Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8a:5f:b1:01:c8:f4:45:bd:aa:8c:4e:f9:0c:db:e6:68:45:46:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=NC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:80:14:b9:d2:78:ad:43:c8:51:69:3e:98:
                    7f:bd:a8:57:a3:65:28:19:6d:44:e5:6a:5d:f7:c2:
                    31:ed:4e:66:a9:f1:d2:9d:36:b6:b9:98:3f:d8:54:
                    d2:e9:77:3a:fb:9f:d5:c9:f9:c9:df:5e:b7:da:34:
                    42:f6:cb:e3:66:e0:b7:5a:82:9b:77:20:0f:b1:17:
                    1e:2a:70:62:d2:67:9b:a0:54:f2:1b:a4:9f:06:b7:
                    bb:af:5a:6f:55:b1:7e:f8:20:cb:ed:e4:55:d8:18:
                    cb:4f:0e:c3:c4:5d:13:fc:fd:d7:b1:1c:c5:58:81:
                    cf:e9:56:78:67:78:aa:fe:06:29:9e:34:3e:4b:fe:
                    7e:ec:22:16:15:d6:2b:c3:6e:17:23:42:1b:28:2e:
                    21:13:31:8b:8a:33:23:a2:67:f6:23:bc:f2:68:9b:
                    71:92:92:7f:23:09:53:96:67:3c:fe:c2:81:88:9f:
                    00:55:93:4d:b3:e7:02:01:13:48:4b:34:12:45:6e:
                    48:6a:88:21:33:ff:5a:03:49:56:a2:69:64:97:a4:
                    53:0e:90:73:84:c6:b8:28:b0:5b:c0:67:85:fd:9a:
                    25:f2:cf:0e:79:24:78:20:80:f0:2c:ae:46:8e:c5:
                    cf:29:be:7f:f5:7d:73:6d:aa:0b:10:59:4f:d6:46:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:44:AA:2B:9B:4C:66:4C:20:C5:32:B2:EA:08:13:13:69:17:49:B1
            X509v3 Authority Key Identifier: 
                keyid:FF:8B:FC:A5:69:36:2F:62:3B:D4:1B:ED:58:2F:E9:77:3D:29:81:83

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Name Constraints: critical
                Permitted:
                  DirName:O = O1

    Signature Algorithm: sha256WithRSAEncryption
         0d:7c:dc:54:0a:af:86:bd:3c:0b:ef:86:de:22:61:cb:dc:29:
         20:74:04:45:e8:28:5b:2e:19:6b:cd:4a:58:7e:ff:17:81:0d:
         84:fc:ca:b4:d2:89:89:33:24:79:d3:c2:2d:ee:c3:a9:6d:9b:
         15:59:05:f2:88:2e:87:03:7b:c1:ac:5d:be:a7:01:78:d0:90:
         de:41:d4:f4:c9:d9:c2:71:9d:99:cf:d3:85:c8:c2:28:48:73:
         29:2c:d8:f4:3f:39:75:78:61:b6:28:03:f2:73:6d:3f:c7:5c:
         08:b4:0c:56:65:38:0c:1a:25:b4:af:8c:fb:f8:3c:a1:3b:bd:
         c9:a2:46:89:22:70:ee:22:c2:6a:38:d9:01:5d:4b:fb:de:f2:
         21:91:b6:8b:0d:3a:64:ab:8e:22:f0:17:fa:b6:55:dd:0e:44:
         62:1e:b1:92:7a:62:f5:4e:31:7e:19:05:4a:f4:33:86:49:b2:
         7f:32:5a:84:2a:da:b2:34:ba:3e:6b:ca:14:6e:85:39:d9:a8:
         96:71:30:63:de:ea:17:a3:9a:01:d8:5b:e6:6d:2c:8e:92:ce:
         c9:d7:00:31:d9:66:06:73:e2:5c:76:68:1e:6b:89:ac:e9:e7:
         1d:18:1c:0e:8f:b9:d7:0a:7e:19:77:82:01:e9:b4:28:ac:72:
         d0:c7:2e:17
-----BEGIN CERTIFICATE-----
MIIDmjCCAoKgAwIBAgIUFopfsQHI9EW9qoxO+Qzb5mhFRngwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMA4xDDAKBgNVBAMMA05DMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANWsgBS50nitQ8hRaT6Yf72oV6NlKBltROVqXffCMe1OZqnx0p02trmYP9hU
0ul3Ovuf1cn5yd9et9o0QvbL42bgt1qCm3cgD7EXHipwYtJnm6BU8huknwa3u69a
b1Wxfvggy+3kVdgYy08Ow8RdE/z917EcxViBz+lWeGd4qv4GKZ40Pkv+fuwiFhXW
K8NuFyNCGyguIRMxi4ozI6Jn9iO88mibcZKSfyMJU5ZnPP7CgYifAFWTTbPnAgET
SEs0EkVuSGqIITP/WgNJVqJpZJekUw6Qc4TGuCiwW8Bnhf2aJfLPDnkkeCCA8Cyu
Ro7Fzym+f/V9c22qCxBZT9ZG8b8CAwEAAaOB7jCB6zAdBgNVHQ4EFgQUnUSqK5tM
ZkwgxTKy6ggTE2kXSbEwHwYDVR0jBBgwFoAU/4v8pWk2L2I71BvtWC/pdz0pgYMw
NwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEv
Um9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jv
b3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MCEGA1UdHgEB
/wQXMBWgEzARpA8wDTELMAkGA1UECgwCTzEwDQYJKoZIhvcNAQELBQADggEBAA18
3FQKr4a9PAvvht4iYcvcKSB0BEXoKFsuGWvNSlh+/xeBDYT8yrTSiYkzJHnTwi3u
w6ltmxVZBfKILocDe8GsXb6nAXjQkN5B1PTJ2cJxnZnP04XIwihIcyks2PQ/OXV4
YbYoA/JzbT/HXAi0DFZlOAwaJbSvjPv4PKE7vcmiRokicO4iwmo42QFdS/ve8iGR
tosNOmSrjiLwF/q2Vd0ORGIesZJ6YvVOMX4ZBUr0M4ZJsn8yWoQq2rI0uj5ryhRu
hTnZqJZxMGPe6hejmgHYW+ZtLI6SzsnXADHZZgZz4lx2aB5riazp5x0YHA6PudcK
fhl3ggHptCisctDHLhc=
-----END CERTIFICATE-----