Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            89:01:de:57:1b:88:8c:65:db:bc:b2:cd:b9:dd:9c:37
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: May  1 11:25:59 2024 GMT
            Not After : May  1 11:25:59 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:66:77:b4:a3:c1:71:4c:28:a6:7c:52:e3:cd:
                    d2:04:68:fa:cf:52:59:d5:af:7b:90:6e:7d:ce:51:
                    d7:39:f0:f1:42:c8:8b:bc:8d:d0:7b:bb:7f:a2:e0:
                    3f:bf:af:58:e7:c5:f4:19:d3:36:2b:ba:95:17:2e:
                    76:bf:4f:69:71:a6:0b:0a:ea:67:fd:80:fb:7b:9d:
                    ac:da:93:d2:96:eb:69:66:f8:cf:6c:c1:61:c4:6f:
                    9d:6d:11:9f:68:1a:c0:ae:7d:79:60:89:f3:e0:3c:
                    8d:6c:45:55:78:27:0b:e8:4c:81:13:72:7d:fa:f8:
                    bd:ba:87:db:99:e2:f4:87:c1:a2:a9:3f:fc:41:e1:
                    4e:ca:92:67:11:18:23:ae:43:e9:e8:c4:2a:d4:22:
                    40:03:1f:46:ec:c6:07:b1:aa:a7:9e:a4:ee:90:5b:
                    22:af:bb:87:26:0b:5a:5e:6d:be:54:5d:b8:e6:99:
                    9e:0c:a8:aa:74:b0:db:90:65:d4:7f:23:8c:12:e7:
                    b9:b6:57:90:3e:64:a2:ee:e0:46:79:f3:1c:97:be:
                    1a:b3:77:5c:84:a5:5e:fd:fb:1e:0f:c6:2f:a3:0f:
                    bf:0f:30:bd:50:0a:35:7f:65:b6:05:d9:1d:82:a3:
                    7c:d3:e5:f6:1b:bc:50:8d:8d:b6:67:f5:bb:17:bf:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                C3:B8:E3:E7:7C:A5:AE:48:78:0D:4D:82:06:D1:28:88:B5:66:BB:E7
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         b1:40:68:3c:5e:32:0d:40:a0:7a:28:3f:fa:83:69:e5:06:0c:
         25:7c:2f:71:8e:06:28:ff:e2:6d:be:5c:85:e5:e6:8b:77:0e:
         89:74:33:a0:f5:bd:b3:f5:2f:04:52:f1:08:66:75:0f:0f:78:
         64:6d:cc:94:36:e6:97:37:40:3f:4d:f2:73:59:66:01:fd:67:
         da:12:23:99:dc:d4:fb:f9:f3:5e:39:42:a5:c7:4c:df:43:08:
         2b:8b:db:65:34:ad:2f:99:f8:d6:9d:3b:ef:63:16:12:54:ec:
         21:08:b9:0a:54:6c:0b:d0:4f:a2:7d:03:51:d3:6f:1f:6b:18:
         e7:1b:59:81:25:a0:01:a3:ec:bf:62:ff:b8:39:ef:73:3f:df:
         5b:04:2b:a1:ab:f8:6c:2e:f7:f7:93:d7:f9:41:51:98:6e:bf:
         7c:3d:42:4c:34:32:26:ca:5d:60:dc:0f:fa:82:0e:35:fe:78:
         da:94:73:be:07:51:13:8d:f2:51:6f:5b:67:e2:e7:e0:37:92:
         9c:8d:85:a2:c1:88:c2:dd:4f:83:c6:f4:ac:20:f5:e5:fb:6e:
         4d:ac:d5:8a:5b:23:65:5b:14:40:df:cf:57:20:fd:c4:9f:04:
         02:02:c8:71:b9:82:ef:90:b5:ea:49:f5:5f:0d:e1:e5:6b:a8:
         f0:44:93:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
