Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a2:94:b9:0b:00:e2:60:11:12:c5:e7:cd:be:5a:6d:62
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Nov 30 16:29:03 2024 GMT
            Not After : Nov 30 16:29:03 2025 GMT
        Subject: C = XX, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890, organizationIdentifier = PSDIT-1234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:1e:b8:47:bb:2e:62:35:9a:c3:b6:aa:91:
                    c7:7f:7b:5c:d9:98:80:86:aa:0b:f7:f2:0b:52:68:
                    9b:f1:55:fe:94:e4:bd:90:58:2f:67:93:0f:8b:f0:
                    3c:e9:ac:e6:5d:34:ab:82:e0:96:3c:f6:fe:cc:fd:
                    08:10:89:38:08:eb:aa:01:2a:be:61:68:f3:f2:fb:
                    4d:a4:ce:d6:0a:6b:46:f7:fb:18:10:94:78:fa:31:
                    46:5d:5f:ea:d8:12:28:02:2e:28:c1:34:27:d4:96:
                    11:c4:93:aa:76:c2:3e:be:2f:68:5d:cb:72:f7:e1:
                    51:ea:70:bb:a2:7e:df:18:23:1b:3f:77:9a:a8:fc:
                    72:9d:dd:3c:64:37:d9:af:08:13:f0:7b:cc:0a:1d:
                    6b:32:99:19:86:ec:0d:d5:e9:63:3b:73:3d:c2:39:
                    d7:0b:b7:48:79:35:a7:0a:aa:9f:a5:7c:74:13:2f:
                    b9:76:5e:16:8d:02:a2:b5:8b:8e:5b:95:83:17:24:
                    33:14:5f:5a:e3:14:15:9a:d3:fc:c5:4e:c8:44:c8:
                    76:4c:7b:a5:b3:33:ad:f8:22:ae:a4:c9:8f:52:b3:
                    34:27:89:98:93:af:f8:8e:96:64:cd:05:f0:1d:85:
                    e9:89:6f:9c:13:5d:09:fe:1b:7f:69:7a:7b:f0:28:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                96:48:DA:51:FB:22:30:8C:CB:00:63:E1:A9:E1:8D:EC:CF:3D:37:AF
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

            2.23.140.3.1: 
                0...PSD..IT.
1234567890
    Signature Algorithm: sha256WithRSAEncryption
         48:02:26:b5:5f:e7:0b:62:30:58:e4:4a:0f:ab:97:dc:fa:4c:
         d3:1e:3e:a4:a2:53:e8:14:d5:89:12:1e:f2:b0:52:ff:02:38:
         3f:db:bf:18:56:e0:84:0b:67:e0:5d:72:02:c6:cf:d7:16:c1:
         6e:54:7e:82:e2:60:ff:8d:01:7d:f3:a4:5e:0a:65:72:fd:99:
         8c:6e:02:f1:a7:3a:1a:84:b4:7b:3c:af:6a:12:de:fc:00:8f:
         04:ad:23:1d:8d:39:4c:08:a0:37:6a:8f:ec:f6:50:15:c5:fd:
         87:1a:58:5c:f5:c0:b9:78:fc:26:df:c2:7b:90:9a:1a:4e:68:
         27:ce:43:01:84:47:98:a0:fe:2b:cb:8b:03:38:be:15:65:72:
         2f:c3:33:bc:3a:18:d1:95:64:e3:73:bd:82:e9:e5:5c:97:c2:
         1e:ce:b3:4e:7c:fc:84:12:34:ec:03:dd:2e:86:80:a3:fe:8e:
         4b:dc:ce:36:1f:dd:8a:54:cc:82:69:fd:b6:53:a1:bf:4d:ae:
         eb:6c:7f:d7:82:4d:a3:a1:26:49:53:6e:4a:ce:60:57:81:32:
         32:5a:b4:f6:e9:87:25:df:d8:b3:51:57:e7:4a:6a:bf:f4:21:
         09:56:e1:e8:c8:82:83:d5:1a:25:3d:e9:8f:98:85:6f:85:21:
         1a:23:3b:93
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIRAKKUuQsA4mAREsXnzb5abWIwDQYJKoZIhvcNAQELBQAw
QzELMAkGA1UEBhMCWFgxEDAOBgNVBAoTB1NvbWUgQ0ExIjAgBgNVBAMTGUZha2Ug
Q0EgZm9yIHpsaW50IHRlc3RpbmcwHhcNMjQxMTMwMTYyOTAzWhcNMjUxMTMwMTYy
OTAzWjCBpDELMAkGA1UEBhMCWFgxHzAdBgNVBAgTFlNvbWUgU3RhdGUgb3IgUHJv
dmluY2UxEjAQBgNVBAcTCVNvbWV3aGVyZTEaMBgGA1UEChMRU29tZSBDb21wYW55
IEx0ZC4xFDASBgNVBAMTC2V4YW1wbGUub3JnMRMwEQYDVQQFEwoxMjM0NTY3ODkw
MRkwFwYDVQRhExBQU0RJVC0xMjM0NTY3ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr00euEe7LmI1msO2qpHHf3tc2ZiAhqoL9/ILUmib8VX+lOS9
kFgvZ5MPi/A86azmXTSrguCWPPb+zP0IEIk4COuqASq+YWjz8vtNpM7WCmtG9/sY
EJR4+jFGXV/q2BIoAi4owTQn1JYRxJOqdsI+vi9oXcty9+FR6nC7on7fGCMbP3ea
qPxynd08ZDfZrwgT8HvMCh1rMpkZhuwN1eljO3M9wjnXC7dIeTWnCqqfpXx0Ey+5
dl4WjQKitYuOW5WDFyQzFF9a4xQVmtP8xU7IRMh2THulszOt+CKupMmPUrM0J4mY
k6/4jpZkzQXwHYXpiW+cE10J/ht/aXp78CgmgQIDAQABo4IBVjCCAVIwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4E
FgQUlkjaUfsiMIzLAGPhqeGN7M89N68wHwYDVR0jBBgwFoAU6Lb2dkvQO+VGpflU
1H4Hs94NYD4wZAYIKwYBBQUHAQEEWDBWMCkGCCsGAQUFBzABhh1odHRwOi8vY2Eu
c29tZWNhLWluYy5jb20vb2NzcDApBggrBgEFBQcwAoYdaHR0cDovL2NhLnNvbWVj
YS1pbmMuY29tL3Jvb3QwFgYDVR0RBA8wDYILZXhhbXBsZS5vcmcwEgYDVR0gBAsw
CTAHBgVngQwBATAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8vY2Euc29tZWNhLWlu
Yy5jb20vY3JsMCAGBWeBDAMBBBcwFRMDUFNEEwJJVAwKMTIzNDU2Nzg5MDANBgkq
hkiG9w0BAQsFAAOCAQEASAImtV/nC2IwWORKD6uX3PpM0x4+pKJT6BTViRIe8rBS
/wI4P9u/GFbghAtn4F1yAsbP1xbBblR+guJg/40BffOkXgplcv2ZjG4C8ac6GoS0
ezyvahLe/ACPBK0jHY05TAigN2qP7PZQFcX9hxpYXPXAuXj8Jt/Ce5CaGk5oJ85D
AYRHmKD+K8uLAzi+FWVyL8MzvDoY0ZVk43O9gunlXJfCHs6zTnz8hBI07APdLoaA
o/6OS9zONh/dilTMgmn9tlOhv02u62x/14JNo6EmSVNuSs5gV4EyMlq09umHJd/Y
s1FX50pqv/QhCVbh6MiCg9UaJT3pj5iFb4UhGiM7kw==
-----END CERTIFICATE-----
