Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675984 (0x431669690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Jul 11 20:04:21 2016 GMT
            Not After : Sep 23 20:04:21 2016 GMT
        Subject: C = US, ST = FL, L = Tallahassee, street = 3210 Holly Mill Run, postalCode = 30062, O = Extreme Discord, OU = Chaos, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:99:ae:9c:55:a9:1d:98:c1:ca:4f:a7:78:
                    8f:bd:3e:c6:40:fb:2e:7b:1d:c6:19:2b:a8:6e:8b:
                    44:91:f9:0c:9d:ec:a3:a1:d7:5d:12:ad:b4:b5:bd:
                    a2:30:6e:72:70:de:bb:ff:68:96:0e:59:2d:4a:b0:
                    59:19:95:f8:aa:e8:f8:ff:f8:e5:05:8b:a6:de:a0:
                    2d:f5:95:a0:16:1b:b8:10:1c:79:3c:c4:ea:da:d6:
                    cb:01:42:3d:ec:5d:fc:bb:d7:c3:94:b4:99:c7:43:
                    4c:f6:5a:cf:8a:0e:2c:4c:87:d6:47:1d:e5:e4:f6:
                    1d:54:ea:fa:32:c0:eb:d9:a9:90:c6:e3:07:5c:22:
                    d2:2d:8d:c6:6b:37:2c:72:9c:6f:df:04:23:c9:67:
                    ea:dc:c0:d5:8a:50:f8:6d:1c:2d:df:a5:7f:db:89:
                    f8:14:68:13:fe:90:99:fd:64:b5:67:ec:71:ed:4d:
                    a3:36:2c:e1:a4:3a:54:56:27:d5:fb:9e:6e:9e:d3:
                    1b:26:55:24:67:3c:76:a7:4d:e6:e3:b0:54:e7:eb:
                    33:ca:be:c9:fa:42:4b:01:f0:72:97:43:c6:44:5e:
                    43:19:13:0b:09:88:03:08:53:ad:54:8e:56:a4:a6:
                    cd:65:0b:a5:2f:25:9c:db:fe:15:ef:d5:33:9b:b7:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.5.5.7.13.1
                Policy: 2.23.140.1.2.2

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:*.gov.us, DNS:gov.us
            X509v3 Issuer Alternative Name: 
                DNS:allthethings.net, DNS:allthemthings.net, DNS:theca.net
            X509v3 Authority Key Identifier: 
                keyid:01:02:03:04
                serial:1C:BD:7D:87:57

            X509v3 Freshest CRL: 

                Full Name:
                  URI:http://crl.allthemthings.net/sfig2s1-17.crl

            X509v3 Policy Mappings: critical
                1.3.6.1.5.5.7.13.1:1.3.6.1.5.5.7.13.2, 1.3.6.1.5.5.7.13.3:1.3.6.1.5.5.7.13.4
    Signature Algorithm: sha256WithRSAEncryption
         18:e1:e4:04:ad:26:36:4a:a7:e3:9c:61:ff:4c:20:2f:ec:b9:
         38:c3:ca:bf:2e:b2:9a:63:08:d6:20:78:0d:9f:8e:bf:8d:f8:
         2f:ee:c7:02:bb:3d:9b:7c:28:12:54:9b:7c:2b:aa:2a:2e:62:
         8d:ed:1f:f9:76:22:d0:53:98:3a:31:1c:cb:99:38:c3:4c:07:
         04:b1:66:1d:e4:3e:43:84:7e:b9:8b:ed:06:1d:ae:52:7e:32:
         38:83:4f:7b:fe:d3:df:d2:47:7f:96:af:7b:eb:ab:c2:1e:f5:
         91:23:4a:af:78:cd:3d:75:de:bc:7c:cb:e3:f5:c6:dd:e1:e4:
         cc:6d:14:18:27:fd:3e:88:0b:96:40:90:12:a5:be:44:b3:6a:
         2a:40:1f:23:42:cb:ed:02:2e:65:6e:29:dc:44:ae:8e:59:99:
         1b:d8:0f:ba:bb:b1:30:12:a6:be:80:3a:07:81:1a:ae:29:99:
         ce:57:20:6b:e4:81:a7:1f:73:bc:9d:48:70:12:04:68:31:4d:
         32:9c:54:c5:21:9f:c6:f6:4d:4d:2c:8a:78:72:47:5f:19:49:
         f4:ec:0d:09:d2:a7:29:76:d3:1d:30:f1:3c:b0:67:3a:99:fc:
         5d:a1:77:33:dd:63:65:e3:72:76:ed:f6:59:55:d1:6d:50:93:
         a8:02:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
