Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=I
        Validity
            Not Before: Jan  1 12:00:00 2015 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:08:58:c2:04:8a:dd:26:10:9e:92:10:2e:
                    9c:c1:6f:c5:08:52:71:95:53:38:b5:cb:d0:bf:46:
                    54:37:8b:dc:93:8c:f4:01:73:1c:5b:03:9d:e7:c0:
                    36:bd:af:33:d1:2a:97:b6:ac:24:8e:93:9d:d1:8e:
                    01:fd:96:2f:89:33:71:e6:18:e1:b5:04:fb:ac:ac:
                    05:d7:5f:04:b9:83:af:f2:d3:de:4d:ea:58:02:6a:
                    39:9c:f2:d7:8d:25:bd:b6:0e:eb:7c:71:1b:00:ab:
                    77:ef:38:75:57:77:b2:5b:ac:c2:5d:eb:3c:9e:0a:
                    43:2d:bc:8b:4b:f0:6e:83:b5:ef:9b:1d:35:22:25:
                    b0:37:11:69:9e:42:63:ad:0a:da:f2:a7:4c:76:f8:
                    30:0a:c7:82:57:43:aa:07:08:ed:a8:a0:2d:46:63:
                    6b:aa:91:c6:eb:d5:a4:ed:cd:27:48:4f:f4:f0:06:
                    5f:95:7c:26:cc:b2:bc:73:15:e4:34:9e:16:20:d2:
                    af:27:13:e1:0d:e2:88:9b:10:34:ae:e7:55:10:00:
                    00:6c:19:6f:78:52:ae:37:6d:e3:26:4a:69:59:40:
                    b2:d7:f1:2c:2b:46:2e:95:d4:0e:0b:e7:06:9b:32:
                    01:be:2f:da:12:f4:ac:15:ec:08:11:0d:4a:4e:1c:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                55:00:E2:BF:82:AB:DE:38:48:85:52:B3:20:D5:26:55:69:0E:47:33
            X509v3 Authority Key Identifier: 
                keyid:0F:21:17:94:40:B1:A6:7C:59:FA:1C:C5:38:CF:62:E8:84:8B:1C:2C

            Authority Information Access: 
                CA Issuers - URI:file:///dev/null
                CA Issuers - URI:http://url-for-aia2/I2.foo

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/I.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:target
    Signature Algorithm: sha256WithRSAEncryption
         20:9c:97:da:0f:c5:f2:28:2c:86:94:e8:14:94:cb:dd:f7:c4:
         eb:c6:53:40:72:4a:98:e1:ef:2b:b6:40:83:3c:99:60:f5:5f:
         99:5c:65:3e:87:1b:5f:8c:73:60:7f:78:bc:b0:45:ad:5e:ad:
         e4:be:6b:1a:98:bc:41:82:20:1c:17:f8:0c:bf:ae:c9:68:b2:
         e5:16:14:61:34:15:48:23:80:d7:5c:dc:71:4f:5e:09:a8:9c:
         e1:0e:6c:be:a9:04:bc:9c:1c:8b:93:92:33:58:b7:0d:3e:01:
         30:60:3e:9c:b8:0c:9e:cc:b6:24:fb:c1:9c:45:d3:c1:54:e3:
         0f:b7:45:ed:ee:9b:4e:69:c4:44:4f:69:4a:2e:73:61:20:f2:
         0b:9a:28:cc:0b:68:1e:9c:83:05:f9:64:94:df:8e:39:87:3e:
         af:ec:e4:52:45:f4:37:49:bc:03:e2:c3:b4:e4:34:fb:d2:cf:
         e8:89:ae:d2:a8:9a:79:7a:85:54:9f:73:85:fb:95:54:35:c4:
         a0:5d:2e:23:5e:6d:ac:16:32:4f:49:c6:78:7f:ed:83:3d:48:
         98:dc:9b:e7:8f:53:18:42:55:66:d1:ed:1a:2b:95:50:81:21:
         6d:97:de:3b:52:ed:cb:7d:89:16:7e:09:0c:ba:d9:c3:10:b5:
         d9:26:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----