Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  6 01:50:51 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:30:eb:4c:41:37:8f:93:4a:cc:8d:73:ac:
                    5a:57:52:ac:6c:3c:ed:1c:ec:05:a2:c6:a1:4b:2e:
                    e0:e7:20:ea:c8:9b:de:6a:20:67:33:17:06:75:9b:
                    78:6c:74:48:6e:5e:19:f0:b3:a2:20:ec:ad:57:1f:
                    94:19:d4:b8:7e:65:01:4d:26:9d:44:47:80:71:a6:
                    9b:0e:d3:23:0f:7e:c6:73:f0:99:a7:54:07:5d:e5:
                    76:4f:cb:38:f9:8b:1b:6e:ba:0d:f8:61:c0:6a:92:
                    89:bf:76:c6:fd:11:a9:eb:fb:ab:92:af:1a:97:49:
                    1c:98:c6:ed:d6:82:01:eb:4b:bf:16:1e:6f:5f:48:
                    51:6c:95:98:4e:c5:a4:75:79:5e:7c:72:c8:24:a4:
                    3b:26:cc:19:df:30:7d:20:3d:2d:e2:07:49:e0:eb:
                    6a:a6:09:1a:c5:f8:7e:5b:0c:75:06:27:2e:53:3c:
                    1a:93:11:17:3e:10:6a:fa:2b:d6:d6:fc:18:4f:a3:
                    6e:f7:7c:3c:e2:a6:16:df:3e:d8:75:2c:82:87:a7:
                    c6:a7:ae:99:5a:59:07:61:a7:4e:05:04:99:f2:0f:
                    ce:38:2f:ef:f9:d8:0c:08:67:30:60:c1:6a:bc:71:
                    e7:1b:55:d8:43:0d:fc:2d:69:16:20:2b:2f:56:74:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
            X509v3 Issuer Alternative Name: 
                email:<example@test.com>
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         75:78:f0:4e:fe:67:ea:c6:a7:1d:ce:f7:65:e1:7a:3e:57:2c:
         2f:8b:bc:57:bd:c2:87:a0:05:47:3c:6a:d2:e8:ff:11:62:bd:
         95:fe:d4:5d:b3:f5:31:f3:3f:94:a3:ed:84:3d:60:dd:03:32:
         2a:01:de:05:eb:25:a8:b7:1c:58:ea:ba:b0:ec:4a:4e:11:a2:
         66:9d:18:96:10:c9:0e:4f:07:31:28:fa:ad:fe:81:72:ba:bf:
         ea:dc:3b:9b:79:f6:b5:ce:aa:33:00:b7:d4:23:e4:ac:b8:33:
         9f:82:e8:10:3b:dd:91:e6:ce:48:dd:d2:8f:e9:cd:3f:6b:d1:
         10:42:1e:90:8f:1c:83:28:70:bc:0d:fa:ee:54:70:ae:32:c9:
         b8:13:3e:01:21:6e:d2:91:db:6a:4b:c3:72:45:50:e4:72:2a:
         7c:0b:83:30:eb:5e:4b:7d:2b:b5:49:ab:12:a6:8b:39:c0:cc:
         ca:a8:d6:db:de:d0:fd:9d:f4:c8:ed:43:c3:46:35:e5:de:8f:
         4f:8d:3d:68:df:f0:4e:08:3e:6e:a7:c8:eb:da:54:48:a3:d8:
         d5:db:eb:73:8c:d2:b1:fc:b4:e7:d8:82:1a:a1:ed:91:b2:9d:
         e8:d8:e6:40:a2:dd:da:75:3a:32:bc:e7:9c:15:21:dc:cf:e2:
