certificate with nameConstraints extension

-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIIGN2Hrh9Ltm0wDQYJKoZIhvcNAQEFBQAwgZUxCzAJBgNV
BAYTAkdSMUQwQgYDVQQKEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2gg
SW5zdGl0dXRpb25zIENlcnQuIEF1dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMg
QWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBSb290Q0EgMjAxMTAe
Fw0xNDAxMDkxMjQ0MzlaFw0yMjAxMDcxMjQ0MzlaMIGQMQswCQYDVQQGEwJHUjFE
MEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0
aW9ucyBDZXJ0LiBBdXRob3JpdHkxOzA5BgNVBAMTMkFyaXN0b3RsZSBVbml2ZXJz
aXR5IG9mIFRoZXNzYWxvbmlraSBDZW50cmFsIENBIFI0MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAm/jPKZJhjmY5UuXhfw/hQTmQcmIDKf93D83zyeBy
XS8FWhNzuxUNd82W/z2dDcKAz9+1e/SFOOE194EPRK8sNqiY2WKLdqYVWKbtiiGq
NkWlBDCn9fw/p9+k7ZRPHAhWOpxX2dMNtk5DSkA0biIkz9MlaFsDauoCo0KhnwlD
qjFW7Yr0ALnSgmoogtHSRNAV/6cnuvsZmZR8z/3o9IGwgIaE4SKV5F2QM4Y1+Rrm
3UrprwoJX5P22k1/KwoK8qlq/RN9BpCtOLeJhaiYk+4q/2zMRgsKUzs8UgFNnZFc
Sk468Nd3whs9k6pm6bQollgou1EE/t7f6qMPyc0qqPGLIwIDAQABo4ICjzCCAosw
DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFPWTF0od
c7Z/fyCypRSUV3IZMzbSMEYGA1UdHwQ/MD0wO6A5oDeGNWh0dHA6Ly9jcmx2MS5o
YXJpY2EuZ3IvSGFyaWNhUm9vdENBMjAxMS9jcmx2MS5kZXIuY3JsMB8GA1UdIwQY
MBaAFKaRQv0TYUojngikKeXYEwQj7kElMG4GCCsGAQUFBwEBBGIwYDAhBggrBgEF
BQcwAYYVaHR0cDovL29jc3AuaGFyaWNhLmdyMDsGCCsGAQUFBzAChi9odHRwOi8v
d3d3LmhhcmljYS5nci9jZXJ0cy9IYXJpY2FSb290Q0EyMDExLnBlbTCCAT8GA1Ud
IASCATYwggEyMIIBLgYMKwYBBAGBzxEBAAIHMIIBHDAyBggrBgEFBQcCARYmaHR0
cDovL3d3dy5oYXJpY2EuZ3IvZG9jdW1lbnRzL0NQUy5waHAwgeUGCCsGAQUFBwIC
MIHYMEoWQ0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlv
bnMgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBiVRoaXMgY2VydGlmaWNh
dGUgaXMgc3ViamVjdCB0byBHcmVlayBsYXdzIGFuZCBvdXIgQ1BTLiBUaGlzIENl
cnRpZmljYXRlIG11c3Qgb25seSBiZSB1c2VkIGZvciBhY2FkZW1pYywgcmVzZWFy
Y2ggb3IgZWR1Y2F0aW9uYWwgcHVycG9zZXMuMC0GA1UdHgQmMCSgIjAJggdhdXRo
LmdyMAmBB2F1dGguZ3IwCoEILmF1dGguZ3IwDQYJKoZIhvcNAQEFBQADggEBAFdQ
qNPzPrb9LtsKAoD2hkfW7Hp1Sec9/YbNieuFBUBze3WeMZZiRD5GdDcJh/2y4y0z
exPF/+P8HZjfTXk8eGNnKSQbq3CKOcceJOikPjNIA9C61Q+rYcEdKk/u7tBdJEnO
SgS2p27aq5UGHfFqI3AY0OxO4ZKcIV0s7u/V+5afz1K5lZERDp311fEFv2N5cph3
N+HPseXRHeYHKZ+/PGcuJN9/lyzs9BnnwyJ8KFJ0h7hAg4vL4Btl3nopQLaO2vmr
qGLrgboCe9AmmMsjyRSUYtGLlgY96FykXbWJUlOfh5g0/2dpbvZOXc6AZuRGWb9/
MyiXfxLbPQhLACiVDKQ=
-----END CERTIFICATE-----

{
  "id": 2,
  "serialNumber": "18dd87ae1f4bb66d",
  "version": 3,
  "signatureAlgorithm": "SHA1WithRSA",
  "issuer": {
    "c": [
      "GR"
    ],
    "o": [
      "Hellenic Academic and Research Institutions Cert. Authority"
    ],
    "cn": "Hellenic Academic and Research Institutions RootCA 2011"
  },
  "validity": {
    "notBefore": "2014-01-09T12:44:39Z",
    "notAfter": "2022-01-07T12:44:39Z"
  },
  "subject": {
    "c": [
      "GR"
    ],
    "o": [
      "Hellenic Academic and Research Institutions Cert. Authority"
    ],
    "cn": "Aristotle University of Thessaloniki Central CA R4"
  },
  "key": {
    "alg": "RSA",
    "size": 2048,
    "exponent": 65537
  },
  "x509v3Extensions": {
    "authorityKeyId": "ppFC/RNhSiOeCKQp5dgTBCPuQSU=",
    "subjectKeyId": "9ZMXSh1ztn9/ILKlFJRXchkzNtI=",
    "keyUsage": [
      "Certificate Sign",
      "CRL Sign"
    ],
    "crlDistributionPoint": [
      "http://crlv1.harica.gr/HaricaRootCA2011/crlv1.der.crl"
    ],
    "policyIdentifiers": [
      "1.3.6.1.4.1.26513.1.0.2.7"
    ],
    "permittedDomains": [
      "auth.gr"
    ]
  },
  "x509v3BasicConstraints": "Critical",
  "ca": true,
  "firstSeenTimestamp": "2016-10-12T16:19:38.361934Z",
  "lastSeenTimestamp": "2016-10-12T16:19:38.361934Z",
  "hashes": {
    "sha1": "36C67999F9013C8F6E221F9797E62A4FE56C46EE",
    "sha256": "0E3D2ACE1C9DC50BBD3AF2D5E7BF4E044733B078E1BAC7EBC2430EC33C288CE7",
    "sha256_subject_spki": "5C47E79EDBBE25ED27990538B5A6C0DCDE38C89880C0AC51E01BB5C8BA5CAFA2",
    "pin-sha256": "1qgxCguHHu27slpH4sjlX0rHaWdUlXxLMqVrPfBQQN8="
  },
  "Raw": "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"
}