Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Mother Nature, OU=Everything, O=Mother Nature/postalCode=postalcode, C=US, GN=givenname, SN=surname
        Validity
            Not Before: Aug 28 15:32:42 2017 GMT
            Not After : Nov  9 16:32:42 2017 GMT
        Subject: CN=gov.us, OU=Chaos, O=org/street=3210 Holly Mill Run, ST=province/postalCode=30062, GN=hello, SN=surname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:45:0a:56:f1:90:50:b4:9e:2a:b3:b4:1d:
                    73:ea:7d:41:44:7b:3c:de:5a:04:2f:4a:1c:e5:e8:
                    7b:95:53:75:fb:bb:5f:76:b3:96:72:15:fe:15:fd:
                    f3:5f:3c:7e:86:58:f6:3f:fd:a4:3c:c6:42:2f:13:
                    27:4f:08:06:3b:d9:10:f9:65:e6:59:44:b6:11:56:
                    0a:66:8d:9c:5c:26:55:80:54:d8:44:d2:0f:c8:73:
                    a9:84:b8:7d:26:6f:f1:ba:da:45:47:41:a9:ad:61:
                    80:c9:46:7b:cc:40:dd:6e:4d:f0:65:28:44:10:62:
                    0c:74:17:2c:b0:06:03:e8:99:1f:59:aa:ce:05:45:
                    fa:05:7e:5d:82:8a:8e:3b:cb:b0:25:85:3d:63:e2:
                    21:c3:19:23:59:80:02:a7:d6:1a:66:7f:72:b2:cb:
                    dd:86:24:9e:6a:2d:18:06:08:b9:15:e6:1e:5b:4d:
                    6e:ff:b1:c0:50:c5:5e:5e:95:99:f6:05:e3:6c:3d:
                    b6:65:80:31:7c:e3:de:66:89:de:cb:77:2f:85:fc:
                    c0:11:4b:97:08:0f:b8:3e:8c:ac:43:1f:89:e9:bd:
                    33:94:a6:58:c0:5b:38:98:bf:8e:ae:a9:e8:93:18:
                    d5:98:4d:ec:98:ef:d8:88:f5:13:2c:fa:1e:5a:66:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:subtlety.co.uk
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         1d:cf:62:be:b9:d7:35:e7:ad:28:73:c9:6e:34:a3:cd:fd:48:
         8d:5c:8b:e2:c0:74:4d:88:7c:e9:2d:db:02:10:1a:e6:27:6f:
         39:3c:f5:08:59:59:4d:c1:ab:69:ab:30:e3:ca:3f:fa:54:37:
         22:bb:39:3a:6f:cc:ee:bc:15:02:c8:c3:0d:49:af:73:ea:96:
         82:c3:db:bf:28:98:33:89:36:44:e0:56:2f:4c:04:46:a1:78:
         00:a1:31:f6:03:a4:3f:5d:9e:4a:6c:88:68:15:20:a5:e4:73:
         49:69:d4:c3:bc:37:70:22:0d:d9:86:6d:c5:e8:b0:49:77:08:
         5a:ad:87:a7:7e:5d:81:1c:e2:1f:b5:03:fb:c6:fc:17:f6:57:
         df:a0:14:9f:53:a8:8a:65:52:a8:91:b0:54:09:3c:85:f7:de:
         e7:92:55:48:03:61:30:0c:dc:be:28:1c:b2:0d:8a:aa:db:83:
         b7:f3:8d:69:75:1f:85:9d:6f:d7:47:25:fc:e2:6f:39:7d:7d:
         16:e3:5a:81:94:92:5f:a5:46:38:80:23:8d:01:60:31:3c:67:
         98:cb:81:c5:33:d2:6a:5f:2c:c9:a6:53:33:1f:94:6d:ed:3d:
         85:c9:ca:7d:49:d3:ff:f4:aa:18:c4:73:b3:f9:42:28:a4:a5:
         1d:00:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
