Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:90:60:e9:b2:5d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01
        Validity
            Not Before: May 12 15:06:01 2014 GMT
            Not After : Jul  9 23:59:00 2019 GMT
        Subject: C=DE, O=Deutsches Elektronen-Synchrotron DESY, OU=IT, CN=DESY CA - G02/emailAddress=desy-ca@desy.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:55:17:a6:13:16:80:bc:c9:9b:9f:01:9f:
                    9c:78:a6:ae:a5:8e:f6:14:5a:7a:d2:97:1a:ea:f1:
                    3d:d4:0c:f7:41:7a:e5:87:07:82:71:d5:db:8b:53:
                    76:7f:f6:69:30:91:22:f2:f6:a4:3d:6a:8a:70:0a:
                    0b:b3:33:c4:5a:88:d4:5d:93:2c:fd:19:99:f2:94:
                    91:87:53:1e:17:5e:e1:c9:5d:d2:23:ce:13:45:12:
                    1a:2d:0a:f3:6c:cc:d9:aa:cd:8f:29:b8:67:70:08:
                    b0:ab:e9:c8:65:76:c5:64:38:0f:be:9b:13:3c:80:
                    e1:63:6f:ee:9c:bc:fc:d5:27:18:fb:ce:20:e8:72:
                    59:2c:c2:33:6e:a2:b0:de:06:be:22:38:e1:fe:62:
                    b2:4c:a8:fa:8c:0c:7a:51:bb:ed:8f:c7:8a:0e:b4:
                    07:30:9f:13:9d:70:f3:83:b0:a3:37:88:a7:08:dc:
                    c5:be:45:7e:f0:e6:77:13:3e:a9:d3:8c:32:77:41:
                    12:17:ee:07:c2:02:5e:42:9f:9d:ad:1d:8c:9f:13:
                    b5:4b:e6:ad:e9:36:6a:86:a8:08:00:55:6c:bf:07:
                    06:aa:50:a2:e3:10:0f:c8:4e:25:25:71:71:72:5c:
                    c7:4e:67:75:eb:86:63:15:49:0a:6b:44:56:35:88:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 Subject Key Identifier: 
                94:97:E7:C7:73:80:82:22:8E:72:FA:FF:DD:9E:34:85:E3:B4:76:14
            X509v3 Authority Key Identifier: 
                keyid:49:B7:C6:CF:E8:3D:1F:7F:EA:44:7B:13:29:F7:F1:0A:70:3E:DE:64

            X509v3 Subject Alternative Name: 
                email:desy-ca@desy.de
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cdp1.pca.dfn.de/global-root-ca/pub/crl/cacrl.crl

                Full Name:
                  URI:http://cdp2.pca.dfn.de/global-root-ca/pub/crl/cacrl.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.pca.dfn.de/OCSP-Server/OCSP
                CA Issuers - URI:http://cdp1.pca.dfn.de/global-root-ca/pub/cacert/cacert.crt
                CA Issuers - URI:http://cdp2.pca.dfn.de/global-root-ca/pub/cacert/cacert.crt

    Signature Algorithm: sha256WithRSAEncryption
         bd:f9:e2:fd:12:d2:a0:91:e8:76:26:5b:d4:eb:c9:57:8d:39:
         ca:a0:a6:3b:d7:bd:91:ba:88:57:5e:8b:e9:d0:be:e4:2b:4d:
         09:ec:25:db:0b:7a:91:11:03:a5:a9:0c:ac:15:4e:1f:f0:90:
         4c:8a:86:15:d9:9c:c4:5e:69:08:0b:6f:fa:7d:db:98:8e:b9:
         7b:7e:df:38:5e:f3:f6:e3:10:f7:cc:89:d0:5d:9a:53:c2:8c:
         b1:63:0f:a7:bc:9f:64:42:01:1f:d2:5b:4c:f4:b8:e1:74:df:
         53:a2:50:11:0d:51:2f:dc:08:99:e1:f1:cf:12:2f:40:ce:fe:
         82:06:96:5d:67:e9:37:6f:4c:7a:34:60:13:58:8b:a0:ac:5b:
         a5:78:bb:d9:6f:44:2a:28:72:a0:4f:1b:85:d3:9b:e9:e3:8e:
         08:28:92:6a:ff:37:6f:0c:70:d3:3e:e5:b0:69:fb:a7:e6:c1:
         52:fd:2d:32:e6:69:5c:6f:d4:5e:d3:a2:1e:e0:00:12:69:f5:
         a0:f8:ef:3f:41:0b:5f:fe:79:c9:2b:2a:75:bd:c7:b4:5e:c9:
         c4:a2:a3:8b:33:98:26:cc:b8:22:70:7a:86:15:ad:f6:09:fa:
         9b:3b:99:6d:c8:3a:74:44:39:d3:7e:d6:f3:f7:de:79:4e:63:
         1d:e7:26:f9