Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4b:ee:17:1f:b7:e1:06:37:2f:d4:72:42:40:bd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Validity
            Not Before: Nov 18 12:00:00 2014 GMT
            Not After : Nov 18 12:00:00 2024 GMT
        Subject: CN=TERENA Personal CA 3, O=TERENA, L=Amsterdam, ST=Noord-Holland, C=NL
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:bb:1f:55:82:f4:a5:34:72:14:72:65:9b:
                    5f:d5:ea:a0:68:d8:9b:82:89:4f:53:62:9c:7b:8c:
                    ce:0e:da:d4:32:0e:af:1b:8c:cb:a6:eb:db:e0:eb:
                    03:34:94:c1:87:7e:53:20:a8:1e:f9:1b:17:8a:7d:
                    01:66:12:57:68:5e:2d:9c:2e:2b:21:a8:55:2f:53:
                    67:09:78:cd:d2:69:1b:0b:93:60:6c:b8:28:13:ce:
                    1f:4d:b1:88:26:ad:45:fa:d0:a1:ce:ab:b7:98:29:
                    56:71:6c:f1:56:24:5d:a7:30:e0:6e:31:73:6e:da:
                    a0:57:4c:64:8b:78:b5:c7:9c:db:c6:de:be:d3:2f:
                    31:a0:d6:80:39:b5:e0:31:40:4e:84:a3:cc:92:49:
                    e2:17:6c:fe:f0:64:1e:fa:ba:bc:25:87:9d:4f:21:
                    ba:c9:66:39:03:8d:d4:15:10:b8:7b:3a:54:cf:d5:
                    63:ba:4f:f1:df:e8:1b:04:7d:e1:5c:a6:86:b5:7b:
                    e3:16:fe:5c:34:55:eb:53:3c:f1:d0:d7:91:d8:29:
                    83:f6:59:8a:21:1f:1c:c3:88:2f:90:53:01:3b:51:
                    95:41:96:9f:5c:5c:8a:70:1e:e0:f3:4a:26:dc:e5:
                    11:b7:cf:49:ff:8f:64:90:0b:1d:03:93:91:4c:01:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

            X509v3 Subject Key Identifier: 
                F0:21:E9:49:77:73:9F:85:AE:18:3B:E8:52:70:14:06:ED:42:EE:CA
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

    Signature Algorithm: sha256WithRSAEncryption
         3a:c2:1b:2b:fe:63:de:bb:61:b4:b9:47:a8:fc:7c:05:b1:26:
         20:22:51:9b:c8:3d:f9:f5:c5:58:1e:b0:5e:a3:b2:9c:02:41:
         8f:31:1a:7f:cc:1b:4e:1d:f8:98:7d:ec:8f:08:fd:77:f1:db:
         d2:44:10:5a:b6:ad:09:b0:e0:fc:62:3b:d4:62:0d:9e:f1:a0:
         3c:4d:77:8a:eb:44:34:7b:8e:bb:4e:29:03:fc:27:ea:3e:6a:
         1d:2f:48:e3:fa:da:19:c3:ff:33:d2:ec:d4:4c:b4:8c:95:4b:
         61:b6:ef:b2:80:2f:97:c8:47:ad:a7:82:bf:7c:e1:f9:89:82:
         10:ef:d1:bb:23:18:09:9e:bb:71:0f:d3:18:54:b0:32:53:eb:
         52:28:00:6a:0a:06:7c:41:3c:07:a0:dd:65:ec:75:29:b8:1a:
         7e:db:b7:2b:da:91:ec:85:b5:87:9b:af:62:a6:38:14:9a:db:
         c3:d1:a8:64:83:ba:be:7a:69:98:49:a0:cd:9e:33:37:3a:a6:
         b9:af:1b:0c:2d:03:34:6c:73:9b:76:3a:c2:91:b8:75:95:e8:
         ed:da:9c:fd:8a:db:b8:c6:65:1d:9b:8b:55:57:d4:d4:14:bc:
         86:e9:54:d4:ee:c2:39:be:5d:c6:6d:b1:af:c0:00:91:7d:28:
         69:04:b1:e0