Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, ST = California, L = San Francisco, O = Bogus Inc., OU = Operations, CN = Zlint test certificates CA
        Validity
            Not Before: Oct  1 09:01:11 2019 GMT
            Not After : Sep 30 09:01:11 2029 GMT
        Subject: C = US, ST = California, L = San Francisco, O = Bogus Inc., OU = Operations, CN = Zlint EKU SubCA 1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d8:96:4a:af:76:2b:91:9e:d5:44:80:4b:45:
                    19:38:76:9b:59:e2:bc:13:9a:dc:89:50:dc:88:33:
                    79:3c:00:33:2c:8d:5f:2a:74:db:9c:60:79:b1:eb:
                    a4:02:99:b1:c0:9f:34:00:4f:78:46:89:4f:59:be:
                    d7:22:be:74:13:0d:77:b8:cb:6e:bc:b0:c6:2e:ed:
                    22:2e:98:2e:91:8a:6e:c0:07:97:b8:bb:22:b8:5d:
                    37:81:59:e2:22:18:17:71:cf:f7:c0:b7:ef:ce:aa:
                    ec:c1:c5:72:e2:d7:0b:a6:bd:e7:5f:4c:e2:11:ba:
                    47:5c:37:6a:d3:5f:d0:29:42:af:d6:3c:27:be:cc:
                    8f:26:c5:e4:a1:8e:93:b3:e8:87:80:18:cd:47:2d:
                    fc:63:f5:e5:6b:6a:e4:b1:58:b9:d6:60:38:82:41:
                    9d:b2:19:19:dc:7c:6e:a7:b6:64:6a:82:23:90:44:
                    f9:59:bb:f1:c6:7c:73:0d:a1:0b:ac:dc:68:95:dd:
                    13:f3:17:45:63:ce:fe:43:67:f8:3a:2f:5d:cb:7e:
                    d8:b8:36:59:56:9b:8b:19:50:4a:fb:45:fa:08:40:
                    36:30:19:1b:60:53:99:8f:53:93:c2:5c:48:9c:05:
                    d6:8e:89:ac:bc:65:25:ee:10:4a:c6:0c:08:ac:a5:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                A6:1E:4B:45:81:FA:C2:41:C0:88:F7:62:C9:09:F8:BE:98:D7:F0:43
            X509v3 Authority Key Identifier: 
                keyid:F6:6E:67:49:02:D7:15:70:11:9C:8C:06:86:74:E0:32:61:16:C7:0E

            Authority Information Access: 
                CA Issuers - URI:http://example.com/ca/root.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://example.com/ca/root.crl

    Signature Algorithm: sha256WithRSAEncryption
         62:16:8f:8a:10:2a:f7:b3:ea:83:be:3d:7e:0e:aa:7f:f2:fa:
         a8:f6:63:c2:3d:52:61:a1:9b:fb:bd:82:90:19:1a:97:fd:8b:
         0c:58:21:5e:06:67:37:7f:49:07:fb:35:fe:7e:06:d8:58:0c:
         6c:40:55:71:82:0c:1f:13:ca:fb:5b:76:60:b6:c5:cf:c1:ad:
         e7:05:3f:c4:5c:ee:a6:29:62:25:50:be:f8:23:17:c4:70:3a:
         c9:99:fa:5c:17:6c:27:d5:63:8c:2f:d4:af:c6:f9:d8:44:fd:
         34:b7:34:29:e7:b3:aa:f7:39:bf:53:a2:b7:ef:f0:9a:85:71:
         7d:e9:29:d7:43:b5:13:b3:41:48:fb:0a:60:3c:0b:b4:63:9e:
         3c:aa:4f:c5:49:c1:f0:aa:00:8f:59:f3:2c:bf:53:74:81:f2:
         7f:0e:f3:fc:81:a5:73:2f:0f:a4:68:31:74:4b:62:f8:8b:c4:
         65:44:32:a0:2d:50:92:31:6c:da:92:b6:43:0e:07:04:65:13:
         1b:5c:5c:86:38:9c:39:1a:16:2b:6f:b9:c3:21:71:79:53:d2:
         15:7d:9a:4d:c9:c5:b9:ee:1c:da:74:76:45:a7:2b:a0:7a:8d:
         ea:82:16:da:a9:cd:2d:64:bd:6c:38:5b:d4:d5:43:38:28:e6:
         12:01:88:5f:cd:4d:04:a2:43:ea:64:3e:c1:d1:ae:6a:50:7e:
         05:b4:4e:e0:cc:ac:1d:89:36:c8:90:2f:9d:ab:f9:2b:cb:1f:
         39:0a:5d:db:3e:32:b0:7d:19:93:f4:3a:5d:2f:5f:1d:9a:1e:
         9d:71:ad:9d:f2:3e:91:10:53:6a:7a:08:fe:d9:e2:54:f6:b4:
         64:8d:5e:00:45:15:da:32:fd:c8:56:18:92:42:91:0a:04:93:
         4e:a8:35:e7:a7:7a:7c:24:e4:36:72:01:ea:84:3b:81:a9:a1:
         73:8b:9f:09:9e:b6:0f:58:26:22:16:60:71:83:be:df:b3:85:
         b6:6b:74:f6:e0:52:11:37:89:7f:18:1c:8f:c7:69:e7:1d:9d:
         82:c4:18:05:a4:7c:e9:99:11:4f:af:b4:fd:de:35:c5:10:bf:
         72:3c:12:73:07:b2:af:b6:98:05:0a:65:cf:2d:b0:0d:db:a2:
         10:9f:e6:75:4b:9b:0f:fa:f0:fa:64:19:ba:7b:3f:e3:2e:88:
         31:9b:99:44:a6:d7:41:67:0c:62:43:31:af:11:40:75:58:23:
         77:87:66:8f:2a:ca:14:e1:39:29:be:de:c8:5a:b1:0b:bd:f8:
         43:34:c3:61:3c:83:bb:44:e4:1c:6d:ce:46:b6:46:ad:14:7a:
         a4:cf:01:84:4e:75:ce:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
