Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Mother Nature, OU=Everything, O=Mother Nature/postalCode=postalcode, C=US, GN=givenname, SN=surname
        Validity
            Not Before: Aug 27 16:37:02 2017 GMT
            Not After : Nov  8 17:37:02 2017 GMT
        Subject: CN=gov.us, OU=Chaos, O=org/street=3210 Holly Mill Run, ST=province/postalCode=30062, GN=hello, SN=surname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:96:ec:45:c3:1a:19:46:d3:2f:45:50:23:
                    a0:31:be:91:6f:2a:23:83:95:09:04:b6:72:e2:c6:
                    ce:0d:ec:cf:1c:d1:a6:36:dd:60:64:ee:a3:4b:9c:
                    fb:49:7d:ca:f0:53:81:bd:a6:c6:7e:e5:ec:9b:fc:
                    f8:17:99:bf:c1:f5:b1:39:ed:3c:80:25:22:09:f4:
                    0e:70:4a:a0:1c:08:e0:6a:0e:f7:26:8f:92:81:1f:
                    fd:70:29:8a:9b:17:f2:37:db:e7:bf:9e:2d:6c:98:
                    d6:d8:e6:2f:80:60:1c:a5:a1:06:73:79:96:a7:b1:
                    51:56:d8:0e:1d:48:4d:58:da:68:8e:ec:c3:76:d5:
                    fa:cb:fe:32:d5:58:bc:7b:1e:18:7c:d5:b1:ed:d9:
                    23:dc:b3:b8:36:7d:6b:13:57:c5:9a:65:7e:9f:da:
                    f2:78:95:b6:01:0e:9e:fc:dc:cb:c6:bc:f9:e3:ab:
                    48:41:d9:05:86:d1:a8:fb:44:e1:a3:77:12:3f:fc:
                    88:b7:03:47:e8:84:d4:82:bc:f2:a0:72:cc:5e:ef:
                    f7:8a:50:6f:f5:bc:79:41:4e:53:20:29:46:98:0f:
                    0b:df:f5:8a:bb:e8:b0:20:12:3b:5e:51:2e:48:95:
                    62:00:9f:f8:fc:80:23:1f:c5:d9:dd:ad:9c:09:75:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:a.subtlety.co.uk
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         c2:16:33:73:40:02:80:f4:f7:f6:fa:72:d1:06:33:3c:89:3a:
         db:7f:a0:54:ac:65:55:6b:8e:60:4a:e6:3f:90:a9:45:2a:df:
         4c:e5:fb:c0:13:a2:af:c3:a3:cd:3f:36:75:4b:72:9b:0a:59:
         5a:d8:27:19:52:00:d7:e3:58:ca:a6:ad:a5:df:b4:be:08:ab:
         9c:73:4a:48:c1:ea:d7:53:f3:37:31:b1:35:ae:ec:f1:9b:88:
         ad:70:c1:9f:80:b7:97:88:a4:b5:93:b6:56:b6:4a:18:91:71:
         02:72:ac:68:6a:4c:fa:08:c3:56:27:31:6c:15:7d:a0:9e:2c:
         7f:1a:ed:7a:4e:99:e3:1c:3e:ac:fd:ee:a1:32:77:e7:2a:2a:
         7a:8c:2d:67:8e:0f:45:a8:46:31:4f:19:c0:ee:5d:ac:74:14:
         c3:83:fc:1d:dc:80:8e:cd:cd:b5:38:95:97:a7:66:b2:cd:21:
         1e:01:5f:52:5b:58:0b:fa:30:0b:44:90:92:17:d7:24:22:8e:
         cf:58:f0:74:fb:c9:75:92:a1:b1:ea:f3:0b:97:64:30:f8:cf:
         00:72:6c:4c:b9:bb:d0:14:d2:a0:2e:e5:d0:6b:ba:11:b0:7a:
         a4:3b:a0:9b:b3:71:4a:78:22:a7:88:b2:e1:98:30:78:35:1e:
         11:21:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
