cfssl-certinfo -cert /etc/kubernetes/ssl/ca.pemopenssl x509 -in ca.pem -text -nooutopenssl x509 -noout -dates -in /var/lib/kubelet/pki/kubelet.crt