Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            da:6f:8d:f6:7e:00:a2:e3:e3:fa:a8:f9:10:50:64:be
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Nov 30 16:30:21 2024 GMT
            Not After : Nov 30 16:30:21 2025 GMT
        Subject: C = XX, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890, organizationIdentifier = ABCES-1234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:8d:a3:54:23:2e:cc:41:bc:6e:7b:e8:f3:
                    f2:3f:36:ff:b6:4e:e4:99:f2:a7:80:35:bd:f8:76:
                    4a:03:f1:12:0c:dc:86:41:67:c3:ec:39:71:08:5d:
                    6a:99:d7:99:9d:b9:70:61:18:1f:e4:f2:b5:24:e4:
                    cc:b8:1f:d2:c3:f8:8d:de:a9:1c:e6:25:4b:c1:53:
                    b1:ed:0e:04:bf:77:c3:64:e5:5c:2c:0d:5f:39:2e:
                    b4:17:f3:cc:86:8a:76:d3:6d:97:99:97:69:cd:4d:
                    b6:dd:c3:3d:b5:f5:40:de:89:bd:ef:85:fd:b9:c3:
                    85:01:25:ad:46:3a:1f:64:cc:a5:e7:26:f9:2b:c9:
                    71:84:9d:98:02:23:f1:52:df:d0:d9:07:2e:cb:19:
                    e5:74:f6:ae:23:9c:ee:25:10:e1:74:87:cd:dc:ab:
                    85:39:38:2b:88:e3:ad:bc:b4:06:63:ea:44:47:a9:
                    5e:51:f9:79:e8:56:79:c6:7e:72:62:64:38:5a:fd:
                    75:ce:1f:72:c4:fb:38:f4:6f:a4:8d:80:04:38:5f:
                    b0:27:8a:e4:96:4e:6d:3f:8f:8a:4f:04:a7:52:24:
                    30:6a:94:f3:fd:05:e0:ce:b7:95:28:5d:1e:4f:ab:
                    75:81:ed:41:82:65:11:4f:c4:1c:20:de:01:7d:fb:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                1A:7A:8B:06:D4:E8:24:40:B1:86:5D:F8:6F:7A:59:27:CB:F7:BC:54
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

            2.23.140.3.1: 
                0...ABC..ES.
1234567890
    Signature Algorithm: sha256WithRSAEncryption
         19:5b:6b:a5:14:9e:b1:e4:04:8c:4b:ea:24:1a:f0:be:dd:b8:
         96:75:25:04:ba:37:d4:66:dd:34:66:1a:f4:98:93:20:9f:08:
         de:91:ff:97:58:78:bd:8d:4c:56:55:b5:1a:f6:8c:67:49:22:
         13:91:14:e1:72:dc:4a:72:ca:63:07:a8:76:07:72:cd:8e:fa:
         3b:e4:30:aa:8c:cc:7e:43:29:45:53:95:0b:9b:d7:d3:55:b6:
         83:dc:8c:d8:f9:14:87:f8:b4:ef:ef:67:c6:34:1a:03:fb:e2:
         58:29:35:c9:6d:d5:d9:41:55:27:70:fe:97:fa:41:22:1e:85:
         39:41:03:d9:1f:0b:69:17:8a:1f:0c:14:76:3f:fe:ee:91:08:
         d9:43:28:f2:01:2c:cb:a2:01:f9:f7:42:23:0e:66:05:7c:98:
         21:15:29:47:fa:2e:0a:64:b3:dc:77:2c:fc:f4:24:a4:18:77:
         9e:2e:35:a4:f2:86:d7:58:06:bb:1d:76:a8:3b:77:1a:2b:5c:
         d7:e3:51:d4:f7:32:1f:8c:d6:97:53:43:74:dc:fa:dc:8a:ac:
         c3:c0:8d:88:bf:d9:0c:85:a6:a4:55:00:87:19:b6:b7:5a:ca:
         da:cc:87:b4:e4:cb:62:c4:d1:44:92:25:97:2c:4d:06:15:71:
         9a:10:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
