Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008675309 (0x4316693ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Mother Nature, OU = Everything, CN = Name constraint
        Validity
            Not Before: Dec  1 06:07:08 2055 GMT
            Not After : Oct  5 18:02:39 2056 GMT
        Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:6c:e5:e5:6d:ed:fd:1f:e0:f5:80:a1:93:
                    b7:f9:c3:0c:50:02:65:f7:b6:fd:ef:04:a0:e2:40:
                    23:9f:e2:e5:ac:f2:34:a5:df:f7:59:b2:a4:1c:ba:
                    9b:29:a6:64:8b:9f:5b:c8:e3:a3:36:9e:48:15:36:
                    c1:54:6c:da:76:15:10:80:24:85:9d:37:4d:6d:bb:
                    0f:33:a9:32:bb:06:1f:d8:f5:6e:0a:3c:3b:bf:24:
                    5e:58:b6:28:28:46:bf:c8:ba:c4:82:4b:cc:cc:1c:
                    da:ea:1d:bc:81:10:7d:dd:8e:89:de:92:50:1d:f2:
                    a6:f9:cf:e4:a0:a8:11:34:cb:60:29:26:01:84:10:
                    ec:84:b5:69:84:00:62:c9:c8:f0:01:a4:d5:13:d3:
                    a6:50:54:c1:83:b8:5d:1c:53:80:8d:5a:93:84:3c:
                    ce:72:6b:92:d0:d6:6c:e0:2d:a3:6d:ae:86:e7:68:
                    4e:87:24:61:9a:2f:35:94:a8:63:50:7a:31:64:49:
                    56:62:a9:0e:af:f8:61:14:7b:0c:8a:a2:50:68:09:
                    b2:30:51:0e:fe:fd:76:4b:82:b5:dc:4b:62:ed:0d:
                    2b:f8:7e:37:49:b2:24:93:c9:af:a1:69:59:85:98:
                    43:c5:42:18:ba:1a:94:10:7d:66:d3:68:df:a5:27:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:01:02:03

            Authority Information Access: 
                OCSP - URI:http://theca.net/ocsp
                CA Issuers - URI:http://theca.net/totallythecert.crt

            X509v3 Subject Alternative Name: 
                URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
            X509v3 Issuer Alternative Name: 
                DNS:
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.2.3.4.5

            X509v3 Name Constraints: 
                Permitted:
                  email:good_email@gg.com
                  email:LulMail
                  DNS:permitted.com
                  DirName:C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
                  IP:74.125.224.72/255.255.0.0
                Excluded:
                  email:bad_email@gg.com
                  email:LulMail
                  DNS:banned.com
                  DirName:C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
                  IP:192.168.1.1/255.255.0.0

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:a5:c5:f3:2d:1c:1c:17:c3:6f:14:1d:0c:f5:83:85:40:
         42:94:59:dd:d8:bc:ef:09:18:55:8a:c7:39:91:59:59:96:30:
         14:e3:17:69:a2:4a:34:50:db:4f:42:83:cd:c0:7a:63:e4:f6:
         c7:92:78:f9:ec:24:37:34:6a:a1:86:5f:a9:d0:d3:3c:fe:3c:
         66:5d:80:da:ee:fc:a2:55:1c:c1:0e:91:f0:7d:e7:18:20:c0:
         b6:ca:f9:4d:82:d9:25:88:ed:c8:4a:7b:36:05:b3:8d:70:90:
         12:45:39:ad:f0:9b:67:17:a5:f6:a8:98:b6:47:75:e3:a8:d8:
         42:71:dd:45:cd:a6:1f:f2:59:ef:6a:08:50:78:bb:43:6b:34:
         a2:b2:70:cc:56:9c:98:b6:76:bf:4f:e7:29:eb:60:68:ea:70:
         1b:62:35:18:45:58:d0:6a:1c:b7:0a:82:a6:b1:08:6f:e7:ac:
         d5:c4:56:1a:ff:45:ce:9a:96:5c:78:b2:6a:ac:c6:86:a8:bf:
         c9:0c:a2:22:6a:37:02:6a:b4:25:41:ba:1f:63:bb:dd:a7:92:
         a4:0d:fd:aa:a0:f4:de:5f:54:66:9e:00:54:cf:40:aa:33:5a:
         74:4a:af:86:76:82:1c:7f:85:47:0e:ed:10:2d:4f:b0:7a:4f:
         bc:7d:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
