Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 16 22:23:40 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:db:18:ce:de:e5:e7:85:a5:35:e4:e2:fb:a8:e4:
                    c5:43:51:51:9d:d9:da:45:88:10:b0:95:25:46:6a:
                    0b:c7:a8:f7:b7:08:34:81:b4:31:68:37:6a:eb:44:
                    3c:97:a8:be:7c:b1:ff:c2:0e:4f:30:31:38:32:02:
                    01:82:89:85:61
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:51:ce:f7:e3:51:4a:39:60:ca:89:04:7c:4c:4b:83:3e:
         e8:22:c4:26:f9:6b:63:14:1a:b9:dc:e2:28:44:04:5d:cc:bd:
         6e:0f:93:29:5a:43:95:63:3f:f8:e8:3b:a0:25:12:db:a3:68:
         c5:dc:68:9b:57:1c:fc:ee:51:09
-----BEGIN CERTIFICATE-----
MIIDFjCCAsKgAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFQxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRYw
FAYDVQQDEw1Nb3RoZXIgTmF0dXJlMQAwIhgPMjA1NTEyMDEwNjA3MDhaGA8yMDU2
MDgxNjIyMjM0MFowgZsxCzAJBgNVBAYTAlVTMRgwFgYDVQQKEw9FeHRyZW1lIERp
c2NvcmQxDjAMBgNVBAsTBUNoYW9zMRQwEgYDVQQHEwtUYWxsYWhhc3NlZTELMAkG
A1UECBMCRkwxHDAaBgNVBAkTEzMyMTAgSG9sbHkgTWlsbCBSdW4xDjAMBgNVBBET
BTMwMDYyMQ8wDQYDVQQDEwZnb3YudXMxADBcMA0GCSqGSIb3DQEBAQUAA0sAMEgC
QQDbGM7e5eeFpTXk4vuo5MVDUVGd2dpFiBCwlSVGagvHqPe3CDSBtDFoN2rrRDyX
qL58sf/CDk8wMTgyAgGCiYVhAgMBAAGBBAABAgOjggEpMIIBJTAOBgNVHQ8BAf8E
BAMCAKQwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0jBAcwBYADAQIDMBMGA1UdIAQMMAowCAYGZ4EMAQICMDsGA1Ud
HgQ0MDKgDDAKhwjAqAEBAQIDBKEiMCCDHkM9VVM7QT1BVFQ7UD1Db250b3NvO089
RXhhbXBsZTARBgNVHR8ECjAIMAagBKAChgAwDQYDVR0OBAYEBAQDAgEwFQYDVR0R
BA4wDIIGZ292LnVzggLAqDAJBgNVHTYEAgIBMA4GCCsGAQUFBwELBAICATAtBggr
BgEFBQcBAQEB/wQeMBwwGgYIKwYBBQUHMAGCDnRoZWNhLm5ldC9vY3NwMAsGCSqG
SIb3DQEBCwNBABxaUc7341FKOWDKiQR8TEuDPugixCb5a2MUGrnc4ihEBF3MvW4P
kylaQ5VjP/joO6AlEtujaMXcaJtXHPzuUQk=
-----END CERTIFICATE-----
