To fetch certificate:

wget http://{{ authority.namespace }}/api/revoked/{{ certificate.serial }}/
curl http://{{ authority.namespace }}/api/revoked/{{ certificate.serial }}/ \
  | openssl x509 -text -noout

To perform online certificate status request

curl http://{{ authority.namespace }}/api/certificate/ > session.pem
openssl ocsp -issuer session.pem -CAfile session.pem \
  -url http://{{ authority.namespace }}/api/ocsp/ \
  -serial 0x{{ certificate.serial }}

{% if certificate.lease %} {% endif %}

Common name	{{ certificate.common_name }}
Organizational unit	{{ certificate.organizational_unit }}
Serial number	{{ certificate.serial }}
Signed	{{ certificate.signed | datetime }} {% if certificate.signer %}, by {{ certificate.signer }}{% endif %}
Expired	{{ certificate.expired | datetime }}
Lease	{{ certificate.lease.inner_address }} at {{ certificate.lease.last_seen | datetime }} from {{ certificate.lease.outer_address }}
SHA256	{{ certificate.sha256sum }}