Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8b:9c:9c:5a:73:3d:d5:42:e4:a8:8c:89:2d:f2:cd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = DE, ST = Bayern, O = Freistaat Bayern, CN = Bayerische SSL-CA-2017-01
        Validity
            Not Before: Sep 20 10:20:18 2017 GMT
            Not After : Sep 20 10:20:18 2020 GMT
        Subject: C = DE, ST = Bayern, O = Freistaat Bayern, OU = ldbv, CN = www.piwik.bayern.de, serialNumber = 1003672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:64:6e:f1:3e:57:09:c7:f0:fd:5a:7f:4b:
                    72:96:0e:0d:37:2f:b2:6e:02:6a:08:eb:29:de:f2:
                    35:c2:fe:de:4c:fe:c1:9a:18:a9:d0:f4:2d:ed:ee:
                    c5:91:95:c5:8f:9a:cd:19:94:39:20:7f:a5:dc:11:
                    7e:61:51:3f:5c:38:9e:cc:8c:4f:99:27:35:6a:96:
                    bb:70:bf:1b:5d:9b:15:37:eb:99:35:05:60:79:1f:
                    55:93:1a:ae:82:3d:a5:e3:89:18:48:11:14:70:ff:
                    7e:de:b8:8d:33:77:37:d2:1e:8f:45:84:7f:97:0c:
                    47:68:de:13:d3:03:0c:0c:93:59:95:4a:5e:e9:c1:
                    09:ee:be:5e:e8:0c:04:3c:16:6c:bc:fc:9a:d4:c9:
                    81:c7:2f:84:7b:dc:ee:97:e5:3c:aa:95:e4:f5:16:
                    05:d1:df:f4:59:a9:d2:bb:f9:eb:78:bf:72:6e:19:
                    4d:e3:a5:c3:82:03:02:9b:74:be:ae:19:3c:bc:d8:
                    65:af:95:de:9d:61:5c:19:9d:a6:87:01:6e:20:a0:
                    98:20:f7:70:13:27:70:1d:fc:31:b3:2d:a9:eb:ad:
                    02:8e:4e:50:27:bd:97:99:b5:67:2f:92:16:1e:81:
                    8a:be:24:14:a6:14:20:18:54:1c:2e:49:c2:b1:8d:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                keyid:4B:49:46:61:45:00:FD:6B:B6:0C:EE:B6:CB:04:A1:BC:12:E1:C4:4E

            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.bayern.de:8080
                CA Issuers - URI:ldap://directory2.bayern.de/cn=Bayerische%20SSL-CA-2017-01,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority
                CA Issuers - URI:http://www.pki.bayern.de/download/sslpki/certs/Bayerische_SSL-CA-2017-01.cer
                CA Issuers - URI:ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2017-01,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.19266.1.2.3
                  CPS: https://www.pki.bayern.de/policy/policy_ssl-ca_1.0.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2017-01,ou=crl,dc=pki,dc=bayern,dc=de?certificateRevocationList?base?objectclass=cRLDistributionPoint
                  URI:ldap://directory2.bayern.de/cn=Bayerische%20SSL-CA-2017-01,ou=crl,dc=pki,dc=bayern,dc=de?certificateRevocationList?base?objectclass=cRLDistributionPoint
                  URI:http://ocsp.pki.bayern.de/crl/Bayerische%20SSL-CA-2017-01.crl

            X509v3 Subject Key Identifier: 
                44:36:0B:58:02:31:E4:FB
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Data Encipherment
            X509v3 Subject Alternative Name: 
                DNS:piwik.bayern.de, DNS:www.piwik.bayern.de
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         31:66:ad:ef:a3:6d:28:b9:48:a8:f4:89:0f:fb:29:25:b7:25:
         27:4e:44:a7:9f:5f:9a:2b:07:fc:73:94:be:bf:c9:3d:ae:a8:
         16:5c:a6:b8:02:58:b5:e1:89:23:da:35:e8:7f:ed:b7:8e:b9:
         6e:f3:4a:41:78:08:80:24:7e:a8:ec:b9:66:55:4e:17:00:ad:
         41:a6:f0:6b:1f:b3:f3:b1:03:a9:ac:ee:76:f8:a2:cb:29:28:
         35:fd:8e:ed:05:dc:a4:7c:df:1b:ba:26:d6:0d:8a:eb:8c:25:
         cd:e0:44:c7:0c:77:93:ca:bf:88:cf:5b:09:7d:63:cd:ed:e9:
