Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8a:5f:b1:01:c8:f4:45:bd:aa:8c:4e:f9:0c:db:e6:68:45:46:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=NC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:80:14:b9:d2:78:ad:43:c8:51:69:3e:98:
                    7f:bd:a8:57:a3:65:28:19:6d:44:e5:6a:5d:f7:c2:
                    31:ed:4e:66:a9:f1:d2:9d:36:b6:b9:98:3f:d8:54:
                    d2:e9:77:3a:fb:9f:d5:c9:f9:c9:df:5e:b7:da:34:
                    42:f6:cb:e3:66:e0:b7:5a:82:9b:77:20:0f:b1:17:
                    1e:2a:70:62:d2:67:9b:a0:54:f2:1b:a4:9f:06:b7:
                    bb:af:5a:6f:55:b1:7e:f8:20:cb:ed:e4:55:d8:18:
                    cb:4f:0e:c3:c4:5d:13:fc:fd:d7:b1:1c:c5:58:81:
                    cf:e9:56:78:67:78:aa:fe:06:29:9e:34:3e:4b:fe:
                    7e:ec:22:16:15:d6:2b:c3:6e:17:23:42:1b:28:2e:
                    21:13:31:8b:8a:33:23:a2:67:f6:23:bc:f2:68:9b:
                    71:92:92:7f:23:09:53:96:67:3c:fe:c2:81:88:9f:
                    00:55:93:4d:b3:e7:02:01:13:48:4b:34:12:45:6e:
                    48:6a:88:21:33:ff:5a:03:49:56:a2:69:64:97:a4:
                    53:0e:90:73:84:c6:b8:28:b0:5b:c0:67:85:fd:9a:
                    25:f2:cf:0e:79:24:78:20:80:f0:2c:ae:46:8e:c5:
                    cf:29:be:7f:f5:7d:73:6d:aa:0b:10:59:4f:d6:46:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:44:AA:2B:9B:4C:66:4C:20:C5:32:B2:EA:08:13:13:69:17:49:B1
            X509v3 Authority Key Identifier: 
                keyid:FF:8B:FC:A5:69:36:2F:62:3B:D4:1B:ED:58:2F:E9:77:3D:29:81:83

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Name Constraints: critical
                Excluded:
                  DirName:O = O1

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:cd:e8:bb:c1:c0:ee:b7:09:40:3b:64:c8:a5:c1:f5:b0:
         ed:91:fe:c6:e3:76:81:de:96:3f:f7:4d:33:67:98:9f:6e:8f:
         d4:e0:af:39:be:ea:0b:d5:02:d6:27:a5:a4:3c:92:6c:d9:41:
         e9:5d:1a:91:82:46:13:05:f8:2f:e4:f3:3a:0b:cd:22:05:da:
         73:b0:a6:2e:2c:1f:d9:39:83:55:6c:a3:8a:9b:e3:4a:3d:8b:
         74:22:cf:fa:38:20:60:d1:2c:e1:df:08:0e:ab:21:aa:b4:27:
         34:74:5b:7b:88:ee:0b:2b:85:33:f9:d3:34:8d:a3:da:07:1d:
         ca:cd:fa:40:b0:e0:23:57:27:c7:eb:df:9f:b3:bb:d3:91:82:
         aa:fd:fc:60:34:24:b5:e5:77:11:66:88:8f:53:65:48:81:c2:
         08:b7:9f:d4:05:5a:1b:b2:b0:70:0e:ec:23:dd:3b:07:96:5e:
         27:07:75:92:48:33:03:30:8a:97:16:3c:06:de:5d:fd:80:b2:
         81:36:ee:24:b1:5f:03:d4:ff:d1:a3:8b:ad:ed:63:2a:a6:3b:
         8a:e5:db:f1:44:b6:58:d3:14:61:db:3b:cc:03:2b:29:d1:f2:
         0f:91:b7:75:e8:d1:e5:d1:35:58:2a:37:b1:80:08:0c:9c:4c:
         0b:51:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----