Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            14:2f:73:08:00:3a:45:04:9b:69:c0:84:a6:7b:7d:c5

        Signature Algorithm: sha256WithRSAEncryption

        Issuer: C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

        Validity

            Not Before: Oct 24 00:00:00 2024 GMT

            Not After : Nov  7 23:59:59 2025 GMT

        Subject: CN = *.open-thoughts.com

        Subject Public Key Info:

            Public Key Algorithm: rsaEncryption

                Public-Key: (2048 bit)

                Modulus:

                    00:bf:b6:fe:00:4b:74:e5:cc:27:7c:2b:09:dd:98:

                    1d:f2:46:59:0f:64:53:08:65:80:3f:b7:81:33:a4:

                    a1:13:1b:26:24:6d:0a:22:75:87:d3:db:90:57:09:

                    35:18:c1:4e:80:cd:8a:82:25:ff:40:c2:19:42:3f:

                    d6:5c:7a:81:03:26:d9:a6:ae:d4:5f:5e:7a:e3:12:

                    7b:a7:5d:2c:77:f1:d2:34:15:cf:cc:9f:40:c8:19:

                    ed:d2:6b:f7:78:51:4a:1b:c8:93:44:37:7b:7f:05:

                    e7:4d:32:41:2e:c1:81:df:dc:9d:fc:76:76:02:bf:

                    9b:14:9d:8d:e3:03:f8:82:ff:03:85:f1:81:22:4e:

                    43:fd:96:44:ed:42:02:a6:1c:a8:1d:83:0f:81:50:

                    ef:ba:03:b2:d6:6b:66:45:70:39:c3:3a:17:82:20:

                    00:8e:48:0d:8b:0f:13:02:41:5c:c1:16:66:a3:ce:

                    62:e8:fa:35:5d:8c:82:4b:66:da:bf:96:2c:bc:4f:

                    d9:09:47:37:5a:67:22:63:6c:c2:7c:ca:67:a0:6f:

                    ef:ee:67:0a:ad:54:50:a4:61:5e:3d:dc:60:2e:0a:

                    df:77:98:0c:55:e1:de:37:13:c2:c9:94:7a:da:75:

                    4d:06:87:f3:7c:67:b6:b3:ff:79:1b:0b:c9:50:de:

                    7c:8d

                Exponent: 65537 (0x10001)

        X509v3 extensions:

            X509v3 Authority Key Identifier:

                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1

            X509v3 Subject Key Identifier:

                36:6B:5C:CB:97:45:44:62:9C:AF:AF:A4:20:3F:99:A6:AD:88:60:12

            X509v3 Key Usage: critical

                Digital Signature, Key Encipherment

            X509v3 Basic Constraints: critical

                CA:FALSE

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 Certificate Policies:

                Policy: 1.3.6.1.4.1.6449.1.2.2.7

                  CPS: https://sectigo.com/CPS

                Policy: 2.23.140.1.2.1

            Authority Information Access:

                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

                OCSP - URI:http://ocsp.sectigo.com

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:

                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A

                    Timestamp : Oct 24 00:46:20.278 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:44:02:20:55:9E:06:8F:8E:83:9E:C3:59:C6:88:13:

                                4E:7B:44:33:65:18:D0:95:5B:02:79:F4:C8:66:BD:06:

                                15:F1:E7:16:02:20:76:41:A8:80:D8:28:27:AC:DF:91:

                                6A:5A:35:EE:17:E8:1A:9B:8D:30:7F:52:95:02:CE:7F:

                                04:B9:76:05:DA:E0

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:

                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0

                    Timestamp : Oct 24 00:46:20.252 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:94:AD:D8:D3:06:01:14:8B:3E:21:CD:

                                19:E0:76:96:4C:B8:09:AD:3C:92:BF:00:72:73:75:C2:

                                28:F2:FB:30:38:02:20:3B:C4:EF:6C:44:7E:64:D0:3B:

                                EC:9C:E8:3A:F9:7B:FE:9B:AA:27:70:5A:96:48:89:FE:

                                78:CC:1A:C6:C4:A9:4C

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:

                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A

                    Timestamp : Oct 24 00:46:20.202 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:B8:2A:F3:DB:79:69:18:B1:4C:CA:18:

                                3F:23:B2:1C:EA:68:90:18:35:D0:E6:D3:68:F7:6B:3E:

                                A9:D8:E2:12:35:02:20:57:22:0D:75:C1:0E:90:22:0D:

                                02:A6:03:A4:0E:25:22:D8:12:F7:7B:A3:0E:CA:E7:B3:

                                FE:C8:BA:FD:A0:9B:62

            X509v3 Subject Alternative Name:

                DNS:*.open-thoughts.com, DNS:open-thoughts.com

    Signature Algorithm: sha256WithRSAEncryption

    Signature Value:

        65:9b:a1:ba:e8:f5:d5:69:e4:cb:eb:9b:30:f8:43:7f:7b:92:

        19:c4:b2:ec:86:3e:49:03:80:83:4c:a7:b8:a8:32:54:d7:24:

        78:f1:6e:4e:07:54:75:ce:8e:4d:f7:04:2c:22:26:f5:9d:01:

