Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, ST = California, L = San Francisco, O = Bogus Inc., OU = Operations, CN = Zlint test certificates CA
        Validity
            Not Before: Oct  1 14:17:23 2019 GMT
            Not After : Sep 30 14:17:23 2021 GMT
        Subject: C = US, ST = California, L = San Francisco, O = Bogus Inc., OU = Operations, CN = rsa1024.example.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:cd:79:a7:81:51:ca:26:c9:8f:c8:c9:ab:87:bd:
                    be:0e:e1:a2:b0:3f:ce:94:97:d2:7c:a9:17:d5:9a:
                    82:d7:65:7c:fb:be:5d:3a:9d:5f:5e:60:b2:fd:fc:
                    82:f9:87:9d:b6:08:67:ec:a9:c8:8f:09:bf:de:49:
                    64:e2:8f:21:ac:cf:b0:3d:d6:2c:d4:1e:be:ea:dc:
                    46:07:ed:98:bd:9a:57:d4:bf:b9:64:2d:c0:00:f2:
                    f2:17:f2:5f:ab:db:31:86:ca:ad:c1:ee:21:8a:56:
                    95:e4:03:f8:d9:f2:ff:44:29:28:98:a3:d2:39:c3:
                    ae:73:96:9d:1b:ab:8d:f2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier: 
                BD:00:20:E0:60:43:96:55:B9:0E:1A:6F:96:38:22:10:D2:BC:5C:E7
            X509v3 Subject Alternative Name: 
                DNS:rsa1024.example.com, DNS:rsa1024.example.com
            X509v3 Authority Key Identifier: 
                keyid:F6:6E:67:49:02:D7:15:70:11:9C:8C:06:86:74:E0:32:61:16:C7:0E

            Authority Information Access: 
                CA Issuers - URI:http://example.com/ca/root.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://example.com/ca/root.crl

    Signature Algorithm: sha256WithRSAEncryption
         0b:a2:5b:48:5b:82:7c:16:47:11:ff:38:df:d0:72:ec:f2:1d:
         e0:b6:1a:a6:cc:ea:29:c8:77:24:24:28:07:de:1e:a7:32:6f:
         bb:f5:f1:a5:85:86:ac:b8:e5:6d:93:cd:12:11:3c:99:31:fd:
         8d:23:57:d5:52:85:f8:d3:14:9f:6d:0c:0d:e2:61:c4:64:c2:
         5d:50:60:e2:52:ec:e3:b4:18:16:be:32:51:48:50:6b:70:a2:
         21:b0:b7:79:92:2b:29:62:59:b2:df:b3:6b:3e:56:c2:a7:6f:
         c0:9e:fa:5b:ae:aa:81:02:18:11:f7:94:bf:3f:4e:c0:52:27:
         23:a0:1f:9e:c6:00:07:02:8a:f3:cb:3d:e5:ad:52:9d:f4:ce:
         12:81:e5:23:22:d2:84:46:73:cb:d8:6e:e1:04:ca:14:f2:28:
         56:31:8f:fe:87:ad:46:c2:6f:34:7d:7b:94:f0:82:58:cf:14:
         cc:60:ef:17:c7:ac:19:f4:26:77:6b:56:c1:4a:a2:18:63:95:
         75:05:e5:af:40:fc:7d:6f:d3:66:95:4b:2e:d6:50:da:0f:6e:
         01:1a:22:0b:29:a1:a4:22:05:02:fd:a1:37:46:4d:60:e2:ce:
         a1:62:5e:1f:9a:8d:4d:9a:77:12:74:40:49:e7:3f:c0:c0:76:
         97:3f:26:f3:82:14:88:e9:b5:e5:c6:36:0a:07:88:34:b8:7d:
         3c:02:9a:04:d4:df:e3:ad:92:ea:88:9a:2f:9a:45:7f:b2:b2:
         20:a7:12:e4:90:e7:d6:c1:67:dc:48:0d:58:35:da:cf:0d:e9:
         3d:ed:5a:d2:57:53:e1:99:e4:9d:ba:24:9d:88:ac:65:a9:47:
         d0:ad:96:86:eb:8e:3c:2f:60:29:05:af:62:47:38:d4:52:51:
         8f:5e:95:23:1c:e1:c9:ca:0b:80:c9:bf:bd:7d:8a:c0:cb:e8:
         36:f1:03:c0:75:91:f6:30:ae:97:41:47:7d:58:53:2a:fb:32:
         50:c8:96:b7:28:7f:d3:97:70:5a:8d:61:15:5c:c8:3b:59:48:
         6d:af:7b:b0:f1:27:59:15:a2:6e:69:85:52:9a:f3:4d:27:c4:
         d0:6c:51:e6:52:3f:cb:15:8c:2e:4e:b2:2e:d9:54:df:1e:7b:
         cd:5f:e0:23:25:f9:30:72:a4:d0:ef:be:af:04:6a:a6:a7:dc:
         08:e8:5a:24:73:c5:ee:ff:61:ce:0f:1e:bf:17:cc:5f:86:34:
         78:81:c8:3b:bd:45:70:41:6d:bb:6e:5d:ca:bd:48:38:79:2b:
         d4:4e:5b:d9:cc:49:29:a3:5f:d5:39:e2:71:94:03:a8:28:27:
         e8:36:1b:48:e0:b8:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
