This is a real-world certificate (in fact the same as cert_version3.pem)


$ openssl asn1parse -i < [TBS CERTIFICATE]
    0:d=0  hl=4 l=1087 cons: SEQUENCE          
    4:d=1  hl=2 l=   3 cons:  cont [ 0 ]        
    6:d=2  hl=2 l=   1 prim:   INTEGER           :02
    9:d=1  hl=2 l=   7 prim:  INTEGER           :2B63A42A705076
   18:d=1  hl=2 l=  13 cons:  SEQUENCE          
   20:d=2  hl=2 l=   9 prim:   OBJECT            :sha1WithRSAEncryption
   31:d=2  hl=2 l=   0 prim:   NULL              
   33:d=1  hl=3 l= 202 cons:  SEQUENCE          
   36:d=2  hl=2 l=  11 cons:   SET               
   38:d=3  hl=2 l=   9 cons:    SEQUENCE          
   40:d=4  hl=2 l=   3 prim:     OBJECT            :countryName
   45:d=4  hl=2 l=   2 prim:     PRINTABLESTRING   :US
   49:d=2  hl=2 l=  16 cons:   SET               
   51:d=3  hl=2 l=  14 cons:    SEQUENCE          
   53:d=4  hl=2 l=   3 prim:     OBJECT            :stateOrProvinceName
   58:d=4  hl=2 l=   7 prim:     PRINTABLESTRING   :Arizona
   67:d=2  hl=2 l=  19 cons:   SET               
   69:d=3  hl=2 l=  17 cons:    SEQUENCE          
   71:d=4  hl=2 l=   3 prim:     OBJECT            :localityName
   76:d=4  hl=2 l=  10 prim:     PRINTABLESTRING   :Scottsdale
   88:d=2  hl=2 l=  26 cons:   SET               
   90:d=3  hl=2 l=  24 cons:    SEQUENCE          
   92:d=4  hl=2 l=   3 prim:     OBJECT            :organizationName
   97:d=4  hl=2 l=  17 prim:     PRINTABLESTRING   :GoDaddy.com, Inc.
  116:d=2  hl=2 l=  51 cons:   SET               
  118:d=3  hl=2 l=  49 cons:    SEQUENCE          
  120:d=4  hl=2 l=   3 prim:     OBJECT            :organizationalUnitName
  125:d=4  hl=2 l=  42 prim:     PRINTABLESTRING   :http://certificates.godaddy.com/repository
  169:d=2  hl=2 l=  48 cons:   SET               
  171:d=3  hl=2 l=  46 cons:    SEQUENCE          
  173:d=4  hl=2 l=   3 prim:     OBJECT            :commonName
  178:d=4  hl=2 l=  39 prim:     PRINTABLESTRING   :Go Daddy Secure Certification Authority
  219:d=2  hl=2 l=  17 cons:   SET               
  221:d=3  hl=2 l=  15 cons:    SEQUENCE          
  223:d=4  hl=2 l=   3 prim:     OBJECT            :serialNumber
  228:d=4  hl=2 l=   8 prim:     PRINTABLESTRING   :07969287
  238:d=1  hl=2 l=  30 cons:  SEQUENCE          
  240:d=2  hl=2 l=  13 prim:   UTCTIME           :120419135324Z
  255:d=2  hl=2 l=  13 prim:   UTCTIME           :130419135324Z
  270:d=1  hl=2 l=  79 cons:  SEQUENCE          
  272:d=2  hl=2 l=  20 cons:   SET               
  274:d=3  hl=2 l=  18 cons:    SEQUENCE          
  276:d=4  hl=2 l=   3 prim:     OBJECT            :organizationName
  281:d=4  hl=2 l=  11 prim:     PRINTABLESTRING   :kthulhu.net
  294:d=2  hl=2 l=  33 cons:   SET               
  296:d=3  hl=2 l=  31 cons:    SEQUENCE          
  298:d=4  hl=2 l=   3 prim:     OBJECT            :organizationalUnitName
  303:d=4  hl=2 l=  24 prim:     PRINTABLESTRING   :Domain Control Validated
  329:d=2  hl=2 l=  20 cons:   SET               
  331:d=3  hl=2 l=  18 cons:    SEQUENCE          
  333:d=4  hl=2 l=   3 prim:     OBJECT            :commonName
