root@deployment-certcentral03:/etc/certcentral# openssl x509 -noout -text -in live_certs/testingdns.rsa-2048.crt 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fa:57:02:40:19:44:9e:93:f1:26:3c:7d:df:9f:85:a2:27:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Fake LE Intermediate X1
        Validity
            Not Before: Sep 10 23:58:38 2018 GMT
            Not After : Dec  9 23:58:38 2018 GMT
        Subject: CN = publictestlabs.alexmonk.uk
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:84:92:eb:cb:57:d3:ed:d8:3f:58:2a:4b:
                    2f:39:e9:90:d3:0f:cc:97:99:d8:22:eb:1e:61:5c:
                    12:4f:d8:63:34:c4:68:bb:f7:02:26:e4:9f:ab:f9:
                    6c:4a:db:65:82:a7:61:41:88:28:b2:0c:7d:6b:a5:
                    f8:38:c5:0d:87:b0:ab:b3:45:e4:e8:a8:a7:6d:47:
                    9e:75:22:7e:4f:94:83:16:bc:ea:ba:bb:ac:5f:62:
                    50:2d:fb:29:1f:67:0c:c3:3f:15:4c:4f:be:9a:40:
                    ad:28:87:9c:2c:1a:77:09:51:e7:a0:a8:4b:51:8a:
                    50:4a:a6:8a:e1:15:ec:08:2c:ae:a5:ed:26:eb:96:
                    a8:32:48:1c:08:8a:7a:e8:7d:00:8a:a0:f8:f6:9d:
                    d9:34:d2:79:71:87:ee:6b:b6:d1:c6:4a:98:05:68:
                    e9:82:ee:52:ec:93:63:df:88:43:a6:ff:37:3c:be:
                    63:ba:a1:10:5f:e5:cd:95:5c:e5:9b:4d:bc:ba:77:
                    a0:d1:a8:7d:a5:e4:77:e5:06:02:7a:0c:39:0a:64:
                    42:6b:fe:04:00:4b:63:5d:e9:fa:5d:31:a0:bb:fc:
                    01:ac:d9:bc:d8:90:36:de:e7:82:21:be:ec:4d:99:
                    07:ef:04:25:71:de:7d:04:0a:07:67:c3:5a:53:37:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                E7:17:8A:E3:92:16:F7:27:50:17:87:29:AA:64:4A:F6:C5:CC:D9:75
            X509v3 Authority Key Identifier: 
                keyid:C0:CC:03:46:B9:58:20:CC:5C:72:70:F3:E1:2E:CB:20:A6:F5:68:3A

            Authority Information Access: 
                OCSP - URI:http://ocsp.stg-int-x1.letsencrypt.org
                CA Issuers - URI:http://cert.stg-int-x1.letsencrypt.org/

            X509v3 Subject Alternative Name: 
                DNS:*.publictestlabs.alexmonk.uk, DNS:publictestlabs.alexmonk.uk
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org
                  User Notice:
                    Explicit Text: This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/

            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 28:76:1A:18:90:27:FB:EF:3C:D0:D6:1A:01:8D:76:B0:
                                50:57:29:C7:A7:41:1B:CC:BD:F6:04:F4:5D:42:61:53
                    Timestamp : Sep 11 00:58:38.463 2018 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3E:09:B8:C0:52:E7:D0:40:D6:A7:9D:E7:
                                0E:91:25:A9:B4:FF:51:50:BE:59:7F:4E:1C:4E:01:A7:
                                B1:0C:F3:13:02:21:00:EA:07:F2:7A:31:4B:8A:B4:63:
                                65:03:93:9B:A9:90:C8:9D:81:BE:6D:01:7C:32:87:06:
                                C2:8B:E9:53:34:72:5F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : B0:CC:83:E5:A5:F9:7D:6B:AF:7C:09:CC:28:49:04:87:
                                2A:C7:E8:8B:13:2C:63:50:B7:C6:FD:26:E1:6C:6C:77
                    Timestamp : Sep 11 00:58:38.506 2018 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:99:43:0A:21:80:B9:98:69:A9:19:ED:
                                CA:CC:5F:85:A7:FE:87:3E:E7:2E:43:85:44:5F:FF:36:
                                86:DA:6E:14:12:02:20:36:F4:8E:FB:B4:37:A8:73:35:
                                12:C2:42:EA:CB:5F:48:32:23:FF:94:9D:8C:C4:26:B3:
                                A7:CE:67:FD:38:AA:C3
    Signature Algorithm: sha256WithRSAEncryption
         60:4b:99:ce:46:4c:5a:1a:83:a5:c7:e2:c8:62:2e:41:74:27:
         f9:b7:85:66:f0:a0:62:f2:82:0f:78:e3:55:3f:15:d5:97:02:
         42:c9:56:b1:6c:2d:cb:4f:f2:07:ca:da:a4:11:b1:64:98:96:
         19:65:1c:9a:18:d4:20:64:92:52:c3:a3:c1:9e:48:51:af:3a:
         c0:d5:6d:5c:ad:3a:50:d3:92:3a:5c:ef:f8:91:dd:2d:a2:f9:
         4c:07:40:a9:c8:a1:a2:12:d5:33:c6:fc:40:a1:d2:83:4e:8c:
         a3:5d:21:75:33:3d:73:bf:a9:ea:f9:9a:41:6c:ad:29:14:1f:
         b9:27:7b:ac:09:29:0f:a1:eb:70:90:c8:52:69:7a:73:a1:c8:
         77:ad:87:bc:33:c3:3c:23:24:46:59:96:9e:c4:4e:b7:e5:2c:
         9a:1d:12:1f:83:da:c9:a7:bb:7c:6a:22:82:ec:9e:19:1d:f4:
         f7:59:cb:98:d7:10:ca:f6:f2:02:4d:62:04:16:89:b7:6b:37:
         aa:b8:61:92:88:42:9a:93:9c:23:40:da:fc:fa:c1:b3:a3:9c:
         64:21:96:f1:9f:41:b3:42:25:93:1e:f7:cc:01:0f:1f:9a:bb:
         7d:23:4d:4d:b2:17:89:20:3e:c7:d0:4f:43:22:90:b9:f3:01:
         1b:0f:33:2b