Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 12 20:11:44 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:ab:91:db:64:46:b1:5b:d8:7d:73:19:45:b1:d7:
                    53:06:6b:33:9b:80:bf:9c:90:e3:20:7a:1f:fa:ea:
                    1e:35:2a:46:89:89:e3:62:6f:a9:2e:ed:f1:6b:01:
                    cd:1f:ef:bf:f3:27:27:97:4b:b8:97:d7:c9:0a:05:
                    6c:57:6a:30:0d
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
    Signature Algorithm: sha256WithRSAEncryption
         93:49:4a:ed:81:0b:b3:3a:44:a3:77:f7:e7:20:22:66:fe:ce:
         44:96:e6:2c:0d:9b:3d:a5:3a:6e:17:33:17:ec:1d:c3:35:0a:
         d2:2d:ed:54:92:6f:6a:44:43:07:48:03:f8:fd:3f:4d:67:f7:
         ba:a3:8e:69:7a:34:57:b6:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
