[Created by: generate_policies_tests.py]
Cast certificate chain with the following policies:
Root: policies={}
Intermediate: policies={anyPolicy}
Leaf: policies={foo}
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2018 GMT
Subject: CN=Leaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:e9:db:75:48:f4:dd:0f:37:9a:8e:72:10:80:aa:
7c:80:08:d2:ab:a2:1d:28:df:78:9c:52:72:c1:b9:
7d:e0:03:a5:53:e9:70:96:0a:be:b9:9e:c0:f7:3e:
23:33:15:42:66:5d:64:13:c0:7a:23:6d:7f:71:13:
c3:bd:da:d1:39:11:38:1e:91:bc:b3:f8:cb:90:9d:
fd:a6:b2:90:cb:fa:1b:70:11:a5:b4:03:25:78:dc:
d2:f6:1e:64:74:9b:2c:f4:3d:13:b2:ef:7e:8f:c4:
ad:98:8b:0b:df:1c:08:f5:34:9f:78:ca:35:52:b5:
1c:b4:fc:f8:60:d7:ef:b4:74:1c:93:f1:80:87:3a:
84:ac:43:2e:ce:a2:00:07:83:7e:6d:03:b5:2e:53:
c3:9c:ee:88:12:af:50:5c:42:e3:46:12:f1:20:10:
a3:fc:90:07:d7:29:04:9b:f6:50:9b:ff:3e:27:0b:
29:e4:e4:d6:f9:00:46:82:c6:2a:63:11:9a:b9:6c:
fd:e1:fc:34:48:60:9b:8d:7e:3a:4c:ce:ee:28:2d:
25:63:8d:07:43:69:3c:fa:d7:3c:bd:5d:40:b7:d7:
da:f2:74:ef:d3:00:bf:ac:3b:75:a0:0e:ae:52:63:
3c:45:fa:e2:10:82:2b:c9:0f:02:18:c6:c6:09:02:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:74:F5:0F:9F:53:34:47:02:B5:04:8D:45:57:79:9B:98:7B:27
X509v3 Authority Key Identifier:
keyid:9C:53:7F:7A:7F:4E:F2:C0:A5:1A:96:FB:9E:8D:08:DC:DD:73:92:61
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.2.840.113554.4.1.72585.2
Signature Algorithm: sha256WithRSAEncryption
04:86:bc:a3:cc:94:a3:b5:97:a6:ca:b4:21:d6:f9:37:f7:b1:
ed:d0:4a:43:ff:93:ec:42:62:05:1d:11:df:18:94:c2:fc:63:
ad:0b:db:f4:cc:8a:7c:e9:69:29:b3:df:7c:a5:79:31:01:6a:
fc:18:6f:fd:5b:f9:11:68:53:0b:78:53:1a:08:6f:5a:33:72:
30:25:76:21:45:fb:a2:79:d5:d9:f7:60:1b:3b:cd:21:3d:66:
72:73:4a:fa:cd:86:13:54:ca:44:87:97:55:ec:dc:dc:76:24:
9e:43:17:ad:f9:2c:29:bc:4a:b3:01:95:bb:83:a6:d0:fa:c6:
7d:d8:1d:7d:66:95:b7:fd:80:60:dd:8d:02:8c:80:cb:57:4f:
c1:7a:8f:2c:34:1e:5c:08:4f:76:a6:42:c2:66:39:24:5b:46:
12:f0:6e:30:51:be:27:03:be:69:f5:b3:b7:6f:25:7e:0b:c8:
52:48:90:12:59:54:5a:07:32:2b:3b:a7:13:31:92:5f:c2:5c:
61:90:d9:70:04:e6:6f:7f:fa:ec:36:a5:6a:38:49:8d:a2:51:
e0:68:b3:c9:f6:c7:3a:99:7f:89:a5:17:d5:1b:fd:39:13:51:
2d:26:8f:33:a8:61:86:d8:fe:b4:d4:d7:69:26:bb:4c:b1:a8:
cb:4b:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Root
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2018 GMT
Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c0:06:6e:cf:e3:c9:e6:4a:99:bf:9d:a9:cc:42:
b0:e3:95:f4:5c:16:5d:6c:c3:3b:7b:65:f9:68:27:
