Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:02:70:d4:35:be:9b:24:9a:f8:56:d0:e1:e2:85:49
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
        Validity
            Not Before: Feb 18 00:00:00 2020 GMT
            Not After : May  1 23:59:59 2033 GMT
        Subject: C = NL, O = GEANT Vereniging, CN = GEANT Personal CA 4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b3:4a:e2:22:5e:27:5b:e9:04:5b:14:04:35:32:
                    20:14:ae:b4:d2:31:40:c6:cd:50:c0:1e:a1:44:ca:
                    af:9e:4a:61:7f:2d:90:de:62:9b:33:6a:2d:a4:42:
                    ca:96:01:3c:ff:70:10:3d:80:68:ee:9e:f2:78:e4:
                    6e:3c:c9:c0:b8:0f:a8:30:64:5b:db:06:de:49:a2:
                    dc:65:ba:70:5e:07:c2:be:72:b1:9a:af:7b:fe:44:
                    24:38:55:fb:d3:a1:7d:3b:bf:e1:d3:27:a1:1e:10:
                    e3:51:dc:8c:c9:3d:33:32:ce:00:30:10:d1:ac:01:
                    67:fd:bd:af:47:78:f4:05:26:20:a1:0b:35:ea:84:
                    aa:69:d3:37:a7:e7:74:be:f1:ff:62:b4:4c:b4:e8:
                    64:bc:6a:4b:bb:32:fc:9b:e2:d3:01:05:af:40:9f:
                    76:37:00:b2:2a:21:ec:a6:83:f8:98:b3:c9:bd:5a:
                    44:a4:33:27:a4:36:d1:51:07:5f:b5:2a:59:cd:52:
                    93:34:e4:6f:3e:b1:8f:44:b9:c9:d0:41:15:08:74:
                    7c:d8:b2:fa:a3:3f:75:e5:69:2b:81:e0:98:f4:89:
                    ae:ba:50:67:e2:e5:6c:77:d6:69:b9:b0:a0:33:f1:
                    17:bd:50:65:56:22:aa:ba:c0:a1:4a:c6:44:9f:b8:
                    ee:22:c1:88:88:3c:9a:22:18:4b:b1:dd:da:9a:6f:
                    01:4b:76:e0:2b:a0:31:75:23:11:38:d0:fa:86:21:
                    d3:d7:cd:8b:99:ff:02:fa:04:47:c5:01:bd:31:cb:
                    c6:df:9b:94:bd:1b:bc:bf:b6:cf:66:22:51:69:3e:
                    d9:0b:67:f9:d0:fe:25:4e:59:db:2e:f5:a9:5e:fe:
                    72:bf:b8:61:78:ef:1b:31:79:6d:8b:22:f0:78:b0:
                    7e:54:db:e0:f8:69:df:2f:a4:d6:dc:0a:b5:c8:5d:
                    72:ad:90:19:cd:1e:0c:6e:98:d3:59:d1:1d:48:b2:
                    af:cf:cf:b4:c0:2c:2c:71:0f:35:9d:b0:ce:c0:3b:
                    7d:bf:26:7e:d1:e2:57:6d:19:16:66:2a:92:72:7c:
                    00:83:9f:c1:d4:d5:03:e1:3a:d8:96:b2:38:9f:ac:
                    c5:a7:6a:72:61:43:a2:bb:33:fe:6a:cf:c0:66:7c:
                    fa:dc:6b:e3:14:ae:bd:58:e0:d1:d9:6f:d3:2b:80:
                    fb:56:29:04:32:18:35:f2:f8:6e:45:fe:21:c6:75:
                    99:3b:2d:2f:85:f0:d1:fe:0d:da:25:b7:6c:19:a7:
                    3e:76:26:a1:8c:4c:33:c8:1f:94:28:93:82:cb:3b:
                    de:70:6f:1b:67:fb:bf:53:c3:ec:10:c6:60:d3:b8:
                    88:3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
            X509v3 Subject Key Identifier: 
                69:00:A1:C7:21:58:F8:E0:C5:1B:20:B0:0A:DD:A7:51:BF:13:D9:E4
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, E-mail Protection
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

                  CPS: sectigo.com/CPS


            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        0a:05:4e:7b:0d:8f:1f:13:39:00:fd:6f:ec:62:c6:c3:ed:ed:
        17:aa:e3:01:cc:78:dc:3f:47:97:5d:74:43:e0:40:04:00:60:
        96:4a:cf:90:44:bf:57:23:19:b1:fb:9d:b3:c7:dc:0c:6b:c6:
        13:7a:39:51:f8:d2:9e:8e:2c:8a:3d:31:74:ab:ad:f3:33:1a:
        ce:ff:3f:e1:53:0a:3c:20:37:11:44:b4:b4:35:28:2f:4d:6e:
        80:37:6a:c2:5c:97:b9:88:b3:79:7c:87:d8:80:80:41:f5:cc:
        b5:2f:ab:6b:3e:e6:7f:be:35:09:9b:ce:e7:43:b1:31:43:31:
        aa:58:de:45:f5:4f:0c:94:09:34:73:98:8b:6a:71:bb:18:23:
        28:36:31:e2:17:59:f4:6d:a8:fa:82:e5:1e:1b:b9:f9:a9:cc:
        0e:41:3c:83:4b:5f:7e:34:4a:9f:c2:35:0f:50:66:ac:37:56:
        47:f2:1d:6c:13:a3:eb:ce:f4:69:b6:2f:ab:2b:35:a9:89:4f:
        a2:db:f9:37:97:66:f9:7c:50:f2:f9:6b:bd:8e:fe:91:f4:1a:
        01:87:8e:de:b3:f5:0c:cf:01:19:da:44:ab:21:55:6b:e2:34:
        ae:92:4f:85:a6:64:79:65:bb:70:89:83:40:57:ab:1d:6f:5b:
        2b:30:6b:08:2f:35:e5:ad:d6:ac:48:4d:a7:18:7b:d9:92:59:
        36:cd:47:60:9f:b6:f4:d4:c1:ea:eb:b8:34:98:da:33:1a:64:
        fa:0d:a9:b8:d4:a6:e1:bf:6e:56:30:5b:3c:ef:55:ea:c1:52:
        1b:e2:01:a8:4f:5c:91:7f:f5:5e:3c:c9:b5:8f:06:ae:aa:28:
        e1:28:91:6f:ac:dc:1e:1a:77:9b:18:f7:a2:a5:a2:f1:22:8d:
        a2:10:0e:2a:75:1c:ed:12:0f:ea:cb:35:86:a2:05:ca:fd:31:
        5d:9a:2b:e0:df:6d:9f:30:f4:16:8d:09:0c:85:11:8c:33:c4:
        82:8e:56:4d:db:62:fc:c7:46:4e:62:85:40:da:b1:c9:9b:93:
        f6:e4:88:d9:7b:e1:cf:ca:7e:e2:90:98:92:26:6a:a5:a8:59:
        94:7a:8c:17:17:70:f5:74:59:42:0a:cf:f9:c8:2d:3a:45:84:
        6a:23:64:44:16:ef:b6:f2:dd:a7:b3:02:2f:63:ac:42:14:04:
        74:46:d4:bc:33:3d:b2:5c:d9:5d:d2:3b:36:32:68:91:50:6a:
        dc:ee:29:96:cd:d5:0f:6c:f7:2f:f6:c7:54:17:b4:ac:11:11:
        8f:23:36:0b:f1:d2:22:1f:38:ad:f9:80:a8:18:24:97:32:0e:
        a9:78:5d:fb:84:73:69:d5