Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 14 23:58:04 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:fd:ae:74:1f:cb:7a:93:bb:60:25:82:ed:
                    fe:ea:99:cd:10:b2:5d:2b:86:c2:9b:88:ff:b3:c7:
                    59:17:24:16:bd:72:01:38:a1:00:a7:27:dd:9a:8c:
                    05:7c:54:fa:96:d8:4c:13:64:f3:fd:6e:f9:b2:d6:
                    9c:25:cb:66:0e:79:f8:9e:26:d6:bc:b6:0b:49:aa:
                    f2:f1:87:bf:9b:85:6e:30:50:f1:02:47:02:6f:55:
                    49:b0:42:59:44:fd:cd:94:1a:33:9a:ce:cf:b4:37:
                    b0:64:b6:a3:83:96:18:56:84:d8:32:69:65:ac:6b:
                    46:fd:8d:b8:ed:6e:64:c8:1f:90:52:86:39:fc:57:
                    b3:73:1f:8c:0b:16:16:fe:41:e8:58:d3:09:57:b5:
                    5d:84:f5:3d:c9:88:d4:8d:4e:aa:41:03:a3:2e:15:
                    33:71:58:7d:a1:7a:b3:f9:a3:64:bf:00:e1:62:7b:
                    36:cc:4c:f1:0f:23:7a:a3:57:9f:08:6a:80:59:68:
                    6a:2e:0f:f4:9f:67:de:1a:32:24:1b:ac:61:90:ae:
                    ef:ad:8a:eb:a9:3a:92:a6:51:5b:fe:2a:ba:d9:18:
                    c7:37:20:64:5b:ed:5a:1e:84:61:a0:1a:65:5f:7e:
                    40:0a:e7:99:fa:c0:5c:34:6a:f1:ca:fb:0a:a9:b0:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:29:09:10:9a:d1:99:c1:25:8e:49:7d:d3:a9:e6:3e:3a:
         2e:44:44:54:c0:74:f1:aa:3d:f8:63:7d:6c:65:16:3e:7e:52:
         48:a6:33:d6:1b:12:17:07:bb:b9:bf:fe:fc:55:e8:cf:f5:2e:
         f9:07:b4:25:21:d3:9c:c2:8d:e9:8e:24:b5:e6:c1:ed:3d:f5:
         61:ed:92:ac:4b:7f:6f:b6:b7:bf:5c:82:18:8a:63:7a:3d:5e:
         07:f2:e8:c5:01:07:20:56:01:fb:dd:0f:36:79:66:45:51:38:
         2a:c3:5f:81:d0:4f:9d:aa:da:b9:80:39:11:e6:ce:00:e9:ec:
         b8:43:33:43:53:18:0f:9a:40:46:3c:5d:39:d9:28:6d:6a:94:
         74:36:89:24:48:de:2d:7e:3f:29:4c:be:f3:a6:33:9b:58:d2:
         34:b5:f4:eb:7a:02:cf:57:a4:c1:98:f1:5c:1d:e7:c9:18:a8:
         e3:3b:95:47:24:91:cb:40:9a:4d:09:84:b5:d0:18:45:2c:3c:
         64:16:78:45:96:67:6b:43:4e:cb:eb:78:ff:93:fc:8d:1e:cc:
         d7:86:1b:17:cb:79:b9:21:9f:cf:b0:0d:90:01:50:17:42:96:
         cf:a0:22:ce:f0:42:dd:79:24:ee:20:c6:d5:61:76:b1:50:6c:
         75:60:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
