Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Mother Nature, OU=Everything, O=Mother Nature/postalCode=postalcode, C=US, GN=givenname, SN=surname
        Validity
            Not Before: Aug 27 14:58:15 2017 GMT
            Not After : Nov  8 15:58:15 2017 GMT
        Subject: CN=gov.us, OU=Chaos, O=org/street=3210 Holly Mill Run, ST=province/postalCode=30062, GN=hello, SN=surname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:8e:f9:ae:7b:d5:71:3b:c0:cd:93:e7:ae:
                    18:76:6d:2d:30:50:77:c1:96:6e:bc:33:cc:7c:7a:
                    aa:cd:02:40:ec:7e:cb:8f:50:ac:3f:60:48:9e:e3:
                    88:30:d7:c3:9d:f4:b2:de:d5:fc:94:0f:33:69:46:
                    a3:cd:a4:b9:6b:d0:ac:58:70:e9:a2:0e:83:7a:c1:
                    5a:08:d2:b3:0e:87:34:5c:98:05:11:65:52:eb:2c:
                    65:10:59:48:af:87:61:3c:89:e5:7e:e3:7f:1f:c5:
                    ab:5a:ef:d7:56:a4:af:3a:99:f1:99:0b:06:2c:e2:
                    0c:7c:4f:cb:9d:2c:dc:83:02:32:ed:4c:60:ae:35:
                    de:da:71:db:fd:5f:45:8d:f3:81:9f:79:36:89:52:
                    6e:a6:63:63:f2:9b:6f:3a:33:75:ea:f4:14:a8:e2:
                    0d:04:34:50:f2:ae:98:a6:48:6d:ec:dc:b5:df:32:
                    7c:b8:22:97:39:37:52:87:97:e8:c6:38:6e:5a:9c:
                    21:47:b7:db:17:63:15:ee:ef:1a:7c:e4:e0:88:2c:
                    31:0e:02:39:da:0b:b1:06:37:b3:75:53:49:6e:5e:
                    d9:cd:ff:51:be:24:9d:02:4a:9e:32:f8:49:5e:ca:
                    66:b8:1b:27:93:9b:1e:8c:5c:64:7f:f6:c9:2b:32:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:subtlety.co.uk
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         99:48:d9:b1:3b:f0:66:66:54:a4:24:da:63:a9:ee:5a:d3:0d:
         c5:7c:6d:9e:c8:1c:df:85:f0:86:04:ef:bc:e5:bf:f6:37:e3:
         b9:27:f9:d4:18:06:cf:1a:af:a6:ac:57:f3:16:69:c0:01:a0:
         3c:99:aa:cd:b4:f0:00:79:84:5f:4b:7d:6b:2c:f0:16:ef:e7:
         d6:ab:35:03:c5:ab:a5:54:a1:ac:90:68:14:2a:a1:1b:f2:16:
         ad:4f:7a:0c:bc:32:1b:29:30:a2:32:bd:e2:36:01:93:63:5f:
         ef:c7:75:e9:93:be:64:b5:44:d2:b8:95:a7:ca:02:6a:db:24:
         df:70:9d:58:fe:2a:d8:fd:52:88:de:29:4b:d1:55:e7:0a:c1:
         1a:e7:0a:79:fe:13:fc:64:11:07:ce:ba:ad:43:8d:a4:1a:54:
         d5:f2:2d:27:d0:f1:e2:8b:2b:61:d0:de:20:e3:1a:2c:33:ee:
         77:ed:ae:9b:b7:49:b2:81:32:83:ad:dc:08:73:4e:e3:23:ce:
         fd:4c:45:2c:3d:17:31:19:3f:5a:8d:e5:4b:66:1b:43:0a:ae:
         82:e7:ca:ac:02:7c:c1:a4:ee:0b:60:b1:dc:f6:0d:f5:a6:31:
         65:da:73:2f:61:eb:d2:93:81:f7:f5:ba:5f:5c:72:d4:6b:40:
         d2:99:77:62
-----BEGIN CERTIFICATE-----
MIIEfzCCA2mgAwIBAgIBATALBgkqhkiG9w0BAQswgY8xFjAUBgNVBAMTDU1vdGhl
ciBOYXR1cmUxEzARBgNVBAsTCkV2ZXJ5dGhpbmcxFjAUBgNVBAoTDU1vdGhlciBO
YXR1cmUxEzARBgNVBBETCnBvc3RhbGNvZGUxCzAJBgNVBAYTAlVTMRIwEAYDVQQq
EwlnaXZlbm5hbWUxEDAOBgNVBAQTB3N1cm5hbWUxADAeFw0xNzA4MjcxNDU4MTVa
Fw0xNzExMDgxNTU4MTVaMIGUMQ8wDQYDVQQDEwZnb3YudXMxDjAMBgNVBAsTBUNo
YW9zMQwwCgYDVQQKEwNvcmcxHDAaBgNVBAkTEzMyMTAgSG9sbHkgTWlsbCBSdW4x
ETAPBgNVBAgTCHByb3ZpbmNlMQ4wDAYDVQQREwUzMDA2MjEOMAwGA1UEKhMFaGVs
bG8xEDAOBgNVBAQTB3N1cm5hbWUxADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALa+jvmue9VxO8DNk+euGHZtLTBQd8GWbrwzzHx6qs0CQOx+y49QrD9g
SJ7jiDDXw530st7V/JQPM2lGo82kuWvQrFhw6aIOg3rBWgjSsw6HNFyYBRFlUuss
ZRBZSK+HYTyJ5X7jfx/Fq1rv11akrzqZ8ZkLBiziDHxPy50s3IMCMu1MYK413tpx
2/1fRY3zgZ95NolSbqZjY/Kbbzozder0FKjiDQQ0UPKumKZIbezctd8yfLgilzk3
UoeX6MY4blqcIUe32xdjFe7vGnzk4IgsMQ4COdoLsQY3s3VTSW5e2c3/Ub4knQJK
njL4SV7KZrgbJ5ObHoxcZH/2ySsyi2UCAwEAAaOB4jCB3zAOBgNVHQ8BAf8EBAMC
AKAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAw
DgYDVR0jBAcwBYADAQIDMGIGCCsGAQUFBwEBBFYwVDAhBggrBgEFBQcwAYYVaHR0
cDovL3RoZWNhLm5ldC9vY3NwMC8GCCsGAQUFBzAChiNodHRwOi8vdGhlY2EubmV0
L3RvdGFsbHl0aGVjZXJ0LmNydDAZBgNVHREEEjAQgg5zdWJ0bGV0eS5jby51azAR
BgNVHSAECjAIMAYGBFUdIAAwCwYJKoZIhvcNAQELA4IBAQCZSNmxO/BmZlSkJNpj
qe5a0w3FfG2eyBzfhfCGBO+85b/2N+O5J/nUGAbPGq+mrFfzFmnAAaA8marNtPAA
eYRfS31rLPAW7+fWqzUDxaulVKGskGgUKqEb8hatT3oMvDIbKTCiMr3iNgGTY1/v
x3Xpk75ktUTSuJWnygJq2yTfcJ1Y/irY/VKI3ilL0VXnCsEa5wp5/hP8ZBEHzrqt
Q42kGlTV8i0n0PHiiyth0N4g4xosM+537a6bt0mygTKDrdwIc07jI879TEUsPRcx
GT9ajeVLZhtDCq6C58qsAnzBpO4LYLHc9g31pjFl2nMvYevSk4H39bpfXHLUa0DS
mXdi
-----END CERTIFICATE-----
