Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  6 04:36:38 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:e3:fe:63:1e:d1:95:08:ec:c8:75:8a:27:
                    d7:cd:dc:de:87:bd:26:4a:59:5e:4e:05:4c:b2:60:
                    49:9a:33:5c:79:59:57:6d:d6:aa:95:48:b1:7e:0a:
                    42:1f:ab:a5:af:40:5d:cf:d4:00:f1:58:f2:ab:56:
                    98:5f:e7:df:98:52:99:11:0e:5c:14:2b:20:c9:52:
                    0b:a3:8d:59:05:d9:c1:49:3c:9c:7e:ce:8b:af:fc:
                    8d:1c:9b:f9:5a:e1:a6:a0:f4:e7:48:1a:0e:41:74:
                    b6:bd:a2:27:75:cb:2c:23:56:9f:99:e4:2a:50:96:
                    b4:c7:d4:3c:62:97:72:52:e6:97:89:9a:47:16:c8:
                    63:61:01:5d:a8:e9:e1:3f:e0:b1:77:c9:c7:e7:c7:
                    96:e0:2a:40:f5:5c:81:6c:ac:f5:0a:82:d3:f1:88:
                    1a:87:4c:90:93:9a:71:97:09:13:6c:d5:be:ba:fd:
                    51:12:01:e1:ed:7c:02:3f:08:ca:3f:ab:46:5f:51:
                    16:04:ed:f5:d9:7b:46:71:12:a0:24:c0:98:d7:d4:
                    d7:01:f5:d0:b5:fe:f9:c5:59:b6:9e:69:51:4a:35:
                    31:1c:52:a8:26:90:90:f2:f3:8e:11:03:ff:b2:d8:
                    a8:6f:ae:4d:82:0a:ea:4e:6d:0a:7e:53:2c:cb:86:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
            X509v3 Issuer Alternative Name: 
                URI:https://www.google.com, DNS:*.gov.us, DNS:gov.us
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:d1:51:21:1b:5f:60:0d:3b:60:af:3d:b0:dd:e0:61:0c:
         87:af:1b:69:a5:c2:bb:a7:5f:a3:95:3a:f2:0a:f7:94:30:79:
         29:d3:88:37:9a:ac:fc:6a:2f:8b:ed:0b:92:e6:ca:7d:df:5b:
         f7:11:da:57:4a:90:47:ea:6c:d5:1b:88:64:2d:91:c3:61:81:
         11:1a:95:50:2c:4a:89:72:b2:87:c8:f6:dc:71:60:e3:6d:66:
         27:99:4d:fb:f5:60:1b:b6:75:ec:17:d9:e2:f2:85:95:25:4c:
         99:7a:77:9e:6d:45:af:53:85:e0:da:bb:cf:d6:1a:47:03:61:
         4b:a4:74:7a:ff:32:b5:5a:6e:5c:63:1f:11:f5:b2:3d:63:84:
         b9:d2:0b:93:d8:a7:81:39:9d:ae:51:1b:b5:5b:48:e7:cc:8b:
         58:a7:4e:64:5c:23:7e:20:4e:f2:fe:37:69:54:78:65:b8:f7:
         a1:73:80:c7:39:ef:f5:d3:15:12:61:2d:bf:d9:cf:82:9e:be:
         92:6e:e3:c5:aa:ea:96:c2:51:58:56:d3:d0:5d:b9:ec:3a:5b:
         45:7e:1c:47:50:56:f0:f2:ad:49:c1:26:13:e6:88:8e:25:18:
         fc:d0:97:95:63:85:f6:d8:b1:83:c6:ee:b4:16:f6:47:3c:a7:
         78:77:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
