github.com/zmap/zlint@v1.1.0/testlint/testCerts/emptyPermittedDNSBadExcludedDNS.pem (about)

     1  Certificate:
     2      Data:
     3          Version: 3 (0x2)
     4          Serial Number: 18008675309 (0x4316693ed)
     5      Signature Algorithm: sha256WithRSAEncryption
     6          Issuer: C = US, O = Mother Nature, OU = Everything, CN = Mother Nature
     7          Validity
     8              Not Before: Jan  1 00:00:00 2014 GMT
     9              Not After : Jan  1 00:00:00 2015 GMT
    10          Subject: C = US, O = Extreme Discord, OU = Chaos, L = Tallahassee, ST = FL, street = 3210 Holly Mill Run, postalCode = 30062, CN = gov.us
    11          Subject Public Key Info:
    12              Public Key Algorithm: rsaEncryption
    13                  Public-Key: (512 bit)
    14                  Modulus:
    15                      00:b7:23:b6:eb:5e:ff:b0:12:2e:f0:0a:4f:a5:a5:
    16                      d3:62:48:f6:71:51:d7:67:ad:27:f4:98:6d:0e:b6:
    17                      ba:f5:89:0a:fc:43:b6:4a:c9:4e:af:ef:6f:ab:05:
    18                      35:7d:d3:05:fa:78:02:81:a9:0a:fe:30:be:ea:f9:
    19                      34:f1:35:9f:ef
    20                  Exponent: 65537 (0x10001)
    21          X509v3 extensions:
    22              X509v3 Key Usage: critical
    23                  Digital Signature, Key Encipherment, Certificate Sign
    24              X509v3 Extended Key Usage: 
    25                  TLS Web Client Authentication, TLS Web Server Authentication
    26              X509v3 Basic Constraints: critical
    27                  CA:TRUE
    28              X509v3 Authority Key Identifier: 
    29                  keyid:01:02:03
    30  
    31              Authority Information Access: 
    32                  OCSP - URI:http://theca.net/ocsp
    33                  CA Issuers - URI:http://theca.net/totallythecert.crt
    34  
    35              X509v3 Certificate Policies: 
    36                  Policy: 2.23.140.1.2.2
    37  
    38              X509v3 Name Constraints: 
    39                  Excluded:
    40                    DNS:example.com
    41  
    42              X509v3 Subject Key Identifier: 
    43                  04:03:02:01
    44              X509v3 Subject Alternative Name: 
    45                  URI:, DNS:ĀĻ
    46              X509v3 Inhibit Any Policy: 
    47                  ..
    48              Subject Information Access: 
    49                  ..
    50      Signature Algorithm: sha256WithRSAEncryption
    51           6c:ce:f3:9d:e7:14:fb:c2:fb:38:0c:f8:e1:83:9c:b3:26:83:
    52           b4:c3:53:e1:f4:fb:0b:41:87:76:3b:bb:b7:ad:fe:56:8e:f0:
    53           31:c6:bc:a8:71:ba:1b:d9:3c:89:e9:e4:40:40:66:97:68:62:
    54           81:dc:64:f9:97:92:df:c4:96:bd
    55  -----BEGIN CERTIFICATE-----
    56  MIIDBzCCArOgAwIBAgIFBDFmk+0wCwYJKoZIhvcNAQELMFQxCzAJBgNVBAYTAlVT
    57  MRYwFAYDVQQKEw1Nb3RoZXIgTmF0dXJlMRMwEQYDVQQLEwpFdmVyeXRoaW5nMRYw
    58  FAYDVQQDEw1Nb3RoZXIgTmF0dXJlMQAwHhcNMTQwMTAxMDAwMDAwWhcNMTUwMTAx
    59  MDAwMDAwWjCBmzELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0V4dHJlbWUgRGlzY29y
    60  ZDEOMAwGA1UECxMFQ2hhb3MxFDASBgNVBAcTC1RhbGxhaGFzc2VlMQswCQYDVQQI
    61  EwJGTDEcMBoGA1UECRMTMzIxMCBIb2xseSBNaWxsIFJ1bjEOMAwGA1UEERMFMzAw
    62  NjIxDzANBgNVBAMTBmdvdi51czEAMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALcj
    63  tute/7ASLvAKT6Wl02JI9nFR12etJ/SYbQ62uvWJCvxDtkrJTq/vb6sFNX3TBfp4
    64  AoGpCv4wvur5NPE1n+8CAwEAAaOCASQwggEgMA4GA1UdDwEB/wQEAwIApDAdBgNV
    65  HSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
    66  HSMEBzAFgAMBAgMwYgYIKwYBBQUHAQEEVjBUMCEGCCsGAQUFBzABhhVodHRwOi8v
    67  dGhlY2EubmV0L29jc3AwLwYIKwYBBQUHMAKGI2h0dHA6Ly90aGVjYS5uZXQvdG90
    68  YWxseXRoZWNlcnQuY3J0MBMGA1UdIAQMMAowCAYGZ4EMAQICMBoGA1UdHgQTMBGh
    69  DzANggtleGFtcGxlLmNvbTANBgNVHQ4EBgQEBAMCATAPBgNVHREECDAGhgCCAsCo
    70  MAkGA1UdNgQCAgEwDgYIKwYBBQUHAQsEAgIBMAsGCSqGSIb3DQEBCwNBAGzO853n
    71  FPvC+zgM+OGDnLMmg7TDU+H0+wtBh3Y7u7et/laO8DHGvKhxuhvZPInp5EBAZpdo
    72  YoHcZPmXkt/Elr0=
    73  -----END CERTIFICATE-----