Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US/postalCode=12345678901234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:9d:a7:0c:34:d7:8b:c4:d1:d5:de:87:ea:
                    95:84:77:1a:20:0e:6a:06:6a:39:72:81:74:78:4d:
                    d2:41:15:95:8b:c1:9c:15:b0:50:59:59:55:23:d7:
                    09:97:48:b8:1e:13:b7:bb:ba:8f:7f:50:71:60:a9:
                    de:8f:8a:ae:3f:98:c9:cb:3f:37:06:63:6c:c3:f6:
                    00:e7:da:ba:54:27:20:f3:88:1e:a5:f1:01:a9:ae:
                    fc:8f:b8:da:95:1d:90:71:42:57:b8:2a:a2:3b:5a:
                    15:1d:3c:be:6f:59:59:9f:46:6b:d2:3a:ae:32:ab:
                    63:88:ed:df:77:93:13:ea:13:a2:7f:e5:1b:ee:ae:
                    bd:b2:86:fd:bd:11:3b:58:ad:93:49:5d:42:2c:27:
                    8c:9b:5f:f2:94:70:5a:e7:a7:97:b4:ae:0a:a2:c8:
                    39:c0:67:53:d7:08:f5:03:3f:c9:c4:7f:72:50:a1:
                    5a:34:bc:5c:4d:1b:56:4f:e0:4a:51:e9:5f:11:b5:
                    75:ab:89:c5:bb:6d:ee:da:f7:74:81:83:77:05:cd:
                    95:e4:e4:b4:7a:4f:05:27:a4:85:e1:6c:4f:69:0d:
                    93:77:14:a6:4f:5e:f9:81:20:0d:90:e6:db:a0:6c:
                    33:a9:9f:da:5a:6a:3b:e5:23:d7:1f:52:ab:14:12:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:25:0e:04:7a:5e:5d:8a:40:f3:0d:98:5c:32:87:82:8c:
         a9:64:81:e2:bc:53:5c:5a:c1:3a:8c:b2:8f:1a:4c:ea:03:70:
         0e:dc:22:4d:8f:80:f1:20:fa:86:3b:d8:5d:d3:23:7f:ff:63:
         19:75:5b:59:b1:d0:42:41:60:f1:a2:1b:0b:c3:4b:ab:9f:49:
         26:a9:4b:8c:a7:a0:e2:25:c3:e2:5d:06:73:97:d0:58:bf:bd:
         05:64:d4:a3:20:df:c8:60:de:5e:4d:54:39:2b:41:1a:36:e3:
         04:61:4a:2e:df:57:54:48:63:48:46:bf:79:9f:bc:85:29:9f:
         bd:93:0d:52:44:60:3d:4e:c6:b0:6c:89:0d:66:82:4d:0a:80:
         a7:e7:8c:3d:90:8a:3a:30:bf:e1:3c:e5:68:32:e3:99:f9:3a:
         4e:6f:eb:73:e7:26:e7:70:8a:1a:70:33:3d:b8:fd:7e:97:57:
         91:27:1a:0a:d7:13:42:2d:50:fb:14:39:43:1a:20:0a:f3:41:
         5f:ff:92:ca:8d:1d:bb:5c:b0:61:5f:a5:60:9e:15:f1:d1:2e:
         d7:2a:20:56:a4:bb:70:99:56:40:70:8a:f2:07:b4:5c:6b:1d:
         d1:1c:24:28:16:4e:bf:96:1f:c5:b6:70:18:dd:96:da:c2:d8:
         b4:3f:3b:5f
