Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137808117761 (0x2016010001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=XD, O=dn42, OU=dn42 Certificate Authority, CN=dn42 Root Authority CA
        Validity
            Not Before: Jan 16 00:12:04 2016 GMT
            Not After : Jan 15 00:12:04 2026 GMT
        Subject: C=XD, O=dn42, OU=dn42 Certificate Authority, CN=dn42 Verified TLS
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:c4:72:fa:37:24:5f:9f:ff:16:5f:e7:86:
                    10:5c:20:cb:a1:94:80:cb:45:40:22:23:3f:8b:27:
                    dd:53:82:13:e6:37:0d:e5:c6:f1:a7:3e:1c:41:fd:
                    82:33:c4:45:11:46:ae:71:d5:0d:91:64:ae:26:65:
                    78:f7:15:8d:74:ae:eb:3c:a1:2c:da:08:9e:a1:db:
                    96:ec:eb:e8:42:65:ab:df:95:0d:68:8d:7c:ee:47:
                    a7:36:6e:bd:e2:52:c2:cc:f2:4a:86:80:88:19:3f:
                    64:70:5d:c5:cb:53:32:f9:fe:07:fb:ef:dd:9b:22:
                    53:c0:f4:2a:37:a8:76:ad:4e:c1:1b:4b:a6:86:5d:
                    3b:23:29:f5:14:85:88:36:03:61:31:fa:36:17:b1:
                    64:43:b3:62:6f:54:5b:58:b8:6a:18:44:70:4a:a2:
                    37:bf:16:37:26:ae:ee:b5:11:2f:57:22:97:a4:e0:
                    59:81:81:a9:51:88:ed:28:74:f7:da:08:b4:68:c5:
                    55:29:31:18:0c:68:81:4c:82:ed:f5:45:d5:27:45:
                    43:08:04:25:fb:7b:98:a9:82:e2:2a:4d:62:a8:6b:
                    c4:5b:4a:4e:80:f7:43:f3:ef:c3:40:2f:62:1c:09:
                    66:58:d7:41:c1:ab:44:38:61:b1:23:b1:1f:fb:1a:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                FA:22:4E:A7:3B:26:AE:EE:4D:3A:D1:87:39:3F:13:04:7A:30:C9:C2
            X509v3 Authority Key Identifier: 
                keyid:54:76:88:B2:C0:B5:30:D0:FC:4F:C9:6D:3B:F9:8C:55:11:AC:15:15

            Authority Information Access: 
                CA Issuers - URI:https://ca.dn42/crt/root-ca.crt
                OCSP - URI:http://oscp.ca.dn42

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:https://ca.dn42/crl/root-ca.crl

            X509v3 Name Constraints: 
                Permitted:
                  DNS:.dn42
                  IP:172.20.0.0/255.252.0.0
                  IP:FD42:0:0:0:0:0:0:0/FFFF:0:0:0:0:0:0:0

    Signature Algorithm: sha256WithRSAEncryption
         9e:c0:a4:b1:28:2a:d4:9a:12:b6:da:3c:75:72:42:d4:79:69:
         40:db:9a:86:f3:35:8b:53:3f:cc:31:6a:8d:8a:04:d1:7c:14:
         cb:eb:6d:12:6f:3f:4b:a7:40:67:ea:06:67:b6:83:03:fc:fe:
         b3:ed:74:96:80:cd:03:85:31:36:9c:b4:c7:58:b0:76:ba:b2:
         b5:91:2d:76:66:7a:d1:9b:a3:da:72:3e:0a:f1:20:76:68:a9:
         18:b9:10:97:29:66:d3:6d:d0:40:4f:5b:aa:41:d1:ed:89:5e:
         8f:cb:8c:8b:70:a8:5f:03:e8:ed:13:b2:32:1e:b6:c1:9f:d3:
         0a:1f:e6:fd:a8:fe:aa:1d:41:42:7f:b2:33:5d:10:d8:91:30:
         20:a8:6b:9a:fa:b4:7b:66:bc:de:66:fb:d0:c7:a1:63:e6:f7:
         74:e8:dc:6c:3b:eb:e8:9f:fe:a3:11:cb:dc:08:af:50:84:e5:
         d0:20:dd:ca:15:79:1e:18:21:9f:93:4c:8b:de:da:16:58:31:
         3a:12:04:4a:98:7c:18:7d:95:c4:f5:91:86:c3:f9:53:6f:a7:
         2d:33:6b:71:41:f2:7c:98:04:13:6b:fd:2d:f5:8f:ac:83:58:
         31:1c:d4:c0:e3:4d:87:78:80:11:55:27:0a:4d:a3:95:b5:62:
         ed:84:23:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----