Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 15 02:55:53 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:87:3c:4f:1a:64:80:96:b0:58:eb:cd:d6:
                    68:b0:75:90:72:a2:45:40:6d:87:ae:a9:4d:1c:e9:
                    e5:99:78:a1:cc:40:ad:9d:78:0a:22:ef:91:2d:ec:
                    63:71:74:34:9c:52:27:bf:b5:99:b3:78:9e:48:f3:
                    9a:77:3e:a3:e4:7b:f0:e7:02:31:90:49:ae:6a:28:
                    e8:76:4d:4f:55:92:76:79:11:e7:23:0c:2a:41:e6:
                    76:66:26:13:a9:67:a4:9a:92:78:e0:2f:64:5d:03:
                    43:41:78:99:ed:18:df:a4:50:00:15:c7:ea:a5:18:
                    f6:d2:4e:45:4a:a3:a9:84:19:5d:78:e6:40:72:1a:
                    47:18:23:0d:65:86:ab:2a:79:6f:ca:b4:72:15:44:
                    ea:28:99:b4:d0:49:43:83:7e:24:c5:1e:60:e6:3d:
                    15:a8:33:99:ed:0a:9c:f7:66:30:ed:65:b2:3e:9f:
                    42:4f:84:20:d9:50:f1:24:ea:1e:c5:c6:98:8f:37:
                    56:86:07:39:c2:09:12:94:8c:77:c4:a9:7e:45:32:
                    20:5a:9f:91:80:ed:cc:80:e8:79:67:f4:db:4f:6a:
                    a4:78:29:d8:a9:a0:5b:2e:0d:c3:df:e4:2c:95:ca:
                    fe:7d:27:ef:f6:ca:e7:7b:37:4a:29:43:93:0b:88:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:www.*.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:87:c2:36:c5:79:0a:25:58:81:e5:7e:65:5f:6f:d3:9f:
         1c:b0:fa:94:67:6c:29:ed:2b:ad:fe:5f:95:50:82:b3:19:10:
         2a:a2:8f:41:1a:ca:5b:91:7b:42:09:8d:67:7d:b9:b5:a3:58:
         db:a7:a5:b4:bd:68:73:4d:4e:09:d9:df:78:c7:c7:e5:c1:fc:
         2d:9a:07:17:e2:8f:7d:37:29:3b:ca:07:7d:7c:3c:c7:6b:ba:
         3b:78:fa:39:8c:79:c2:28:fe:46:62:cb:6f:59:ce:5e:03:4c:
         6f:9f:25:60:7f:c9:51:17:e6:e7:f3:81:c4:99:0f:83:3c:15:
         92:18:91:e3:58:03:90:5a:fe:b1:95:de:f8:05:4e:f1:6c:21:
         ae:1c:84:29:16:0f:38:be:25:bf:bd:e4:c2:14:43:b7:66:88:
         34:77:47:60:18:f5:f8:83:4a:b5:11:e4:17:e3:0f:98:91:59:
         76:a8:bb:c2:16:dc:9f:c0:8f:cd:80:ec:bc:02:d9:5c:08:cd:
         f6:8a:05:5a:19:6f:a3:b4:77:6d:ba:13:62:15:f5:15:2f:19:
         5c:11:10:4c:d7:fb:b5:ad:c9:a4:92:95:dc:57:b7:35:80:50:
         a3:d1:cd:51:19:99:63:57:df:93:20:39:47:f1:7e:e4:1b:de:
         19:b2:51:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
