1 files changed, 170 insertions, 160 deletions
diff --git a/chromium/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem b/chromium/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
index 34c777c0e4d..398314c8b06 100644
--- a/chromium/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
+++ b/chromium/net/data/verify_certificate_chain_unittest/target-has-pathlen-but-not-ca.pem
@@ -1,6 +1,6 @@
-[Created by: ./generate-target-has-pathlen-but-not-ca.py]
+[Created by: generate-target-has-pathlen-but-not-ca.py]
 
-Certificate chain with 1 intermediary, a trusted root, and a target
+Certificate chain with 1 intermediate, a trusted root, and a target
 certificate that is not a CA, and yet has a pathlen set. Verification is
 expected to fail, since pathlen should only be set for CAs.
 
@@ -9,7 +9,7 @@ Certificate:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
-        Issuer: CN=Intermediary
+        Issuer: CN=Intermediate
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
@@ -18,82 +18,82 @@ Certificate:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:e4:03:84:57:5e:99:af:4e:fe:20:15:48:81:f8:
-                    76:01:11:a3:33:b0:2e:ff:3d:ec:69:be:76:8d:9b:
-                    c6:9b:5d:cb:b1:a6:eb:84:60:8e:99:fd:31:c1:66:
-                    9f:bb:3d:bb:16:e0:c8:d8:f5:cd:23:10:8a:c5:96:
-                    e7:df:ed:96:d9:76:eb:82:23:e2:8c:7d:00:a9:71:
-                    ff:71:df:2e:14:b4:ab:3e:29:e8:11:c2:44:75:f9:
-                    9f:e9:cd:cf:2f:0c:db:7b:47:b2:80:c1:90:45:a8:
-                    01:6d:26:88:ff:3b:d8:54:7b:cd:ff:dc:aa:bd:38:
-                    49:b0:02:d8:80:e2:79:07:33:5a:74:cd:ce:8e:df:
-                    75:33:41:e7:5e:fb:25:c0:45:fb:48:32:78:47:1a:
-                    70:03:d6:56:66:32:6e:2d:35:6b:76:8c:a6:33:4c:
-                    1d:60:91:10:5f:70:f3:13:ec:b4:03:4f:cf:99:f9:
-                    8e:e8:99:85:23:0b:cc:3d:17:5b:ec:df:aa:eb:8a:
-                    a7:52:67:10:dd:66:c5:b2:95:9f:72:2b:4e:fa:19:
-                    31:99:62:d7:60:fd:9d:9e:e0:ca:29:13:ec:e3:c6:
-                    af:47:e0:84:73:ab:3b:2d:58:f5:d8:d1:0c:ee:f6:
-                    23:b1:5c:55:1e:33:40:87:84:f9:d8:8a:ac:ac:46:
-                    ed:93
+                    00:ca:73:f9:c5:cb:c6:2c:26:07:85:8f:4b:a4:ac:
+                    52:18:84:42:ca:cb:34:59:92:5a:d8:f7:1f:df:51:
+                    ed:6a:d5:e2:e1:dc:06:fb:72:0d:f3:e7:9f:38:0d:
+                    46:f4:19:77:31:33:4c:5b:ac:dd:6c:8c:06:68:4c:
+                    48:84:e2:c7:17:28:a9:0b:4e:07:07:b6:7b:cc:a9:
+                    ef:6c:ae:22:6e:03:d6:d4:5b:f1:d9:aa:9e:61:54:
+                    c7:14:79:cb:d6:c2:8f:da:87:e8:ae:d2:b3:66:4f:
