Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3a:d4:8c:24:ed:92:2e:b0:f4:90:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFN-Verein Certification Authority 2,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE
        Validity
            Not Before: Nov  3 15:25:48 2016 GMT
            Not After : Feb 22 23:59:59 2031 GMT
        Subject: CN=KIT-CA,O=Karlsruhe Institute of Technology,L=Karlsruhe,ST=Baden-Wuerttemberg,C=DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:00:f7:41:82:19:65:d7:09:0f:95:e0:c9:
                    02:73:d0:9a:3d:c6:14:d2:1a:d4:73:49:93:ca:f6:
                    d0:dc:3b:8e:31:ec:be:c3:96:85:23:c2:64:98:00:
                    f9:08:7b:23:8c:35:9e:fe:eb:80:35:ce:8e:47:cd:
                    bc:c4:ba:0d:e8:45:78:02:c3:4c:84:3f:47:31:e9:
                    58:66:b1:ae:05:2d:a7:b0:e5:65:1b:32:08:7f:cb:
                    7e:45:7e:e9:0d:54:20:0d:cf:d4:bd:cc:f3:88:ee:
                    39:1e:62:c2:a1:87:94:0d:ca:a7:f5:08:68:f0:99:
                    ee:87:89:d7:25:d3:c2:44:1e:14:bd:cc:2d:44:2a:
                    58:92:00:9e:0b:e2:e5:c5:f7:b8:22:97:67:bc:00:
                    53:5f:59:30:61:1e:13:56:69:c0:83:73:1e:97:9b:
                    4b:a1:5f:96:73:14:dd:c0:93:29:b1:b8:c5:cf:c3:
                    f5:d6:a3:2d:6b:9d:cd:69:cb:5e:7f:88:31:05:63:
                    12:12:90:e5:9c:62:fe:b3:0c:e4:51:f7:75:b3:ed:
                    cd:42:41:4a:05:b0:19:e9:e8:59:8a:f3:99:73:86:
                    a1:e2:24:71:07:54:ff:e6:fd:93:cd:af:87:c9:aa:
                    34:e1:fe:52:6e:49:03:d9:8d:69:d1:9e:6f:74:c5:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22177.300.30
                Policy: 1.3.6.1.4.1.22177.300.1.1.4

            X509v3 Subject Key Identifier: 
                04:1A:BF:1C:93:91:3D:D3:D9:3D:B0:DE:13:23:E5:9A:70:F4:2E:08
            X509v3 Authority Key Identifier: 
                keyid:93:E3:D8:32:26:DA:D5:F1:4A:A5:91:4A:E0:EA:4B:E2:A2:0C:CF:E1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

                Full Name:
                  URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.pca.dfn.de/OCSP-Server/OCSP
                CA Issuers - URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt
                CA Issuers - URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:40:a9:6e:51:81:93:84:70:19:7a:1e:48:7a:b8:59:74:
         83:7d:07:8f:3c:8e:38:de:c6:c7:ec:d6:9d:08:1e:32:80:12:
         55:1a:c4:77:63:4d:f1:dc:db:31:0d:a9:f3:ed:73:e1:0a:44:
         92:f4:e0:c3:94:58:98:fb:f0:14:91:d8:c3:96:bb:c5:ab:39:
         55:d8:98:86:40:24:0c:c7:d4:bd:5e:14:d4:7a:71:e9:b7:77:
         59:ec:9e:3a:ad:ab:0d:b5:11:0f:bf:3b:f9:17:6f:d9:48:2b:
         fb:2f:60:3c:2e:74:83:45:71:d5:84:e5:49:8e:89:cf:59:1d:
         2c:05:3d:be:28:11:e3:3d:ee:d1:b5:f1:64:24:89:5c:ca:17:
         57:0c:ea:7c:cb:1d:6a:7b:f2:e4:4b:c0:3d:50:7a:4d:72:ed:
         e5:f9:81:cf:22:41:2b:ef:df:7c:13:96:1d:29:a6:66:c3:a9:
         f6:8c:4d:1f:d7:fc:40:fb:48:57:dd:e5:2f:42:17:4e:c4:5e:
         3f:d7:5a:5b:fb:a6:cd:a0:69:f4:7b:f7:71:5a:3e:b3:e5:a0:
         6b:e0:86:d0:bb:a4:a4:fc:b8:e3:0d:05:70:b4:d9:7a:ba:76:
         b3:7a:26:55:3e:e6:4f:9b:6d:24:5c:01:de:34:06:a9:fa:bf:
         26:00:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----