Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5d:5d:77:7e:9c:cd:57:03:5b:bb:65:0a:db:70:19
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Apr 29 07:50:51 2024 GMT
            Not After : Apr 29 07:50:51 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:be:ac:45:65:b0:1f:3e:48:bc:f7:8c:a0:
                    74:ff:b0:12:81:e0:c3:56:54:ca:2e:98:ef:9e:2f:
                    a1:b1:3f:35:8b:e7:bc:2a:a6:00:15:39:c2:a0:a7:
                    8d:82:69:40:64:c8:2b:4b:e3:02:83:8e:fc:ff:5b:
                    38:f1:e6:cd:d2:2d:97:c6:bb:16:9a:21:83:e5:4f:
                    45:20:f8:02:e8:a3:54:20:bd:80:26:f7:e4:6e:6e:
                    1b:97:de:e6:aa:36:be:1e:7a:5a:1e:23:d4:40:8a:
                    59:67:9d:39:b7:2d:58:56:9d:f9:d0:f1:d7:19:47:
                    ed:66:d2:2f:00:79:cd:ee:52:4c:da:35:27:b4:1e:
                    4c:27:f5:66:d5:8a:f3:fe:77:bd:93:e4:49:06:dd:
                    2c:f4:9e:64:b8:a7:be:f4:bb:10:54:d5:7f:88:a9:
                    8d:1d:36:cd:45:47:72:41:de:32:25:11:ec:e5:74:
                    58:9f:1e:ad:19:7a:85:49:71:27:4c:95:f0:b7:4e:
                    18:f1:ef:4a:4f:00:e2:db:bb:f9:fc:26:cd:12:a9:
                    4a:13:b4:8f:70:08:9b:69:0b:c8:7e:33:42:28:f0:
                    3a:59:59:7b:aa:7e:d3:9f:d5:6f:c4:b2:67:c6:c2:
                    bd:67:33:a2:01:3d:5b:ec:a1:98:b4:17:de:b8:df:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                71:C2:DE:BD:F0:7E:64:F8:06:3E:92:29:54:90:C8:24:34:A8:EC:02
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

            CT Precertificate SCTs: 

    Signature Algorithm: sha256WithRSAEncryption
         a7:02:df:31:70:db:35:d2:3c:c3:ab:f0:b8:bb:5a:4c:7f:74:
         97:3c:83:6a:f4:ec:e9:7a:ff:0c:40:4f:8e:21:11:7e:cf:2c:
         6d:00:ed:0b:b4:db:ed:1a:e6:f6:c9:8b:6f:19:e6:98:0e:07:
         d7:b8:1e:bf:10:54:3f:88:82:ae:83:76:53:a8:b2:91:b9:88:
         12:45:c9:8b:4e:02:e0:b4:55:41:7b:6e:c9:e1:83:79:db:f5:
         67:63:b9:58:d7:d7:ca:d5:95:b4:ba:03:dc:d2:e9:d1:ac:34:
         26:38:52:41:02:de:07:ef:62:1b:9a:00:b0:41:b0:b6:9e:14:
         f1:44:92:ba:cd:d7:91:9d:12:94:50:1a:90:7d:d5:3e:d3:b4:
         24:88:f3:7e:26:d2:fa:cb:3f:e5:fa:07:80:69:60:09:41:2b:
         49:62:f9:b7:da:a0:89:ee:17:ea:95:ba:d1:9c:59:7d:00:d3:
         d9:af:2f:f9:a9:b2:83:6a:22:7b:df:6a:59:5d:e0:0c:79:ee:
         af:c2:03:70:20:f1:1f:02:c0:72:d5:d8:cf:84:e8:16:8d:bf:
         21:3c:42:e3:72:46:de:e2:7c:e4:5a:9d:f4:76:81:44:03:05:
         3f:38:1e:c5:50:1f:41:84:bd:40:83:10:90:2a:ea:6a:8b:06:
         37:6b:50:91
-----BEGIN CERTIFICATE-----
MIIEojCCA4qgAwIBAgIQFV1dd36czVcDW7tlCttwGTANBgkqhkiG9w0BAQsFADBD
MQswCQYDVQQGEwJYWDEQMA4GA1UEChMHU29tZSBDQTEiMCAGA1UEAxMZRmFrZSBD
QSBmb3IgemxpbnQgdGVzdGluZzAeFw0yNDA0MjkwNzUwNTFaFw0yNTA0MjkwNzUw
NTFaMIGJMQswCQYDVQQGEwJJVDEfMB0GA1UECBMWU29tZSBTdGF0ZSBvciBQcm92
aW5jZTESMBAGA1UEBxMJU29tZXdoZXJlMRowGAYDVQQKExFTb21lIENvbXBhbnkg
THRkLjEUMBIGA1UEAxMLZXhhbXBsZS5vcmcxEzARBgNVBAUTCjEyMzQ1Njc4OTAw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3L6sRWWwHz5IvPeMoHT/
sBKB4MNWVMoumO+eL6GxPzWL57wqpgAVOcKgp42CaUBkyCtL4wKDjvz/Wzjx5s3S
LZfGuxaaIYPlT0Ug+ALoo1QgvYAm9+RubhuX3uaqNr4eeloeI9RAillnnTm3LVhW
nfnQ8dcZR+1m0i8Aec3uUkzaNSe0Hkwn9WbVivP+d72T5EkG3Sz0nmS4p770uxBU
1X+IqY0dNs1FR3JB3jIlEezldFifHq0ZeoVJcSdMlfC3Thjx70pPAOLbu/n8Js0S
qUoTtI9wCJtpC8h+M0Io8DpZWXuqftOf1W/EsmfGwr1nM6IBPVvsoZi0F96431MH
AgMBAAGjggFJMIIBRTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMBMB0GA1UdDgQWBBRxwt698H5k+AY+kilUkMgkNKjsAjAfBgNV
HSMEGDAWgBTotvZ2S9A75Ual+VTUfgez3g1gPjBkBggrBgEFBQcBAQRYMFYwKQYI
KwYBBQUHMAGGHWh0dHA6Ly9jYS5zb21lY2EtaW5jLmNvbS9vY3NwMCkGCCsGAQUF
BzAChh1odHRwOi8vY2Euc29tZWNhLWluYy5jb20vcm9vdDAWBgNVHREEDzANggtl
eGFtcGxlLm9yZzATBgNVHSAEDDAKMAgGBmeBDAECAjAtBgNVHR8EJjAkMCKgIKAe
hhxodHRwOi8vY2Euc29tZWNhLWluYy5jb20vY3JsMBIGCisGAQQB1nkCBAIEBAQC
AAAwDQYJKoZIhvcNAQELBQADggEBAKcC3zFw2zXSPMOr8Li7Wkx/dJc8g2r07Ol6
/wxAT44hEX7PLG0A7Qu02+0a5vbJi28Z5pgOB9e4Hr8QVD+Igq6DdlOospG5iBJF
yYtOAuC0VUF7bsnhg3nb9WdjuVjX18rVlbS6A9zS6dGsNCY4UkEC3gfvYhuaALBB
sLaeFPFEkrrN15GdEpRQGpB91T7TtCSI834m0vrLP+X6B4BpYAlBK0li+bfaoInu
F+qVutGcWX0A09mvL/mpsoNqInvfalld4Ax57q/CA3Ag8R8CwHLV2M+E6BaNvyE8
QuNyRt7ifORanfR2gUQDBT84HsVQH0GEvUCDEJAq6mqLBjdrUJE=
-----END CERTIFICATE-----