+                    d3:4c:56:b8:e0:80:f8:45:b7:11:35:53:ec:d4:49:
+                    f8:05:70:f3:5b:56:b2:05:6d:3e:46:f8:be:67:71:
+                    48:a6:65:dd:55:62:a3:23:b0:94:e1:f2:3b:17:54:
+                    40:cc:37:90:d9:78:5a:d8:29:99:3f:02:16:a8:5b:
+                    5e:64:f4:f2:84:ad:25:c6:cf:2c:5b:e7:6c:bf:88:
+                    63:0c:8a:9b:fb:d9:b1:30:5a:21:74:1f:e4:5a:54:
+                    23:3a:a1:02:34:97:2c:a2:af:08:05:f0:db:52:58:
+                    7f:86:80:12:a3:f9:78:c0:ad:d6:8b:12:53:72:55:
+                    24:ca:3e:70:f2:7f:78:8f:b7:a1:32:f1:2c:7f:23:
+                    db:7b:ce:79:cf:cc:6d:d8:f7:14:54:5c:e0:db:7d:
+                    60:b3
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                3F:B5:B3:28:77:02:A4:B0:9D:4B:DE:37:42:2E:E6:59:0A:D8:38:84
+                99:D8:C1:91:A6:13:EB:0F:B4:6F:F2:B0:C4:0C:D9:0A:25:8E:53:10
             X509v3 Authority Key Identifier: 
-                keyid:77:62:DF:59:FD:79:52:7B:9A:CF:99:3C:7C:BD:87:CE:41:27:57:F6
+                keyid:5B:9F:DF:D5:C6:FF:4F:39:52:EA:EF:97:5B:C1:ED:E1:CC:44:4E:B6
 
             Authority Information Access: 
-                CA Issuers - URI:http://url-for-aia/Intermediary.cer
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
-                  URI:http://url-for-crl/Intermediary.crl
+                  URI:http://url-for-crl/Intermediate.crl
 
             X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment, Certificate Sign
+                Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
             X509v3 Basic Constraints: critical
                 CA:FALSE, pathlen:1
     Signature Algorithm: sha256WithRSAEncryption
-         0f:6a:84:9e:41:23:9d:77:90:68:4b:93:39:8e:74:cc:f5:3f:
-         0a:1c:8f:d9:45:bc:5d:42:d1:23:11:e6:a6:2f:52:58:23:5f:
-         ba:ef:a2:3a:c7:3e:bd:24:a3:47:d3:5a:f7:00:37:0d:a4:c8:
-         cd:ee:92:73:67:4c:d0:3f:63:08:c4:90:a8:42:5f:0e:cb:1e:
-         96:ae:c7:16:5f:4d:69:e4:3c:8c:a9:47:7e:ad:aa:52:dd:b3:
-         77:d8:f6:bf:f3:e3:c5:46:ec:c3:21:af:52:62:76:e5:99:0a:
-         ba:a2:1c:54:62:8f:3f:0b:b8:c1:9e:e3:6e:50:4e:36:17:d0:
-         ee:e1:a2:2e:29:c0:1e:a3:94:a3:69:1f:4d:13:50:4c:44:5c:
-         0f:c3:80:94:3f:6f:60:02:98:da:4f:3a:40:e4:ee:01:af:f1:
-         b3:7b:4a:2e:3a:57:3b:8e:9c:8a:0c:3e:4c:49:e2:22:09:ef:
-         dc:ea:fc:e2:04:20:5c:8e:a5:82:a9:0e:83:b3:ef:cc:09:ff:
-         a9:bc:fa:47:0f:61:3f:7f:d6:df:ec:57:b2:da:16:70:42:8e:
-         68:28:f5:4d:cb:fb:85:16:e4:78:3b:5e:8a:96:f0:73:d6:f7:
-         b0:ce:4d:18:6a:b9:1b:99:33:01:15:ce:90:c2:13:8e:14:e6:
-         0e:32:84:28
+         70:43:96:4c:98:6f:28:18:8a:59:39:82:cc:24:47:f8:58:f8:
