Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 14 22:57:49 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:c5:89:db:95:0b:dc:36:e5:41:7c:71:7d:
                    0f:a8:e2:dd:96:ce:61:d5:e8:51:ef:7d:c6:c1:ff:
                    39:6f:52:76:18:ec:11:97:68:4b:9f:83:fe:e5:7b:
                    dc:70:be:2f:45:9f:64:da:c0:81:4f:c5:11:27:0e:
                    bd:a9:b8:01:9c:9f:9a:ff:db:dd:f5:a0:e8:6d:b5:
                    b6:ce:f1:1c:dd:f1:08:24:3a:f1:70:67:73:bf:6d:
                    a0:c0:ab:c9:0d:92:2b:a3:24:24:33:ac:e0:19:89:
                    fc:dc:a1:2c:a1:17:2d:0d:a5:98:ce:6c:99:07:d3:
                    58:76:6b:ff:16:7e:13:13:3a:c7:ff:fa:c0:58:8b:
                    dd:14:5b:00:42:39:8a:1f:6a:d9:dc:6f:fd:ce:91:
                    a4:3d:2d:74:33:12:ab:eb:27:4b:b5:94:3b:56:b8:
                    8e:11:31:5e:48:c6:62:7f:a8:c2:ce:56:ae:86:53:
                    b5:2f:79:66:14:ec:64:ef:fd:0e:ce:09:b9:d0:24:
                    86:66:93:9f:d2:30:cb:20:c5:53:b7:42:eb:1b:48:
                    94:12:8a:d1:80:b4:fe:98:1d:78:96:b0:4c:5e:f4:
                    00:bc:6f:10:0b:4e:ad:29:27:61:24:13:96:a8:47:
                    0c:04:71:0e:f4:c7:6b:af:93:20:c2:34:30:3e:59:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.*.com
            X509v3 Issuer Alternative Name: 
                URI:
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         bd:bc:94:b4:c1:50:4d:cd:49:15:38:57:ef:fd:8b:25:c2:19:
         71:2f:af:b7:27:2a:a1:36:ce:07:8e:72:33:60:ea:46:ec:0b:
         aa:2d:93:a6:5b:f5:33:b6:5a:e3:dd:1e:db:02:e0:05:dc:90:
         df:6b:2d:80:f6:7a:89:59:34:73:44:80:fe:3e:a2:56:b5:5f:
         75:41:29:bd:73:01:ad:06:77:99:ac:d3:7e:37:57:df:02:fd:
         f1:e5:dc:b2:01:02:48:42:aa:87:98:e6:b3:cd:ae:29:33:e2:
         16:be:8d:25:ea:bd:c6:9f:f1:02:db:ed:8c:75:fe:93:45:4f:
         76:69:29:3b:56:ff:39:a5:fc:82:f5:7b:e2:86:40:ae:eb:c3:
         83:a1:01:7d:06:7f:67:8c:05:be:65:12:b9:55:0b:ba:f0:d5:
         05:79:49:3c:d8:01:97:fd:0e:34:bc:c4:eb:71:a0:22:4f:c6:
         4c:b3:d7:2e:af:23:91:3a:10:0c:2b:3e:1f:0a:60:09:6e:92:
         c4:a0:16:fe:96:bb:e3:e8:9f:18:c8:1e:6f:fb:ad:e3:b0:39:
         0b:65:0b:01:6a:45:5f:f1:f4:1a:11:7b:0d:31:4f:3f:9a:e5:
