Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US, GN=IHaveAVeryLongNameAndCanNotGetAPersonalCertificate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f9:f6:1e:38:ba:50:61:39:d3:a3:cc:ae:67:cb:
                    81:99:c6:d3:8c:df:84:d5:09:eb:b4:3c:76:46:a6:
                    c6:4b:c1:68:41:24:1a:aa:91:a1:a9:7d:77:3b:3d:
                    36:2c:55:6a:03:37:78:bd:75:8b:a1:8e:9f:d6:7d:
                    63:24:8f:39:d8:10:dd:d1:87:1d:65:09:0a:d3:4e:
                    91:c2:7a:31:90:63:cc:bb:25:8b:72:18:29:22:54:
                    d2:84:6f:7e:90:73:43:fc:32:0e:f7:81:42:5f:2e:
                    83:71:b8:c8:c0:ad:a7:8d:35:d7:a6:6a:0d:4a:91:
                    b0:d0:f5:8b:cf:41:cb:9f:99:a4:42:9d:19:e3:1e:
                    db:3c:71:ba:ec:f0:8f:b5:19:24:85:0e:d3:ac:d7:
                    44:78:aa:63:b1:d6:fa:4d:ac:52:1a:7b:1b:8a:77:
                    33:58:91:39:0b:36:d0:90:65:41:18:5c:2f:7e:60:
                    7a:bb:d1:04:da:ba:df:96:43:fa:42:a1:66:db:4f:
                    68:1c:fc:22:19:5e:42:88:5f:7e:5f:46:86:15:71:
                    2b:10:7c:22:0f:fa:1f:59:f1:d0:5d:39:45:cd:99:
                    a0:14:5c:95:65:1e:72:5f:fd:ac:93:ca:f1:28:3c:
                    c8:ae:39:30:94:50:bb:89:ac:66:1f:52:41:3d:f6:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         91:1c:d5:ad:34:1f:46:8f:b0:0d:11:11:a2:c1:bc:c6:2d:b3:
         11:c4:8e:24:14:a7:7a:b9:80:e3:e7:cc:1b:7c:ee:a8:8e:8c:
         ba:33:55:c8:d2:4e:11:56:89:ed:79:60:a5:bc:d5:72:3d:1a:
         df:93:45:32:4d:fd:85:f1:a1:44:92:72:99:16:69:3a:31:8b:
         13:c8:2c:91:17:79:41:b5:da:fb:ec:b0:63:bc:cd:15:51:be:
         48:c6:14:48:4c:89:32:2f:fc:86:09:58:ec:df:50:02:4e:2e:
         b3:fd:31:2d:a2:f6:be:a4:f2:83:ad:c5:5b:c8:25:af:f9:ff:
         e3:4f:86:f3:15:c5:fc:3c:85:77:15:4f:1f:77:08:2a:a8:03:
         bd:35:cc:2e:24:ea:11:c2:7d:3b:37:82:e6:09:fe:71:79:4b:
         ef:91:ac:c0:80:c6:42:95:09:a7:2f:b2:c9:cf:16:c6:e8:48:
         75:30:8d:8d:0c:69:ed:9e:10:f5:53:a1:de:f1:87:81:5e:4c:
         f2:19:e6:c0:51:61:7e:12:e8:ad:7c:aa:db:f8:33:d8:66:e4:
         7a:10:68:0a:2a:f3:ee:9c:d9:45:9d:f6:8f:c7:12:25:fc:52:
         64:12:d3:56:a4:e1:c8:d4:16:c5:62:60:a1:9c:bf:0a:85:42:
         24:c0:95:d2
-----BEGIN CERTIFICATE-----
MIIGTTCCBTegAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRgw
FgYDVQQDEw9OYW1lIGNvbnN0cmFpbnQxADAeFw0xNjEyMDEwNjA3MDhaFw0zNjEw
MjExODI1MDNaMIHWMQ8wDQYDVQQDEwZnb3YudXMxDjAMBgNVBAsTBUNoYW9zMRgw
FgYDVQQKEw9FeHRyZW1lIERpc2NvcmQxHDAaBgNVBAkTEzMyMTAgSG9sbHkgTWls
bCBSdW4xFDASBgNVBAcTC1RhbGxhaGFzc2VlMQswCQYDVQQIEwJGTDEOMAwGA1UE
ERMFMzAwNjIxCzAJBgNVBAYTAlVTMTswOQYDVQQqEzJJSGF2ZUFWZXJ5TG9uZ05h
bWVBbmRDYW5Ob3RHZXRBUGVyc29uYWxDZXJ0aWZpY2F0ZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPn2Hji6UGE506PMrmfLgZnG04zfhNUJ67Q8dkam
xkvBaEEkGqqRoal9dzs9NixVagM3eL11i6GOn9Z9YySPOdgQ3dGHHWUJCtNOkcJ6
MZBjzLsli3IYKSJU0oRvfpBzQ/wyDveBQl8ug3G4yMCtp40116ZqDUqRsND1i89B
y5+ZpEKdGeMe2zxxuuzwj7UZJIUO06zXRHiqY7HW+k2sUhp7G4p3M1iROQs20JBl
QRhcL35gervRBNq635ZD+kKhZttPaBz8IhleQohffl9GhhVxKxB8Ig/6H1nx0F05
Rc2ZoBRclWUecl/9rJPK8Sg8yK45MJRQu4msZh9SQT32JfsCAwEAAaOCAqMwggKf
MA4GA1UdDwEB/wQEAwIApDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEw
DwYDVR0TAQH/BAUwAwEB/zAOBgNVHSMEBzAFgAMBAgMwYgYIKwYBBQUHAQEEVjBU
MCEGCCsGAQUFBzABhhVodHRwOi8vdGhlY2EubmV0L29jc3AwLwYIKwYBBQUHMAKG
I2h0dHA6Ly90aGVjYS5uZXQvdG90YWxseXRoZWNlcnQuY3J0MBoGA1UdEQQTMBGC
D3d3dy5leGFtcGxlLmNvbTAeBgNVHSAEFzAVMAsGCSsGAQQBgptRAjAGBgQqAwQF
MIIBqwYDVR0eBIIBojCCAZ6ggc4wE4ERZ29vZF9lbWFpbEBnZy5jb20wCYEHTHVs
TWFpbDAPgg1wZXJtaXR0ZWQuY29tMIGOpIGLMIGIMQswCQYDVQQGEwJVUzENMAsG
A1UEChMEVUlVQzEMMAoGA1UECxMDRUNFMRIwEAYDVQQHEwlDaGFtcGFpZ24xCzAJ
BgNVBAgTAklMMRYwFAYDVQQJEw02MDEgV3JpZ2h0IFN0MQ4wDAYDVQQREwU2MTgy
MDERMA8GA1UEAxMIdWl1Yy5uZXQxADAKhwhKfeBI//8AAKGByjASgRBiYWRfZW1h
aWxAZ2cuY29tMAmBB0x1bE1haWwwDIIKYmFubmVkLmNvbTCBjqSBizCBiDELMAkG
A1UEBhMCVVMxDjAMBgNVBAoTBVVtaWNoMQswCQYDVQQLEwJDUzESMBAGA1UEBxMJ
QW5uIEFyYm9yMQswCQYDVQQIEwJNSTEVMBMGA1UECRMMNTAwIFN0YXRlIFN0MQ4w
DAYDVQQREwU0ODEwOTESMBAGA1UEAxMJdW1pY2gubmV0MQAwCocIwKgBAf//AAAw
CwYJKoZIhvcNAQELA4IBAQCRHNWtNB9Gj7ANERGiwbzGLbMRxI4kFKd6uYDj58wb
fO6ojoy6M1XI0k4RVonteWClvNVyPRrfk0UyTf2F8aFEknKZFmk6MYsTyCyRF3lB
tdr77LBjvM0VUb5IxhRITIkyL/yGCVjs31ACTi6z/TEtova+pPKDrcVbyCWv+f/j
T4bzFcX8PIV3FU8fdwgqqAO9NcwuJOoRwn07N4LmCf5xeUvvkazAgMZClQmnL7LJ
zxbG6Eh1MI2NDGntnhD1U6He8YeBXkzyGebAUWF+EuitfKrb+DPYZuR6EGgKKvPu
nNlFnfaPxxIl/FJkEtNWpOHI1BbFYmChnL8KhUIkwJXS
-----END CERTIFICATE-----
