Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a5:98:78:aa:79:0f:60:55:84:58:71:6f:79:72:97:19
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Apr 13 00:00:00 2019 GMT
            Not After : Apr 12 00:00:00 2020 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890, postOfficeBox = 12345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:ce:b7:ff:15:ce:9b:1f:f9:45:5a:4b:4b:
                    ad:67:62:38:47:9d:00:34:93:24:e2:f7:6f:94:df:
                    41:a5:97:2b:ca:d1:eb:d8:87:e0:ab:8d:98:a5:bc:
                    b7:8e:d3:cd:ff:eb:65:f8:a7:c3:a7:6b:be:76:b3:
                    4a:f9:bb:d8:a7:a2:f7:4a:5c:f4:44:07:00:03:04:
                    43:a7:8d:df:f7:41:a6:32:6b:da:b3:44:c8:e6:c6:
                    e3:7b:7f:05:f6:21:80:36:9e:76:db:74:55:ab:20:
                    e8:90:bb:56:ed:99:c8:be:83:5e:fd:51:ae:50:f6:
                    e4:9a:ed:85:ae:66:e5:2c:21:bf:69:11:dc:3d:be:
                    40:4e:7f:f0:7e:5d:cc:ec:f0:0c:f4:3e:f4:11:d2:
                    56:35:70:6c:d5:85:40:45:09:86:04:47:8d:08:ec:
                    d9:7a:cc:17:b4:e0:7d:a9:7f:87:ac:1b:55:fd:0f:
                    7a:bb:80:6b:b8:fa:68:5f:97:71:bd:11:cb:a5:aa:
                    cb:db:68:9a:05:89:bd:7f:ba:98:8d:98:be:3d:07:
                    1e:46:6a:03:e5:86:9b:d8:53:38:a9:0e:be:72:43:
                    87:a7:9f:5c:78:e6:24:d9:a1:78:a1:40:3d:12:df:
                    01:06:7f:4c:ad:a1:1a:c1:d9:91:5d:b1:4a:e5:3f:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                A9:43:73:EC:D3:04:19:3D:F5:8E:74:9D:AB:2C:CB:2B:E7:9C:31:33
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:a7:1b:0d:a3:5b:45:32:f3:a8:e4:08:3e:81:15:a6:6d:
         7c:20:a3:9e:83:73:90:3f:fc:7d:19:ad:1d:7c:5e:b1:fe:dc:
         87:a2:37:34:55:4f:63:38:6a:a9:7a:b8:0d:04:ba:fc:42:43:
         b3:85:c7:b2:3c:6c:31:23:c4:86:7e:08:f5:55:bc:38:2b:5d:
         5f:5e:28:f9:b6:6a:9d:2a:b0:bc:c8:30:f1:7b:e6:d1:f7:2e:
         c1:7a:71:bc:d5:b0:f5:c0:ac:bd:a8:f6:ad:d1:2b:24:fe:ab:
         03:a0:20:5e:56:1b:7e:70:04:05:91:ad:63:be:1f:c6:1a:ea:
         46:b5:a2:d6:cf:29:5b:45:b5:77:9f:ec:fc:67:49:cc:7e:2e:
         4d:df:dd:46:ba:a6:0f:0b:34:ec:e0:e5:a9:34:de:4e:d4:b1:
         99:e2:f4:5e:87:21:7c:d3:aa:6b:d5:11:99:2a:b9:97:b3:34:
         6d:3d:5e:aa:50:62:17:80:f1:ca:08:17:cb:b4:34:25:8f:1a:
         4c:b0:a5:62:58:85:c4:8f:25:53:62:3a:b9:0c:ee:99:d3:e0:
         6d:b8:e1:55:cf:5a:1e:47:23:37:3c:a3:4b:84:db:80:f3:a7:
         fd:37:d3:72:45:82:37:a0:a4:a1:e6:ca:55:ba:67:24:10:4b:
         ab:29:bc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
