Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Mother Nature, OU=Everything, O=Mother Nature/postalCode=postalcode, C=US, GN=givenname, SN=surname
        Validity
            Not Before: Aug 27 16:35:51 2017 GMT
            Not After : Nov  8 17:35:51 2017 GMT
        Subject: CN=gov.us, OU=Chaos, O=org/street=3210 Holly Mill Run, ST=province/postalCode=30062, GN=hello, SN=surname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:04:63:38:1f:9b:cd:28:32:b2:7b:78:b4:
                    f5:b2:b4:4f:69:76:d2:32:cf:10:b3:b8:fa:e8:93:
                    16:ef:8f:12:cc:91:27:d3:83:3c:e4:17:b3:14:fb:
                    63:52:df:ae:d9:de:75:83:8d:ca:2e:ee:eb:d4:12:
                    89:08:87:4e:9b:55:4b:e0:56:71:a4:34:6c:38:9e:
                    23:c2:3c:55:e5:dd:f2:ca:eb:8b:5b:6c:9c:a5:2e:
                    3b:42:35:23:be:2f:b7:8d:1e:2e:fa:9d:b5:97:4c:
                    23:a7:fd:8c:99:5f:db:e3:15:dc:b7:86:71:e5:45:
                    64:1b:63:bd:49:12:bf:30:1a:36:14:e7:6e:31:1a:
                    ec:16:38:21:c7:4f:6e:54:74:8f:37:98:2f:52:09:
                    47:65:75:96:a8:f1:b3:70:e3:e5:e0:76:7b:68:2a:
                    00:70:34:76:8b:8c:65:ea:16:bb:a2:4b:42:3e:8f:
                    63:99:f4:d3:87:c8:80:ab:cd:56:ec:9a:11:06:dc:
                    d1:32:e4:84:5d:15:70:18:bc:de:a0:3b:ef:b0:4c:
                    fe:4e:a6:8e:50:df:9d:7a:dd:4c:33:4b:47:a2:36:
                    0a:36:b8:2f:62:cf:ea:32:ba:43:78:ba:2b:17:09:
                    34:83:72:2a:2b:63:ab:32:30:c8:1d:f3:62:b2:f4:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:a_.subtlety.co.uk
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         a0:fa:6e:6d:a4:a4:11:d5:58:3c:f9:aa:c6:45:b4:ec:71:a3:
         8a:f2:84:06:02:25:02:e3:c7:38:4d:50:a5:2a:77:b7:d3:ee:
         a3:db:e8:86:61:97:08:b2:7a:99:5e:ba:ff:c5:fc:5e:06:c1:
         0a:c3:cc:59:36:d1:73:7e:ee:75:1f:26:29:18:fe:28:3b:be:
         6e:28:30:ee:b0:10:5f:1c:6c:c5:de:cd:72:48:f2:96:19:7b:
         24:0c:90:b2:44:f2:c6:6a:0b:b3:46:f5:24:bc:ab:d1:88:0e:
         56:f7:30:84:46:2c:73:f3:1a:18:f2:6b:31:fa:f5:14:37:71:
         41:96:9e:d7:1b:55:0f:65:16:2d:b0:86:f5:08:2e:91:24:ab:
         51:f8:2e:0f:48:c3:b5:2b:fb:64:d1:90:8b:aa:23:75:b0:44:
         1d:7d:a8:2f:b1:da:3a:c8:0c:4b:7c:83:a5:9c:80:76:dd:65:
         bc:d5:fe:bc:8e:26:ff:ed:d0:52:74:a7:a1:29:c9:06:e5:09:
         01:d9:08:f7:b4:06:df:de:41:ba:52:e2:08:a4:d1:1f:3c:c0:
         43:76:b4:5d:39:25:05:59:e5:24:93:15:d1:8c:c7:e7:cd:4c:
         5a:67:a3:0f:e5:a3:93:a3:76:a8:b9:c9:19:70:21:82:bd:15:
         d7:55:e1:f2
-----BEGIN CERTIFICATE-----
MIIEgjCCA2ygAwIBAgIBATALBgkqhkiG9w0BAQswgY8xFjAUBgNVBAMTDU1vdGhl
ciBOYXR1cmUxEzARBgNVBAsTCkV2ZXJ5dGhpbmcxFjAUBgNVBAoTDU1vdGhlciBO
YXR1cmUxEzARBgNVBBETCnBvc3RhbGNvZGUxCzAJBgNVBAYTAlVTMRIwEAYDVQQq
EwlnaXZlbm5hbWUxEDAOBgNVBAQTB3N1cm5hbWUxADAeFw0xNzA4MjcxNjM1NTFa
Fw0xNzExMDgxNzM1NTFaMIGUMQ8wDQYDVQQDEwZnb3YudXMxDjAMBgNVBAsTBUNo
YW9zMQwwCgYDVQQKEwNvcmcxHDAaBgNVBAkTEzMyMTAgSG9sbHkgTWlsbCBSdW4x
ETAPBgNVBAgTCHByb3ZpbmNlMQ4wDAYDVQQREwUzMDA2MjEOMAwGA1UEKhMFaGVs
bG8xEDAOBgNVBAQTB3N1cm5hbWUxADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKNTBGM4H5vNKDKye3i09bK0T2l20jLPELO4+uiTFu+PEsyRJ9ODPOQX
sxT7Y1LfrtnedYONyi7u69QSiQiHTptVS+BWcaQ0bDieI8I8VeXd8srri1tsnKUu
O0I1I74vt40eLvqdtZdMI6f9jJlf2+MV3LeGceVFZBtjvUkSvzAaNhTnbjEa7BY4
IcdPblR0jzeYL1IJR2V1lqjxs3Dj5eB2e2gqAHA0douMZeoWu6JLQj6PY5n004fI
gKvNVuyaEQbc0TLkhF0VcBi83qA777BM/k6mjlDfnXrdTDNLR6I2Cja4L2LP6jK6
Q3i6KxcJNINyKitjqzIwyB3zYrL0MZkCAwEAAaOB5TCB4jAOBgNVHQ8BAf8EBAMC
AKAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAw
DgYDVR0jBAcwBYADAQIDMGIGCCsGAQUFBwEBBFYwVDAhBggrBgEFBQcwAYYVaHR0
cDovL3RoZWNhLm5ldC9vY3NwMC8GCCsGAQUFBzAChiNodHRwOi8vdGhlY2EubmV0
L3RvdGFsbHl0aGVjZXJ0LmNydDAcBgNVHREEFTATghFhXy5zdWJ0bGV0eS5jby51
azARBgNVHSAECjAIMAYGBFUdIAAwCwYJKoZIhvcNAQELA4IBAQCg+m5tpKQR1Vg8
+arGRbTscaOK8oQGAiUC48c4TVClKne30+6j2+iGYZcIsnqZXrr/xfxeBsEKw8xZ
NtFzfu51HyYpGP4oO75uKDDusBBfHGzF3s1ySPKWGXskDJCyRPLGaguzRvUkvKvR
iA5W9zCERixz8xoY8msx+vUUN3FBlp7XG1UPZRYtsIb1CC6RJKtR+C4PSMO1K/tk
0ZCLqiN1sEQdfagvsdo6yAxLfIOlnIB23WW81f68jib/7dBSdKehKckG5QkB2Qj3
tAbf3kG6UuIIpNEfPMBDdrRdOSUFWeUkkxXRjMfnzUxaZ6MP5aOTo3aouckZcCGC
vRXXVeHy
-----END CERTIFICATE-----