+         f8:43:04:09:1e:a6:51:59:bc:60:36:ff:a1:41:51:e1:4c:40:
+         6b:5e:8b:73:3c:c4:37:65:f4:b0:57:01:8f:c6:ba:0c:5b:97:
+         a1:6b:3a:ea:53:79:8f:9a:99:f8:ca:01:a5:15:ac:60:4c:a7:
+         a7:68:07:72:3c:ed:06:70:d8:a4:d0:c0:5f:88:f2:6a:c0:a1:
+         2b:e7:58:68:23:d3:7e:f0:98:99:7d:3d:91:25:e3:84:4f:ef:
+         55:a4:ee:f7:1f:dc:f2:af:a8:74:96:6c:26:c4:d8:b6:84:dc:
+         b7:e7:7d:9d:2b:7b:3b:e6:e4:ad:76:e0:aa:ea:a4:26:97:4b:
+         20:cd:b1:bd:a8:6e:b3:08:47:31:a2:01:7b:b5:6c:72:d0:f0:
+         12:ac:bd:4f:be:de:23:cb:34:14:d2:11:42:3f:d5:70:76:4c:
+         99:db:ce:bc:0e:d5:2e:4b:6f:c3:1b:5d:c6:58:89:74:5f:1d:
+         62:cf:df:1e:4c:13:08:88:cb:66:6f:00:c2:c5:6f:bb:b4:9e:
+         1f:8a:7d:9d:0b:a6:11:6f:28:bb:5e:46:ab:71:d4:eb:00:8c:
+         71:6b:32:85:3d:17:ca:d0:15:90:66:7a:b2:96:0c:c1:9d:2e:
+         53:36:97:5b
 -----BEGIN CERTIFICATE-----
 MIIDnjCCAoagAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhcnkwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkA4RX
-XpmvTv4gFUiB+HYBEaMzsC7/PexpvnaNm8abXcuxpuuEYI6Z/THBZp+7PbsW4MjY
-9c0jEIrFluff7ZbZduuCI+KMfQCpcf9x3y4UtKs+KegRwkR1+Z/pzc8vDNt7R7KA
-wZBFqAFtJoj/O9hUe83/3Kq9OEmwAtiA4nkHM1p0zc6O33UzQede+yXARftIMnhH
-GnAD1lZmMm4tNWt2jKYzTB1gkRBfcPMT7LQDT8+Z+Y7omYUjC8w9F1vs36rriqdS
-ZxDdZsWylZ9yK076GTGZYtdg/Z2e4MopE+zjxq9H4IRzqzstWPXY0Qzu9iOxXFUe
-M0CHhPnYiqysRu2TAgMBAAGjgfowgfcwHQYDVR0OBBYEFD+1syh3AqSwnUveN0Iu
-5lkK2DiEMB8GA1UdIwQYMBaAFHdi31n9eVJ7ms+ZPHy9h85BJ1f2MD8GCCsGAQUF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 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWFyeS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWFyeS5jcmwwDgYDVR0PAQH/BAQDAgKkMB0GA1UdJQQWMBQGCCsGAQUF
+aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
+dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
 BwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAgEBMA0GCSqGSIb3DQEBCwUAA4IB
-AQAPaoSeQSOdd5BoS5M5jnTM9T8KHI/ZRbxdQtEjEeamL1JYI1+676I6xz69JKNH
-01r3ADcNpMjN7pJzZ0zQP2MIxJCoQl8Oyx6WrscWX01p5DyMqUd+rapS3bN32Pa/
-8+PFRuzDIa9SYnblmQq6ohxUYo8/C7jBnuNuUE42F9Du4aIuKcAeo5SjaR9NE1BM
-RFwPw4CUP29gApjaTzpA5O4Br/Gze0ouOlc7jpyKDD5MSeIiCe/c6vziBCBcjqWC
-qQ6Ds+/MCf+pvPpHD2E/f9bf7Fey2hZwQo5oKPVNy/uFFuR4O16KlvBz1vewzk0Y
-arkbmTMBFc6QwhOOFOYOMoQo
+AQBwQ5ZMmG8oGIpZOYLMJEf4WPj4QwQJHqZRWbxgNv+hQVHhTEBrXotzPMQ3ZfSw
+VwGPxroMW5ehazrqU3mPmpn4ygGlFaxgTKenaAdyPO0GcNik0MBfiPJqwKEr51ho
+I9N+8JiZfT2RJeOET+9VpO73H9zyr6h0lmwmxNi2hNy3532dK3s75uStduCq6qQm
+l0sgzbG9qG6zCEcxogF7tWxy0PASrL1Pvt4jyzQU0hFCP9VwdkyZ2868DtUuS2/D
+G13GWIl0Xx1iz98eTBMIiMtmbwDCxW+7tJ4fin2dC6YRbyi7XkarcdTrAIxxazKF
+PRfK0BWQZnqylgzBnS5TNpdb
 -----END CERTIFICATE-----
 
 Certificate:
@@ -105,35 +105,35 @@ Certificate:
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
-        Subject: CN=Intermediary
+        Subject: CN=Intermediate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:cd:be:5e:d6:3b:af:1c:51:0b:b8:31:41:16:86:
-                    a1:04:5b:d4:c3:d1:e8:16:12:b0:7a:f8:d4:b6:61:
-                    9b:5a:51:bb:7d:a5:e6:cf:70:48:1d:4e:21:74:de:
-                    f8:de:c7:8d:b2:e1:b5:a0:b9:4a:7c:76:b1:24:e6:
-                    6d:7b:17:79:28:99:85:44:d5:9c:c7:b3:7c:64:fd:
-                    3a:97:76:94:88:aa:dc:eb:c3:6e:ab:43:42:d2:89:
-                    b3:cb:56:dc:89:f6:4c:65:e0:be:1e:72:01:c7:c6:
-                    50:e6:5b:df:a2:de:4f:43:9d:3d:e8:c8:25:2e:50:
-                    1b:61:0e:2c:45:22:f0:93:7b:d6:05:9f:a4:23:fb:
-                    78:b1:15:49:fe:eb:73:29:b0:eb:9f:e8:6e:3b:92:
-                    86:c0:d0:20:e7:4c:b7:69:7f:d3:0f:54:39:05:3a:
-                    46:9b:47:4d:fa:7e:8c:ce:45:a5:1f:2c:6f:f7:33:
-                    36:10:bc:67:d9:b6:15:86:71:5f:7a:7a:af:4e:71:
-                    59:1d:46:d1:76:96:d8:4b:fc:a0:b9:11:e4:5f:5d:
-                    fe:f4:bf:c8:48:54:66:60:be:4b:8b:70:4a:33:e0:
-                    ea:02:7a:cd:a1:37:3d:67:ad:93:f3:d0:a5:9e:f2:
-                    a4:ff:18:3e:77:97:d2:2c:58:12:a5:d6:55:03:6d:
-                    a1:cb
+                    00:c8:43:a7:fe:04:ff:78:d4:be:60:bd:16:7d:46:
+                    a2:cf:a8:74:42:6b:2b:49:13:61:2e:78:e7:7c:49:
+                    52:0b:df:bf:b0:e1:5e:dd:f5:39:99:11:ff:d2:14:
+                    8f:db:de:10:55:90:29:05:b3:49:db:80:87:d1:82:
+                    6b:15:97:4b:da:5e:d7:da:11:0c:84:1e:db:d9:57:
+                    4d:52:cf:31:a0:1f:bd:4f:79:22:7a:ee:5a:ae:9d:
+                    22:df:71:d3:20:12:e5:c8:7e:1e:76:d3:6f:07:6e:
+                    5c:c3:89:11:a2:35:50:05:4d:6f:30:d8:3c:ef:38:
+                    80:51:e3:ee:7d:66:81:7f:7c:c4:e7:d0:d4:53:1d:
+                    00:3d:03:cb:87:f4:3d:b9:13:cd:16:ef:b2:51:3f:
+                    1c:96:0a:71:90:ca:25:c4:10:71:aa:ba:27:c8:67:
+                    94:af:63:7c:29:2a:2e:a8:4e:03:7e:6c:5c:2f:96:
+                    8d:9d:ca:c5:6f:f1:e7:8d:92:a9:ed:aa:87:3a:74:
+                    12:c7:ea:3f:ad:a2:6a:76:d8:f6:c9:96:27:6e:8b:
+                    a3:b8:cc:d4:2b:9b:61:be:2b:11:c5:bb:da:ef:14:
+                    23:5d:5d:96:69:c0:a7:7a:16:db:3a:4e:e4:22:84:
+                    55:02:26:7b:a5:8e:84:12:e4:36:fc:c5:07:d9:ee:
+                    c5:19
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                77:62:DF:59:FD:79:52:7B:9A:CF:99:3C:7C:BD:87:CE:41:27:57:F6
+                5B:9F:DF:D5:C6:FF:4F:39:52:EA:EF:97:5B:C1:ED:E1:CC:44:4E:B6
