Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675984 (0x431669690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Jul 13 15:08:40 2016 GMT
            Not After : Sep 25 15:08:40 2016 GMT
        Subject: C = US, ST = FL, L = Tallahassee, street = 3210 Holly Mill Run, postalCode = 30062, O = Extreme Discord, OU = Chaos, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:b6:00:3f:26:3e:5d:47:aa:3e:88:e9:0d:
                    70:39:83:01:91:ac:d5:6d:df:e9:f5:e9:6b:58:9e:
                    70:2d:8f:df:8c:fd:b4:7a:db:45:64:11:4b:47:c1:
                    41:fa:63:02:f1:15:60:df:8a:25:2e:37:c0:a0:c7:
                    cc:f8:2c:c5:4e:7c:f6:9e:22:86:db:6b:5f:43:ff:
                    a1:21:24:8b:31:af:6a:24:2e:88:1a:6d:3b:0c:9b:
                    ee:d3:7d:40:0f:bc:46:1f:3a:92:0f:64:46:69:fb:
                    e8:db:25:8e:5a:38:02:5d:7c:4e:6f:ff:3a:15:df:
                    d8:0d:cb:4c:fc:16:89:24:6e:f7:a9:c9:b6:4c:f2:
                    9e:d2:0a:18:99:d8:e1:a4:14:f7:99:03:57:f4:05:
                    98:92:7d:78:f0:f7:80:dc:d4:a6:2d:a4:40:ab:ee:
                    2a:30:1c:12:83:46:45:fe:9e:86:9c:06:57:92:76:
                    e9:2c:5c:0d:59:35:ce:3e:19:61:b0:0f:97:50:46:
                    70:d6:fb:2d:20:25:4b:97:49:e3:d8:ab:4e:9c:7b:
                    3b:a6:7f:19:b5:39:b4:5a:a1:73:ee:f0:ee:e6:33:
                    9f:b3:27:c0:56:cc:ae:ec:55:b5:1b:71:75:29:c0:
                    eb:cf:bc:0d:56:a6:ea:87:22:27:73:ca:f8:c3:70:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.5.5.7.13.1
                Policy: 2.23.140.1.2.2

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:*.gov.us, DNS:gov.us
            X509v3 Issuer Alternative Name: 
                DNS:allthethings.net, DNS:allthemthings.net, DNS:theca.net
            X509v3 Authority Key Identifier: 
                keyid:01:02:03:04
                serial:1C:BD:7D:87:57

            X509v3 Freshest CRL: 

                Full Name:
                  URI:http://crl.allthemthings.net/sfig2s1-17.crl

            X509v3 Policy Mappings: critical
                1.3.6.1.5.5.7.13.1:1.3.6.1.5.5.7.13.2, 2.23.140.1.2.2:1.3.6.1.5.5.7.13.3
            X509v3 Policy Constraints: critical
                0
..........
    Signature Algorithm: sha256WithRSAEncryption
         97:3a:d8:a2:c9:ef:7b:c6:ae:24:09:66:cc:2b:1f:57:ee:3d:
         46:15:0f:10:cf:f2:66:9f:b6:68:9c:b1:fc:55:11:1d:29:f0:
         0b:7b:64:b5:45:3d:a0:31:96:2e:02:55:ee:9c:ed:55:61:60:
         02:c7:71:e0:e6:12:73:21:d5:26:fd:b1:ee:a6:f8:4a:76:3e:
         83:09:22:36:f4:72:2b:12:c7:eb:75:b2:1e:07:2b:db:93:07:
         69:e1:f8:10:93:4d:03:68:ed:ef:99:9e:f8:00:95:cb:54:f8:
         3b:f8:3d:e7:c3:e7:e4:24:19:95:70:71:08:61:62:d0:f7:2b:
         e1:10:72:77:37:b3:a4:53:b1:ab:37:bb:e9:ef:1e:be:38:77:
         ae:f7:ae:7e:20:f5:85:77:39:ed:c2:1e:0e:cd:72:d5:fe:a8:
         91:19:08:83:54:bf:75:60:c6:f7:6b:06:0d:a3:e6:e8:a9:02:
         21:12:cc:e1:27:72:09:04:93:b9:d6:64:f2:88:79:93:f1:ea:
         08:6d:c6:ab:99:27:3a:8a:ed:ef:92:26:1d:57:ee:91:dc:b5:
         56:61:6e:99:98:49:f3:e4:2a:8a:ff:2f:8d:ec:b1:27:bc:01:
         6b:65:73:00:58:93:1a:89:e5:aa:fa:f6:f9:19:6a:78:bd:84:
         86:3a:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
