Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2016 GMT
            Not After : Oct 21 18:25:03 2036 GMT
        Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US/postalCode=90210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:25:40:40:05:02:6c:ea:d4:ff:5f:d8:6b:0b:
                    12:e3:02:5d:5b:8f:85:eb:d7:91:65:2c:59:51:83:
                    65:97:1b:0d:91:7f:72:ab:07:4e:fd:34:d5:63:07:
                    2b:c9:aa:19:78:4e:9b:bf:54:92:f7:d8:21:07:25:
                    04:ac:37:7f:6d:03:d5:c5:99:29:84:ef:f5:ae:2f:
                    67:cf:0f:07:ec:5c:8c:04:57:82:7f:2a:04:d9:84:
                    7d:dd:f7:14:46:5f:e0:c2:ff:de:25:c9:76:45:7b:
                    a3:e6:33:74:f1:9e:4c:cb:aa:f8:76:49:c1:77:f5:
                    2f:56:a4:90:24:3b:e0:8a:7e:9e:83:ec:32:2b:b3:
                    27:07:17:c0:2e:e1:ae:05:59:ea:60:00:e7:34:21:
                    11:48:63:0a:04:cb:d2:5b:a7:0f:be:a5:3c:c6:ab:
                    15:5e:74:30:c7:28:7b:8a:6a:20:b2:a2:d3:c7:c0:
                    b3:8d:5a:a7:97:1d:41:cf:2b:2b:0d:5a:01:bc:87:
                    79:7e:70:a2:13:a9:9f:4d:50:38:ac:21:08:2f:16:
                    29:47:3b:ee:93:f1:8c:1d:df:49:17:49:26:29:ae:
                    91:8a:fc:eb:fe:46:6c:73:3e:51:59:8a:3b:75:29:
                    bf:78:e3:41:b3:22:23:71:a9:8f:e9:3c:fd:37:ef:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                DNS:www.example.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.36305.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         21:20:e0:50:9b:e3:e1:77:e3:5e:90:99:c7:07:4e:66:d8:d5:
         3d:54:65:5b:d6:cf:80:b2:ae:3a:6d:3d:8c:3f:d1:ab:ed:f0:
         61:ac:ad:b4:59:19:11:76:d8:e4:4b:b9:c5:d4:9d:b8:68:e2:
         35:ca:19:98:35:cb:1e:9d:f6:32:a3:9e:06:56:90:53:3e:b4:
         48:d3:40:4d:a3:66:a3:9b:c9:e3:9f:4a:fe:2d:8e:66:df:c1:
         2e:02:e0:90:b7:64:e9:0e:18:c0:6f:c5:00:ba:e1:af:5b:ef:
         2d:fe:a1:41:92:4c:d4:a6:5b:fb:0c:23:e4:c1:bd:11:01:1f:
         68:13:aa:5e:8a:20:96:ea:20:ed:a2:90:29:ab:d6:db:ad:44:
         30:aa:e1:37:bf:93:7f:fb:37:15:ae:95:f1:18:57:48:13:ae:
         e6:7a:b9:d3:10:57:dd:5b:da:fd:62:7a:8b:37:58:9a:a0:3a:
         94:85:9b:a0:d5:8e:aa:aa:9b:fa:a7:0e:08:45:2c:19:ba:fb:
         f6:14:08:00:67:ce:4e:e4:c8:86:32:cd:23:25:39:34:fe:c2:
