[Created by: generate_policies_tests.py]
Cast certificate chain with the following policies:
Root: policies={}
Intermediate: policies={audioOnly}
Leaf: policies={audioOnly}
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Intermediate
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2018 GMT
Subject: CN=Leaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d0:0b:d7:3e:98:8e:bb:3e:3c:0b:89:5d:95:79:
a7:6a:14:3e:6b:b2:0c:02:01:25:51:9d:3a:fc:ea:
b7:ee:d1:5d:e6:c1:c1:59:a9:e3:59:10:d3:04:6a:
a4:ab:33:f0:e6:cf:70:44:a6:14:88:5f:dd:63:b6:
b7:d6:ce:4b:bd:05:3f:61:7a:6d:01:5a:38:4b:64:
a3:63:d0:1b:7c:7a:37:ab:eb:a8:5b:e0:50:e6:5f:
f5:90:20:8d:76:51:5a:2b:82:4c:60:89:7d:f7:df:
d2:6d:e4:e3:65:63:13:65:90:13:91:d7:c2:f6:61:
82:b2:4d:cc:db:47:e3:f6:cd:c4:62:f9:95:36:04:
cd:19:85:54:a6:8e:5c:28:0f:0d:22:13:d7:8d:16:
1d:1a:68:7a:40:d6:c8:0f:e8:60:c8:fe:16:fe:45:
e1:e4:a8:b8:b8:e5:fb:40:51:2a:70:e0:de:62:35:
78:b6:70:59:f6:7b:a2:7c:03:9c:69:8b:29:a5:3b:
fd:b9:89:ec:58:3b:c5:2e:71:f7:d5:bb:48:b3:8b:
92:1a:a6:8a:33:1e:b7:55:c5:ff:d7:e9:f1:ef:e4:
d8:67:ae:58:51:18:66:24:f1:1b:12:1f:a1:90:f7:
d0:ba:4d:cb:a4:9e:af:ec:6d:b1:a9:f6:f2:2d:fe:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:C6:9F:50:B0:1A:C4:63:BF:03:F3:E8:D1:62:7B:4F:8E:8E:6E
X509v3 Authority Key Identifier:
keyid:1A:DF:4D:09:A0:4D:8D:18:9E:B2:43:6B:AF:D5:99:96:0D:C6:6E:0A
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Intermediate.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Intermediate.crl
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.11129.2.5.2
Signature Algorithm: sha256WithRSAEncryption
1b:08:f3:4d:5a:ab:a0:3a:39:fd:08:5e:bf:d1:02:07:92:af:
79:8b:5d:c5:67:df:cc:53:77:4a:98:84:62:13:19:e1:83:61:
c8:f6:4e:5c:34:1b:98:49:82:24:d0:13:77:be:08:87:22:02:
3e:54:aa:a0:dc:ff:ac:50:09:98:98:e7:f5:b0:e6:53:29:71:
62:82:95:6b:37:cd:01:a4:42:aa:6b:80:c1:70:d7:66:6c:c6:
21:7f:7c:b0:c3:71:44:ad:ca:68:db:04:cd:ef:a5:18:75:e4:
12:40:b1:05:47:c9:bc:86:fb:a4:2f:bf:eb:5a:3b:ff:ff:99:
8b:2a:6f:20:0a:dc:6e:ad:79:cc:b0:aa:46:a0:d6:3c:90:b7:
c6:36:99:03:e1:ca:d2:39:5f:69:c9:e5:eb:c9:03:05:85:d8:
c2:6f:b8:75:a2:e2:77:3c:c6:24:dd:84:78:9e:b4:0e:a3:00:
3d:50:bc:9d:5f:62:b9:75:46:3b:66:42:fd:85:93:fc:1c:41:
c7:e2:58:07:cd:ba:27:3c:58:92:7f:6f:60:e4:9c:68:cb:8d:
