Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8a:5f:b1:01:c8:f4:45:bd:aa:8c:4e:f9:0c:db:e6:68:45:46:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=NC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:80:14:b9:d2:78:ad:43:c8:51:69:3e:98:
                    7f:bd:a8:57:a3:65:28:19:6d:44:e5:6a:5d:f7:c2:
                    31:ed:4e:66:a9:f1:d2:9d:36:b6:b9:98:3f:d8:54:
                    d2:e9:77:3a:fb:9f:d5:c9:f9:c9:df:5e:b7:da:34:
                    42:f6:cb:e3:66:e0:b7:5a:82:9b:77:20:0f:b1:17:
                    1e:2a:70:62:d2:67:9b:a0:54:f2:1b:a4:9f:06:b7:
                    bb:af:5a:6f:55:b1:7e:f8:20:cb:ed:e4:55:d8:18:
                    cb:4f:0e:c3:c4:5d:13:fc:fd:d7:b1:1c:c5:58:81:
                    cf:e9:56:78:67:78:aa:fe:06:29:9e:34:3e:4b:fe:
                    7e:ec:22:16:15:d6:2b:c3:6e:17:23:42:1b:28:2e:
                    21:13:31:8b:8a:33:23:a2:67:f6:23:bc:f2:68:9b:
                    71:92:92:7f:23:09:53:96:67:3c:fe:c2:81:88:9f:
                    00:55:93:4d:b3:e7:02:01:13:48:4b:34:12:45:6e:
                    48:6a:88:21:33:ff:5a:03:49:56:a2:69:64:97:a4:
                    53:0e:90:73:84:c6:b8:28:b0:5b:c0:67:85:fd:9a:
                    25:f2:cf:0e:79:24:78:20:80:f0:2c:ae:46:8e:c5:
                    cf:29:be:7f:f5:7d:73:6d:aa:0b:10:59:4f:d6:46:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:44:AA:2B:9B:4C:66:4C:20:C5:32:B2:EA:08:13:13:69:17:49:B1
            X509v3 Authority Key Identifier: 
                keyid:FF:8B:FC:A5:69:36:2F:62:3B:D4:1B:ED:58:2F:E9:77:3D:29:81:83

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Name Constraints: critical
                Permitted:
                  DNS:test.invalid

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:65:56:9d:b1:a7:43:8a:21:13:58:87:fd:8d:ad:19:80:
         61:19:34:8d:6b:8e:3f:e7:b1:d7:83:c1:55:be:89:bf:13:c9:
         ee:44:b7:be:78:2a:d2:5d:47:7c:a7:b3:be:38:01:f7:55:51:
         f6:ca:25:20:44:f7:1b:57:a0:2b:a7:53:ac:89:8e:ea:b2:f0:
         e6:e6:d5:0c:21:e6:6f:61:7a:2a:6d:b1:53:82:9f:40:a2:2c:
         80:13:df:00:c0:73:4d:a4:f7:21:08:d8:f9:c1:cc:31:fe:ec:
         fe:c2:ee:45:91:9c:fa:09:df:87:97:a2:8f:f1:6c:7c:87:4b:
         c7:fa:16:de:f6:10:c9:27:11:70:f3:d1:97:6e:ed:d9:98:2c:
         a8:68:67:f0:0d:7c:af:10:5d:0c:3c:25:d3:cb:d2:fb:f1:67:
         80:a1:a1:fd:ea:3b:9a:21:dd:68:67:85:90:44:8c:2b:84:e5:
         c8:4f:93:d7:c1:1e:da:6b:68:59:6e:87:90:e0:b7:a8:11:a7:
         9e:15:9c:cf:b5:02:e2:ae:94:42:32:d1:71:36:72:61:fd:6b:
         f7:82:dc:5c:3e:6b:b5:71:0a:34:b7:4a:c9:d6:cb:84:cd:f6:
         66:e5:6f:77:0d:9d:5b:3a:73:8e:2e:c8:99:d7:9c:f7:03:34:
         19:79:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----