Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  6 04:48:37 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:5e:40:8b:a6:f2:51:7a:16:4a:a4:85:78:
                    48:af:de:09:d0:8e:3f:cd:98:a2:18:50:8b:93:d0:
                    70:d7:81:c8:fd:68:e3:81:4a:0a:df:20:71:ac:2f:
                    f5:27:f4:f9:3d:aa:b7:27:aa:ab:b2:cd:a3:67:02:
                    ba:7f:86:7a:86:cf:0b:07:ed:ee:15:f6:53:b8:2f:
                    b4:90:c0:35:41:86:6a:ba:69:1d:15:46:6a:07:5e:
                    2c:94:15:fe:44:11:5c:9d:11:a8:e1:ac:16:47:4d:
                    8d:79:67:77:0c:8c:c6:c9:ed:1c:67:4a:f9:16:8b:
                    e9:f1:31:77:b1:db:b8:0e:cb:fb:b8:3e:0a:c5:76:
                    46:61:38:15:88:52:5d:a8:de:cc:6b:17:fc:73:5e:
                    67:dc:eb:c1:1d:25:33:4d:c9:97:78:c8:2f:0c:4c:
                    6d:7c:ec:f3:ec:de:73:50:ca:e9:18:91:60:52:ef:
                    0e:74:e4:25:65:31:25:f5:78:27:bf:01:5d:08:0f:
                    12:23:7a:ed:fe:04:22:7c:ab:e6:e0:44:c7:14:5c:
                    71:29:3a:f0:a1:29:3a:8f:c5:bc:a7:ea:7d:ff:bf:
                    d8:1f:cb:36:56:a9:4f:d1:85:9a:c4:82:4b:b6:69:
                    f0:6c:2e:a6:a7:e3:8c:fb:77:93:0c:8b:4b:8f:1a:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
            X509v3 Issuer Alternative Name: 
                URI:
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         b0:53:cd:ad:a6:82:4e:5b:e7:d6:99:20:06:6f:ff:bd:93:e5:
         e1:75:86:cf:7e:06:f5:cb:ff:c4:66:b9:70:2a:e4:ec:6f:f5:
         3c:d8:d5:d8:69:72:78:da:a4:8f:2b:f0:2f:10:58:67:90:d0:
         ac:b4:c1:e8:4b:b7:11:96:95:09:08:1b:03:25:10:46:5c:fb:
         37:33:af:c5:04:0a:a5:e8:ea:a4:54:80:dc:7e:74:ec:e8:4e:
         96:c8:0e:c2:b9:35:d5:50:64:c7:ac:20:f3:b3:30:40:6f:91:
         24:5e:f9:56:eb:52:ec:65:69:02:35:06:7c:63:2e:07:f6:cf:
         18:f2:cf:75:01:dc:87:9b:ac:0b:6e:0a:d4:d2:ce:65:e3:2f:
         a5:bc:b9:76:ca:ef:3a:72:60:b6:0e:c7:58:d5:40:78:75:52:
         e3:05:ba:5d:93:0a:a9:2b:5a:19:f5:2e:13:67:c0:3b:b4:70:
         cd:1f:5f:24:fb:36:31:5f:1c:7d:54:41:ab:36:7d:ca:3a:75:
         24:7c:c8:eb:76:5e:d4:d2:a2:93:9e:0f:20:f7:10:59:fc:93:
         d9:b3:ce:be:a4:1e:86:46:65:83:85:b6:ce:64:59:28:00:df:
         90:71:73:e2:78:76:19:af:ba:a5:97:37:55:2f:f2:4c:f7:65:
