Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 19:15:54 2036 GMT
        Subject: C = US, OU = Chaos, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:2a:ff:41:58:31:bc:df:ee:7f:58:2c:69:
                    c9:6b:8c:b6:af:80:62:5f:5a:bb:9d:52:80:30:80:
                    d1:e0:81:91:cc:27:b2:c8:bd:be:78:6e:fb:eb:fb:
                    22:3b:47:c6:2c:f5:77:37:9f:00:d2:93:35:12:3e:
                    05:30:0a:1e:6b:50:88:58:64:fb:b9:8e:a0:5e:d2:
                    60:9f:54:9b:39:4f:24:e9:27:f7:4b:70:41:e0:b5:
                    d6:10:87:f4:70:7a:9a:d7:77:c9:fa:eb:5b:48:32:
                    ac:8c:9c:9a:0f:08:2d:3e:ed:d5:70:a7:05:0d:c2:
                    b0:26:7a:fb:2f:b7:b2:52:ef:47:b1:29:79:ca:1d:
                    75:9b:87:9f:16:2b:a7:8c:0a:2e:14:ab:69:b6:00:
                    9f:b2:52:86:45:d0:e9:f9:57:fb:a1:c6:e3:1b:d6:
                    e4:41:05:27:52:a8:29:6f:c4:12:99:af:52:81:5d:
                    17:55:ab:3a:7d:1e:78:c4:ee:bd:c7:2e:aa:73:4e:
                    42:9f:1a:bf:0f:90:19:2a:18:a9:5f:9d:3b:20:be:
                    45:76:1d:dc:78:aa:4b:2c:e3:6c:ed:32:1a:8c:0c:
                    25:2e:ad:c7:00:8d:87:ed:d0:a7:6b:f3:1f:6a:d0:
                    f6:d8:77:70:74:51:63:6d:85:58:43:6f:f1:ba:91:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         17:31:a5:7f:d4:d0:48:46:3a:24:ab:01:4e:7e:99:6d:1d:46:
         09:21:5c:ac:72:ca:2f:33:a1:fb:74:9f:0a:1e:8a:83:57:46:
         60:3d:43:35:0f:7f:bc:14:23:20:e3:df:7d:7e:3b:e2:b8:65:
         b4:57:06:dc:6a:81:aa:2e:95:50:0a:a1:31:6f:73:1e:7d:65:
         43:93:78:0d:46:ac:56:c6:07:e7:af:4b:55:c6:a3:72:f8:8f:
         77:41:71:89:00:82:14:e1:ad:46:e0:9a:bb:71:a1:a1:e7:0f:
         aa:0e:65:dc:13:49:7a:d3:71:bc:2e:db:95:39:b6:98:ed:a7:
         2f:36:3f:80:73:7f:0d:c9:e0:e3:4e:7b:d9:77:2f:37:ba:19:
         eb:74:f1:b5:91:f8:c5:6e:bc:74:52:23:a2:77:bb:d8:39:87:
         46:1c:1c:01:5e:e6:a6:73:c1:1d:d9:1e:e3:da:6d:05:37:b7:
         30:56:1a:07:41:22:1d:95:6f:13:4c:bd:1d:57:d8:29:2c:ac:
         1e:80:bf:0d:c7:2b:a1:ef:78:6c:d8:2d:af:ca:f8:44:73:ea:
         c5:7b:f4:1b:37:d2:99:60:a3:ea:9e:77:e3:d5:f3:c7:5d:93:
         bc:44:e9:6a:fc:0f:a8:8b:c9:62:65:dd:61:b4:5d:5a:fd:f7:
         73:dc:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
