Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:24:fb:ee:e3:bb:96:c4:1e:18:6c:a9:1d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Test SubCA 2, OU = Test, O = MTG, C = DE
        Validity
            Not Before: Feb 14 07:04:13 2020 GMT
            Not After : Feb 14 07:04:13 2021 GMT
        Subject: O = MTG, L = Darmstadt, ST = Hessen, C = DE, businessCategory = Private Organization, organizationIdentifier = VATDE-123456789, serialNumber = 123456789, jurisdictionC = DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:df:14:10:ab:4b:85:b5:23:ef:bb:9c:09:
                    e9:3b:1c:29:7c:84:fa:b7:2c:fc:23:cd:34:0c:5d:
                    c4:b0:97:00:bf:ac:5b:f2:47:24:bc:fd:ee:60:0d:
                    b1:eb:0a:99:97:fe:77:d6:51:61:38:27:2d:ea:2d:
                    0c:12:5d:eb:5a:06:4e:25:ae:78:76:1e:0c:cf:d6:
                    12:01:1d:28:bb:63:51:ed:11:c4:06:07:3a:44:73:
                    49:d4:04:ec:04:3b:0b:56:d6:87:77:43:ec:f7:8c:
                    b4:4b:31:00:1b:1b:16:0a:c5:82:2b:0e:32:bb:4d:
                    b8:10:81:7a:40:72:a8:ee:ba:8e:5a:a2:13:57:a4:
                    2f:1a:eb:70:53:09:4f:3d:b4:42:a1:41:a1:68:22:
                    9c:0d:f9:31:e3:fc:bd:aa:c1:9c:bc:19:28:28:47:
                    d8:99:80:b7:01:4c:09:3b:bd:45:70:b9:09:b2:f8:
                    c6:3e:e5:4b:eb:62:34:62:e2:80:bc:63:11:3c:81:
                    cf:aa:65:b8:f5:ea:00:3e:7c:7d:b1:ee:f0:10:f5:
                    8c:80:0a:5c:34:9a:81:c5:e5:b9:12:4d:e1:a7:8d:
                    36:17:b1:63:3d:2a:60:80:e0:33:7f:f3:f4:cf:5c:
                    01:09:af:5d:87:fa:5c:d4:0a:fb:86:c0:d9:b2:96:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:96:64:A6:12:58:DC:C4:71:99:51:D3:30:11:6C:6C:D7:00:10:18:BF

            X509v3 Subject Key Identifier: 
                4C:35:51:1D:0B:7B:CB:32:4E:B1:59:CE:84:8F:A7:29:32:E5:FA:AF
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            Authority Information Access: 
                CA Issuers - URI:http://ca.example.com/ca.crt
                OCSP - URI:http://ocsp.example.com/ocsp

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 1.3.6.1.4.1.7879.13.24.1
                  CPS: http://www.telesec.de/serverpass/cps.html

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         a4:d0:a4:e9:04:ca:bf:b8:72:0b:c1:64:35:7e:86:9d:e2:72:
         ac:d4:ae:03:8e:31:44:fe:ce:3f:b0:d9:27:a8:93:3d:7c:cc:
         e7:62:8b:16:d1:7a:a5:0e:98:a8:85:f2:e2:0b:ce:93:6b:39:
         0c:d9:66:c1:00:c0:12:85:fe:08:55:ce:81:e6:b7:7d:10:99:
         43:02:3f:ad:c6:c4:3a:e1:b1:a6:38:56:8a:6c:45:c8:7c:bb:
         34:22:8a:e4:fd:9a:2b:31:a9:20:f9:31:2d:c0:59:f3:94:68:
         a2:6e:9a:f6:b0:86:a3:fa:fb:88:b0:b7:dc:88:ad:4e:52:d2:
         d0:83:28:35:0d:8b:9b:f5:06:8d:3d:95:83:90:76:32:32:a0:
         30:36:91:d1:ff:cd:d9:c0:10:5f:db:4b:1a:15:75:33:b6:e2:
         72:64:59:bb:03:2f:12:a6:39:04:96:83:57:a8:ce:69:12:25:
         a4:45:58:df:27:94:dc:fb:75:7b:8a:a2:f5:ca:75:11:e4:cc:
         2b:02:0c:71:b2:ae:ba:6d:fe:71:8a:d4:9d:21:4d:aa:70:91:
         e1:25:5d:a5:0b:50:56:eb:01:6d:87:73:72:96:c2:c3:5a:3a:
         06:24:a6:4c:e6:ac:d6:11:f0:e2:e0:ca:fe:b6:b6:b0:3b:8f:
         86:cc:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
