Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            05:05:10:97:5f:fc:5c:44:c5:eb:b0:6b:93:13:1c:6b:59:1c

        Signature Algorithm: ecdsa-with-SHA384

        Issuer: C = US, O = Let's Encrypt, CN = E6

        Validity

            Not Before: Jun 10 23:40:11 2025 GMT

            Not After : Sep  8 23:40:10 2025 GMT

        Subject: CN = node-ba-01.protonvpn.net

        Subject Public Key Info:

            Public Key Algorithm: id-ecPublicKey

                Public-Key: (256 bit)

                pub:

                    04:16:25:ac:69:f1:88:af:f1:6c:38:5f:c5:55:42:

                    17:7b:ba:fd:fd:1f:5e:37:d9:ac:03:a2:e6:68:c9:

                    3d:60:88:ab:a8:4c:f6:3d:af:1a:a6:f1:1b:16:2f:

                    68:be:56:33:5e:b7:64:bc:53:12:cc:9c:ed:de:5c:

                    ba:d4:d0:06:d4

                ASN1 OID: prime256v1

                NIST CURVE: P-256

        X509v3 extensions:

            X509v3 Key Usage: critical

                Digital Signature

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 Basic Constraints: critical

                CA:FALSE

            X509v3 Subject Key Identifier:

                2C:B7:AF:94:B9:93:07:50:65:04:C3:C0:9C:85:E3:33:05:33:43:EE

            X509v3 Authority Key Identifier:

                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2

            Authority Information Access:

                CA Issuers - URI:http://e6.i.lencr.org/

            X509v3 Subject Alternative Name:

                DNS:ch-ba-01a.protonvpn.net, DNS:ch-ba-04a.protonvpn.net, DNS:node-ba-01.protonvpn.net

            X509v3 Certificate Policies:

                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points:

                Full Name:

                  URI:http://e6.c.lencr.org/29.crl

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:

                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0

                    Timestamp : Jun 11 00:38:42.294 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:F2:52:5D:06:42:1D:84:02:5A:54:7B:

                                3A:6A:CF:A6:40:5E:D1:E5:C0:86:C2:56:F9:51:F2:87:

                                EA:F8:C6:61:33:02:20:7F:8E:DA:65:56:07:0E:EC:83:

                                58:86:75:F6:63:41:03:AE:E1:93:04:45:0F:27:EC:C1:

                                F3:27:AB:4F:C4:5D:0B

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : ED:3C:4B:D6:E8:06:C2:A4:A2:00:57:DB:CB:24:E2:38:

                                01:DF:51:2F:ED:C4:86:C5:70:0F:20:DD:B7:3E:3F:E0

                    Timestamp : Jun 11 00:38:44.272 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:D5:AF:A1:6A:BD:D6:B3:54:6F:67:A8:

                                5A:C0:BA:C7:1A:B3:11:B0:B0:9A:E9:9B:6C:C6:71:53:

                                7B:BB:90:CA:C5:02:20:43:E2:13:07:1F:81:01:B3:82:

                                0E:31:F3:3B:9C:F5:C6:02:2F:21:C0:5E:E1:25:CC:E6:

                                A5:35:B8:22:E0:1F:78

    Signature Algorithm: ecdsa-with-SHA384

    Signature Value:

        30:65:02:30:2d:30:d8:3c:0e:3d:8e:6b:da:b4:3b:86:98:1e:

        88:77:63:77:68:75:91:21:5b:bd:4e:ac:67:76:4a:35:ff:05:

        5e:22:e7:dc:c3:68:47:4b:7a:a3:70:de:22:a9:26:5f:02:31:

        00:d4:36:ba:05:ac:ac:fc:e5:01:74:81:89:b7:0a:af:6e:b8:

        73:54:25:ef:88:53:7e:be:c7:08:e5:05:a1:c8:db:77:ad:e7:

        3c:ec:b2:1c:d1:4e:36:c5:88:73:fc:5f:81

-----BEGIN CERTIFICATE-----

MIIDzzCCA1WgAwIBAgISBQUQl1/8XETF67BrkxMca1kcMAoGCCqGSM49BAMDMDIx

CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF

NjAeFw0yNTA2MTAyMzQwMTFaFw0yNTA5MDgyMzQwMTBaMCMxITAfBgNVBAMTGG5v

ZGUtYmEtMDEucHJvdG9udnBuLm5ldDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA

BBYlrGnxiK/xbDhfxVVCF3u6/f0fXjfZrAOi5mjJPWCIq6hM9j2vGqbxGxYvaL5W

M163ZLxTEsyc7d5cutTQBtSjggJYMIICVDAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0l

BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE

FCy3r5S5kwdQZQTDwJyF4zMFM0PuMB8GA1UdIwQYMBaAFJMnRpgDqVFojpjWxEJI

2yO/WJTSMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL2U2Lmku

bGVuY3Iub3JnLzBVBgNVHREETjBMghdjaC1iYS0wMWEucHJvdG9udnBuLm5ldIIX

Y2gtYmEtMDRhLnByb3RvbnZwbi5uZXSCGG5vZGUtYmEtMDEucHJvdG9udnBuLm5l

dDATBgNVHSAEDDAKMAgGBmeBDAECATAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v

ZTYuYy5sZW5jci5vcmcvMjkuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA

zPsPaoVxCWX+lZtTzumyfCLphVwNl422qX5UwP5MDbAAAAGXXGzHdgAABAMARzBF

AiEA8lJdBkIdhAJaVHs6as+mQF7R5cCGwlb5UfKH6vjGYTMCIH+O2mVWBw7sg1iG

dfZjQQOu4ZMERQ8n7MHzJ6tPxF0LAHYA7TxL1ugGwqSiAFfbyyTiOAHfUS/txIbF

cA8g3bc+P+AAAAGXXGzPMAAABAMARzBFAiEA1a+har3Ws1RvZ6hawLrHGrMRsLCa

6ZtsxnFTe7uQysUCIEPiEwcfgQGzgg4x8zuc9cYCLyHAXuElzOalNbgi4B94MAoG

CCqGSM49BAMDA2gAMGUCMC0w2DwOPY5r2rQ7hpgeiHdjd2h1kSFbvU6sZ3ZKNf8F

XiLn3MNoR0t6o3DeIqkmXwIxANQ2ugWsrPzlAXSBibcKr264c1Ql74hTfr7HCOUF

ocjbd63nPOyyHNFONsWIc/xfgQ==

-----END CERTIFICATE-----