             X509v3 Authority Key Identifier: 
-                keyid:AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+                keyid:8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
@@ -148,41 +148,41 @@ Certificate:
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         4f:dc:80:b5:cb:13:5d:2d:af:b6:6d:7b:51:4e:81:36:16:d1:
-         36:bb:5d:37:be:6e:4d:40:87:57:5e:db:a9:75:ae:46:e4:74:
-         c4:dc:e5:fd:bc:04:2f:ca:7f:b4:67:db:65:f7:d6:37:94:74:
-         a4:f9:8a:e2:da:d5:64:9e:00:4d:85:39:07:6f:e0:96:d7:2b:
-         ef:73:d3:a4:77:6b:e1:ee:d4:f7:54:ba:30:23:a3:95:2c:c8:
-         38:21:0c:14:fb:f4:44:27:9a:f3:81:2f:89:59:3e:12:52:52:
-         bf:4e:7c:93:7c:db:b7:df:9b:fb:b6:3c:70:fc:67:07:a6:42:
-         99:6d:95:c0:64:f8:99:50:aa:2f:b6:19:d8:63:80:0f:22:c3:
-         b4:d6:b0:09:9b:62:a0:37:0e:21:e5:ef:c2:61:ed:7e:2f:f5:
-         7d:09:19:f4:6f:8a:c8:7a:0e:0a:44:41:9b:22:01:d4:7c:c9:
-         a8:da:d5:91:d9:a6:1f:1f:b8:4a:6a:bd:bc:7e:36:33:7a:e0:
-         9c:58:c1:75:71:9f:14:04:ce:c9:1f:e6:dc:40:95:ee:ed:b3:
-         6c:77:5c:31:9a:90:bd:99:80:ab:8f:ef:8d:a6:e0:64:ba:16:
-         03:a2:21:5d:75:bd:d9:50:7f:d2:02:44:58:9e:b5:c2:1d:37:
-         50:8f:27:21
+         14:37:73:58:3c:37:40:b3:ff:a3:e4:f3:2d:f1:26:6b:c9:82:
+         17:c5:97:4d:bd:84:6a:19:25:08:20:a9:7d:38:fb:3d:a4:7f:
+         06:80:7e:fb:6e:7e:bf:26:90:4b:96:ab:a7:f9:49:a5:d6:77:
+         67:b5:ab:bb:ad:ea:84:5a:43:13:f9:b3:1a:80:b1:59:cc:d4:
+         1d:33:e8:0d:b0:af:9a:80:44:0e:a6:01:f3:a4:e2:87:2b:db:
+         47:be:0f:28:08:d9:ab:7c:d9:4c:86:d0:ba:bc:1b:dc:99:9b:
+         33:ea:a7:3e:ef:52:b8:70:a8:27:e7:83:59:cd:57:38:7f:a1:
+         36:53:4f:a0:1b:69:7d:e4:fa:9f:2b:52:50:09:23:62:c6:c0:
+         01:a6:85:76:45:80:6a:b6:54:bd:60:5d:5a:3a:04:92:ab:e3:
+         bd:0c:94:7f:5f:79:9c:3f:6e:12:c3:96:b0:78:44:9b:03:1e:
+         79:11:fb:8d:a5:1d:55:c9:b3:e5:a0:26:18:10:68:92:b8:54:
+         68:d0:2d:e1:99:0c:08:9c:cc:40:50:34:69:9f:13:e6:d7:87:
+         85:e7:57:63:3e:17:0f:ce:02:7b:78:e5:18:ef:1a:55:b1:6a:
+         55:f8:44:3e:92:1d:08:a1:7d:bb:fc:00:be:e3:1b:83:aa:b8:
+         75:f0:05:45
 -----BEGIN CERTIFICATE-----
 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb5e1juv
-HFELuDFBFoahBFvUw9HoFhKwevjUtmGbWlG7faXmz3BIHU4hdN743seNsuG1oLlK
-fHaxJOZtexd5KJmFRNWcx7N8ZP06l3aUiKrc68Nuq0NC0omzy1bcifZMZeC+HnIB
-x8ZQ5lvfot5PQ5096MglLlAbYQ4sRSLwk3vWBZ+kI/t4sRVJ/utzKbDrn+huO5KG
-wNAg50y3aX/TD1Q5BTpGm0dN+n6MzkWlHyxv9zM2ELxn2bYVhnFfenqvTnFZHUbR
-dpbYS/yguRHkX13+9L/ISFRmYL5Li3BKM+DqAnrNoTc9Z62T89ClnvKk/xg+d5fS
-LFgSpdZVA22hywIDAQABo4HLMIHIMB0GA1UdDgQWBBR3Yt9Z/XlSe5rPmTx8vYfO
