Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4e:c6:f5:3d:11:b4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2
        Validity
            Not Before: Jul 22 12:08:26 2014 GMT
            Not After : Jul  9 23:59:00 2019 GMT
        Subject: C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:c3:67:85:f9:0d:ae:f5:8d:54:c3:96:50:
                    35:3d:62:e9:6e:4c:ed:94:d7:00:5b:95:22:74:d4:
                    20:eb:34:8f:d6:ec:c0:31:04:0b:99:81:e2:a6:14:
                    d2:52:a0:28:23:84:8b:74:89:04:5e:5b:e0:e2:78:
                    c1:78:cb:16:cb:28:35:39:7b:2d:90:45:d0:ed:a0:
                    00:7a:7c:bf:4a:0e:1b:00:c3:86:e9:5c:2b:31:11:
                    7b:0c:f3:82:24:43:8c:1c:38:8b:6a:68:00:9a:ee:
                    dc:4f:78:ab:d2:c6:13:9b:76:ad:ee:de:26:e8:ef:
                    01:af:74:0f:c1:09:a2:f6:6b:ce:bd:d3:cd:14:30:
                    4f:f5:e5:e3:a4:c8:62:9b:82:1a:03:27:30:0d:02:
                    65:60:4d:ed:d1:09:23:2a:96:35:58:27:d3:76:c6:
                    71:b6:90:1d:c4:ed:ff:35:86:7d:6f:33:b3:db:0f:
                    c5:11:c2:8a:83:a1:94:5d:41:6b:d8:d2:10:f5:4c:
                    fd:ca:51:ac:d9:bd:ef:92:83:bb:da:eb:8b:16:56:
                    56:43:cf:e1:d5:13:3d:a6:1f:27:30:cd:49:54:db:
                    c9:13:34:9a:71:75:c5:6c:ea:a7:0b:98:f9:21:9d:
                    27:af:3e:a3:39:39:48:6a:8c:ad:c9:99:fb:c3:12:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                49:B7:C6:CF:E8:3D:1F:7F:EA:44:7B:13:29:F7:F1:0A:70:3E:DE:64
            X509v3 Authority Key Identifier: 
                keyid:31:C3:79:1B:BA:F5:53:D7:17:E0:89:7A:2D:17:6C:0A:B3:2B:9D:33

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:2
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22177.300.1.1.4.2.2
                Policy: 1.3.6.1.4.1.22177.300.1.1.4.3.0
                Policy: 1.3.6.1.4.1.22177.300.1.1.4.3.1
                Policy: 1.3.6.1.4.1.22177.300.1.1.4
                Policy: 1.3.6.1.4.1.22177.300.30

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://pki0336.telesec.de/rl/DT_ROOT_CA_2.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp0336.telesec.de/ocspr
                CA Issuers - URI:http://pki0336.telesec.de/crt/DT_ROOT_CA_2.cer

    Signature Algorithm: sha256WithRSAEncryption
         63:20:28:fd:9c:21:86:72:be:39:46:59:39:32:25:bc:a9:01:
         9b:0d:cc:ca:7d:41:9c:86:6d:0a:6e:2c:b3:13:59:75:b1:33:
         92:1b:61:27:16:ff:c3:b2:d5:35:82:fb:84:2a:01:49:bd:66:
         bb:66:2f:b2:c2:06:5d:6e:3f:6e:e3:01:5a:5b:ca:43:63:5c:
         95:b6:e1:31:a7:1f:d5:07:5f:4d:e6:65:82:4e:32:f9:c3:7c:
         7a:4b:cd:4d:5c:74:ee:21:f2:75:02:ec:52:3e:d2:c9:6a:d3:
         90:23:6e:49:67:35:be:7f:4d:56:a4:ec:cc:2f:cf:b7:a1:97:
         a8:72:3e:c9:bc:40:d6:5a:a4:08:3d:d6:bc:82:c3:b7:b7:32:
         8e:b1:2c:8e:6a:6d:b7:35:02:19:cf:f5:39:44:58:63:a7:24:
         00:10:b0:bb:fc:4e:af:6e:2f:38:bb:a5:57:49:3f:d8:6e:50:
         6f:2c:97:96:dc:1d:46:9a:65:89:cf:ae:cc:f2:e5:d9:9f:53:
         b3:3e:a1:2f:92:a9:d8:0b:c6:84:1f:04:c6:eb:1e:e8:9f:7d:
         b5:7b:a5:02:f1:24:c5:24:63:11:34:cc:5a:93:20:2a:79:88:
         3a:25:42:90:a9:65:3b:7c:86:d3:12:15:23:29:fc:2c:da:cc:
         39:5b:54:17