Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989394634359432923 (0x1b9bbfe1330fe6db)
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=Personal Signing, O=CESNET CA, DC=cesnet-ca, DC=cz
        Validity
            Not Before: Feb  5 23:16:47 2012 GMT
            Not After : Feb  4 23:16:47 2014 GMT
        Subject: CN=TSA 1, O=CESNET
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:27:be:d6:8b:12:b7:33:bf:c5:2c:e2:d9:
                    53:f7:78:fd:a5:e9:76:3c:3e:fd:c8:98:6e:b2:f4:
                    2e:f7:ae:9a:d0:35:aa:7c:1c:15:36:2b:b9:49:42:
                    e6:4c:3c:e6:09:a0:d6:3f:29:31:67:20:74:4e:e2:
                    38:9c:be:c8:54:ca:58:f1:d2:d2:16:d8:98:f6:d8:
                    d5:8b:e6:2e:07:22:c7:64:f7:e6:e2:1b:54:f1:61:
                    ba:19:27:e8:91:e3:c4:0d:a4:25:79:00:68:c2:4e:
                    71:ed:2a:99:3f:af:5c:7c:f7:f6:15:08:e7:62:1b:
                    a6:1e:4c:98:9f:95:7b:fd:7c:c9:fd:4d:2d:81:31:
                    29:03:66:43:04:c9:3d:99:b9:72:86:ed:83:b2:e8:
                    2a:5d:30:34:ef:af:ab:0d:7b:af:8a:a7:b1:fe:8e:
                    9f:5d:d1:c0:fb:30:f6:dc:92:15:21:17:26:a8:36:
                    55:14:b1:eb:7f:02:4e:05:ca:9d:ad:c5:39:22:57:
                    5f:67:c6:20:e1:26:ac:9f:9d:76:9e:b3:df:71:57:
                    89:9f:be:27:ff:f6:fb:cf:6a:8d:ab:e4:83:de:dc:
                    e9:b6:3b:98:bd:38:cf:5f:ac:7f:58:d0:d2:06:45:
                    47:61:0c:a0:d9:79:27:17:15:7f:77:17:5e:97:ef:
                    2b:c1
                Exponent: 3 (0x3)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D0:2E:F0:14:83:A7:B2:A7:8A:C9:25:B6:38:2F:A5:89:9D:93:F7:78
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:5F:18:DF:8A:FF:71:8E:24:AD:14:AD:05:4B:B9:B3:12:A5:1A:0F:85

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.cesnet-ca.cz/PersonalSigning.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         8f:4a:e0:ed:b7:4a:7b:6d:c3:1f:a7:d3:ce:1b:0d:32:e2:3a:
         6e:f3:f6:1b:19:33:20:fb:21:a8:09:ed:1a:65:c1:aa:14:3d:
         b3:f5:e5:a0:35:f5:da:06:87:1d:3d:e3:7c:01:e4:3e:45:33:
         9c:52:32:ae:aa:39:88:72:fa:8a:63:8e:03:1d:a7:75:ca:13:
         ee:68:4e:88:46:47:6b:2f:9b:f4:e2:e5:aa:3a:ed:71:7a:ef:
         5f:80:21:56:7b:ac:96:5c:61:85:5a:d7:31:5b:e8:c6:d1:c3:
         ea:54:46:ac:91:b6:f6:db:2d:b0:90:85:95:0f:59:6b:a3:38:
         06:5a:32:a8:83:0c:30:c9:1a:8a:c1:99:bb:04:bc:aa:76:7a:
         0c:8d:19:da:c2:30:87:c2:d0:43:52:31:5f:13:dd:2a:13:27:
         ee:b9:e2:a7:a0:32:a7:e0:3a:f8:ee:a3:17:a0:06:f3:58:a2:
         9d:26:ff:fa:2d:01:6d:66:63:06:6d:34:b3:6e:02:c4:93:82:
         c8:f0:24:7c:8d:ee:8d:03:51:9a:b9:1e:20:97:50:f8:14:3c:
         a0:f7:72:6f:f3:8b:b4:49:13:7d:fc:98:00:15:61:1b:9c:97:
         06:6e:4a:2f:f1:20:e3:f1:11:72:b4:1a:8e:85:0c:45:e6:53:
         db:42:85:13