         d8:e5:16:e7:0e:4d:1e:c4:dc:55:e2:75:3f:12:a4:52:ff:a5:
         e2:fb:0f:fa:2e:b7:ea:f2:72:1c:18:ce:d4:b5:9a:05:51:34:
         0a:b8:d4:c1:8c:ec:7e:50:bb:d1:f3:c9:57:1d:c9:48:2f:ff:
         43:f0:2f:49:d9:c8:c4:02:43:87:da:df:1a:4b:41:f0:8e:60:
         9f:b4:93:7d:de:da:d8:7f:ce:bd:ea:9b:cb:6e:98:da:cb:24:
         68:90:1b:0f:26:d5:eb:4c:40:de:e0:29:83:ce:3b:1b:38:73:
         a6:72:70:bc:83:e6:b0:c7:e3:e0:aa:f4:52:29:57:55:81:25:
         ea:8c:a6:15
-----BEGIN CERTIFICATE-----
MIIH3DCCBsSgAwIBAgIQTYucnFpzPdVC5KiMiS3yzTANBgkqhkiG9w0BAQsFADBd
MQswCQYDVQQGEwJERTEPMA0GA1UECAwGQmF5ZXJuMRkwFwYDVQQKDBBGcmVpc3Rh
YXQgQmF5ZXJuMSIwIAYDVQQDDBlCYXllcmlzY2hlIFNTTC1DQS0yMDE3LTAxMB4X
DTE3MDkyMDEwMjAxOFoXDTIwMDkyMDEwMjAxOFoweDELMAkGA1UEBhMCREUxDzAN
BgNVBAgMBkJheWVybjEZMBcGA1UECgwQRnJlaXN0YWF0IEJheWVybjENMAsGA1UE
CwwEbGRidjEcMBoGA1UEAwwTd3d3LnBpd2lrLmJheWVybi5kZTEQMA4GA1UEBRMH
MTAwMzY3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANziZG7xPlcJ
x/D9Wn9LcpYODTcvsm4CagjrKd7yNcL+3kz+wZoYqdD0Le3uxZGVxY+azRmUOSB/
pdwRfmFRP1w4nsyMT5knNWqWu3C/G12bFTfrmTUFYHkfVZMaroI9peOJGEgRFHD/
ft64jTN3N9Iej0WEf5cMR2jeE9MDDAyTWZVKXunBCe6+XugMBDwWbLz8mtTJgccv
hHvc7pflPKqV5PUWBdHf9Fmp0rv563i/cm4ZTeOlw4IDApt0vq4ZPLzYZa+V3p1h
XBmdpocBbiCgmCD3cBMncB38MbMtqeutAo5OUCe9l5m1Zy+SFh6Bir4kFKYUIBhU
HC5JwrGN8YECAwEAAaOCBHswggR3MCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAfBgNVHSMEGDAWgBRLSUZhRQD9a7YM7rbLBKG8EuHETjCCAd0GCCsG
AQUFBwEBBIIBzzCCAcswKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnBraS5iYXll
cm4uZGU6ODA4MDCBoAYIKwYBBQUHMAKGgZNsZGFwOi8vZGlyZWN0b3J5Mi5iYXll
cm4uZGUvY249QmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDE3LTAxLG91PUNBLWNlcnRz
LGRjPXBraSxkYz1iYXllcm4sZGM9ZGU/Y0FDZXJ0aWZpY2F0ZT9iYXNlP29iamVj
dGNsYXNzPWNlcnRpZmljYXRpb25BdXRob3JpdHkwWAYIKwYBBQUHMAKGTGh0dHA6
Ly93d3cucGtpLmJheWVybi5kZS9kb3dubG9hZC9zc2xwa2kvY2VydHMvQmF5ZXJp
c2NoZV9TU0wtQ0EtMjAxNy0wMS5jZXIwgZ8GCCsGAQUFBzAChoGSbGRhcDovL2Rp
cmVjdG9yeS5iYXllcm4uZGUvY249QmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDE3LTAx
LG91PUNBLWNlcnRzLGRjPXBraSxkYz1iYXllcm4sZGM9ZGU/Y0FDZXJ0aWZpY2F0
ZT9iYXNlP29iamVjdGNsYXNzPWNlcnRpZmljYXRpb25BdXRob3JpdHkwXgYDVR0g
BFcwVTBTBgsrBgEEAYGWQgECAzBEMEIGCCsGAQUFBwIBFjZodHRwczovL3d3dy5w
a2kuYmF5ZXJuLmRlL3BvbGljeS9wb2xpY3lfc3NsLWNhXzEuMC5wZGYwggGNBgNV
HR8EggGEMIIBgDCCAXygggF4oIIBdIaBl2xkYXA6Ly9kaXJlY3RvcnkuYmF5ZXJu
LmRlL2NuPUJheWVyaXNjaGUlMjBTU0wtQ0EtMjAxNy0wMSxvdT1jcmwsZGM9cGtp
LGRjPWJheWVybixkYz1kZT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/
b2JqZWN0Y2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnSGgZhsZGFwOi8vZGlyZWN0
b3J5Mi5iYXllcm4uZGUvY249QmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDE3LTAxLG91
PWNybCxkYz1wa2ksZGM9YmF5ZXJuLGRjPWRlP2NlcnRpZmljYXRlUmV2b2NhdGlv
bkxpc3Q/YmFzZT9vYmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIY9aHR0
cDovL29jc3AucGtpLmJheWVybi5kZS9jcmwvQmF5ZXJpc2NoZSUyMFNTTC1DQS0y
MDE3LTAxLmNybDARBgNVHQ4ECgQIRDYLWAIx5PswDgYDVR0PAQH/BAQDAgSwMC8G
A1UdEQQoMCaCD3Bpd2lrLmJheWVybi5kZYITd3d3LnBpd2lrLmJheWVybi5kZTAM
BgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAxZq3vo20ouUio9IkP+ykl
tyUnTkSnn1+aKwf8c5S+v8k9rqgWXKa4Ali14Ykj2jXof+23jrlu80pBeAiAJH6o
7LlmVU4XAK1BpvBrH7PzsQOprO52+KLLKSg1/Y7tBdykfN8buibWDYrrjCXN4ETH
DHeTyr+Iz1sJfWPN7enY5RbnDk0exNxV4nU/EqRS/6Xi+w/6Lrfq8nIcGM7UtZoF
UTQKuNTBjOx+ULvR88lXHclIL/9D8C9J2cjEAkOH2t8aS0HwjmCftJN93trYf869
6pvLbpjayyRokBsPJtXrTEDe4CmDzjsbOHOmcnC8g+awx+PgqvRSKVdVgSXqjKYV
-----END CERTIFICATE-----