issuer:Test CA
subject:ct-tampered.example.com
extension:subjectAlternativeName:*.example.com