1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18008675309 (0x4316693ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Mother Nature, OU=Everything, CN=Name constraint
Validity
Not Before: Dec 1 06:07:08 2016 GMT
Not After : Oct 21 18:25:03 2036 GMT
Subject: CN=gov.us, OU=Chaos, O=Extreme Discord/street=3210 Holly Mill Run, L=Tallahassee, ST=FL/postalCode=30062, C=US/postalCode=90210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:be:25:40:40:05:02:6c:ea:d4:ff:5f:d8:6b:0b:
12:e3:02:5d:5b:8f:85:eb:d7:91:65:2c:59:51:83:
65:97:1b:0d:91:7f:72:ab:07:4e:fd:34:d5:63:07:
2b:c9:aa:19:78:4e:9b:bf:54:92:f7:d8:21:07:25:
04:ac:37:7f:6d:03:d5:c5:99:29:84:ef:f5:ae:2f:
67:cf:0f:07:ec:5c:8c:04:57:82:7f:2a:04:d9:84:
7d:dd:f7:14:46:5f:e0:c2:ff:de:25:c9:76:45:7b:
a3:e6:33:74:f1:9e:4c:cb:aa:f8:76:49:c1:77:f5:
2f:56:a4:90:24:3b:e0:8a:7e:9e:83:ec:32:2b:b3:
27:07:17:c0:2e:e1:ae:05:59:ea:60:00:e7:34:21:
11:48:63:0a:04:cb:d2:5b:a7:0f:be:a5:3c:c6:ab:
15:5e:74:30:c7:28:7b:8a:6a:20:b2:a2:d3:c7:c0:
b3:8d:5a:a7:97:1d:41:cf:2b:2b:0d:5a:01:bc:87:
79:7e:70:a2:13:a9:9f:4d:50:38:ac:21:08:2f:16:
29:47:3b:ee:93:f1:8c:1d:df:49:17:49:26:29:ae:
91:8a:fc:eb:fe:46:6c:73:3e:51:59:8a:3b:75:29:
bf:78:e3:41:b3:22:23:71:a9:8f:e9:3c:fd:37:ef:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment, Certificate Sign
X509v3 Extended Key Usage:
TLS Web Client Authentication, TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Authority Key Identifier:
keyid:01:02:03
Authority Information Access:
OCSP - URI:http://theca.net/ocsp
CA Issuers - URI:http://theca.net/totallythecert.crt
X509v3 Subject Alternative Name:
DNS:www.example.com
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.36305.2
Policy: 1.2.3.4.5
X509v3 Name Constraints:
Permitted:
email:good_email@gg.com
email:LulMail
DNS:permitted.com
DirName: C = US, O = UIUC, OU = ECE, L = Champaign, ST = IL, street = 601 Wright St, postalCode = 61820, CN = uiuc.net
IP:74.125.224.72/255.255.0.0
Excluded:
email:bad_email@gg.com
email:LulMail
DNS:banned.com
DirName: C = US, O = Umich, OU = CS, L = Ann Arbor, ST = MI, street = 500 State St, postalCode = 48109, CN = umich.net
IP:192.168.1.1/255.255.0.0
Signature Algorithm: sha256WithRSAEncryption
21:20:e0:50:9b:e3:e1:77:e3:5e:90:99:c7:07:4e:66:d8:d5:
3d:54:65:5b:d6:cf:80:b2:ae:3a:6d:3d:8c:3f:d1:ab:ed:f0:
61:ac:ad:b4:59:19:11:76:d8:e4:4b:b9:c5:d4:9d:b8:68:e2:
35:ca:19:98:35:cb:1e:9d:f6:32:a3:9e:06:56:90:53:3e:b4:
48:d3:40:4d:a3:66:a3:9b:c9:e3:9f:4a:fe:2d:8e:66:df:c1:
2e:02:e0:90:b7:64:e9:0e:18:c0:6f:c5:00:ba:e1:af:5b:ef:
2d:fe:a1:41:92:4c:d4:a6:5b:fb:0c:23:e4:c1:bd:11:01:1f:
68:13:aa:5e:8a:20:96:ea:20:ed:a2:90:29:ab:d6:db:ad:44:
30:aa:e1:37:bf:93:7f:fb:37:15:ae:95:f1:18:57:48:13:ae:
e6:7a:b9:d3:10:57:dd:5b:da:fd:62:7a:8b:37:58:9a:a0:3a:
94:85:9b:a0:d5:8e:aa:aa:9b:fa:a7:0e:08:45:2c:19:ba:fb:
f6:14:08:00:67:ce:4e:e4:c8:86:32:cd:23:25:39:34:fe:c2:
49:a0:5d:86:d7:64:19:f4:cd:65:8d:72:41:54:c3:df:36:a8:
27:e1:6c:08:a8:66:53:33:39:47:55:58:dd:e6:d3:10:57:d8:
27:22:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
|
