Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3a:d4:50:84:7e:ee:f3:58:f8:8e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFN-Verein Certification Authority 2,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE
        Validity
            Not Before: Nov  3 15:24:48 2016 GMT
            Not After : Feb 22 23:59:59 2031 GMT
        Subject: CN=MPG CA - G02,O=Max-Planck-Gesellschaft,L=Muenchen,ST=Bayern,C=DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:78:e7:d2:e1:e1:6a:a0:3a:cf:cc:77:4e:
                    17:c5:4d:b2:16:d7:cc:d7:96:6e:25:5d:0f:64:fe:
                    c1:9a:a4:89:28:b2:cf:ca:a9:8e:ac:00:df:35:d2:
                    79:3c:81:81:b6:8d:89:06:1b:51:44:11:dd:1b:41:
                    91:38:eb:d3:44:78:f3:3a:06:bd:e5:63:93:7a:ea:
                    da:ef:d4:f6:d4:55:b0:c0:0c:1a:db:d3:85:9c:3d:
                    d9:a6:54:2c:e8:78:1d:c1:0a:d9:58:d8:b5:58:73:
                    49:c6:7f:f8:98:0d:7d:ac:d1:01:51:ce:6e:ad:22:
                    29:64:fb:d9:8b:95:e6:94:5d:ef:dc:91:ce:97:1d:
                    ca:59:5e:e6:52:d7:81:e2:9c:04:11:f1:93:83:89:
                    e9:3c:02:5b:a7:6a:3b:6a:bc:50:76:82:2a:f8:fb:
                    b6:3a:cb:ea:84:3e:d1:93:84:1e:69:7f:84:33:54:
                    12:e2:5a:9d:d6:8b:56:e2:11:3b:d2:1f:ce:0c:fc:
                    b5:c5:f7:e0:6d:98:ae:a2:d5:90:2c:2e:a7:23:06:
                    ba:e5:0b:fa:6f:2a:a5:21:7d:2a:66:eb:bd:f5:5b:
                    2e:fa:bd:ec:59:8b:0b:e5:20:64:81:e7:0d:23:b7:
                    cc:27:9b:5f:1e:b8:e8:c5:fa:ca:97:f1:2b:4c:0b:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22177.300.30
                Policy: 1.3.6.1.4.1.22177.300.1.1.4

            X509v3 Subject Key Identifier: 
                C4:88:A5:07:EE:B8:7B:AA:0C:13:BF:DA:29:74:63:52:1B:49:70:16
            X509v3 Authority Key Identifier: 
                keyid:93:E3:D8:32:26:DA:D5:F1:4A:A5:91:4A:E0:EA:4B:E2:A2:0C:CF:E1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

                Full Name:
                  URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.pca.dfn.de/OCSP-Server/OCSP
                CA Issuers - URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt
                CA Issuers - URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt

    Signature Algorithm: sha256WithRSAEncryption
         12:e9:78:3e:45:ca:0c:ea:3a:38:fe:fe:50:0e:cb:6d:14:40:
         e1:96:97:1d:11:32:e3:dc:23:89:ee:c8:54:fc:48:69:8a:f6:
         50:fb:40:28:3f:1e:86:89:95:f5:3f:af:bf:1e:c7:e4:84:89:
         d7:b7:db:a7:af:94:50:28:25:72:05:8d:5c:b3:36:5b:43:86:
         93:0a:ac:f2:03:ba:1d:8d:d7:6c:f2:9f:51:2d:6a:0a:8f:2f:
         a8:6e:e2:95:51:cd:c0:69:97:f1:76:1c:2b:ed:98:cc:79:2b:
         85:8d:d4:bd:5f:98:75:8b:71:26:a9:76:15:cb:bc:06:7d:44:
         6f:c1:de:ba:b2:50:b2:d2:34:df:31:1d:76:17:a6:6b:6f:1b:
         45:46:24:09:dd:67:e9:63:f8:11:fb:ba:f7:77:9c:75:a7:5c:
         41:c2:da:ae:e2:42:50:d4:aa:0d:1a:c0:8a:96:26:07:4b:97:
         1d:50:f0:38:3f:b2:87:6f:d2:6f:8b:37:49:0e:cc:6b:d5:0d:
         10:a6:a3:00:5d:58:68:61:ba:c0:fe:76:e2:95:eb:aa:41:97:
         ea:a1:0b:ee:0b:8a:96:ab:89:66:8c:a8:ae:69:a4:c4:11:38:
         04:e3:61:e3:51:bf:02:3e:9c:37:04:5e:bd:af:0d:a2:a6:75:
         bc:60:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----