Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US, SN=TestSurname
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:fa:34:4f:38:ca:00:e2:38:ac:61:ed:53:
                    7e:6c:ff:86:41:c8:db:e9:20:3f:da:0d:01:9e:30:
                    a5:ab:80:92:ad:89:33:9b:d1:31:b7:5c:66:d0:cb:
                    ab:89:e8:5b:3c:03:7c:0f:7b:c3:47:5b:74:85:48:
                    f5:e3:9e:f1:aa:11:65:27:79:48:a9:cd:63:e6:7b:
                    83:a0:f9:23:4c:f9:a0:7d:7c:41:3f:24:5a:33:8b:
                    7f:ee:25:be:61:b2:c8:b8:d3:bc:c9:87:02:71:ac:
                    45:1f:e4:06:dd:35:1d:4b:3e:fe:ac:8f:97:1f:93:
                    b4:86:de:44:6b:22:dd:48:7f:fb:ab:4c:40:98:b7:
                    4c:40:96:0a:d6:d4:34:18:91:43:62:d6:4d:f5:c1:
                    4b:da:ea:6a:eb:9a:21:87:66:ae:51:56:3e:d1:f3:
                    5f:97:32:79:80:1b:e9:cb:0d:b9:1b:cb:96:64:d7:
                    4e:c4:2f:48:a7:b4:d9:31:b8:d2:f2:45:69:2f:e8:
                    a7:38:6b:38:5d:5b:f2:10:80:0a:18:bc:98:35:a8:
                    88:c0:fb:20:09:b9:70:43:dc:77:f5:1f:22:ce:c1:
                    ff:5f:0c:2c:cc:b6:e7:92:b1:d3:6a:79:2b:75:bb:
                    bb:d6:54:f3:db:6f:ed:6c:b9:47:6d:17:19:68:ba:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:43:b9:6a:45:a9:36:82:8c:85:78:99:a3:96:79:96:dc:
         9f:37:bc:d8:c3:6c:47:82:e9:d1:9e:00:7e:43:2a:34:cf:00:
         f4:77:34:8c:f2:fd:d5:5e:f2:d8:55:be:e9:28:12:55:0f:38:
         ba:6f:c2:a8:5e:67:09:50:8d:1f:0f:50:1c:8c:51:c8:07:de:
         ad:c9:fb:4b:bf:c3:2f:d1:85:e7:6b:11:1a:f0:21:82:0b:ef:
         f6:2b:c2:d6:d9:a2:19:1d:be:b7:77:04:bc:fa:b4:b7:11:47:
         60:5b:30:e5:3e:d2:f4:d9:ea:b7:99:60:3c:4e:21:df:25:87:
         49:67:f6:26:a2:9e:d2:e0:6d:e9:b1:9b:cb:be:af:83:7e:8f:
         d3:d0:f0:27:49:75:37:4c:6e:90:f2:ed:bf:a0:a9:8d:3f:0d:
         bb:46:59:da:45:0d:68:e8:e2:a2:b3:dc:ea:b8:ea:0e:f5:a3:
         df:cd:00:87:54:26:53:57:81:2c:c3:e6:57:10:2c:dd:98:2f:
         03:a7:df:d1:ab:13:8c:be:b9:22:d2:85:5b:ae:9d:4e:77:6b:
         9e:27:43:d0:25:18:3b:55:21:02:be:61:f5:76:58:be:27:2d:
         07:d0:18:50:6c:1a:65:11:ba:65:80:1b:1a:ac:49:77:f4:50:
         5e:10:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
