Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:25:20:4f:78:9f:64:93:f8:0a:b5:9c:e3:c6:49:ed:18:ab
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E1
        Validity
            Not Before: Mar 17 03:11:08 2024 GMT
            Not After : Jun 15 03:11:07 2024 GMT
        Subject: CN=churchservicemedia.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:5a:9b:0b:aa:fc:9c:e1:ef:18:79:48:50:2f:94:
                    6b:4b:f3:a6:e1:c5:0c:5f:3b:fe:f3:56:14:e0:f3:
                    d1:8d:8f:b1:e4:85:8a:38:86:a3:6b:b1:c6:2a:22:
                    21:d1:49:10:ba:71:b5:37:ce:7e:94:cc:88:26:b2:
                    6a:26:e9:b0:1f
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                00:7A:18:03:34:B9:ED:F5:5D:4D:BC:E7:99:19:83:95:C0:89:F7:DF
            X509v3 Authority Key Identifier: 
                5A:F3:ED:2B:FC:36:C2:37:79:B9:52:30:EA:54:6F:CF:55:CB:2E:AC
            Authority Information Access: 
                OCSP - URI:http://e1.o.lencr.org
                CA Issuers - URI:http://e1.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.churchservicemedia.com, DNS:churchservicemedia.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
                                65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
                    Timestamp : Mar 17 04:11:08.429 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:33:0D:FF:06:53:BD:90:4B:7E:C1:50:C3:
                                6A:A2:30:30:50:27:29:72:C3:60:B7:18:FC:03:B9:00:
                                A3:1E:DB:19:02:20:1A:0C:6D:21:02:EF:C4:02:B1:1A:
                                78:2B:8E:8B:71:F5:65:D2:44:16:53:29:44:C3:14:A6:
                                D4:E6:03:13:65:E7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Mar 17 04:11:08.436 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5E:11:87:C3:EE:0A:7E:4F:1F:4C:89:C9:
                                76:A4:4F:CF:C4:9A:05:C9:1E:20:30:79:4F:BA:30:F9:
                                47:40:D4:1A:02:21:00:AE:00:20:D7:11:ED:91:09:95:
                                0C:0D:DB:F8:9B:54:FD:D6:CB:7A:5F:55:50:10:BE:18:
                                11:24:8E:45:76:EE:B7
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:1b:c0:ee:2b:f0:0d:5b:b8:5e:f6:66:62:74:18:
        81:d0:c1:66:cf:24:3d:87:26:16:88:09:39:a3:c9:13:ae:cc:
        9f:01:41:c7:e0:19:3a:30:77:c5:23:d2:49:a5:ef:bc:02:31:
        00:c4:a3:3f:55:11:f4:c5:b5:f6:db:28:84:98:db:ec:35:ed:
        1e:87:db:c8:4d:a2:23:21:af:5e:9f:b8:1b:22:91:b5:42:4f:
        12:96:2f:df:9d:2f:4b:ab:1d:71:7c:e5:28