-----BEGIN CERTIFICATE-----
MIIGLzCCBRmgAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRgw
FgYDVQQDEw9OYW1lIGNvbnN0cmFpbnQxADAeFw0xNjEyMDEwNjA3MDhaFw0zNjEw
MjExODI1MDNaMIG4MQ8wDQYDVQQDEwZnb3YudXMxDjAMBgNVBAsTBUNoYW9zMRgw
FgYDVQQKEw9FeHRyZW1lIERpc2NvcmQxHDAaBgNVBAkTEzMyMTAgSG9sbHkgTWls
bCBSdW4xFDASBgNVBAcTC1RhbGxhaGFzc2VlMQswCQYDVQQIEwJGTDEOMAwGA1UE
ERMFMzAwNjIxCzAJBgNVBAYTAlVTMR0wGwYDVQQRExQxMjM0NTY3ODkwMTIzNDU2
Nzg5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALeBnacMNNeLxNHV
3ofqlYR3GiAOagZqOXKBdHhN0kEVlYvBnBWwUFlZVSPXCZdIuB4Tt7u6j39QcWCp
3o+Krj+Yycs/NwZjbMP2AOfaulQnIPOIHqXxAamu/I+42pUdkHFCV7gqojtaFR08
vm9ZWZ9Ga9I6rjKrY4jt33eTE+oTon/lG+6uvbKG/b0RO1itk0ldQiwnjJtf8pRw
Wuenl7SuCqLIOcBnU9cI9QM/ycR/clChWjS8XE0bVk/gSlHpXxG1dauJxbtt7tr3
dIGDdwXNleTktHpPBSekheFsT2kNk3cUpk9e+YEgDZDm26BsM6mf2lpqO+Uj1x9S
qxQS0NcCAwEAAaOCAqMwggKfMA4GA1UdDwEB/wQEAwIApDAdBgNVHSUEFjAUBggr
BgEFBQcDAgYIKwYBBQUHAwEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHSMEBzAFgAMB
AgMwYgYIKwYBBQUHAQEEVjBUMCEGCCsGAQUFBzABhhVodHRwOi8vdGhlY2EubmV0
L29jc3AwLwYIKwYBBQUHMAKGI2h0dHA6Ly90aGVjYS5uZXQvdG90YWxseXRoZWNl
cnQuY3J0MBoGA1UdEQQTMBGCD3d3dy5leGFtcGxlLmNvbTAeBgNVHSAEFzAVMAsG
CSsGAQQBgptRAjAGBgQqAwQFMIIBqwYDVR0eBIIBojCCAZ6ggc4wE4ERZ29vZF9l
bWFpbEBnZy5jb20wCYEHTHVsTWFpbDAPgg1wZXJtaXR0ZWQuY29tMIGOpIGLMIGI
MQswCQYDVQQGEwJVUzENMAsGA1UEChMEVUlVQzEMMAoGA1UECxMDRUNFMRIwEAYD
VQQHEwlDaGFtcGFpZ24xCzAJBgNVBAgTAklMMRYwFAYDVQQJEw02MDEgV3JpZ2h0
IFN0MQ4wDAYDVQQREwU2MTgyMDERMA8GA1UEAxMIdWl1Yy5uZXQxADAKhwhKfeBI
//8AAKGByjASgRBiYWRfZW1haWxAZ2cuY29tMAmBB0x1bE1haWwwDIIKYmFubmVk
LmNvbTCBjqSBizCBiDELMAkGA1UEBhMCVVMxDjAMBgNVBAoTBVVtaWNoMQswCQYD
VQQLEwJDUzESMBAGA1UEBxMJQW5uIEFyYm9yMQswCQYDVQQIEwJNSTEVMBMGA1UE
CRMMNTAwIFN0YXRlIFN0MQ4wDAYDVQQREwU0ODEwOTESMBAGA1UEAxMJdW1pY2gu
bmV0MQAwCocIwKgBAf//AAAwCwYJKoZIhvcNAQELA4IBAQCPhiUOBHpeXYpA8w2Y
XDKHgoypZIHivFNcWsE6jLKPGkzqA3AO3CJNj4DxIPqGO9hd0yN//2MZdVtZsdBC
QWDxohsLw0urn0kmqUuMp6DiJcPiXQZzl9BYv70FZNSjIN/IYN5eTVQ5K0EaNuME
YUou31dUSGNIRr95n7yFKZ+9kw1SRGA9TsawbIkNZoJNCoCn54w9kIo6ML/hPOVo
MuOZ+TpOb+tz5ybncIoacDM9uP1+l1eRJxoK1xNCLVD7FDlDGiAK80Ff/5LKjR27
XLBhX6VgnhXx0S7XKiBWpLtwmVZAcIryB7Rcax3RHCQoFk6/lh/FtnAY3Zbawti0
Pztf
-----END CERTIFICATE-----
