Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7709478377892925 (0x1b63bad01e2c3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V., OU=DFN-PKI, CN=DFN-Verein Certification Authority 2
        Validity
            Not Before: May 24 11:38:40 2016 GMT
            Not After : Feb 22 23:59:59 2031 GMT
        Subject: C=DE, O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V., OU=DFN-PKI, CN=DFN-Verein Global Issuing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:79:1c:47:de:1f:86:cb:c6:69:d7:10:9e:
                    39:d7:d9:a2:30:db:72:1c:05:7f:29:5f:4b:68:f1:
                    ad:19:d6:4c:e1:6b:1b:b1:0b:7f:a1:ab:e0:7b:8b:
                    8b:d8:2d:ce:6e:88:3a:10:ee:57:e5:1e:7f:04:51:
                    36:eb:ba:70:6d:63:a0:be:96:2e:40:e1:d1:83:4c:
                    66:3d:1c:64:69:e5:9b:a4:ad:72:ae:68:39:51:87:
                    79:cc:17:d3:ae:2f:5d:63:71:4b:39:7a:eb:42:a7:
                    97:90:69:05:bf:90:ff:a4:40:70:bd:03:e7:bf:9e:
                    18:88:1f:9f:99:88:4d:0e:47:8d:48:5f:65:99:10:
                    d2:d9:2a:49:ed:c1:b9:2d:1d:9f:12:cb:15:d3:3f:
                    7f:1e:54:2f:3a:ae:93:57:a7:7e:78:ca:d5:4a:e2:
                    1a:e5:ed:41:7d:53:5f:c8:b3:2a:f5:8a:30:ac:ed:
                    17:05:24:3f:b6:a0:0b:07:fd:4d:1a:9a:03:52:a0:
                    36:9c:de:24:87:65:e4:e7:fa:c7:96:73:24:14:cd:
                    d0:e8:1b:68:9e:18:59:ae:76:7e:f7:d1:0a:78:3c:
                    87:4b:b0:37:cf:53:ca:3a:38:10:f3:cb:47:6d:8c:
                    64:3d:3c:5a:45:4a:ba:ca:80:7c:b8:f3:e7:a7:4c:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22177.300.30
                Policy: 1.3.6.1.4.1.22177.300.1.1.4

            X509v3 Subject Key Identifier: 
                6B:3A:98:8B:F9:F2:53:89:DA:E0:AD:B2:32:1E:09:1F:E8:AA:3B:74
            X509v3 Authority Key Identifier: 
                keyid:93:E3:D8:32:26:DA:D5:F1:4A:A5:91:4A:E0:EA:4B:E2:A2:0C:CF:E1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

                Full Name:
                  URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.pca.dfn.de/OCSP-Server/OCSP
                CA Issuers - URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt
                CA Issuers - URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt

    Signature Algorithm: sha256WithRSAEncryption
         81:78:45:a4:4e:a4:7f:0e:55:f0:09:b1:6a:3e:78:cc:68:35:
         a9:1c:f3:95:9e:3f:f3:f8:df:6b:38:77:89:2c:8d:b5:ad:3e:
         c7:f2:94:cd:a0:06:ae:ba:cc:a8:b1:ad:33:08:b6:24:86:62:
         36:4c:78:6e:50:f0:d5:6e:60:8d:4f:52:31:43:97:46:75:f0:
         62:e4:6e:66:51:c1:42:31:67:50:e5:49:e7:39:1e:cb:9f:ca:
         86:48:de:08:14:ff:15:4b:2b:66:9b:a0:38:9f:00:ce:fd:a7:
         eb:d1:7f:57:2d:c8:4c:5f:dc:10:11:97:3e:96:04:02:5c:84:
         a8:29:39:6c:94:fc:10:92:06:7b:9e:ee:d8:46:b4:1b:b5:03:
         0c:38:d9:dc:b0:a9:3f:71:06:0b:b2:03:07:33:c2:8d:48:63:
         25:25:3c:7a:7b:57:6e:f7:8a:05:38:ef:b8:a0:ae:2f:f4:db:
         07:d5:5b:84:18:c1:a9:b8:4b:ce:6c:90:1a:82:e4:b9:3d:fa:
         77:f1:d2:1f:33:02:bf:53:e7:76:f9:dc:26:25:41:6f:2f:a6:
         1b:fa:a4:13:90:fa:7c:7e:d9:0b:60:5d:ec:bf:ca:41:a0:61:
         fb:11:49:29:d8:a8:2d:75:15:d8:4a:18:ea:16:ef:55:34:22:
         1a:13:8d:06