  338:d=4  hl=2 l=  11 prim:     PRINTABLESTRING   :kthulhu.net
  351:d=1  hl=4 l= 290 cons:  SEQUENCE          
  355:d=2  hl=2 l=  13 cons:   SEQUENCE          
  357:d=3  hl=2 l=   9 prim:    OBJECT            :rsaEncryption
  368:d=3  hl=2 l=   0 prim:    NULL              
  370:d=2  hl=4 l= 271 prim:   BIT STRING        
  645:d=1  hl=4 l= 442 cons:  cont [ 3 ]        
  649:d=2  hl=4 l= 438 cons:   SEQUENCE          
  653:d=3  hl=2 l=  15 cons:    SEQUENCE          
  655:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Basic Constraints
  660:d=4  hl=2 l=   1 prim:     BOOLEAN           :255
  663:d=4  hl=2 l=   5 prim:     OCTET STRING      [HEX DUMP]:3003010100
  670:d=3  hl=2 l=  29 cons:    SEQUENCE          
  672:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Extended Key Usage
  677:d=4  hl=2 l=  22 prim:     OCTET STRING      [HEX DUMP]:301406082B0601050507030106082B06010505070302
  701:d=3  hl=2 l=  14 cons:    SEQUENCE          
  703:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Key Usage
  708:d=4  hl=2 l=   1 prim:     BOOLEAN           :255
  711:d=4  hl=2 l=   4 prim:     OCTET STRING      [HEX DUMP]:030205A0
  717:d=3  hl=2 l=  51 cons:    SEQUENCE          
  719:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 CRL Distribution Points
  724:d=4  hl=2 l=  44 prim:     OCTET STRING      [HEX DUMP]:302A3028A026A0248622687474703A2F2F63726C2E676F64616464792E636F6D2F676473312D36382E63726C
  770:d=3  hl=2 l=  83 cons:    SEQUENCE          
  772:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Certificate Policies
  777:d=4  hl=2 l=  76 prim:     OCTET STRING      [HEX DUMP]:304A3048060B6086480186FD6D010717013039303706082B06010505070201162B687474703A2F2F6365727469666963617465732E676F64616464792E636F6D2F7265706F7369746F72792F
  855:d=3  hl=3 l= 128 cons:    SEQUENCE          
  858:d=4  hl=2 l=   8 prim:     OBJECT            :Authority Information Access
  868:d=4  hl=2 l= 116 prim:     OCTET STRING      [HEX DUMP]:3072302406082B060105050730018618687474703A2F2F6F6373702E676F64616464792E636F6D2F304A06082B06010505073002863E687474703A2F2F6365727469666963617465732E676F64616464792E636F6D2F7265706F7369746F72792F67645F696E7465726D6564696174652E637274
  986:d=3  hl=2 l=  31 cons:    SEQUENCE          
  988:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Authority Key Identifier
  993:d=4  hl=2 l=  24 prim:     OCTET STRING      [HEX DUMP]:30168014FDAC6132936C45D6E2EE855F9ABAE7769968CCE7
 1019:d=3  hl=2 l=  39 cons:    SEQUENCE          
 1021:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Subject Alternative Name
 1026:d=4  hl=2 l=  32 prim:     OCTET STRING      [HEX DUMP]:301E820B6B7468756C68752E6E6574820F7777772E6B7468756C68752E6E6574
 1060:d=3  hl=2 l=  29 cons:    SEQUENCE          
 1062:d=4  hl=2 l=   3 prim:     OBJECT            :X509v3 Subject Key Identifier
 1067:d=4  hl=2 l=  22 prim:     OCTET STRING      [HEX DUMP]:0414A31E1AB1A9E4F550BC3E05E174CF01D09E35E017
-----BEGIN TBS CERTIFICATE-----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-----END TBS CERTIFICATE-----

