Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 15 11:34:11 2016 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:47:de:e7:71:8f:fd:69:0b:e2:51:12:4b:
                    9f:cf:f0:96:c4:ce:98:89:1c:f5:48:e8:a6:20:f8:
                    57:40:5e:ac:08:08:78:5f:63:f9:08:49:54:35:be:
                    2d:5e:53:04:38:b5:02:1c:23:38:9b:f9:e9:cb:77:
                    38:45:2e:14:50:34:cc:c7:08:ad:2e:2c:0d:20:11:
                    ff:4e:65:b8:cc:3a:a5:30:9a:6f:7a:17:4c:70:f7:
                    41:c6:ab:79:61:b7:86:39:60:ca:71:c7:f4:fa:dd:
                    fc:c8:65:6e:50:fb:cf:4b:39:07:12:e1:73:f2:64:
                    c3:ef:28:2c:a9:2f:3b:6b:0b:36:6f:c3:b8:c9:cd:
                    6c:30:a1:0f:f8:1a:a0:41:96:72:9e:30:9f:c5:21:
                    3e:9a:d8:fa:92:c9:4e:5c:e6:5e:10:40:28:a7:cf:
                    5a:42:70:fe:3a:95:ae:22:d7:4f:e5:20:67:94:e9:
                    6d:b5:52:01:9c:b1:7a:57:18:52:31:1d:2c:9b:b2:
                    51:84:70:db:cf:b2:0c:d3:8b:58:a5:f3:21:12:9b:
                    fc:e9:39:f8:18:55:33:10:e9:89:35:51:27:b1:e8:
                    69:a9:28:e8:02:54:ed:f9:a6:b3:1e:84:e2:54:cc:
                    9c:c3:88:ed:61:71:d7:4c:0c:cf:f1:06:61:84:3f:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:*
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         12:a8:c1:60:b9:05:5e:cd:96:c5:e9:d5:e1:1e:bb:78:9a:f6:
         3b:2b:18:71:c1:0f:7c:ab:02:7f:df:f2:96:84:7c:69:00:56:
         2e:76:9c:b9:a0:a7:eb:7b:92:a5:34:6f:e4:10:84:c5:cf:05:
         41:b9:8f:e9:1d:cd:00:6b:e4:43:4d:af:16:f6:b3:c4:69:36:
         db:c1:00:de:77:27:f5:79:5e:1f:8d:4a:ba:37:16:ad:da:ed:
         b6:9f:41:00:ab:70:2e:0c:28:bd:e5:74:51:fb:04:00:9a:b0:
         fa:5e:85:a0:2d:fa:0f:b9:83:cc:e0:81:20:f4:a7:f6:68:2a:
         3b:6b:b1:e3:2a:57:16:a4:7f:37:df:df:b9:db:79:90:ab:6b:
         1a:48:25:38:4e:2a:5e:f2:ca:c5:48:fc:54:7f:8b:66:34:0b:
         86:61:58:6d:c9:db:11:62:15:5c:29:43:2a:8b:28:b4:91:16:
         00:12:e7:55:04:be:6e:3b:14:3b:fe:40:ae:97:70:5a:6f:c2:
         3f:b8:91:d9:67:ab:55:8c:57:c8:c0:43:ca:3b:21:6e:59:54:
         a8:ce:8b:dc:89:85:13:78:69:a5:4e:63:70:a7:4c:2e:e8:7d:
         1d:fe:66:64:ce:85:da:87:32:8a:b4:d4:83:2c:30:61:60:f5:
         12:db:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
