Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  6 04:24:40 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:fc:69:fb:1c:ea:2a:80:d7:4c:42:43:b5:
                    b7:b4:26:e3:3d:42:08:0d:3c:1c:a0:9f:8a:5b:9d:
                    99:93:3b:68:c5:d2:25:e6:1e:48:20:57:7b:3e:f7:
                    4c:a9:01:3e:7a:75:15:13:e1:08:19:2c:7f:d1:84:
                    31:66:42:f0:c8:5c:32:7f:20:e2:e6:42:d7:b2:f9:
                    8c:f2:9c:d6:26:1e:be:1e:0d:79:1c:49:50:10:1c:
                    57:49:1b:15:46:58:eb:31:54:d1:90:4f:63:a6:52:
                    e5:f0:46:41:a5:47:a0:cd:63:6e:7b:4e:43:6c:d5:
                    d4:28:69:98:56:66:81:b6:59:64:40:63:9c:a2:92:
                    7e:5b:6d:b3:38:60:6b:84:74:0c:59:e4:74:e8:03:
                    e8:5d:6a:8c:e3:6f:5f:c2:97:f2:0b:b1:b7:3f:81:
                    25:ab:8f:f2:bd:d1:c5:cf:cd:d0:12:33:b7:67:63:
                    ae:04:b3:9f:6d:84:77:93:e9:bd:3e:c7:0b:70:78:
                    fd:4e:9c:18:5c:47:6b:61:33:12:a9:4d:27:f5:2c:
                    d4:52:ee:08:2e:0b:48:01:dc:b6:24:29:61:c7:20:
                    53:3d:57:ec:c9:0a:13:7e:27:e5:3f:78:db:42:30:
                    48:de:a8:77:a2:ec:28:50:87:97:30:81:d8:21:dd:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
            X509v3 Issuer Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         c8:68:0a:e4:ae:19:85:6d:0f:90:f6:95:85:ff:1c:f7:0f:ec:
         16:de:00:fb:6d:77:ee:d6:30:e0:88:35:27:78:d3:d5:50:cf:
         cc:f3:0c:3b:71:5e:80:c9:3f:7d:0b:c4:92:7f:39:78:a0:4a:
         e7:7d:53:ee:3e:75:5b:5a:a9:2d:24:d7:64:0a:d3:25:2a:b2:
         b3:75:d8:0a:0a:28:50:fb:79:8d:85:6a:ad:60:dd:57:5f:4c:
         6e:2d:8a:03:70:fa:98:69:48:95:ae:cf:72:27:92:10:42:07:
         ac:b5:81:eb:30:ce:2b:73:96:75:ff:e7:76:81:79:b6:d4:c6:
         c1:80:73:36:e3:50:51:d3:12:87:56:8f:ce:56:6e:90:aa:e4:
         55:4d:d4:8f:4d:b8:86:49:68:67:ab:de:1b:b3:55:78:92:bf:
         48:f7:b9:93:84:20:de:13:ea:ba:8f:8e:f8:34:40:73:b8:7f:
         18:00:7d:30:0e:ba:9c:4c:98:34:34:84:9a:79:88:e2:79:b5:
         92:75:64:29:07:d2:4e:8e:3e:34:26:7d:ea:eb:09:67:ea:76:
         8c:d4:24:28:d5:d3:80:78:a7:5d:e9:68:ed:c9:19:3c:3a:c7:
         b1:e0:fc:e8:34:b9:ce:05:03:cc:28:4a:08:52:2b:b5:db:54:
         06:83:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
