Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Aug 18 02:59:19 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (512 bit)
                Modulus:
                    00:be:ba:e4:bd:eb:0c:39:54:d9:fc:75:82:0f:d2:
                    2e:52:0f:5f:d3:0e:b1:ba:f4:44:4c:70:52:63:d4:
                    dd:3d:3c:df:f2:8d:94:94:1d:a2:eb:be:24:80:4e:
                    e5:a1:70:be:3b:db:d8:2f:e3:e5:5c:43:24:4e:5d:
                    46:18:03:82:ed
                Exponent: 65537 (0x10001)
        Issuer Unique ID:             01:02:03
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                01:02:03
            X509v3 Certificate Policies: 
                020...g.....0.0...+.......0.0...*...0.0...+.......0.
            X509v3 Name Constraints: 
                02..0
..........."0 ..C=US;A=ATT;P=Contoso;O=Example
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:
            X509v3 Subject Key Identifier: 
                04:03:02:01
            X509v3 Subject Alternative Name: 
                DNS:gov.us, DNS:ĀĻ
            X509v3 Inhibit Any Policy: 
                ..
            Subject Information Access: 
                ..
            Authority Information Access: critical
                OCSP - DNS:theca.net/ocsp
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b3:66:dd:dd:b3:73:6d:67:98:35:07:b3:0d:f5:78:fc:5b:61:
        6c:a8:10:32:38:98:0d:c1:19:36:bf:89:f6:93:ae:33:3c:5b:
        ff:86:ed:76:de:2e:75:a8:99:f0:8f:e3:52:da:3b:e0:f9:aa:
        5f:5f:17:a5:2d:74:38:a2:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
