Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ff:50:ea:fe:0f:53:46:88:9f:80:41:8f:e7:42:c8
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=UTN-USERFirst-Client Authentication and Email, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, ST=UT, C=US
        Validity
            Not Before: May 18 00:00:00 2009 GMT
            Not After : Dec 31 23:59:59 2028 GMT
        Subject: CN=TERENA eScience Personal CA, O=TERENA, C=NL
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:25:7d:cd:ef:59:04:ab:74:27:29:b6:63:
                    8a:ef:c4:35:70:a1:46:08:af:6e:50:9b:1b:71:78:
                    97:02:85:c0:35:ff:90:18:11:66:fa:33:39:14:9e:
                    a4:12:f7:3d:ee:05:2c:81:e7:f7:2d:2e:36:78:43:
                    0e:39:b6:7f:7a:74:c3:cb:55:3f:2f:b3:cb:c3:37:
                    6a:e1:95:03:23:1b:b3:22:98:13:83:58:30:5f:ac:
                    3c:91:45:d3:6d:0b:2e:cb:d1:91:61:b2:ca:71:fa:
                    c2:89:0c:7b:09:d6:92:bf:a3:81:17:11:55:20:df:
                    37:81:9f:1e:26:09:1d:d2:17:19:43:cb:8b:99:25:
                    74:41:5b:e6:32:2a:d0:a7:53:dc:d2:21:8d:cd:91:
                    cf:7b:6c:f4:c9:fe:d0:e5:d2:06:6b:1a:61:42:1b:
                    80:91:07:dc:14:49:27:3b:0a:8a:b2:e2:3b:69:08:
                    84:cb:81:99:d7:ba:14:1f:d8:7e:92:63:bd:f6:2d:
                    31:fa:95:4e:cd:36:0d:99:ef:11:ba:ad:4a:fb:a8:
                    c4:78:b9:7c:5a:3e:c8:f5:08:32:c0:a9:05:c7:8c:
                    1a:28:8f:30:ba:17:a3:f1:b9:e2:07:a7:b8:fb:55:
                    bf:9f:62:5a:d5:14:0f:08:b4:13:99:d2:12:79:5a:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:89:82:67:7D:C4:9D:26:70:00:4B:B4:50:48:7C:DE:3D:AE:04:6E:7D

            X509v3 Subject Key Identifier: 
                C8:89:73:99:A7:5D:51:16:53:45:54:7C:A3:C2:39:7C:CB:D7:AA:81
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.29
                Policy: 1.2.840.113612.5.2.2.5

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-ClientAuthenticationandEmail.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/UTNAAAClient_CA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         08:17:a4:1c:f9:15:6b:b0:19:61:6f:a0:48:e3:7a:24:ef:41:
         55:9a:a0:50:70:d8:23:d5:53:86:4a:67:8e:e8:da:56:16:18:
         2c:1b:18:21:89:ba:98:24:ee:56:34:e3:17:86:26:bd:21:5a:
         d4:19:93:4a:ea:61:74:4d:b6:c4:84:8d:47:ee:ca:2e:65:6d:
         36:93:98:b1:e2:92:66:88:e2:4e:7b:75:c7:5e:44:69:21:dc:
         12:6a:30:fc:61:80:fe:0f:f0:9d:d2:dc:7e:ae:e5:c2:53:4d:
         0b:70:83:61:56:45:fb:3d:df:72:f6:02:42:75:eb:88:8a:98:
         57:60:f5:9f:a2:72:49:b1:7a:3e:41:67:35:c3:55:2b:0d:07:
         35:e8:c6:2b:d5:ba:87:79:80:74:e7:92:36:bd:46:81:7a:2e:
         29:e2:6a:be:e1:17:13:35:7c:16:a4:25:33:2f:61:ee:ce:c9:
         52:e0:40:db:d3:be:39:5a:cf:cf:4c:14:e5:7f:c5:43:57:8b:
         4d:b9:5a:8e:c2:0f:06:4d:de:c8:49:9d:81:73:ba:e4:3f:98:
         a5:93:3c:59:4e:db:9b:35:df:fe:4d:bf:55:a1:e9:64:c3:45:
         7c:ac:8f:7c:47:d1:3a:f1:4e:75:d9:90:67:40:e8:b1:2f:9e:
         17:2f:5c:35