Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=I
        Validity
            Not Before: Jan  1 12:00:00 2015 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:08:58:c2:04:8a:dd:26:10:9e:92:10:2e:
                    9c:c1:6f:c5:08:52:71:95:53:38:b5:cb:d0:bf:46:
                    54:37:8b:dc:93:8c:f4:01:73:1c:5b:03:9d:e7:c0:
                    36:bd:af:33:d1:2a:97:b6:ac:24:8e:93:9d:d1:8e:
                    01:fd:96:2f:89:33:71:e6:18:e1:b5:04:fb:ac:ac:
                    05:d7:5f:04:b9:83:af:f2:d3:de:4d:ea:58:02:6a:
                    39:9c:f2:d7:8d:25:bd:b6:0e:eb:7c:71:1b:00:ab:
                    77:ef:38:75:57:77:b2:5b:ac:c2:5d:eb:3c:9e:0a:
                    43:2d:bc:8b:4b:f0:6e:83:b5:ef:9b:1d:35:22:25:
                    b0:37:11:69:9e:42:63:ad:0a:da:f2:a7:4c:76:f8:
                    30:0a:c7:82:57:43:aa:07:08:ed:a8:a0:2d:46:63:
                    6b:aa:91:c6:eb:d5:a4:ed:cd:27:48:4f:f4:f0:06:
                    5f:95:7c:26:cc:b2:bc:73:15:e4:34:9e:16:20:d2:
                    af:27:13:e1:0d:e2:88:9b:10:34:ae:e7:55:10:00:
                    00:6c:19:6f:78:52:ae:37:6d:e3:26:4a:69:59:40:
                    b2:d7:f1:2c:2b:46:2e:95:d4:0e:0b:e7:06:9b:32:
                    01:be:2f:da:12:f4:ac:15:ec:08:11:0d:4a:4e:1c:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                55:00:E2:BF:82:AB:DE:38:48:85:52:B3:20:D5:26:55:69:0E:47:33
            X509v3 Authority Key Identifier: 
                keyid:0F:21:17:94:40:B1:A6:7C:59:FA:1C:C5:38:CF:62:E8:84:8B:1C:2C

            Authority Information Access: 
                CA Issuers - URI:foobar
                CA Issuers - URI:http://url-for-aia2/I2.foo

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/I.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:target
    Signature Algorithm: sha256WithRSAEncryption
         a1:23:f5:5d:1c:5f:b2:e1:7d:0a:7d:54:c5:1d:ca:ff:3a:53:
         d6:33:4e:a7:65:37:0c:ec:f3:b0:d1:53:4b:4c:96:a0:a1:52:
         4a:07:ee:23:fc:2f:44:0e:0f:07:a1:b0:c8:eb:61:69:b1:39:
         8e:0d:6b:bd:b7:0a:d5:12:a0:af:5a:7a:20:21:14:d2:bd:2f:
         08:8b:00:c1:e9:9d:35:64:ea:7c:8f:e8:4c:09:b1:54:0d:c6:
         02:37:55:1c:42:4d:38:cb:7f:b6:d2:46:74:5c:ca:e8:3c:b1:
         0b:3f:69:44:00:32:c6:73:3e:9f:2e:c1:2a:93:33:30:50:7e:
         e6:ad:57:cb:f9:bb:5b:7a:7f:f7:7b:2f:8c:f6:b0:cb:7c:59:
         be:42:4e:74:05:0e:60:95:4f:4c:87:e5:48:a1:2b:70:4c:1e:
         58:f8:26:a2:0f:1f:ee:b4:98:eb:25:b4:ae:72:0d:9e:61:3a:
         e3:c3:b7:b4:81:fb:b4:30:ea:ff:4c:ae:17:58:ab:57:5e:df:
         de:10:47:bc:66:c4:c9:2c:56:64:5f:cb:85:e5:5b:97:f2:e6:
         9b:b8:5d:ae:14:e5:de:3a:74:1b:33:56:cf:76:3b:42:96:5d:
         fb:e8:b7:c3:ab:0a:46:1e:da:e3:07:b4:69:6a:90:74:3f:37:
         48:b5:a9:a3
-----BEGIN CERTIFICATE-----
MIIDlTCCAn2gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAMMQowCAYDVQQDDAFJMB4X
DTE1MDEwMTEyMDAwMFoXDTIxMDEwMTEyMDAwMFowETEPMA0GA1UEAwwGdGFyZ2V0
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCIIWMIEit0mEJ6SEC6c
wW/FCFJxlVM4tcvQv0ZUN4vck4z0AXMcWwOd58A2va8z0SqXtqwkjpOd0Y4B/ZYv
iTNx5hjhtQT7rKwF118EuYOv8tPeTepYAmo5nPLXjSW9tg7rfHEbAKt37zh1V3ey
W6zCXes8ngpDLbyLS/Bug7Xvmx01IiWwNxFpnkJjrQra8qdMdvgwCseCV0OqBwjt
qKAtRmNrqpHG69Wk7c0nSE/08AZflXwmzLK8cxXkNJ4WINKvJxPhDeKImxA0rudV
EAAAbBlveFKuN23jJkppWUCy1/EsK0YuldQOC+cGmzIBvi/aEvSsFewIEQ1KThw8
tQIDAQABo4H8MIH5MB0GA1UdDgQWBBRVAOK/gqveOEiFUrMg1SZVaQ5HMzAfBgNV
HSMEGDAWgBQPIReUQLGmfFn6HMU4z2LohIscLDBKBggrBgEFBQcBAQQ+MDwwEgYI
KwYBBQUHMAKGBmZvb2JhcjAmBggrBgEFBQcwAoYaaHR0cDovL3VybC1mb3ItYWlh
Mi9JMi5mb28wKQYDVR0fBCIwIDAeoBygGoYYaHR0cDovL3VybC1mb3ItY3JsL0ku
Y3JsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwEQYDVR0RBAowCIIGdGFyZ2V0MA0GCSqGSIb3DQEBCwUAA4IBAQChI/VdHF+y
4X0KfVTFHcr/OlPWM06nZTcM7POw0VNLTJagoVJKB+4j/C9EDg8HobDI62FpsTmO
DWu9twrVEqCvWnogIRTSvS8IiwDB6Z01ZOp8j+hMCbFUDcYCN1UcQk04y3+20kZ0
XMroPLELP2lEADLGcz6fLsEqkzMwUH7mrVfL+btben/3ey+M9rDLfFm+Qk50BQ5g
lU9Mh+VIoStwTB5Y+CaiDx/utJjrJbSucg2eYTrjw7e0gfu0MOr/TK4XWKtXXt/e
EEe8ZsTJLFZkX8uF5VuX8uabuF2uFOXeOnQbM1bPdjtCll376LfDqwpGHtrjB7Rp
apB0PzdItamj
-----END CERTIFICATE-----