Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:65:9a:a5:bd:3a:60:c9:9e:e3:ce:1a:02:8b:53:a7:d9:ed
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Dec 15 02:06:09 2024 GMT
            Not After : Mar 15 02:06:08 2025 GMT
        Subject: CN=bao.pakasak.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:da:a2:c7:75:fe:3c:a1:6f:31:21:bb:f9:e9:1c:
                    b0:b0:84:20:a9:c1:dc:13:dd:41:65:14:6c:70:d3:
                    26:a5:8b:4b:c0:a3:e0:07:e6:6d:b4:dc:69:b4:40:
                    77:22:6d:c5:66:64:a4:de:49:ef:43:e0:b1:3b:b0:
                    84:ad:75:92:48
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B7:59:F6:09:A2:BB:E1:6F:5E:80:66:15:08:A1:6B:6B:B9:E1:E9:AD
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:bao.pakasak.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Dec 15 03:04:39.538 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C4:5E:C6:24:AB:5D:A9:D6:D2:57:EB:
                                7A:C2:F1:B4:F1:AD:F2:75:72:F8:34:1A:AE:BF:B7:04:
                                18:57:B5:F5:3C:02:20:28:81:B4:8E:25:CF:E3:27:05:
                                24:03:52:2E:20:1C:3E:7B:7C:87:8B:98:12:12:88:2D:
                                18:09:5E:BD:50:76:E6
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Dec 15 03:04:39.558 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:72:DD:1A:A8:4D:D3:5C:D9:79:42:B2:64:
                                AC:17:6E:63:DE:75:55:9B:F4:4B:6A:03:31:8C:C4:71:
                                4A:07:89:F7:02:20:1F:5C:31:87:B8:A9:71:32:BE:E6:
                                4F:03:BD:DF:30:62:2C:DD:FD:C6:DD:53:08:E4:04:F1:
                                1F:2C:A1:E9:B8:95
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:66:02:31:00:b3:4d:98:86:2c:7c:b0:47:bf:78:d3:af:30:
        48:3e:1f:9d:42:10:5c:ba:3a:fb:46:74:11:58:5c:2c:13:86:
        3a:90:5b:d3:e8:88:84:cd:b0:87:e7:6e:61:54:c0:44:01:02:
        31:00:a0:a8:ad:81:1b:66:4f:30:2c:b4:44:fc:5d:3a:36:e2:
        1e:87:00:27:a7:88:a9:a4:6d:92:d0:96:60:04:3c:ef:67:37:
        34:4a:e6:d1:1d:90:9f:0b:00:91:8a:3c:48:89