Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b6:ff:ea:0e:dc:07:1b:8a:0f:2b:9f:b3:ce:f9:e7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: May  3 12:44:49 2024 GMT
            Not After : May  3 12:44:49 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890, businessCategory = Non-Commercial Entity
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:84:ef:38:b8:43:63:bc:e8:19:37:39:a9:
                    22:53:c7:7f:0d:e1:22:46:b5:10:81:8b:4e:bf:6f:
                    ae:3a:83:cc:ba:db:2b:e8:47:55:69:d4:9b:72:8c:
                    84:62:30:ca:cd:59:91:18:60:34:ff:0f:2b:46:6e:
                    c6:de:fe:99:c7:ee:c6:e2:57:c0:1f:ec:0c:46:9f:
                    3a:30:19:45:4f:fc:69:3f:e5:5f:fe:15:5f:ef:e2:
                    4f:76:c2:0e:a1:01:cd:ec:e3:bb:69:da:97:32:c8:
                    d8:f0:12:c5:4b:cb:4d:a8:aa:24:91:99:98:78:ca:
                    60:26:74:0b:0d:bc:0e:72:d6:61:d8:73:0b:34:7c:
                    5c:ab:af:5c:08:8b:46:72:c0:d6:22:11:f3:a8:72:
                    0e:61:95:bd:67:e4:5c:0b:ee:fd:f9:6b:e2:c1:91:
                    6f:d3:b9:b0:e8:51:cc:83:44:46:a2:89:cd:e5:fb:
                    e8:ae:71:ca:9c:2e:bb:04:49:65:33:00:6f:ba:13:
                    9a:05:80:24:46:c4:f3:c5:85:f3:d5:2f:f6:c8:74:
                    86:db:43:83:d0:42:f8:f5:6a:bd:52:9d:d1:b2:bf:
                    8c:ad:ea:8e:e6:ab:c1:1f:68:df:ec:37:1c:3a:ad:
                    5c:ed:03:d1:d7:84:b4:a2:1b:17:e3:92:d9:64:75:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                25:1E:25:66:A7:A3:A3:95:71:81:17:7D:75:BC:49:A2:E4:0A:F6:D9
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         6b:aa:5c:9b:cb:a3:e0:f9:2a:47:d9:7e:bb:a2:57:34:6d:23:
         43:86:5e:08:ea:8a:f9:62:25:4a:9f:a5:09:6c:a5:fe:30:96:
         99:00:b8:2b:8a:a1:61:df:53:10:89:a1:bf:31:3b:29:52:87:
         68:13:3b:be:1f:38:59:03:36:aa:7c:91:64:19:13:69:d6:e1:
         45:fb:65:db:98:b8:3d:88:a2:a5:53:23:db:9c:11:44:5a:f6:
         1f:67:2d:95:de:c5:8e:d3:65:ff:b8:82:05:84:f1:b6:e2:42:
         00:65:8d:3d:38:e8:bd:df:2a:e6:ad:a2:6d:62:64:50:d9:7d:
         30:bd:63:e1:36:a4:e6:d2:0d:e8:86:91:9c:85:08:34:e6:db:
         b6:d0:bc:72:af:b4:0e:fa:ec:fb:2f:34:07:6f:31:3c:de:33:
         d0:96:65:92:6e:e9:35:1c:ec:50:9e:ca:b4:f4:69:68:6b:40:
         d2:c2:ec:6b:11:19:f4:50:d5:5b:57:8c:d8:83:7f:66:73:c5:
         eb:94:7b:e9:2a:1b:3d:ec:c1:d0:62:4a:3d:95:a7:ca:00:89:
         05:c1:65:fb:4d:4e:32:74:44:b6:be:2e:03:11:fd:3e:77:4d:
         82:e0:3d:60:14:c5:68:8a:ed:bc:d3:39:1a:43:ab:84:a5:ec:
         ca:03:c4:9c
-----BEGIN CERTIFICATE-----
MIIErTCCA5WgAwIBAgIQYbb/6g7cBxuKDyufs8755zANBgkqhkiG9w0BAQsFADBD
MQswCQYDVQQGEwJYWDEQMA4GA1UEChMHU29tZSBDQTEiMCAGA1UEAxMZRmFrZSBD
QSBmb3IgemxpbnQgdGVzdGluZzAeFw0yNDA1MDMxMjQ0NDlaFw0yNTA1MDMxMjQ0
NDlaMIGpMQswCQYDVQQGEwJJVDEfMB0GA1UECBMWU29tZSBTdGF0ZSBvciBQcm92
aW5jZTESMBAGA1UEBxMJU29tZXdoZXJlMRowGAYDVQQKExFTb21lIENvbXBhbnkg
THRkLjEUMBIGA1UEAxMLZXhhbXBsZS5vcmcxEzARBgNVBAUTCjEyMzQ1Njc4OTAx
HjAcBgNVBA8TFU5vbi1Db21tZXJjaWFsIEVudGl0eTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAMElhO84uENjvOgZNzmpIlPHfw3hIka1EIGLTr9vrjqD
zLrbK+hHVWnUm3KMhGIwys1ZkRhgNP8PK0Zuxt7+mcfuxuJXwB/sDEafOjAZRU/8
aT/lX/4VX+/iT3bCDqEBzezju2nalzLI2PASxUvLTaiqJJGZmHjKYCZ0Cw28DnLW
YdhzCzR8XKuvXAiLRnLA1iIR86hyDmGVvWfkXAvu/flr4sGRb9O5sOhRzINERqKJ
zeX76K5xypwuuwRJZTMAb7oTmgWAJEbE88WF89Uv9sh0httDg9BC+PVqvVKd0bK/
jK3qjuarwR9o3+w3HDqtXO0D0deEtKIbF+OS2WR14AkCAwEAAaOCATQwggEwMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHQYD
VR0OBBYEFCUeJWano6OVcYEXfXW8SaLkCvbZMB8GA1UdIwQYMBaAFOi29nZL0Dvl
RqX5VNR+B7PeDWA+MGQGCCsGAQUFBwEBBFgwVjApBggrBgEFBQcwAYYdaHR0cDov
L2NhLnNvbWVjYS1pbmMuY29tL29jc3AwKQYIKwYBBQUHMAKGHWh0dHA6Ly9jYS5z
b21lY2EtaW5jLmNvbS9yb290MBYGA1UdEQQPMA2CC2V4YW1wbGUub3JnMBIGA1Ud
IAQLMAkwBwYFZ4EMAQEwLQYDVR0fBCYwJDAioCCgHoYcaHR0cDovL2NhLnNvbWVj
YS1pbmMuY29tL2NybDANBgkqhkiG9w0BAQsFAAOCAQEAa6pcm8uj4PkqR9l+u6JX
NG0jQ4ZeCOqK+WIlSp+lCWyl/jCWmQC4K4qhYd9TEImhvzE7KVKHaBM7vh84WQM2
qnyRZBkTadbhRftl25i4PYiipVMj25wRRFr2H2ctld7FjtNl/7iCBYTxtuJCAGWN
PTjovd8q5q2ibWJkUNl9ML1j4Tak5tIN6IaRnIUINObbttC8cq+0Dvrs+y80B28x
PN4z0JZlkm7pNRzsUJ7KtPRpaGtA0sLsaxEZ9FDVW1eM2IN/ZnPF65R76SobPezB
0GJKPZWnygCJBcFl+01OMnREtr4uAxH9PndNguA9YBTFaIrtvNM5GkOrhKXsygPE
nA==
-----END CERTIFICATE-----
