Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Mother Nature, OU = Everything, O = Mother Nature, postalCode = postalcode, C = US, GN = givenname, SN = surname
        Validity
            Not Before: Aug 29 22:36:57 2017 GMT
            Not After : Nov 10 23:36:57 2017 GMT
        Subject: CN = gov.us, OU = Chaos, O = org, street = 3210 Holly Mill Run, ST = province, postalCode = 30062, GN = hello, SN = surname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:64:cb:80:d6:fb:13:76:c7:47:39:0f:e2:
                    58:25:13:1d:18:41:f7:27:88:28:f3:bd:63:f2:bb:
                    78:c3:37:e6:1c:d7:30:8f:f7:5d:42:0a:82:33:a1:
                    b4:ba:ca:f1:57:27:f9:9b:9b:36:19:22:0c:5c:c3:
                    1e:96:72:66:57:47:a5:81:25:28:4e:04:2d:d4:b4:
                    93:51:ce:f8:5b:89:3b:7d:7b:bc:ba:1d:63:80:dc:
                    6b:f4:cb:00:b4:59:21:cd:82:72:d9:8c:7f:cb:73:
                    7e:6c:1e:6b:85:ec:f2:26:df:30:11:08:4a:4c:ed:
                    e9:ec:dc:a0:43:7c:85:0c:5a:e0:38:17:2d:b6:f2:
                    b9:79:31:f7:44:24:12:58:46:e6:d9:fd:97:53:6b:
                    7c:36:11:5d:93:b8:c3:30:b8:5d:e5:0d:bc:42:cd:
                    c9:c8:e6:00:b7:c2:cf:ca:e1:7a:3b:2b:e0:19:cf:
                    98:01:db:cf:0c:6a:4e:fc:e5:e9:b5:8b:f4:4c:04:
                    c8:0a:4b:0d:75:2f:0b:b4:ea:25:2c:17:fe:43:3a:
                    9f:3b:38:af:f7:c6:2f:49:7b:9e:c3:6c:bb:3e:12:
                    7a:a6:29:dd:98:81:2f:8a:bc:fd:52:49:bb:f7:d5:
                    da:a7:24:8c:af:b9:2c:9a:b9:8a:eb:0f:42:77:d2:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:hell,o.com.uk
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:1d:50:2d:ec:e0:e3:07:e4:49:68:f1:ba:70:4f:72:de:
         d1:5d:bf:5e:c6:e2:77:7e:70:1e:87:cf:67:0a:81:3f:ca:8b:
         a4:1c:a2:e6:a5:86:59:06:6c:a1:d0:29:5a:4e:c0:f4:10:af:
         e4:91:c5:25:04:d1:c2:f3:9b:a9:a5:bf:03:6d:59:3d:82:ee:
         c6:d4:01:74:ed:4f:07:eb:89:cf:87:4c:94:11:40:76:87:97:
         98:ab:62:3a:8d:2d:2d:6a:5c:de:b1:db:c1:fa:37:02:f7:f3:
         46:79:37:b1:97:97:72:d2:03:55:b6:cb:2d:5c:48:48:03:61:
         60:de:e7:f0:8b:62:02:a8:3c:66:71:4c:55:25:e3:e2:dc:12:
         49:3e:98:c7:03:08:41:2f:c0:9c:4f:37:9a:46:12:4b:11:6c:
         8f:c2:55:c4:eb:f3:30:3c:04:e5:d8:04:ae:26:02:ae:17:5a:
         20:10:a5:a4:20:ec:1e:e8:2f:ea:fa:fd:c8:a7:7e:de:b6:26:
         fb:a0:55:07:20:ac:6b:f6:98:63:c9:29:58:ea:1f:29:96:fe:
         a6:74:d5:39:95:50:76:1f:3a:91:82:82:8a:de:af:f5:29:ae:
         7b:26:98:11:0c:17:79:45:4f:20:be:19:8f:95:87:64:f6:df:
         07:af:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
