Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 14 23:10:20 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:ec:c8:4c:b1:2c:d5:1a:8c:1e:2c:a0:7a:
                    5a:b8:87:39:73:a3:99:e7:7e:4e:1a:b8:04:3e:3d:
                    59:92:7f:2c:c5:50:32:4f:15:4d:e5:c0:69:fe:07:
                    e6:75:d0:a1:cc:0a:88:48:b3:1d:61:c5:05:0b:6f:
                    b3:f6:22:21:58:bd:32:61:e2:e8:8a:5a:67:27:0c:
                    b4:6b:82:77:1c:65:f2:62:f0:72:01:f6:ce:8e:46:
                    17:42:10:a5:05:76:f4:e3:6f:b0:62:04:0b:07:12:
                    96:2f:0a:8c:19:d1:33:8b:58:55:de:b0:e0:16:f7:
                    8f:3d:b1:32:45:08:76:0c:cb:8f:ff:2c:f8:01:43:
                    db:b0:cd:f7:01:63:67:ef:d7:25:99:c5:cd:db:e1:
                    75:39:a2:8e:4a:1c:fb:a4:2b:f7:ca:39:84:70:df:
                    45:02:14:91:40:62:74:c9:6a:c3:db:aa:d8:23:e9:
                    89:dd:94:18:82:1c:f8:3b:5e:65:15:9c:16:e4:1c:
                    43:d7:5c:89:93:f4:1b:8c:ad:4e:5a:54:c6:1b:af:
                    8f:6b:9f:5c:21:8b:41:e2:f1:b5:87:78:2c:f2:1b:
                    fb:37:07:1a:5c:b5:a6:8c:0e:09:69:04:96:c7:91:
                    7e:8d:66:cd:29:de:e6:9c:85:86:61:a7:78:82:0e:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:*
            X509v3 Issuer Alternative Name: 
                URI:
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         5f:97:3d:e1:5a:ec:de:5d:f9:06:ac:1a:8b:6d:df:3f:c6:bc:
         97:f4:b6:39:0e:19:c0:87:ef:d6:21:c2:0f:35:1d:09:48:43:
         87:07:4c:ef:03:26:5b:f0:f1:11:9a:ce:b1:d1:78:9f:40:b8:
         ee:81:dd:20:67:7c:11:a9:c7:b3:e3:02:9b:00:a4:fe:33:96:
         8b:f8:26:54:8d:b6:1d:63:f4:49:78:33:17:00:b1:c0:5b:45:
         ce:89:fb:e5:57:2b:38:f9:9a:85:39:20:2c:a7:e7:1e:de:b9:
         08:e3:5e:f3:85:41:89:92:03:78:70:32:3d:18:20:18:6b:24:
         a2:19:80:bd:23:1f:58:bc:05:8f:aa:0c:e1:90:a9:18:e5:f9:
         0f:30:e4:a3:2a:e0:2f:e3:af:99:e5:02:a5:63:35:f9:58:ff:
         5c:56:0b:59:3e:03:65:03:72:b2:9c:63:01:15:ae:4f:24:31:
         1f:90:1e:ec:84:bb:34:27:38:cc:95:7d:b1:ab:79:ac:cd:f2:
         38:a2:8b:4a:6c:d9:00:ed:a4:9d:43:6a:6b:03:21:ee:68:19:
         9b:96:2c:3d:2a:b5:37:4e:63:b8:03:25:3a:db:4c:2c:7c:3c:
         f7:31:41:c9:1a:e4:f5:f5:01:d5:50:8a:63:90:d2:cc:63:14:
         1f:a2:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
