Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 15 12:06:35 2036 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:58:fc:69:a2:6c:6b:4d:ca:c4:8a:d6:bd:
                    b7:d3:26:44:e1:80:cc:f1:6d:a8:ab:3e:e3:e2:7f:
                    55:9a:99:56:43:05:65:f4:db:d4:50:7e:ad:48:c2:
                    7b:57:db:29:96:80:77:71:89:a2:68:b3:76:03:1a:
                    f8:40:47:ee:81:eb:97:67:c8:d0:67:80:13:cd:1c:
                    51:ee:6d:68:34:db:bf:cd:fc:54:f8:f9:51:d2:41:
                    10:67:fe:f2:a9:0d:1e:58:ee:47:49:6b:c7:d1:cd:
                    3e:cd:85:59:de:30:7d:5a:e1:6b:aa:11:96:52:ed:
                    6d:34:28:0a:4f:41:b9:1c:1f:7c:e3:ac:0a:a5:cc:
                    6f:ff:81:47:49:26:02:47:25:56:40:78:e2:a4:6a:
                    c3:05:15:3c:71:31:76:20:a5:c8:29:bd:08:1e:73:
                    04:7a:99:47:f2:fa:d9:96:17:2e:bd:32:5a:09:74:
                    d2:e0:cd:9f:62:70:ec:5b:83:8b:b5:8c:06:79:11:
                    77:dc:73:51:17:9c:7f:fb:a1:26:06:9b:4d:5b:b5:
                    36:52:06:46:a6:16:dc:46:71:eb:e8:df:68:1f:e3:
                    ef:d5:c8:14:24:c9:60:42:9e:5b:f6:6d:3a:11:94:
                    3d:bf:d0:92:18:3b:cd:e9:a8:fd:40:cc:5f:5d:4d:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Issuer Alternative Name: 
                URI:, DNS:*.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:87:fc:f6:49:7f:eb:48:c6:9f:d4:86:64:33:e8:ca:2a:
         ab:f4:ab:f7:56:62:05:12:e6:47:6f:43:31:0a:34:5f:d2:9a:
         aa:0d:de:ef:29:e3:4f:33:b2:1c:e5:ca:e8:73:ab:b4:02:0d:
         80:d1:ec:9e:bb:a9:53:63:4e:29:e1:05:fc:fe:43:19:f8:7e:
         8b:c8:ae:9c:70:63:3e:35:44:a7:ef:be:7b:6c:a7:c7:55:6e:
         13:76:16:6a:14:06:11:ce:47:df:53:5e:f1:52:df:74:47:03:
         d0:9d:74:58:4b:50:fb:b2:c8:49:6f:8d:e6:0b:07:e8:4c:84:
         5c:47:63:a1:19:a7:c7:7e:e8:fd:0b:85:ff:1c:97:ad:dd:36:
         d8:e2:60:72:56:a5:53:6c:8c:55:ef:92:1f:db:b3:de:51:c3:
         c9:ef:b6:21:14:9b:1d:89:fb:fb:8f:05:bd:52:4f:10:78:93:
         1d:1a:99:64:22:99:21:c8:68:98:de:9e:33:d0:c4:67:fd:7a:
         4d:16:03:16:12:dc:94:e4:d5:58:eb:00:0c:39:91:6b:f8:63:
         07:46:8b:18:93:b5:d7:1e:d1:17:c9:ae:60:2a:c7:e5:83:da:
         f8:43:d8:82:9e:5a:82:8a:cd:55:c5:f2:4b:4c:53:ce:ca:76:
         c6:d4:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
