Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:41:f3:41:72:55:59:34:f4:bf:d6:b5:5e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Test SubCA 2, OU = Test, O = MTG, C = DE
        Validity
            Not Before: Nov  1 08:03:01 2019 GMT
            Not After : Nov  1 08:03:01 2020 GMT
        Subject: O = MTG, L = Darmstadt, ST = Hessen, C = DE, businessCategory = Private Organization, organizationIdentifier = NTRDE-12345678, serialNumber = 12345678, jurisdictionC = DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:81:71:b4:94:05:bc:cf:99:8a:aa:62:08:
                    f2:2e:63:b2:1e:46:f9:2b:85:98:c3:83:d0:ce:26:
                    ad:76:8f:5c:e7:5b:05:20:25:26:32:19:c2:24:8a:
                    ba:69:a3:eb:ca:10:a4:f3:cf:b5:c6:1e:f6:70:58:
                    96:5b:88:52:6a:88:42:33:85:b8:c6:16:48:4f:01:
                    45:39:3f:e1:6a:b9:06:b5:ef:37:db:79:9e:50:90:
                    57:43:5b:8b:c3:35:0d:b3:41:f4:1b:c2:4a:7f:18:
                    3c:39:2d:4f:bf:2b:a5:71:07:73:33:00:e5:8d:36:
                    9e:fe:8f:72:c5:72:56:08:cc:86:b6:ef:ba:e2:fd:
                    9b:5c:c6:2d:94:ed:2d:64:24:77:e6:67:4d:62:db:
                    94:2e:29:8e:dd:1d:7a:ca:bc:68:fb:15:2c:80:56:
                    d3:dd:e7:3a:8f:98:18:14:4b:11:d9:c4:01:1f:b9:
                    7a:d0:d9:ad:69:11:05:f6:0e:ae:5f:fc:cd:c6:b3:
                    cb:4d:ae:8e:45:18:0a:a8:c0:40:11:28:dc:cd:9f:
                    7a:26:67:5a:47:80:9b:d9:4c:f7:da:5f:6d:13:83:
                    1a:91:92:d1:b9:44:f7:72:6b:97:47:74:71:70:80:
                    d3:d6:73:bf:76:33:5c:70:b8:6f:87:37:3e:7e:8e:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:0C:5E:9C:FE:BA:4B:21:6C:04:1D:C2:5A:B7:E3:88:5F:59:DE:4C:12

            X509v3 Subject Key Identifier: 
                0E:6B:AA:83:A9:B2:4D:5C:85:CD:B1:D2:2F:87:F7:20:CB:36:43:3B
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            Authority Information Access: 
                CA Issuers - URI:http://ca.example.com/ca.crt
                OCSP - URI:http://ocsp.example.com/ocsp

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 1.3.6.1.4.1.7879.13.24.1
                  CPS: http://www.telesec.de/serverpass/cps.html