-----BEGIN SERIAL NUMBER-----
K2OkKnBQdg==
-----END SERIAL NUMBER-----

$ openssl asn1parse -i < [SIGNATURE ALGORITHM]
    0:d=0  hl=2 l=  13 cons: SEQUENCE          
    2:d=1  hl=2 l=   9 prim:  OBJECT            :sha1WithRSAEncryption
   13:d=1  hl=2 l=   0 prim:  NULL              
-----BEGIN SIGNATURE ALGORITHM-----
MA0GCSqGSIb3DQEBBQUA
-----END SIGNATURE ALGORITHM-----

$ openssl asn1parse -i < [ISSUER]
    0:d=0  hl=3 l= 202 cons: SEQUENCE          
    3:d=1  hl=2 l=  11 cons:  SET               
    5:d=2  hl=2 l=   9 cons:   SEQUENCE          
    7:d=3  hl=2 l=   3 prim:    OBJECT            :countryName
   12:d=3  hl=2 l=   2 prim:    PRINTABLESTRING   :US
   16:d=1  hl=2 l=  16 cons:  SET               
   18:d=2  hl=2 l=  14 cons:   SEQUENCE          
   20:d=3  hl=2 l=   3 prim:    OBJECT            :stateOrProvinceName
   25:d=3  hl=2 l=   7 prim:    PRINTABLESTRING   :Arizona
   34:d=1  hl=2 l=  19 cons:  SET               
   36:d=2  hl=2 l=  17 cons:   SEQUENCE          
   38:d=3  hl=2 l=   3 prim:    OBJECT            :localityName
   43:d=3  hl=2 l=  10 prim:    PRINTABLESTRING   :Scottsdale
   55:d=1  hl=2 l=  26 cons:  SET               
   57:d=2  hl=2 l=  24 cons:   SEQUENCE          
   59:d=3  hl=2 l=   3 prim:    OBJECT            :organizationName
   64:d=3  hl=2 l=  17 prim:    PRINTABLESTRING   :GoDaddy.com, Inc.
   83:d=1  hl=2 l=  51 cons:  SET               
   85:d=2  hl=2 l=  49 cons:   SEQUENCE          
   87:d=3  hl=2 l=   3 prim:    OBJECT            :organizationalUnitName
   92:d=3  hl=2 l=  42 prim:    PRINTABLESTRING   :http://certificates.godaddy.com/repository
  136:d=1  hl=2 l=  48 cons:  SET               
  138:d=2  hl=2 l=  46 cons:   SEQUENCE          
  140:d=3  hl=2 l=   3 prim:    OBJECT            :commonName
  145:d=3  hl=2 l=  39 prim:    PRINTABLESTRING   :Go Daddy Secure Certification Authority
  186:d=1  hl=2 l=  17 cons:  SET               
  188:d=2  hl=2 l=  15 cons:   SEQUENCE          
  190:d=3  hl=2 l=   3 prim:    OBJECT            :serialNumber
  195:d=3  hl=2 l=   8 prim:    PRINTABLESTRING   :07969287
-----BEGIN ISSUER-----
MIHKMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTE
aMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xMzAxBgNVBAsTKmh0dHA6Ly9jZXJ0aWZpY2F0ZX
MuZ29kYWRkeS5jb20vcmVwb3NpdG9yeTEwMC4GA1UEAxMnR28gRGFkZHkgU2VjdXJlIENlcnRpZ
mljYXRpb24gQXV0aG9yaXR5MREwDwYDVQQFEwgwNzk2OTI4Nw==
-----END ISSUER-----

VALIDITY NOTBEFORE: year=2012, month=4, day=19, hours=13, minutes=53, seconds=24
-----BEGIN VALIDITY NOTBEFORE-----
eWVhcj0yMDEyLCBtb250aD00LCBkYXk9MTksIGhvdXJzPTEzLCBtaW51dGVzPTUzLCBzZWNvbmR
zPTI0
-----END VALIDITY NOTBEFORE-----

VALIDITY NOTAFTER: year=2013, month=4, day=19, hours=13, minutes=53, seconds=24
-----BEGIN VALIDITY NOTAFTER-----
eWVhcj0yMDEzLCBtb250aD00LCBkYXk9MTksIGhvdXJzPTEzLCBtaW51dGVzPTUzLCBzZWNvbmR
zPTI0
-----END VALIDITY NOTAFTER-----

$ openssl asn1parse -i < [SUBJECT]
    0:d=0  hl=2 l=  79 cons: SEQUENCE          
    2:d=1  hl=2 l=  20 cons:  SET               
    4:d=2  hl=2 l=  18 cons:   SEQUENCE          
    6:d=3  hl=2 l=   3 prim:    OBJECT            :organizationName
   11:d=3  hl=2 l=  11 prim:    PRINTABLESTRING   :kthulhu.net
   24:d=1  hl=2 l=  33 cons:  SET               
   26:d=2  hl=2 l=  31 cons:   SEQUENCE          
   28:d=3  hl=2 l=   3 prim:    OBJECT            :organizationalUnitName
   33:d=3  hl=2 l=  24 prim:    PRINTABLESTRING   :Domain Control Validated
   59:d=1  hl=2 l=  20 cons:  SET               
   61:d=2  hl=2 l=  18 cons:   SEQUENCE          
   63:d=3  hl=2 l=   3 prim:    OBJECT            :commonName
   68:d=3  hl=2 l=  11 prim:    PRINTABLESTRING   :kthulhu.net
-----BEGIN SUBJECT-----
ME8xFDASBgNVBAoTC2t0aHVsaHUubmV0MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF
0ZWQxFDASBgNVBAMTC2t0aHVsaHUubmV0
-----END SUBJECT-----

