[ This should not be validated. The signature on the intermediate certificate is invalid. It must be not trusted but valid (since the chain is ok) ] Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=U.S. Government, OU=Dod, OU=Testing, CN=CA1-CP.01.02 Validity Not Before: Jan 1 12:01:00 1998 GMT Not After : Jan 1 12:01:00 2048 GMT Subject: C=US, O=U.S. Government, OU=DoD, OU=Testing, CN=User1-CP.01.02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): 00:bc:09:ad:94:fa:6c:95:d0:9d:9c:dc:de:ca:1c: 67:f9:8d:b0:46:a0:e0:14:dd:ca:6f:7d:64:23:f6: dc:f1:ac:4c:27:d5:db:3e:fe:a7:80:de:84:81:6b: 9f:f3:7f:6b:57:75:9e:fc:aa:46:aa:50:18:f5:3c: ea:d9:75:09:68:05:b5:74:be:cc:27:2d:0d:1e:f5: 3f:be:9b:8d:de:b2:79:fe:6f:c7:17:4e:fd:20:48: 44:77:d0:4e:33:3c:17:70:53:2e:4a:c2:f8:f5:65: e7:06:da:2d:c1:17:44:e4:57:ac:5b:c1:be:c8:f4: a2:ac:19:e0:2f:19:39:b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Non Repudiation, Key Encipherment X509v3 Certificate Policies: Policy: 2.16.840.1.101.3.1.48.1 X509v3 Subject Key Identifier: 7F:99:92:8E:E3:61:B3:F8 X509v3 Authority Key Identifier: keyid:E6:8E:40:9B:4F:4D:94:E6 Signature Algorithm: sha1WithRSAEncryption 2b:bc:1d:33:22:e5:21:9f:d0:b2:a8:f7:fc:0d:c6:6a:dd:1d: e4:13:91:b4:54:d9:1f:45:5d:95:55:4e:58:dd:49:09:9c:6b: 9e:37:88:14:1f:76:34:dc:d4:44:e7:a6:c6:00:71:ce:77:ae: 58:d4:a5:62:57:29:4e:4d:b9:a4:06:ec:e9:13:1d:6d:3f:1d: a2:f2:90:91:09:05:d9:35:de:43:ee:2a:92:d1:5a:2d:09:ed: 55:3f:14:b0:4c:c7:47:80:e2:c3:4f:e0:1f:cb:6c:78:6a:85: 17:b1:72:89:6f:27:8b:ac:c8:9d:23:be:7a:66:d4:2a:28:9b: 8f:d2 -----BEGIN CERTIFICATE----- MIIChjCCAe+gAwIBAgIBAzANBgkqhkiG9w0BAQUFADBeMQswCQYDVQQGEwJVUzEY MBYGA1UEChMPVS5TLiBHb3Zlcm5tZW50MQwwCgYDVQQLEwNEb2QxEDAOBgNVBAsT B1Rlc3RpbmcxFTATBgNVBAMTDENBMS1DUC4wMS4wMjAeFw05ODAxMDExMjAxMDBa Fw00ODAxMDExMjAxMDBaMGAxCzAJBgNVBAYTAlVTMRgwFgYDVQQKEw9VLlMuIEdv dmVybm1lbnQxDDAKBgNVBAsTA0RvRDEQMA4GA1UECxMHVGVzdGluZzEXMBUGA1UE AxMOVXNlcjEtQ1AuMDEuMDIwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALwJ rZT6bJXQnZzc3socZ/mNsEag4BTdym99ZCP23PGsTCfV2z7+p4DehIFrn/N/a1d1 nvyqRqpQGPU86tl1CWgFtXS+zCctDR71P76bjd6yef5vxxdO/SBIRHfQTjM8F3BT LkrC+PVl5wbaLcEXRORXrFvBvsj0oqwZ4C8ZObh/AgMBAAGjUjBQMA4GA1UdDwEB /wQEAwIF4DAWBgNVHSAEDzANMAsGCWCGSAFlAwEwATARBgNVHQ4ECgQIf5mSjuNh s/gwEwYDVR0jBAwwCoAI5o5Am09NlOYwDQYJKoZIhvcNAQEFBQADgYEAK7wdMyLl IZ/Qsqj3/A3Gat0d5BORtFTZH0VdlVVOWN1JCZxrnjeIFB92NNzUROemxgBxzneu