Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US/street=1 North Pole, Earth
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:ed:aa:47:6b:56:75:aa:77:cd:68:dc:56:
                    f9:e0:0c:8d:a9:03:6a:a0:80:c2:2a:1a:95:c6:8b:
                    95:62:89:b8:30:62:70:16:1c:80:1a:6a:2d:1d:b1:
                    37:a7:de:9e:d1:e4:0b:81:47:4b:d3:a4:f1:f7:d1:
                    24:d7:ae:28:7e:2f:21:a6:ba:cb:e9:56:df:b5:39:
                    67:4f:c8:9a:f9:bc:fc:48:36:d9:40:db:ea:15:de:
                    90:79:8c:4a:5b:81:df:10:dd:c1:90:f1:d2:1d:b2:
                    00:13:c0:a1:e8:42:94:1d:ca:01:be:b1:00:71:64:
                    2c:7e:dc:11:7b:12:d8:88:1e:e7:e5:de:fc:7f:77:
                    34:cd:48:9e:68:6e:98:c5:ea:ef:71:a2:c3:c7:43:
                    27:78:12:2e:b6:51:fc:65:ba:78:b9:4e:c4:f7:1b:
                    67:ab:60:71:e0:54:2d:0f:aa:4b:81:41:82:2b:79:
                    04:8d:40:1e:e1:b8:4a:95:9f:02:a8:c9:f8:7f:35:
                    10:af:7c:3e:e1:ab:4e:f5:81:78:49:ed:39:f6:b7:
                    f1:4c:1f:da:63:aa:76:a9:a4:06:ee:39:55:0f:ad:
                    32:f6:49:62:c2:b2:cb:08:a8:64:e6:ac:b1:fc:cc:
                    4c:16:29:03:be:55:02:9f:7d:f3:18:11:d2:09:95:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         41:77:5b:31:f2:97:15:9c:8a:e8:8d:7c:11:43:b6:9c:9a:cc:
         55:e5:07:07:40:27:20:f0:e5:b6:cf:39:2c:0b:9c:60:a2:09:
         82:c5:51:0e:a8:29:02:6d:e0:e0:6c:e2:dc:73:78:97:18:9c:
         02:6d:8b:67:1c:70:e3:7f:0e:5c:ec:86:48:bf:02:be:74:16:
         27:99:f8:55:d3:dc:a2:de:ae:82:22:14:02:1c:c7:fc:d1:4f:
         91:c3:5a:06:42:eb:17:b5:e2:2d:c5:ea:16:c2:59:82:f5:cf:
         a9:1f:86:6d:6c:1b:b2:d2:67:5a:3e:fb:f2:43:1e:0b:66:bb:
         19:59:27:cd:e4:d5:e3:01:79:ca:17:5c:30:9e:58:ed:38:fd:
         61:e6:20:ce:76:25:fd:89:8f:ef:32:c5:4c:d8:0d:07:a1:58:
         98:fa:0a:64:bc:77:2a:03:4c:e1:cb:d0:12:a2:f6:d4:9b:94:
         bb:e1:91:64:52:b9:ae:da:37:b2:e2:76:c9:57:ce:63:e9:3f:
         a2:37:0a:c6:7b:ca:f6:a7:cd:a3:ac:d2:23:a5:0a:fa:cf:ec:
         0b:da:3d:60:5c:a4:57:c4:61:09:6c:6a:ed:e3:df:16:1d:65:
         66:64:c0:15:a1:13:55:82:f3:13:c4:05:dc:69:89:c4:9d:df:
         0d:7e:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
