Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675984 (0x431669690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Jul  8 20:48:52 2016 GMT
            Not After : Sep 20 20:48:52 2016 GMT
        Subject: C = US, ST = FL, L = Tallahassee, street = 3210 Holly Mill Run, postalCode = 30062, O = Extreme Discord, OU = Chaos, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:9e:3a:57:08:9b:6a:22:f9:f7:8d:fb:4a:
                    5d:b9:c9:e4:6f:b2:9e:87:42:7d:64:fb:5b:91:1b:
                    29:17:5a:9d:b6:45:e6:0b:6f:9f:34:19:7a:69:76:
                    89:6b:08:b0:e1:db:84:85:b4:28:35:35:70:00:94:
                    d4:02:b9:9a:2e:df:fa:4e:f3:ee:09:38:94:d9:e7:
                    68:2c:f6:cc:27:5b:43:ee:9e:58:cb:71:91:f9:56:
                    64:f6:98:75:26:48:02:15:7e:ee:0c:0e:42:0f:1d:
                    d1:72:df:0c:1f:70:ad:60:c4:f6:5b:9b:ce:9f:7b:
                    66:94:b8:8d:98:58:79:d2:de:ed:6f:ee:25:32:9d:
                    04:c8:5f:1b:ec:05:1e:4b:3e:ac:de:5e:a0:81:1c:
                    a4:34:f8:d0:a4:be:02:47:34:40:2b:1b:3e:56:da:
                    32:70:aa:28:3c:c6:8d:38:0d:35:a8:5c:ab:07:b6:
                    27:26:88:a9:96:10:09:50:bf:ef:16:22:fd:ac:ce:
                    d6:7e:1a:28:19:de:8f:26:00:df:6b:e5:18:ef:69:
                    81:16:6b:32:5f:64:4c:79:2b:84:86:67:b5:4c:5d:
                    e9:16:e0:48:a3:5d:3b:20:6c:c2:9a:34:d0:e3:e1:
                    3b:c8:0c:48:4a:c0:34:85:9f:e7:f4:6f:9f:be:11:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.5.5.7.13.1
                Policy: 2.23.140.1.2.2

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:*.gov.us, DNS:gov.us
            X509v3 Issuer Alternative Name: 
                DNS:allthethings.net, DNS:allthemthings.net, DNS:theca.net
            X509v3 Authority Key Identifier: 
                keyid:01:02:03:04
                serial:1C:BD:7D:87:57

            X509v3 Freshest CRL: 

