Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Sep  2 02:03:58 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:76:f0:76:1a:ee:25:7c:df:2a:2b:d9:7b:
                    bd:1b:28:1e:84:7c:2c:95:af:8a:c2:2a:95:fc:6e:
                    25:67:a9:b9:29:d3:cc:df:e7:2f:f5:83:f1:3f:3f:
                    fb:57:7f:9a:a2:e6:81:de:7f:9e:70:3f:14:ea:13:
                    f5:58:b7:85:cb:6d:ff:cc:a5:e2:71:dc:a2:f3:f4:
                    fa:ac:87:55:40:c8:46:d2:6d:94:51:d1:5a:c4:fa:
                    4c:44:9c:62:89:1e:47:61:3d:0a:b2:de:36:bb:fe:
                    84:6b:9f:ce:53:69:97:b7:57:c4:66:30:3b:30:79:
                    66:2c:03:8e:fd:19:01:cb:26:7a:d1:b8:2b:5e:45:
                    5f:2c:63:e4:83:46:18:c9:9b:40:73:06:5d:61:4a:
                    e7:09:e0:35:1a:16:8d:90:1d:91:9b:8c:30:f4:59:
                    b0:51:0e:d6:61:19:6f:c0:dc:28:2c:77:4a:ef:53:
                    c5:0f:f2:ed:d8:82:88:2d:d9:ec:e7:eb:b3:21:2f:
                    6b:4d:9a:46:4d:3b:d1:93:95:1a:72:dc:e5:a2:14:
                    39:88:83:5f:7c:67:d1:6d:f0:76:d1:c1:b5:4a:b5:
                    ed:b3:7b:d2:d6:17:2e:e6:42:b1:d6:d4:2e:ff:ae:
                    ad:03:01:b9:3d:ab:87:a0:05:7f:ea:3c:f9:f1:9b:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  Registered ID:1.2.3.4
                  email:email
                  email:LulMail
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                Excluded:
                  DNS:banned.com
                  IP:192.168.1.1/255.255.0.0

            X509v3 Subject Alternative Name: 
                DNS:gov.us
    Signature Algorithm: sha256WithRSAEncryption
         06:cd:77:e8:61:7b:cb:68:d8:e2:fe:60:c0:49:97:2a:6e:f2:
         96:f2:d0:73:de:54:4d:10:81:ff:8a:2b:6a:54:6a:19:31:2b:
         4b:fd:e6:71:5b:64:89:f6:a6:87:f1:8c:a1:67:69:12:e9:5f:
         51:39:64:41:ff:23:b6:16:e7:82:b8:fc:93:af:1b:02:58:40:
         0e:26:5f:61:86:d8:cf:da:df:04:22:78:98:53:c9:23:af:99:
         ff:f4:53:9f:f1:c4:5b:a0:92:b3:d3:78:b9:e6:cd:23:e0:f6:
         8a:e8:67:b5:76:2b:d0:e6:ca:86:e8:37:28:c3:41:37:fa:e1:
         41:0f:f1:64:f3:32:ed:54:6f:5d:88:8c:7d:ba:3b:32:36:33:
         e7:c5:bc:c1:41:d7:72:02:d0:4e:19:59:88:99:e3:39:82:12:
