Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  6 01:50:27 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:bf:9a:35:c2:29:1b:a4:d2:b8:32:b0:3a:
                    b7:d1:83:a4:b4:fc:61:b6:58:5d:dc:f6:19:ca:69:
                    74:cd:2a:c6:9c:e2:1b:82:4b:e7:2a:f8:70:7c:c4:
                    f5:60:c8:63:fc:1f:a9:74:b9:c1:69:ab:67:8f:43:
                    99:4a:56:73:eb:a9:71:68:dc:65:29:65:8d:f7:dc:
                    d4:b2:17:03:a0:af:51:61:5b:5b:7d:10:2e:3b:68:
                    f6:58:6d:3e:6e:4f:3d:e8:68:10:63:a0:ce:34:75:
                    0f:96:39:23:9f:12:18:69:73:48:56:c6:ed:14:df:
                    46:52:69:bf:db:33:25:67:70:1c:ec:e1:02:f3:79:
                    a1:06:0a:47:e5:37:e4:5f:7c:3d:90:ee:17:6d:8e:
                    7b:bb:1b:30:23:76:55:99:7a:9c:76:af:7c:d0:fb:
                    be:21:90:5a:6b:c3:08:40:4a:e7:30:04:b9:52:86:
                    d2:1c:44:6c:9d:e3:cb:9f:eb:f3:6b:65:21:2f:c7:
                    c4:28:a0:95:7e:c1:17:f4:e1:ff:29:45:70:86:69:
                    6a:9e:69:48:24:5e:d2:e4:e3:15:03:80:40:75:a9:
                    a6:11:b1:cb:e1:54:d9:68:3d:e4:ba:61:86:9c:18:
                    ac:46:0a:f6:89:18:19:e6:94:20:1a:da:c9:89:61:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
            X509v3 Issuer Alternative Name: 
                email:example@test.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         bd:9a:4d:ca:33:ef:9f:92:e8:8f:9f:1e:75:9d:20:10:ab:30:
         4b:6d:4f:94:69:14:bc:2a:32:d7:b2:cd:59:db:3b:26:5b:9e:
         71:3b:ad:01:e8:23:f8:6b:bf:f0:92:cc:6e:5a:ad:a5:02:92:
         21:b3:6f:b2:c4:4e:09:ac:98:d7:a8:72:b4:82:2d:1a:2a:88:
         f5:ae:44:2f:95:c4:83:af:a9:ac:e0:f3:74:32:b0:65:c4:e7:
         1e:d1:9c:f5:30:7a:75:98:81:ba:b3:5d:e2:51:e6:e9:2a:cd:
         68:db:23:5a:d0:96:c7:fc:94:ac:5f:3d:cd:61:04:ea:48:b6:
         51:b0:f5:86:7f:b5:1a:2b:47:3e:c7:61:26:5b:8b:90:1e:94:
         b7:e8:b8:f5:1e:71:59:e3:e4:85:cf:b3:a3:1b:57:39:16:6a:
         68:2c:b5:5a:40:27:3a:ce:07:bc:90:94:e9:07:76:d0:d7:21:
         14:ad:4c:e4:4b:b1:4d:53:82:d7:ab:47:2a:09:dc:b6:b2:cf:
         d9:27:6d:2b:fa:4d:41:ba:80:2f:b4:e4:24:53:71:e5:24:46:
         6a:ee:ea:08:b5:f6:40:ba:be:f6:54:b1:40:06:29:2c:12:f2:
         b5:16:09:d2:5b:bb:10:18:06:d1:db:dd:88:a1:8b:8f:d4:df:
         67:23:5f:99
-----BEGIN CERTIFICATE-----
MIIGTjCCBTigAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRgw
FgYDVQQDEw9OYW1lIGNvbnN0cmFpbnQxADAiGA8yMDU1MTIwMTA2MDcwOFoYDzIw
NTYxMDA2MDE1MDI3WjCBmzELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0V4dHJlbWUg
RGlzY29yZDEOMAwGA1UECxMFQ2hhb3MxFDASBgNVBAcTC1RhbGxhaGFzc2VlMQsw
CQYDVQQIEwJGTDEcMBoGA1UECRMTMzIxMCBIb2xseSBNaWxsIFJ1bjEOMAwGA1UE
ERMFMzAwNjIxDzANBgNVBAMTBmdvdi51czEAMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwTS/mjXCKRuk0rgysDq30YOktPxhtlhd3PYZyml0zSrGnOIb
gkvnKvhwfMT1YMhj/B+pdLnBaatnj0OZSlZz66lxaNxlKWWN99zUshcDoK9RYVtb
fRAuO2j2WG0+bk896GgQY6DONHUPljkjnxIYaXNIVsbtFN9GUmm/2zMlZ3Ac7OEC
83mhBgpH5TfkX3w9kO4XbY57uxswI3ZVmXqcdq980Pu+IZBaa8MIQErnMAS5UobS
HERsnePLn+vza2UhL8fEKKCVfsEX9OH/KUVwhmlqnmlIJF7S5OMVA4BAdammEbHL
4VTZaD3kumGGnBisRgr2iRgZ5pQgGtrJiWFmJwIDAQABo4IC2zCCAtcwDgYDVR0P
AQH/BAQDAgCkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAPBgNVHRMB
Af8EBTADAQH/MA4GA1UdIwQHMAWAAwECAzBiBggrBgEFBQcBAQRWMFQwIQYIKwYB
BQUHMAGGFWh0dHA6Ly90aGVjYS5uZXQvb2NzcDAvBggrBgEFBQcwAoYjaHR0cDov
L3RoZWNhLm5ldC90b3RhbGx5dGhlY2VydC5jcnQwOAYDVR0RBDEwL4YgaXJyZWxl
dmFudGluZm8vL3VzZXJAMTkyLjE2OC4xLjGCC3d3dy5kbnMuY29tMBsGA1UdEgQU
MBKBEGV4YW1wbGVAdGVzdC5jb20wGwYDVR0gBBQwEjAIBgZngQwBAgIwBgYEKgME
BTCCAasGA1UdHgSCAaIwggGeoIHOMBOBEWdvb2RfZW1haWxAZ2cuY29tMAmBB0x1
bE1haWwwD4INcGVybWl0dGVkLmNvbTCBjqSBizCBiDELMAkGA1UEBhMCVVMxDTAL
BgNVBAoTBFVJVUMxDDAKBgNVBAsTA0VDRTESMBAGA1UEBxMJQ2hhbXBhaWduMQsw
CQYDVQQIEwJJTDEWMBQGA1UECRMNNjAxIFdyaWdodCBTdDEOMAwGA1UEERMFNjE4
MjAxETAPBgNVBAMTCHVpdWMubmV0MQAwCocISn3gSP//AAChgcowEoEQYmFkX2Vt
YWlsQGdnLmNvbTAJgQdMdWxNYWlsMAyCCmJhbm5lZC5jb20wgY6kgYswgYgxCzAJ
BgNVBAYTAlVTMQ4wDAYDVQQKEwVVbWljaDELMAkGA1UECxMCQ1MxEjAQBgNVBAcT
CUFubiBBcmJvcjELMAkGA1UECBMCTUkxFTATBgNVBAkTDDUwMCBTdGF0ZSBTdDEO
MAwGA1UEERMFNDgxMDkxEjAQBgNVBAMTCXVtaWNoLm5ldDEAMAqHCMCoAQH//wAA
MAsGCSqGSIb3DQEBCwOCAQEAvZpNyjPvn5Loj58edZ0gEKswS21PlGkUvCoy17LN
Wds7JluecTutAegj+Gu/8JLMblqtpQKSIbNvssROCayY16hytIItGiqI9a5EL5XE
g6+prODzdDKwZcTnHtGc9TB6dZiBurNd4lHm6SrNaNsjWtCWx/yUrF89zWEE6ki2
UbD1hn+1GitHPsdhJluLkB6Ut+i49R5xWePkhc+zoxtXORZqaCy1WkAnOs4HvJCU
6Qd20NchFK1M5EuxTVOC16tHKgnctrLP2SdtK/pNQbqAL7TkJFNx5SRGau7qCLX2
QLq+9lSxQAYpLBLytRYJ0lu7EBgG0dvdiKGLj9TfZyNfmQ==
-----END CERTIFICATE-----
