Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:90:82:5f:d9:d7:43:03:70:45:fa:ce:ac:73:54:e7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Apr 29 06:51:17 2024 GMT
            Not After : Apr 29 06:51:17 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:99:2b:33:e1:39:f6:a1:bc:ae:4a:98:72:d6:
                    81:cb:64:56:90:fa:13:8b:1e:bf:56:bb:c2:63:e8:
                    4f:b9:7f:79:28:4c:60:17:30:2e:8c:2e:38:d8:7d:
                    bd:00:29:55:10:7c:63:d5:95:20:73:f4:4d:e0:bf:
                    94:be:9c:1d:ec:c3:b8:cc:af:39:1d:c2:1f:c2:bd:
                    fa:1c:fa:5f:d6:9d:3d:a4:de:8a:43:34:8b:7c:aa:
                    a4:d7:3e:08:b1:10:ec:5d:3e:d0:30:64:d8:21:6e:
                    e3:38:ca:35:a7:60:07:80:ed:6d:a5:5e:83:9a:8a:
                    06:3e:75:82:87:43:0c:8d:e2:ae:16:e1:49:83:1b:
                    f9:d5:6b:a8:f4:61:12:0b:8b:95:db:d3:b6:e7:97:
                    b3:30:85:8d:f5:d3:bf:63:9d:08:a2:80:24:67:ac:
                    0a:a9:7f:28:82:16:ed:d7:8e:60:32:f9:2c:72:33:
                    59:67:27:13:14:39:c6:49:b8:57:a5:df:ad:c3:bd:
                    fc:81:e3:2c:fb:98:52:ba:af:ed:3a:e2:65:f7:ee:
                    48:a9:6f:fd:bd:1b:2c:1e:db:c8:99:31:ec:04:7e:
                    02:e4:26:bd:d3:0d:e0:ec:8a:11:27:b2:1a:26:a3:
                    e7:48:99:70:ce:00:ac:37:4f:c8:ab:0e:55:62:7a:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                48:32:48:23:6E:B1:1D:04:21:66:06:F2:7A:5F:90:41:C5:D9:CF:B4
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         15:57:1f:2f:d9:d5:b7:67:f9:0f:b1:09:2b:e1:37:4d:02:9f:
         47:0d:0d:fd:20:4c:fe:c9:43:a2:e4:ab:4c:07:74:bc:d1:bd:
         95:b5:a5:01:2d:c6:53:3a:55:1c:76:53:08:c4:92:fa:85:4d:
         0e:73:7e:b5:46:a8:36:ab:2f:c3:69:c4:68:11:34:0d:b1:76:
         73:7b:28:cb:e7:5f:96:c6:25:7a:49:6f:15:54:c0:b3:33:fb:
         b8:16:ba:db:78:f4:39:65:20:5a:9c:b0:72:d1:bd:3a:57:38:
         0c:85:d0:58:5d:cd:26:67:b0:4b:89:c7:e7:74:57:f9:a8:8c:
         4c:b1:e5:9b:a8:4d:fd:14:c6:fe:6f:55:aa:1c:33:23:ab:aa:
         aa:68:1d:49:77:71:ee:5f:e7:d8:3a:a1:22:85:93:ca:42:68:
         c0:a1:0f:e0:7e:4c:c1:29:d7:ce:33:a8:19:a9:5a:56:e8:7c:
         09:e6:7d:35:0e:95:f9:ec:83:af:53:b8:cd:98:ec:ab:d6:88:
         cd:81:82:1e:f7:70:ef:f7:23:4e:07:04:8f:21:24:4f:9b:0a:
         e3:f5:43:fa:67:93:1a:87:68:68:47:1c:3b:c2:11:bf:b1:ce:
         96:86:75:b6:8d:0b:54:01:01:9b:b7:80:4f:96:38:82:67:bd:
         cb:b8:e4:33
-----BEGIN CERTIFICATE-----
MIIEeDCCA2CgAwIBAgIQfZCCX9nXQwNwRfrOrHNU5zANBgkqhkiG9w0BAQsFADBD
MQswCQYDVQQGEwJYWDEQMA4GA1UEChMHU29tZSBDQTEiMCAGA1UEAxMZRmFrZSBD
QSBmb3IgemxpbnQgdGVzdGluZzAeFw0yNDA0MjkwNjUxMTdaFw0yNTA0MjkwNjUx
MTdaMHQxCzAJBgNVBAYTAklUMR8wHQYDVQQIExZTb21lIFN0YXRlIG9yIFByb3Zp
bmNlMRIwEAYDVQQHEwlTb21ld2hlcmUxGjAYBgNVBAoTEVNvbWUgQ29tcGFueSBM
dGQuMRQwEgYDVQQDEwtleGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPqZKzPhOfahvK5KmHLWgctkVpD6E4sev1a7wmPoT7l/eShMYBcw
LowuONh9vQApVRB8Y9WVIHP0TeC/lL6cHezDuMyvOR3CH8K9+hz6X9adPaTeikM0
i3yqpNc+CLEQ7F0+0DBk2CFu4zjKNadgB4DtbaVeg5qKBj51godDDI3irhbhSYMb
+dVrqPRhEguLldvTtueXszCFjfXTv2OdCKKAJGesCql/KIIW7deOYDL5LHIzWWcn
ExQ5xkm4V6XfrcO9/IHjLPuYUrqv7TriZffuSKlv/b0bLB7byJkx7AR+AuQmvdMN
4OyKESeyGiaj50iZcM4ArDdPyKsOVWJ6fpsCAwEAAaOCATUwggExMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHQYDVR0OBBYE
FEgySCNusR0EIWYG8npfkEHF2c+0MB8GA1UdIwQYMBaAFOi29nZL0DvlRqX5VNR+
B7PeDWA+MGQGCCsGAQUFBwEBBFgwVjApBggrBgEFBQcwAYYdaHR0cDovL2NhLnNv
bWVjYS1pbmMuY29tL29jc3AwKQYIKwYBBQUHMAKGHWh0dHA6Ly9jYS5zb21lY2Et
aW5jLmNvbS9yb290MBYGA1UdEQQPMA2CC2V4YW1wbGUub3JnMBMGA1UdIAQMMAow
CAYGZ4EMAQICMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9jYS5zb21lY2EtaW5j
LmNvbS9jcmwwDQYJKoZIhvcNAQELBQADggEBABVXHy/Z1bdn+Q+xCSvhN00Cn0cN
Df0gTP7JQ6Lkq0wHdLzRvZW1pQEtxlM6VRx2UwjEkvqFTQ5zfrVGqDarL8NpxGgR
NA2xdnN7KMvnX5bGJXpJbxVUwLMz+7gWutt49DllIFqcsHLRvTpXOAyF0FhdzSZn
sEuJx+d0V/mojEyx5ZuoTf0Uxv5vVaocMyOrqqpoHUl3ce5f59g6oSKFk8pCaMCh
D+B+TMEp184zqBmpWlbofAnmfTUOlfnsg69TuM2Y7KvWiM2Bgh73cO/3I04HBI8h
JE+bCuP1Q/pnkxqHaGhHHDvCEb+xzpaGdbaNC1QBAZu3gE+WOIJnvcu45DM=
-----END CERTIFICATE-----
