Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bf:66:01:2a:2d:31:00:cd:04:e4:22:1f:68:2b:18
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = XX, O = Some CA, CN = Fake CA for zlint testing
        Validity
            Not Before: Jun  5 06:59:30 2025 GMT
            Not After : Jun  5 06:59:30 2026 GMT
        Subject: C = XX, ST = Some State or Province, L = Somewhere, O = Some Company Ltd., CN = example.org, serialNumber = 1234567890, businessCategory = Non-Commercial Entity
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c4:50:56:f8:ba:7a:c7:0a:a9:04:64:33:20:
                    91:bc:7d:8f:f4:de:1f:d3:2c:e1:26:1a:4d:5a:61:
                    73:a6:f2:67:5e:a4:89:13:74:d5:80:d2:86:31:fd:
                    0f:3b:5f:80:40:a2:ce:c6:27:8f:8b:ce:b5:e5:d9:
                    7e:9b:60:6a:8e:24:84:0b:97:bd:23:06:b4:15:7b:
                    bb:95:9c:b1:fc:76:f3:35:6e:15:50:bc:04:cf:07:
                    f4:2d:12:54:00:1c:11:a8:54:49:ad:62:e2:e7:c2:
                    46:92:04:93:a4:0e:9a:7d:4d:a0:9a:bb:56:28:1c:
                    b1:9a:3e:d1:59:57:1c:0f:52:dc:78:a2:1c:9d:45:
                    95:eb:73:85:ca:fe:7c:e0:23:f4:87:15:75:69:21:
                    11:bb:4a:ac:d7:ef:15:35:eb:ed:3f:ff:40:1c:5c:
                    92:c4:93:88:4f:4f:9c:4c:d5:87:a0:b2:7a:93:aa:
                    4b:6e:ee:7d:42:e2:68:e0:64:ec:13:e6:d5:6d:ba:
                    5d:69:be:15:ed:16:2b:1f:87:34:d7:97:90:71:65:
                    a0:f8:50:82:ec:ca:6f:65:9a:b8:3b:5d:50:8a:19:
                    d0:42:ac:27:a3:a3:80:b6:43:ce:2d:e5:c6:39:90:
                    e3:b6:84:9d:31:43:b4:c5:00:07:89:7b:ef:b2:a5:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            X509v3 Subject Key Identifier: 
                A1:44:2C:33:F6:C3:44:E3:16:CE:C0:71:32:4A:8E:1A:2C:78:68:B4
            X509v3 Authority Key Identifier: 
                keyid:E8:B6:F6:76:4B:D0:3B:E5:46:A5:F9:54:D4:7E:07:B3:DE:0D:60:3E

            Authority Information Access: 
                OCSP - URI:http://ca.someca-inc.com/ocsp
                CA Issuers - URI:http://ca.someca-inc.com/root

            X509v3 Subject Alternative Name: 
                DNS:example.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.someca-inc.com/crl

