Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=I
        Validity
            Not Before: Jan  1 12:00:00 2015 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:08:58:c2:04:8a:dd:26:10:9e:92:10:2e:
                    9c:c1:6f:c5:08:52:71:95:53:38:b5:cb:d0:bf:46:
                    54:37:8b:dc:93:8c:f4:01:73:1c:5b:03:9d:e7:c0:
                    36:bd:af:33:d1:2a:97:b6:ac:24:8e:93:9d:d1:8e:
                    01:fd:96:2f:89:33:71:e6:18:e1:b5:04:fb:ac:ac:
                    05:d7:5f:04:b9:83:af:f2:d3:de:4d:ea:58:02:6a:
                    39:9c:f2:d7:8d:25:bd:b6:0e:eb:7c:71:1b:00:ab:
                    77:ef:38:75:57:77:b2:5b:ac:c2:5d:eb:3c:9e:0a:
                    43:2d:bc:8b:4b:f0:6e:83:b5:ef:9b:1d:35:22:25:
                    b0:37:11:69:9e:42:63:ad:0a:da:f2:a7:4c:76:f8:
                    30:0a:c7:82:57:43:aa:07:08:ed:a8:a0:2d:46:63:
                    6b:aa:91:c6:eb:d5:a4:ed:cd:27:48:4f:f4:f0:06:
                    5f:95:7c:26:cc:b2:bc:73:15:e4:34:9e:16:20:d2:
                    af:27:13:e1:0d:e2:88:9b:10:34:ae:e7:55:10:00:
                    00:6c:19:6f:78:52:ae:37:6d:e3:26:4a:69:59:40:
                    b2:d7:f1:2c:2b:46:2e:95:d4:0e:0b:e7:06:9b:32:
                    01:be:2f:da:12:f4:ac:15:ec:08:11:0d:4a:4e:1c:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                55:00:E2:BF:82:AB:DE:38:48:85:52:B3:20:D5:26:55:69:0E:47:33
            X509v3 Authority Key Identifier: 
                keyid:0F:21:17:94:40:B1:A6:7C:59:FA:1C:C5:38:CF:62:E8:84:8B:1C:2C

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/I.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/I.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:target
    Signature Algorithm: sha256WithRSAEncryption
         29:8b:90:40:d5:ca:ba:8b:2e:67:14:8e:13:17:4a:d3:fc:5a:
         80:73:13:82:a7:41:fa:e2:8a:ec:2c:b0:22:f2:71:b1:e8:8b:
         29:62:c8:69:6d:a0:be:28:ec:24:d4:34:64:8b:0d:33:5f:10:
         0b:6a:70:0e:03:b9:78:cc:8f:81:66:04:e6:0f:9b:2d:27:d5:
         45:3d:4e:f0:37:eb:71:3a:85:42:dc:6d:b8:06:c7:a3:1f:3f:
         f5:6b:b1:eb:cd:5d:fd:a2:fb:72:76:6a:b9:42:94:bf:33:a9:
         96:23:34:a4:a7:a4:97:8d:4d:8d:55:6d:0f:6e:ee:ba:71:95:
         ff:28:16:88:8d:65:e4:1c:f2:4c:88:04:7a:40:f4:69:ab:9d:
         48:e6:93:53:e2:08:c3:06:42:67:cf:7e:f5:45:b1:de:09:22:
         37:5a:fe:1d:92:05:eb:e7:23:90:57:81:68:6a:cd:05:86:04:
         9c:cd:2c:35:16:74:e0:e6:4e:c9:54:8b:7f:14:44:44:da:2b:
         52:19:4a:65:81:3d:d2:d2:33:5e:5c:a5:ef:ed:d0:d0:4a:cb:
         55:21:07:e7:64:22:3e:ce:31:36:fd:a1:ec:f1:32:d0:0c:8b:
         7e:2c:88:c7:2b:3f:9a:e2:5e:89:d7:00:f3:b5:c6:80:e0:46:
         de:86:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----