Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  5 17:44:04 2056 GMT
        Subject: C=US, O=Extreme Discord, OU=Chaos, L=Tallahassee, ST=FL/street=3210 Holly Mill Run/postalCode=30062, CN=gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:b7:ba:81:db:c5:6a:c4:5d:ef:25:d1:3d:
                    bd:e0:c4:db:ca:3d:56:f2:1c:aa:61:38:c7:7f:b4:
                    6a:02:6c:63:1e:07:e2:f0:93:66:5d:9f:42:a6:11:
                    19:17:ff:e6:36:11:d0:a8:c6:7c:e4:b5:4e:db:10:
                    20:21:8b:ac:ac:62:20:11:86:26:50:ed:37:b5:14:
                    3d:23:a8:34:97:04:47:71:5f:0a:aa:44:80:76:89:
                    e7:bd:2a:dc:e7:24:35:ab:1b:4b:08:a5:cf:9b:83:
                    a6:21:6e:60:fe:e3:22:b3:0f:77:98:c2:1b:b3:39:
                    73:ca:53:eb:f4:7b:41:2d:f7:41:c9:4d:44:85:10:
                    5c:2d:5c:97:39:18:2f:49:a1:cd:40:f4:83:32:2a:
                    8d:82:2c:60:77:d7:cb:dc:85:55:04:ba:cd:a8:19:
                    a1:a2:e6:22:7f:ea:f1:1f:4a:38:2f:dd:bf:a6:a8:
                    36:f2:87:c6:73:5e:31:58:64:25:0f:54:4c:f1:2b:
                    c6:05:ae:00:15:61:81:f8:8b:6b:f9:7c:b3:9d:46:
                    3b:eb:5b:5e:cd:d8:3e:61:3e:3c:11:cb:6a:58:e0:
                    a2:44:2c:51:a7:1d:07:9d:09:70:5b:d8:22:4a:ef:
                    a3:6a:25:9c:83:ef:b9:78:b7:e6:cb:df:78:c2:d0:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.dns.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         28:06:8c:11:3e:4e:54:9b:68:7d:eb:8e:bc:18:dc:f2:1d:4d:
         db:1c:c8:2e:b9:29:ae:21:cd:bd:78:12:32:7c:de:48:2f:fb:
         f5:23:6e:3a:16:66:61:53:ce:c8:c9:f7:8b:78:f4:d2:2a:ae:
         2a:f6:59:21:9b:a4:9b:af:14:b4:f7:2e:a3:d8:18:43:59:9d:
         4a:09:00:6c:fc:94:26:02:61:fc:6d:92:49:c2:0d:88:60:94:
         0e:cb:17:9e:2e:ea:10:4e:bc:27:c4:d8:71:16:59:7b:26:bf:
         4b:bb:bb:b0:29:7c:34:65:e7:3c:0e:56:47:32:f9:37:2f:58:
         f5:d7:d4:3b:3f:bc:94:88:28:40:0a:e9:9e:6d:29:ae:74:4a:
         8e:0d:fb:01:c9:2e:d8:8e:df:6c:59:0c:a4:6a:74:be:0c:c0:
         08:7e:e0:4d:e5:11:20:d6:1e:78:80:be:0b:1e:9c:82:81:ba:
         27:11:a0:03:cf:c6:c0:6f:88:7c:04:af:ff:86:1c:d6:2f:79:
         86:55:b5:ba:a5:8f:da:9c:63:38:72:68:7d:de:b2:c3:fb:88:
         95:7d:1a:df:21:73:2c:ed:ef:05:a6:8a:8d:8c:65:25:d0:21:
         c9:2f:98:70:9c:5a:d3:3c:1d:de:8d:40:8d:4b:94:6f:46:53:
         b1:41:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
