Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 18 03:27:15 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:d7:ec:7f:9e:be:ca:e5:b5:b1:44:2f:66:71:5e:
                    19:58:6b:df:4e:ee:6f:c9:18:ea:eb:98:89:b9:a1:
                    ea:0b:f3:18:0a:b7:85:47:c4:a8:7d:84:1b:b3:1d:
                    cb:f2:e6:12:da:2c:61:0f:bc:93:fc:93:d8:0b:f4:
                    a5:3a:ae:a6:a9
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                    Unknown Qualifier: textNotice
                Policy: 1.2.3.4.5
                    Unknown Qualifier: textNotice

            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         b5:a7:06:0a:82:e5:20:48:0d:5a:8f:7b:71:5d:00:57:1f:1d:
         b0:15:b5:c3:7e:b2:54:5e:00:b0:c8:3a:eb:6f:97:24:10:f2:
         f1:45:61:91:58:4d:6a:65:37:48:01:ef:6e:6c:69:53:b7:16:
         81:05:a0:6b:13:14:42:11:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
