Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Mother Nature, OU=Everything, O=Mother Nature/postalCode=postalcode, C=US, GN=givenname, SN=surname
        Validity
            Not Before: Aug 28 15:30:35 2017 GMT
            Not After : Nov  9 16:30:35 2017 GMT
        Subject: CN=gov.us, OU=Chaos, O=org/street=3210 Holly Mill Run, ST=province/postalCode=30062, GN=hello, SN=surname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:a4:43:08:01:28:25:b7:db:f0:0b:99:02:
                    d0:32:9c:d3:19:9c:ec:12:6c:63:50:fb:5c:ed:a3:
                    6f:73:b7:11:14:55:4c:77:57:5f:d1:6b:af:5b:41:
                    f9:f4:7f:61:d4:2a:0f:de:de:f3:86:8a:87:b8:76:
                    47:4a:03:e8:79:c8:0d:28:4b:81:84:52:9e:ce:c7:
                    bc:29:51:7d:52:a2:f8:61:72:9e:dd:44:74:5a:32:
                    ac:cc:79:aa:20:5b:c5:0b:dd:2a:67:dd:77:3b:a9:
                    42:0f:a0:f6:70:24:45:81:b1:89:12:90:f7:24:4a:
                    47:91:16:e6:5a:9d:f4:c7:21:42:24:56:29:c2:e8:
                    df:24:ab:22:26:6e:dc:a3:43:7c:28:fd:a3:61:1c:
                    f3:e3:37:fd:fc:af:48:b0:23:db:40:ed:e7:82:9d:
                    60:2a:3e:0c:c3:02:2c:b5:02:ed:b4:ba:e7:44:81:
                    cd:7e:cc:6b:f5:1b:44:3c:c8:61:d8:12:8d:24:1a:
                    34:0e:9c:24:67:30:80:14:c5:48:0a:5a:29:cc:28:
                    b6:c6:bd:7c:72:c4:75:5d:18:73:20:89:af:f6:32:
                    14:dc:7b:c4:77:81:64:32:e3:91:37:9e:d7:34:32:
                    f6:a2:7f:44:22:40:02:ab:1e:6f:ba:8c:78:57:c2:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:-subtlety.co.uk
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:4c:ab:45:8b:1f:bc:69:0f:9c:bb:11:47:c1:a6:c0:d3:
         a3:c2:75:71:73:b5:00:e7:30:ff:1e:b4:18:af:51:31:4e:bc:
         ed:27:44:42:25:27:a5:a7:6d:64:12:84:85:fa:e1:b3:b5:a4:
         5f:9f:c8:84:20:09:26:37:2f:8b:48:e7:ce:8f:9c:20:f2:cd:
         97:49:89:cc:a1:7e:62:b8:51:2e:a8:12:e7:91:fc:58:5c:fc:
         fa:f9:3e:d0:9d:e7:1d:2b:e0:32:ae:8b:3a:5c:e0:40:54:32:
         55:06:bb:c0:c4:95:22:b1:e2:d7:94:64:e3:12:78:c0:84:e3:
         69:7e:ce:79:aa:e3:08:6b:bd:ad:bb:4c:61:e2:fb:5c:b3:98:
         7e:ce:af:e6:df:30:2e:18:0b:17:91:27:e6:3f:62:24:29:94:
         1d:c2:79:92:b8:e3:46:dc:1d:68:94:e3:87:be:8d:ab:97:79:
         60:f9:78:8b:a8:45:cb:82:eb:6b:39:92:47:e3:e8:30:76:02:
         09:ac:f3:7e:e1:6f:88:ae:53:35:11:b6:a9:91:03:ea:1c:4b:
         d8:0f:a9:c5:0f:9f:40:a3:dd:6a:a2:33:ec:e2:cc:d3:f1:81:
         28:56:8f:eb:6e:7f:17:53:0e:a9:ad:bc:8f:20:c5:25:84:56:
         87:b8:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
