Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:15:64:b2:c2:b9:4e:e3:34:19:f5:29:d4:14:b5:95
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = EU, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Mar 30 10:08:11 2024 GMT
            Not After : Mar 30 10:08:11 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.com, serialNumber = 1234567890, businessCategory = Private Organization, organizationIdentifier = VATBEE-12345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:f2:44:4a:7c:0c:25:17:4e:be:e6:b2:e8:
                    91:ad:67:b5:6a:51:57:66:78:e6:79:3d:db:c9:33:
                    ef:62:e8:6b:10:cd:91:0c:64:e1:1f:25:24:55:c8:
                    da:a0:3e:0b:5a:d6:43:bd:1a:49:ea:52:28:64:00:
                    eb:19:9f:10:b1:30:a8:06:43:50:d9:58:99:b7:89:
                    ae:ee:e5:6b:fc:41:d9:67:b4:6a:4d:c2:34:ad:fa:
                    06:31:aa:14:03:3a:b9:c8:d9:06:1e:df:8c:6d:f5:
                    6c:c9:4e:63:64:7f:58:3d:ca:fe:e3:ab:6e:47:8c:
                    f9:5e:41:ca:3d:f4:20:06:ba:1c:ca:65:97:86:aa:
                    9f:6f:67:1d:b2:f7:fe:92:b2:4b:c1:f1:70:8d:8f:
                    6c:23:d7:42:4d:34:7b:b1:13:e6:a7:84:85:a8:b1:
                    c4:9f:9d:08:af:08:77:7d:c9:50:4a:77:8a:22:de:
                    d6:db:40:f5:f3:53:88:71:7b:4b:e1:5b:08:b1:e1:
                    00:ec:bd:c4:14:5c:60:8a:14:1b:21:ff:dd:ac:6b:
                    b5:a1:a3:85:cf:a4:96:54:76:02:90:85:06:ec:e4:
                    b1:08:75:10:a8:ed:44:03:76:25:77:0b:2b:d3:9f:
                    6c:15:81:a1:37:a1:62:1a:69:b8:e7:26:69:98:1e:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                5D:EB:2E:60:D6:D1:B3:AB:5C:F4:21:31:B5:D1:68:88:50:CF:D2:AA
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

            2.23.140.3.1: 
                0...VAT..BE..12345
    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:6d:19:8a:9c:f3:30:c5:f0:39:ef:18:a3:ff:ed:d2:b2:
         a5:be:21:ff:d2:7d:68:87:19:6b:aa:bf:22:f1:e2:b1:80:89:
         c1:b6:73:44:b2:90:7c:cc:1a:e9:4e:e5:bc:9c:85:58:6e:33:
         90:69:56:88:bc:f6:ed:03:36:7f:72:c2:9e:77:3c:77:6e:6c:
         bb:32:09:33:1f:61:eb:92:40:96:c9:01:a4:d6:56:91:cb:9a:
         b4:a8:33:c6:ba:bd:94:44:42:5f:74:c4:fa:1f:c6:46:d4:d8:
         0c:dd:09:1e:96:e7:70:45:29:30:ef:c0:a9:33:5e:ce:84:d8:
         d2:0f:79:31:e1:01:01:c7:6e:d1:4b:2e:ff:55:19:a0:e2:a5:
         a4:fc:82:90:5e:e9:bc:c9:bc:01:69:8d:26:5b:fd:47:f8:1e:
         13:e0:29:8a:88:c7:10:21:2b:67:41:52:a1:4d:5a:e4:28:9d:
         76:c2:ee:bc:99:a9:a9:4c:48:f9:68:3f:69:25:00:91:c2:3d:
         83:4a:2e:ff:b1:e7:a2:4b:31:12:d4:53:a6:9d:41:4f:8b:49:
         d2:b6:b5:88:e6:2b:02:aa:4a:e2:50:a0:fa:0b:96:76:3c:59:
         a6:a7:a0:bc:2b:a2:e4:e7:1f:60:7d:3c:53:cc:23:0e:a1:dc:
         23:70:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
