Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675984 (0x431669690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Jul 13 15:25:15 2016 GMT
            Not After : Sep 25 15:25:15 2016 GMT
        Subject: C = US, ST = FL, L = Tallahassee, street = 3210 Holly Mill Run, postalCode = 30062, O = Extreme Discord, OU = Chaos, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:12:f4:c6:f8:8f:e6:f1:3c:cb:98:8d:a4:
                    f0:93:29:8c:0b:a6:76:a5:16:3f:1b:f8:d7:bf:8c:
                    33:c9:40:e8:54:ea:58:51:8e:e8:d2:de:0e:1d:7e:
                    36:f8:a6:89:48:4f:e1:33:35:ee:7c:19:d2:db:1b:
                    10:37:6f:5e:a1:f6:68:0b:69:7e:4a:a1:d6:cb:8c:
                    c7:52:2e:27:10:1b:a7:96:af:8b:9e:d3:4c:f5:d0:
                    76:bc:18:86:12:c5:d5:51:5b:35:56:d4:8a:e7:6e:
                    54:3b:52:29:fa:6a:a5:8d:de:9a:35:5f:42:7a:c8:
                    14:78:07:7c:c8:c1:48:90:3a:b1:3d:b4:ec:f1:9f:
                    ea:6f:5b:4c:cc:f7:90:45:fd:7d:0c:60:3e:94:3e:
                    99:d0:b2:3a:b3:a0:3a:bc:72:21:8e:03:8e:b1:e1:
                    f4:8a:41:d0:4b:a5:b8:96:c2:74:77:73:de:3e:10:
                    00:38:a5:82:1f:d4:de:e4:39:54:c6:35:38:40:dc:
                    6d:d8:a6:81:ac:0c:8b:0d:ee:49:44:cf:bf:de:09:
                    6e:17:ad:23:f7:fb:58:c1:99:cd:c4:75:8a:05:65:
                    5e:83:3e:12:d2:24:a0:c7:c5:22:4e:2c:bf:09:80:
                    c3:1a:97:b6:22:23:a9:43:78:32:ad:de:46:ef:88:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.5.5.7.13.1
                Policy: 2.23.140.1.2.2

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:*.gov.us, DNS:gov.us
            X509v3 Issuer Alternative Name: 
                DNS:allthethings.net, DNS:allthemthings.net, DNS:theca.net
            X509v3 Authority Key Identifier: 
                keyid:01:02:03:04
                serial:1C:BD:7D:87:57

            X509v3 Freshest CRL: 

                Full Name:
                  URI:http://crl.allthemthings.net/sfig2s1-17.crl

            X509v3 Policy Mappings: critical
                1.3.6.1.5.5.7.13.1:1.3.6.1.5.5.7.13.2, 2.23.140.1.2.2:1.3.6.1.5.5.7.13.3
            X509v3 Policy Constraints: 
                0
..........
    Signature Algorithm: sha256WithRSAEncryption
         ac:93:72:e0:d4:d7:48:dc:fc:4f:45:8d:54:07:c7:f6:60:d8:
         f4:00:63:1a:51:0f:b2:2a:12:e9:dd:8f:f7:29:04:00:5b:77:
         c5:8e:80:42:89:b1:38:d2:18:c9:37:0c:bf:12:da:e0:10:02:
         0a:3b:72:ab:98:f5:09:8d:1e:e0:ec:0f:06:7a:b2:2d:f6:64:
         8f:7f:29:f9:4f:90:52:9a:a6:a8:20:5b:ac:26:45:5b:a9:01:
         d5:d0:00:a4:a7:07:12:e1:45:3f:45:3b:47:93:14:54:33:5e:
         a3:59:79:07:ec:4a:77:60:00:1c:ed:96:8a:30:bc:15:8e:2c:
         91:9e:a4:94:4e:55:f5:f2:c4:49:e5:fc:09:b8:b4:c3:95:c5:
         40:ff:94:b0:56:ba:dd:ae:3b:23:19:67:d6:5f:0c:d7:83:32:
         05:aa:a0:d0:3d:41:8c:c5:e6:5e:8f:3f:ab:c7:8a:59:40:08:
         1c:e1:c4:f0:91:fc:7a:95:cf:03:fd:c0:b6:b2:b4:aa:36:d9:
         d1:2c:15:a8:7c:d8:54:4e:77:0a:e0:37:06:56:a7:47:d2:12:
         76:5a:6b:37:c3:72:e0:ca:2a:85:91:b7:28:09:1b:a8:7c:da:
         0c:c8:d3:70:b8:a4:72:43:ee:00:95:08:7a:ce:f0:7a:a0:eb:
         40:2d:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