         49:a0:5d:86:d7:64:19:f4:cd:65:8d:72:41:54:c3:df:36:a8:
         27:e1:6c:08:a8:66:53:33:39:47:55:58:dd:e6:d3:10:57:d8:
         27:22:98:80
-----BEGIN CERTIFICATE-----
MIIGIDCCBQqgAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRgw
FgYDVQQDEw9OYW1lIGNvbnN0cmFpbnQxADAeFw0xNjEyMDEwNjA3MDhaFw0zNjEw
MjExODI1MDNaMIGpMQ8wDQYDVQQDEwZnb3YudXMxDjAMBgNVBAsTBUNoYW9zMRgw
FgYDVQQKEw9FeHRyZW1lIERpc2NvcmQxHDAaBgNVBAkTEzMyMTAgSG9sbHkgTWls
bCBSdW4xFDASBgNVBAcTC1RhbGxhaGFzc2VlMQswCQYDVQQIEwJGTDEOMAwGA1UE
ERMFMzAwNjIxCzAJBgNVBAYTAlVTMQ4wDAYDVQQREwU5MDIxMDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAL4lQEAFAmzq1P9f2GsLEuMCXVuPhevXkWUs
WVGDZZcbDZF/cqsHTv001WMHK8mqGXhOm79UkvfYIQclBKw3f20D1cWZKYTv9a4v
Z88PB+xcjARXgn8qBNmEfd33FEZf4ML/3iXJdkV7o+YzdPGeTMuq+HZJwXf1L1ak
kCQ74Ip+noPsMiuzJwcXwC7hrgVZ6mAA5zQhEUhjCgTL0lunD76lPMarFV50MMco
e4pqILKi08fAs41ap5cdQc8rKw1aAbyHeX5wohOpn01QOKwhCC8WKUc77pPxjB3f
SRdJJimukYr86/5GbHM+UVmKO3Upv3jjQbMiI3Gpj+k8/Tfva0sCAwEAAaOCAqMw
ggKfMA4GA1UdDwEB/wQEAwIApDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHSMEBzAFgAMBAgMwYgYIKwYBBQUHAQEE
VjBUMCEGCCsGAQUFBzABhhVodHRwOi8vdGhlY2EubmV0L29jc3AwLwYIKwYBBQUH
MAKGI2h0dHA6Ly90aGVjYS5uZXQvdG90YWxseXRoZWNlcnQuY3J0MBoGA1UdEQQT
MBGCD3d3dy5leGFtcGxlLmNvbTAeBgNVHSAEFzAVMAsGCSsGAQQBgptRAjAGBgQq
AwQFMIIBqwYDVR0eBIIBojCCAZ6ggc4wE4ERZ29vZF9lbWFpbEBnZy5jb20wCYEH
THVsTWFpbDAPgg1wZXJtaXR0ZWQuY29tMIGOpIGLMIGIMQswCQYDVQQGEwJVUzEN
MAsGA1UEChMEVUlVQzEMMAoGA1UECxMDRUNFMRIwEAYDVQQHEwlDaGFtcGFpZ24x
CzAJBgNVBAgTAklMMRYwFAYDVQQJEw02MDEgV3JpZ2h0IFN0MQ4wDAYDVQQREwU2
MTgyMDERMA8GA1UEAxMIdWl1Yy5uZXQxADAKhwhKfeBI//8AAKGByjASgRBiYWRf
ZW1haWxAZ2cuY29tMAmBB0x1bE1haWwwDIIKYmFubmVkLmNvbTCBjqSBizCBiDEL
MAkGA1UEBhMCVVMxDjAMBgNVBAoTBVVtaWNoMQswCQYDVQQLEwJDUzESMBAGA1UE
BxMJQW5uIEFyYm9yMQswCQYDVQQIEwJNSTEVMBMGA1UECRMMNTAwIFN0YXRlIFN0
MQ4wDAYDVQQREwU0ODEwOTESMBAGA1UEAxMJdW1pY2gubmV0MQAwCocIwKgBAf//
AAAwCwYJKoZIhvcNAQELA4IBAQAhIOBQm+Phd+NekJnHB05m2NU9VGVb1s+Asq46
bT2MP9Gr7fBhrK20WRkRdtjkS7nF1J24aOI1yhmYNcsenfYyo54GVpBTPrRI00BN
o2ajm8njn0r+LY5m38EuAuCQt2TpDhjAb8UAuuGvW+8t/qFBkkzUplv7DCPkwb0R
AR9oE6peiiCW6iDtopApq9bbrUQwquE3v5N/+zcVrpXxGFdIE67mernTEFfdW9r9
YnqLN1iaoDqUhZug1Y6qqpv6pw4IRSwZuvv2FAgAZ85O5MiGMs0jJTk0/sJJoF2G
12QZ9M1ljXJBVMPfNqgn4WwIqGZTMzlHVVjd5tMQV9gnIpiA
-----END CERTIFICATE-----
