Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:3c:15:0f:b8:82:41:59:6f:de:32:f6:c4:e4:50
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Jul 11 13:30:34 2024 GMT
            Not After : Jul 11 13:30:34 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:9e:f8:da:c4:aa:9a:f6:77:09:97:d3:61:
                    b6:22:ad:5b:3a:07:81:f8:89:62:4a:06:65:64:79:
                    e1:0e:ec:dc:98:da:8c:76:6f:26:d4:16:6b:9e:79:
                    fb:e6:0a:9a:21:6b:5d:67:2f:72:aa:32:db:5c:92:
                    75:8e:01:7b:a5:bf:cc:7e:77:4b:ec:bc:0f:46:c9:
                    62:ee:45:f3:df:fd:32:2e:54:d0:8c:ec:05:ca:7e:
                    cc:d0:92:96:2a:be:89:3b:df:3c:cb:64:d2:f3:88:
                    21:b6:de:89:eb:75:62:f3:80:1b:2c:7c:8e:64:71:
                    4c:2a:d2:03:ac:bb:94:40:1e:a4:f7:00:c7:e5:4e:
                    ea:a1:73:1c:5c:61:70:bd:bb:ca:eb:07:34:60:8f:
                    62:12:12:77:bf:fc:ef:11:1d:40:5f:7b:3c:19:2e:
                    45:f8:8d:af:f4:3f:c1:34:46:a7:2a:ef:36:73:87:
                    a4:30:4d:e7:43:13:8c:02:41:f8:a9:ea:ef:83:e7:
                    4c:3e:03:75:32:01:e2:2f:df:32:e4:4b:0b:56:f4:
                    06:13:93:d9:f0:45:3f:95:fe:6a:af:73:7a:6a:4b:
                    60:b1:5a:3c:12:5c:48:12:c9:ca:00:5b:26:a2:bc:
                    ed:ac:9e:18:5a:39:93:03:49:2b:7d:13:8a:cf:4b:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                56:78:68:AF:40:0E:8A:F3:E0:9A:BA:E5:5D:35:F1:02:AE:C5:7F:9E
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         3e:02:29:57:9f:cb:2f:8a:33:4d:35:7b:51:b0:d3:3f:ec:dd:
         94:cc:42:f3:4f:9a:b4:c2:53:22:c7:8f:dc:63:1c:d7:b7:e5:
         36:eb:9b:fd:fd:66:2a:79:51:70:0d:82:c9:5f:93:ed:10:28:
         dd:a0:33:45:b5:a2:2a:2a:4c:2e:cf:82:e0:72:f9:9a:54:97:
         50:29:ce:e8:21:94:03:69:a5:14:ed:c9:93:5c:4d:9e:d7:f8:
         3e:6b:2f:f2:95:2c:39:6b:45:e8:ca:87:c3:7b:32:34:75:cf:
         bd:a4:c5:54:8f:92:a9:d9:ce:d2:66:7d:c8:15:7f:27:5d:14:
         8a:6a:22:21:de:7d:66:93:47:02:f5:c5:82:c8:0a:ea:25:38:
         3a:0a:63:f6:7f:74:bb:a1:b5:5c:07:4f:bb:d6:ea:a6:8e:db:
         fa:88:7f:0f:d9:db:9f:26:ac:85:73:95:e2:21:c5:8a:98:97:
         88:04:03:3d:b0:62:6d:27:49:84:7d:01:f9:2f:a8:c2:d8:b9:
         72:cb:4b:6f:43:5f:7c:b0:35:52:d3:ab:53:ce:98:fa:9f:40:
         cc:b8:22:64:6a:98:64:55:e1:b5:62:e2:e1:a2:f9:c9:7b:a6:
         01:d7:a1:25:ee:62:8a:6c:b0:7c:27:96:0c:38:b3:5c:18:e4:
         5b:c9:e0:38
-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIQUso8FQ+4gkFZb94y9sTkUDANBgkqhkiG9w0BAQsFADBD
MQswCQYDVQQGEwJYWDEQMA4GA1UEChMHU29tZSBDQTEiMCAGA1UEAxMZRmFrZSBD
QSBmb3IgemxpbnQgdGVzdGluZzAeFw0yNDA3MTExMzMwMzRaFw0yNTA3MTExMzMw
MzRaMIGJMQswCQYDVQQGEwJJVDEfMB0GA1UECBMWU29tZSBTdGF0ZSBvciBQcm92
aW5jZTESMBAGA1UEBxMJU29tZXdoZXJlMRowGAYDVQQKExFTb21lIENvbXBhbnkg
THRkLjEUMBIGA1UEAxMLZXhhbXBsZS5vcmcxEzARBgNVBAUTCjEyMzQ1Njc4OTAw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmp742sSqmvZ3CZfTYbYi
rVs6B4H4iWJKBmVkeeEO7NyY2ox2bybUFmueefvmCpoha11nL3KqMttcknWOAXul
v8x+d0vsvA9GyWLuRfPf/TIuVNCM7AXKfszQkpYqvok73zzLZNLziCG23onrdWLz
gBssfI5kcUwq0gOsu5RAHqT3AMflTuqhcxxcYXC9u8rrBzRgj2ISEne//O8RHUBf
ezwZLkX4ja/0P8E0Rqcq7zZzh6QwTedDE4wCQfip6u+D50w+A3UyAeIv3zLkSwtW
9AYTk9nwRT+V/mqvc3pqS2CxWjwSXEgSycoAWyaivO2snhhaOZMDSSt9E4rPS3az
AgMBAAGjggE1MIIBMTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMBMB0GA1UdDgQWBBRWeGivQA6K8+CauuVdNfECrsV/njAfBgNV
HSMEGDAWgBTotvZ2S9A75Ual+VTUfgez3g1gPjBkBggrBgEFBQcBAQRYMFYwKQYI
KwYBBQUHMAGGHWh0dHA6Ly9jYS5zb21lY2EtaW5jLmNvbS9vY3NwMCkGCCsGAQUF
BzAChh1odHRwOi8vY2Euc29tZWNhLWluYy5jb20vcm9vdDAWBgNVHREEDzANggtl
eGFtcGxlLm9yZzATBgNVHSAEDDAKMAgGBmeBDAECAjAtBgNVHR8EJjAkMCKgIKAe
hhxodHRwOi8vY2Euc29tZWNhLWluYy5jb20vY3JsMA0GCSqGSIb3DQEBCwUAA4IB
AQA+AilXn8svijNNNXtRsNM/7N2UzELzT5q0wlMix4/cYxzXt+U265v9/WYqeVFw
DYLJX5PtECjdoDNFtaIqKkwuz4LgcvmaVJdQKc7oIZQDaaUU7cmTXE2e1/g+ay/y
lSw5a0XoyofDezI0dc+9pMVUj5Kp2c7SZn3IFX8nXRSKaiIh3n1mk0cC9cWCyArq
JTg6CmP2f3S7obVcB0+71uqmjtv6iH8P2dufJqyFc5XiIcWKmJeIBAM9sGJtJ0mE
fQH5L6jC2Llyy0tvQ198sDVS06tTzpj6n0DMuCJkaphkVeG1YuLhovnJe6YB16El
7mKKbLB8J5YMOLNcGORbyeA4
-----END CERTIFICATE-----
