Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 14 23:33:03 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:d3:fc:d7:a5:f4:a9:f8:84:1f:b7:52:3b:
                    54:97:ad:2c:07:10:4c:74:cf:f9:43:6d:5f:f6:52:
                    03:c5:4b:3e:70:01:ca:b3:0b:a2:2f:99:7f:19:fd:
                    4d:3f:a4:d0:0d:d0:11:d0:b8:b6:9c:0b:2d:dd:f6:
                    9b:2b:0e:e2:01:9d:8a:5a:89:f0:1a:9e:ca:ca:1e:
                    39:a8:34:00:99:43:d8:28:e1:cc:9c:c9:83:3f:a2:
                    5f:6c:47:82:23:06:e7:5f:34:d6:20:b1:32:3f:8c:
                    93:b4:af:1c:40:39:2d:bd:e6:04:47:bb:50:05:93:
                    a1:5f:db:f4:39:65:3a:b0:55:33:99:d1:c1:3c:51:
                    b1:44:87:74:d3:d7:1e:43:7a:76:bf:6e:3a:7c:1d:
                    f9:6e:31:d0:6d:6f:61:41:8b:cd:8b:ef:82:9d:9d:
                    9f:b9:fb:6b:d9:ca:28:be:c0:90:5a:4a:cf:fe:ee:
                    f2:83:50:82:b3:6d:c3:12:1f:72:29:97:c9:bc:5b:
                    23:f4:7f:0d:a1:20:b5:5e:dc:29:8c:6e:04:28:ba:
                    1c:57:48:82:4a:e6:e5:b4:ed:6b:23:79:1e:1d:bf:
                    f6:6f:b7:05:28:51:2e:dd:f5:dc:f4:68:66:a7:d4:
                    90:73:fe:38:0e:1c:f2:b5:46:e6:02:5f:81:31:3a:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:, DNS:*
            X509v3 Issuer Alternative Name: 
                URI:
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         cd:1a:b3:a1:cf:f0:45:a5:02:5c:16:18:e2:e7:b5:8a:ec:aa:
         e6:11:97:02:aa:0a:88:2d:ea:2d:6e:d1:ed:3f:18:fa:ba:7a:
         7e:3f:24:e0:78:e5:79:f0:e9:2e:e2:0e:21:4e:ca:02:82:6f:
         59:31:7e:23:f8:71:13:d5:5c:d8:27:07:be:a3:85:4e:72:24:
         25:67:28:25:d4:89:3f:2e:1f:d3:3f:8a:ca:a1:56:da:bd:b3:
         fb:ac:d4:26:91:6e:a3:db:82:62:c4:37:06:ca:34:37:e6:f9:
         be:b6:80:90:42:34:ab:98:ed:dd:0f:f1:f4:9d:e4:a2:15:ae:
         ce:28:f9:e7:5e:61:8f:15:73:05:89:f6:5d:01:e7:0c:d1:9f:
         6a:5f:01:6b:f6:60:db:d5:da:fe:bc:72:20:67:f8:85:c0:b2:
         e9:cc:ba:27:94:b0:b1:a3:52:4a:9c:ef:a6:08:8f:24:c3:c2:
         ce:83:4c:77:48:07:3f:ad:17:e7:6f:ac:66:77:cc:3d:d1:76:
         59:22:43:20:16:36:57:21:ba:6e:cd:cf:95:02:f1:f7:a4:7b:
         56:35:32:7b:07:f8:e7:9c:5f:ed:a8:81:e5:d7:ce:8e:6c:83:
         5e:72:ba:cf:a8:37:ce:a8:7e:68:d6:37:03:6e:06:13:8a:1d:
         9e:01:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
