Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f5:64:5d:58:b7:5e:fc:72:1e:c6:3b:2b:a7:3d:d2:ad:1d
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Dec 13 11:03:15 2024 GMT
            Not After : Mar 13 11:03:14 2025 GMT
        Subject: CN=secure.dor.state.ma.us
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub:
                    04:b2:91:f7:5f:19:1e:8b:bf:70:58:58:bb:e8:62:
                    4d:ad:17:bb:67:30:1f:74:6d:31:6d:50:b2:94:be:
                    5c:66:ca:b8:1c:5a:41:17:8b:db:d3:fa:ca:03:34:
                    fd:ae:0b:c6:bb:7a:03:ab:6b:94:3a:7c:e5:d8:89:
                    79:7c:f8:9b:12:ab:b1:ce:b9:1a:86:17:05:c2:6b:
                    ac:d4:0b:0f:01:db:36:af:0f:3c:f9:3f:ce:08:d7:
                    e2:03:25:35:b9:c6:4a
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                66:C3:8D:6E:41:BC:B9:94:48:7C:58:6D:38:79:46:6B:62:2E:8C:6D
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:secure.dor.state.ma.us
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Dec 13 12:01:46.066 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A0:82:DB:D2:11:51:8C:24:61:AC:B3:
                                4B:F3:7E:5C:0A:35:F6:DF:25:6C:1B:7D:9A:36:54:6B:
                                C2:26:D2:E5:EC:02:20:21:E1:AA:31:5D:0F:8F:67:CE:
                                F4:C4:67:1D:80:64:7F:48:16:2E:94:7F:EC:78:50:53:
                                F2:0D:28:61:41:A3:5A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Dec 13 12:01:46.098 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E1:28:03:91:AC:B1:9E:54:AE:EB:6B:
                                12:0D:21:CC:55:1C:86:BE:BA:5C:68:D7:DA:21:B6:F4:
                                F5:3E:F4:3D:4C:02:21:00:97:5C:56:51:5A:52:02:BF:
                                A8:73:BF:33:52:04:90:E3:81:E3:2E:91:53:CC:26:EA:
                                14:50:CF:64:EE:AA:E6:82
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:4f:36:d8:fe:83:f9:34:37:df:67:8b:73:6e:7c:
        08:29:d6:d1:51:9b:40:f1:de:28:43:05:52:82:75:9c:0f:34:
        55:a6:72:42:61:03:95:c6:75:4d:5b:91:f3:86:0c:56:02:31:
        00:95:cb:48:a5:0e:6d:a1:54:2c:e9:a2:16:7f:9a:6c:3a:b4:
        cd:83:e9:05:c8:cd:07:53:dd:4a:aa:dd:d7:94:1c:f3:75:29:
        05:62:45:11:5f:71:11:3a:af:9f:45:05:40