Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:dd:ee:ef:f2:f4:28:42:35:aa:89:b3:53:7a:3a:1f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: May 11 08:42:16 2024 GMT
            Not After : May 11 08:42:16 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:81:cf:15:e3:4e:f5:38:b0:4a:b9:a2:8b:
                    65:d3:d8:5f:ca:b0:37:52:d3:58:11:97:7c:06:50:
                    69:47:45:a0:96:05:1e:a0:17:91:af:7f:5d:d3:ac:
                    ae:d2:15:40:20:84:df:06:92:f1:70:cb:0f:84:e0:
                    1e:70:96:d6:99:5e:8c:a1:96:84:b0:17:e2:88:30:
                    aa:d3:13:e9:68:25:fc:cc:24:74:30:c1:c1:6e:d7:
                    81:d0:98:20:27:d5:43:b3:55:fb:f2:52:98:1a:99:
                    bb:5a:df:15:85:82:10:e7:e0:a6:a3:d4:46:0d:b1:
                    fb:01:32:9c:a9:ab:b1:45:22:c5:42:42:b2:ef:96:
                    ee:3a:30:01:09:53:64:28:ca:58:37:b9:16:86:76:
                    ac:c7:ea:97:e4:3c:67:32:01:8b:38:39:5f:ba:57:
                    5d:07:ac:17:56:07:91:b9:da:53:a7:cb:eb:6e:0f:
                    ce:1e:d4:00:82:5d:b8:e1:8b:7f:4a:af:4f:36:c3:
                    12:37:7d:ae:97:77:77:99:f2:15:6f:eb:59:b3:f3:
                    2b:b4:c0:cb:11:76:e8:0c:83:71:85:51:6e:20:60:
                    04:19:a9:28:17:d3:64:f3:c3:9a:52:2a:b3:98:ea:
                    ba:22:90:d6:23:7e:06:ae:44:90:b0:f1:01:e5:3b:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                EA:B1:D9:0C:E6:0A:3C:0E:3F:19:69:5B:8F:C6:37:E9:6F:35:54:5B
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

            CT Precertificate Poison: critical
                NULL
    Signature Algorithm: sha256WithRSAEncryption
         26:aa:fb:03:8e:5b:01:26:2c:7d:75:8b:d3:9c:b4:98:cd:0c:
         30:52:d7:82:9a:61:b0:5f:4c:8a:6e:c0:36:2d:27:64:16:7a:
         3e:e8:e8:d5:39:a2:7c:d8:6f:55:0c:fd:28:b9:64:21:20:95:
         a8:b8:e0:dd:93:d3:7f:aa:22:97:e3:da:88:a3:9d:7d:50:6b:
         aa:3e:5a:0a:98:29:fb:32:d3:30:35:0f:6b:67:bb:51:d0:bd:
         0b:38:70:cb:4c:88:f3:72:40:da:7b:5b:f0:a6:eb:e6:7a:31:
         6d:75:46:4e:b5:af:3d:fd:66:a4:2d:dc:c3:14:02:b7:02:52:
         f6:46:4b:d8:72:44:7d:f1:e2:d1:d4:a9:3b:e1:88:1a:d0:87:
         90:a9:db:c9:cf:06:f1:eb:f2:9f:b3:7a:53:4c:c2:5a:d8:49:
         ec:3f:d8:d9:49:f0:5f:0e:3c:0a:72:e3:1a:9d:b8:5a:a6:1e:
         3d:93:04:90:5d:a4:53:b9:05:41:a6:81:85:23:3a:85:8e:04:
         8f:01:49:de:59:93:01:a2:da:9b:e5:3b:50:d0:8e:16:fd:d3:
         82:91:82:b3:65:55:a2:4a:41:f2:72:b0:57:42:54:64:fe:40:
         50:da:59:32:a1:46:24:5c:5d:2c:49:e8:85:3b:d8:c5:d3:21:
         1f:8a:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
