Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 15 12:03:38 2036 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:72:eb:d8:05:5b:21:b4:ae:43:66:39:a2:1a:
                    14:b0:66:6f:01:50:5e:45:4d:b8:a8:ce:80:b2:59:
                    7a:dc:28:38:44:f1:b7:e6:20:b2:c6:d8:0e:fe:3d:
                    c7:77:e3:a8:9b:8f:be:6a:d3:4e:83:9a:7a:89:59:
                    43:3f:d8:b2:02:f7:88:c6:25:09:f6:c9:53:ad:ad:
                    a5:6c:80:d2:c9:0a:78:42:2e:bb:4c:1d:2c:0f:e3:
                    89:71:42:cf:44:1f:4b:64:be:8f:2d:a5:0c:59:89:
                    c9:58:ac:52:ec:d1:08:e6:7c:d7:24:4f:ad:3d:46:
                    9f:e4:e6:96:0e:79:64:8f:2e:6d:92:cf:3b:ad:b4:
                    04:dd:de:16:4e:33:47:38:6f:a5:70:e4:0e:d1:e3:
                    4b:dc:14:59:81:08:68:c1:45:1b:0d:ef:4e:79:e6:
                    18:5b:1e:d5:76:9d:b3:50:35:c7:b6:c9:a4:c3:b1:
                    f3:59:66:55:69:ce:31:3e:1f:f7:52:85:f5:57:a4:
                    0d:d8:62:32:ee:21:1b:e7:4b:ff:36:9c:4d:7a:95:
                    dc:f6:0a:36:dc:de:46:78:10:6b:1f:03:4a:85:60:
                    e2:3a:ea:c9:db:71:5e:59:ba:ba:3f:83:0f:13:a2:
                    3e:25:1f:10:c4:39:36:40:24:5c:13:da:ed:70:87:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:*
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:97:62:06:94:a1:c6:df:66:72:c9:a1:b9:d1:28:f6:0a:
         fa:31:e5:92:be:a9:d0:eb:23:13:c8:77:0f:79:cb:92:aa:a7:
         d6:3d:96:71:b4:f3:ed:9b:12:96:57:af:c4:0b:58:05:cb:35:
         1b:b0:3f:74:c4:fe:89:2f:45:c4:2f:3c:7a:fb:54:9e:ba:8e:
         c3:67:6f:67:78:f3:fa:0c:93:f2:8c:ce:1a:17:97:5c:69:21:
         c2:b0:c8:33:89:e6:58:7d:58:d9:a4:e2:27:86:a1:0a:6a:7a:
         97:67:07:b0:3d:bb:25:8f:3f:69:60:01:fb:53:a3:d0:0d:62:
         63:d7:05:4a:22:d1:79:74:e0:4b:7b:0b:63:a5:2a:ba:71:cf:
         9d:fd:dd:02:01:9e:66:8e:e0:d0:b1:45:18:c3:5a:6b:de:37:
         24:7c:8b:38:79:37:b7:c2:f6:b7:a7:69:b3:1b:be:a5:c3:20:
         f7:ed:b9:63:ee:07:1b:b7:44:fc:8d:f9:41:ed:27:cf:84:b3:
         b2:fa:22:b3:f2:c5:e4:ed:d2:95:c4:f7:85:2e:49:20:ab:01:
         2f:ba:cf:94:a8:3f:42:7f:bd:d9:a8:07:fb:c2:b2:e1:ef:fa:
         1f:86:af:41:0c:90:cf:54:83:9b:8c:5f:7a:98:47:37:b5:4e:
         f3:22:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