-QSdX9jAfBgNVHSMEGDAWgBSqFrz5fq30cdbUlNlhSwE4spWLhDA3BggrBgEFBQcB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 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AE/cgLXLE10tr7Zte1FOgTYW0Ta7XTe+bk1Ah1de26l1rkbkdMTc5f28BC/Kf7Rn
-22X31jeUdKT5iuLa1WSeAE2FOQdv4JbXK+9z06R3a+Hu1PdUujAjo5UsyDghDBT7
-9EQnmvOBL4lZPhJSUr9OfJN827ffm/u2PHD8ZwemQpltlcBk+JlQqi+2GdhjgA8i
-w7TWsAmbYqA3DiHl78Jh7X4v9X0JGfRvish6DgpEQZsiAdR8yaja1ZHZph8fuEpq
-vbx+NjN64JxYwXVxnxQEzskf5txAle7ts2x3XDGakL2ZgKuP742m4GS6FgOiIV11
-vdlQf9ICRFietcIdN1CPJyE=
+ABQ3c1g8N0Cz/6Pk8y3xJmvJghfFl029hGoZJQggqX04+z2kfwaAfvtufr8mkEuW
+q6f5SaXWd2e1q7ut6oRaQxP5sxqAsVnM1B0z6A2wr5qARA6mAfOk4ocr20e+DygI
+2at82UyG0Lq8G9yZmzPqpz7vUrhwqCfng1nNVzh/oTZTT6AbaX3k+p8rUlAJI2LG
+wAGmhXZFgGq2VL1gXVo6BJKr470MlH9feZw/bhLDlrB4RJsDHnkR+42lHVXJs+Wg
+JhgQaJK4VGjQLeGZDAiczEBQNGmfE+bXh4XnV2M+Fw/OAnt45RjvGlWxalX4RD6S
+HQihfbv8AL7jG4OquHXwBUU=
 -----END CERTIFICATE-----
 
 Certificate:
@@ -199,30 +199,30 @@ Certificate:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:eb:e2:5f:c7:d4:38:fe:e8:6d:64:82:8e:c6:d8:
-                    d7:a5:a4:ca:65:5f:55:b6:c5:5c:9c:f6:cc:af:d6:
-                    4b:ec:a1:5c:c3:55:08:19:1c:0e:99:4a:4d:b2:14:
-                    22:36:a0:db:eb:c3:1c:6f:d6:05:69:a5:5b:61:59:
-                    7a:fb:88:da:28:1d:95:c6:fe:31:51:06:ac:f7:41:
-                    a6:10:08:25:7f:41:f1:01:39:48:27:c1:34:73:2f:
-                    c2:05:b1:97:42:80:de:d4:3a:44:db:a0:34:8c:b8:
-                    5c:de:ab:42:c8:1e:f1:08:7e:10:3a:ee:16:8e:61:
-                    ee:ab:aa:f5:7a:2b:ab:af:a2:69:da:f4:b5:95:32:
-                    17:bc:cf:ba:ad:a7:7b:fc:ea:9b:43:bc:ae:07:c3:
-                    92:15:ce:4a:fb:ee:33:e6:89:7d:09:88:f9:a5:af:
-                    0b:4d:c1:7f:28:30:d8:93:75:92:b5:27:2c:01:bd:
-                    52:05:5d:42:a5:dc:f3:1f:1e:b2:3c:a1:17:19:9b:
-                    30:ec:18:85:41:e3:72:d2:93:ef:a0:4d:0b:d4:8a:
-                    fa:89:0d:b6:46:fe:bc:f0:82:de:99:4c:1e:57:1c:
-                    8d:71:b3:9c:41:ea:03:8f:a1:d6:f2:a4:9d:1c:b8:
-                    50:c8:c0:19:6a:18:4d:c0:7f:7d:f8:b3:af:c6:62:
-                    09:9b
+                    00:d3:fa:b1:7f:2b:e4:ff:ad:10:e9:54:54:ef:6a:
+                    81:02:0b:b6:83:70:89:ae:d9:4d:54:ea:95:99:88:
+                    3d:59:7d:97:1e:fd:b9:9b:53:8b:14:1e:a4:68:07:
+                    ed:68:65:68:7d:4f:ba:28:38:ff:87:33:98:2c:32:
+                    d0:e5:00:78:0f:6a:20:32:7d:9e:7d:9b:af:e9:39:
+                    fe:5c:bc:04:1c:06:1a:11:1a:46:24:34:f7:e3:af:
+                    56:6d:38:8f:46:39:a6:01:fa:56:f9:d7:9e:73:35:
+                    1a:23:94:12:0f:0d:d3:ec:fe:09:57:f6:a0:9c:18:
+                    a7:ba:4b:c9:37:a3:0c:60:77:4b:77:5f:c8:9c:7e:
+                    b1:5c:b3:43:72:da:c9:6c:c8:71:24:ab:2f:c4:83:
+                    bd:b0:4f:60:af:46:0d:7b:34:8f:e9:70:a2:85:ed:
+                    6e:05:df:e3:c1:40:3d:17:b1:f0:a3:7d:e2:17:6f:
+                    3d:fe:11:81:90:1f:c2:f8:bc:2c:d5:9c:fc:04:47:
+                    24:c4:5e:cf:20:0f:31:e8:7d:ea:b5:69:b8:0f:35:
+                    19:5d:13:08:db:d6:a2:dc:7a:33:92:b3:9c:fc:35:
+                    de:cf:55:96:f7:52:6e:a9:e2:93:b0:52:07:8d:0f:
+                    95:9c:0e:0d:1b:48:0e:b8:41:4f:eb:68:da:e5:6d:
+                    a1:63
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+                8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
             X509v3 Authority Key Identifier: 
-                keyid:AA:16:BC:F9:7E:AD:F4:71:D6:D4:94:D9:61:4B:01:38:B2:95:8B:84
+                keyid:8A:85:CE:7E:DC:AF:15:B7:01:C2:5C:81:3F:3D:14:49:D2:38:08:AB
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
@@ -237,47 +237,57 @@ Certificate:
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         07:d5:33:48:84:04:40:42:f1:f2:ff:d9:07:5e:5f:bf:d9:72:
-         07:6f:a9:6a:f1:5f:f3:59:69:99:41:cd:9d:37:65:cb:2e:c8:
-         06:f3:0a:0c:da:46:28:6d:d6:06:08:20:5b:ca:ed:c9:14:6e:
-         11:5a:9f:df:33:06:67:44:e7:63:ba:b2:42:53:2e:31:0b:ce:
-         ef:c1:74:60:76:96:0b:3f:da:9b:f2:a1:d1:89:99:34:f0:f9:
-         ae:8c:39:fd:3d:a6:be:7f:f5:82:f0:25:62:b0:b7:b4:bc:1b:
-         51:c3:60:05:af:bc:22:b9:62:49:c0:27:12:72:c2:ac:d9:1e:
-         17:ff:e7:57:f6:b2:f8:37:dd:76:1a:dc:e0:89:4f:b3:8a:74:
-         0b:76:5f:48:fc:6c:af:6d:42:85:25:b4:44:ca:27:ed:2e:fb:
-         d8:df:1a:a1:82:bd:6c:25:35:62:cb:50:db:27:9e:b2:65:cc:
-         58:fa:fd:1e:6a:2a:77:cd:3f:b4:6b:e6:71:ec:85:f5:7b:73:
-         a9:73:05:78:1f:26:21:dc:8b:a4:f5:e1:06:a6:97:13:9f:5f:
-         84:03:12:59:37:81:17:21:2d:39:db:b7:b0:f4:17:73:90:7c:
-         a1:2f:53:c0:4a:af:53:54:2c:5b:9c:8a:e3:66:80:40:30:96:
-         e3:d8:b2:23
------BEGIN TRUSTED_CERTIFICATE-----
+         3b:f2:cd:03:ef:d9:61:67:ea:7b:dd:e9:88:13:07:8d:94:51:
+         62:bb:56:d6:c1:be:8a:d0:a0:81:fe:1d:90:6d:85:94:2c:ac:
+         33:fb:5d:f6:c9:74:72:7b:f7:5a:b8:e4:b6:dd:30:bb:93:3b:
+         74:22:e9:fe:e9:5c:b2:8b:d4:a1:21:0c:e6:3c:ee:86:ae:9e:
+         8a:fd:88:bb:a7:fd:20:bb:9c:ff:d4:ca:6f:66:60:19:14:d1:
+         d1:f2:d6:f3:b2:58:c8:4d:15:30:e1:e0:fc:40:ad:55:25:ba:
+         8d:25:68:26:c4:64:68:7e:94:e6:f4:96:5a:c4:e6:ba:85:5b:
+         b2:32:d1:82:32:8b:f4:3f:6f:4e:d5:de:2e:d7:09:3c:1f:7e:
+         93:3a:22:d8:ef:40:41:47:28:80:03:77:0d:f9:51:28:28:b6:
+         53:24:66:f7:3b:56:6c:53:58:55:b2:49:7c:c4:1a:3d:a1:37:
+         29:19:8a:9a:99:84:7f:63:ac:21:85:f5:02:5a:5a:1c:7c:0a:
+         8b:bc:83:ff:80:57:2e:ce:62:c5:79:58:24:12:e8:af:a4:6c:
+         ce:a8:92:2b:25:c4:e3:b6:27:f7:d5:dd:e6:fa:cc:91:6c:59:
+         5e:f5:a4:e2:4f:0b:18:fa:4e:9c:88:66:20:25:af:87:14:01:
+         27:08:89:6a
+-----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOviX8fUOP7obWSCjsbY
-16WkymVfVbbFXJz2zK/WS+yhXMNVCBkcDplKTbIUIjag2+vDHG/WBWmlW2FZevuI
-2igdlcb+MVEGrPdBphAIJX9B8QE5SCfBNHMvwgWxl0KA3tQ6RNugNIy4XN6rQsge
-8Qh+EDruFo5h7quq9Xorq6+iadr0tZUyF7zPuq2ne/zqm0O8rgfDkhXOSvvuM+aJ
-fQmI+aWvC03Bfygw2JN1krUnLAG9UgVdQqXc8x8esjyhFxmbMOwYhUHjctKT76BN
-C9SK+okNtkb+vPCC3plMHlccjXGznEHqA4+h1vKknRy4UMjAGWoYTcB/ffizr8Zi
-CZsCAwEAAaOByzCByDAdBgNVHQ4EFgQUqha8+X6t9HHW1JTZYUsBOLKVi4QwHwYD
-VR0jBBgwFoAUqha8+X6t9HHW1JTZYUsBOLKVi4QwNwYIKwYBBQUHAQEEKzApMCcG
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANP6sX8r5P+tEOlUVO9q
+gQILtoNwia7ZTVTqlZmIPVl9lx79uZtTixQepGgH7WhlaH1Puig4/4czmCwy0OUA
+eA9qIDJ9nn2br+k5/ly8BBwGGhEaRiQ09+OvVm04j0Y5pgH6VvnXnnM1GiOUEg8N
+0+z+CVf2oJwYp7pLyTejDGB3S3dfyJx+sVyzQ3LayWzIcSSrL8SDvbBPYK9GDXs0
+j+lwooXtbgXf48FAPRex8KN94hdvPf4RgZAfwvi8LNWc/ARHJMRezyAPMeh96rVp
+uA81GV0TCNvWotx6M5KznPw13s9VlvdSbqnik7BSB40PlZwODRtIDrhBT+to2uVt
+oWMCAwEAAaOByzCByDAdBgNVHQ4EFgQUioXOftyvFbcBwlyBPz0USdI4CKswHwYD
+VR0jBBgwFoAUioXOftyvFbcBwlyBPz0USdI4CKswNwYIKwYBBQUHAQEEKzApMCcG
 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAH1TNIhARA
-QvHy/9kHXl+/2XIHb6lq8V/zWWmZQc2dN2XLLsgG8woM2kYobdYGCCBbyu3JFG4R
-Wp/fMwZnROdjurJCUy4xC87vwXRgdpYLP9qb8qHRiZk08PmujDn9Paa+f/WC8CVi
-sLe0vBtRw2AFr7wiuWJJwCcScsKs2R4X/+dX9rL4N912GtzgiU+zinQLdl9I/Gyv
-bUKFJbREyiftLvvY3xqhgr1sJTViy1DbJ56yZcxY+v0eaip3zT+0a+Zx7IX1e3Op
-cwV4HyYh3Iuk9eEGppcTn1+EAxJZN4EXIS0527ew9BdzkHyhL1PASq9TVCxbnIrj
-ZoBAMJbj2LIj
------END TRUSTED_CERTIFICATE-----
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA78s0D79lh
+Z+p73emIEweNlFFiu1bWwb6K0KCB/h2QbYWULKwz+132yXRye/dauOS23TC7kzt0
+Iun+6Vyyi9ShIQzmPO6Grp6K/Yi7p/0gu5z/1MpvZmAZFNHR8tbzsljITRUw4eD8
+QK1VJbqNJWgmxGRofpTm9JZaxOa6hVuyMtGCMov0P29O1d4u1wk8H36TOiLY70BB
+RyiAA3cN+VEoKLZTJGb3O1ZsU1hVskl8xBo9oTcpGYqamYR/Y6whhfUCWlocfAqL
+vIP/gFcuzmLFeVgkEuivpGzOqJIrJcTjtif31d3m+syRbFle9aTiTwsY+k6ciGYg
+Ja+HFAEnCIlq
+-----END TRUST_ANCHOR_UNCONSTRAINED-----
 
+150302120000Z
 -----BEGIN TIME-----
 MTUwMzAyMTIwMDAwWg==
 -----END TIME-----
 
+FAIL
 -----BEGIN VERIFY_RESULT-----
 RkFJTA==
 -----END VERIFY_RESULT-----
+
+[Context] Processing Certificate
+  index: 1
+      [Error] Target certificate looks like a CA but does not set all CA properties
+
+-----BEGIN ERRORS-----
+W0NvbnRleHRdIFByb2Nlc3NpbmcgQ2VydGlmaWNhdGUKICBpbmRleDogMQogICAgICBbRXJyb3JdIFRhcmdldCBjZXJ0aWZpY2F0ZSBsb29rcyBsaWtlIGEgQ0EgYnV0IGRvZXMgbm90IHNldCBhbGwgQ0EgcHJvcGVydGllcwo=
+-----END ERRORS-----