WNSlYlcpTk25pAbs6RMdbT8dovKQkQkF2TXeQ+4qktFaLQntVT8UsEzHR4Diw0/g H8tseGqFF7FyiW8ni6zInSO+embUKiibj9I= -----END CERTIFICATE----- Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=U.S. Government, OU=DoD, OU=Testing, CN=Trust Anchor Validity Not Before: Jan 1 12:01:00 1998 GMT Not After : Jan 1 12:01:00 2048 GMT Subject: C=US, O=U.S. Government, OU=Dod, OU=Testing, CN=CA1-CP.01.02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): 00:d6:39:9e:21:93:e2:ba:35:7f:e5:f8:e8:87:0b: 8a:5f:28:25:85:b7:e5:cc:da:7f:d3:c7:09:2a:63: e9:ad:8f:d0:a8:ef:ba:cf:3c:fb:55:03:b9:83:29: 4e:0e:89:84:fb:e2:62:16:1f:9d:87:40:16:6b:f8: f4:66:38:58:74:67:d4:b5:a1:3a:4b:6f:13:4b:08: 37:3a:3a:64:0a:06:8e:a2:7b:14:88:b7:f8:ce:6a: d1:45:9b:39:93:67:bf:0a:ab:db:37:9d:fa:ce:54: 0f:37:82:09:8f:0d:33:e4:b8:6e:46:c1:cc:4f:80: 5a:b4:bd:19:80:27:40:84:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Certificate Policies: Policy: 2.16.840.1.101.3.1.48.1 X509v3 Subject Key Identifier: E6:8E:40:9B:4F:4D:94:E6 X509v3 Authority Key Identifier: keyid:AB:9A:EB:F9:C2:E7:54:8F Signature Algorithm: sha1WithRSAEncryption dc:2e:d8:7b:9f:d3:7b:5e:0b:23:0a:3f:2c:ad:9f:9e:9a:1b: 6d:00:37:76:13:a7:e5:48:2a:67:c9:4a:6d:0f:c7:57:50:fc: fd:e5:3d:74:ad:af:e6:05:b8:dd:7b:c5:ab:8c:21:2b:45:8a: 2c:1b:c1:15:c8:4a:b6:9f:53:d5:05:f7:08:8d:96:0a:a7:49: 47:2a:a5:6b:a4:e4:42:c4:b7:e9:3d:7b:ff:0c:36:9f:3c:b5: f3:9d:d8:85:f0:d8:36:c8:1e:e5:75:bc:61:93:5f:36:38:d5: c5:c4:77:46:7c:85:c4:f6:b1:d5:82:25:21:28:86:74:8d:1d: 9d:a8 -----BEGIN CERTIFICATE----- MIIClTCCAf6gAwIBAgIBAjANBgkqhkiG9w0BAQUFADBeMQswCQYDVQQGEwJVUzEY MBYGA1UEChMPVS5TLiBHb3Zlcm5tZW50MQwwCgYDVQQLEwNEb0QxEDAOBgNVBAsT B1Rlc3RpbmcxFTATBgNVBAMTDFRydXN0IEFuY2hvcjAeFw05ODAxMDExMjAxMDBa Fw00ODAxMDExMjAxMDBaMF4xCzAJBgNVBAYTAlVTMRgwFgYDVQQKEw9VLlMuIEdv dmVybm1lbnQxDDAKBgNVBAsTA0RvZDEQMA4GA1UECxMHVGVzdGluZzEVMBMGA1UE AxMMQ0ExLUNQLjAxLjAyMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDWOZ4h k+K6NX/l+OiHC4pfKCWFt+XM2n/TxwkqY+mtj9Co77rPPPtVA7mDKU4OiYT74mIW H52HQBZr+PRmOFh0Z9S1oTpLbxNLCDc6OmQKBo6iexSIt/jOatFFmzmTZ78Kq9s3 nfrOVA83ggmPDTPkuG5GwcxPgFq0vRmAJ0CESQIDAQABo2MwYTAPBgNVHRMBAf8E BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAWBgNVHSAEDzANMAsGCWCGSAFlAwEwATAR BgNVHQ4ECgQI5o5Am09NlOYwEwYDVR0jBAwwCoAIq5rr+cLnVI8wDQYJKoZIhvcN AQEFBQADgYEA3C7Ye5/Te14LIwo/LK2fnpobbQA3dhOn5UgqZ8lKbQ/HV1D8/eU9 dK2v5gW43XvFq4whK0WKLBvBFchKtp9T1QX3CI2WCqdJRyqla6TkQsS36T17/ww2 