Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US/serialNumber=1234567890123456789012345678901234567890123456789012345678901234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:31:ae:5f:34:81:ee:33:f5:1d:d8:2c:d9:d1:
                    61:35:69:95:f8:58:ca:59:49:00:86:8b:d7:ff:c6:
                    e4:4c:d6:5e:37:4a:c3:01:e3:2b:a1:77:d6:5b:69:
                    66:cf:24:96:15:a9:17:53:67:6d:2d:72:8b:81:84:
                    2b:a8:0a:3b:31:66:f6:08:1f:0c:4e:a0:32:b7:f1:
                    f0:4c:df:c0:95:14:7b:b4:20:1e:6b:e2:1c:95:8e:
                    08:69:58:fb:b6:3a:59:6f:9e:53:86:38:6b:77:d9:
                    d0:19:42:1b:55:06:5f:cb:02:3f:98:86:a4:2d:89:
                    5d:a6:1c:a1:a7:bf:1e:47:d6:58:3e:2a:73:79:93:
                    31:ce:9d:f7:9d:57:b5:ad:da:92:a7:5c:c3:ff:72:
                    3e:51:d6:22:7f:4f:2b:df:80:47:2c:83:b4:02:cb:
                    54:d8:4e:ab:97:cc:c8:2e:32:eb:8a:9e:d3:66:92:
                    99:26:2f:16:9e:ba:2d:f4:11:eb:3d:3a:98:e4:47:
                    a6:31:76:6b:c3:fc:9c:e2:9a:09:dc:f5:47:3b:e4:
                    de:ce:8c:f5:f5:36:03:f9:0e:60:43:ed:df:d5:23:
                    7d:2d:a7:54:e8:ff:0c:81:6f:3f:cf:f0:63:a0:7d:
                    1c:6e:c7:f4:e9:90:a6:2d:54:b2:88:77:fa:62:cb:
                    fc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         99:96:e6:73:bb:b1:3d:3e:b3:28:12:e2:6c:b4:24:86:7d:22:
         f8:f3:df:15:d0:ed:b4:d9:ff:66:5b:74:be:e3:6a:b3:a8:fa:
         54:71:f0:ba:80:0d:c1:29:23:ca:5c:8e:ae:83:b5:0a:83:96:
         02:d5:29:9c:bd:11:f4:a3:ca:e9:69:6b:18:20:d6:27:6d:b9:
         b2:86:e2:64:b5:30:a4:4c:7c:d1:5d:5b:fb:15:ff:fe:e6:a2:
         d9:fd:92:89:15:4e:a9:52:f4:9c:04:b6:45:44:17:92:f6:97:
         9e:a8:b4:cc:ee:3b:c6:01:b5:37:e6:97:6d:1d:e5:c2:94:50:
         31:87:71:a5:27:6c:8d:80:ce:a9:ee:78:6b:ff:ad:cf:01:df:
         9b:b3:12:3d:00:83:9b:08:a9:84:4b:ad:68:24:c6:c0:74:22:
         da:c1:a5:5f:26:a1:14:2e:30:aa:dd:4f:0b:ab:63:94:84:aa:
         a1:91:97:fa:8f:04:31:01:03:84:ac:85:4a:ce:de:62:14:cc:
         7c:4a:e8:32:a1:ac:96:96:54:7c:e5:91:f6:a1:3c:15:33:dc:
         29:05:84:da:41:d0:f5:a4:e1:2c:a8:db:53:02:57:d0:45:49:
         01:87:ed:05:9f:ec:54:50:7c:c4:06:31:8c:a1:2e:d6:01:a4:
         e0:1c:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