        67:49:37:87:83:e7:01:d4:ea:b6:00:c2:1b:f5:56:50:fd:d1:

        a0:6f:31:a8:ac:b0:28:f2:48:ab:2d:2d:29:d0:d3:bd:24:19:

        77:c8:10:85:ac:1b:73:b9:0d:8f:01:67:ae:50:aa:27:73:6a:

        fa:fc:67:c6:31:79:99:26:7e:ba:ee:81:70:5f:b0:36:1e:a1:

        4f:da:a6:92:8b:67:15:74:a7:14:5e:bc:e2:25:db:63:7d:d2:

        90:31:0c:d9:4d:b8:21:cd:01:25:99:d9:05:b5:84:aa:79:01:

        a7:0a:f6:8f:53:3c:7c:31:3f:7a:89:05:65:05:89:fa:e3:9d:

        d8:7e:8f:ca:29:63:7a:d1:63:79:8a:64:04:b7:a8:9e:c2:50:

        c1:3e:ec:cf:b9:0f:f4:85:6b:e7:06:5c:2b:9c:2a:f3:07:5e:

        89:4d:14:11:fd:1e:4c:62:41:d4:3d:ae:94:a2:82:c1:57:44:

        43:86:39:bc:67:66:43:18:32:7a:83:de:66:34:3c:b2:38:81:

        30:9e:c5:d6

-----BEGIN CERTIFICATE-----

MIIGQTCCBSmgAwIBAgIQFC9zCAA6RQSbacCEpnt9xTANBgkqhkiG9w0BAQsFADCB

jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G

A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD

Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB

MB4XDTI0MTAyNDAwMDAwMFoXDTI1MTEwNzIzNTk1OVowHjEcMBoGA1UEAwwTKi5v

cGVuLXRob3VnaHRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB

AL+2/gBLdOXMJ3wrCd2YHfJGWQ9kUwhlgD+3gTOkoRMbJiRtCiJ1h9PbkFcJNRjB

ToDNioIl/0DCGUI/1lx6gQMm2aau1F9eeuMSe6ddLHfx0jQVz8yfQMgZ7dJr93hR

ShvIk0Q3e38F500yQS7Bgd/cnfx2dgK/mxSdjeMD+IL/A4XxgSJOQ/2WRO1CAqYc

qB2DD4FQ77oDstZrZkVwOcM6F4IgAI5IDYsPEwJBXMEWZqPOYuj6NV2Mgktm2r+W

LLxP2QlHN1pnImNswnzKZ6Bv7+5nCq1UUKRhXj3cYC4K33eYDFXh3jcTwsmUetp1

TQaH83xntrP/eRsLyVDefI0CAwEAAaOCAwcwggMDMB8GA1UdIwQYMBaAFI2MXsRU

rYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBQ2a1zLl0VEYpyvr6QgP5mmrYhgEjAO

BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD

AQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUF

BwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUF

BwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0

aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEF

BQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggF9BgorBgEEAdZ5AgQCBIIB

bQSCAWkBZwB1AN3cyjSV1+EWBeeVMvrHn/g9HFDf2wA6FBJ2Ciysu8gqAAABkrv9

HHYAAAQDAEYwRAIgVZ4Gj46DnsNZxogTTntEM2UY0JVbAnn0yGa9BhXx5xYCIHZB

qIDYKCes35FqWjXuF+gam40wf1KVAs5/BLl2BdrgAHYAzPsPaoVxCWX+lZtTzumy

fCLphVwNl422qX5UwP5MDbAAAAGSu/0cXAAABAMARzBFAiEAlK3Y0wYBFIs+Ic0Z

4HaWTLgJrTySvwByc3XCKPL7MDgCIDvE72xEfmTQO+yc6Dr5e/6bqidwWpZIif54

zBrGxKlMAHYAEvFONL1TckyEBhnDjz96E/jntWKHiJxtMAWE6+WGJjoAAAGSu/0c

KgAABAMARzBFAiEAuCrz23lpGLFMyhg/I7Ic6miQGDXQ5tNo92s+qdjiEjUCIFci

DXXBDpAiDQKmA6QOJSLYEvd7ow7K57P+yLr9oJtiMDEGA1UdEQQqMCiCEyoub3Bl

bi10aG91Z2h0cy5jb22CEW9wZW4tdGhvdWdodHMuY29tMA0GCSqGSIb3DQEBCwUA

A4IBAQBlm6G66PXVaeTL65sw+EN/e5IZxLLshj5JA4CDTKe4qDJU1yR48W5OB1R1

zo5N9wQsIib1nQFnSTeHg+cB1Oq2AMIb9VZQ/dGgbzGorLAo8kirLS0p0NO9JBl3

yBCFrBtzuQ2PAWeuUKonc2r6/GfGMXmZJn667oFwX7A2HqFP2qaSi2cVdKcUXrzi

JdtjfdKQMQzZTbghzQElmdkFtYSqeQGnCvaPUzx8MT96iQVlBYn6453Yfo/KKWN6

0WN5imQEt6iewlDBPuzPuQ/0hWvnBlwrnCrzB16JTRQR/R5MYkHUPa6UooLBV0RD

hjm8Z2ZDGDJ6g95mNDyyOIEwnsXW

-----END CERTIFICATE-----