Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675984 (0x431669690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Jul 13 15:24:13 2016 GMT
            Not After : Sep 25 15:24:13 2016 GMT
        Subject: C = US, ST = FL, L = Tallahassee, street = 3210 Holly Mill Run, postalCode = 30062, O = Extreme Discord, OU = Chaos, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:ac:0a:71:31:8b:38:eb:d9:d9:b5:ae:08:
                    b3:4d:26:7f:34:d0:5e:17:fa:85:8c:b5:b7:4c:f3:
                    01:96:49:fd:2c:02:a6:a7:28:5a:32:2a:49:5f:15:
                    53:70:58:ab:8e:38:b0:35:64:2e:f3:14:17:20:23:
                    87:07:c6:cf:cb:99:11:e2:eb:fa:b8:0c:59:a3:ef:
                    6e:1b:6a:1d:e4:55:9e:3b:30:fe:d1:cc:ee:de:15:
                    d2:5d:79:5b:5c:3d:6b:2a:c5:0a:a8:23:b3:c6:af:
                    97:22:db:ce:18:1d:ee:1b:3b:57:1e:e7:40:8b:bf:
                    61:b8:f9:ea:10:c4:35:83:7d:b3:3a:4a:66:33:0b:
                    d0:24:83:16:e3:b4:ab:05:e2:89:f8:ef:20:00:e7:
                    3b:4e:dc:d5:e4:1a:2c:28:7f:85:c7:18:78:df:b7:
                    56:e7:57:e3:51:e8:35:74:6d:ce:24:6f:66:c1:b3:
                    43:f2:5a:25:f2:d9:6d:64:0d:15:6a:79:97:95:41:
                    4c:84:60:1b:23:43:fa:0c:54:3e:8e:ba:14:cb:52:
                    43:68:60:a4:29:a5:51:2e:23:49:32:3f:40:3f:4c:
                    4c:54:8e:94:ff:be:f3:16:8f:5c:18:20:3f:78:3e:
                    ad:ca:99:cf:2f:d0:fe:db:23:d2:7a:4b:3c:aa:a1:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.5.5.7.13.1
                Policy: 2.23.140.1.2.2

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:*.gov.us, DNS:gov.us
            X509v3 Issuer Alternative Name: 
                DNS:allthethings.net, DNS:allthemthings.net, DNS:theca.net
            X509v3 Authority Key Identifier: 
                keyid:01:02:03:04
                serial:1C:BD:7D:87:57

            X509v3 Freshest CRL: 

                Full Name:
                  URI:http://crl.allthemthings.net/sfig2s1-17.crl

            X509v3 Policy Mappings: critical
                1.3.6.1.5.5.7.13.1:1.3.6.1.5.5.7.13.2, 2.23.140.1.2.2:1.3.6.1.5.5.7.13.3
            X509v3 Policy Constraints: critical
                0......
    Signature Algorithm: sha256WithRSAEncryption
         17:6e:45:f7:d7:c3:6b:59:25:3e:ef:1f:7e:80:ab:8f:92:28:
         f7:4f:2d:52:12:55:25:69:97:da:cf:3b:65:bd:88:17:9d:21:
         ec:38:52:81:97:12:4d:a9:13:a3:8a:12:93:7a:4c:ee:20:b6:
         00:c3:da:d0:20:1b:e7:e7:43:8b:25:1f:d1:b2:e2:79:bb:e1:
         04:80:82:be:2a:d7:56:41:03:d4:91:98:55:d6:b1:b8:69:2e:
         89:12:0f:72:e6:5b:60:3b:9b:3a:9b:45:af:52:21:d6:97:7e:
         1c:79:1d:10:76:ba:25:e9:69:de:3a:b6:43:80:c8:66:94:d2:
         df:e5:7a:27:8e:22:40:da:d1:0d:e9:9d:09:7e:60:f3:cf:f9:
         04:66:f1:ed:a6:e5:11:ba:5a:3c:35:03:f6:ee:75:27:41:5e:
         86:b9:ef:f6:29:4e:00:35:10:03:58:f4:76:50:1c:37:36:54:
         c6:48:81:d5:8b:49:17:ae:4e:dd:5d:8d:02:fe:c2:ff:d6:a1:
         af:1b:68:7a:47:ac:89:f6:b9:df:94:34:82:f5:86:bd:a3:2e:
         10:af:07:77:c9:cf:8f:5d:64:0d:a3:ea:c5:9c:c4:65:1d:8b:
         ab:01:72:14:1a:fd:91:e2:83:33:b5:ab:80:8d:66:92:16:f4:
         3f:2f:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