    Signature Algorithm: sha256WithRSAEncryption
         16:e8:9e:73:20:c3:4a:28:76:61:c1:30:82:15:b1:c3:66:36:
         77:82:ec:59:fc:95:24:c6:91:fb:b4:15:98:02:f6:64:32:ba:
         cd:32:17:95:af:46:82:85:54:08:d8:ed:c6:8a:54:dc:cf:ef:
         c3:c3:f1:3e:a0:9e:63:30:5b:bd:05:97:66:c9:02:49:df:1b:
         66:bb:20:0b:69:5e:c9:37:e6:83:54:f8:e3:73:f6:74:d4:5f:
         a5:09:8a:99:6e:23:27:53:c9:92:46:85:df:a7:f5:ab:42:33:
         76:59:64:c6:c2:18:9f:4c:bc:de:79:f3:3d:c4:e8:f8:93:a7:
         38:f8:e0:72:47:75:96:05:c2:85:37:44:24:ac:a2:3d:43:b0:
         e1:d0:a5:1c:5b:19:fb:3f:0a:a9:d6:33:0d:1d:c3:e9:f0:b9:
         63:d7:da:45:a0:9f:34:1e:c0:97:3f:77:01:e3:5c:8b:8e:ad:
         54:9e:3f:7a:ef:58:da:36:29:2a:08:b2:31:f2:85:6f:b4:02:
         f8:9e:91:fa:39:e1:d3:82:96:91:70:66:18:9c:4b:f8:86:21:
         cc:90:83:64:38:b2:ff:16:40:c3:a8:05:85:e6:b6:37:73:32:
         a7:f8:ae:e4:be:23:fd:2e:86:ea:81:df:9d:21:f1:9f:31:bb:
         95:23:57:f7
-----BEGIN CERTIFICATE-----
MIIErTCCA5WgAwIBAgIQSr9mASotMQDNBOQiH2grGDANBgkqhkiG9w0BAQsFADBD
MQswCQYDVQQGEwJYWDEQMA4GA1UEChMHU29tZSBDQTEiMCAGA1UEAxMZRmFrZSBD
QSBmb3IgemxpbnQgdGVzdGluZzAeFw0yNTA2MDUwNjU5MzBaFw0yNjA2MDUwNjU5
MzBaMIGpMQswCQYDVQQGEwJYWDEfMB0GA1UECBMWU29tZSBTdGF0ZSBvciBQcm92
aW5jZTESMBAGA1UEBxMJU29tZXdoZXJlMRowGAYDVQQKExFTb21lIENvbXBhbnkg
THRkLjEUMBIGA1UEAxMLZXhhbXBsZS5vcmcxEzARBgNVBAUTCjEyMzQ1Njc4OTAx
HjAcBgNVBA8TFU5vbi1Db21tZXJjaWFsIEVudGl0eTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAOfEUFb4unrHCqkEZDMgkbx9j/TeH9Ms4SYaTVphc6by
Z16kiRN01YDShjH9DztfgECizsYnj4vOteXZfptgao4khAuXvSMGtBV7u5Wcsfx2
8zVuFVC8BM8H9C0SVAAcEahUSa1i4ufCRpIEk6QOmn1NoJq7VigcsZo+0VlXHA9S
3HiiHJ1Fletzhcr+fOAj9IcVdWkhEbtKrNfvFTXr7T//QBxcksSTiE9PnEzVh6Cy
epOqS27ufULiaOBk7BPm1W26XWm+Fe0WKx+HNNeXkHFloPhQguzKb2WauDtdUIoZ
0EKsJ6OjgLZDzi3lxjmQ47aEnTFDtMUAB4l777Kl0g8CAwEAAaOCATQwggEwMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHQYD
VR0OBBYEFKFELDP2w0TjFs7AcTJKjhoseGi0MB8GA1UdIwQYMBaAFOi29nZL0Dvl
RqX5VNR+B7PeDWA+MGQGCCsGAQUFBwEBBFgwVjApBggrBgEFBQcwAYYdaHR0cDov
L2NhLnNvbWVjYS1pbmMuY29tL29jc3AwKQYIKwYBBQUHMAKGHWh0dHA6Ly9jYS5z
b21lY2EtaW5jLmNvbS9yb290MBYGA1UdEQQPMA2CC2V4YW1wbGUub3JnMBIGA1Ud
IAQLMAkwBwYFZ4EMAQEwLQYDVR0fBCYwJDAioCCgHoYcaHR0cDovL2NhLnNvbWVj
YS1pbmMuY29tL2NybDANBgkqhkiG9w0BAQsFAAOCAQEAFuiecyDDSih2YcEwghWx
w2Y2d4LsWfyVJMaR+7QVmAL2ZDK6zTIXla9GgoVUCNjtxopU3M/vw8PxPqCeYzBb
vQWXZskCSd8bZrsgC2leyTfmg1T443P2dNRfpQmKmW4jJ1PJkkaF36f1q0Izdllk
xsIYn0y83nnzPcTo+JOnOPjgckd1lgXChTdEJKyiPUOw4dClHFsZ+z8KqdYzDR3D
6fC5Y9faRaCfNB7Alz93AeNci46tVJ4/eu9Y2jYpKgiyMfKFb7QC+J6R+jnh04KW
kXBmGJxL+IYhzJCDZDiy/xZAw6gFhea2N3Myp/iu5L4j/S6G6oHfnSHxnzG7lSNX
9w==
-----END CERTIFICATE-----
