Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  6 04:44:20 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:cc:04:ea:55:c9:a9:f3:32:61:73:ea:16:
                    20:7a:11:aa:09:59:58:3d:0e:95:d5:5c:3a:cc:b1:
                    63:55:2d:de:0c:a1:62:e8:c9:f6:7e:1d:55:b8:de:
                    95:0f:b3:aa:53:1b:04:4d:dd:f2:5e:e1:75:7a:55:
                    36:56:7a:09:99:0c:12:c6:42:e4:ea:68:4a:2f:7f:
                    b4:52:1f:4e:dc:21:2b:bd:d8:c5:38:a1:9c:de:ed:
                    18:00:66:42:bb:96:ee:8b:62:00:7e:7a:48:e2:de:
                    4c:2f:b9:fe:61:09:8d:1c:97:d7:27:03:a5:4c:41:
                    ad:ce:cb:9c:b5:8b:f3:a2:9f:17:9d:b3:07:dc:82:
                    d4:5c:1b:ff:e9:37:b9:4d:3e:d9:d4:4e:73:b0:e6:
                    68:53:db:09:ba:91:91:ff:1c:18:02:8c:c0:e0:33:
                    97:e2:be:49:bd:9c:0a:21:27:26:53:fc:0c:6c:2f:
                    74:0b:21:91:1f:c7:b4:16:79:f7:1e:21:ac:97:6f:
                    6e:ee:d0:e9:80:93:02:04:13:61:26:2a:21:e2:21:
                    08:6f:a0:2b:88:b3:24:8e:e1:4a:68:b7:46:5e:b9:
                    91:8f:8b:5c:14:9e:36:df:13:3d:f7:ee:81:42:72:
                    88:ae:1a:bd:8c:45:1e:3d:95:66:30:21:b6:18:bb:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
            X509v3 Issuer Alternative Name: 
                URI:https://, DNS:*.gov.us, DNS:gov.us
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:f2:09:75:15:ac:2c:c0:9e:18:94:29:d1:a6:bb:42:9d:
         83:ad:b0:84:72:49:cd:b2:89:a8:91:93:62:14:8e:01:47:95:
         85:62:9a:e8:d9:b7:51:af:76:49:dd:16:a6:7f:dc:33:78:8b:
         57:7e:b0:95:61:0a:eb:38:5f:55:cf:11:c6:ae:6f:d6:6f:fd:
         55:f4:d3:f0:2b:f3:c9:0a:b0:f7:5b:ee:9b:c2:8f:94:66:b7:
         45:74:0b:80:84:04:09:d9:52:3a:ab:a6:72:9d:1f:bd:aa:71:
         e4:94:b9:a6:67:f2:69:81:f1:0a:43:54:c2:98:14:8d:ae:60:
         53:cc:f4:ea:40:ea:20:4f:8a:a8:03:7c:db:0d:d1:a7:16:9f:
         43:a2:e5:19:20:df:c2:b2:5a:3a:59:eb:4e:76:84:a6:12:3e:
         12:e9:7d:42:ac:6b:83:86:e6:db:d7:46:fe:03:c3:08:24:e3:
         b3:0d:57:e1:07:91:bc:b4:cf:94:03:cf:53:09:70:f9:79:fa:
         f4:9d:45:47:b9:bf:c5:0e:42:09:cf:dc:65:65:24:2a:86:d4:
         e2:1f:89:7d:a1:2c:3c:fd:24:a9:60:34:9e:00:10:d4:20:f5:
         d2:43:2f:1b:78:c9:35:98:9d:76:76:9b:d9:f8:b6:e8:27:4a:
         53:61:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
