Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 15 12:06:51 2036 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:23:b6:be:b6:0f:34:1f:bd:3c:1b:a0:2c:
                    20:63:93:31:bf:a0:94:07:38:ac:4b:26:cb:2c:f3:
                    ab:56:56:8a:0f:38:76:ef:31:e8:ba:db:85:c0:2e:
                    fa:67:0a:7e:5a:38:fc:ec:7c:c6:f6:6f:90:0e:63:
                    0a:84:95:7b:e3:df:b7:56:56:df:f2:f0:a7:a9:0b:
                    1e:4e:3b:0b:3a:b0:fa:7a:3f:73:0b:97:2a:ce:09:
                    61:d0:9a:fb:19:8e:4f:e3:d2:02:e2:39:c4:c7:ae:
                    ee:af:2e:48:6a:c5:09:66:ce:de:ed:5b:6a:91:ae:
                    c0:37:ef:b7:81:98:b6:e1:53:e9:46:fc:91:bb:7d:
                    74:a8:d0:36:5d:a2:bc:7a:ed:47:7e:7c:6e:c7:0d:
                    b8:ad:18:0b:c2:6a:73:d7:86:5d:f8:72:3b:94:60:
                    2a:ef:e2:b0:f3:d5:22:e9:f3:a0:51:22:9c:f5:fd:
                    c3:87:11:6f:0e:5d:ff:a0:ee:56:d9:3d:c4:f3:c8:
                    6e:7e:d2:64:91:2e:fd:49:9f:f6:84:9f:91:9f:9c:
                    b8:c1:55:1f:a5:c6:55:bc:5c:fe:fd:77:35:2f:01:
                    56:b1:35:a9:01:13:54:cc:76:2e:b1:67:44:54:5a:
                    32:e2:8a:a9:97:56:80:7c:33:52:13:7e:14:38:eb:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         45:46:a1:11:8e:cc:7b:08:ea:f7:0f:9d:72:73:57:19:c5:36:
         c4:b9:b6:71:4c:bd:fb:90:e9:36:4f:4f:8c:8e:3a:1f:a2:33:
         2e:d7:bf:1f:23:13:14:ce:3d:95:37:53:d8:99:44:a6:fa:dc:
         4b:12:39:2e:33:6e:e5:99:79:dc:b5:ca:b4:ed:dd:ea:09:02:
         2e:28:b7:72:00:d1:8d:19:0a:b9:a2:b7:26:6d:e4:38:10:ed:
         44:18:44:74:d2:a2:35:9a:8b:50:c4:2e:89:17:9f:05:00:0a:
         f9:2e:e1:eb:ae:77:c1:ad:f7:88:15:5d:3c:d3:01:8a:f6:70:
         76:75:80:80:bd:63:99:64:04:b3:a9:3b:0e:c2:dd:73:2a:71:
         3b:56:b8:05:93:52:aa:60:64:65:1a:84:60:ac:b9:38:8c:05:
         ff:cb:49:50:1b:14:7e:6d:86:09:0a:2e:da:a3:d9:65:ec:ef:
         ea:cf:f6:50:a3:ca:12:8f:ff:ef:ec:17:8b:a7:15:eb:37:5f:
         5b:95:42:16:ea:19:60:81:e4:90:99:35:32:2b:03:1a:91:8a:
         cb:f7:3a:5e:7e:c9:b6:cc:33:b0:10:31:0c:26:ca:b1:71:a2:
         e7:4f:8d:4c:a2:9c:fb:f4:f5:42:64:84:72:31:c2:35:47:24:
         15:dc:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
