Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  5 17:44:04 2056 GMT
        Subject: C=US, O=Extreme Discord, OU=Chaos, L=Tallahassee, ST=FL/street=3210 Holly Mill Run/postalCode=30062, CN=gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:b9:0b:3c:66:57:21:04:e0:00:d1:c8:c5:
                    ee:0d:30:4e:e6:69:19:ea:67:91:b0:06:56:dc:7e:
                    d1:42:3b:53:e0:31:aa:5f:00:fb:3a:10:55:1e:7a:
                    d6:7c:1a:6c:cc:ed:7c:0e:57:9e:2b:7b:30:4c:30:
                    d0:6f:e3:41:b3:2a:31:01:30:ae:02:98:62:a2:65:
                    a4:59:3f:29:ba:b2:96:0e:2c:4b:30:ad:41:2d:2c:
                    cc:69:ae:48:82:39:9f:27:83:02:40:db:1b:20:de:
                    80:8f:95:83:e5:86:69:1f:d7:e6:5b:45:4f:ac:a7:
                    5b:d7:94:36:f0:fe:7c:c1:76:d8:05:f9:f3:5c:d2:
                    ce:95:bd:7f:4d:60:04:45:4d:88:b0:37:7f:2c:7e:
                    36:6f:41:93:be:03:28:2c:7a:49:03:c6:e1:c1:bc:
                    09:26:76:56:e7:d9:e5:4d:f7:f9:36:42:62:68:88:
                    f7:f8:e8:d8:49:01:1c:6c:1f:71:fc:0d:a0:c7:78:
                    15:6c:01:46:b0:ba:06:58:c5:90:bd:a2:05:e2:b0:
                    af:55:04:6f:42:bd:4c:f9:33:a0:8a:92:18:e5:fe:
                    77:a2:ed:6c:07:8c:14:87:29:53:e0:00:21:8e:f4:
                    19:50:96:ee:bf:10:0c:13:6b:9f:a9:17:dc:60:59:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.dns.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         07:17:d4:79:f9:3b:76:27:e8:c8:d9:f9:1f:97:6c:bc:95:34:
         f7:9c:da:4d:4e:a7:de:56:6f:0d:52:ca:7a:d9:7a:6c:e7:7f:
         9a:ee:d9:a1:89:01:be:21:7c:86:94:45:e2:0f:4c:a6:c6:91:
         63:3e:00:f3:d5:13:10:12:fd:ad:48:c7:5c:fe:8c:17:9d:5f:
         a6:c9:5e:9c:75:17:61:6c:06:9d:70:c1:e1:c6:09:2c:bf:be:
         09:a8:09:03:0a:7f:77:85:34:18:cd:fa:81:ea:14:5c:f6:80:
         57:90:01:e6:e2:82:7a:10:05:70:b1:8d:08:ae:b9:94:6a:e6:
         9d:8b:24:51:6c:bd:61:c8:98:bc:bd:5c:60:32:0d:e2:03:00:
         8b:15:f4:92:4d:3d:31:ca:89:6d:f6:ec:36:50:6b:2c:0a:25:
         f4:9d:ec:0c:0a:1f:f6:bd:a3:f6:a1:e3:ea:14:3b:a9:eb:7d:
         c4:4d:6d:e7:21:0d:f1:9d:a3:fb:fc:9c:e9:c2:f7:ff:c2:d7:
         15:7c:29:1b:ed:8a:ce:0b:39:36:5f:b3:2f:f1:40:8a:f5:95:
         a8:8e:33:cb:a2:7e:bd:e5:cc:bd:b6:df:84:c8:24:96:47:db:
         4d:4c:e3:9c:57:ca:c4:e3:b7:f3:31:83:03:1f:cd:84:19:6c:
         5c:98:44:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
