Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Mother Nature, OU=Everything, O=Mother Nature/postalCode=postalcode, C=US, GN=givenname, SN=surname
        Validity
            Not Before: Aug 28 16:04:41 2017 GMT
            Not After : Nov  9 17:04:41 2017 GMT
        Subject: CN=gov.us, OU=Chaos, O=org/street=3210 Holly Mill Run, ST=province/postalCode=30062, GN=hello, SN=surname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:8a:c6:8e:df:c1:e1:62:38:25:3c:67:07:
                    eb:bf:40:44:c4:ad:ca:99:3a:99:63:e4:f5:a7:c7:
                    0e:de:4b:c7:7f:40:92:f9:44:e0:a7:e9:f2:1c:ae:
                    9f:eb:bd:30:a9:e2:ab:15:34:b3:48:a8:0f:46:c4:
                    4c:fc:d0:8b:e5:28:c2:b1:04:22:d5:5b:81:34:49:
                    41:55:93:a9:05:91:2a:e0:91:c4:11:13:ea:a2:49:
                    48:98:35:f6:5e:30:f7:0d:5f:3d:ce:29:7b:26:ad:
                    cf:48:1b:d8:ff:b3:0f:36:31:02:0e:59:e6:3a:1a:
                    1d:47:97:c0:c7:ee:15:63:2e:18:98:b8:2b:d2:96:
                    db:c2:cd:88:c6:7c:e5:83:a1:bb:ac:b0:6d:3e:b6:
                    21:65:46:c1:e7:2d:ab:e1:ea:a8:5d:0b:73:37:76:
                    7f:04:21:ae:ae:c3:da:ac:47:14:e4:31:4a:51:53:
                    72:e4:dc:8e:1d:35:7f:e8:ff:6c:91:c1:4f:4d:75:
                    56:5a:93:63:1e:17:84:5f:ab:2d:aa:50:74:d3:3a:
                    3c:47:9e:18:56:7f:42:11:2b:73:de:e0:eb:f0:f2:
                    64:8d:0a:4b:85:fd:b1:aa:cd:ab:03:f6:bf:10:12:
                    75:4a:98:ae:a9:00:f6:ae:18:a6:bc:e3:13:31:d5:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:hi.com.ukei
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         27:82:7c:93:e6:22:f1:89:33:95:7a:e0:65:48:0a:82:c2:14:
         18:c8:83:d3:2f:1d:ee:29:a2:df:0f:95:13:80:da:0f:43:8a:
         a0:73:64:7b:c5:77:72:f8:b7:53:9a:9d:de:17:26:88:4e:5b:
         f8:b0:ad:54:aa:27:fa:df:50:75:6c:6a:52:25:22:0d:04:45:
         76:dc:57:bd:95:89:52:00:3f:75:57:de:e4:57:6b:cd:73:2f:
         b8:b4:e3:ea:0f:73:d1:3c:3d:57:fd:21:1a:4d:24:75:3e:2d:
         7c:85:cc:fd:a6:af:54:42:74:42:dc:97:1f:90:c6:22:b9:6f:
         a1:1f:79:92:ea:bb:bf:42:2b:37:71:af:07:cc:58:f2:46:f5:
         a6:ac:9c:29:ca:34:68:10:cd:5d:89:a8:6f:d1:ee:aa:6f:26:
         cc:da:54:92:ef:f5:26:c1:e9:32:19:0d:ad:2e:fa:ba:de:c0:
         32:5b:ae:a1:34:55:91:4c:5c:18:10:9d:3c:30:6e:7d:13:50:
         bb:ee:d0:bc:4a:3a:2f:41:dd:0b:5f:ac:2d:ca:c4:35:6c:9c:
         87:01:6a:20:6c:ac:f6:75:49:9b:81:46:e3:75:87:9e:24:7e:
         4b:09:5c:b5:7c:ec:0d:03:b8:74:d7:47:a8:77:c0:0e:f6:9a:
         f4:33:7e:6d
-----BEGIN CERTIFICATE-----
MIIEfDCCA2agAwIBAgIBATALBgkqhkiG9w0BAQswgY8xFjAUBgNVBAMTDU1vdGhl
ciBOYXR1cmUxEzARBgNVBAsTCkV2ZXJ5dGhpbmcxFjAUBgNVBAoTDU1vdGhlciBO
YXR1cmUxEzARBgNVBBETCnBvc3RhbGNvZGUxCzAJBgNVBAYTAlVTMRIwEAYDVQQq
EwlnaXZlbm5hbWUxEDAOBgNVBAQTB3N1cm5hbWUxADAeFw0xNzA4MjgxNjA0NDFa
Fw0xNzExMDkxNzA0NDFaMIGUMQ8wDQYDVQQDEwZnb3YudXMxDjAMBgNVBAsTBUNo
YW9zMQwwCgYDVQQKEwNvcmcxHDAaBgNVBAkTEzMyMTAgSG9sbHkgTWlsbCBSdW4x
ETAPBgNVBAgTCHByb3ZpbmNlMQ4wDAYDVQQREwUzMDA2MjEOMAwGA1UEKhMFaGVs
bG8xEDAOBgNVBAQTB3N1cm5hbWUxADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKtwisaO38HhYjglPGcH679ARMStypk6mWPk9afHDt5Lx39AkvlE4Kfp
8hyun+u9MKniqxU0s0ioD0bETPzQi+UowrEEItVbgTRJQVWTqQWRKuCRxBET6qJJ
SJg19l4w9w1fPc4peyatz0gb2P+zDzYxAg5Z5joaHUeXwMfuFWMuGJi4K9KW28LN
iMZ85YOhu6ywbT62IWVGwectq+HqqF0Lczd2fwQhrq7D2qxHFOQxSlFTcuTcjh01
f+j/bJHBT011VlqTYx4XhF+rLapQdNM6PEeeGFZ/QhErc97g6/DyZI0KS4X9sarN
qwP2vxASdUqYrqkA9q4YprzjEzHVVhsCAwEAAaOB3zCB3DAOBgNVHQ8BAf8EBAMC
AKAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAw
DgYDVR0jBAcwBYADAQIDMGIGCCsGAQUFBwEBBFYwVDAhBggrBgEFBQcwAYYVaHR0
cDovL3RoZWNhLm5ldC9vY3NwMC8GCCsGAQUFBzAChiNodHRwOi8vdGhlY2EubmV0
L3RvdGFsbHl0aGVjZXJ0LmNydDAWBgNVHREEDzANggtoaS5jb20udWtlaTARBgNV
HSAECjAIMAYGBFUdIAAwCwYJKoZIhvcNAQELA4IBAQAngnyT5iLxiTOVeuBlSAqC
whQYyIPTLx3uKaLfD5UTgNoPQ4qgc2R7xXdy+LdTmp3eFyaITlv4sK1Uqif631B1
bGpSJSINBEV23Fe9lYlSAD91V97kV2vNcy+4tOPqD3PRPD1X/SEaTSR1Pi18hcz9
pq9UQnRC3JcfkMYiuW+hH3mS6ru/Qis3ca8HzFjyRvWmrJwpyjRoEM1diahv0e6q
bybM2lSS7/UmwekyGQ2tLvq63sAyW66hNFWRTFwYEJ08MG59E1C77tC8SjovQd0L
X6wtysQ1bJyHAWogbKz2dUmbgUbjdYeeJH5LCVy1fOwNA7h010eod8AO9pr0M35t
-----END CERTIFICATE-----
