1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18008675309 (0x4316693ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
Validity
Not Before: Dec 1 06:07:08 2055 GMT
Not After : Oct 5 23:52:58 2056 GMT
Subject: C=US, O=Extreme Discord, OU=Chaos, L=Tallahassee, ST=FL/street=3210 Holly Mill Run/postalCode=30062, CN=gov.us
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (512 bit)
Modulus:
00:e3:84:f7:f1:0d:3c:24:e1:ab:03:2d:c5:23:29:
32:6b:65:62:c6:60:a6:e4:96:1c:12:16:9d:c9:57:
c6:f7:5e:66:c7:66:4f:26:c0:42:1f:a0:b5:88:f1:
01:80:3b:b2:2b:a2:f3:b4:87:ae:3f:a9:2e:4a:d2:
d3:bb:86:db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment, Certificate Sign
X509v3 Extended Key Usage:
TLS Web Client Authentication, TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Authority Key Identifier:
keyid:01:02:03
Authority Information Access:
OCSP - URI:http://theca.net/ocsp
CA Issuers - URI:http://theca.net/totallythecert.crt
X509v3 Subject Alternative Name:
URI:irrelevantinfo//user@192.168.1.1, DNS:www.dns.com
X509v3 Issuer Alternative Name:
<EMPTY>
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.2
Policy: 1.2.3.4.5
X509v3 Name Constraints:
Permitted:
email:good_email@gg.com
email:LulMail
DNS:permitted.com
DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
IP:74.125.224.72/255.255.0.0
Excluded:
email:bad_email@gg.com
email:LulMail
DNS:banned.com
DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
IP:192.168.1.1/255.255.0.0
X509v3 Issuer Alternative Name:
<EMPTY>
Signature Algorithm: sha256WithRSAEncryption
51:a0:82:31:c9:fc:9e:bf:f8:69:16:76:df:16:2d:02:61:62:
e2:cd:02:59:de:6d:9b:83:0c:8c:1a:94:e7:ec:98:f4:9a:01:
db:0c:3b:bc:44:fa:c7:37:12:7f:6e:21:e1:0a:9c:77:b7:a2:
49:c7:dd:b0:bf:22:86:28:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
|
