Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:82:1f:2a:40:89:23:3e:6e:15:6d:f9:88:78:79:ca
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Mar 24 00:00:00 2025 GMT
            Not After : Apr 22 23:59:59 2026 GMT
        Subject: CN=*.onatalp.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:fb:8e:1a:83:ed:71:85:3a:3d:ae:16:6c:
                    c2:f5:61:a8:d4:67:d0:97:30:5d:76:0c:5e:a8:42:
                    f1:49:cf:a0:b1:31:48:ee:b9:25:63:4c:a4:0e:06:
                    fe:09:2d:09:5c:67:5d:0f:48:9c:26:28:45:73:b3:
                    a0:bb:ce:5d:93:3c:c7:ae:85:ed:b3:4d:cf:12:9a:
                    b6:ef:66:2c:c6:be:e9:da:19:98:3a:14:e6:d2:0f:
                    37:3a:a2:b5:4d:ca:52:9c:95:57:b9:dd:fa:ff:80:
                    ff:70:07:e4:29:80:35:99:d4:84:9a:67:51:b9:77:
                    0d:32:20:65:8f:e5:e0:92:59:49:8c:d0:c1:00:6e:
                    b7:b1:97:93:aa:c3:d7:98:c0:db:4e:52:7f:3f:5f:
                    dd:bb:bd:d1:29:2f:be:e7:2f:79:51:ff:5d:6f:82:
                    ce:23:8b:8c:14:a3:ca:a7:d7:88:01:ab:58:90:76:
                    8a:b3:8c:01:f6:0d:49:64:19:1d:1a:91:05:ae:fb:
                    cd:f2:f2:62:1d:c7:0a:92:bf:78:65:21:77:78:d0:
                    fd:6f:84:e0:73:ec:0e:af:01:89:5a:d0:6b:ff:fc:
                    cb:2a:51:82:ad:9c:0e:26:33:4b:1e:ce:df:74:a3:
                    7d:cf:6b:49:0b:74:14:67:f0:54:4b:af:62:d4:f4:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                D5:26:9A:1E:24:28:BB:EF:EC:2C:50:C2:E2:28:E4:4A:C9:57:A9:06
            X509v3 Subject Alternative Name: 
                DNS:*.onatalp.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Mar 24 15:07:38.146 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:68:02:C7:B6:BA:AD:3F:22:C8:3B:22:50:
                                ED:33:C3:2F:5A:AE:39:E2:F5:9B:3A:F4:16:E4:13:A5:
                                BC:BF:53:A5:02:21:00:C6:33:70:F2:51:7D:90:32:D6:
                                8F:63:9B:F1:91:35:6C:A0:F0:CE:F9:13:7F:2E:6C:FC:
                                7D:45:2F:7C:53:17:A2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Mar 24 15:07:38.214 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:21:00:DF:F2:A5:29:8C:A9:D7:B8:7F:AB:05:
                                B0:16:AF:A2:A3:DA:A2:8E:C2:66:04:91:E3:68:64:C1:
                                FA:3E:4C:92:39:02:1F:24:BB:1F:D1:CF:CE:48:28:80:
                                29:CA:FC:D5:49:1B:23:41:92:86:A3:54:5C:C2:FC:BB:
                                0F:66:B4:A2:27:F3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
                                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
                    Timestamp : Mar 24 15:07:38.199 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:08:6C:D0:8D:64:BD:E7:CE:A9:23:DF:A8:
                                56:46:75:50:0B:FE:1D:7F:25:01:0C:4E:1A:9C:9F:88:
                                82:02:1F:EB:02:20:02:D8:C9:63:96:F7:82:57:E2:03:
                                14:EA:2B:20:7C:32:51:FD:E9:6A:53:1F:B5:2E:37:86:
                                A7:1E:33:D2:0F:C7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        80:c8:0c:58:f0:43:fe:85:dc:c0:57:3c:4f:63:ea:93:73:8d:
        ac:4c:4e:dc:cb:65:1b:62:a9:53:d0:a4:6d:bd:7d:fe:b7:bb:
        c9:50:0d:6e:fd:3c:08:a7:97:b1:c6:50:54:55:2f:2c:7e:0f:
        09:c9:64:7b:00:81:3f:7e:6c:35:17:c1:20:a5:2d:61:ff:43:
        5a:db:e8:36:20:3d:40:3b:37:33:d5:80:2c:da:0c:7e:b7:5c:
        e3:62:2f:a9:ad:0d:45:e4:26:a8:32:03:07:9c:26:bb:54:45:
        ee:c4:37:1a:cf:c3:34:4d:fa:82:2f:00:47:d3:40:9a:0d:a7:
        e6:bf:57:1e:7c:2b:98:62:8a:f3:53:92:d1:8f:dd:f7:1d:e3:
        9c:cb:13:b4:6b:f0:8d:64:fc:0f:9e:0b:0e:76:f1:b2:ed:68:
        3b:b0:23:bc:67:79:ee:b0:77:1d:38:62:7f:dc:a5:6b:f7:d5:
        dd:02:85:3e:38:c9:f2:98:e6:a2:21:a3:f0:b2:4b:51:3e:bf:
        1c:69:c0:f7:67:b8:5f:1e:f2:67:eb:e8:ee:5e:fe:fc:17:29:
        1b:01:ae:65:cf:02:61:8a:91:6c:31:2e:79:25:62:27:ce:f1:
        3b:80:ea:20:9b:33:ec:43:e9:dd:b8:52:21:1d:6a:34:1e:be:
        e0:0b:12:f7