Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            05:51:4a:ab:60:9b:6a:5a:3a:63:42:3d:4c:68:97:10:6f:6a

        Signature Algorithm: ecdsa-with-SHA384

        Issuer: C = US, O = Let's Encrypt, CN = E5

        Validity

            Not Before: Jun  6 10:47:00 2025 GMT

            Not After : Sep  4 10:46:59 2025 GMT

        Subject: CN = mullvad.net

        Subject Public Key Info:

            Public Key Algorithm: id-ecPublicKey

                Public-Key: (256 bit)

                pub:

                    04:f3:de:da:f7:23:e7:bf:76:c8:33:8b:30:f6:f8:

                    76:1e:c6:e7:ba:ad:5c:d2:2f:e1:73:51:17:7a:9f:

                    8e:74:b7:e9:29:48:2f:ac:4b:2f:dd:ca:b5:6c:52:

                    f8:49:fb:29:c1:33:a7:a0:79:10:f1:a6:90:11:23:

                    55:9f:f7:4f:88

                ASN1 OID: prime256v1

                NIST CURVE: P-256

        X509v3 extensions:

            X509v3 Key Usage: critical

                Digital Signature

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 Basic Constraints: critical

                CA:FALSE

            X509v3 Subject Key Identifier:

                01:36:FA:DF:DF:90:39:40:51:CB:98:2E:5A:7A:2B:E2:32:52:EF:E8

            X509v3 Authority Key Identifier:

                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D

            Authority Information Access:

                CA Issuers - URI:http://e5.i.lencr.org/

            X509v3 Subject Alternative Name:

                DNS:ch-zrh-www-001.mullvad.net, DNS:mullvad.net, DNS:mullvadvpn.net, DNS:o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiadonion.mullvad.net, DNS:o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiadonion.www.mullvad.net, DNS:www.mullvad.net, DNS:www.mullvadvpn.net

            X509v3 Certificate Policies:

                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points:

                Full Name:

                  URI:http://e5.c.lencr.org/107.crl

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : ED:3C:4B:D6:E8:06:C2:A4:A2:00:57:DB:CB:24:E2:38:

                                01:DF:51:2F:ED:C4:86:C5:70:0F:20:DD:B7:3E:3F:E0

                    Timestamp : Jun  6 11:45:30.969 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:46:02:21:00:9D:A2:F8:62:2F:E7:5C:A6:97:98:0F:

                                5C:D7:A5:54:00:35:09:A2:DF:9A:99:4F:0C:7C:18:16:

                                05:90:3C:FD:13:02:21:00:B3:FF:BA:E4:1F:91:0B:DB:

                                D8:A1:9B:E4:02:34:97:33:E9:2A:94:6F:A2:EE:AA:FD:

                                A6:11:D3:1D:8E:5F:F1:D9

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:

                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34

                    Timestamp : Jun  6 11:45:32.978 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:20:5C:0A:20:93:70:16:A3:83:50:92:C6:F0:

                                FF:5F:20:1A:62:A0:8D:1E:A4:27:1A:9A:64:99:59:A6:

                                BF:83:0C:85:02:21:00:E2:12:18:E7:77:79:4E:99:69:

                                C2:79:04:AD:BE:FF:77:32:C5:81:E3:1A:55:CE:CC:F6:

                                46:2C:21:FB:12:91:BC

    Signature Algorithm: ecdsa-with-SHA384

    Signature Value:

        30:65:02:30:09:c3:cc:d4:7e:d7:b8:24:5f:57:5e:d1:ac:75:

        6b:0d:ca:29:47:64:85:00:85:ed:0e:03:bc:aa:7f:05:3d:c3:

        b6:fc:7f:4d:a4:3a:85:a1:4f:c9:0d:60:1f:8f:43:d9:02:31:

        00:b0:7a:20:f1:16:e3:b9:0c:d0:cc:f1:b7:f0:89:66:cb:a2:

        37:68:52:36:7c:33:a9:c1:a2:44:2b:7c:2e:aa:72:8c:a4:a7:

        29:ea:c7:8b:0c:1c:e8:ae:42:8d:0e:57:59

-----BEGIN CERTIFICATE-----

MIIEdDCCA/qgAwIBAgISBVFKq2Cbalo6Y0I9TGiXEG9qMAoGCCqGSM49BAMDMDIx

CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF

NTAeFw0yNTA2MDYxMDQ3MDBaFw0yNTA5MDQxMDQ2NTlaMBYxFDASBgNVBAMTC211

bGx2YWQubmV0MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE897a9yPnv3bIM4sw

9vh2Hsbnuq1c0i/hc1EXep+OdLfpKUgvrEsv3cq1bFL4SfspwTOnoHkQ8aaQESNV

n/dPiKOCAwowggMGMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcD

AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUATb639+QOUBRy5gu

Wnor4jJS7+gwHwYDVR0jBBgwFoAUnytfzzwhT50Et+0rLMTGcIvS1w0wMgYIKwYB

BQUHAQEEJjAkMCIGCCsGAQUFBzAChhZodHRwOi8vZTUuaS5sZW5jci5vcmcvMIIB

AwYDVR0RBIH7MIH4ghpjaC16cmgtd3d3LTAwMS5tdWxsdmFkLm5ldIILbXVsbHZh

ZC5uZXSCDm11bGx2YWR2cG4ubmV0gklvNTRob24yZTJ2ajZjN20zYXFxdTZ1eWVj

ZTY1YnkzdmdveHhobHFsc3ZrbWFjdzZhN203a2lhZG9uaW9uLm11bGx2YWQubmV0

gk1vNTRob24yZTJ2ajZjN20zYXFxdTZ1eWVjZTY1YnkzdmdveHhobHFsc3ZrbWFj

dzZhN203a2lhZG9uaW9uLnd3dy5tdWxsdmFkLm5ldIIPd3d3Lm11bGx2YWQubmV0

ghJ3d3cubXVsbHZhZHZwbi5uZXQwEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYDVR0f

BCcwJTAjoCGgH4YdaHR0cDovL2U1LmMubGVuY3Iub3JnLzEwNy5jcmwwggEFBgor

BgEEAdZ5AgQCBIH2BIHzAPEAdwDtPEvW6AbCpKIAV9vLJOI4Ad9RL+3EhsVwDyDd

tz4/4AAAAZdFD3dZAAAEAwBIMEYCIQCdovhiL+dcppeYD1zXpVQANQmi35qZTwx8

GBYFkDz9EwIhALP/uuQfkQvb2KGb5AI0lzPpKpRvou6q/aYR0x2OX/HZAHYADeHy

MCvTDcFAYhIJ6lUu/Ed0fLHX6TDvDkIetH5OqjQAAAGXRQ9/MgAABAMARzBFAiBc

CiCTcBajg1CSxvD/XyAaYqCNHqQnGppkmVmmv4MMhQIhAOISGOd3eU6ZacJ5BK2+

/3cyxYHjGlXOzPZGLCH7EpG8MAoGCCqGSM49BAMDA2gAMGUCMAnDzNR+17gkX1de

0ax1aw3KKUdkhQCF7Q4DvKp/BT3Dtvx/TaQ6haFPyQ1gH49D2QIxALB6IPEW47kM

0Mzxt/CJZsuiN2hSNnwzqcGiRCt8LqpyjKSnKerHiwwc6K5CjQ5XWQ==

-----END CERTIFICATE-----