Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 23 20:12:56 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:a3:14:16:fc:6c:cc:b7:22:5d:0c:a1:d6:64:37:
                    97:c9:0b:f6:e7:a5:1d:8e:dd:62:4d:c4:db:71:a2:
                    89:c4:5d:98:25:7f:be:fe:03:27:f3:fb:f1:6d:6f:
                    16:ec:42:da:f6:a5:b9:33:a6:98:3d:19:32:92:ae:
                    45:d9:81:af:91
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                0x0;..g.....010...+.......0.0!..+.......0.0
..0............!../09..*...010...+.......0.0!..+.......0.0
..0............!../
            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         2c:0c:4f:72:ab:f3:7b:9f:fb:f1:c8:0f:e9:f9:f2:77:f4:39:
         47:3a:3b:97:9f:10:a3:46:70:15:c9:af:78:5b:a2:a1:40:70:
         f7:01:e7:af:f3:3c:9a:da:89:da:c7:31:69:6b:a6:87:76:8d:
         c3:4b:d1:1d:6a:c9:94:6d:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
