Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d3:3d:f7:51:6b:82:f3:d3:77:8d:43:f7:3d:5b:a1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Jun 14 00:00:00 2024 GMT
            Not After : Jul 12 23:59:59 2025 GMT
        Subject: CN=*.canoe-staging.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:0f:49:92:f2:31:0a:69:8a:8d:e6:45:18:
                    91:58:66:66:36:f7:9e:96:1c:58:d9:bc:4e:de:cf:
                    d3:dd:e1:ec:44:5f:4b:85:52:d6:39:d1:e6:a2:c5:
                    bd:a5:ab:ff:14:3e:7e:25:81:1d:c6:59:3c:a7:48:
                    7c:17:45:7f:8b:5b:3f:2a:3d:79:cb:42:eb:a3:f5:
                    97:33:34:4d:bc:5d:36:d9:98:3d:ce:b8:2b:d7:59:
                    15:f9:3c:f0:9a:39:0a:54:81:5d:b2:83:e0:f4:ef:
                    e5:5b:91:f0:e4:2f:5f:10:27:64:82:57:9a:a9:5c:
                    4d:21:2b:f1:b1:bf:ab:9b:11:85:5f:7a:3b:bd:d6:
                    87:97:bc:80:1f:aa:b3:97:2e:63:55:62:e7:6b:74:
                    3b:c1:03:a1:f9:84:bc:7f:c5:db:6b:51:39:4b:e1:
                    a2:65:10:29:fb:8b:ce:0f:18:d0:f9:57:35:85:06:
                    35:a6:cb:3f:0e:3b:0e:10:1d:85:88:76:4e:73:e7:
                    ae:61:81:48:b1:c7:41:fd:07:be:3e:be:5e:40:b3:
                    d2:83:7b:59:63:9c:63:c0:c6:56:71:81:96:b1:7e:
                    18:3c:6f:00:eb:07:01:78:6e:5c:7f:0e:67:4b:2c:
                    17:12:fa:0c:01:1a:5d:9f:82:18:50:e5:b2:36:ee:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                1D:BC:87:C2:63:61:E2:4D:87:75:7A:39:3C:1C:99:FB:F7:B0:62:90
            X509v3 Subject Alternative Name: 
                DNS:*.canoe-staging.com, DNS:canoe-staging.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Jun 14 06:51:21.841 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:2C:A5:AE:85:6B:4C:EF:BC:AA:CF:44:B1:
                                F5:63:28:A8:50:38:D2:6A:46:A5:DC:C7:AB:21:1D:BF:
                                A8:50:83:3C:02:21:00:BE:97:21:9F:12:02:AA:DB:C1:
                                3C:16:F7:45:0D:F7:06:73:B3:CA:81:AD:04:39:FC:8C:
                                59:37:EA:D1:93:EF:E3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jun 14 06:51:21.779 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:84:70:4A:EC:D7:66:E1:7B:07:53:96:
                                68:1C:9C:13:4C:79:17:F4:76:B9:84:D3:B4:13:28:38:
                                9C:D8:88:2F:77:02:20:20:8C:F2:53:E9:00:81:21:A1:
                                25:C8:72:84:2D:3A:C7:61:D1:A3:0F:EB:FA:A3:31:E4:
                                A3:55:FA:92:83:E8:3F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jun 14 06:51:21.802 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:76:69:EA:85:B8:D2:DC:0A:75:61:53:14:
                                20:06:1A:1B:E6:19:54:60:86:17:F4:FB:FC:03:DD:BD:
                                EF:D7:73:4B:02:21:00:9F:94:B3:36:7E:B3:F9:F6:DC:
                                E1:2B:25:70:70:7D:13:81:59:2A:57:02:11:2B:15:F9:
                                76:ED:D8:40:08:62:C3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        44:d0:70:00:e4:3f:2b:e7:8a:6c:65:9b:32:86:1a:5b:54:c9:
        34:fc:c3:1e:3f:a6:08:ab:20:91:22:fb:b2:6c:64:fa:97:6d:
        94:44:7e:fc:9d:d8:4a:8d:70:3e:42:58:36:bf:e9:5b:09:eb:
        67:12:61:13:c8:bb:b6:dd:be:9d:22:39:d3:2f:b5:9e:01:a6:
        4c:95:77:1c:21:82:cb:ff:13:25:80:87:84:fc:b4:ba:48:6c:
        74:d9:a9:1e:93:81:8e:4c:f3:a4:5c:1f:8a:6a:db:43:9b:2a:
        d0:fc:d1:22:56:34:83:56:17:ba:09:0d:ed:04:11:e2:75:15:
        c4:1c:fa:fd:e7:9f:56:c1:d7:a6:e6:bb:14:c1:93:69:62:22:
        b2:13:bd:44:43:8b:6a:34:14:87:2a:34:4a:b4:58:87:60:3f:
        4e:af:03:86:70:cf:21:56:3b:7d:61:f0:37:3b:b0:1d:23:8f:
        b6:d0:c8:1f:9e:89:c9:0c:6e:41:ec:56:ce:63:7f:13:75:c3:
        c4:20:14:9f:cc:83:2d:1a:ea:5e:ea:19:38:49:8c:0c:d4:65:
        fa:66:0b:ee:3f:7a:c4:a9:af:19:92:32:33:e7:85:30:e2:44:
        08:a5:98:ba:26:dd:fb:b0:cc:26:26:93:b1:11:f0:e9:39:52:
        db:58:db:38