Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            99:ca:3f:30:e3:e4:7d:7d:07:4f:9d:fc:77:14:28:7d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Jul 11 13:32:19 2024 GMT
            Not After : Jul 11 13:32:19 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:c1:34:23:b5:8d:9e:5e:24:e8:07:bb:68:
                    d9:09:0c:69:5f:ea:de:36:fc:b4:a4:7d:ae:90:c2:
                    4f:02:bf:38:e4:b7:8e:21:b0:f6:c7:2d:00:91:06:
                    3d:48:80:34:87:d7:74:2d:3f:31:be:e7:bb:a3:9e:
                    b6:73:01:d5:e1:20:c1:a7:74:c9:ce:57:f7:4f:7d:
                    53:10:2c:47:42:30:0d:69:28:44:ff:e8:a7:a4:d7:
                    91:29:ce:ea:ae:46:1f:93:75:09:d8:dd:7f:09:b6:
                    17:f4:d6:03:1d:da:82:81:d5:5e:a9:c1:cc:f0:89:
                    33:6f:30:aa:cd:d6:e9:55:40:20:b5:77:9f:71:8d:
                    a8:4a:76:b5:d3:bd:e3:15:91:77:09:98:86:fa:2f:
                    c9:0d:b8:d3:55:47:c4:15:d0:c3:31:ad:3c:a8:35:
                    d4:b2:09:b7:fa:a2:c3:d1:d3:2c:03:65:fc:e2:78:
                    20:bc:ba:50:de:a1:92:90:8a:88:58:7e:78:36:b5:
                    51:63:d2:da:5c:05:3b:11:52:87:03:ea:dc:29:e4:
                    bb:0f:75:9b:53:05:e4:4a:6e:e4:7b:07:e1:ac:a6:
                    75:c9:e3:95:53:3a:b7:90:b9:f9:ad:a6:30:6b:15:
                    1f:85:38:54:27:4d:a5:fc:44:65:9c:66:eb:15:38:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                49:48:45:3E:54:D5:4E:58:00:A5:27:9E:E0:83:13:4D:76:86:05:DB
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl1.ca.someca-inc.com/crl1

                Full Name:
                  URI:http://crl2.ca.someca-inc.com/crl2

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:32:9e:c5:cf:64:a6:6b:00:d9:13:15:90:b9:12:98:b0:
         39:47:6e:08:47:20:aa:95:82:5c:d5:47:d9:33:f9:41:34:3b:
         59:7d:a9:04:82:7a:ae:b4:e9:a2:d0:e0:45:1c:eb:b5:c5:28:
         fa:1f:86:4f:ee:fe:a4:12:e3:80:bc:55:73:4a:5d:ca:57:53:
         7a:26:e5:e3:d7:a5:38:ee:c7:3f:63:43:17:6c:98:33:6b:16:
         00:7e:bd:b9:ae:a4:8e:a1:6c:47:86:9c:58:b5:2e:08:ab:aa:
         66:a8:58:24:5d:85:28:22:c9:0f:44:7b:ad:69:e5:25:39:cd:
         10:21:3a:9f:23:67:84:88:61:bc:49:c4:db:a4:a6:45:f8:df:
         6f:72:a9:6a:cf:8b:29:85:83:3a:62:33:a3:57:d5:f5:84:1f:
         3d:57:8f:05:3d:06:bb:db:9b:50:8a:0c:1c:7a:97:5d:bd:d6:
         67:35:8a:2b:10:4c:7d:d0:16:1c:fd:12:7f:ca:94:72:5f:d9:
         04:aa:55:63:91:0d:79:3e:f6:07:ea:01:58:ae:a6:39:99:c4:
         31:e2:57:73:1e:9b:a9:b0:56:14:55:1f:2b:03:00:ef:27:14:
         4c:4a:3e:85:c6:06:88:56:ab:52:54:2f:78:1c:c5:6e:64:0f:
         b9:d2:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
