array (
  'name' => '/CN=refuse.org',
  'subject' => 
  array (
    'CN' => 'refuse.org',
  ),
  'hash' => '09945ac5',
  'issuer' => 
  array (
    'C' => 'US',
    'O' => 'Let\'s Encrypt',
    'CN' => 'R12',
  ),
  'version' => 2,
  'serialNumber' => '533396535455540748687429683535175182487194',
  'serialNumberHex' => '061F82F3FC9359AD13E0CC3471F84A308E9A',
  'validFrom' => '260318124523Z',
  'validTo' => '260616124522Z',
  'validFrom_time_t' => 1773837923,
  'validTo_time_t' => 1781613922,
  'signatureTypeSN' => 'RSA-SHA256',
  'signatureTypeLN' => 'sha256WithRSAEncryption',
  'signatureTypeNID' => 668,
  'purposes' => 
  array (
    1 => 
    array (
      0 => false,
      1 => false,
      2 => 'sslclient',
    ),
    2 => 
    array (
      0 => true,
      1 => false,
      2 => 'sslserver',
    ),
    3 => 
    array (
      0 => true,
      1 => false,
      2 => 'nssslserver',
    ),
    4 => 
    array (
      0 => false,
      1 => false,
      2 => 'smimesign',
    ),
    5 => 
    array (
      0 => false,
      1 => false,
      2 => 'smimeencrypt',
    ),
    6 => 
    array (
      0 => false,
      1 => false,
      2 => 'crlsign',
    ),
    7 => 
    array (
      0 => true,
      1 => true,
      2 => 'any',
    ),
    8 => 
    array (
      0 => true,
      1 => false,
      2 => 'ocsphelper',
    ),
    9 => 
    array (
      0 => false,
      1 => false,
      2 => 'timestampsign',
    ),
  ),
  'extensions' => 
  array (
    'keyUsage' => 'Digital Signature, Key Encipherment',
    'extendedKeyUsage' => 'TLS Web Server Authentication',
    'basicConstraints' => 'CA:FALSE',
    'subjectKeyIdentifier' => '32:20:57:B8:28:E0:15:20:2B:6E:08:48:35:3E:CC:CD:27:DC:50:A0',
    'authorityKeyIdentifier' => 'keyid:00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
',
    'authorityInfoAccess' => 'CA Issuers - URI:http://r12.i.lencr.org/
',
    'subjectAltName' => 'DNS:*.refuse.org, DNS:refuse.org',
    'certificatePolicies' => 'Policy: 2.23.140.1.2.1
',
    'crlDistributionPoints' => '
Full Name:
  URI:http://r12.c.lencr.org/27.crl
',
    'ct_precert_scts' => 'Signed Certificate Timestamp:
    Version   : v1(0)
    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
    Timestamp : Mar 18 13:43:53.867 2026 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:46:02:21:00:BB:E9:4B:10:39:6C:9A:3D:7A:4E:40:
                EE:13:6B:E5:B7:0A:E2:0B:2F:FA:FC:46:8D:66:2B:2A:
                3F:0C:A2:33:6E:02:21:00:EB:D2:88:E2:9E:74:59:22:
                91:2A:19:5A:19:85:BF:A1:8D:A4:7A:5B:CC:A1:73:27:
                A5:E2:55:67:C6:91:AC:62
Signed Certificate Timestamp:
    Version   : v1(0)
    Log ID    : 1A:8B:9D:69:4A:57:98:C8:99:A0:CA:88:BD:F4:8F:C0:
                B4:56:60:CC:C3:60:0D:1F:71:F4:69:FF:C7:D1:AC:A3
    Timestamp : Mar 18 13:43:54.284 2026 GMT
    Extensions: 00:00:05:00:57:3E:E7:CE
    Signature : ecdsa-with-SHA256
                30:44:02:20:2E:54:85:C2:D2:B6:EF:5C:A7:1F:8B:EA:
                31:7A:2E:31:6C:E4:DF:9C:89:F2:99:81:AF:9E:25:18:
                98:A6:4A:BA:02:20:58:29:A5:36:D0:D8:D9:3E:5F:17:
                5A:0A:72:9C:24:7B:0D:06:4E:F7:58:FD:C7:0C:23:D2:
                23:52:A3:53:84:30',
  ),
)