:7c:da:5b:a2:73:eb:99:58:4d:dd:ee:76:4a:d6:
                    9c:0d:66:46:72:79:f0:95:94:aa:08:18:0e:12:b1:
                    03:73:9c:a4:52:b2:54:c8:e4:cb:27:6b:aa:24:07:
                    14:98:76:12:7d:01:5f:df:a7:e8:34:2a:46:61:b6:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3B:80:B5:C8:C1:DB:F2:5A:84:C6:36:8C:08:04:72:6B:FC:78:48:55
            X509v3 Authority Key Identifier: 
                keyid:9C:50:7F:A1:0F:62:41:B6:41:8A:7E:5C:6E:73:B4:3E:44:FE:E6:C2

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:test.example
    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:0b:9b:5a:c2:d1:7e:0f:6f:a0:c0:0d:1f:08:e7:ee:b6:
         b1:1a:f3:85:3b:97:2c:00:57:13:f0:37:64:53:eb:98:07:4e:
         fd:62:53:d4:94:6c:28:16:1d:4e:a5:61:ff:6c:f2:a5:04:d0:
         2f:3b:e9:64:8d:cc:93:6a:47:44:e5:3a:cc:7f:ee:00:e3:6d:
         40:70:ed:b5:21:88:1f:c5:b3:d9:3b:8b:7a:87:23:17:1e:c5:
         df:ae:e6:e7:b8:51:7f:a3:d5:41:ef:be:f9:fa:df:39:19:85:
         4e:3c:fc:a5:43:84:6f:ae:49:cd:4f:73:db:29:fe:94:1a:f0:
         11:b9:41:12:c3:3c:91:7f:c2:34:3f:9b:dc:69:c7:80:fa:af:
         ba:f7:25:72:c8:d1:d2:5d:87:42:86:d0:03:49:76:bd:e4:1f:
         11:90:43:02:b4:7b:b4:23:c1:b1:ff:c5:83:4d:95:80:7f:fd:
         bd:df:d6:5b:af:f9:3c:5b:c5:95:aa:79:ac:e6:11:fd:7f:5a:
         ad:54:29:ac:9b:23:61:b5:3a:89:18:cf:55:84:30:87:1b:14:
         39:9b:19:5f:bd:38:43:da:6e:f1:54:33:13:d9:87:5b:45:b4:
         69:e6:89:85:e7:69:4b:d1:aa:12:1a:bd:ab:cd:ff:de:86:e6:
         ec:14:bf:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:3f:62:d9:75:26:c4:22:75:a1:77:c9:f1:44:79:41:3f:cb:10
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:2a:19:91:cd:d4:28:05:9d:4e:95:4e:47:
                    cf:79:0a:12:27:4f:0c:29:93:3f:2a:9c:3a:b3:a3:
                    07:43:a3:40:06:07:37:7c:1f:d8:6c:6a:af:38:06:
                    a8:3c:31:cf:c6:46:1e:ba:b8:70:95:5f:85:49:59:
                    41:78:3b:f9:c2:03:d2:a1:9d:5a:82:f5:c7:ae:74:
                    53:ec:d1:ae:07:26:0c:bd:67:47:bb:05:fd:d5:a6:
                    24:d4:c0:39:db:3b:ff:1e:f0:8f:0d:bf:f2:0d:00:
                    e5:7d:63:13:2d:d0:9b:3f:96:46:5d:c9:06:34:40:
                    15:94:a3:29:9f:fe:7d:ec:95:9f:e9:e5:c6:97:f6:
                    10:3f:ea:09:40:84:ba:59:64:d6:83:06:bc:ec:ea:
                    3f:7c:99:f3:b4:c7:13:9d:1a:74:bc:f5:4f:b5:d7:
                    c0:fc:0f:78:f9:87:fb:9a:f1:44:00:91:d2:d9:5d:
                    12:67:a0:cd:75:a4:eb:c2:47:86:b8:bd:d5:4c:7e:
                    6b:48:8e:a9:7d:0c:3f:4e:a0:2e:a1:fc:67:63:40:
                    fa:c4:56:b0:a3:ee:8a:73:55:69:fa:ec:5f:39:57:
                    74:65:1d:ef:66:9e:ad:76:84:e3:a7:ec:7e:d8:c2:
                    fb:8b:16:0e:1e:65:79:1d:c7:8e:d9:df:1e:31:49:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:50:7F:A1:0F:62:41:B6:41:8A:7E:5C:6E:73:B4:3E:44:FE:E6:C2
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:bb:44:37:c0:8a:7d:19:4d:c1:36:97:e9:13:ee:87:62:
         f7:39:10:53:39:e1:76:fa:89:44:b0:1a:8d:36:5e:79:45:48:
         8e:a8:a6:57:fe:cc:78:1f:91:a9:59:9c:64:ac:79:91:b0:f2:
         b9:bd:1c:be:89:df:0c:c7:ee:71:bf:9b:29:38:8e:50:f8:9e:
