cfssl-certinfo -cert /etc/kubernetes/ssl/ca.pem
openssl x509 -in ca.pem -text -noout
openssl x509 -noout -dates -in /var/lib/kubelet/pki/kubelet.crt
cfssl-certinfo -cert /etc/kubernetes/ssl/ca.pem
openssl x509 -in ca.pem -text -noout
openssl x509 -noout -dates -in /var/lib/kubelet/pki/kubelet.crt