Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 23 21:44:28 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:d7:6b:92:c9:bd:77:83:8c:e2:04:3c:dc:4d:b6:
                    03:0b:50:54:95:06:7e:db:e9:e5:32:56:dc:d5:f2:
                    bd:66:3d:55:b6:39:db:a7:3e:36:0e:41:34:d9:4c:
                    26:8d:48:6e:5d:c2:b0:f2:c0:98:96:82:b1:b7:11:
                    c4:8d:17:20:cd
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Reasons:
                  Key Compromise, CA Compromise, Affiliation Changed, Cessation Of Operation

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:b0:4f:98:db:8e:65:85:32:63:b2:a3:e5:5b:28:52:c3:
         65:2a:a5:b9:23:6c:02:50:3a:9f:61:ad:fb:03:72:1e:b8:17:
         25:e1:9f:b6:72:09:4f:b9:4c:ed:1f:95:cd:05:76:5b:30:c7:
         74:3d:14:f8:39:cf:a5:fb:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