07:75:e9:60:fc:c5:1e:37:71:05:e6:f4:c4:8e:76:
cf:dd:b3:7a:dd:14:d4:4c:96:1a:5f:b4:c5:04:9a:
32:e6:f7:16:4c:38:4a:99:e5:3a:24:85:c3:06:bc:
c1:9e:4c:ac:6b:14:9d:49:8c:ec:cd:9a:43:60:09:
d8:d0:81:8f:a3:b9:9f:e8:13:fb:69:95:27:7b:fe:
6a:d8:9e:42:4b:96:47:ee:1c:69:c6:5a:d7:28:a4:
c2:91:46:bf:7a:c6:69:12:96:c8:68:fa:46:cf:fb:
92:ca:12:a7:7a:58:39:6f:d1:26:07:2a:59:c5:fb:
86:94:33:45:65:04:55:c4:a5:0c:da:e5:56:30:0d:
46:32:ce:fe:9b:00:2d:3f:24:64:81:c2:f2:3f:f5:
af:71:1d:0e:69:ae:5e:43:28:e5:98:65:b7:16:ee:
42:13:26:9d:a5:db:21:aa:85:1b:38:12:eb:f0:0a:
93:ef:eb:5c:56:0d:cf:4a:13:4b:03:64:03:59:d9:
59:05:f8:e0:79:49:68:44:98:ad:41:a7:9a:d3:9a:
0b:74:73:79:b7:84:14:f6:b6:40:0f:68:1e:be:94:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:7F:7A:7F:4E:F2:C0:A5:1A:96:FB:9E:8D:08:DC:DD:73:92:61
X509v3 Authority Key Identifier:
keyid:02:F4:E3:B3:B5:C8:56:E5:72:02:9D:7A:97:A4:73:0A:88:EF:9C:40
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Root.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Certificate Policies:
Policy: X509v3 Any Policy
Signature Algorithm: sha256WithRSAEncryption
4f:f7:81:68:2c:99:55:0d:b9:0c:cb:18:bf:cd:c9:a3:1d:05:
3e:53:e2:87:0e:94:20:6c:c9:77:4e:25:a0:f3:de:a2:52:3c:
2a:4d:31:dc:d5:fc:19:bf:d9:d8:18:88:bf:9a:ff:9f:71:18:
25:da:91:49:52:fc:d0:14:e0:97:cc:78:dd:4c:3f:4e:35:c8:
57:12:40:a0:ac:1f:81:93:50:db:1b:17:be:e8:76:51:e8:e9:
2d:2b:28:eb:cb:23:a7:58:b0:b4:53:f2:21:ef:6e:5d:a6:d3:
36:92:da:90:cf:c4:fd:0b:4d:26:88:05:2a:6d:22:48:d2:4e:
5f:3a:e0:ee:1a:70:a8:ab:58:ec:24:b4:61:84:f9:f0:8d:f4:
93:38:49:f0:d2:14:ba:7d:ca:9e:04:a4:02:7e:e0:1e:9e:40:
c5:04:4a:69:fc:9e:fd:9b:2c:e1:c5:1f:ad:95:45:92:bd:38:
74:07:2a:1f:cf:91:b3:f1:5a:88:d1:ca:97:1e:8f:6d:62:86:
b6:71:93:6f:d4:84:5c:fe:bb:56:d1:5c:01:0b:f0:1f:d5:27:
a3:8b:cd:8d:aa:ae:d7:ed:fc:c0:c9:30:89:7a:d2:34:d5:98:
ef:a7:44:4c:f9:8d:bd:6b:6c:6b:7c:a5:36:d0:f6:07:47:9f:
c3:d2:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Root
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2018 GMT
Subject: CN=Root
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a5:3e:c8:1f:15:65:7f:e7:ab:7e:07:f3:8e:4d:
07:09:61:1c:db:01:f6:0c:7b:b2:a9:c5:49:c4:ae:
f6:d9:bc:b5:7d:36:0e:c2:7d:de:38:cd:97:a5:ca:
9a:9c:c9:e7:21:83:50:0f:89:98:e2:ce:2b:44:48:
ff:3a:05:1d:b2:9e:6a:3e:3b:40:d9:78:bf:97:52:
df:62:5d:59:2d:f0:bd:54:f7:21:fb:21:02:fd:38:
af:d7:2b:42:16:db:d6:a3:58:9c:a6:4f:85:75:58:
6f:aa:c3:e3:8e:59:eb:c3:49:ba:99:c9:ba:03:74:
ca:e7:26:d8:1d:5c:2a:c1:f7:a8:3c:31:5b:20:b5:
9e:ec:7d:a8:00:cd:f7:6e:5a:57:42:fd:49:66:39:
bb:55:95:38:64:51:3a:13:59:86:0e:f2:db:49:07:
eb:02:84:00:95:4d:23:b3:72:10:8d:f3:a1:6b:34:
68:63:97:0f:69:18:80:4f:ae:d4:f4:a1:f3:21:62:
74:04:7a:07:0b:e3:61:cf:ff:07:75:27:78:0a:4e:
e3:e5:a2:51:9c:2f:d1:04:3c:7a:1c:0e:b3:bb:e7:
db:10:67:c8:c1:af:ce:9a:57:35:77:22:3c:48:fe:
31:9b:7d:95:5e:e1:3d:32:99:9d:97:85:a4:7b:fd:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F4:E3:B3:B5:C8:56:E5:72:02:9D:7A:97:A4:73:0A:88:EF:9C:40
X509v3 Authority Key Identifier:
keyid:02:F4:E3:B3:B5:C8:56:E5:72:02:9D:7A:97:A4:73:0A:88:EF:9C:40
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Root.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
9a:7a:13:1c:1e:b6:30:f4:70:d0:47:ce:e6:31:fe:63:ae:08:
aa:8e:91:14:1f:1a:08:1b:c3:0e:e5:06:72:cd:28:df:16:73:
98:9b:25:78:7c:61:05:6c:68:09:7e:33:9c:49:7e:7c:d2:53:
fa:f2:fe:fc:59:8a:2d:04:66:1e:0f:91:98:08:2a:ea:fd:23:
22:5d:4b:1e:e3:e9:1a:4f:1d:3d:d0:49:13:af:d8:83:4e:8b:
10:da:1b:b6:82:a3:4f:cb:ff:f4:28:2d:a6:88:63:07:db:72:
13:fd:e7:c7:e9:77:1d:40:56:39:64:84:24:a8:20:dc:e1:f2:
e3:ad:ef:07:03:66:e8:3b:5d:30:82:ba:50:9c:b0:82:c1:14:
dd:23:9f:ea:56:02:77:63:56:e3:f4:5f:ef:05:cc:5e:cb:8f:
3e:4d:c2:10:8d:e2:82:2f:52:91:d9:d0:d2:c1:6b:56:d2:f2:
0c:b8:47:c8:52:69:ba:ce:fa:7d:f7:d5:dd:5d:cc:15:ef:9d:
73:1b:6e:6d:ab:76:96:8a:06:94:68:6b:ea:36:44:54:66:66:
05:40:1d:31:05:03:2a:78:10:cf:fa:90:dd:eb:9d:61:b5:3c:
e5:ec:8e:39:6b:1b:c5:1b:0c:cc:6a:3e:86:d8:ea:6e:d9:5a:
d1:8e:ea:a3
-----BEGIN CERTIFICATE-----
MIIDZTCCAk2gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKU+yB8VZX/nq34H845N
BwlhHNsB9gx7sqnFScSu9tm8tX02DsJ93jjNl6XKmpzJ5yGDUA+JmOLOK0RI/zoF
HbKeaj47QNl4v5dS32JdWS3wvVT3IfshAv04r9crQhbb1qNYnKZPhXVYb6rD445Z
68NJupnJugN0yucm2B1cKsH3qDwxWyC1nux9qADN925aV0L9SWY5u1WVOGRROhNZ
hg7y20kH6wKEAJVNI7NyEI3zoWs0aGOXD2kYgE+u1PSh8yFidAR6BwvjYc//B3Un
eApO4+WiUZwv0QQ8ehwOs7vn2xBnyMGvzppXNXciPEj+MZt9lV7hPTKZnZeFpHv9
H10CAwEAAaOByzCByDAdBgNVHQ4EFgQUAvTjs7XIVuVyAp16l6RzCojvnEAwHwYD
VR0jBBgwFoAUAvTjs7XIVuVyAp16l6RzCojvnEAwNwYIKwYBBQUHAQEEKzApMCcG
CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCaehMcHrYw
9HDQR87mMf5jrgiqjpEUHxoIG8MO5QZyzSjfFnOYmyV4fGEFbGgJfjOcSX580lP6
8v78WYotBGYeD5GYCCrq/SMiXUse4+kaTx090EkTr9iDTosQ2hu2gqNPy//0KC2m
iGMH23IT/efH6XcdQFY5ZIQkqCDc4fLjre8HA2boO10wgrpQnLCCwRTdI5/qVgJ3
Y1bj9F/vBcxey48+TcIQjeKCL1KR2dDSwWtW0vIMuEfIUmm6zvp999XdXcwV751z
G25tq3aWigaUaGvqNkRUZmYFQB0xBQMqeBDP+pDd651htTzl7I45axvFGwzMaj6G
2Opu2VrRjuqj
-----END CERTIFICATE-----