Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f8:f7:50:2b:ff:1a:b2:f4:e9:a0:87:89:a6:09:c7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Jan 28 00:00:00 2024 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: CN=puppet.lcodelab.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:db:68:77:dd:6d:24:e7:fc:c3:6a:11:87:79:03:
                    f1:a9:3f:fb:e6:50:89:9b:7c:82:53:82:ee:39:1c:
                    ae:a7:f3:c1:41:89:da:62:79:a1:c7:dc:b4:3c:77:
                    06:80:5b:23:fa:cd:34:d0:70:97:85:83:cf:68:97:
                    cf:45:0e:4b:6b:7b:8a:2a:c8:b5:82:21:7b:81:54:
                    15:49:13:e0:5c:11:e5:3b:e6:06:37:e2:a2:81:cb:
                    e0:af:da:7a:b2:79:86:c6:88:af:3e:a7:09:bd:90:
                    a1:d7:b1:47:d8:ba:68:e6:69:28:1d:5a:5a:85:98:
                    18:a0:0c:f1:9c:66:4a:09:4d:cd:8d:f6:89:9f:96:
                    0b:93:64:bb:6e:7c:59:df:41:e6:1c:3c:df:25:b0:
                    30:6d:30:2d:0f:a0:8e:cd:b6:15:2e:6e:0f:55:00:
                    f6:c7:cf:96:3c:9e:0e:d0:19:f2:de:b5:29:b9:3b:
                    f6:e9:c6:a8:01:0d:6e:3a:ae:69:be:13:09:d2:31:
                    7e:43:1d:86:15:c6:86:b5:94:12:1f:39:2c:5b:04:
                    1e:b9:95:98:ce:86:b0:80:9a:af:d8:98:13:1b:bf:
                    02:60:cb:df:a2:2b:4b:d0:a3:9c:bb:0a:cc:a7:d6:
                    1e:3f:d4:cd:cc:3b:a2:75:6b:60:9b:2a:69:a1:4f:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                98:16:AC:F6:76:89:33:77:08:DF:72:AB:AF:0D:36:26:7F:45:18:C5
            X509v3 Subject Alternative Name: 
                DNS:puppet.lcodelab.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jan 28 14:38:14.363 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:30:D2:8F:2D:A3:11:4E:65:63:44:49:D9:
                                DD:7A:0A:0C:59:6E:47:57:B6:E0:19:66:9E:BA:B7:E6:
                                31:14:FB:C7:02:20:06:DF:C9:B0:B8:80:85:1F:F5:73:
                                99:FB:C9:92:23:7D:11:DF:48:93:26:37:5D:D8:F3:1F:
                                00:DD:27:5E:19:FC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan 28 14:38:14.422 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:4B:8F:61:4C:59:5E:05:99:D4:C9:D8:E7:
                                C3:39:AA:B7:64:92:28:48:05:4F:6D:81:27:C5:1F:79:
                                1A:A4:4A:35:02:20:50:76:40:4E:60:02:4B:51:80:B0:
                                BD:1E:82:2F:47:C7:6D:2B:46:8E:D0:EF:78:35:EB:C7:
                                E8:F0:BE:C5:9D:13
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jan 28 14:38:14.463 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:BC:24:BD:7A:FA:03:A5:12:5A:99:9D:
                                04:BF:1F:43:32:AF:74:05:B0:1E:88:99:45:C2:AB:07:
                                32:80:90:0D:A4:02:20:0F:00:25:51:93:55:20:53:75:
                                F5:3B:15:BB:45:99:5B:A4:9A:53:DF:C7:61:5B:4E:3E:
                                2E:DB:FC:EA:40:33:09
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a9:61:14:95:52:5e:9f:e3:4f:ad:cb:5c:09:22:8a:24:2b:bf:
        25:b7:16:ea:6b:49:4e:7d:de:ab:ed:55:70:32:ec:17:eb:d8:
        09:37:57:69:1e:d2:3b:55:ff:7d:af:cf:6f:01:c7:b9:05:e2:
        ba:fe:19:ff:9c:86:20:b9:9f:de:79:98:0b:93:39:7b:6b:8e:
        12:85:cc:82:7b:5a:6d:39:58:48:20:b8:20:5b:51:40:de:4b:
        ff:06:e3:4a:5b:da:ff:be:ca:f0:9f:fd:07:fa:42:69:b8:e9:
        ef:d8:98:15:dd:76:35:1d:00:bc:bd:c4:f6:32:ff:99:fe:27:
        3e:c9:6d:50:9a:64:b6:6e:69:24:df:cf:10:88:93:29:e8:d7:
        44:bd:39:11:5d:79:6b:94:96:2e:ea:f5:4b:3a:b6:88:fc:0a:
        1e:ce:ce:05:49:da:13:e4:c6:9a:1d:dc:63:58:db:90:09:99:
        95:59:fd:b1:f6:72:ca:7c:ca:6d:17:82:d3:6b:6f:2e:08:df:
        4b:d2:27:cb:6f:27:77:4e:b2:02:eb:b6:42:b7:11:6e:72:c8:
        f7:94:89:a0:c4:ae:3c:e6:58:c4:b1:9e:17:0a:d7:32:7f:ef:
        fe:05:e0:15:e1:31:66:44:42:ef:35:da:60:0c:71:0c:59:34:
        fc:b3:57:25