Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 11 23:54:59 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:d0:79:8c:b5:96:25:5b:82:f5:f8:30:5c:e4:47:
                    66:08:36:c0:d4:07:66:5c:a5:33:f8:e0:cd:d8:63:
                    1f:41:df:df:f0:33:8a:5e:f1:72:2e:35:f1:4b:19:
                    48:19:49:ac:46:80:e1:4c:5c:70:8e:3e:48:fe:c5:
                    78:7c:e3:98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 Name Constraints: 
                Permitted:
                  DNS:example.com
                  DNS:test.com
                Excluded:
                  DNS:banned.com

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:ef:03:32:9c:7f:17:f2:be:5f:dc:6a:cf:5d:b2:d1:f7:
         8c:57:9e:49:e7:99:d0:fe:80:d0:74:49:a3:93:f7:b3:91:41:
         bc:f4:17:f2:b2:bd:44:3f:25:f6:ca:8a:7b:bd:9e:d0:b7:83:
         ad:da:e3:76:f3:65:e3:0c:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
