Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 15 02:58:29 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:1a:b0:bc:01:91:af:fb:b5:8b:29:66:34:
                    b5:35:b4:d5:c1:fb:3b:bd:e7:4d:29:28:60:42:c4:
                    38:d8:c5:76:11:65:1c:64:0d:89:a7:ec:c4:14:3b:
                    15:51:51:1a:88:7c:c6:21:02:f2:b7:8b:40:eb:5f:
                    2a:45:03:74:ad:18:7b:82:96:d7:f0:2e:6f:db:67:
                    66:b0:28:c1:c0:05:59:0a:00:54:bb:55:1e:1b:fe:
                    0d:ad:80:03:93:75:25:31:c3:a8:e0:f5:13:87:98:
                    0f:e7:c9:93:03:70:b4:fc:d5:6d:97:4c:73:d0:a6:
                    b6:7e:b8:ba:37:89:ea:e9:79:66:0c:a6:84:a1:31:
                    00:95:15:66:8f:6b:09:ff:a3:a3:29:e6:3c:c9:06:
                    16:b7:98:bc:94:37:93:e8:2a:d1:d8:f9:54:18:3d:
                    a4:65:ce:c5:5e:14:c1:a9:2f:b8:26:cc:06:9d:c3:
                    15:89:07:57:63:26:16:76:41:cb:c3:83:3d:0f:04:
                    00:99:73:00:a5:f7:6b:01:36:6b:1c:af:f9:bf:55:
                    0e:41:ba:69:28:f7:8b:5e:78:f4:d9:a9:fa:7a:d9:
                    91:bd:4a:83:f4:5b:f7:08:56:cf:7b:00:41:3c:8a:
                    64:d3:90:a9:91:16:30:e0:db:be:7f:29:e8:c9:5a:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:*
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:74:75:ab:d4:6d:da:30:8a:c4:6e:06:18:e6:43:6b:d5:
         dc:c7:e8:e1:8f:68:c5:93:cb:a6:ed:fe:3b:d2:eb:71:5f:2d:
         74:3f:8c:ab:dc:43:4c:02:94:5e:39:55:b0:ca:97:fa:da:e8:
         cd:de:b2:a6:3e:ba:b1:d7:a2:87:59:bf:93:0f:eb:0a:c4:ac:
         7c:02:57:34:30:07:f9:37:47:6d:ba:14:f0:12:d6:0d:0c:52:
         47:73:47:86:c9:f0:cc:5e:e9:fb:2f:52:6a:38:0a:12:dd:56:
         4f:6f:db:ab:18:b6:85:ca:f5:a4:e6:71:4b:4f:11:80:e1:86:
         8d:4a:6a:db:36:bf:94:a0:bb:b7:a5:60:00:bc:61:7d:2d:fd:
         de:80:05:30:69:32:fe:f8:ad:4a:b0:2a:ad:a0:59:66:ee:da:
         08:98:4c:1b:cd:1c:7c:ae:e2:f9:15:b7:ff:23:3b:38:71:f5:
         69:04:50:8d:20:81:56:5f:31:3d:54:ae:5a:35:3c:77:14:14:
         29:c9:1f:5c:a0:92:03:fd:63:4d:9f:c3:97:7a:5c:99:30:b6:
         ce:87:d0:59:6b:68:a7:ea:93:d0:a6:88:d4:7a:87:88:e8:9f:
         0b:e4:d3:72:54:af:10:a2:b1:df:63:b8:30:cf:34:8e:69:a8:
         92:95:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
