Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Sep 27 02:13:04 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:83:b3:76:f0:ed:2f:5d:5e:5e:7b:6a:7f:
                    27:cd:05:4b:fe:f3:4a:a1:61:56:a7:73:98:e4:4a:
                    c6:2c:81:c4:8f:8c:2d:b9:cb:80:53:fa:52:c5:b3:
                    4b:ad:74:c4:9a:38:7c:8f:ca:78:f8:ce:8e:14:b6:
                    3a:0b:50:f4:00:fd:b2:bb:60:13:8e:a6:79:d7:f2:
                    aa:f2:2e:48:84:01:b1:74:10:51:ed:43:aa:92:15:
                    f3:1c:d9:b0:c7:e5:99:1d:cd:3a:ed:d8:27:9d:08:
                    b3:a0:6f:47:72:7d:07:41:d1:72:28:32:e1:e0:b7:
                    01:20:a6:f8:32:83:dd:40:0f:03:07:bd:82:22:02:
                    9a:08:bb:33:51:63:04:32:bf:5c:8a:79:05:8c:89:
                    ce:13:a0:4a:b1:11:3e:30:54:93:7e:e4:b2:81:3e:
                    a1:ad:97:28:de:ef:a1:5f:90:e2:96:4a:7e:7e:45:
                    71:00:92:32:39:aa:a8:c4:e6:1b:1c:0c:bd:f1:d0:
                    97:d1:28:eb:0b:e4:41:94:20:aa:0b:d6:09:ec:45:
                    80:6c:5f:24:61:7e:3a:4a:e3:15:59:cc:2a:e1:e2:
                    c8:aa:bc:b0:05:56:26:e7:73:d1:1d:82:71:71:40:
                    77:47:d8:be:b7:c8:51:88:9f:7b:51:e0:9a:a8:84:
                    67:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@www.host.com:1234, DNS:www.dns.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:35:a0:d4:64:b2:2b:17:f9:79:9c:68:fb:8a:6f:f9:10:
         34:57:12:b2:b1:95:72:b8:ed:12:37:8a:92:af:01:0c:8f:40:
         bc:70:e8:ec:dc:9a:7f:7f:cf:66:83:a8:68:5d:1c:01:c9:2c:
         0a:ea:c6:bd:0a:c5:ec:e9:7e:6d:67:e3:39:c3:40:8b:47:ca:
         43:11:86:e0:00:38:36:1e:40:7b:91:b5:ea:df:a3:89:1b:48:
         e3:6a:2a:73:16:4d:eb:02:d8:3d:e6:9a:e1:68:2e:fd:db:b8:
         97:25:56:5c:8b:c3:e4:1f:b4:13:40:d5:0d:33:0f:d1:c5:e2:
         09:01:0a:d7:cd:5b:81:21:8f:f7:90:a2:32:6d:9e:3d:1e:55:
         5c:ee:d3:21:18:df:d8:04:96:ff:fa:96:8f:9b:29:1c:07:d1:
         6b:1b:96:f2:ee:e8:63:df:13:23:fa:d7:be:7a:d9:96:cb:48:
         3c:89:5c:d9:ab:98:be:80:d4:f0:43:58:1b:1d:44:cd:d0:99:
         01:87:aa:27:a3:c5:6c:1e:0d:f2:59:25:b8:42:f6:b1:57:98:
         fc:64:db:e9:7a:d3:c9:41:0c:b0:45:2d:63:f4:8d:0e:ff:62:
         28:d4:ff:e2:ef:df:63:73:31:fb:cd:35:2e:51:b9:29:6e:53:
         a0:f0:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
