Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            0d:a6:4e:4e:97:6b:c8:78:00:ca:ce:2d:0c:8f:6c:ad

        Signature Algorithm: sha256WithRSAEncryption

        Issuer: C = US, O = Amazon, CN = Amazon RSA 2048 M03

        Validity

            Not Before: Jan  4 00:00:00 2025 GMT

            Not After : Feb  2 23:59:59 2026 GMT

        Subject: CN = *.nfb.ca

        Subject Public Key Info:

            Public Key Algorithm: rsaEncryption

                Public-Key: (2048 bit)

                Modulus:

                    00:c4:56:76:d2:d4:b6:1f:fe:1c:60:37:90:a4:3d:

                    04:b0:9d:bb:1b:fc:a4:50:16:af:f4:5d:49:f5:07:

                    bc:82:d7:d0:dd:00:bf:f6:a9:1b:25:35:dd:10:69:

                    e9:81:87:7f:46:88:e0:38:f1:24:b9:87:de:5c:d6:

                    0c:1d:65:a4:29:bc:c3:5d:50:83:28:31:73:b0:74:

                    46:45:c3:bd:6d:00:fd:4d:64:cd:18:10:7c:25:5b:

                    36:d0:2f:fb:e3:44:b2:ce:56:2d:7e:ba:46:2f:71:

                    a0:9d:60:99:f4:e9:5f:19:3f:d6:00:73:1b:d1:ee:

                    14:d0:2d:27:8f:aa:f6:11:df:24:b0:c3:78:1f:05:

                    69:f3:2e:02:ba:6f:c6:1a:a1:32:77:3a:7b:3b:ce:

                    3b:ae:e0:0f:f9:3d:0f:67:df:23:74:77:c6:76:02:

                    78:a9:db:e3:dc:3b:04:76:cc:33:f0:c8:91:cf:58:

                    20:4c:7b:0c:b1:0a:d7:a0:66:83:44:02:90:43:3c:

                    38:53:80:f3:41:1f:71:15:3d:b8:dd:30:a0:7f:50:

                    35:1d:fd:a3:5b:99:ae:41:45:49:6e:b6:04:cb:37:

                    ca:e7:a1:20:dc:07:7d:5a:d2:d2:ad:7a:1c:c3:92:

                    79:c1:9e:49:f5:7c:e0:90:e9:65:b7:da:da:83:1d:

                    c3:91

                Exponent: 65537 (0x10001)

        X509v3 extensions:

            X509v3 Authority Key Identifier:

                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02

            X509v3 Subject Key Identifier:

                CA:EA:8D:33:D6:1A:D3:94:9F:A2:01:16:CD:BD:28:FE:E7:87:B6:65

            X509v3 Subject Alternative Name:

                DNS:*.nfb.ca, DNS:*.onf.ca

            X509v3 Certificate Policies:

                Policy: 2.23.140.1.2.1

            X509v3 Key Usage: critical

                Digital Signature, Key Encipherment

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 CRL Distribution Points:

                Full Name:

                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl

            Authority Information Access:

                OCSP - URI:http://ocsp.r2m03.amazontrust.com

                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer

            X509v3 Basic Constraints: critical

                CA:FALSE

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:

                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21

                    Timestamp : Jan  4 00:11:42.741 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:46:02:21:00:C1:05:8A:EF:1F:25:15:7E:16:DD:09:

                                31:12:DF:DA:B0:74:EE:42:92:99:B9:F1:22:64:8C:74:

                                40:83:23:AB:C5:02:21:00:F8:F5:36:1B:21:B3:CC:D7:

                                98:52:72:CC:45:2C:BD:22:98:8B:0A:F2:5F:BA:C4:D5:

                                09:C0:51:AF:4C:9C:1D:5F

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:

                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0

                    Timestamp : Jan  4 00:11:42.781 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:8A:3C:F3:9C:61:AB:FF:7E:C0:EA:DC:

                                27:7F:8F:A6:C0:96:B3:31:40:37:D8:89:BE:32:9A:E2:

                                EB:C1:CD:4B:2D:02:20:77:B6:67:10:3D:1D:96:45:D5:

                                18:DF:D3:E3:12:79:48:C3:4E:EC:74:87:0F:BA:6D:38:

                                55:85:0B:B0:45:FF:36

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:

                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3

                    Timestamp : Jan  4 00:11:42.802 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:C6:7B:02:C3:A5:3E:0B:76:41:F4:DE:

                                8A:4B:E8:74:4E:77:C9:0E:62:EC:69:18:16:E8:19:B7:

                                CC:57:78:45:69:02:20:3B:0C:E3:42:0B:6C:A2:18:5C:

                                05:88:F9:C9:41:E9:DD:71:E2:33:21:57:23:76:5A:6E:

                                79:FD:16:74:9F:AD:F5

    Signature Algorithm: sha256WithRSAEncryption

    Signature Value:

        59:e1:4c:23:20:25:11:2f:a0:22:ad:d4:30:e9:b6:0d:7a:f7:

        77:2a:be:6f:32:e8:0e:e5:84:50:a5:82:61:9d:52:9d:a9:e6:

        69:c3:f7:47:d8:49:16:4f:d0:5f:62:6a:d4:ac:e8:d0:22:7b:

        b0:c3:7f:84:25:13:48:d1:aa:92:59:88:12:9b:22:ef:6e:ff:

        f5:91:95:ad:19:1b:1d:86:80:bf:46:d7:9e:13:d7:c4:3a:41:

        87:3b:31:f7:93:8c:67:bc:82:82:f0:aa:63:52:2b:5a:ec:dc:

        1e:57:0c:93:a7:06:f1:31:50:6b:a6:3b:7b:66:b4:b7:e6:9b:

        5f:ad:7b:77:71:b6:74:42:08:c3:95:39:10:52:26:71:1f:b2:

        0f:b8:c5:1c:d9:b6:3a:b3:d3:24:a7:da:76:05:8a:3f:92:f6:

        9c:49:6e:70:b9:5d:41:6f:27:9e:9a:e6:55:48:ab:a4:95:7f:

        33:1b:bd:fa:8e:2e:b1:28:45:f1:46:36:55:95:d4:62:32:c2:

        3e:fc:6b:57:24:a7:2d:7d:24:b9:8b:80:12:0b:04:39:d5:ca:

        ae:99:3b:10:06:e6:6a:9f:e4:34:4b:99:b3:ff:c9:a7:50:31:

        56:54:b7:1c:46:5d:76:a5:e1:b8:84:a3:6e:df:a5:54:d8:53:

        49:1e:54:60

-----BEGIN CERTIFICATE-----

MIIFxzCCBK+gAwIBAgIQDaZOTpdryHgAys4tDI9srTANBgkqhkiG9w0BAQsFADA8

MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g

UlNBIDIwNDggTTAzMB4XDTI1MDEwNDAwMDAwMFoXDTI2MDIwMjIzNTk1OVowEzER

MA8GA1UEAwwIKi5uZmIuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

AQDEVnbS1LYf/hxgN5CkPQSwnbsb/KRQFq/0XUn1B7yC19DdAL/2qRslNd0QaemB

h39GiOA48SS5h95c1gwdZaQpvMNdUIMoMXOwdEZFw71tAP1NZM0YEHwlWzbQL/vj

RLLOVi1+ukYvcaCdYJn06V8ZP9YAcxvR7hTQLSePqvYR3ySww3gfBWnzLgK6b8Ya

oTJ3Ons7zjuu4A/5PQ9n3yN0d8Z2Anip2+PcOwR2zDPwyJHPWCBMewyxCtegZoNE

ApBDPDhTgPNBH3EVPbjdMKB/UDUd/aNbma5BRUlutgTLN8rnoSDcB31a0tKtehzD

knnBnkn1fOCQ6WW32tqDHcORAgMBAAGjggLsMIIC6DAfBgNVHSMEGDAWgBRV2Rhf

0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUyuqNM9Ya05SfogEWzb0o/ueHtmUw

HQYDVR0RBBYwFIIIKi5uZmIuY2GCCCoub25mLmNhMBMGA1UdIAQMMAowCAYGZ4EM

AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH

AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVz

dC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0

cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw

Oi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/

BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcADleUvPOuqT4zGyyZB7P3

kN+bwj1xMiXdIaklrGHFTiEAAAGULqdJFQAABAMASDBGAiEAwQWK7x8lFX4W3Qkx

Et/asHTuQpKZufEiZIx0QIMjq8UCIQD49TYbIbPM15hScsxFLL0imIsK8l+6xNUJ

wFGvTJwdXwB2AGQRxGykEuyniRyiAi4AvKtPKAfUHjUnq+r+1QPJfc3wAAABlC6n

ST0AAAQDAEcwRQIhAIo885xhq/9+wOrcJ3+PpsCWszFAN9iJvjKa4uvBzUstAiB3

tmcQPR2WRdUY39PjEnlIw07sdIcPum04VYULsEX/NgB2AEmcm2neHXzs/DbezYdk

prhbrwqHgBnRVVL76esp3fjDAAABlC6nSVIAAAQDAEcwRQIhAMZ7AsOlPgt2QfTe

ikvodE53yQ5i7GkYFugZt8xXeEVpAiA7DONCC2yiGFwFiPnJQendceIzIVcjdlpu

ef0WdJ+t9TANBgkqhkiG9w0BAQsFAAOCAQEAWeFMIyAlES+gIq3UMOm2DXr3dyq+

bzLoDuWEUKWCYZ1SnanmacP3R9hJFk/QX2Jq1Kzo0CJ7sMN/hCUTSNGqklmIEpsi

727/9ZGVrRkbHYaAv0bXnhPXxDpBhzsx95OMZ7yCgvCqY1IrWuzcHlcMk6cG8TFQ

a6Y7e2a0t+abX617d3G2dEIIw5U5EFImcR+yD7jFHNm2OrPTJKfadgWKP5L2nElu

cLldQW8nnprmVUirpJV/Mxu9+o4usShF8UY2VZXUYjLCPvxrVySnLX0kuYuAEgsE

OdXKrpk7EAbmap/kNEuZs//Jp1AxVlS3HEZddqXhuISjbt+lVNhTSR5UYA==

-----END CERTIFICATE-----