$ openssl asn1parse -i < [SPKI]
    0:d=0  hl=4 l= 290 cons: SEQUENCE          
    4:d=1  hl=2 l=  13 cons:  SEQUENCE          
    6:d=2  hl=2 l=   9 prim:   OBJECT            :rsaEncryption
   17:d=2  hl=2 l=   0 prim:   NULL              
   19:d=1  hl=4 l= 271 prim:  BIT STRING        
-----BEGIN SPKI-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzQkuEZv5xkNLJ7RCgAYmH4vG87FFPF
m5J+9ObenNAFqm8V5C4IzXm1+s7ro0sndLOyDH5INNAtKkuqp7kqubl1bbP3Z4+Ra3ENv7cpwQb
QjoaajRKCGRULs/jFMCAASii/+3jkkufNimu7cBfDXOSQR2YQZL4zhDW7ss/zwTVspYnxvU7oDc
qOIwCmFwQ/FvYTAxF1uozKBsJfL854v0MKI7GEyyn6W8jZ7f8cSc8ahvrLAYt/etAxrmHcMUVJb
W+gxXiwJsHfj03S1/RypHTb4gRqEz3pX6wl8sqtJP0L5mXuQgESoEAZ4SrPYLxXytqrU1yLi32x
gWwHu1A7fIQIDAQAB
-----END SPKI-----

$ openssl asn1parse -i < [EXTENSIONS]
    0:d=0  hl=4 l= 438 cons: SEQUENCE          
    4:d=1  hl=2 l=  15 cons:  SEQUENCE          
    6:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 Basic Constraints
   11:d=2  hl=2 l=   1 prim:   BOOLEAN           :255
   14:d=2  hl=2 l=   5 prim:   OCTET STRING      [HEX DUMP]:3003010100
   21:d=1  hl=2 l=  29 cons:  SEQUENCE          
   23:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 Extended Key Usage
   28:d=2  hl=2 l=  22 prim:   OCTET STRING      [HEX DUMP]:301406082B0601050507030106082B06010505070302
   52:d=1  hl=2 l=  14 cons:  SEQUENCE          
   54:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 Key Usage
   59:d=2  hl=2 l=   1 prim:   BOOLEAN           :255
   62:d=2  hl=2 l=   4 prim:   OCTET STRING      [HEX DUMP]:030205A0
   68:d=1  hl=2 l=  51 cons:  SEQUENCE          
   70:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 CRL Distribution Points
   75:d=2  hl=2 l=  44 prim:   OCTET STRING      [HEX DUMP]:302A3028A026A0248622687474703A2F2F63726C2E676F64616464792E636F6D2F676473312D36382E63726C
  121:d=1  hl=2 l=  83 cons:  SEQUENCE          
  123:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 Certificate Policies
  128:d=2  hl=2 l=  76 prim:   OCTET STRING      [HEX DUMP]:304A3048060B6086480186FD6D010717013039303706082B06010505070201162B687474703A2F2F6365727469666963617465732E676F64616464792E636F6D2F7265706F7369746F72792F
  206:d=1  hl=3 l= 128 cons:  SEQUENCE          
  209:d=2  hl=2 l=   8 prim:   OBJECT            :Authority Information Access
  219:d=2  hl=2 l= 116 prim:   OCTET STRING      [HEX DUMP]:3072302406082B060105050730018618687474703A2F2F6F6373702E676F64616464792E636F6D2F304A06082B06010505073002863E687474703A2F2F6365727469666963617465732E676F64616464792E636F6D2F7265706F7369746F72792F67645F696E7465726D6564696174652E637274
  337:d=1  hl=2 l=  31 cons:  SEQUENCE          
  339:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 Authority Key Identifier
  344:d=2  hl=2 l=  24 prim:   OCTET STRING      [HEX DUMP]:30168014FDAC6132936C45D6E2EE855F9ABAE7769968CCE7
  370:d=1  hl=2 l=  39 cons:  SEQUENCE          
  372:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 Subject Alternative Name
  377:d=2  hl=2 l=  32 prim:   OCTET STRING      [HEX DUMP]:301E820B6B7468756C68752E6E6574820F7777772E6B7468756C68752E6E6574
  411:d=1  hl=2 l=  29 cons:  SEQUENCE          
  413:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 Subject Key Identifier
  418:d=2  hl=2 l=  22 prim:   OCTET STRING      [HEX DUMP]:0414A31E1AB1A9E4F550BC3E05E174CF01D09E35E017
-----BEGIN EXTENSIONS-----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==
-----END EXTENSIONS-----