Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:9d:94:0f:c0:e9:1d:88:03:8f:66:11:8f:50:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = EU, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Mar 30 10:05:55 2024 GMT
            Not After : Mar 30 10:05:55 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.com, serialNumber = 1234567890, businessCategory = Private Organization, organizationIdentifier = PSDAT-FMA-1234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:9f:31:9b:46:04:07:94:6c:a8:5d:af:8e:
                    29:4b:52:7d:e4:d7:d2:42:dd:6f:c4:88:04:e4:d9:
                    97:c6:70:08:a9:fb:ed:16:0e:61:cc:e1:01:05:b4:
                    46:ef:6c:34:4f:3b:d5:f4:37:3d:d8:bb:3e:9e:a6:
                    9c:ca:af:d7:f0:cc:bb:07:94:cf:23:ce:49:ef:5e:
                    1a:0b:fa:65:e3:b2:f6:3f:a1:dd:48:6f:d9:fa:d7:
                    27:50:29:c6:08:88:f3:3f:58:90:ad:04:81:84:de:
                    c1:98:75:df:23:23:fe:c4:8a:af:b5:62:69:2e:3a:
                    f7:8c:61:e7:8d:ad:df:51:48:0d:66:a1:4b:53:5a:
                    59:d7:ba:50:6c:70:af:12:a6:32:9e:f6:39:ab:c1:
                    da:15:68:11:ec:c1:e6:77:d4:15:cb:4a:e8:16:61:
                    de:06:26:40:02:7f:15:fb:59:7f:ce:7c:2c:35:f8:
                    e4:b7:a7:55:46:78:b8:42:aa:16:a3:30:44:88:70:
                    f1:ea:6e:d2:97:04:e4:ef:8f:4a:13:f8:29:12:16:
                    47:cb:c1:50:eb:6f:25:74:fc:82:99:3e:6b:c4:b6:
                    33:0a:88:7e:8a:84:10:f9:2a:0e:65:aa:a6:d3:22:
                    93:33:c2:00:d2:a3:91:e1:f5:16:67:79:59:92:fa:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                17:A9:69:84:98:F1:C5:E5:86:9F:A7:59:4E:50:C9:F1:99:09:5C:49
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

            2.23.140.3.1: 
                0...PSD..AT..FMA-123-456-7890
    Signature Algorithm: sha256WithRSAEncryption
         69:13:c5:02:22:37:2e:24:0d:79:bc:d1:7a:46:ef:3f:2b:b6:
         29:f9:a4:72:08:58:cc:f1:79:e3:b0:c7:fc:7c:ec:24:82:6f:
         de:0b:44:ba:66:d5:b7:00:81:0e:14:26:e7:41:55:f1:51:26:
         25:d2:65:7c:35:9a:ef:d2:76:38:e8:7c:bd:79:12:8b:c9:43:
         ef:bf:0b:62:c0:98:fc:96:ef:9c:d3:af:83:34:53:19:b9:07:
         d7:f4:b4:d0:86:8b:51:25:70:f8:53:6c:f4:b2:5c:1d:52:f5:
         26:8a:f1:79:ef:dc:3b:a6:51:fa:e8:94:cb:70:c4:80:52:b6:
         54:a0:71:84:0b:4f:da:f8:e2:e4:37:10:0a:8c:fe:1c:8b:c3:
         f9:03:21:92:45:bd:a6:86:68:9e:ad:41:6d:9f:e5:ab:a0:85:
         47:45:8c:8f:a2:b1:af:28:e5:d8:e9:ce:2a:22:d3:1d:8e:08:
         8d:5b:8c:26:47:27:99:a0:77:ad:48:52:54:14:a4:e4:1f:69:
         29:d2:43:d8:d6:c0:fd:01:05:0e:d0:3e:37:f5:7d:31:af:ed:
         5d:e4:ef:83:64:e6:c7:61:9e:13:ac:b9:0b:be:ab:fe:a2:ac:
         fd:99:ab:fb:9c:37:e2:63:c3:c8:df:d8:b4:5d:0c:a6:8f:dd:
         9d:92:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