         76:56:75:8a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTqgAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRgw
FgYDVQQDEw9OYW1lIGNvbnN0cmFpbnQxADAiGA8yMDU1MTIwMTA2MDcwOFoYDzIw
NTYxMDA2MDE1MDUxWjCBmzELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0V4dHJlbWUg
RGlzY29yZDEOMAwGA1UECxMFQ2hhb3MxFDASBgNVBAcTC1RhbGxhaGFzc2VlMQsw
CQYDVQQIEwJGTDEcMBoGA1UECRMTMzIxMCBIb2xseSBNaWxsIFJ1bjEOMAwGA1UE
ERMFMzAwNjIxDzANBgNVBAMTBmdvdi51czEAMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuqYw60xBN4+TSsyNc6xaV1KsbDztHOwFosahSy7g5yDqyJve
aiBnMxcGdZt4bHRIbl4Z8LOiIOytVx+UGdS4fmUBTSadREeAcaabDtMjD37Gc/CZ
p1QHXeV2T8s4+YsbbroN+GHAapKJv3bG/RGp6/urkq8al0kcmMbt1oIB60u/Fh5v
X0hRbJWYTsWkdXlefHLIJKQ7JswZ3zB9ID0t4gdJ4Otqpgkaxfh+Wwx1BicuUzwa
kxEXPhBq+ivW1vwYT6Nu93w84qYW3z7YdSyCh6fGp66ZWlkHYadOBQSZ8g/OOC/v
+dgMCGcwYMFqvHHnG1XYQw38LWkWICsvVnT0/QIDAQABo4IC3TCCAtkwDgYDVR0P
AQH/BAQDAgCkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAPBgNVHRMB
Af8EBTADAQH/MA4GA1UdIwQHMAWAAwECAzBiBggrBgEFBQcBAQRWMFQwIQYIKwYB
BQUHMAGGFWh0dHA6Ly90aGVjYS5uZXQvb2NzcDAvBggrBgEFBQcwAoYjaHR0cDov
L3RoZWNhLm5ldC90b3RhbGx5dGhlY2VydC5jcnQwOAYDVR0RBDEwL4YgaXJyZWxl
dmFudGluZm8vL3VzZXJAMTkyLjE2OC4xLjGCC3d3dy5kbnMuY29tMB0GA1UdEgQW
MBSBEjxleGFtcGxlQHRlc3QuY29tPjAbBgNVHSAEFDASMAgGBmeBDAECAjAGBgQq
AwQFMIIBqwYDVR0eBIIBojCCAZ6ggc4wE4ERZ29vZF9lbWFpbEBnZy5jb20wCYEH
THVsTWFpbDAPgg1wZXJtaXR0ZWQuY29tMIGOpIGLMIGIMQswCQYDVQQGEwJVUzEN
MAsGA1UEChMEVUlVQzEMMAoGA1UECxMDRUNFMRIwEAYDVQQHEwlDaGFtcGFpZ24x
CzAJBgNVBAgTAklMMRYwFAYDVQQJEw02MDEgV3JpZ2h0IFN0MQ4wDAYDVQQREwU2
MTgyMDERMA8GA1UEAxMIdWl1Yy5uZXQxADAKhwhKfeBI//8AAKGByjASgRBiYWRf
ZW1haWxAZ2cuY29tMAmBB0x1bE1haWwwDIIKYmFubmVkLmNvbTCBjqSBizCBiDEL
MAkGA1UEBhMCVVMxDjAMBgNVBAoTBVVtaWNoMQswCQYDVQQLEwJDUzESMBAGA1UE
BxMJQW5uIEFyYm9yMQswCQYDVQQIEwJNSTEVMBMGA1UECRMMNTAwIFN0YXRlIFN0
MQ4wDAYDVQQREwU0ODEwOTESMBAGA1UEAxMJdW1pY2gubmV0MQAwCocIwKgBAf//
AAAwCwYJKoZIhvcNAQELA4IBAQB1ePBO/mfqxqcdzvdl4Xo+Vywvi7xXvcKHoAVH
PGrS6P8RYr2V/tRds/Ux8z+Uo+2EPWDdAzIqAd4F6yWotxxY6rqw7EpOEaJmnRiW
EMkOTwcxKPqt/oFyur/q3Dubefa1zqozALfUI+SsuDOfgugQO92R5s5I3dKP6c0/
a9EQQh6QjxyDKHC8DfruVHCuMsm4Ez4BIW7SkdtqS8NyRVDkcip8C4Mw615LfSu1
SasSpos5wMzKqNbb3tD9nfTI7UPDRjXl3o9PjT1o3/BOCD5up8jr2lRIo9jV2+tz
jNKx/LTn2IIaoe2Rsp3o2OZAot3adToyvOecFSHcz+J2VnWK
-----END CERTIFICATE-----