3d:a9:f6:ad:e3:4d:17:e5:ff:c3:9f:7a:c1:96:7a:a2:99:79:
7a:2d:ce:9d:49:59:20:6e:89:f9:6e:17:aa:97:44:1d:ed:28:
c2:8d:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Root
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2018 GMT
Subject: CN=Intermediate
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:cb:9b:d4:8f:6f:27:f3:b7:4d:01:80:93:70:2a:
c0:14:26:ae:44:a8:0e:e7:3e:2f:fb:f8:07:4b:79:
2d:e9:5f:90:ba:b4:fd:43:76:f9:1b:56:59:a1:76:
81:75:7f:d5:8c:35:bc:d5:9f:10:f8:cd:dc:3d:40:
6b:3d:66:eb:e5:41:06:c3:85:e9:d9:64:ff:36:41:
99:f1:8d:cc:a2:95:7a:86:ad:16:67:cf:40:c3:bc:
1b:b0:90:1d:8d:a7:8e:7c:89:01:f2:11:2d:b6:53:
13:20:bb:2a:ec:9a:ba:e6:b0:5a:ee:6a:b4:aa:82:
47:eb:cd:32:b0:c7:4b:92:11:3a:58:3c:9e:bf:7f:
df:ef:bc:fa:2c:d2:29:fb:95:76:4f:27:2d:14:a9:
3e:34:39:29:18:84:01:c5:27:8f:d2:e4:85:72:6d:
b1:43:d7:b8:56:a7:9d:0f:c3:45:b9:3e:27:c8:c1:
05:a4:23:aa:4d:85:77:08:91:a3:fc:ca:5f:a7:bd:
25:fb:57:a6:d3:29:e0:b0:39:87:6e:26:a7:f1:c0:
65:ba:9d:80:e3:26:42:b9:d7:9a:e8:2f:c9:94:67:
08:87:f8:2a:54:72:69:36:d9:87:e9:a5:e8:91:39:
41:66:a4:7d:d7:ec:d4:7b:8e:b9:65:05:ad:90:0c:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:4D:09:A0:4D:8D:18:9E:B2:43:6B:AF:D5:99:96:0D:C6:6E:0A
X509v3 Authority Key Identifier:
keyid:8C:07:70:06:02:9A:7D:D2:99:47:6E:2F:63:D8:B8:67:2F:CE:E3:3B
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Root.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.11129.2.5.2
Signature Algorithm: sha256WithRSAEncryption
df:31:6f:7a:51:9b:68:73:12:e2:74:a7:c1:58:43:d1:fd:c4:
64:1a:0c:17:9d:5c:d0:9b:ab:f6:5b:de:f1:6a:08:7d:20:db:
c2:f6:4c:87:af:ad:c1:ba:52:15:04:2e:6d:5a:61:bd:e2:73:
15:c5:62:99:56:47:86:ce:c9:28:44:37:c7:0e:7e:af:5c:1d:
4a:4c:ac:74:e5:74:16:81:76:5c:ec:40:72:35:41:f0:9f:ec:
14:7f:ee:c2:35:ae:9f:57:e3:e9:68:48:c9:33:f8:ca:d5:9c:
0e:1a:ec:83:bf:fc:02:0c:3d:30:3b:f5:aa:a8:c0:8f:36:45:
f4:0c:48:bd:d9:11:c2:b5:b0:c0:78:6d:3c:c1:1f:96:ae:01:
31:e8:b9:9f:1f:65:41:bd:89:2b:ce:8f:cb:59:e3:8b:d1:97:
a8:83:f8:dd:63:13:e9:53:4f:0d:41:73:97:c5:06:4e:09:33:
e8:37:23:ad:5e:26:69:4c:70:7a:eb:cf:50:c0:b1:40:42:a3:
7c:37:ad:48:d4:a5:ee:44:b5:64:43:e6:52:ac:00:f3:fc:03:
9e:ab:fb:8d:03:4c:d3:2f:fc:b3:cb:31:9e:42:08:e1:c8:d1:
3d:d3:a7:ec:9b:f2:11:75:15:19:b3:30:25:c5:de:a5:06:b1:
44:17:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Root
Validity
Not Before: Jan 1 12:00:00 2015 GMT
Not After : Jan 1 12:00:00 2018 GMT
Subject: CN=Root
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ee:16:50:2d:c1:27:44:01:0a:3f:67:6c:a5:e2:
9c:5a:30:1a:81:73:ee:0c:07:51:44:01:0a:cc:cf:
3a:a2:86:06:06:aa:54:46:d0:01:3e:3d:08:9d:74:
6c:86:92:df:0c:bf:2c:ec:11:18:30:0c:a7:20:7b:
9e:66:6b:a2:6b:fc:0d:53:5e:f1:49:69:56:ac:8d:
b6:d2:18:79:59:8b:30:dc:1d:70:86:85:7f:2a:c2:
33:df:a2:f2:35:6b:52:8e:14:41:a0:10:c9:aa:f9:
94:2c:f3:09:ec:9f:c9:61:da:71:47:d2:b1:76:8a:
c8:e2:2d:2b:48:b5:6d:f2:87:88:ce:97:b4:2d:53:
99:35:7a:59:75:79:c7:e9:ed:d5:9a:03:81:f2:b5:
bb:30:50:5a:8d:4b:c0:a5:55:0c:97:ff:f4:5a:ef:
a1:4a:ae:ce:74:70:29:60:d7:84:a5:49:dd:c9:8c:
d9:cd:e8:66:cd:59:af:b5:cf:8b:d5:3d:9b:80:2c:
9c:eb:e4:04:11:3f:1a:a6:15:bf:96:66:bf:83:9b:
4b:e4:49:4f:17:0d:df:42:5f:af:06:a1:50:5e:aa:
c7:1f:a9:2e:7a:f0:49:6d:77:cd:e3:78:4c:3e:4b:
f9:67:60:a3:f6:18:28:ba:7d:5a:df:9b:66:02:ca:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:70:06:02:9A:7D:D2:99:47:6E:2F:63:D8:B8:67:2F:CE:E3:3B
X509v3 Authority Key Identifier:
keyid:8C:07:70:06:02:9A:7D:D2:99:47:6E:2F:63:D8:B8:67:2F:CE:E3:3B
Authority Information Access:
CA Issuers - URI:http://url-for-aia/Root.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://url-for-crl/Root.crl
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
49:1d:f3:68:30:35:e7:2a:2d:8c:9c:fd:83:de:44:bd:1f:1e:
bf:f7:d6:ee:03:5f:e7:21:4f:f9:ca:08:ca:d4:99:ff:ab:8f:
42:3d:02:de:3f:7d:c1:4b:fc:aa:f3:b5:cc:b4:d9:04:b6:4e:
5a:bd:5a:65:de:2e:06:f4:90:a2:fb:18:e7:b3:54:b2:ff:37:
2b:15:de:26:2b:d7:11:1e:17:58:f3:b8:6d:10:ba:b7:8e:9a:
5d:8a:d7:5c:69:28:0c:0e:8b:ce:b4:e1:4a:a3:58:82:a6:f6:
21:39:fb:eb:5b:20:12:e2:7b:36:4e:be:cf:a6:dc:29:6c:ef:
01:44:07:e8:1f:a2:b4:7c:b1:84:c3:4b:ba:a8:bd:d8:e0:f9:
82:49:e9:f8:08:a5:c9:d6:3a:62:ce:ad:9e:57:ed:1a:92:e2:
d9:f1:7d:46:a4:6b:72:db:16:f8:61:75:50:5b:0a:30:62:13:
12:14:16:cc:6b:1c:f3:c4:df:a7:83:ad:c6:ee:d1:34:45:d7:
36:14:fc:5b:82:96:87:ad:45:bc:15:40:70:ea:e1:17:62:e7:
45:aa:a3:7f:33:f0:3f:32:8d:2a:98:64:62:17:f9:9a:8d:32:
e5:db:79:aa:50:8c:5d:91:40:76:b4:d6:92:5c:2f:81:86:92:
0e:8f:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----