Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:16:88:35:d8:07:ce:d1:14:65:d3:46:d2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Lint Sub-CA, OU = Test, O = MTG, C = DE
        Validity
            Not Before: Nov 21 03:21:32 2018 GMT
            Not After : Nov 21 03:21:32 2048 GMT
        Subject: CN = www.example.com, OU = Test, O = MTG, L = Darmstadt, ST = Hessen, C = DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:2c:33:d9:da:21:90:d1:3b:4e:bd:5c:fc:
                    10:9b:35:d8:1c:02:d7:f7:9d:f1:4f:4f:21:74:ad:
                    0d:a9:4b:8f:a9:27:5d:e5:0a:41:1e:5c:df:ff:60:
                    8d:51:07:37:a5:f9:1d:c1:e4:32:cd:88:57:a7:90:
                    09:bb:11:cf:94:94:eb:20:ad:0a:b2:1f:62:78:c9:
                    bb:d1:7c:7c:5b:63:07:23:03:df:12:dd:4c:b6:ba:
                    09:70:fb:04:fb:9b:38:55:d9:e8:6b:3f:bf:39:13:
                    11:cb:b8:b7:dc:b8:03:5f:ff:f9:fb:62:63:dc:18:
                    7c:7b:50:39:aa:7d:58:fd:3c:25:fb:e3:4c:54:52:
                    49:53:bb:a3:8a:24:73:a3:51:58:2f:73:f5:2d:92:
                    e9:da:24:47:7c:61:ba:0c:ee:cc:bb:28:cd:de:3c:
                    5f:2f:5a:29:1c:86:c8:aa:11:3d:ff:55:ca:31:6f:
                    3b:fb:6b:3a:97:46:c1:ca:22:93:d8:18:03:6d:0a:
                    0a:d2:e1:a4:f8:57:41:16:f9:4f:db:50:32:72:23:
                    37:1b:32:36:a2:fc:69:cb:3c:38:31:dc:16:94:ee:
                    33:3a:96:11:68:cc:9a:16:1d:f4:95:f9:77:8e:e0:
                    4f:5c:b3:b3:c0:7b:d7:eb:cb:21:16:85:54:9f:36:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:E2:0F:66:4C:20:2C:78:21:2A:8F:29:DB:F9:99:F6:00:86:C4:AF:E1

            X509v3 Subject Key Identifier: 
                7A:FD:90:65:F8:0C:FC:B7:13:61:3A:DE:55:31:E0:32:B5:3E:4B:AB
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            Authority Information Access: 
                CA Issuers - URI:http://ca.example.com/ca.crt
                OCSP - URI:http://ocsp.example.com/ocsp

            X509v3 Certificate Policies: 
                Policy: 1.2.3.4.5

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            qcStatements: 
                0..0......F..0V.....F..0L0$..http://example.com/en/test.pdf..en0$..http://example.com/de/test.pdf..de0......F..0......F........F...
    Signature Algorithm: sha256WithRSAEncryption
         a5:1e:6e:3d:12:c9:37:6c:76:5f:d4:11:cf:f5:59:0f:d1:1e:
         08:a9:8c:84:89:7c:9d:86:2d:14:ad:cc:22:b9:38:70:49:f2:
         12:bf:75:09:63:6c:85:b7:a5:3a:a7:41:34:a4:34:6e:00:a8:
         2f:fc:ef:f4:fa:1a:7c:10:7b:e6:cd:aa:73:05:dc:19:ea:c8:
         07:55:cb:0d:34:d0:0d:ae:61:d1:ab:9c:71:c1:61:29:6c:ae:
         32:3f:09:a2:72:ba:0d:d4:77:a5:0e:4a:97:3f:db:56:13:36:
         67:cc:9d:02:42:8f:e8:4f:d9:d5:d4:86:f4:e0:11:98:93:d3:
         c0:e7:9d:0f:72:e0:5c:48:8f:d1:53:cc:af:03:b8:38:74:8d:
         db:6b:b6:42:b1:66:e3:17:44:44:31:b7:34:46:08:3c:cd:67:
         f5:d2:e2:61:16:4d:9d:90:29:c1:81:ab:89:3d:b2:35:b7:70:
         7a:49:0a:ee:f3:f0:97:60:e6:6e:92:07:d9:a2:b2:a5:e0:86:
         2f:dd:f9:f3:de:6e:89:c7:e9:4d:af:d9:87:c1:49:0c:9e:65:
         41:0c:b7:8a:73:98:2a:1d:2c:38:48:04:c3:c1:ed:4d:4f:60:
         81:69:a9:a0:42:0c:91:8a:de:07:09:a8:70:75:80:9a:56:29:
         60:58:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
