Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US, GN=Shorty
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:10:19:28:71:8c:06:73:0b:20:41:c4:ef:
                    78:7e:d7:ae:e3:1c:3a:8a:38:39:04:60:ee:79:d0:
                    3e:6c:a7:7d:5d:46:9c:67:ac:d5:9a:d7:85:18:04:
                    c0:6d:ee:91:48:bc:3d:2a:96:e2:cb:02:98:d1:cd:
                    1c:4f:65:d6:83:e1:c4:d9:f0:8c:0a:ea:1f:0b:f6:
                    7b:41:2c:07:06:f3:5a:c9:fe:26:d1:b9:c6:55:26:
                    a0:a9:f5:4b:d8:64:61:89:e1:b5:22:2f:c9:60:2b:
                    36:79:b6:ce:2c:7f:56:c7:6e:c5:4d:4d:84:78:55:
                    4c:af:a2:57:01:3c:65:e9:c2:c4:fa:80:28:af:6b:
                    94:40:7b:39:a8:0c:48:d1:a5:c5:64:58:27:26:0c:
                    73:5d:da:3a:66:af:cd:7f:5e:bd:42:cb:0c:fe:db:
                    d5:e9:ec:b6:7f:b3:ac:55:f8:e3:a6:90:45:14:b6:
                    32:d3:31:39:d0:56:da:a7:b0:c2:af:a7:de:86:c0:
                    cb:e6:56:9e:17:c0:fb:6c:f9:6a:e8:e9:0b:90:ad:
                    1e:d4:5b:e2:87:09:22:9c:f8:1e:39:01:77:c5:1d:
                    be:5a:af:b9:bb:d0:ad:6e:ba:53:90:93:96:2f:e7:
                    cb:0f:51:bd:07:26:43:b7:5e:44:f0:29:55:6e:d3:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:26:1a:ea:83:fb:6b:de:c5:e2:5a:7a:76:a2:6f:59:20:
         ff:69:4d:0b:2c:77:71:a1:ab:6f:ae:96:9f:18:e1:02:27:5b:
         db:cc:d0:3f:c0:99:3b:43:0d:93:0b:f6:db:b4:ce:e6:b9:91:
         93:22:0a:2b:9b:56:f9:e4:8c:9f:3a:59:76:60:7e:70:1b:91:
         53:25:0f:b0:04:c6:2d:97:fa:7e:5e:0b:8b:81:a0:22:9e:96:
         74:a4:2b:78:c8:ca:4b:c4:26:8e:24:4d:1c:cc:d8:fa:d2:6e:
         e0:78:fa:c8:ed:75:fd:99:18:77:74:a0:ce:4d:05:c5:2b:70:
         31:5c:b7:4b:47:6b:a8:16:bb:e8:f1:3e:b8:13:e4:fd:07:ce:
         74:94:ed:ff:c0:d4:d7:00:d8:39:ef:b8:c8:c0:8d:9d:b4:41:
         b2:f1:fd:3e:e9:28:68:32:eb:ac:85:2e:f5:9b:2c:52:fb:bd:
         ab:a6:a5:ad:ed:b6:c8:2e:42:f8:f0:78:b7:f0:7f:da:a8:f5:
         96:0f:65:bc:92:5f:d2:04:77:7f:70:cd:68:61:91:ee:8f:dd:
         2e:dc:dc:e9:3e:85:8d:d9:a9:ff:5f:ba:83:98:15:f4:1c:24:
         f2:81:58:9a:5b:e4:84:66:13:65:79:1a:9d:14:ee:a3:f8:fd:
         b7:5f:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
