Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US, SN=McVeryLongAndComplicatedSurnameThatIsEasyToPronounceNevertheless
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:f4:8d:b2:d4:c2:94:14:d3:c6:e8:50:75:
                    12:78:7d:de:a6:73:26:c7:c7:a4:31:44:f9:15:cd:
                    1a:10:6a:c8:42:d0:ca:7e:28:50:89:c1:68:b2:8c:
                    5c:26:01:b2:e4:87:e5:7c:76:a1:6e:ab:2c:dd:2c:
                    d4:94:a2:f7:fe:ed:b0:f8:57:09:a9:6a:cf:c2:85:
                    64:f6:35:79:d5:b5:66:28:4c:96:54:1f:e9:67:47:
                    64:a5:d5:d2:16:c3:d3:b9:18:2d:cf:7d:69:ac:5f:
                    1f:0a:7b:d6:90:8a:c7:07:f9:da:02:13:43:ba:2a:
                    14:83:4a:94:d0:dc:3d:df:91:31:ce:6a:6b:97:be:
                    e6:77:d2:bf:e7:8c:90:4c:a2:6a:3b:ce:9f:a2:e9:
                    a5:73:62:fb:cb:59:18:07:54:fe:13:00:bd:8f:26:
                    5d:d2:c4:9e:8b:f7:0d:fc:a5:cb:69:0b:f5:ca:3b:
                    8d:de:56:7e:82:b7:94:62:64:d1:59:95:99:1d:ae:
                    7e:7e:af:c2:22:0a:28:52:e7:20:58:48:60:78:12:
                    f9:c8:50:c7:31:7a:33:23:e6:18:e9:ce:ef:5d:f7:
                    21:25:74:21:69:21:2a:be:1a:36:46:e8:dd:2e:68:
                    31:93:54:c8:29:e5:53:40:71:a4:7c:bf:63:c1:79:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         5c:fd:db:3e:c5:30:48:35:5a:96:d9:59:af:c0:2f:3b:91:e7:
         ef:ff:f8:19:6b:bc:5e:ed:d0:11:26:12:40:04:79:2a:3e:1e:
         b1:18:3d:47:e1:ec:78:6a:7b:bb:27:c7:b7:25:af:61:b4:3f:
         9c:43:72:56:fb:49:ea:d6:87:93:75:44:85:93:c7:b2:1c:3b:
         89:10:7c:2d:7d:43:f7:f7:1d:80:96:27:02:ac:61:3c:6a:eb:
         b5:b8:bf:5a:87:08:f6:8f:e3:3f:47:0a:0e:07:2c:b4:dd:56:
         0b:c8:0d:87:47:9d:c1:cd:b7:40:b5:01:67:a3:1c:be:ee:3d:
         48:3d:39:8f:93:45:ca:27:ce:45:de:91:76:4c:c4:3a:7a:8e:
         42:01:15:97:ce:30:ca:82:c9:03:34:b3:da:13:82:88:2b:2b:
         ed:30:75:84:13:df:4b:65:72:f6:fe:ba:9f:fa:2c:c5:7f:58:
         ac:51:b4:6e:c1:9e:89:b1:1a:e5:f9:e1:21:83:9f:97:e0:ba:
         9d:d2:18:78:e2:39:72:c9:e4:f0:1c:99:24:88:14:c7:e0:74:
         b0:42:be:38:65:fc:e3:1c:d5:6d:54:5f:31:1d:6d:dd:66:2a:
         fb:a1:fe:c5:e3:0f:9c:7d:5b:19:37:8d:2a:f2:66:a8:43:de:
         44:7a:1b:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
