Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8a:5f:b1:01:c8:f4:45:bd:aa:8c:4e:f9:0c:db:e6:68:45:46:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: O=O1, O=O2, CN=Leaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ef:91:eb:bb:0f:0d:aa:35:93:6d:ed:c4:67:bd:
                    0f:d3:5e:d0:da:8c:7a:83:30:e5:92:af:fa:2a:84:
                    66:97:f1:2d:93:96:40:49:b2:6a:b8:c3:8c:ea:21:
                    8b:c5:6a:d9:91:e9:05:6c:e2:2e:48:56:84:33:ef:
                    a4:1f:e2:32:ec:d1:9a:61:56:e4:66:1f:f5:ef:51:
                    09:a1:85:e6:cf:d5:ce:2e:64:a1:02:a9:bf:50:7e:
                    a0:ac:fc:6a:71:6a:61:4b:08:03:34:a6:5c:0a:29:
                    03:a7:23:4c:1e:90:15:ae:cb:97:ad:47:1b:18:8a:
                    c4:71:3b:a6:f4:34:ff:d4:a2:54:67:c2:ed:67:85:
                    29:e8:de:4a:41:d2:49:57:e9:18:43:ec:d9:17:47:
                    f4:71:68:fe:5c:ac:8f:55:12:dd:80:60:8f:b6:e6:
                    da:34:fa:fb:52:57:17:ad:49:26:76:5a:f0:c0:7a:
                    0a:a3:05:ca:74:68:fa:99:77:ca:59:98:28:0b:2b:
                    76:1c:51:0e:1c:d1:d3:4b:06:5e:03:f7:b6:d6:3c:
                    a0:bc:73:ec:e0:75:ae:04:3f:af:24:57:6a:ad:7e:
                    75:65:98:73:8d:9c:14:86:17:d0:27:5f:eb:3b:8d:
                    f3:28:9f:49:e4:2a:18:fb:a5:52:4e:97:46:d1:95:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                54:7C:D9:94:2E:53:89:05:22:9C:6D:7C:CB:79:32:C4:33:1D:89:67
            X509v3 Authority Key Identifier: 
                keyid:FF:8B:FC:A5:69:36:2F:62:3B:D4:1B:ED:58:2F:E9:77:3D:29:81:83

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         a7:09:5a:7a:b9:21:6f:87:3d:db:2b:ce:fc:fa:9e:85:1d:18:
         99:a1:19:a6:4d:30:1b:d9:ae:23:17:ca:9b:c5:60:93:b2:8a:
         d8:5a:55:28:48:63:d3:de:ce:5d:be:1a:eb:fe:19:1b:10:62:
         53:06:ef:7b:3c:59:84:4e:de:ba:b5:0b:8c:cf:34:24:64:5e:
         bb:93:8a:2c:54:62:5b:22:38:6e:ab:b3:fb:22:3d:8a:0a:f7:
         5b:7a:16:ef:6d:d8:82:c0:da:3f:77:4f:53:2a:45:ca:9a:dc:
         a5:03:75:80:f9:2c:c4:6c:c7:c6:a1:6f:06:ab:13:c6:f7:e4:
         82:05:95:04:2e:81:68:e7:97:c1:b5:08:ef:f3:01:a4:4d:39:
         a3:c1:df:a1:23:42:0c:2b:93:55:1a:89:fa:4e:35:3b:77:b9:
         1a:b9:28:f0:05:fc:41:47:60:bd:09:63:76:61:60:31:57:18:
         23:d8:79:31:0a:d2:9a:02:44:6f:8d:45:b0:04:b5:db:0b:b7:
         df:50:85:d4:dd:78:02:55:8c:a8:87:79:75:f2:95:44:a5:a9:
         d5:2e:91:78:b5:fc:bf:d6:28:8e:01:c7:3d:ad:4b:4c:03:b7:
         1f:7f:d6:f0:15:c2:01:bb:87:17:79:dc:8a:67:c1:06:21:70:
         04:d1:e1:46
-----BEGIN CERTIFICATE-----
MIIDoDCCAoigAwIBAgIUFopfsQHI9EW9qoxO+Qzb5mhFRn8wDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMCkxCzAJBgNVBAoMAk8xMQswCQYDVQQKDAJPMjENMAsGA1UEAwwETGVhZjCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO+R67sPDao1k23txGe9D9Ne
0NqMeoMw5ZKv+iqEZpfxLZOWQEmyarjDjOohi8Vq2ZHpBWziLkhWhDPvpB/iMuzR
mmFW5GYf9e9RCaGF5s/Vzi5koQKpv1B+oKz8anFqYUsIAzSmXAopA6cjTB6QFa7L
l61HGxiKxHE7pvQ0/9SiVGfC7WeFKejeSkHSSVfpGEPs2RdH9HFo/lysj1US3YBg
j7bm2jT6+1JXF61JJnZa8MB6CqMFynRo+pl3ylmYKAsrdhxRDhzR00sGXgP3ttY8
oLxz7OB1rgQ/ryRXaq1+dWWYc42cFIYX0Cdf6zuN8yifSeQqGPulUk6XRtGVb5cC
AwEAAaOB2TCB1jAdBgNVHQ4EFgQUVHzZlC5TiQUinG18y3kyxDMdiWcwHwYDVR0j
BBgwFoAU/4v8pWk2L2I71BvtWC/pdz0pgYMwNwYIKwYBBQUHAQEEKzApMCcGCCsG
AQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAh
oB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD
ggEBAKcJWnq5IW+HPdsrzvz6noUdGJmhGaZNMBvZriMXypvFYJOyithaVShIY9Pe
zl2+Guv+GRsQYlMG73s8WYRO3rq1C4zPNCRkXruTiixUYlsiOG6rs/siPYoK91t6
Fu9t2ILA2j93T1MqRcqa3KUDdYD5LMRsx8ahbwarE8b35IIFlQQugWjnl8G1CO/z
AaRNOaPB36EjQgwrk1UaifpONTt3uRq5KPAF/EFHYL0JY3ZhYDFXGCPYeTEK0poC
RG+NRbAEtdsLt99QhdTdeAJVjKiHeXXylUSlqdUukXi1/L/WKI4Bxz2tS0wDtx9/
1vAVwgG7hxd53IpnwQYhcATR4UY=
-----END CERTIFICATE-----