Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 15 00:49:10 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:ab:6c:6c:e3:85:9a:eb:87:6c:06:2c:10:
                    d6:57:80:bd:b4:04:a0:75:0e:ef:40:6b:29:56:76:
                    26:5b:c6:0c:0e:4a:d6:73:10:a3:de:b7:e7:47:a0:
                    0d:65:15:af:4e:a7:8a:4e:ae:ef:80:b6:8f:bc:94:
                    e1:87:0e:55:dd:9f:74:fb:ce:f4:ae:fa:11:5a:5e:
                    e6:3c:41:24:0d:f9:2b:5e:df:58:5e:ea:bf:b0:26:
                    de:f1:7c:45:58:79:fa:06:40:ac:3d:30:cb:57:b0:
                    89:ed:b6:da:07:67:7f:1d:c0:96:51:e8:7b:e7:39:
                    ff:72:06:98:56:53:9d:4e:f1:98:3c:6d:13:5d:68:
                    0f:b4:30:c9:f0:f1:36:0a:65:bf:fc:62:e6:a2:2c:
                    b1:43:4b:0e:20:e0:cd:f9:14:1c:3b:c4:07:60:42:
                    e8:c8:d6:6d:bd:89:ed:05:c2:15:f8:39:b0:8c:82:
                    7b:7a:81:29:ab:d3:17:16:78:d9:95:a8:99:98:a2:
                    54:9e:22:25:80:23:f3:73:d9:c4:d7:9a:f4:cb:55:
                    3e:96:ec:0d:3b:1e:7f:dc:d8:6a:4e:5e:ab:50:20:
                    24:80:82:86:95:7b:31:ba:d2:69:7e:9d:a7:cb:02:
                    f7:58:93:29:77:a6:5a:d3:65:9a:a8:08:42:da:9b:
                    df:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:.example.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:65:69:9d:0b:31:4a:d6:6b:fe:9e:1e:38:12:0b:1d:f8:
         f3:08:b8:17:0a:36:20:5d:8f:fa:25:6a:9e:fb:24:0c:88:a6:
         e8:ed:c5:95:95:fe:c2:e0:e5:2b:3c:f8:0d:2a:af:09:95:ed:
         61:cd:7e:61:4e:c9:d3:86:4f:3a:a1:b2:c9:b7:14:4e:a3:86:
         79:af:1e:c4:5e:47:ba:04:16:16:7e:55:30:70:50:b5:72:1c:
         af:86:e2:d4:b8:b7:eb:d8:ad:f3:1a:4b:dc:eb:56:eb:6c:7b:
         84:4b:bb:b0:a4:a5:2e:f8:fd:73:e7:6c:83:67:87:12:1c:d9:
         45:03:ca:a6:24:36:cb:11:42:52:c2:95:e1:5e:f0:f8:13:77:
         61:dd:ec:1f:30:5a:35:b5:76:49:01:7e:9d:ae:31:89:1a:33:
         1a:65:04:1c:c2:fa:34:56:f7:18:16:86:bc:8f:75:07:45:15:
         39:70:46:83:62:65:4c:bc:6f:e9:86:21:b5:7d:0b:42:16:f5:
         76:61:54:f8:51:c4:e0:53:2b:4a:73:8b:a4:71:c6:19:96:ae:
         a8:86:89:6e:51:1e:fc:a9:d9:14:49:ad:3c:56:91:4c:35:9d:
         03:23:a8:bc:27:a0:8c:9b:76:0c:9c:7d:bb:3a:3b:eb:54:cf:
         16:2b:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
