Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            d5:3a:f7:a1:fb:66:d6:63:11:cf:24:64:95:99:a7:9c

        Signature Algorithm: ecdsa-with-SHA256

        Issuer: C = US, O = Google Trust Services, CN = WE1

        Validity

            Not Before: Apr 21 11:25:08 2025 GMT

            Not After : Jul 20 12:22:37 2025 GMT

        Subject: CN = candleslane.com

        Subject Public Key Info:

            Public Key Algorithm: id-ecPublicKey

                Public-Key: (256 bit)

                pub:

                    04:e7:0e:d0:d9:26:4a:cc:b6:72:5c:2c:19:1a:52:

                    5c:6c:cb:d7:e4:01:ff:88:28:5d:bd:4f:b7:2b:b3:

                    3c:ca:74:1e:8a:be:2b:0d:fb:3a:4d:98:67:ad:bf:

                    c5:1d:02:08:95:84:98:18:6b:9b:5d:c9:be:a0:45:

                    f6:bc:12:c2:56

                ASN1 OID: prime256v1

                NIST CURVE: P-256

        X509v3 extensions:

            X509v3 Key Usage: critical

                Digital Signature

            X509v3 Extended Key Usage:

                TLS Web Server Authentication

            X509v3 Basic Constraints: critical

                CA:FALSE

            X509v3 Subject Key Identifier:

                EC:90:EA:A9:B2:06:75:A3:DA:74:E5:47:9B:63:10:A7:14:E9:CF:40

            X509v3 Authority Key Identifier:

                90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38

            Authority Information Access:

                OCSP - URI:http://o.pki.goog/s/we1/1To

                CA Issuers - URI:http://i.pki.goog/we1.crt

            X509v3 Subject Alternative Name:

                DNS:candleslane.com, DNS:*.candleslane.com

            X509v3 Certificate Policies:

                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points:

                Full Name:

                  URI:http://c.pki.goog/we1/-A4QIxeBtHI.crl

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:

                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8

                    Timestamp : Apr 21 12:25:09.396 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:EF:F9:59:CF:25:73:74:8B:C8:F7:98:

                                5B:2A:78:7F:A8:A5:09:B8:19:FC:5C:16:FE:BF:83:45:

                                11:0F:94:82:82:02:20:43:7F:5C:AD:E9:DC:85:FE:47:

                                22:F2:75:9D:BC:59:B1:82:2F:00:2B:0C:6E:29:38:94:

                                C8:26:99:6B:B0:78:A0

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:

                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A

                    Timestamp : Apr 21 12:25:09.407 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:44:02:20:5C:3D:E4:6F:DD:5A:D8:42:C0:61:3C:18:

                                C5:64:E9:02:8E:0E:27:E8:BF:76:FB:48:7A:5B:97:B5:

                                68:82:24:B7:02:20:09:DD:86:B4:74:0C:BA:9F:A7:E4:

                                79:9E:EC:E7:84:8B:84:62:5C:EF:5E:5B:D3:4C:63:FE:

                                DF:CD:2A:90:70:0E

    Signature Algorithm: ecdsa-with-SHA256

    Signature Value:

        30:45:02:21:00:87:93:12:c0:09:15:e3:db:e0:5e:76:1f:a4:

        09:3b:ee:d3:7d:f0:6d:12:84:18:71:dd:d4:8c:a2:81:1e:70:

        67:02:20:7e:43:36:7a:96:1d:93:c3:77:44:0e:92:17:09:5b:

        ae:71:4e:18:62:e2:be:e4:fd:f0:86:1e:27:66:27:fc:9a

-----BEGIN CERTIFICATE-----

MIIDsDCCA1agAwIBAgIRANU696H7ZtZjEc8kZJWZp5wwCgYIKoZIzj0EAwIwOzEL

MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG

A1UEAxMDV0UxMB4XDTI1MDQyMTExMjUwOFoXDTI1MDcyMDEyMjIzN1owGjEYMBYG

A1UEAxMPY2FuZGxlc2xhbmUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE

5w7Q2SZKzLZyXCwZGlJcbMvX5AH/iChdvU+3K7M8ynQeir4rDfs6TZhnrb/FHQII

lYSYGGubXcm+oEX2vBLCVqOCAlowggJWMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUE

DDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTskOqpsgZ1o9p0

5UebYxCnFOnPQDAfBgNVHSMEGDAWgBSQd5I1Z8T/qMyp5nvZgHl7zJP5ODBeBggr

BgEFBQcBAQRSMFAwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vLnBraS5nb29nL3Mvd2Ux

LzFUbzAlBggrBgEFBQcwAoYZaHR0cDovL2kucGtpLmdvb2cvd2UxLmNydDAtBgNV

HREEJjAkgg9jYW5kbGVzbGFuZS5jb22CESouY2FuZGxlc2xhbmUuY29tMBMGA1Ud

IAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jLnBraS5n

b29nL3dlMS8tQTRRSXhlQnRISS5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A

dgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAZZYTzoUAAAEAwBH

MEUCIQDv+VnPJXN0i8j3mFsqeH+opQm4GfxcFv6/g0URD5SCggIgQ39crenchf5H

IvJ1nbxZsYIvACsMbik4lMgmmWuweKAAdQDd3Mo0ldfhFgXnlTL6x5/4PRxQ39sA

OhQSdgosrLvIKgAAAZZYTzofAAAEAwBGMEQCIFw95G/dWthCwGE8GMVk6QKODifo

v3b7SHpbl7VogiS3AiAJ3Ya0dAy6n6fkeZ7s54SLhGJc715b00xj/t/NKpBwDjAK

BggqhkjOPQQDAgNIADBFAiEAh5MSwAkV49vgXnYfpAk77tN98G0ShBhx3dSMooEe

cGcCIH5DNnqWHZPDd0QOkhcJW65xThhi4r7k/fCGHidmJ/ya

-----END CERTIFICATE-----