Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: O=Sun Microsystems Inc,
                OU=VeriSign Trust Network,
                OU=Class 2 OnSite Subscriber CA,
                CN=People CA
        Validity
            Not Before: Apr  4 00:00:00 2006 GMT
            Not After : Apr  3 23:59:59 2011 GMT
        Subject: O=Sun Microsystems Inc,
                 OU=Corporate,
                 OU=Class B,
                 CN=<...first last (uid)...>                    (1)
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:
                    01:23:45:67:89:ab:cd:ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name:                    (2)
                rfc822name:<...email address...>,
                otherName (OID: 1.3.6.1.4.1.311.20.2.3):<...UPN...>,
                otherName (OID: 2.16.840.1.113536.509.44):<...PID...>
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 CRL Distribution Points: 
                URI:http://onsitecrl.verisign.com/SunMicrosystemsIncCorporateClassB/LatestCRL.crl
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                keyid:01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:45:67
            X509v3 Subject Key Identifier: 
                01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:45:67
            Authority Information Access: 
                OCSP - URI:http://onsite-ocsp.verisign.com
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.2
                  CPS: https://www.verisign.com/rpa
                Policy: 2.16.840.1.113536.509.3647
                  CPS: https://www.sun.com/pki/cps
                  User Notice:
                    Explicit Text: Validated For Sun Business Operations
            X509v3 Extended Key Usage: 
                E-mail Protection,
                TLS Web Client Authentication,
                Microsoft Smartcard Logon
    Signature Algorithm: sha1WithRSAEncryption
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67:89:ab:cd:ef:01:23:45:67:89:ab:cd:ef:01:23:
        01:23:45:67


==COMMENTS====================================================

Dynamic components in Subject DN
--------------------------------
1. dynamic CN
   non-empty, "firstname lastname (uid)" of the holder, where
   "uid" is 5 or 6 decimal digits; e.g. John Smith (123456);
   (optional) middlename initial may be included.

2. Dynamic components in subjectAltName
---------------------------------------
 UPN: Microsoft's User Principal Name
      Format: <loginname>@SUN.COM
      E.g.: js123456@SUN.COM, jacek@SUN.COM
 PID: SEA Principal ID
      Format: 20 Base62 (0-9, A-Z, a-z) characters
      E.g.: 0123456789AaBbCcDdEe.

NOTES: supported modulus size: 1024 bits;
       validity period: 5 years (Class B, only on smartcards).