Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8a:5f:b1:01:c8:f4:45:bd:aa:8c:4e:f9:0c:db:e6:68:45:46:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=NC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:80:14:b9:d2:78:ad:43:c8:51:69:3e:98:
                    7f:bd:a8:57:a3:65:28:19:6d:44:e5:6a:5d:f7:c2:
                    31:ed:4e:66:a9:f1:d2:9d:36:b6:b9:98:3f:d8:54:
                    d2:e9:77:3a:fb:9f:d5:c9:f9:c9:df:5e:b7:da:34:
                    42:f6:cb:e3:66:e0:b7:5a:82:9b:77:20:0f:b1:17:
                    1e:2a:70:62:d2:67:9b:a0:54:f2:1b:a4:9f:06:b7:
                    bb:af:5a:6f:55:b1:7e:f8:20:cb:ed:e4:55:d8:18:
                    cb:4f:0e:c3:c4:5d:13:fc:fd:d7:b1:1c:c5:58:81:
                    cf:e9:56:78:67:78:aa:fe:06:29:9e:34:3e:4b:fe:
                    7e:ec:22:16:15:d6:2b:c3:6e:17:23:42:1b:28:2e:
                    21:13:31:8b:8a:33:23:a2:67:f6:23:bc:f2:68:9b:
                    71:92:92:7f:23:09:53:96:67:3c:fe:c2:81:88:9f:
                    00:55:93:4d:b3:e7:02:01:13:48:4b:34:12:45:6e:
                    48:6a:88:21:33:ff:5a:03:49:56:a2:69:64:97:a4:
                    53:0e:90:73:84:c6:b8:28:b0:5b:c0:67:85:fd:9a:
                    25:f2:cf:0e:79:24:78:20:80:f0:2c:ae:46:8e:c5:
                    cf:29:be:7f:f5:7d:73:6d:aa:0b:10:59:4f:d6:46:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:44:AA:2B:9B:4C:66:4C:20:C5:32:B2:EA:08:13:13:69:17:49:B1
            X509v3 Authority Key Identifier: 
                keyid:FF:8B:FC:A5:69:36:2F:62:3B:D4:1B:ED:58:2F:E9:77:3D:29:81:83

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Name Constraints: critical
                Permitted:
                  DirName:CN = O1

    Signature Algorithm: sha256WithRSAEncryption
         a9:5b:2d:46:7d:9c:58:6d:94:c0:5a:fc:07:bb:8b:c4:54:a1:
         9f:50:25:41:26:1c:d9:be:5c:6d:00:2b:37:46:8d:97:ab:18:
         a3:bf:11:bc:58:f6:6c:03:37:96:3b:a3:3b:66:8a:16:8d:b5:
         eb:c7:e4:c3:2a:e5:3f:ac:e8:78:58:3a:fd:e1:32:cf:b1:24:
         1d:a2:db:7e:ea:aa:4e:3d:92:e2:24:13:ce:17:33:98:0d:b7:
         4f:1d:51:07:89:14:cc:fe:be:7e:1d:8f:35:60:a5:a2:87:42:
         1b:69:10:84:f0:43:c3:c7:ac:5a:70:9f:dc:1b:3d:8b:20:9c:
         1d:65:aa:f3:45:a6:02:36:5e:82:8e:e2:ad:aa:10:11:30:f7:
         d3:cb:b7:60:1c:15:e2:48:26:d6:90:55:b4:ca:95:2f:16:90:
         ad:51:4a:5d:e8:47:e6:4a:ca:32:bb:5e:1d:e9:53:6c:66:5a:
         b7:3a:56:f4:ab:22:a5:88:de:be:3f:76:61:a7:8d:be:ed:00:
         8c:d6:16:6e:9e:77:7d:69:b1:a0:60:7e:ed:4d:26:5a:17:21:
         59:b3:b2:c5:4b:ee:8f:7d:6f:e7:3d:fc:78:5d:f1:30:22:c9:
         f8:6b:e1:f8:51:5a:60:47:a4:7f:4f:62:31:bd:2f:f2:e3:e2:
         d1:6e:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----