Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            0d:b2:1a:58:35:a6:06:56:92:f7:a9:b1:5f:87:80:d5

        Signature Algorithm: sha256WithRSAEncryption

        Issuer: C = US, O = Amazon, CN = Amazon RSA 2048 M02

        Validity

            Not Before: Dec 28 00:00:00 2024 GMT

            Not After : Jan 27 23:59:59 2026 GMT

        Subject: CN = acf-main-dev.acf.gov

        Subject Public Key Info:

            Public Key Algorithm: rsaEncryption

                Public-Key: (2048 bit)

                Modulus:

                    00:cd:0a:27:c5:2a:d1:af:bd:c7:4d:1b:89:63:ab:

                    f3:0d:aa:37:da:19:24:27:36:9b:e0:7f:c7:de:4c:

                    08:32:d7:27:f0:6d:75:a2:8c:35:41:99:ea:42:70:

                    aa:1b:64:38:71:8f:be:fa:bf:93:10:1d:3c:67:a8:

                    88:dd:be:13:17:27:c5:92:a3:c3:fe:5b:1e:5a:fc:

                    06:27:df:c6:93:c6:95:61:70:ed:b3:bf:ae:f2:b8:

                    73:8f:50:d8:ea:b1:6b:a0:b8:50:0f:77:13:c8:7d:

                    03:cf:c5:33:8e:12:ef:82:3b:43:32:cb:ba:75:75:

                    04:ef:2f:ba:ff:27:33:82:d3:a7:d2:22:44:8b:bf:

                    fa:0a:be:3a:d2:23:76:e4:e1:a0:72:1b:47:90:0d:

                    55:13:e9:0c:5a:f9:0f:4d:7f:0c:4c:a5:4f:47:c4:

                    3c:cd:3b:40:0c:85:a9:59:a7:e4:d4:5b:5a:a8:59:

                    50:02:61:dd:3c:e9:74:e7:69:4e:b2:80:3e:ef:ea:

                    95:34:1c:8f:5e:e1:13:3c:15:43:bf:e6:99:e0:2f:

                    56:05:50:65:72:f3:5f:69:09:13:73:7b:97:fa:42:

                    a9:89:29:9d:f9:0f:05:4b:4d:23:bd:8f:b8:f8:a1:

                    d9:5f:ae:c9:82:c1:09:fe:40:5f:25:f0:0f:e7:a2:

                    c3:bd

                Exponent: 65537 (0x10001)

        X509v3 extensions:

            X509v3 Authority Key Identifier:

                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2

            X509v3 Subject Key Identifier:

                67:23:E3:D4:67:0B:A9:32:A7:F5:EE:F9:54:52:10:B8:89:6A:51:39

            X509v3 Subject Alternative Name:

                DNS:acf-main-dev.acf.gov

            X509v3 Certificate Policies:

                Policy: 2.23.140.1.2.1

            X509v3 Key Usage: critical

                Digital Signature, Key Encipherment

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 CRL Distribution Points:

                Full Name:

                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl

            Authority Information Access:

                OCSP - URI:http://ocsp.r2m02.amazontrust.com

                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer

            X509v3 Basic Constraints: critical

                CA:FALSE

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:

                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21

                    Timestamp : Dec 28 00:17:56.970 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:46:02:21:00:DA:0B:D1:86:DC:32:DC:29:B8:95:13:

                                42:0B:FE:96:05:1B:81:E5:49:F8:28:CB:B4:44:89:89:

                                8F:14:C2:7D:51:02:21:00:B8:23:56:DB:F1:C7:69:9E:

                                8E:70:DE:3E:F4:AF:23:BD:87:94:75:C5:D6:60:E9:82:

                                4E:FD:9B:3F:BC:E6:76:EF

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:

                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0

                    Timestamp : Dec 28 00:17:56.901 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:44:02:20:6D:D3:5A:95:D2:A2:54:16:3A:5A:4F:2E:

                                0C:1F:26:0D:80:B6:E0:C9:E2:57:A1:4A:17:1F:9C:CF:

                                6E:C6:B0:43:02:20:67:3E:34:E2:72:F2:C7:6B:09:09:

                                01:7A:E1:AA:AA:E0:14:5F:E6:B3:5C:59:65:63:3C:80:

                                6C:7D:63:36:3F:BF

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:

                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3

                    Timestamp : Dec 28 00:17:56.920 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:A2:21:AA:35:8C:03:49:B2:A9:08:BE:

                                DB:2C:AB:F3:F9:95:85:5C:BE:58:C0:2C:5F:66:3A:FD:

                                DB:E0:98:5F:8E:02:20:02:13:3E:12:C8:B0:8A:C5:2D:

                                87:52:16:B7:64:4C:16:B0:B0:10:31:39:01:59:62:54:

                                FF:85:8C:D1:63:31:C0

    Signature Algorithm: sha256WithRSAEncryption

    Signature Value:

        6d:28:8d:26:7d:1e:64:20:0e:b8:f1:05:79:82:93:43:3f:34:

        37:3a:08:29:06:fc:98:22:d1:29:a2:5a:74:a2:da:19:b2:98:

        97:fa:0d:57:03:a0:d8:d1:3a:3c:14:99:7a:aa:ea:78:46:2a:

        4d:c1:ab:12:89:0b:79:e8:4c:54:a8:13:17:92:57:7e:99:86:

        58:72:29:0f:fa:93:29:7d:b1:8e:6d:74:c2:ba:21:26:ff:6d:

        7a:10:46:7d:b3:2e:ce:ef:ec:58:68:93:09:ec:b9:c5:1b:6b:

        87:ce:f4:aa:59:ef:4b:69:ff:6a:d5:77:ac:2e:99:a9:ac:85:

        d1:85:8c:66:1a:fb:1b:69:71:17:ae:a8:68:73:5e:76:ca:e8:

        1a:9a:36:8d:64:1b:8b:93:33:dd:3a:a9:a9:a7:3a:dc:05:17:

        72:0c:05:aa:fc:a6:2a:17:4d:b4:7a:49:b1:10:1d:e1:03:74:

        1c:ee:90:dc:d0:5a:36:a1:29:b1:ae:e9:26:44:4a:d1:4a:65:

        03:07:b3:36:3c:42:5a:fe:33:45:b0:e3:8e:e9:1b:03:59:6f:

        13:6e:f1:d9:a7:aa:10:7e:13:5b:03:71:6b:25:7d:4b:94:cd:

        4b:7b:d5:10:1d:f6:53:be:2e:0d:2c:61:b2:34:99:a0:76:c4:

        6f:45:8a:fc

-----BEGIN CERTIFICATE-----

MIIF1DCCBLygAwIBAgIQDbIaWDWmBlaS96mxX4eA1TANBgkqhkiG9w0BAQsFADA8

MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g

UlNBIDIwNDggTTAyMB4XDTI0MTIyODAwMDAwMFoXDTI2MDEyNzIzNTk1OVowHzEd

MBsGA1UEAxMUYWNmLW1haW4tZGV2LmFjZi5nb3YwggEiMA0GCSqGSIb3DQEBAQUA

A4IBDwAwggEKAoIBAQDNCifFKtGvvcdNG4ljq/MNqjfaGSQnNpvgf8feTAgy1yfw

bXWijDVBmepCcKobZDhxj776v5MQHTxnqIjdvhMXJ8WSo8P+Wx5a/AYn38aTxpVh

cO2zv67yuHOPUNjqsWuguFAPdxPIfQPPxTOOEu+CO0Myy7p1dQTvL7r/JzOC06fS

IkSLv/oKvjrSI3bk4aByG0eQDVUT6Qxa+Q9NfwxMpU9HxDzNO0AMhalZp+TUW1qo

WVACYd086XTnaU6ygD7v6pU0HI9e4RM8FUO/5pngL1YFUGVy819pCRNze5f6QqmJ

KZ35DwVLTSO9j7j4odlfrsmCwQn+QF8l8A/nosO9AgMBAAGjggLtMIIC6TAfBgNV

HSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUZyPj1GcLqTKn

9e75VFIQuIlqUTkwHwYDVR0RBBgwFoIUYWNmLW1haW4tZGV2LmFjZi5nb3YwEwYD

VR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG

AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy

bTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0G

CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYI

KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy

LmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwAO

V5S8866pPjMbLJkHs/eQ35vCPXEyJd0hqSWsYcVOIQAAAZQKoHrqAAAEAwBIMEYC

IQDaC9GG3DLcKbiVE0IL/pYFG4HlSfgoy7REiYmPFMJ9UQIhALgjVtvxx2mejnDe

PvSvI72HlHXF1mDpgk79mz+85nbvAHUAZBHEbKQS7KeJHKICLgC8q08oB9QeNSer

6v7VA8l9zfAAAAGUCqB6pQAABAMARjBEAiBt01qV0qJUFjpaTy4MHyYNgLbgyeJX

oUoXH5zPbsawQwIgZz404nLyx2sJCQF64aqq4BRf5rNcWWVjPIBsfWM2P78AdgBJ

nJtp3h187Pw23s2HZKa4W68Kh4AZ0VVS++nrKd34wwAAAZQKoHq4AAAEAwBHMEUC

IQCiIao1jANJsqkIvtssq/P5lYVcvljALF9mOv3b4JhfjgIgAhM+EsiwisUth1IW

t2RMFrCwEDE5AVliVP+FjNFjMcAwDQYJKoZIhvcNAQELBQADggEBAG0ojSZ9HmQg

DrjxBXmCk0M/NDc6CCkG/Jgi0SmiWnSi2hmymJf6DVcDoNjROjwUmXqq6nhGKk3B

qxKJC3noTFSoExeSV36ZhlhyKQ/6kyl9sY5tdMK6ISb/bXoQRn2zLs7v7Fhokwns

ucUba4fO9KpZ70tp/2rVd6wumamshdGFjGYa+xtpcReuqGhzXnbK6BqaNo1kG4uT

M906qamnOtwFF3IMBar8pioXTbR6SbEQHeEDdBzukNzQWjahKbGu6SZEStFKZQMH

szY8Qlr+M0Ww447pGwNZbxNu8dmnqhB+E1sDcWslfUuUzUt71RAd9lO+Lg0sYbI0

maB2xG9Fivw=

-----END CERTIFICATE-----