nzy1853YhfDYNsge5XW8YZNfNjjVxcR3RnyFxPax1YIlISiGdI0dnag= -----END CERTIFICATE----- Certificate: Data: Version: 3 (0x2) Serial Number: 99999 (0x1869f) Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=U.S. Government, OU=DoD, OU=Testing, CN=Trust Anchor Validity Not Before: Jan 1 12:01:00 1999 GMT Not After : Jan 1 12:01:00 2048 GMT Subject: C=US, O=U.S. Government, OU=DoD, OU=Testing, CN=Trust Anchor Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): 00:d3:f3:b9:c1:33:b7:3f:a7:27:f6:41:1d:5c:9c: 79:9d:aa:d2:95:10:b7:84:ce:da:a3:e5:58:0c:3e: 4e:8b:56:bf:3e:aa:21:2d:50:13:fe:f3:19:2e:7a: cb:11:cf:f3:d3:b8:5f:57:9f:9d:97:80:af:1d:95: 57:12:df:34:d4:bd:f3:ae:4d:e7:7c:a6:20:d4:04: 4e:da:63:61:3e:3d:2a:8d:37:cf:c5:3c:c9:f9:fa: f0:39:48:04:78:bd:b0:dd:f5:24:46:33:a1:46:9f: 17:9f:04:bb:cf:37:94:0c:13:43:aa:90:ac:91:78: 1d:ba:f3:18:84:2a:82:2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9A:EB:F9:C2:E7:54:8F X509v3 Basic Constraints: CA:TRUE X509v3 Authority Key Identifier: keyid:AB:9A:EB:F9:C2:E7:54:8F Signature Algorithm: sha1WithRSAEncryption 16:56:0f:61:ac:87:8b:4f:eb:64:12:1b:c3:85:59:4a:68:e1: 3b:a5:21:c1:59:2e:91:ac:68:fe:13:ff:63:6d:ee:55:d4:a0: 82:4c:37:bc:16:8e:a9:26:61:fe:7f:46:fa:38:1f:13:5c:8a: 6a:b7:12:47:98:72:b9:b5:56:80:ee:78:95:18:1a:f4:63:70: 26:39:9b:19:20:84:8d:bb:62:5f:df:2c:a1:3d:fc:1b:d0:3a: bb:d8:cc:1b:36:12:a2:ab:ad:3e:e6:e1:52:b4:75:13:11:ec: 27:95:a6:63:cf:d3:cc:f4:4e:d8:ba:b8:ad:ad:cc:1a:65:a7: 5a:45 -----BEGIN CERTIFICATE----- MIICbDCCAdWgAwIBAgIDAYafMA0GCSqGSIb3DQEBBQUAMF4xCzAJBgNVBAYTAlVT MRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxDDAKBgNVBAsTA0RvRDEQMA4GA1UE CxMHVGVzdGluZzEVMBMGA1UEAxMMVHJ1c3QgQW5jaG9yMB4XDTk5MDEwMTEyMDEw MFoXDTQ4MDEwMTEyMDEwMFowXjELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD1UuUy4g R292ZXJubWVudDEMMAoGA1UECxMDRG9EMRAwDgYDVQQLEwdUZXN0aW5nMRUwEwYD VQQDEwxUcnVzdCBBbmNob3IwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANPz ucEztz+nJ/ZBHVyceZ2q0pUQt4TO2qPlWAw+TotWvz6qIS1QE/7zGS56yxHP89O4 X1efnZeArx2VVxLfNNS9865N53ymINQETtpjYT49Ko03z8U8yfn68DlIBHi9sN31 JEYzoUafF58Eu883lAwTQ6qQrJF4HbrzGIQqgitHAgMBAAGjODA2MBEGA1UdDgQK BAirmuv5wudUjzAMBgNVHRMEBTADAQH/MBMGA1UdIwQMMAqACKua6/nC51SPMA0G CSqGSIb3DQEBBQUAA4GBABZWD2Gsh4tP62QSG8OFWUpo4TulIcFZLpGsaP4T/2Nt 7lXUoIJMN7wWjqkmYf5/Rvo4HxNcimq3EkeYcrm1VoDueJUYGvRjcCY5mxkghI27 Yl/fLKE9/BvQOrvYzBs2EqKrrT7m4VK0dRMR7CeVpmPP08z0Tti6uK2tzBplp1pF -----END CERTIFICATE-----