Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 23 21:50:31 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:b1:b4:e5:a3:2d:34:c3:7f:6c:73:95:c4:ab:24:
                    f1:f5:87:1b:69:e3:bd:45:c1:8c:0b:88:5c:4d:e6:
                    b1:42:ac:75:e2:47:c9:66:c8:9b:e7:5c:e8:b4:66:
                    ae:56:c7:d8:05:76:42:e3:4e:b7:c1:9d:d5:5f:c9:
                    43:b1:dc:03:11
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:thatswhy
                Reasons:
                  Key Compromise, CA Compromise, Affiliation Changed, Cessation Of Operation

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         56:02:be:19:73:ba:2b:fd:79:a8:04:0c:4d:fd:27:0f:26:6e:
         d7:d5:89:a2:63:f9:4b:22:6e:7c:86:f8:8b:f4:40:42:63:0b:
         14:0d:c1:1c:13:c5:0c:05:06:d9:d4:1d:7d:5c:28:26:52:00:
         47:ff:24:ad:a7:af:f5:cb:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
