Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 17 23:43:08 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:ce:1c:6a:c5:4e:7c:a2:a6:14:a1:4e:f2:08:28:
                    7c:f0:7c:de:3f:52:1c:01:fe:31:2a:92:7c:59:93:
                    91:09:b9:9e:99:aa:c4:6b:50:5d:6d:0a:e9:1f:c1:
                    7a:ce:c5:77:97:0d:c4:b2:fc:e2:9a:4c:42:ea:b0:
                    7f:0a:a4:e1:01
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                0..0D..g.....0:0...+.......0...test0$..+.......0.0
..0............example0B..*...0:0...+.......0...test0$..+.......0.0
..0............example
            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:e6:6d:b9:9b:4b:0b:15:8c:4f:7a:2a:17:c0:9e:7f:65:
         44:d2:98:bc:f8:d1:49:20:b1:b1:6e:5f:a8:fe:e4:b7:ce:01:
         fb:e7:e6:3b:3e:93:92:ef:3c:fa:fc:ef:7d:a2:07:e4:96:af:
         20:e2:66:0c:a1:6e:5a:7c:06:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
