Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  5 17:44:04 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:de:76:c1:d5:e3:47:69:7a:3e:c4:31:77:
                    a3:3f:7e:a2:4d:47:aa:2b:78:61:e5:ee:d7:b1:00:
                    d9:d3:bc:15:38:85:8e:1a:f9:fd:e7:65:8d:ab:12:
                    4f:a1:ac:cf:1a:54:26:a5:53:3d:0b:c1:e5:39:b5:
                    3d:ee:6a:c3:37:a1:d4:06:03:68:45:1f:c6:48:f4:
                    94:cf:ae:59:7e:fe:73:35:2e:f4:fe:84:52:3e:08:
                    e3:fe:e3:93:57:8f:69:81:0a:44:31:ef:44:e0:86:
                    d0:57:48:9d:fe:40:79:7a:09:80:73:c2:9f:ed:9e:
                    3e:c9:b5:2c:1e:53:3a:79:b4:90:0f:4a:fb:f8:c6:
                    d6:93:9d:39:58:4e:00:7f:36:83:bf:8d:55:39:52:
                    81:7b:c0:24:73:2d:21:89:13:de:22:f6:cf:68:69:
                    64:5c:93:72:df:40:69:7d:d3:c1:d0:59:d6:20:7b:
                    5a:1e:fd:83:7a:ac:64:fc:64:0a:05:bc:02:8e:4d:
                    a3:0e:40:d4:23:63:a7:38:0d:17:10:b6:db:0d:20:
                    58:3c:94:19:11:5c:84:7a:8d:62:18:db:73:fc:43:
                    5c:62:cf:31:52:85:16:1f:1e:60:61:46:09:9c:18:
                    8f:3a:b0:e3:30:54:c4:18:e4:e4:02:a0:2e:4f:d8:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
            X509v3 Issuer Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:a8:5c:7d:1d:77:c2:df:78:4c:32:e9:b6:5e:80:18:de:
         d4:a9:1f:24:c3:b3:2e:68:4e:37:44:87:d5:42:fb:19:08:b1:
         4a:1f:53:2a:6f:4b:9e:b8:ff:29:f8:8e:e3:de:6c:9e:d6:8e:
         77:f8:94:25:d4:78:0e:8c:a5:36:c3:74:99:ed:b6:4b:51:76:
         f1:c9:8d:8e:0e:bc:fe:8c:a2:27:0a:6c:19:30:82:b1:17:65:
         81:63:05:02:8f:c8:d3:06:0c:d1:20:1a:cf:4c:9a:bf:e8:08:
         fa:ff:90:47:5d:91:1a:67:ac:78:88:c1:f2:07:02:9e:2c:1b:
         a0:c4:eb:70:f4:af:47:a3:96:e4:9b:d7:cc:2f:75:69:c9:1b:
         2c:ec:66:d6:87:c8:83:41:37:7f:ab:36:b8:30:1d:75:3e:37:
         05:93:25:44:ba:76:43:b1:54:97:b9:23:ea:5c:02:a2:33:81:
         46:a7:35:3b:99:d1:c2:23:57:83:98:c4:96:c8:a9:ef:ff:34:
         f6:86:28:89:1a:07:86:58:cf:53:8e:e7:cf:30:4c:04:01:0f:
         33:f4:c7:de:21:3b:2b:2a:55:d8:c4:53:fa:1d:7d:56:c3:ce:
         23:a9:de:f9:44:c4:16:11:83:0b:e3:08:77:37:18:70:db:5c:
         f9:a4:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
