Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8a:5f:b1:01:c8:f4:45:bd:aa:8c:4e:f9:0c:db:e6:68:45:46:80
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: O=O1, CN=Leaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:91:eb:bb:0f:0d:aa:35:93:6d:ed:c4:67:bd:
                    0f:d3:5e:d0:da:8c:7a:83:30:e5:92:af:fa:2a:84:
                    66:97:f1:2d:93:96:40:49:b2:6a:b8:c3:8c:ea:21:
                    8b:c5:6a:d9:91:e9:05:6c:e2:2e:48:56:84:33:ef:
                    a4:1f:e2:32:ec:d1:9a:61:56:e4:66:1f:f5:ef:51:
                    09:a1:85:e6:cf:d5:ce:2e:64:a1:02:a9:bf:50:7e:
                    a0:ac:fc:6a:71:6a:61:4b:08:03:34:a6:5c:0a:29:
                    03:a7:23:4c:1e:90:15:ae:cb:97:ad:47:1b:18:8a:
                    c4:71:3b:a6:f4:34:ff:d4:a2:54:67:c2:ed:67:85:
                    29:e8:de:4a:41:d2:49:57:e9:18:43:ec:d9:17:47:
                    f4:71:68:fe:5c:ac:8f:55:12:dd:80:60:8f:b6:e6:
                    da:34:fa:fb:52:57:17:ad:49:26:76:5a:f0:c0:7a:
                    0a:a3:05:ca:74:68:fa:99:77:ca:59:98:28:0b:2b:
                    76:1c:51:0e:1c:d1:d3:4b:06:5e:03:f7:b6:d6:3c:
                    a0:bc:73:ec:e0:75:ae:04:3f:af:24:57:6a:ad:7e:
                    75:65:98:73:8d:9c:14:86:17:d0:27:5f:eb:3b:8d:
                    f3:28:9f:49:e4:2a:18:fb:a5:52:4e:97:46:d1:95:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                54:7C:D9:94:2E:53:89:05:22:9C:6D:7C:CB:79:32:C4:33:1D:89:67
            X509v3 Authority Key Identifier: 
                keyid:FF:8B:FC:A5:69:36:2F:62:3B:D4:1B:ED:58:2F:E9:77:3D:29:81:83

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         17:06:2f:3e:ee:55:d5:18:41:51:b1:27:18:a6:40:ec:9a:4c:
         75:5d:b6:ed:53:21:2a:d2:2a:c1:33:4a:63:90:21:49:e4:57:
         ba:a4:f9:25:6a:4d:c1:55:8c:74:c6:02:bb:a5:69:3f:a6:6e:
         26:29:00:8c:2a:ba:53:6e:61:26:61:32:6a:60:60:b0:97:84:
         73:3b:37:9e:1d:03:ff:45:e5:5d:b0:49:dd:eb:aa:db:e9:e4:
         c4:ea:89:df:d5:c5:b4:2b:fa:8f:b4:8c:2d:ed:fb:1a:d6:f4:
         db:35:ea:e3:1d:13:9b:87:3a:9f:23:5a:e8:5e:01:a0:ab:5f:
         7f:45:aa:20:ea:cd:97:11:a2:fa:7f:9f:ce:ae:ad:d8:01:f6:
         1c:4d:c8:42:b8:7f:ad:60:de:be:e7:23:51:f0:ef:98:88:23:
         3a:c5:fc:5c:d4:17:1c:83:d8:0f:7a:1c:9d:c1:6d:11:8f:1c:
         92:1a:96:61:4a:45:9f:7f:8f:21:79:14:5e:00:f6:83:f5:8f:
         2d:73:e9:83:c1:ab:60:da:7e:4d:3c:69:ab:4a:e1:16:22:4b:
         90:56:82:27:b8:b8:1a:fa:d0:84:f6:97:33:cb:20:05:15:3c:
         dc:02:a5:bb:c4:91:d5:79:42:47:71:e9:a5:4f:82:53:94:42:
         fb:08:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----