Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 16 22:19:06 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:d8:5c:b9:10:3a:10:00:1d:db:85:f5:42:e1:b0:
                    d5:02:23:12:6a:39:ab:c1:c8:c2:f8:bb:47:be:c9:
                    c1:20:65:ed:dc:b6:0d:e8:09:11:8c:1f:fc:bd:07:
                    1e:5a:97:f5:c0:71:3b:8e:1a:90:0d:25:d3:e3:d3:
                    d1:b0:f9:36:0d
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.example.com

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:fa:62:be:20:ae:5b:aa:5e:d3:1b:25:12:d4:f4:fa:16:
         c2:d1:19:bc:a3:46:cf:db:88:d2:fc:ae:24:71:6e:72:9c:54:
         78:78:49:da:ae:09:f8:3b:ba:d8:19:c3:71:ea:c9:a1:6d:84:
         ce:9c:74:24:5f:cf:0c:aa:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
