Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 18 04:30:46 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:e7:b7:ae:65:9f:60:7a:48:d7:ce:26:4c:f7:0a:
                    1b:30:cf:05:ad:f1:f4:10:67:65:2f:ed:ed:4f:05:
                    bf:6c:bf:76:6c:ed:4a:fa:bc:d5:7c:3d:51:49:62:
                    45:ad:2a:8e:28:31:5f:9b:c7:d4:b9:81:30:f4:24:
                    3b:b5:60:7b:e5
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                0~0>..g.....040...+.......0.0$..+.......0.0
..0............example0<..*...040...+.......0.0$..+.......0.0
..0............example
            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         16:98:a1:6a:3f:05:cc:7d:76:23:5f:f9:fa:69:63:21:46:03:
         93:90:2d:c6:f2:e0:bc:33:aa:59:91:21:97:69:f6:15:2c:7b:
         cb:19:99:6f:29:ee:98:25:d8:cb:a6:f6:7c:ba:3f:38:d3:5b:
         1d:c8:9c:7a:50:32:f6:aa:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
