Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct 14 23:43:03 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:9c:7e:49:74:f1:80:e8:6d:80:46:ae:6a:
                    7c:04:54:bf:94:31:16:34:9d:5f:3c:c6:3b:76:7f:
                    a6:f0:65:c7:cf:f8:22:42:ee:8e:9e:36:a2:3f:af:
                    31:ab:11:ff:e2:2c:99:71:0c:2d:71:88:44:8d:a9:
                    d2:b2:31:f1:a5:af:6a:c0:fa:58:57:c0:d1:f7:11:
                    5c:54:a9:75:b4:d2:b3:c8:45:09:46:17:e7:6d:f8:
                    1c:97:3d:28:db:0b:96:a3:e6:af:c6:15:fa:0e:26:
                    30:20:35:a0:ab:84:52:cc:6f:06:ee:7c:c9:42:d2:
                    58:2b:32:e5:c9:5c:0f:9f:5c:c9:e1:a7:bf:f2:75:
                    6a:ff:93:d4:4c:bb:11:1c:82:a9:7b:a6:fc:33:d2:
                    0f:70:7d:29:35:48:f8:2e:86:0a:9d:ad:ba:ce:6e:
                    2f:12:0f:ab:aa:85:94:8a:51:2f:6a:e1:41:62:56:
                    54:b7:e1:63:d7:63:8d:40:4f:49:20:9f:e9:3b:71:
                    03:d5:de:79:5c:9d:e8:59:7b:52:e0:18:84:7e:f7:
                    a4:85:02:de:d1:17:5a:b2:a1:c0:3f:fb:83:4e:8c:
                    53:ef:38:57:b6:fa:52:e8:7f:d3:1f:ef:b8:45:61:
                    19:13:7b:1a:e9:45:54:96:17:ad:b4:f6:78:63:4b:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:.example.com
            X509v3 Issuer Alternative Name: 
                URI:
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         74:05:f0:c6:93:c2:b6:56:88:b2:0e:c1:2b:cd:14:4c:fe:11:
         f1:4c:a1:ff:bd:9c:6f:7c:07:cc:0d:13:a8:27:d0:a5:45:b1:
         d2:f5:6c:2a:6a:56:0f:13:bf:f8:58:ad:f0:18:45:39:01:65:
         f9:09:5e:8f:df:f7:54:d2:9d:10:96:3b:99:04:5e:dc:56:f7:
         45:0a:51:35:a3:92:cd:cd:d6:53:79:e6:21:d8:25:4e:a7:c0:
         4d:68:29:9a:24:61:28:49:b1:56:7f:b4:c1:72:a9:d9:97:98:
         8c:56:8a:74:c9:74:b4:c8:99:8c:44:c5:e6:1b:83:c0:a1:ff:
         df:c5:67:4c:8d:b3:27:35:66:f4:64:e0:e8:2f:f2:e1:d9:fc:
         8a:c2:b7:5f:76:6a:c1:95:b4:10:d6:0e:b5:c4:82:fc:25:42:
         fe:f2:e1:f3:ea:6a:21:83:2a:ba:f6:9f:1d:35:98:3b:3b:de:
         fe:b4:46:eb:6c:f6:23:06:1c:17:1b:c0:82:de:05:e9:55:6e:
         90:8c:f0:c4:eb:fe:eb:b2:60:4f:45:8f:99:41:9c:20:95:60:
         96:3f:aa:19:9f:2a:7c:ff:6c:29:b5:c0:7a:41:00:07:3c:f2:
         fa:45:58:27:34:a6:a4:3b:66:81:b3:f0:42:de:bd:ab:b6:a3:
         b6:5e:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
