Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US/street=POUR wine and dance if manhood still have pride, Bring roses if the rose be yet in bloom; The cataract smokes upon the mountain side, Our Father Rosicross is in his tomb.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:db:3a:f2:a9:9c:e3:25:36:ab:f9:7a:86:
                    97:7b:32:d8:2d:9e:17:88:4c:32:7f:eb:6c:3e:e4:
                    87:ca:66:73:69:4f:75:6b:19:a9:e9:21:13:11:2b:
                    dd:80:00:ba:36:b0:f2:7b:5d:27:19:b5:6d:5a:9f:
                    88:03:58:fa:a8:35:1f:47:0f:e7:fd:f9:bc:6f:da:
                    e4:15:e1:12:10:18:69:98:06:0d:f3:16:40:6a:a4:
                    c0:f1:0a:66:e4:f0:a0:d6:3a:e8:8c:9d:eb:b2:5d:
                    18:0b:08:90:05:a1:f7:48:39:a8:7c:4c:85:ea:67:
                    8f:d1:c2:3e:9b:ab:a4:75:06:e9:9b:84:a0:92:ee:
                    c8:a4:ba:0c:08:38:bc:71:11:28:69:be:d3:c2:1e:
                    46:4e:d2:c0:e2:22:60:8c:cb:20:c4:88:29:c9:f2:
                    08:dd:b7:89:c8:1a:21:0d:e4:74:32:42:de:9a:ba:
                    80:0f:c1:ef:fb:c9:19:61:6d:bb:dc:c2:09:8a:e6:
                    a6:8c:dd:a8:7a:87:92:d0:0a:ed:8f:f8:7f:5d:bf:
                    36:eb:49:ea:85:ef:27:0e:4b:b4:78:92:0d:02:fb:
                    2e:f1:21:57:d9:27:25:3a:14:af:42:0d:43:bd:a7:
                    7a:cd:13:7e:07:b3:d5:ca:f3:b7:0b:79:15:af:b9:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:f1:87:88:e7:3f:c7:8e:de:6f:48:50:38:7b:c7:0d:8f:
         2f:a3:82:09:b7:6c:71:32:0a:b6:6f:ca:56:5d:78:6e:14:54:
         f0:f4:4f:f1:f7:1a:c3:48:19:e4:ff:2f:af:7f:79:f3:4a:de:
         31:19:f1:da:d1:fc:c2:21:dd:d0:0d:53:3f:2a:c0:bc:1e:31:
         db:1a:24:c1:f4:94:dd:d8:f6:18:01:08:8e:5e:bf:28:d3:ef:
         20:fc:74:64:43:19:46:fa:fe:7c:42:fa:6c:b6:a1:f0:b4:e8:
         9c:c3:6d:66:a6:da:4d:21:fd:3a:a8:a7:ca:dd:ef:08:7f:9e:
         98:05:26:66:71:c2:7d:84:36:3a:33:21:dc:9e:f7:04:70:cb:
         b6:b4:21:56:84:70:b7:e7:ed:1c:fa:6a:03:eb:3a:e1:38:3a:
         c4:99:07:2f:62:35:c6:d2:ce:6a:ae:48:11:93:71:a7:b4:15:
         81:52:c2:ae:66:9c:c1:cf:bf:f7:52:c5:fd:22:23:54:c1:91:
         4c:d3:04:d2:79:80:f8:62:26:e2:8e:77:06:ea:d6:0b:df:09:
         41:0c:53:86:e4:96:ff:b7:ab:52:20:d8:31:e8:bb:20:fd:bb:
         ce:3f:2a:62:c0:bd:e9:16:9d:af:0f:0a:b3:a3:a4:e9:ea:b1:
         1b:80:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
