[Created by: ./generate-certs.py]

Root1 cross-signed by Root2, with a newer notBefore date than Root1

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:47:37:3c:b9:4f:bb:12:00:66:59:ff:23:75:4d:4e:db:ec:3b:b0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root2
        Validity
            Not Before: Jan  2 12:00:00 2015 GMT
            Not After : Jan  1 12:00:00 2018 GMT
        Subject: CN=Root1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:1c:75:b4:d9:3c:11:2d:9f:f2:b5:f5:f7:
                    5d:e2:f4:05:7a:5f:54:72:8a:bf:aa:c0:0f:7c:68:
                    cf:0f:dc:50:ae:05:fb:03:4c:18:d7:e8:9b:6c:c3:
                    83:af:a8:95:4a:ec:15:b3:80:23:c9:7c:a9:67:4b:
                    ca:34:6b:71:2f:08:3b:c6:93:be:f5:d7:f1:ba:7b:
                    68:e4:53:25:11:5b:69:92:50:78:d8:79:de:4a:91:
                    b8:a7:53:93:ba:dc:90:3b:2b:57:d5:ae:0d:6e:55:
                    6a:34:5e:81:0c:89:0a:79:3b:ff:d2:2b:e8:01:5c:
                    c9:71:bb:ee:9f:ec:64:41:9f:f0:69:54:01:38:1f:
                    86:61:8f:4f:5c:2c:dd:1c:95:4a:5c:15:45:7d:53:
                    8d:ed:08:e4:dd:1e:49:25:6e:28:64:09:0c:4a:b1:
                    c5:45:44:7b:3b:75:20:39:c9:9e:bb:b0:f4:4f:25:
                    59:2d:ac:9e:52:88:d9:24:a5:27:3f:58:47:17:01:
                    c0:21:97:9f:67:90:f0:d8:37:74:69:98:4d:8d:6c:
                    e1:00:39:53:00:39:23:5d:c1:18:b2:9b:a7:36:fc:
                    84:13:b9:27:e6:fa:33:f1:cf:13:dc:97:1e:39:e3:
                    19:22:51:ad:3b:7d:4a:55:e6:bf:d1:ae:4c:14:fa:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                86:77:D5:7B:44:F7:3E:30:B9:FB:61:E3:20:24:5D:95:D0:6C:81:87
            X509v3 Authority Key Identifier: 
                keyid:1D:72:01:C8:EE:64:3A:DC:AA:28:84:0B:52:D4:11:A4:CC:29:44:15

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root2.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         80:ac:8a:c3:4b:66:3a:07:1b:a1:a1:26:fd:62:13:c2:c9:52:
         3f:0a:49:de:47:46:16:f8:14:e3:30:6b:21:9b:d4:59:63:94:
         63:9b:43:05:b5:20:da:8a:26:a3:f7:6b:b4:a4:27:72:6a:48:
         be:6a:30:f4:ac:64:c6:7d:45:47:28:7f:fc:4d:2f:eb:45:d8:
         7d:92:49:14:5e:61:72:d2:d7:2c:cc:d5:f6:fc:60:41:6c:0a:
         0c:4c:ce:99:f1:b4:15:c5:73:c1:83:cb:66:6f:12:b3:fc:bc:
         9e:2b:32:34:b6:32:f8:49:7e:6a:a4:73:ee:e4:30:0b:12:b6:
         5b:90:a3:23:7d:cf:51:0b:89:4f:cb:f5:f3:23:ee:87:bb:76:
         bd:72:33:88:f0:51:6b:40:77:d4:89:e3:34:dc:00:35:5a:d5:
         ec:c9:01:b3:e9:b1:31:6b:a2:b8:74:30:8a:d6:db:eb:9c:e6:
         31:af:42:46:b9:c0:c0:2d:4b:0d:1a:40:fb:a5:4e:fc:ff:68:
         32:34:2e:88:49:e3:8c:d0:70:48:3b:56:fc:bf:d6:d9:0e:e6:
         36:8d:36:d2:d0:45:e6:33:8b:b0:be:6a:6b:7c:5f:3b:bf:49:
         4f:2a:d5:fe:85:7d:59:15:be:34:0b:90:8f:53:1b:cd:8d:14:
         ee:2a:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----