Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 23 20:09:23 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:e0:32:fd:eb:b4:b3:9f:0c:e5:33:99:c6:13:7a:
                    4b:a4:2a:38:38:0d:eb:49:e7:b4:0e:86:49:7e:15:
                    b7:a9:e2:0a:b3:8c:f8:7a:ea:17:2e:8d:cf:f6:2d:
                    29:5a:de:b5:bf:7c:fe:28:7e:c1:1c:ef:e7:5c:0e:
                    61:69:76:d9:a7
                Exponent: 65537 (0x10001)
        Issuer Unique ID: 
            01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            X509v3 Certificate Policies: 
                0x0;..g.....010...+.......0.0!..+.......0.0
..0............!..i09..*...010...+.......0.0!..+.......0.0
..0............!..i
            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:

            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp

    Signature Algorithm: sha256WithRSAEncryption
         d8:3e:cd:2c:d5:cb:01:dc:0c:09:c7:aa:5b:72:b4:b0:9f:14:
         6b:d0:4d:2b:47:bb:65:d6:de:41:66:8e:f0:61:24:f4:f9:88:
         66:96:86:fc:2f:99:33:52:5c:18:28:6f:99:29:67:3a:a6:5a:
         af:96:75:df:5d:fa:c0:91:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
