Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Sep  2 04:00:04 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:29:f4:29:1e:0b:fa:a2:31:71:1e:bd:65:
                    64:d0:f3:a0:a0:a9:4e:06:5c:6a:8d:eb:0d:5e:aa:
                    81:0c:cc:39:6f:5f:27:d4:7b:8c:14:53:02:6c:9e:
                    84:ff:01:0a:18:64:ce:4e:ff:c7:2b:84:b7:5c:63:
                    59:8a:59:51:a4:9c:b1:50:d6:18:be:d3:f3:f8:c5:
                    60:c3:64:c1:14:cb:3d:76:f1:ab:38:36:6b:fb:74:
                    6a:b3:a4:75:d7:43:b4:e4:c5:ad:fd:f1:72:5b:74:
                    eb:1b:09:4f:8d:79:7f:dd:7f:4d:78:b4:96:d9:fd:
                    de:9f:38:aa:1f:d6:1a:ef:f3:7a:1d:99:95:0d:f2:
                    13:82:cb:1e:06:e9:d3:9d:6d:e9:3e:44:0b:5c:95:
                    e1:65:62:04:0c:b0:35:0b:64:ef:0f:d2:0b:9b:4e:
                    2e:15:54:f7:24:86:9e:fd:07:d7:26:ff:2a:6c:96:
                    0f:99:d7:f3:e8:46:fb:38:17:a2:8b:8e:07:05:b6:
                    cb:3e:6c:db:f2:89:a0:ae:f0:e1:87:f5:4b:de:7e:
                    7b:9e:ce:29:95:0b:c8:5a:3b:01:4c:92:75:10:05:
                    be:07:47:c6:34:88:08:44:f9:7a:8c:be:bf:c0:94:
                    00:08:9f:7a:40:79:47:f5:24:a4:48:c5:21:f2:78:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                0 ...
..assigner....party..dns.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         85:32:c4:42:5f:7b:3d:24:30:38:58:06:6d:58:37:66:49:1f:
         39:37:b5:2c:65:bd:c9:d9:74:7b:55:3f:0f:a7:23:93:4b:4c:
         5f:a4:a1:5b:d9:e3:04:6c:3e:7a:83:b2:47:10:f3:d1:52:82:
         b0:37:c5:26:03:be:b8:fc:f1:88:2c:d1:36:19:aa:e1:fb:6d:
         18:c0:75:62:16:71:43:96:a5:4a:95:7f:f2:96:3a:99:31:6c:
         95:c1:d3:fa:bb:4a:a9:02:cb:ae:c2:3d:d0:1f:fa:79:56:9b:
         62:c1:6b:e1:30:dc:29:0d:25:4a:57:f2:f3:a0:1a:60:69:b2:
         af:fc:0e:27:55:80:74:b3:e9:79:4f:2f:ab:41:7b:04:8a:bb:
         43:57:88:50:72:a3:6c:71:32:d7:92:8e:4b:42:74:a1:e5:92:
         ff:a5:f8:a1:c8:37:6d:c7:fe:7c:dd:66:b5:f6:d2:05:31:9d:
         08:81:d4:93:58:1c:25:95:bc:0d:b4:d9:cf:83:fb:a2:fc:22:
         e9:55:54:f4:40:d2:5c:ea:15:e2:3b:66:e7:32:ed:df:6a:3d:
         f1:ca:60:a1:66:f4:5e:97:a5:f5:72:46:b4:a1:18:8c:38:18:
         97:7c:ec:6c:59:04:c4:de:95:5e:8b:d3:fe:fa:cf:8d:c3:86:
         ba:fc:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
