HTTP/1.1 200 OK
Date: Fri, 07 Feb 2025 21:06:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 9704
Connection: keep-alive
Server: nginx/1.27.1
Access-Control-Allow-Origin: *
x-cache-status: EXPIRED
X-Cache-Status: EXPIRED
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0c:37:29:fc:f3:1f:ec:db:fe:2e:77:9b:f7:2c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2026 GMT
Subject: CN=api.prod.ooni.io
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:bf:56:a1:18:b8:ae:c3:d4:84:d5:e1:4b:71:dc:
8e:7f:26:c2:26:07:4c:ca:3d:c3:7e:9f:93:9d:55:
1c:02:eb:43:13:f2:9d:62:23:1a:a6:44:37:60:c7:
01:0e:b1:ab:4e:b9:f7:61:63:8e:b1:48:ce:f3:e0:
1b:62:8e:4b:48:1c:2b:b7:1d:48:87:be:99:db:20:
e4:2b:6a:90:6c:ca:5c:c0:aa:da:db:ea:d0:6b:3a:
7b:83:2c:8d:43:c9:60:3b:44:0f:09:2b:1d:d4:ac:
30:50:49:5f:69:50:64:3e:52:0c:fa:54:11:7f:28:
c9:85:6b:82:2a:8e:71:b3:a0:1b:41:ec:80:f3:49:
f7:08:df:e7:20:45:52:ed:ba:54:b9:21:e7:8f:ed:
97:eb:1b:97:55:d1:50:3c:da:dc:76:66:ab:9b:46:
95:0c:f9:7f:f8:05:0e:3c:77:b2:3a:7b:5c:7d:78:
c3:bf:97:b0:e0:89:a7:1a:e2:32:f4:70:74:2a:68:
47:4e:4f:2e:51:92:d5:b8:a9:64:01:34:26:30:d1:
a9:eb:53:2b:03:d9:e1:7c:41:c9:81:cf:60:dc:00:
4c:38:c8:bd:3e:65:31:31:da:24:ba:0a:ac:6d:0a:
d1:23:4b:d4:aa:a0:e2:67:88:66:54:fe:4e:85:e1:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
X509v3 Subject Key Identifier:
E0:F1:13:0C:5F:68:E4:98:29:47:3F:E4:43:30:8D:49:7B:64:E8:15
X509v3 Subject Alternative Name:
DNS:api.prod.ooni.io, DNS:2.th.ooni.org, DNS:3.th.ooni.org, DNS:1.th.ooni.org, DNS:4.th.ooni.org, DNS:0.th.ooni.org, DNS:6.th.ooni.org, DNS:5.th.ooni.org, DNS:ooniprobe.prod.ooni.io, DNS:oonirun.prod.ooni.io, DNS:ooniauth.prod.ooni.io, DNS:api.ooni.org, DNS:oonifindings.prod.ooni.io
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.r2m03.amazontrust.com/r2m03.crl
Authority Information Access:
OCSP - URI:http://ocsp.r2m03.amazontrust.com
CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
Timestamp : Dec 6 20:37:28.230 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:F1:81:CC:54:8E:AA:EF:8D:65:57:32:
B4:25:45:60:57:02:AD:25:64:BC:0C:0E:BD:F0:50:86:
A6:33:11:43:36:02:20:2F:C3:3D:8F:03:C0:0E:67:FC:
17:AE:97:13:37:B3:54:38:ED:A1:19:C4:76:6E:16:04:
46:6C:5B:ED:AD:5D:2D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : ED:3C:4B:D6:E8:06:C2:A4:A2:00:57:DB:CB:24:E2:38:
01:DF:51:2F:ED:C4:86:C5:70:0F:20:DD:B7:3E:3F:E0
Timestamp : Dec 6 20:37:28.286 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:D7:E3:50:96:07:AA:27:3B:01:91:AD:
D3:3E:CF:04:D1:1C:BE:90:3C:1E:02:07:97:C2:A9:06:
4D:A7:AB:4C:0C:02:20:2C:B1:97:A3:00:02:DC:B8:76:
7B:47:74:12:22:5B:74:6E:60:B8:EA:A9:95:ED:15:5A:
9B:2E:25:BD:99:F0:39
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Dec 6 20:37:28.294 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:F4:B8:DB:94:38:F7:C6:34:B3:52:9A:
28:EB:3A:D1:43:F4:B1:D1:86:8F:70:AE:99:42:7F:1A:
C3:61:54:25:ED:02:20:27:45:E2:45:09:CA:8D:8B:9D:
28:A4:33:02:63:6D:74:76:AF:50:5B:75:D0:E9:73:D1:
64:69:09:2F:29:C2:B3
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
53:75:12:a4:5f:e3:72:40:4e:2f:c8:4d:aa:61:43:e7:19:af:
44:0c:d6:ca:6b:53:0f:ae:36:8b:8a:b7:49:cd:30:0b:96:1f:
e9:15:0f:87:84:43:9d:96:c0:02:e8:a5:da:a2:c3:bc:f8:65:
ab:52:a8:85:22:28:f8:a4:32:cb:bd:9e:bb:3f:3f:8e:80:b6:
d2:e5:8f:17:02:da:41:d9:e7:ec:2b:df:fd:96:65:c3:80:6f:
cf:d7:e7:79:93:42:8b:1a:cf:32:bf:c7:d0:a6:d7:ae:98:80:
6e:a7:7e:7a:dc:20:bf:33:00:05:c5:99:2d:04:49:a6:68:e9:
c8:12:b9:4e:7d:d0:ee:f2:a5:a3:3e:29:4c:d0:44:6c:34:b4:
ae:f7:5f:b3:d3:c6:29:31:e8:89:e8:72:8f:8e:48:05:34:15:
7a:2d:b3:31:cf:73:dc:ac:4d:77:85:2d:4d:ba:46:c8:5b:3a:
6c:94:90:cd:b1:87:52:13:3c:c9:f4:33:c8:ab:74:e9:c5:89:
31:a2:74:58:46:eb:cb:df:f8:9c:ce:ab:cd:90:49:2e:74:f0:
fd:df:8d:dd:1b:a0:22:e9:a7:1f:20:fc:c8:72:78:5c:4c:5f:
5e:a6:5f:bf:70:a8:6b:92:74:65:dd:ef:5e:84:12:e7:df:83:
4b:57:4e:7f