Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=I
        Validity
            Not Before: Jan  1 12:00:00 2015 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:eb:23:95:cd:33:c8:5e:43:58:e3:1e:90:
                    82:8d:44:eb:dc:64:d2:cd:fb:09:c2:69:56:11:0f:
                    d7:8f:cd:20:d7:bc:e3:ae:e9:62:e4:67:3a:d1:31:
                    14:45:5b:36:e1:33:00:81:2f:f0:c5:ea:1f:57:ff:
                    fb:99:43:5b:9f:09:01:83:e0:07:f1:00:42:23:9b:
                    ef:b2:c2:5d:0f:0e:59:2d:ef:e4:20:e7:fd:f1:96:
                    9a:5e:71:7d:db:dd:36:a8:1d:7b:04:bd:74:d9:e5:
                    86:d2:34:6e:af:8e:77:8e:35:af:2b:4d:8e:e4:93:
                    01:23:a3:27:cd:a5:ce:e0:bd:53:f2:1b:e6:f1:e9:
                    d2:fb:20:49:01:81:f7:2f:51:5c:d7:63:35:42:de:
                    52:f7:bc:1c:1d:6d:af:01:3a:5f:20:59:ee:5d:d6:
                    77:1d:cb:d7:ef:14:9e:e1:9f:01:97:7b:bc:a3:d1:
                    d1:05:6c:64:6c:7d:5a:26:38:b2:5f:f0:a5:3b:f4:
                    b2:3d:8a:85:f0:25:2d:31:1b:b3:a3:4c:a7:95:2f:
                    ea:bc:6a:4a:9e:61:19:81:4b:b8:8e:a5:88:3b:36:
                    35:e8:e2:35:76:17:29:d8:4e:1a:4c:6d:7c:1d:b2:
                    e9:79:5b:f5:75:76:78:55:2f:e1:03:2f:94:d6:aa:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E5:73:F2:21:4B:9E:B8:BB:3C:57:17:0F:F8:0E:E1:6A:FC:F3:2A:48
            X509v3 Authority Key Identifier: 
                keyid:84:BA:05:06:4E:33:9D:11:AA:7A:F1:77:1F:A4:69:7E:4C:2D:D4:3F

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/I.cer
                CA Issuers - URI:http://url-for-aia2/I2.foo

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/I.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:target
    Signature Algorithm: sha256WithRSAEncryption
         40:67:ce:6d:fa:82:c3:f7:43:ff:8b:04:2e:c8:57:fa:0c:32:
         16:7c:f4:6a:90:a5:bd:31:ba:2f:a6:d6:6a:fe:a9:c5:a2:03:
         2b:87:33:c6:1d:0d:2f:10:aa:15:68:62:a3:5d:bd:d4:3e:2e:
         21:eb:02:36:88:37:6a:47:6a:61:b4:20:db:ba:12:24:3e:5a:
         65:84:39:b6:07:9b:69:30:04:a3:44:ee:f1:8f:2a:55:fb:fd:
         bd:bd:76:f2:0f:a8:20:c3:2c:4a:31:94:59:00:2b:d0:ff:a9:
         98:7a:ae:9d:e6:f3:38:6f:7a:8d:f7:e0:b5:c4:75:8c:5e:6c:
         92:47:d4:d2:e0:78:c6:c1:56:f2:10:d3:c0:9f:86:b3:7b:ef:
         0b:20:07:a5:ab:d7:35:ce:d5:48:d6:67:f6:f3:57:72:e6:e5:
         e7:81:04:61:dc:a2:f9:47:2b:3f:08:c4:55:41:38:9a:0c:7f:
         d2:5f:05:ff:4d:34:8c:4b:4c:6a:6e:73:d2:c2:c3:d3:1c:b0:
         08:6e:17:bb:94:e6:65:6e:da:7e:3f:9c:42:2d:cb:d8:2a:7b:
         c9:03:6f:15:e2:6d:63:e6:5e:a7:fb:7c:5e:b3:fe:6a:87:9b:
         de:04:91:f6:bb:50:ad:9e:1c:0c:3f:bf:c5:06:99:f0:3f:ad:
         1d:37:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----