         55:c0:fe:13
-----BEGIN CERTIFICATE-----
MIIGQTCCBSugAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRgw
FgYDVQQDEw9OYW1lIGNvbnN0cmFpbnQxADAiGA8yMDU1MTIwMTA2MDcwOFoYDzIw
NTYxMDA2MDQ0ODM3WjCBmzELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0V4dHJlbWUg
RGlzY29yZDEOMAwGA1UECxMFQ2hhb3MxFDASBgNVBAcTC1RhbGxhaGFzc2VlMQsw
CQYDVQQIEwJGTDEcMBoGA1UECRMTMzIxMCBIb2xseSBNaWxsIFJ1bjEOMAwGA1UE
ERMFMzAwNjIxDzANBgNVBAMTBmdvdi51czEAMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwT1eQIum8lF6FkqkhXhIr94J0I4/zZiiGFCLk9Bw14HI/Wjj
gUoK3yBxrC/1J/T5Paq3J6qrss2jZwK6f4Z6hs8LB+3uFfZTuC+0kMA1QYZqumkd
FUZqB14slBX+RBFcnRGo4awWR02NeWd3DIzGye0cZ0r5Fovp8TF3sdu4Dsv7uD4K
xXZGYTgViFJdqN7Maxf8c15n3OvBHSUzTcmXeMgvDExtfOzz7N5zUMrpGJFgUu8O
dOQlZTEl9XgnvwFdCA8SI3rt/gQifKvm4ETHFFxxKTrwoSk6j8W8p+p9/7/YH8s2
VqlP0YWaxIJLtmnwbC6mp+OM+3eTDItLjxqLjwIDAQABo4ICzjCCAsowDgYDVR0P
AQH/BAQDAgCkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAPBgNVHRMB
Af8EBTADAQH/MA4GA1UdIwQHMAWAAwECAzBiBggrBgEFBQcBAQRWMFQwIQYIKwYB
BQUHMAGGFWh0dHA6Ly90aGVjYS5uZXQvb2NzcDAvBggrBgEFBQcwAoYjaHR0cDov
L3RoZWNhLm5ldC90b3RhbGx5dGhlY2VydC5jcnQwOAYDVR0RBDEwL4YgaXJyZWxl
dmFudGluZm8vL3VzZXJAMTkyLjE2OC4xLjGCC3d3dy5kbnMuY29tMA4GA1UdEgQH
MAWGAxcYGTAbBgNVHSAEFDASMAgGBmeBDAECAjAGBgQqAwQFMIIBqwYDVR0eBIIB
ojCCAZ6ggc4wE4ERZ29vZF9lbWFpbEBnZy5jb20wCYEHTHVsTWFpbDAPgg1wZXJt
aXR0ZWQuY29tMIGOpIGLMIGIMQswCQYDVQQGEwJVUzENMAsGA1UEChMEVUlVQzEM
MAoGA1UECxMDRUNFMRIwEAYDVQQHEwlDaGFtcGFpZ24xCzAJBgNVBAgTAklMMRYw
FAYDVQQJEw02MDEgV3JpZ2h0IFN0MQ4wDAYDVQQREwU2MTgyMDERMA8GA1UEAxMI
dWl1Yy5uZXQxADAKhwhKfeBI//8AAKGByjASgRBiYWRfZW1haWxAZ2cuY29tMAmB
B0x1bE1haWwwDIIKYmFubmVkLmNvbTCBjqSBizCBiDELMAkGA1UEBhMCVVMxDjAM
BgNVBAoTBVVtaWNoMQswCQYDVQQLEwJDUzESMBAGA1UEBxMJQW5uIEFyYm9yMQsw
CQYDVQQIEwJNSTEVMBMGA1UECRMMNTAwIFN0YXRlIFN0MQ4wDAYDVQQREwU0ODEw
OTESMBAGA1UEAxMJdW1pY2gubmV0MQAwCocIwKgBAf//AAAwCwYJKoZIhvcNAQEL
A4IBAQCwU82tpoJOW+fWmSAGb/+9k+XhdYbPfgb1y//EZrlwKuTsb/U82NXYaXJ4
2qSPK/AvEFhnkNCstMHoS7cRlpUJCBsDJRBGXPs3M6/FBAql6OqkVIDcfnTs6E6W
yA7CuTXVUGTHrCDzszBAb5EkXvlW61LsZWkCNQZ8Yy4H9s8Y8s91AdyHm6wLbgrU
0s5l4y+lvLl2yu86cmC2DsdY1UB4dVLjBbpdkwqpK1oZ9S4TZ8A7tHDNH18k+zYx
Xxx9VEGrNn3KOnUkfMjrdl7U0qKTng8g9xBZ/JPZs86+pB6GRmWDhbbOZFkoAN+Q
cXPieHYZr7qllzdVL/JM92VVwP4T
-----END CERTIFICATE-----
