Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 25 01:11:31 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:bf:b8:57:e0:2b:21:d5:0a:c4:0e:9b:a7:79:a4:
                    14:c8:01:68:b6:63:a2:58:0a:15:fc:4c:ec:83:bf:
                    f2:2a:01:ec:f9:9b:f9:62:e5:2e:1b:b9:90:7a:bc:
                    f2:40:d4:ac:c8:c8:4b:89:7e:6c:1d:ca:6f:8c:f9:
                    9b:ac:8e:a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  DNS:example.com
                  DNS:test.com
                  IP:192.168.1.1/1.2.3.4
                Excluded:
                  DNS:banned.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:thatswhy

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

            X509v3 Freshest CRL: 
                ..
    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:71:a1:1b:d9:a5:42:4a:16:50:12:f3:23:15:b7:64:f9:
         a0:9b:07:98:d7:8c:43:a4:f6:cd:9e:92:64:83:81:9f:02:d7:
         42:00:91:16:ec:28:ac:90:21:b7:68:31:9f:4c:77:b2:19:a0:
         52:cc:cf:6c:ce:49:30:bc:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
