Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675984 (0x431669690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Jul 13 14:46:19 2016 GMT
            Not After : Sep 25 14:46:19 2016 GMT
        Subject: C = US, ST = FL, L = Tallahassee, street = 3210 Holly Mill Run, postalCode = 30062, O = Extreme Discord, OU = Chaos, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f6:b1:05:16:b4:e0:6b:15:5c:6a:2e:51:17:ce:
                    59:44:ff:ec:62:ab:2a:77:0e:78:c0:3b:c1:5c:28:
                    71:25:00:ab:aa:12:2a:ca:86:8c:21:7d:31:1c:98:
                    69:47:aa:3c:2c:51:c0:9d:64:8e:93:f8:69:69:6f:
                    64:03:ff:41:3f:41:7e:5c:4f:92:d1:76:da:7d:39:
                    0c:7d:03:73:82:6c:72:95:9b:ab:2a:ff:a1:1d:e9:
                    6d:04:91:1b:b4:fa:47:ca:51:4e:47:ab:dc:88:b0:
                    53:cf:99:c8:86:f8:1b:e8:b1:55:0e:8d:a8:42:10:
                    56:1d:bb:63:40:86:46:2b:03:62:5a:12:b2:42:e1:
                    2b:e7:49:24:57:0c:40:a1:d7:02:18:f7:c1:16:dd:
                    c6:c4:41:9c:29:f4:a2:81:55:7a:a5:9d:d2:d6:26:
                    6b:fb:a6:1a:bd:22:17:4d:e3:bd:0a:05:f2:57:0f:
                    ad:20:b6:ab:2d:c9:7a:d8:3b:5b:c7:a5:3c:cb:9a:
                    fe:24:00:ed:b9:e1:17:80:45:dd:a6:48:d4:b2:41:
                    17:2c:03:66:47:8f:c3:02:fc:c5:37:98:04:d0:8a:
                    7c:36:04:19:13:27:88:e0:ee:c8:f1:9a:9c:1c:53:
                    43:07:b2:75:61:f3:3f:20:50:af:2c:5b:dc:1b:dd:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.5.5.7.13.1
                Policy: 2.23.140.1.2.2

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:*.gov.us, DNS:gov.us
            X509v3 Issuer Alternative Name: 
                DNS:allthethings.net, DNS:allthemthings.net, DNS:theca.net
            X509v3 Authority Key Identifier: 
                keyid:01:02:03:04
                serial:1C:BD:7D:87:57

            X509v3 Freshest CRL: 

                Full Name:
                  URI:http://crl.allthemthings.net/sfig2s1-17.crl

            X509v3 Policy Mappings: critical
                1.3.6.1.5.5.7.13.1:1.3.6.1.5.5.7.13.2, 2.23.140.1.2.2:1.3.6.1.5.5.7.13.3
            X509v3 Policy Constraints: critical
                0......
    Signature Algorithm: sha256WithRSAEncryption
         90:12:23:0d:83:d4:8e:6b:b4:d6:65:03:fb:65:47:62:b7:9f:
         e4:6a:75:23:21:ef:4d:ae:00:f3:ed:c8:2e:58:62:c6:22:6c:
         30:a9:ae:06:9a:a7:ea:75:15:fd:e1:c3:96:85:b4:ba:b7:3a:
         48:f0:e6:6a:9a:2d:39:16:eb:08:bc:8f:c9:93:31:f2:a3:d4:
         cc:63:ad:87:3f:bc:fa:c1:9a:f7:7f:b7:25:12:ab:38:17:35:
         13:92:47:da:95:31:71:89:d2:bc:4b:45:8d:24:29:6c:1a:a4:
         6b:d7:23:82:17:fd:3e:81:53:62:12:86:f3:44:50:2f:3a:0c:
         8f:42:36:25:e3:60:fc:3a:8e:c9:d9:84:3d:7a:e6:8f:bf:dc:
         bc:11:59:1d:29:02:76:87:10:64:bf:09:e1:a0:93:53:28:32:
         3c:e2:b5:7a:e9:8c:6c:be:20:94:0a:b3:a2:09:13:b5:78:26:
         78:c1:75:60:f8:76:16:56:5f:d0:f6:ec:76:2e:c8:a2:60:7c:
         b4:5e:e2:22:ae:b8:d3:05:be:98:c9:93:aa:9d:79:4b:6d:7e:
         ac:9b:05:83:2f:6d:16:3c:11:3b:b7:55:cd:83:17:6d:74:ba:
         42:da:fe:6e:9e:92:81:7d:a6:09:96:0d:de:00:57:7e:d3:66:
         a6:64:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