         6a:16:6d:c5:69:f8:be:9f:3b:0c:15:1d:1e:be:b6:68:88:c6:
         03:c9:1f:e0:ed:9b:98:56:fe:d5:a3:0c:6b:76:bb:3e:9d:5d:
         29:cc:6a:50:ad:e8:6f:38:e7:ab:17:83:86:02:dc:d6:7d:de:
         93:e1:30:dc:00:60:6a:94:11:40:3d:52:ef:ad:55:59:94:5a:
         dc:46:1d:3c:ad:ff:d8:fd:ad:09:ee:dd:88:84:48:5b:a0:18:
         a8:a4:c8:29:85:1a:c1:5a:36:a9:64:1c:f3:66:0c:f5:ae:46:
         a6:6e:3f:e7:c2:2a:50:9c:5f:46:dc:be:5d:fb:5b:a9:d4:85:
         6e:bc:92:28:dd:36:2c:11:df:80:2f:54:d7:5b:32:38:1b:e5:
         73:27:25:08:6a:c9:91:8c:9a:d1:0a:20:a0:30:72:e3:77:7d:
         4d:08:c7:57:9a:c6:1b:ea:0e:86:80:42:38:25:69:12:e9:98:
         48:e0:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:3f:62:d9:75:26:c4:22:75:a1:77:c9:f1:44:79:41:3f:cb:11
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:e4:44:d9:35:7b:d7:f5:f0:78:21:45:10:
                    23:6f:06:36:12:ff:a2:76:ef:19:ec:6f:a5:07:40:
                    3c:81:11:8d:0b:5a:6b:1f:fe:73:80:3e:62:0b:00:
                    de:05:eb:a6:e8:e6:70:33:d1:16:6c:56:d7:0e:a5:
                    a7:52:9b:9c:9b:33:ab:7e:98:d6:1f:42:36:65:d4:
                    54:bf:85:fd:ba:23:40:84:c6:0f:48:e6:0a:14:2c:
                    6e:12:b2:ce:c4:2b:47:aa:61:5c:ba:37:c3:c1:7b:
                    39:04:1f:2d:5a:6a:b1:35:33:d9:02:66:92:36:0e:
                    30:50:d6:57:4a:e0:07:d9:4c:39:f3:2f:8d:e3:e6:
                    2b:ce:ab:37:6b:24:d6:99:fa:25:b2:f5:dc:6c:bd:
                    85:a2:e5:bb:41:a6:a5:44:8c:12:3f:a8:89:90:8b:
                    51:bf:25:40:f7:fa:f9:f3:4f:d7:0c:43:c8:ea:bf:
                    4e:1f:08:90:e6:6e:cc:3f:ab:83:41:52:d4:96:9b:
                    df:18:90:f0:dc:51:05:10:e0:44:9e:9f:5a:f3:f5:
                    9b:81:41:fe:64:40:00:54:db:22:c4:b1:dd:7b:1a:
                    c9:f9:54:21:fc:15:13:c2:b6:c5:8c:45:c8:f6:44:
                    c8:32:6e:9c:23:cd:2a:61:92:b1:11:b6:35:a2:e4:
                    e8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:09:C4:04:3B:00:F6:3C:A0:27:CB:BE:2F:C5:65:78:EE:43:F1:56
            X509v3 Authority Key Identifier: 
                keyid:A4:09:C4:04:3B:00:F6:3C:A0:27:CB:BE:2F:C5:65:78:EE:43:F1:56

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         88:08:7b:8f:39:fe:18:2d:2a:ef:32:b8:63:40:62:49:72:b8:
         49:a2:9a:15:e9:4f:33:43:b4:1a:98:39:b6:e4:33:37:8f:3a:
         96:b5:12:c2:91:ef:32:a7:c0:64:b8:b9:38:90:ba:b5:5f:12:
         04:0c:d3:bf:e0:74:c2:5f:60:bf:54:2e:cd:26:2a:dd:3c:fd:
         c1:55:96:4c:df:6b:26:23:41:26:a0:48:97:82:d4:b3:27:57:
         ad:74:dd:ea:5a:20:cf:01:e7:6f:9c:34:a2:79:c4:6c:1a:9d:
         f6:da:21:4b:1e:9e:70:9d:5b:1e:30:3f:7a:b0:5b:7b:bc:05:
         73:46:50:ee:97:44:3c:70:7a:e3:08:d0:c8:d6:57:96:32:19:
         d4:91:d3:68:fd:21:b6:e8:e5:b1:01:db:27:6e:f5:1e:6c:d9:
         e4:7f:49:f4:57:90:ad:d4:bd:f9:5d:2d:35:ca:a7:f1:66:f2:
         f7:06:20:a5:09:4d:63:9e:d0:1e:77:84:ab:e9:06:51:6b:bd:
         33:d1:78:78:f1:6c:3b:3e:39:29:01:30:09:48:35:23:40:7e:
         4f:17:03:9b:3c:2c:8e:3b:cc:a1:3a:82:08:2f:b2:8b:f6:b6:
         1d:f2:22:41:12:c2:c1:04:c5:29:1e:4d:1a:11:0d:68:9b:0f:
         78:10:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----