Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fb:15:d6:01:49:0d:a6:57:ab:88:f9:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Test SubCA 2, OU = Test, O = MTG, C = DE
        Validity
            Not Before: Nov  1 08:03:01 2019 GMT
            Not After : Nov  1 08:03:01 2020 GMT
        Subject: O = MTG, L = Darmstadt, ST = Hessen, C = DE, businessCategory = Private Organization, organizationIdentifier = VATDE-123456789, serialNumber = 123456789, jurisdictionC = DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:81:71:b4:94:05:bc:cf:99:8a:aa:62:08:
                    f2:2e:63:b2:1e:46:f9:2b:85:98:c3:83:d0:ce:26:
                    ad:76:8f:5c:e7:5b:05:20:25:26:32:19:c2:24:8a:
                    ba:69:a3:eb:ca:10:a4:f3:cf:b5:c6:1e:f6:70:58:
                    96:5b:88:52:6a:88:42:33:85:b8:c6:16:48:4f:01:
                    45:39:3f:e1:6a:b9:06:b5:ef:37:db:79:9e:50:90:
                    57:43:5b:8b:c3:35:0d:b3:41:f4:1b:c2:4a:7f:18:
                    3c:39:2d:4f:bf:2b:a5:71:07:73:33:00:e5:8d:36:
                    9e:fe:8f:72:c5:72:56:08:cc:86:b6:ef:ba:e2:fd:
                    9b:5c:c6:2d:94:ed:2d:64:24:77:e6:67:4d:62:db:
                    94:2e:29:8e:dd:1d:7a:ca:bc:68:fb:15:2c:80:56:
                    d3:dd:e7:3a:8f:98:18:14:4b:11:d9:c4:01:1f:b9:
                    7a:d0:d9:ad:69:11:05:f6:0e:ae:5f:fc:cd:c6:b3:
                    cb:4d:ae:8e:45:18:0a:a8:c0:40:11:28:dc:cd:9f:
                    7a:26:67:5a:47:80:9b:d9:4c:f7:da:5f:6d:13:83:
                    1a:91:92:d1:b9:44:f7:72:6b:97:47:74:71:70:80:
                    d3:d6:73:bf:76:33:5c:70:b8:6f:87:37:3e:7e:8e:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:0C:5E:9C:FE:BA:4B:21:6C:04:1D:C2:5A:B7:E3:88:5F:59:DE:4C:12

            X509v3 Subject Key Identifier: 
                0E:6B:AA:83:A9:B2:4D:5C:85:CD:B1:D2:2F:87:F7:20:CB:36:43:3B
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            Authority Information Access: 
                CA Issuers - URI:http://ca.example.com/ca.crt
                OCSP - URI:http://ocsp.example.com/ocsp

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 1.3.6.1.4.1.7879.13.24.1
                  CPS: http://www.telesec.de/serverpass/cps.html

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:4a:7e:e9:fb:11:d3:15:61:56:17:b5:76:30:9a:5d:8d:
         5d:d7:8d:aa:5c:7b:38:5f:6f:fc:53:35:b9:1a:d3:c2:ff:64:
         1f:95:db:f1:93:07:a6:dd:f1:86:b5:32:c3:1b:98:8c:14:7e:
         ad:87:f6:74:ba:a4:07:4e:12:f4:96:59:e5:c5:0a:19:1d:03:
         51:19:bf:8b:56:e9:cc:b2:b6:b0:ad:7a:4a:ef:d8:75:a7:a3:
         a3:1d:12:23:a2:5c:5e:db:08:bb:d5:5a:e3:5f:b5:59:6b:84:
         cc:19:25:cc:59:4e:8f:99:68:98:4c:9a:d2:e5:de:03:91:6e:
         fc:40:5d:8a:31:0a:7a:5a:a3:44:87:d7:61:11:19:25:45:fb:
         c5:90:30:23:bb:21:bd:a6:fd:c0:da:30:68:2b:7e:6d:91:89:
         9b:dc:f5:79:b7:ae:d0:bd:54:ba:93:a5:c6:38:09:00:e9:24:
         92:cd:2e:c5:63:6f:e7:32:cb:29:94:3f:bc:00:34:b9:b9:fc:
         a5:82:9a:9d:92:0a:85:de:d7:88:2a:ce:0f:ab:47:c8:55:6e:
         55:08:4d:28:96:bf:42:b3:6d:16:a4:33:d7:62:f2:84:28:55:
         f7:4f:47:13:9d:8c:49:c7:0a:6c:99:b1:e9:55:40:4a:7c:29:
         1b:8a:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
