Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3328846133 (0xc66a2935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=PKI-1-Verwaltung, CN=PCA-1-Verwaltung-14
        Validity
            Not Before: Dec  1 00:00:00 2013 GMT
            Not After : Dec 31 23:59:59 2023 GMT
        Subject: C=DE, O=PKI-1-Verwaltung, CN=PCA-1-Verwaltung-14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:82:68:aa:20:38:4f:68:8d:fe:aa:be:d2:0f:f1:
                    74:9d:6b:a6:c0:7f:ca:8c:ce:36:30:b4:9a:69:52:
                    78:1a:01:2a:d0:2b:af:18:39:d4:66:05:97:f1:29:
                    5b:31:05:dd:07:df:70:4e:63:83:8c:44:81:c3:64:
                    f0:25:c9:0c:a3:ca:1c:09:5d:2e:c6:04:a2:1c:79:
                    4a:8f:04:26:cb:86:44:ba:e3:92:de:92:0b:92:9f:
                    d7:e6:8c:56:ae:e6:b7:da:94:3c:8b:af:96:86:90:
                    5a:25:64:36:f0:c5:35:27:9a:9b:e2:b4:23:fc:e3:
                    2b:ef:b4:c4:7b:90:44:00:88:69:46:ed:99:28:6e:
                    6a:12:87:94:94:77:0d:43:3a:09:3f:6e:59:00:7a:
                    15:6b:fe:a9:10:28:eb:1b:26:1c:ff:db:61:23:00:
                    bf:9f:d9:d1:b3:a7:2d:9e:9c:ae:e6:7e:40:f1:8f:
                    92:c3:f4:55:7f:4c:da:95:d8:71:e7:18:02:56:d8:
                    ce:e3:58:58:05:21:9b:1d:4f:fd:98:5b:05:ad:12:
                    2a:10:d3:3b:e2:69:1d:e0:a7:29:18:8b:b7:b3:0a:
                    3e:75:0f:c8:0b:62:6f:be:b4:d0:2b:08:4e:f1:40:
                    8d:e9:bd:25:a9:d7:29:5d:30:2b:8b:08:b0:03:2f:
                    83:4d
                Exponent: 17 (0x11)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.7924.1.2.1.3
                  CPS: https://www.bsi.bund.de

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://x500.bund.de/CN=PCA-1-Verwaltung-14,O=PKI-1-Verwaltung,C=DE?certificateRevocationList

                Full Name:
                  URI:http://x500.bund.de/cgi-bin/show_attr?cn=PCA-1-Verwaltung-14&attr=crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                13:F3:8C:10:54:3A:E7:E2:F6:9D:2F:A2:C6:69:F6:BD:74:3B:E4:18
            X509v3 Subject Alternative Name: 
                email:V-PKI@bsi.bund.de, URI:https://www.bsi.bund.de
    Signature Algorithm: sha256WithRSAEncryption
         14:01:d1:8c:f9:ba:0f:83:a6:d9:2e:4f:d4:67:32:6b:85:be:
         01:4a:f9:6d:b3:05:c5:3b:e2:f8:99:75:a1:da:08:0e:d0:64:
         2a:46:10:d2:bb:fa:1c:ec:7c:93:30:5a:3b:3c:0c:ec:89:d4:
         f3:f0:a9:dc:fe:32:1e:93:cb:e9:d4:81:82:da:29:aa:46:79:
         c4:30:91:a1:e2:c8:cd:1b:70:2b:37:2d:7a:fd:ac:42:2f:54:
         81:7b:bc:1c:e5:b8:37:c0:3e:69:b3:41:74:48:f9:7a:1b:e2:
         1f:3b:59:5e:51:ee:85:f5:c0:11:00:3a:43:f1:9c:d1:74:79:
         09:67:79:c9:09:22:ad:61:45:68:88:6d:20:d1:ec:dd:47:24:
         1f:c7:6c:0b:e4:9e:e4:05:69:ab:b9:86:f8:3b:4e:32:d6:8c:
         41:14:e0:dc:49:41:05:d3:62:bd:0d:23:47:3e:21:22:ea:f5:
         07:84:eb:84:d3:59:67:15:21:93:34:e3:01:9e:c4:a0:0e:b0:
         da:76:70:3e:cd:bd:c6:03:ed:df:d4:1f:fb:7b:3f:11:f7:68:
         5b:3a:d3:7e:5a:c9:f2:d9:41:06:e7:89:4e:42:3e:3d:72:2e:
         7d:44:73:0c:2e:34:72:21:66:f2:0d:90:5c:9a:44:e3:27:b5:
         bd:70:99:82