Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8a:5f:b1:01:c8:f4:45:bd:aa:8c:4e:f9:0c:db:e6:68:45:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: O=O1, CN=Leaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ef:91:eb:bb:0f:0d:aa:35:93:6d:ed:c4:67:bd:
                    0f:d3:5e:d0:da:8c:7a:83:30:e5:92:af:fa:2a:84:
                    66:97:f1:2d:93:96:40:49:b2:6a:b8:c3:8c:ea:21:
                    8b:c5:6a:d9:91:e9:05:6c:e2:2e:48:56:84:33:ef:
                    a4:1f:e2:32:ec:d1:9a:61:56:e4:66:1f:f5:ef:51:
                    09:a1:85:e6:cf:d5:ce:2e:64:a1:02:a9:bf:50:7e:
                    a0:ac:fc:6a:71:6a:61:4b:08:03:34:a6:5c:0a:29:
                    03:a7:23:4c:1e:90:15:ae:cb:97:ad:47:1b:18:8a:
                    c4:71:3b:a6:f4:34:ff:d4:a2:54:67:c2:ed:67:85:
                    29:e8:de:4a:41:d2:49:57:e9:18:43:ec:d9:17:47:
                    f4:71:68:fe:5c:ac:8f:55:12:dd:80:60:8f:b6:e6:
                    da:34:fa:fb:52:57:17:ad:49:26:76:5a:f0:c0:7a:
                    0a:a3:05:ca:74:68:fa:99:77:ca:59:98:28:0b:2b:
                    76:1c:51:0e:1c:d1:d3:4b:06:5e:03:f7:b6:d6:3c:
                    a0:bc:73:ec:e0:75:ae:04:3f:af:24:57:6a:ad:7e:
                    75:65:98:73:8d:9c:14:86:17:d0:27:5f:eb:3b:8d:
                    f3:28:9f:49:e4:2a:18:fb:a5:52:4e:97:46:d1:95:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                54:7C:D9:94:2E:53:89:05:22:9C:6D:7C:CB:79:32:C4:33:1D:89:67
            X509v3 Authority Key Identifier: 
                keyid:FF:8B:FC:A5:69:36:2F:62:3B:D4:1B:ED:58:2F:E9:77:3D:29:81:83

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         33:f5:86:f8:b0:c8:ec:2c:8c:aa:d9:db:40:da:27:a3:c3:45:
         bc:7b:b2:a8:50:1e:a9:b6:dd:78:62:4c:17:36:90:f1:6b:1b:
         f2:d8:c2:59:02:e5:27:5f:3c:dc:6c:7c:95:3a:ce:0a:ec:ea:
         39:2c:e1:3e:31:e4:f9:16:39:3c:7a:12:a1:64:1f:f0:d7:14:
         fd:c0:a2:90:db:98:ec:2f:66:15:26:63:a3:87:a6:63:58:7a:
         a8:ae:df:e0:43:48:92:2c:64:b4:6a:ae:bf:5f:a5:54:9e:79:
         60:73:d2:ca:3c:8c:23:2c:96:ac:8c:d6:21:ce:37:9b:26:05:
         f7:82:58:2c:48:1c:18:b0:b9:c7:50:fe:32:24:50:6d:04:8a:
         9b:da:5b:ea:29:64:2f:6d:07:d4:51:0b:e4:1f:e9:60:5f:2d:
         ba:23:92:a2:61:92:de:9e:20:a5:a9:6a:dc:ac:ea:86:8a:4d:
         d2:15:6b:26:f2:af:bc:ce:ed:ef:9d:32:6a:e4:c4:4f:34:98:
         e7:b2:13:ae:98:01:9e:a6:14:52:ba:b3:f7:99:fd:6a:ad:88:
         65:d8:83:e4:72:76:4a:2b:df:1f:de:90:f2:97:68:9f:7c:31:
         c4:5e:60:03:5e:27:01:ac:94:17:a3:e5:d7:02:20:e1:19:3d:
         1b:fa:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----