Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 23 20:12:31 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:ee:29:61:73:c8:d2:c1:c0:7b:21:25:60:36:af:
                    b1:a2:8c:4a:20:3e:75:99:78:fb:10:0c:db:09:72:
                    55:07:a1:d0:3c:f6:59:e6:66:84:5b:14:59:3f:f4:
                    eb:ba:c9:67:cc:cb:71:38:14:af:31:50:a8:83:ef:
                    c4:77:b0:28:55
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                0x0;..g.....010...+.......0.0!..+.......0.0
..0............!...09..*...010...+.......0.0!..+.......0.0
..0............!...
            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         2f:68:8e:ec:b3:a4:86:fd:95:57:a7:ce:c5:2d:af:ce:20:95:
         c6:12:b2:a0:02:94:18:2c:ba:d8:98:75:d7:9c:b4:bd:93:29:
         df:29:50:48:7a:bf:a8:39:49:a9:3f:c4:88:62:a0:a0:67:08:
         ad:be:0c:2d:28:cb:1f:81:c1:e5
-----BEGIN CERTIFICATE-----
MIIDhTCCAzGgAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFQxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRYw
FAYDVQQDEw1Nb3RoZXIgTmF0dXJlMQAwIhgPMjA1NTEyMDEwNjA3MDhaGA8yMDU2
MDgyMzIwMTIzMVowgZsxCzAJBgNVBAYTAlVTMRgwFgYDVQQKEw9FeHRyZW1lIERp
c2NvcmQxDjAMBgNVBAsTBUNoYW9zMRQwEgYDVQQHEwtUYWxsYWhhc3NlZTELMAkG
A1UECBMCRkwxHDAaBgNVBAkTEzMyMTAgSG9sbHkgTWlsbCBSdW4xDjAMBgNVBBET
BTMwMDYyMQ8wDQYDVQQDEwZnb3YudXMxADBcMA0GCSqGSIb3DQEBAQUAA0sAMEgC
QQDuKWFzyNLBwHshJWA2r7GijEogPnWZePsQDNsJclUHodA89lnmZoRbFFk/9Ou6
yWfMy3E4FK8xUKiD78R3sChVAgMBAAGBBAABAgOjggGYMIIBlDAOBgNVHQ8BAf8E
BAMCAKQwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0jBAcwBYADAQIDMIGBBgNVHSAEejB4MDsGBmeBDAECAjAxMAwG
CCsGAQUFBwIDMAAwIQYIKwYBBQUHAgIwFTANAAAwCQIBAgIBAwIBAwwEIcKvEDA5
BgQqAwQFMDEwDAYIKwYBBQUHAgMwADAhBggrBgEFBQcCAjAVMA0AADAJAgECAgED
AgEDDAQhwq8QMDsGA1UdHgQ0MDKgDDAKhwjAqAEBAQIDBKEiMCCDHkM9VVM7QT1B
VFQ7UD1Db250b3NvO089RXhhbXBsZTARBgNVHR8ECjAIMAagBKAChgAwDQYDVR0O
BAYEBAQDAgEwFQYDVR0RBA4wDIIGZ292LnVzggLAqDAJBgNVHTYEAgIBMA4GCCsG
AQUFBwELBAICATAtBggrBgEFBQcBAQEB/wQeMBwwGgYIKwYBBQUHMAGCDnRoZWNh
Lm5ldC9vY3NwMAsGCSqGSIb3DQEBCwNBAC9ojuyzpIb9lVenzsUtr84glcYSsqAC
lBgsutiYddectL2TKd8pUEh6v6g5Sak/xIhioKBnCK2+DC0oyx+BweU=
-----END CERTIFICATE-----