         22:d5:27:21:0d:d7:af:83:1e:99:b1:ef:0a:04:8e:54:b9:4d:
         cd:d6:3e:a0:7c:56:6c:f7:02:1c:7a:41:7f:44:29:c5:5a:fb:
         12:8a:3e:93:ce:12:7a:fb:ed:c8:25:14:0a:ea:a3:0a:bc:85:
         23:de:dc:ca:26:0d:2a:8c:18:e1:1c:80:e0:72:9d:80:db:8d:
         4f:68:dd:fc:b9:15:15:ad:c3:d0:f7:44:f5:6a:9c:c4:6d:7c:
         64:77:55:f4
-----BEGIN CERTIFICATE-----
MIIFNDCCBB6gAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRgw
FgYDVQQDEw9OYW1lIGNvbnN0cmFpbnQxADAiGA8yMDU1MTIwMTA2MDcwOFoYDzIw
NTYwOTAyMDIwMzU4WjCBmzELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0V4dHJlbWUg
RGlzY29yZDEOMAwGA1UECxMFQ2hhb3MxFDASBgNVBAcTC1RhbGxhaGFzc2VlMQsw
CQYDVQQIEwJGTDEcMBoGA1UECRMTMzIxMCBIb2xseSBNaWxsIFJ1bjEOMAwGA1UE
ERMFMzAwNjIxDzANBgNVBAMTBmdvdi51czEAMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqGV28HYa7iV83yor2Xu9GygehHwsla+KwiqV/G4lZ6m5KdPM
3+cv9YPxPz/7V3+aouaB3n+ecD8U6hP1WLeFy23/zKXicdyi8/T6rIdVQMhG0m2U
UdFaxPpMRJxiiR5HYT0Kst42u/6Ea5/OU2mXt1fEZjA7MHlmLAOO/RkByyZ60bgr
XkVfLGPkg0YYyZtAcwZdYUrnCeA1GhaNkB2Rm4ww9FmwUQ7WYRlvwNwoLHdK71PF
D/Lt2IKILdns5+uzIS9rTZpGTTvRk5UactzlohQ5iINffGfRbfB20cG1SrXts3vS
1hcu5kKx1tQu/66tAwG5PauHoAV/6jz58Zuz8QIDAQABo4IBwTCCAb0wDgYDVR0P
AQH/BAQDAgCkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAPBgNVHRMB
Af8EBTADAQH/MA4GA1UdIwQHMAWAAwECAzBiBggrBgEFBQcBAQRWMFQwIQYIKwYB
BQUHMAGGFWh0dHA6Ly90aGVjYS5uZXQvb2NzcDAvBggrBgEFBQcwAoYjaHR0cDov
L3RoZWNhLm5ldC90b3RhbGx5dGhlY2VydC5jcnQwGwYDVR0gBBQwEjAIBgZngQwB
AgIwBgYEKgMEBTCB1gYDVR0eBIHOMIHLoIGsMAWIAyoDBDAHgQVlbWFpbDAJgQdM
dWxNYWlsMIGOpIGLMIGIMQswCQYDVQQGEwJVUzENMAsGA1UEChMEVUlVQzEMMAoG
A1UECxMDRUNFMRIwEAYDVQQHEwlDaGFtcGFpZ24xCzAJBgNVBAgTAklMMRYwFAYD
VQQJEw02MDEgV3JpZ2h0IFN0MQ4wDAYDVQQREwU2MTgyMDERMA8GA1UEAxMIdWl1
Yy5uZXQxAKEaMAyCCmJhbm5lZC5jb20wCocIwKgBAf//AAAwEQYDVR0RBAowCIIG
Z292LnVzMAsGCSqGSIb3DQEBCwOCAQEABs136GF7y2jY4v5gwEmXKm7ylvLQc95U
TRCB/4oralRqGTErS/3mcVtkifamh/GMoWdpEulfUTlkQf8jthbngrj8k68bAlhA
DiZfYYbYz9rfBCJ4mFPJI6+Z//RTn/HEW6CSs9N4uebNI+D2iuhntXYr0ObKhug3
KMNBN/rhQQ/xZPMy7VRvXYiMfbo7MjYz58W8wUHXcgLQThlZiJnjOYISItUnIQ3X
r4MembHvCgSOVLlNzdY+oHxWbPcCHHpBf0QpxVr7Eoo+k84SevvtyCUUCuqjCryF
I97cyiYNKowY4RyA4HKdgNuNT2jd/LkVFa3D0PdE9WqcxG18ZHdV9A==
-----END CERTIFICATE-----