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            2.23.140.3.1: 
                0...NTR..DE..12345678
    Signature Algorithm: sha256WithRSAEncryption
         17:5f:f1:67:1c:7a:fc:0e:22:fa:81:4e:70:3b:2b:08:ae:cf:
         40:55:c6:5a:3a:6f:ad:7c:3a:ff:29:ae:7f:f2:7e:af:f5:35:
         aa:d6:8d:51:52:d3:db:3f:0c:19:43:26:08:61:51:d3:04:6d:
         49:8a:74:7a:c8:ed:7d:02:e5:5e:49:89:a1:60:4f:78:a0:61:
         d6:62:89:ab:f6:f8:a8:ce:2c:b7:a6:44:53:ef:a5:e8:93:7a:
         d9:5e:3a:54:11:c7:48:ef:0b:6b:b6:55:f2:90:c0:ee:22:d1:
         8b:3d:7c:7f:63:f8:89:be:da:36:07:6e:de:bf:4f:91:d1:df:
         b2:9e:6c:01:ce:a0:3e:2f:23:9b:4f:dc:18:c9:73:40:df:a3:
         66:73:2b:65:f2:7d:2b:89:28:e6:74:56:95:b5:ac:93:23:e9:
         09:5d:02:d0:32:d5:a8:ed:63:fc:5c:cc:5f:c6:99:8f:55:d2:
         d7:4d:73:f8:3f:2c:f1:2b:b8:3e:5e:70:e8:2d:64:1f:11:55:
         66:c8:b7:f9:58:9b:3d:77:3c:53:04:7a:89:ea:30:50:2a:03:
         e6:34:17:31:70:07:c4:0c:f8:43:d0:72:6c:f4:f6:28:e9:87:
         37:66:95:73:e9:ef:50:14:93:b9:46:6f:c6:ef:9a:a4:63:ce:
         d3:2b:5a:2d
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgINCkHzQXJVWTT0v9a1XjANBgkqhkiG9w0BAQsFADBBMRUw
EwYDVQQDDAxUZXN0IFN1YkNBIDIxDTALBgNVBAsMBFRlc3QxDDAKBgNVBAoMA01U
RzELMAkGA1UEBhMCREUwHhcNMTkxMTAxMDgwMzAxWhcNMjAxMTAxMDgwMzAxWjCB
oDEMMAoGA1UECgwDTVRHMRIwEAYDVQQHDAlEYXJtc3RhZHQxDzANBgNVBAgMBkhl
c3NlbjELMAkGA1UEBhMCREUxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9u
MRcwFQYDVQRhDA5OVFJERS0xMjM0NTY3ODERMA8GA1UEBRMIMTIzNDU2NzgxEzAR
BgsrBgEEAYI3PAIBAwwCREUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCDYFxtJQFvM+ZiqpiCPIuY7IeRvkrhZjDg9DOJq12j1znWwUgJSYyGcIkirpp
o+vKEKTzz7XGHvZwWJZbiFJqiEIzhbjGFkhPAUU5P+FquQa17zfbeZ5QkFdDW4vD
NQ2zQfQbwkp/GDw5LU+/K6VxB3MzAOWNNp7+j3LFclYIzIa277ri/Ztcxi2U7S1k
JHfmZ01i25QuKY7dHXrKvGj7FSyAVtPd5zqPmBgUSxHZxAEfuXrQ2a1pEQX2Dq5f
/M3Gs8tNro5FGAqowEARKNzNn3omZ1pHgJvZTPfaX20TgxqRktG5RPdya5dHdHFw
gNPWc792M1xwuG+HNz5+jnXlAgMBAAGjggF8MIIBeDAfBgNVHSMEGDAWgBQMXpz+
ukshbAQdwlq344hfWd5MEjAdBgNVHQ4EFgQUDmuqg6myTVyFzbHSL4f3IMs2Qzsw
DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwGgYDVR0RBBMwEYIPd3d3LmV4
YW1wbGUuY29tMGIGCCsGAQUFBwEBBFYwVDAoBggrBgEFBQcwAoYcaHR0cDovL2Nh
LmV4YW1wbGUuY29tL2NhLmNydDAoBggrBgEFBQcwAYYcaHR0cDovL29jc3AuZXhh
bXBsZS5jb20vb2NzcDBZBgNVHSAEUjBQMAcGBWeBDAEBMEUGCisGAQQBvUcNGAEw
NzA1BggrBgEFBQcCARYpaHR0cDovL3d3dy50ZWxlc2VjLmRlL3NlcnZlcnBhc3Mv
Y3BzLmh0bWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB4GBWeBDAMB
BBUwExMDTlRSEwJERQwIMTIzNDU2NzgwDQYJKoZIhvcNAQELBQADggEBABdf8Wcc
evwOIvqBTnA7Kwiuz0BVxlo6b618Ov8prn/yfq/1NarWjVFS09s/DBlDJghhUdME
bUmKdHrI7X0C5V5JiaFgT3igYdZiiav2+KjOLLemRFPvpeiTetleOlQRx0jvC2u2
VfKQwO4i0Ys9fH9j+Im+2jYHbt6/T5HR37KebAHOoD4vI5tP3BjJc0Dfo2ZzK2Xy
fSuJKOZ0VpW1rJMj6QldAtAy1ajtY/xczF/GmY9V0tdNc/g/LPEruD5ecOgtZB8R
VWbIt/lYmz13PFMEeonqMFAqA+Y0FzFwB8QM+EPQcmz09ijphzdmlXPp71AUk7lG
b8bvmqRjztMrWi0=
-----END CERTIFICATE-----
