Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b9:12:bb:65:5d:81:3c:72:af:02:67:0f:05:5d:6b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = EU, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Apr  9 11:59:35 2024 GMT
            Not After : Apr  9 11:59:35 2025 GMT
        Subject: C = IT, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.com, serialNumber = 1234567890, businessCategory = Private Organisation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:86:9a:c7:d8:f5:f7:84:22:0e:c7:e2:81:
                    64:b3:9f:b6:8b:ab:30:be:50:64:be:60:a3:e5:e1:
                    50:dc:36:e3:47:96:05:f0:01:60:9f:ea:de:19:b8:
                    7f:8f:30:90:a3:98:8b:2f:d7:7a:f5:0b:30:16:07:
                    c0:15:54:08:fe:c7:20:41:f6:63:25:54:df:72:7f:
                    2f:8f:10:a2:0c:f6:d7:c6:3a:a7:77:20:a1:5c:c1:
                    98:fc:42:c4:8a:55:77:fc:b4:52:81:5c:eb:b6:00:
                    79:21:ce:a8:7b:66:69:bc:b2:d5:8c:3f:a9:6d:4c:
                    1b:6b:e1:85:cb:6f:3e:97:c7:79:f7:e7:00:6d:1a:
                    ca:98:e4:60:bc:fd:42:81:a9:ae:85:42:b2:1f:c2:
                    32:32:5f:00:d2:ab:82:3a:03:52:7f:02:92:df:8b:
                    de:d1:05:cc:d7:27:2f:77:cd:e2:3e:37:a1:49:0c:
                    db:57:21:b4:9b:d1:0d:ae:00:e2:2c:d5:73:08:82:
                    97:3d:d3:46:bc:4c:19:15:c9:b7:fe:70:95:47:71:
                    bc:b1:bc:61:22:e1:da:c6:38:fd:9c:f6:fd:bb:87:
                    ba:4c:94:c0:b9:cc:5d:fe:42:b3:aa:22:cb:bf:87:
                    e8:94:1e:f1:85:17:39:9c:e1:4c:98:69:94:96:53:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                97:F9:56:33:D9:8E:3E:D8:10:8F:7F:36:04:04:5E:73:04:F4:CE:F5
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:2e:1a:b3:ea:07:bc:73:8c:fa:2d:37:ff:b7:93:d8:10:
         a2:2e:3a:d7:f4:3a:8e:75:51:56:a2:9a:61:37:7b:15:80:1c:
         31:00:bc:27:35:8d:92:aa:54:5b:13:30:4a:76:65:3b:dd:0b:
         4d:8d:f3:df:76:54:97:fd:ec:e6:14:92:06:91:08:c5:6d:02:
         ed:88:aa:c8:30:00:f8:12:9d:f9:4e:bc:f4:de:21:c5:ee:55:
         e9:27:43:8c:13:a6:d2:a2:9a:cd:48:aa:e7:64:0a:88:91:78:
         ae:f5:de:a2:b9:cd:6a:42:94:00:0c:49:3e:d9:8a:81:25:81:
         d7:04:09:07:32:f9:dc:dd:76:e9:3c:1c:d7:65:74:b3:5c:fd:
         b8:aa:f2:76:f8:59:97:a0:47:14:e7:8c:5e:ed:fd:af:41:dd:
         d6:51:87:1e:0a:a7:35:d6:77:04:42:0a:b7:f2:aa:80:e9:62:
         27:0e:dd:b8:4d:7e:1a:af:75:1c:0a:f0:31:aa:c1:8e:cf:e7:
         c6:bd:4a:7c:0a:c2:98:18:2e:a0:8d:76:a6:86:e2:0c:3f:4b:
         bf:44:56:cf:2f:ad:02:6a:61:9e:0f:37:8a:91:1a:26:08:ca:
         31:ed:d1:78:fc:cf:fd:49:80:dc:64:fc:c0:53:9d:45:32:f4:
         6f:0d:07:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
