from asn1crypto import pem, x509


with open('/etc/ssl/certs/ISRG_Root_X2.pem', 'rb') as f:
    der_bytes = f.read()
    if pem.detect(der_bytes):
        type_name, headers, der_bytes = pem.unarmor(der_bytes)

cert = x509.Certificate.load(der_bytes)

assert cert.subject.native["common_name"] == "ISRG Root X2"