Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 18 04:17:59 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:e9:b4:7e:52:a5:25:72:f8:dd:f0:39:0b:1d:70:
                    4d:9d:76:89:82:5b:64:11:9d:47:fa:fd:11:c6:c1:
                    9f:e6:04:58:e5:52:e9:8e:b6:3e:7a:65:13:00:1e:
                    21:ed:88:9e:9d:9f:31:ba:a2:e0:c1:3d:a4:42:a1:
                    d2:72:e8:53:91
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                0~0>..g.....040...+.......0.0$..+.......0.0
..0............example0<..*...040...+.......0.0$..+.......0.0
..0............example
            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         27:79:18:07:e8:fc:a5:64:26:58:37:fb:98:28:14:cd:fe:50:
         2b:ca:f0:a6:f3:f5:08:65:50:d9:97:6d:06:c3:8c:95:80:49:
         e4:39:5c:95:a6:13:86:ce:68:74:e3:56:1f:6e:cc:7b:7e:cd:
         e1:65:3b:9f:70:a5:a5:38:3d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