         8a:91:b5:6c:c4:20:dc:aa:36:a4:a9:95:31:52:ad:0e:35:38:
         7e:25:f9:6a
-----BEGIN CERTIFICATE-----
MIIGHTCCBQegAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRgw
FgYDVQQDEw9OYW1lIGNvbnN0cmFpbnQxADAiGA8yMDU1MTIwMTA2MDcwOFoYDzIw
NTYxMDE0MjI1NzQ5WjCBmzELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0V4dHJlbWUg
RGlzY29yZDEOMAwGA1UECxMFQ2hhb3MxFDASBgNVBAcTC1RhbGxhaGFzc2VlMQsw
CQYDVQQIEwJGTDEcMBoGA1UECRMTMzIxMCBIb2xseSBNaWxsIFJ1bjEOMAwGA1UE
ERMFMzAwNjIxDzANBgNVBAMTBmdvdi51czEAMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr0rFiduVC9w25UF8cX0PqOLdls5h1ehR733Gwf85b1J2GOwR
l2hLn4P+5XvccL4vRZ9k2sCBT8URJw69qbgBnJ+a/9vd9aDobbW2zvEc3fEIJDrx
cGdzv22gwKvJDZIroyQkM6zgGYn83KEsoRctDaWYzmyZB9NYdmv/Fn4TEzrH//rA
WIvdFFsAQjmKH2rZ3G/9zpGkPS10MxKr6ydLtZQ7VriOETFeSMZif6jCzlauhlO1
L3lmFOxk7/0Ozgm50CSGZpOf0jDLIMVTt0LrG0iUEorRgLT+mB14lrBMXvQAvG8Q
C06tKSdhJBOWqEcMBHEO9Mdrr5MgwjQwPlmESwIDAQABo4ICqjCCAqYwDgYDVR0P
AQH/BAQDAgCkMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAPBgNVHRMB
Af8EBTADAQH/MA4GA1UdIwQHMAWAAwECAzBiBggrBgEFBQcBAQRWMFQwIQYIKwYB
BQUHMAGGFWh0dHA6Ly90aGVjYS5uZXQvb2NzcDAvBggrBgEFBQcwAoYjaHR0cDov
L3RoZWNhLm5ldC90b3RhbGx5dGhlY2VydC5jcnQwFAYDVR0RBA0wC4IJd3d3Liou
Y29tMA4GA1UdEgQHMAWGAxcYGTAbBgNVHSAEFDASMAgGBmeBDAECAjAGBgQqAwQF
MIIBqwYDVR0eBIIBojCCAZ6ggc4wE4ERZ29vZF9lbWFpbEBnZy5jb20wCYEHTHVs
TWFpbDAPgg1wZXJtaXR0ZWQuY29tMIGOpIGLMIGIMQswCQYDVQQGEwJVUzENMAsG
A1UEChMEVUlVQzEMMAoGA1UECxMDRUNFMRIwEAYDVQQHEwlDaGFtcGFpZ24xCzAJ
BgNVBAgTAklMMRYwFAYDVQQJEw02MDEgV3JpZ2h0IFN0MQ4wDAYDVQQREwU2MTgy
MDERMA8GA1UEAxMIdWl1Yy5uZXQxADAKhwhKfeBI//8AAKGByjASgRBiYWRfZW1h
aWxAZ2cuY29tMAmBB0x1bE1haWwwDIIKYmFubmVkLmNvbTCBjqSBizCBiDELMAkG
A1UEBhMCVVMxDjAMBgNVBAoTBVVtaWNoMQswCQYDVQQLEwJDUzESMBAGA1UEBxMJ
QW5uIEFyYm9yMQswCQYDVQQIEwJNSTEVMBMGA1UECRMMNTAwIFN0YXRlIFN0MQ4w
DAYDVQQREwU0ODEwOTESMBAGA1UEAxMJdW1pY2gubmV0MQAwCocIwKgBAf//AAAw
CwYJKoZIhvcNAQELA4IBAQC9vJS0wVBNzUkVOFfv/YslwhlxL6+3JyqhNs4HjnIz
YOpG7AuqLZOmW/Uztlrj3R7bAuAF3JDfay2A9nqJWTRzRID+PqJWtV91QSm9cwGt
BneZrNN+N1ffAv3x5dyyAQJIQqqHmOazza4pM+IWvo0l6r3Gn/EC2+2Mdf6TRU92
aSk7Vv85pfyC9XvihkCu68ODoQF9Bn9njAW+ZRK5VQu68NUFeUk82AGX/Q40vMTr
caAiT8ZMs9curyOROhAMKz4fCmAJbpLEoBb+lrvj6J8YyB5v+63jsDkLZQsBakVf
8fQaEXsNMU8/muWKkbVsxCDcqjakqZUxUq0ONTh+Jflq
-----END CERTIFICATE-----