                Full Name:
                  URI:http://crl.allthemthings.net/sfig2s1-17.crl

            X509v3 Policy Mappings: critical
                1.3.6.1.5.5.7.13.1:1.3.6.1.5.5.7.13.2, 2.23.140.1.2.2:1.3.6.1.5.5.7.13.3
    Signature Algorithm: sha256WithRSAEncryption
         40:38:27:6d:f7:8d:97:73:b4:50:9d:d9:19:0b:60:2b:ee:c7:
         b4:fe:cf:2c:45:f4:4c:d7:9e:9e:39:a1:bc:19:dc:cb:84:6e:
         0b:d6:0b:75:ef:86:46:d4:9f:8e:3d:49:20:ef:9f:50:0a:88:
         c8:13:f6:9f:48:e4:7a:d7:db:de:81:77:99:e7:ed:05:fd:79:
         68:00:4a:27:84:a4:8b:8e:58:a8:5c:af:d4:61:e7:bc:26:c5:
         2c:44:a4:e5:46:c4:d1:e8:8f:db:b9:20:b4:b2:7b:b2:ec:cf:
         3d:ef:de:c7:2a:e3:71:76:2e:9c:fc:64:3f:1b:75:80:af:e1:
         be:3b:01:8f:ae:57:ee:1d:bd:9c:25:c5:c4:ee:6f:9e:d9:c2:
         3e:10:07:3d:dd:2b:78:d2:4f:b9:6e:4c:d6:d2:ad:5e:6b:a3:
         1e:43:b9:91:ae:b5:a8:1d:08:98:01:31:e1:47:41:bb:95:31:
         b2:ef:51:94:10:0b:01:51:19:65:47:4f:8b:42:2a:65:e3:39:
         ab:2b:ea:8a:73:c1:a6:1e:d6:26:2b:07:4c:9a:15:26:66:14:
         f8:de:cc:9a:f0:55:c4:1a:f2:45:26:20:70:62:55:fc:de:5f:
         2e:c7:95:46:55:3b:06:75:a4:7a:a1:34:b7:30:73:59:fd:19:
         99:fd:fe:cd
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIFBDFmlpAwDQYJKoZIhvcNAQELBQAwUjELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDU1vdGhlciBOYXR1cmUxEzARBgNVBAsTCkV2ZXJ5dGhpbmcx
FjAUBgNVBAMTDU1vdGhlciBOYXR1cmUwHhcNMTYwNzA4MjA0ODUyWhcNMTYwOTIw
MjA0ODUyWjCBmTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkZMMRQwEgYDVQQHEwtU
YWxsYWhhc3NlZTEcMBoGA1UECRMTMzIxMCBIb2xseSBNaWxsIFJ1bjEOMAwGA1UE
ERMFMzAwNjIxGDAWBgNVBAoTD0V4dHJlbWUgRGlzY29yZDEOMAwGA1UECxMFQ2hh
b3MxDzANBgNVBAMTBmdvdi51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN3MnjpXCJtqIvn3jftKXbnJ5G+ynodCfWT7W5EbKRdanbZF5gtvnzQZeml2
iWsIsOHbhIW0KDU1cACU1AK5mi7f+k7z7gk4lNnnaCz2zCdbQ+6eWMtxkflWZPaY
dSZIAhV+7gwOQg8d0XLfDB9wrWDE9lubzp97ZpS4jZhYedLe7W/uJTKdBMhfG+wF
Hks+rN5eoIEcpDT40KS+Akc0QCsbPlbaMnCqKDzGjTgNNahcqwe2JyaIqZYQCVC/
7xYi/azO1n4aKBnejyYA32vlGO9pgRZrMl9kTHkrhIZntUxd6RbgSKNdOyBswpo0
0OPhO8gMSErANIWf5/Rvn74R9iUCAwEAAaOCAb4wggG6MA4GA1UdDwEB/wQEAwIC
pDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDwYDVR0TAQH/BAUwAwEB
/zBiBggrBgEFBQcBAQRWMFQwIQYIKwYBBQUHMAGGFWh0dHA6Ly90aGVjYS5uZXQv
b2NzcDAvBggrBgEFBQcwAoYjaHR0cDovL3RoZWNhLm5ldC90b3RhbGx5dGhlY2Vy
dC5jcnQwHwYDVR0gBBgwFjAKBggrBgEFBQcNATAIBgZngQwBAgIwDQYDVR0OBAYE
BAQDAgEwGwYDVR0RBBQwEoIIKi5nb3YudXOCBmdvdi51czA5BgNVHRIEMjAwghBh
bGx0aGV0aGluZ3MubmV0ghFhbGx0aGVtdGhpbmdzLm5ldIIJdGhlY2EubmV0MBYG
A1UdIwQPMA2ABAECAwSCBRy9fYdXMDwGA1UdLgQ1MDMwMaAvoC2GK2h0dHA6Ly9j
cmwuYWxsdGhlbXRoaW5ncy5uZXQvc2ZpZzJzMS0xNy5jcmwwNgYDVR0hAQH/BCww
KjAUBggrBgEFBQcNAQYIKwYBBQUHDQIwEgYGZ4EMAQICBggrBgEFBQcNAzANBgkq
hkiG9w0BAQsFAAOCAQEAQDgnbfeNl3O0UJ3ZGQtgK+7HtP7PLEX0TNeenjmhvBnc
y4RuC9YLde+GRtSfjj1JIO+fUAqIyBP2n0jketfb3oF3meftBf15aABKJ4Ski45Y
qFyv1GHnvCbFLESk5UbE0eiP27kgtLJ7suzPPe/exyrjcXYunPxkPxt1gK/hvjsB
j65X7h29nCXFxO5vntnCPhAHPd0reNJPuW5M1tKtXmujHkO5ka61qB0ImAEx4UdB
u5Uxsu9RlBALAVEZZUdPi0IqZeM5qyvqinPBph7WJisHTJoVJmYU+N7MmvBVxBry
RSYgcGJV/N5fLseVRlU7BnWkeqE0tzBzWf0Zmf3+zQ==
-----END CERTIFICATE-----
