root@deployment-acme-chief03:~# openssl x509 -in /var/lib/acme-chief/certs/unified/live/rsa-2048.crt  -noout -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cf:a5:c9:5d:72:51:fa:8a:ae:68:19:16:5e:e7:ec:05:1c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
        Validity
            Not Before: Mar 20 17:50:20 2019 GMT
            Not After : Jun 18 17:50:20 2019 GMT
        Subject: CN = *.wikimedia.beta.wmflabs.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b6:c7:08:8e:54:0e:3b:75:99:43:f7:e7:15:
                    27:83:e0:94:55:91:62:8b:f3:63:f9:8e:7f:f3:95:
                    77:c6:5f:44:dd:33:56:d6:96:2e:1e:bc:4b:99:0b:
                    5d:1f:84:04:c6:58:c8:9c:09:88:bd:69:92:97:66:
                    da:23:35:2e:be:6c:56:43:bc:18:c7:2b:0f:e4:a1:
                    54:b2:fd:9b:be:66:a9:4f:41:b8:ae:7d:8a:33:44:
                    4d:81:21:54:e1:15:de:f6:c2:00:4c:3d:e7:a2:0c:
                    3e:3a:f0:df:a0:36:04:96:24:8c:d0:8a:6f:12:7b:
                    62:15:2c:f3:60:c9:c2:08:80:3d:ff:1b:c0:31:bb:
                    b3:45:23:19:1a:f9:c8:88:83:38:b3:47:f8:15:6b:
                    9e:f9:9f:6b:f9:40:cd:4c:7b:46:b8:30:45:06:c1:
                    02:d2:00:71:ac:d4:d3:31:fe:c7:8b:59:f1:d6:af:
                    8d:ed:be:47:f1:15:b7:f0:83:80:9a:70:1c:dc:43:
                    af:76:8b:82:af:f3:49:ac:ba:8c:24:c4:df:03:51:
                    f6:6b:dc:d2:23:33:09:be:ab:7c:96:b8:7a:c0:fb:
                    ac:d4:87:23:2c:18:b0:f2:30:63:03:2b:26:96:1a:
                    b6:c7:fb:71:90:bd:2f:68:0e:e9:7e:aa:c7:1e:5f:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D4:4D:E0:D9:17:D4:64:A8:AC:A7:48:9D:4B:2E:88:17:09:64:C1:50
            X509v3 Authority Key Identifier: 
                keyid:A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1

            Authority Information Access: 
                OCSP - URI:http://ocsp.int-x3.letsencrypt.org
                CA Issuers - URI:http://cert.int-x3.letsencrypt.org/

            X509v3 Subject Alternative Name: 
                DNS:*.m.wikibooks.beta.wmflabs.org, DNS:*.m.wikimedia.beta.wmflabs.org, DNS:*.m.wikinews.beta.wmflabs.org, DNS:*.m.wikipedia.beta.wmflabs.org, DNS:*.m.wikiquote.beta.wmflabs.org, DNS:*.m.wikisource.beta.wmflabs.org, DNS:*.m.wikiversity.beta.wmflabs.org, DNS:*.m.wikivoyage.beta.wmflabs.org, DNS:*.m.wiktionary.beta.wmflabs.org, DNS:*.wikibooks.beta.wmflabs.org, DNS:*.wikimedia.beta.wmflabs.org, DNS:*.wikinews.beta.wmflabs.org, DNS:*.wikipedia.beta.wmflabs.org, DNS:*.wikiquote.beta.wmflabs.org, DNS:*.wikisource.beta.wmflabs.org, DNS:*.wikiversity.beta.wmflabs.org, DNS:*.wikivoyage.beta.wmflabs.org, DNS:*.wiktionary.beta.wmflabs.org, DNS:*.zero.wikipedia.beta.wmflabs.org, DNS:beta.wmflabs.org, DNS:m.wikidata.beta.wmflabs.org, DNS:wikidata.beta.wmflabs.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org

            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 74:7E:DA:83:31:AD:33:10:91:21:9C:CE:25:4F:42:70:
                                C2:BF:FD:5E:42:20:08:C6:37:35:79:E6:10:7B:CC:56
                    Timestamp : Mar 20 18:50:20.053 2019 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D2:BC:24:07:39:EE:4C:A0:8C:97:40:
                                1C:64:DA:4D:CF:A7:32:E8:7E:75:7C:9C:6D:42:1C:1F:
                                63:1B:70:84:C1:02:20:13:BE:3B:F6:0B:F2:A0:4B:C3:
                                42:D7:48:8A:90:1B:EB:D9:32:68:FE:64:2A:C2:DD:E4:
                                23:77:21:C2:06:3D:2B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 29:3C:51:96:54:C8:39:65:BA:AA:50:FC:58:07:D4:B7:
                                6F:BF:58:7A:29:72:DC:A4:C3:0C:F4:E5:45:47:F4:78
                    Timestamp : Mar 20 18:50:20.055 2019 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:53:85:45:43:FF:54:2E:47:6D:5A:81:EC:
                                75:EF:66:8E:AE:F8:0E:D6:BE:18:C8:74:FE:94:9D:29:
                                81:7E:25:C6:02:21:00:AE:A8:8F:C2:90:51:29:72:78:
                                8C:B7:3B:3D:8A:3B:1B:65:AB:1F:12:A4:B4:5A:D4:65:
                                96:E7:9E:DB:98:92:FD
    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:95:7a:81:98:0c:66:a4:12:c8:3f:c8:24:b0:d6:87:78:
         a8:47:1d:43:04:fa:28:1c:fb:cd:51:c8:09:a5:e3:60:b8:a9:
         54:ee:c0:73:ed:16:ea:d9:b3:1a:ac:c9:12:4b:cd:52:13:4f:
         9b:a4:08:39:9a:9e:a4:00:29:52:1c:8f:48:4e:73:f9:60:23:
         36:f9:ba:28:8a:23:b8:20:10:31:85:d5:22:47:19:16:2d:fa:
         7e:ba:0c:2e:5a:45:c4:29:91:81:a3:eb:0f:52:9f:d9:0f:25:
         b2:f5:f0:d6:f8:07:79:f5:53:88:58:c5:b5:16:54:54:7b:8d:
         58:6a:67:a4:7c:23:1f:e4:e3:23:4d:8d:33:1e:ee:5c:05:72:
         30:c9:44:19:cc:e6:ea:21:f0:11:7c:65:57:3a:f2:99:c4:f4:
         43:0c:00:6f:b8:13:d1:af:f2:05:a9:23:6b:aa:b5:dc:24:99:
         4a:57:1d:49:1e:c1:75:dd:40:40:83:47:fd:f4:bb:fe:ed:ed:
         9c:a9:b9:f8:25:86:4d:5c:88:da:c7:7e:e9:dd:5d:cc:f2:42:
         bf:e3:32:85:68:17:02:a2:96:ed:3a:53:ff:8d:9b:96:d6:dd:
         6b:2f:d4:48:a7:72:53:b1:ae:aa:a7:73:d4:76:ad:25:15:a4:
         7a:87:04:c7