Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 21 01:33:21 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:e4:91:22:90:c9:c9:2e:d7:ae:02:08:23:71:57:
                    60:6e:0c:31:46:5d:49:01:d8:ce:b6:42:06:58:46:
                    3f:6c:2d:da:65:45:06:95:94:5d:0d:3d:ee:33:70:
                    76:ad:4b:dc:18:54:1e:5d:92:60:c4:79:e3:fe:79:
                    4d:4d:f1:18:8f
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                0..F0.. ..g.....0...0...+.......0.0.....+.......0..0
..0.............An explicitText field includes the textual statement directly in the certificate.  The explicitText field is a string with a maximum size of 200 characters.  Conforming CAs SHOULD use the UTF8String encoding for explicitText.  0.....*...0...0...+.......0.0.....+.......0..0
..0.............An explicitText field includes the textual statement directly in the certificate.  The explicitText field is a string with a maximum size of 200 characters.  Conforming CAs SHOULD use the UTF8String encoding for explicitText.  
            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:0e:22:77:6a:c5:8a:c1:10:ba:b4:4e:05:bc:6f:5e:16:
         37:d5:4d:92:44:ee:f0:5f:e8:7c:38:39:0e:ca:46:f3:fb:f1:
         d1:5b:5b:34:bf:d5:cf:87:4a:e3:89:d6:99:8b:b2:20:30:8a:
         1e:ee:55:2f:c6:90:87:a1:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
