Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: O=Sun Microsystems Inc,
                OU=VeriSign Trust Network,
                OU=Class 2 OnSite Subscriber CA,
                CN=IPSec CA
        Validity
            Not Before: Apr  4 00:00:00 2006 GMT
            Not After : Apr  3 23:59:59 2009 GMT
        Subject: O=Sun Microsystems Inc,
                 OU=Corporate IPSec,
                 OU=Class B,
                 CN=<...FQDN...>                              (1)
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name:                  (2)
                DNS:<...FQDN1...>, DNS:<...FQDN2...>, ...
                IP Address:<...addr1...>, IP Address:<...addr1...>, ...
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 CRL Distribution Points: 
                URI:http://onsitecrl.verisign.com/SunMicrosystemsIncCorporateIPSecClassB/LatestCRL.crl
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Authority Key Identifier: 
                keyid:01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:45:67
            X509v3 Subject Key Identifier: 
                01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:45:67
            Authority Information Access: 
                OCSP - URI:http://onsite-ocsp.verisign.com
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.2
                  CPS: https://www.verisign.com/rpa
                Policy: 2.16.840.1.113536.509.3647
                  CPS: https://www.sun.com/pki/cps
                  User Notice:
                    Explicit Text: Validated For Sun Business Operations
    Signature Algorithm: sha1WithRSAEncryption
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67


==COMMENTS====================================================

Dynamic components in Subject DN
--------------------------------
1. dynamic CN
   must be non-empty, value: full hostname (FQDN).

Dynaminc extension component
----------------------------
6. subjectAltName extension (optional)
   if present, the extension must list at least one item (FQDN
   or addr); there can be up to 4 FQDNs and up to 4 addrs.

NOTES: supported modulus sizes: 1024 (see above) or 2048 bits;
       validity period: 3 years;
       no extendedKeyUsage extension.