[Created by: ./generate-certs.py]

Intermediate with matching subjectKeyIdentifier and notBefore A

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cd:8e:76:ab:60:d4:bd:ab:bb:10:92:c3:00:e7:42:21:18:0e:36
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Jan  1 12:00:00 2015 GMT
            Not After : Jan  1 12:00:00 2018 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d0:27:bf:09:20:d9:b7:33:f4:81:16:0f:cb:
                    3b:48:7a:22:c0:13:61:5c:d8:aa:7c:7e:bf:e1:c5:
                    bc:72:ad:d0:6a:5d:c4:58:9a:3c:ac:84:20:d8:69:
                    a2:c3:94:0d:9b:33:60:04:c5:64:76:56:52:e7:7f:
                    ee:f4:66:33:89:2a:59:4d:62:5c:1d:ee:bd:3e:d3:
                    a0:35:fd:58:b0:db:9f:ea:69:18:75:94:f2:b9:1e:
                    65:32:28:54:b5:72:1c:fa:47:da:32:8d:8a:45:5b:
                    48:0e:ab:1a:f7:9f:b4:47:b1:c2:1b:bf:22:37:8d:
                    e0:84:10:ec:91:5d:9f:31:29:be:94:5a:77:d1:de:
                    52:df:48:59:77:02:c9:93:59:90:73:79:cf:c6:d1:
                    b6:7f:01:1a:2b:2d:cc:b8:fd:ba:72:b8:52:5c:75:
                    15:7e:33:bd:dc:c7:e6:fb:ca:a2:b4:ab:ca:cc:db:
                    a0:23:f4:ea:7d:76:91:b3:ea:63:2a:df:b1:96:36:
                    ed:c2:9e:91:9f:db:45:b3:34:75:d9:41:4d:4f:1f:
                    c0:ef:02:6b:35:4c:19:a7:ec:f1:38:a9:67:85:6b:
                    06:26:22:89:9b:37:05:d1:d2:f9:45:0b:60:d5:7e:
                    5d:c2:98:a3:9d:96:57:be:4d:f0:9c:f0:71:b2:3b:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E8:21:00:1D:6B:A1:AB:30:01:FB:6E:A8:8D:FA:B9:69:48:C2:89:1F
            X509v3 Authority Key Identifier: 
                keyid:EE:72:D7:3C:89:7F:07:DD:6B:92:25:09:8C:AC:48:9F:03:BA:09:0A

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         a5:7b:64:8d:cf:66:45:51:ee:f8:89:56:70:33:53:15:c9:16:
         95:d4:2f:78:c5:83:d7:ff:b0:8e:a0:bf:59:cd:87:7b:80:6a:
         b9:59:26:e6:a5:7d:0b:5d:ac:2b:90:01:f8:27:57:21:82:9a:
         6e:5b:9e:b6:23:f3:3a:34:de:a9:4e:85:cf:37:5f:fc:b4:6b:
         ad:74:37:21:54:ae:b6:76:cf:04:e5:cf:e0:87:d6:33:14:f3:
         80:46:ec:f5:fa:9b:f0:2b:c5:2a:80:7b:fe:68:fe:a3:1f:cb:
         53:80:f1:a5:98:e7:02:e8:1d:97:03:5c:40:eb:fb:18:f7:f2:
         0d:b2:cc:c5:82:b4:47:4a:78:82:6f:af:4a:5d:5e:eb:ce:f6:
         c9:16:cd:9a:ac:3e:09:24:81:e8:d7:0a:3c:af:dd:90:3c:b2:
         8d:e1:a9:e8:d4:50:af:e4:47:c0:5a:f2:47:c7:1d:80:3c:83:
         b3:b1:10:e9:1f:ff:e1:5b:ce:53:26:73:9b:df:f1:96:a7:bc:
         a2:a8:48:59:fa:fc:8e:19:8f:f2:4e:8d:9d:e0:a9:83:fd:b6:
         54:b6:48:89:27:97:ed:6f:43:a3:f9:79:6e:58:e7:b9:61:5e:
         c9:dd:9b:77:f4:9e:61:ac:c3:f1:7d:c0:88:e6:0b:16:3a:a7:
         81:8a:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----