Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c3:df:af:c9:62:ab:08:8e:47:66:9b:48:86:46:c3:8d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Nov 30 16:27:37 2024 GMT
            Not After : Nov 30 16:27:37 2025 GMT
        Subject: C = XX, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890, organizationIdentifier = NTRFR-1234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:08:d4:ee:71:02:bf:27:24:a5:91:31:a9:
                    d5:ef:f7:b8:b2:4a:21:08:af:e0:3d:83:4d:7b:ae:
                    2f:53:c5:ba:c3:93:0f:9a:6c:59:5b:5a:e4:b6:de:
                    a9:57:5b:f8:e1:fd:83:d9:54:7a:68:3d:94:e0:36:
                    93:a5:f4:74:15:f8:14:17:01:99:af:fd:29:5a:fe:
                    ee:0e:61:48:f0:05:26:1b:69:aa:ec:b0:61:3c:04:
                    ad:d4:eb:1b:61:9d:e1:3e:0e:8e:2d:b4:b3:c9:1c:
                    f9:6f:96:8b:f2:c4:d1:f2:8d:83:ec:cd:31:8b:df:
                    3a:5d:63:41:29:af:79:2a:04:65:0d:c3:30:be:e6:
                    b2:0f:c0:6c:f1:05:8f:71:09:51:a0:c0:25:5a:15:
                    af:02:0f:46:37:06:ed:4c:fb:98:ea:55:50:05:d2:
                    d1:2c:00:d4:52:fd:ea:96:04:cc:e2:dc:fc:60:d9:
                    1d:6c:45:33:88:d4:01:72:9c:be:12:eb:43:82:64:
                    1a:b5:e5:f5:c1:10:2c:db:bc:de:97:69:fd:da:30:
                    fd:05:85:7c:e9:89:5d:83:a4:17:0a:24:04:3b:a1:
                    29:91:72:ce:9f:0a:00:ca:20:f7:1a:9a:b3:b3:38:
                    a7:7f:df:e9:8f:65:e0:3c:db:34:50:89:26:26:55:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                CD:C5:2C:D5:D5:B1:D7:DB:56:0A:2D:BD:7F:CF:E5:B6:4C:98:E9:11
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

            2.23.140.3.1: 
                0...NTR..FR.
1234567890
    Signature Algorithm: sha256WithRSAEncryption
         86:7d:85:3f:60:29:1a:53:ae:13:39:0d:8b:98:ba:d9:7f:cb:
         59:5b:44:20:03:47:b0:b0:64:27:de:c8:11:e0:4a:b5:f8:22:
         27:cd:79:39:a8:2b:1b:c6:09:4e:22:fe:e2:66:45:da:10:f3:
         5f:21:c4:09:5b:56:99:0d:48:1e:b5:e9:0b:e7:0e:62:01:2d:
         75:6d:6d:01:32:83:34:d9:31:11:cb:e4:ab:bd:ca:d8:2c:fc:
         fa:b5:e4:f7:89:64:0f:a3:37:8a:89:37:fb:3e:90:85:64:6b:
         f9:0e:3d:1c:d9:26:6c:e7:2f:c0:72:26:d2:51:ba:aa:4d:0e:
         8f:96:63:43:74:a7:58:0f:de:0e:b1:3a:d1:47:e8:f4:a7:5f:
         63:14:4a:09:ba:da:55:32:2d:68:97:76:d4:c1:d9:ae:d0:38:
         18:5a:2b:03:d5:96:16:c9:e5:74:97:52:c0:f8:49:45:3a:45:
         af:99:ce:fd:b8:f4:f1:a7:53:8f:f5:39:7e:9b:81:7b:8e:5b:
         df:30:89:d8:ef:1b:19:f5:ab:c1:96:f4:b0:1c:6b:fc:16:1c:
         b2:cf:c6:85:21:1e:4a:73:f8:86:4b:e8:08:2c:0a:a5:52:68:
         2c:99:39:29:52:c2:55:31:72:8e:ba:2a:8b:0c:57:51:10:34:
         f8:20:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
