Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Mother Nature, OU=Everything, O=Mother Nature/postalCode=postalcode, C=US, GN=givenname, SN=surname
        Validity
            Not Before: Aug 28 15:45:37 2017 GMT
            Not After : Nov  9 16:45:37 2017 GMT
        Subject: CN=gov.us, OU=Chaos, O=org/street=3210 Holly Mill Run, ST=province/postalCode=30062, GN=hello, SN=surname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:a3:40:c4:dd:04:eb:62:ef:3b:ee:3b:cf:
                    c3:f1:4a:8b:39:99:9a:ad:fa:82:0f:3f:95:e2:09:
                    73:eb:cb:a9:82:e9:98:14:9d:eb:10:53:51:c1:2c:
                    5e:0e:63:09:9d:b7:fa:d4:32:66:39:d2:a5:c4:92:
                    b3:46:0b:ee:e0:bd:66:5c:d2:ca:19:8c:6c:a4:72:
                    2e:65:9f:66:18:7e:b2:13:48:92:63:21:42:6b:d1:
                    ac:ee:af:6d:72:66:d6:7a:17:15:71:94:1d:5a:1e:
                    47:4f:af:e9:c3:bf:01:08:bb:89:48:fe:1e:6a:02:
                    01:ff:f8:9a:54:e1:ed:87:97:f9:ca:ba:25:07:c6:
                    ed:19:a8:2f:d2:47:0a:14:17:43:33:36:c7:07:02:
                    bc:2c:9e:63:41:07:7d:06:1b:c7:a4:0d:8b:c5:6e:
                    dd:6f:56:12:18:15:71:a5:3c:67:75:3b:6d:d6:1f:
                    fb:28:c6:fd:c3:3f:b2:11:0f:34:39:9b:d7:74:21:
                    96:7c:de:ae:66:6b:6f:79:1f:c5:f8:71:e3:cf:9a:
                    6e:25:fb:2d:00:06:56:f6:e6:81:95:8f:db:83:a8:
                    59:a8:21:e9:5d:73:b8:6d:77:ca:79:84:cf:5c:7c:
                    44:b0:3f:73:47:02:46:ef:95:39:e3:21:19:28:b4:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:subtlety.co.uk
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         3f:ea:3e:48:c0:71:00:8a:e0:36:11:f7:1b:91:12:58:2d:4f:
         8e:56:d2:10:c6:44:4c:b3:81:c6:a1:c7:0b:bb:02:81:5c:a0:
         57:a8:40:75:a8:f1:be:9c:73:a2:7b:dd:8f:b7:30:d7:73:f7:
         a4:b8:b2:f8:b0:a2:ee:46:c0:72:15:eb:0b:34:72:c1:0d:68:
         bd:63:c9:57:d5:6b:ed:ac:68:8c:1a:d3:b0:dc:78:ee:ad:75:
         d6:3b:95:5b:a0:91:b9:8b:3e:3b:19:0c:c3:39:9f:08:ed:84:
         55:9d:74:f1:68:78:24:23:e9:0e:c6:35:a3:22:f2:c8:96:2d:
         8a:42:ef:4e:77:47:20:2b:78:7c:81:b2:59:90:5a:80:4e:0c:
         6f:91:01:91:ac:97:9c:31:f5:1e:13:a9:56:53:f3:b0:12:8d:
         d1:69:54:dd:6f:97:f6:a5:43:45:36:f8:b0:25:d8:72:2e:c4:
         9d:79:6b:ad:b6:85:5e:82:6c:a3:d4:84:3f:91:de:c5:93:60:
         22:98:68:8d:38:9a:bd:ea:30:7b:ff:78:80:50:ac:27:25:4a:
         9a:1e:df:90:7d:dd:00:1c:43:1e:c5:d5:d2:a2:2f:ec:c0:b8:
         56:49:47:0f:bc:78:de:54:19:17:21:98:5c:15:2b:5c:4f:68:
         92:81:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
