Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            eb:3c:30:ad:90:93:75:f3:ae:75:d5:e9:47:77:d5:53
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Jun 18 07:35:26 2024 GMT
            Not After : Jun 18 07:35:26 2025 GMT
        Subject: ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, C = SE, C = bg
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:e9:da:79:cc:25:0a:1b:b3:2a:d4:b0:6b:
                    45:1f:97:a1:01:fa:31:78:01:bb:91:2c:7a:9a:82:
                    e0:97:38:35:ff:a2:32:38:11:1e:17:0b:ec:6f:52:
                    d7:7c:3c:15:9e:06:9e:5c:d8:85:3e:65:b6:9b:e5:
                    0b:64:44:e8:45:51:56:36:6d:f4:2d:94:4f:e0:9b:
                    e3:e9:44:da:15:72:f2:c6:ca:2b:f1:0a:14:8a:70:
                    22:f2:a9:8f:a6:b5:b4:a4:aa:e4:0b:b8:15:a9:7e:
                    56:b0:85:e3:11:ff:83:6f:eb:ff:74:3e:3e:2a:9f:
                    92:62:0c:0a:97:a2:ba:53:5f:94:ce:23:69:6f:1a:
                    9e:40:e6:5a:07:d4:e2:c3:7d:9e:65:0e:4e:22:f9:
                    7e:17:4e:8a:60:bf:0c:fa:78:7a:d0:d2:11:2b:03:
                    c8:86:2d:d5:a5:25:d5:37:57:bf:c4:d0:b1:0d:d5:
                    36:b4:a3:44:d2:85:a9:fc:11:ed:a7:7b:53:43:20:
                    56:3c:ec:c4:5d:dc:ba:75:f2:13:8d:e1:7b:ae:50:
                    44:7b:57:53:6d:56:5e:e7:cc:12:43:dd:92:e3:88:
                    e0:89:46:e0:68:dc:66:4a:86:93:86:be:a8:31:e0:
                    5d:50:a2:09:d8:1f:de:a2:1b:bc:a4:8c:c8:8a:b0:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                8F:F9:C5:BE:96:96:71:88:3A:00:8A:C2:AE:D8:21:31:16:DF:CE:D8
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         31:50:c5:0b:0c:ca:99:07:e1:45:aa:6e:47:35:73:88:17:7c:
         2e:db:7f:5e:0b:10:86:67:06:d5:17:74:a3:96:74:ac:a8:98:
         44:fe:8e:1b:cf:3e:68:7c:0a:24:21:3f:dc:ae:11:db:0d:b1:
         53:45:3f:73:65:b2:d3:8a:96:9f:bd:05:4d:83:74:ec:37:e8:
         21:43:6b:41:3b:ef:73:09:52:fa:fe:b1:99:b4:a2:21:f9:c8:
         4e:58:e5:86:7e:a1:ce:f7:69:10:7f:99:54:9e:86:61:32:9f:
         e6:98:b8:62:80:d8:f4:09:35:8e:4e:96:76:43:46:34:d6:7f:
         30:87:97:b8:cc:d5:94:11:63:d6:83:87:88:62:46:64:f8:ac:
         e8:37:fb:a0:85:6e:9f:b8:dc:ca:ca:df:3a:15:07:ba:47:83:
         3a:aa:4c:67:a6:c4:2d:0c:0c:5f:6e:6e:19:f3:a5:a1:52:3b:
         f0:a0:c9:fb:a0:44:ee:ba:6a:8a:56:1f:9b:b8:19:c3:13:97:
         7d:79:20:37:6c:e8:ba:e7:74:6d:90:b4:93:10:b5:90:07:f4:
         ba:57:55:20:42:c1:b8:df:44:e1:b8:5d:a9:99:f2:5c:54:77:
         7a:0a:a4:5c:bf:8f:9c:0f:32:34:59:a2:68:39:b0:4a:f5:c4:
         a7:21:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
