Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2f:ea:18:7d:f0:75:17:93:81:4d:0c:c0:77:8f:6f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Jun  1 05:22:48 2024 GMT
            Not After : Jun  1 05:22:48 2025 GMT
        Subject: C = DE + C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:27:73:49:f9:96:08:d6:2b:c3:5b:40:f3:
                    9b:29:1a:15:f5:22:a4:24:75:11:94:b8:58:e4:84:
                    40:bd:55:8a:12:44:ab:b8:27:3f:07:fc:d4:36:02:
                    c0:18:3e:fe:dd:00:de:c0:65:ed:a8:96:41:67:99:
                    99:7e:eb:09:88:90:18:78:e6:66:55:46:72:cf:35:
                    da:29:f2:43:54:91:d0:90:a3:74:22:8e:18:ed:f6:
                    f7:09:18:dc:72:29:b8:26:b8:06:67:a1:4b:de:aa:
                    ed:f2:90:c2:83:88:c5:53:cf:c1:74:7b:42:3c:c2:
                    cb:19:26:de:93:26:78:5f:09:ad:6b:02:a2:85:f4:
                    8d:c5:1d:d1:c2:f1:b5:39:00:60:3a:a1:5c:ef:46:
                    5c:f9:4b:48:a6:4e:93:e6:90:62:6e:8f:91:dd:6d:
                    87:77:34:79:a6:31:bb:bd:2d:c5:d0:20:f0:8c:71:
                    2c:8d:69:c9:4c:e8:ff:58:3c:a1:b5:b6:5a:32:41:
                    94:ed:96:5c:59:84:07:ec:8e:e0:90:5f:fb:86:23:
                    ea:d0:7e:54:ee:db:17:5e:43:a7:8f:49:1e:d1:fe:
                    24:0f:b5:73:1e:22:ea:c0:52:b1:b6:af:d7:c3:7b:
                    3a:40:bc:6e:26:19:f6:85:5b:94:26:ce:d7:8b:06:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                DA:9F:C8:E2:92:A6:90:A6:48:A7:D3:D1:19:EA:99:29:0E:EC:45:D2
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:d5:d3:83:59:48:15:8f:5c:6b:56:9a:a8:e7:a0:07:11:
         da:e1:e0:92:3e:1e:f6:c2:3f:35:22:f6:91:b3:ac:e9:15:25:
         6d:d8:64:23:6a:15:88:01:40:64:2a:12:43:5d:ea:83:96:1f:
         20:83:b3:ad:48:1e:df:06:4d:83:a5:b4:83:f8:25:7c:be:03:
         c2:e6:46:45:46:b5:63:b1:07:f4:ea:ae:38:b2:b0:29:fc:7a:
         f5:28:20:fc:67:42:a5:c2:57:c8:6b:ac:8a:56:c1:1d:78:b1:
         17:40:d3:54:97:fd:db:f1:9d:68:a5:fd:4d:c1:91:2c:41:46:
         68:dc:78:67:a3:37:97:e8:1d:ec:bf:55:f6:b2:eb:b2:e8:e7:
         a6:db:fd:f9:d6:3d:80:8e:2a:7f:c4:3a:62:92:40:e9:15:20:
         2a:e6:8d:fd:e1:8e:5c:d7:9d:fe:4d:00:e9:79:b4:e0:b9:0f:
         3e:aa:84:5a:61:e6:07:21:dd:52:5c:f5:44:37:0e:ba:ba:27:
         f8:56:57:71:f3:65:36:3a:37:de:9d:e1:13:74:a6:ed:40:ef:
         91:dd:ce:f2:ab:60:ef:8e:b0:da:7b:cd:43:7f:df:13:22:0d:
         47:d6:81:ca:7c:13:30:04:7c:d0:e9:b8:a6:81:ac:b6:a0:f0:
         56:c7:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
