Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:59:28:38:cd:e6:16:72:3d:f8:e9:c6:65
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Test SubCA 2, OU = Test, O = MTG, C = DE
        Validity
            Not Before: Feb 14 07:04:13 2020 GMT
            Not After : Feb 14 07:04:13 2021 GMT
        Subject: O = MTG, L = Darmstadt, ST = Hessen, C = DE, businessCategory = Private Organization, organizationIdentifier = NTRDE-12345678, serialNumber = 12345678, jurisdictionC = DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:df:14:10:ab:4b:85:b5:23:ef:bb:9c:09:
                    e9:3b:1c:29:7c:84:fa:b7:2c:fc:23:cd:34:0c:5d:
                    c4:b0:97:00:bf:ac:5b:f2:47:24:bc:fd:ee:60:0d:
                    b1:eb:0a:99:97:fe:77:d6:51:61:38:27:2d:ea:2d:
                    0c:12:5d:eb:5a:06:4e:25:ae:78:76:1e:0c:cf:d6:
                    12:01:1d:28:bb:63:51:ed:11:c4:06:07:3a:44:73:
                    49:d4:04:ec:04:3b:0b:56:d6:87:77:43:ec:f7:8c:
                    b4:4b:31:00:1b:1b:16:0a:c5:82:2b:0e:32:bb:4d:
                    b8:10:81:7a:40:72:a8:ee:ba:8e:5a:a2:13:57:a4:
                    2f:1a:eb:70:53:09:4f:3d:b4:42:a1:41:a1:68:22:
                    9c:0d:f9:31:e3:fc:bd:aa:c1:9c:bc:19:28:28:47:
                    d8:99:80:b7:01:4c:09:3b:bd:45:70:b9:09:b2:f8:
                    c6:3e:e5:4b:eb:62:34:62:e2:80:bc:63:11:3c:81:
                    cf:aa:65:b8:f5:ea:00:3e:7c:7d:b1:ee:f0:10:f5:
                    8c:80:0a:5c:34:9a:81:c5:e5:b9:12:4d:e1:a7:8d:
                    36:17:b1:63:3d:2a:60:80:e0:33:7f:f3:f4:cf:5c:
                    01:09:af:5d:87:fa:5c:d4:0a:fb:86:c0:d9:b2:96:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:96:64:A6:12:58:DC:C4:71:99:51:D3:30:11:6C:6C:D7:00:10:18:BF

            X509v3 Subject Key Identifier: 
                4C:35:51:1D:0B:7B:CB:32:4E:B1:59:CE:84:8F:A7:29:32:E5:FA:AF
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            Authority Information Access: 
                CA Issuers - URI:http://ca.example.com/ca.crt
                OCSP - URI:http://ocsp.example.com/ocsp

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 1.3.6.1.4.1.7879.13.24.1
                  CPS: http://www.telesec.de/serverpass/cps.html

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            2.23.140.3.1: 
                0...NTR..DE..12345678
    Signature Algorithm: sha256WithRSAEncryption
         6c:27:66:0a:8b:c4:6f:10:e0:aa:4b:12:12:c9:ed:62:98:ab:
         26:4c:3d:dd:fb:41:fb:fe:61:4b:33:38:44:4b:e6:42:b6:a3:
         b9:56:30:9e:cc:ae:bc:b2:f3:cf:08:18:e0:04:56:ba:d8:00:
         60:8d:b7:4a:f3:fd:5c:d9:85:74:3b:84:8c:f4:0a:0b:40:7a:
         4d:68:d5:ce:40:6b:57:3d:1d:ae:8a:26:14:1c:d8:d8:d7:52:
         42:04:c3:54:e8:1f:ad:17:3c:fe:93:35:3d:d3:59:e3:5e:14:
         51:ea:4d:c0:63:8b:19:c9:07:94:10:c5:41:a6:a5:63:8d:58:
         87:1f:bb:92:88:0f:1c:50:98:35:13:8e:a4:ab:e7:1a:7c:6c:
         37:a6:fb:7a:00:98:60:df:8c:62:9b:8d:92:c4:e7:ac:da:2f:
         97:d2:39:59:dc:d0:3a:24:d1:5f:34:85:2b:5e:5f:77:c3:ce:
         19:3b:92:64:a7:d7:46:67:66:45:66:04:0d:e2:88:4e:18:6b:
         21:14:92:f3:30:a9:fe:ee:b1:f0:66:03:bf:5d:16:0f:0d:34:
         e0:b6:7d:cc:22:9f:9e:a9:75:0d:3b:a5:90:7f:35:e3:83:0d:
         ed:8f:d2:5a:08:a5:fa:cc:52:4e:8f:57:bd:3e:23:42:80:a9:
         e4:43:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
