Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=I
        Validity
            Not Before: Jan  1 12:00:00 2015 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:08:58:c2:04:8a:dd:26:10:9e:92:10:2e:
                    9c:c1:6f:c5:08:52:71:95:53:38:b5:cb:d0:bf:46:
                    54:37:8b:dc:93:8c:f4:01:73:1c:5b:03:9d:e7:c0:
                    36:bd:af:33:d1:2a:97:b6:ac:24:8e:93:9d:d1:8e:
                    01:fd:96:2f:89:33:71:e6:18:e1:b5:04:fb:ac:ac:
                    05:d7:5f:04:b9:83:af:f2:d3:de:4d:ea:58:02:6a:
                    39:9c:f2:d7:8d:25:bd:b6:0e:eb:7c:71:1b:00:ab:
                    77:ef:38:75:57:77:b2:5b:ac:c2:5d:eb:3c:9e:0a:
                    43:2d:bc:8b:4b:f0:6e:83:b5:ef:9b:1d:35:22:25:
                    b0:37:11:69:9e:42:63:ad:0a:da:f2:a7:4c:76:f8:
                    30:0a:c7:82:57:43:aa:07:08:ed:a8:a0:2d:46:63:
                    6b:aa:91:c6:eb:d5:a4:ed:cd:27:48:4f:f4:f0:06:
                    5f:95:7c:26:cc:b2:bc:73:15:e4:34:9e:16:20:d2:
                    af:27:13:e1:0d:e2:88:9b:10:34:ae:e7:55:10:00:
                    00:6c:19:6f:78:52:ae:37:6d:e3:26:4a:69:59:40:
                    b2:d7:f1:2c:2b:46:2e:95:d4:0e:0b:e7:06:9b:32:
                    01:be:2f:da:12:f4:ac:15:ec:08:11:0d:4a:4e:1c:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                55:00:E2:BF:82:AB:DE:38:48:85:52:B3:20:D5:26:55:69:0E:47:33
            X509v3 Authority Key Identifier: 
                keyid:0F:21:17:94:40:B1:A6:7C:59:FA:1C:C5:38:CF:62:E8:84:8B:1C:2C

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/I.cer
                CA Issuers - URI:http://url-for-aia2/I2.foo
                CA Issuers - URI:http://url-for-aia3/I3.foo

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/I.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:target
    Signature Algorithm: sha256WithRSAEncryption
         16:0d:2c:06:91:56:e7:d6:d4:e9:6b:e3:68:37:42:51:0e:2e:
         79:cc:ca:c8:c9:1c:38:15:a6:ac:a8:16:6f:fd:05:7b:3d:c2:
         58:3b:9d:cd:ef:aa:88:11:cc:95:05:70:6e:f5:b9:47:bb:13:
         52:81:01:0d:f3:2e:e3:14:23:48:01:d7:c6:49:01:ce:07:5c:
         0a:90:83:2a:0c:50:d9:af:49:5d:0a:f9:7c:bd:70:7a:56:1e:
         78:d5:5e:38:9b:fe:98:9b:16:f0:c1:97:50:6d:c8:1f:9c:b2:
         c2:2f:02:92:cd:5b:9e:1b:9a:e7:8d:10:74:dc:47:90:a0:65:
         4a:e2:41:f5:7f:af:ce:50:46:61:33:2f:97:a2:17:e8:ad:ec:
         fd:8e:0a:5f:5e:ba:6c:7c:04:8a:6a:8d:ba:f2:ab:ad:62:60:
         ac:83:40:95:64:1b:a1:ee:78:25:28:94:01:5c:a2:69:7a:e0:
         4a:17:1e:61:89:2e:e8:9f:4e:5d:b1:95:66:c1:ba:7b:4c:40:
         0e:0f:5c:b4:cf:11:1a:2a:04:96:62:8c:1a:17:fe:9e:55:a7:
         05:73:08:29:fb:3c:eb:87:69:a7:77:f4:a0:49:30:68:7e:e0:
         63:fd:f2:0b:36:de:0c:2e:33:59:c3:ad:67:f0:51:db:fe:de:
         a3:8b:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----