Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=I
        Validity
            Not Before: Jan  1 12:00:00 2015 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:08:58:c2:04:8a:dd:26:10:9e:92:10:2e:
                    9c:c1:6f:c5:08:52:71:95:53:38:b5:cb:d0:bf:46:
                    54:37:8b:dc:93:8c:f4:01:73:1c:5b:03:9d:e7:c0:
                    36:bd:af:33:d1:2a:97:b6:ac:24:8e:93:9d:d1:8e:
                    01:fd:96:2f:89:33:71:e6:18:e1:b5:04:fb:ac:ac:
                    05:d7:5f:04:b9:83:af:f2:d3:de:4d:ea:58:02:6a:
                    39:9c:f2:d7:8d:25:bd:b6:0e:eb:7c:71:1b:00:ab:
                    77:ef:38:75:57:77:b2:5b:ac:c2:5d:eb:3c:9e:0a:
                    43:2d:bc:8b:4b:f0:6e:83:b5:ef:9b:1d:35:22:25:
                    b0:37:11:69:9e:42:63:ad:0a:da:f2:a7:4c:76:f8:
                    30:0a:c7:82:57:43:aa:07:08:ed:a8:a0:2d:46:63:
                    6b:aa:91:c6:eb:d5:a4:ed:cd:27:48:4f:f4:f0:06:
                    5f:95:7c:26:cc:b2:bc:73:15:e4:34:9e:16:20:d2:
                    af:27:13:e1:0d:e2:88:9b:10:34:ae:e7:55:10:00:
                    00:6c:19:6f:78:52:ae:37:6d:e3:26:4a:69:59:40:
                    b2:d7:f1:2c:2b:46:2e:95:d4:0e:0b:e7:06:9b:32:
                    01:be:2f:da:12:f4:ac:15:ec:08:11:0d:4a:4e:1c:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                55:00:E2:BF:82:AB:DE:38:48:85:52:B3:20:D5:26:55:69:0E:47:33
            X509v3 Authority Key Identifier: 
                keyid:0F:21:17:94:40:B1:A6:7C:59:FA:1C:C5:38:CF:62:E8:84:8B:1C:2C

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/I.cer
                CA Issuers - URI:http://url-for-aia2/I2.foo
                CA Issuers - URI:http://url-for-aia3/I3.foo
                CA Issuers - URI:http://url-for-aia4/I4.foo
                CA Issuers - URI:http://url-for-aia5/I5.foo
                CA Issuers - URI:http://url-for-aia6/I6.foo

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/I.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:target
    Signature Algorithm: sha256WithRSAEncryption
         2f:b7:1b:47:2a:1b:0f:d8:57:f3:cd:7f:bb:a1:ac:5a:31:3c:
         46:0e:c1:3b:a5:5f:3a:ec:2a:fa:6e:a0:ad:bc:00:af:e8:e7:
         5e:9d:d9:8a:ec:81:4d:00:99:12:15:f1:e7:02:fe:58:35:13:
         73:97:4b:36:de:bd:9b:ab:92:94:19:ee:1f:44:e8:fe:e0:c9:
         74:47:e5:b3:8d:40:e7:35:e6:69:2e:b5:a3:ef:83:76:65:20:
         06:92:54:bb:60:50:b1:74:be:40:27:7b:08:e3:82:f3:0f:8e:
         86:fe:cf:7f:a8:75:d1:3a:35:44:7a:12:9d:42:7e:90:5e:6e:
         67:94:77:b0:69:a2:1b:c9:32:28:c9:e3:f8:23:32:57:76:98:
         ae:f7:1c:bd:74:5b:47:15:9c:16:80:7e:56:c8:2a:0e:2d:fb:
         c8:81:e1:d1:85:ea:15:40:c6:3b:87:86:27:08:ad:98:a7:80:
         73:b8:81:30:7e:f9:3a:19:80:f7:70:95:2b:9d:5e:4c:21:d8:
         d4:98:75:b8:f3:96:77:3e:5d:f8:2d:fc:a1:ee:10:26:8a:17:
         11:e3:90:18:5f:5d:6a:03:52:e6:67:d5:5c:59:ce:19:fb:31:
         2d:8d:49:d4:8d:e4:1c:c7:8f:55:fb:69:69:d5:8a:a2:55:02:
         0a:e8:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----