Session 2: Internet security¶
“AI (Claude) has been used to provide answers to simple questions like “What is .., what does.. what are the risks..”. All demos are my own”
Part 1 - PGP (end to end email security)¶
What is it ?¶
PGP stands for Pretty Good Privacy. It’s a encryption system used to secure digital communications, particularly email.
Here’s how it works:
The core idea — public key cryptography
Each user has two mathematically linked keys: a public key (shared openly with anyone) and a private key (kept secret). A message encrypted with your public key can only be decrypted with your private key.
What PGP does
- Encrypts messages so only the intended recipient can read them
- Signs messages digitally, proving the sender is who they claim to be and that the content wasn’t tampered with
The basic flow
- Alice wants to email Bob securely
- She gets Bob’s public key (from a keyserver or directly from Bob)
- She encrypts her message with it
- Only Bob’s private key can decrypt it — even Alice can’t read it anymore
Why “end-to-end”?
The encryption happens on Alice’s device and decryption happens on Bob’s device. The email provider (Gmail, etc.) sees only scrambled ciphertext in transit and at rest — they can’t read it even if compelled to.
What threat does it address ?¶
- Confidentiality (Only intended parties can read the data) - Violation = eavesdropping (only when the payload is encrypted AND signed)
- Integrity (Data isn’t modified in transit without detection) - Violation = tampering
- Authentication (You actually know you are talking to the key owner, not the person he or she claims to be) - Violation = impersonation
What’s the trust model ?¶
- You trust that the public key you have for Bob actually belongs to Bob
- And that key has not been stolen
- You trust key servers
- You trust your device
What’s the residual risk ?¶
- PGP encrypts the body only
- Past messages encrypted to that key are retroactively exposed
- May be difficult to let people know a key is not valid anymore
Demo - using PGP to sign emails¶
Step 1 - configure the email client to use the certificate¶
In Thunderbird, you can sign emails using either a simple text signature or a cryptographic digital signature (S/MIME or OpenPGP).
Let’s try OpenPGP (RFC 9580). The story behind OpenPGP is fascinating. More to read on OpenPGP.org
Step 2 - generate an OpenPGPkey¶
- Go to Settings → click Alice account → End-To-End Encryption
- Under the OpenPGP section, click Add Key
- Create a new OpenPGP key — fill in expiry preference and click Generate Key
Step 3 - share Alice public key¶
Options are: * Attach the public key to the message when composing * Upload it to a keyserver. For more on this, just google “OpenPGP HTTP Keyserver Protocol”
Step 4 - send a signed message¶
When composing a message:
- Click the Security button in the compose toolbar (lock icon)
- Enable Digitally Sign This Message
- Send as usual — recipients with your public key can verify the signature
Step 5 - inspect signature¶
Signing only proves the email came from Alice — it doesn’t encrypt the content. To encrypt, you also need Bob’s public key.
Part 2 - SSH (secure remote access)¶
What is it ?¶
SSH (Secure Shell) is a network protocol that lets you securely connect to and control a remote computer over an unsecured network (like the internet).
Think of it as a secure, encrypted tunnel between your computer and another machine — anything you type or receive travels through that tunnel, protected from eavesdropping.
What it’s used for:
- Remote terminal access — log into a server and run commands as if you were sitting in front of it
- File transfers — securely copy files between machines (via scp or sftp)
- Port forwarding / tunneling — route other network traffic securely through the SSH connection
- Running remote scripts/deployments — common in DevOps and server administration
- Tunneling (as mentionned by Neil): usefull when traveling to other countries
How it works (simply):
- Your machine initiates a connection to a remote server on port 22
- They exchange cryptographic keys to verify identity and establish encryption
- You get a secure shell session — a command-line interface on the remote machine
What threat does it address ?¶
- Confidentiality (Only intended parties can read the data) - Violation = eavesdropping
- Integrity (Data isn’t modified in transit without detection) - Violation = tampering
- Authentication (You actually know who you’re talking to) - Violation = impersonation
What’s the trust model ?¶
- The SSH server’s host key is legitimate (and hasn’t been swapped out)
- The key distribution channel
- That the first connection wasn’t already intercepted
- The client machine — your private key is only as safe as the machine storing it
What’s the residual risk ?¶
- Keylogger or stolen private key on your machine
- Private key files are only as protected as the passphrase guarding them
- If an attacker intercepts initial connection, you pin their key unknowingly
Demo - Remote terminal access¶
Step 1 — Generate Key Pair (on the client computer)¶
ssh-keygen -t ed25519 -C kaliser@fablab4d.xyz
Enter file in which to save the key (/root/.ssh/id_ed25519):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
This creates two files:
~/.ssh/id_ed25519 ← private key (never share this)
~/.ssh/id_ed25519.pub ← public key (this goes to Ubuntu)
View your public key:
cat ~/.ssh/id_ed25519.pub
Step 2 — Copy Public Key to the target computer¶
Step 3 - Connect the client to the server without entering a password¶
Part 3 - VPN / IPsec (network-layer tunneling)¶
What is it ?¶
VPN (Virtual Private Network)A¶
VPN creates a secure, encrypted tunnel over a public network (like the internet), allowing you to send and receive data as if you were directly connected to a private network.
What it solves:
When you send data over the internet, it passes through many routers and can be intercepted. A VPN encrypts that data and hides your real IP address.
Common uses:
- Remote workers securely accessing company resources
- Bypassing geo-restrictions
- Privacy on public Wi-Fi
- Connecting branch offices together
IPsec (Internet Protocol Security)¶
IPsec is a suite of protocols used to secure IP communications by authenticating and encrypting each packet. It’s one of the most common technologies used under the hood of VPNs.
Two main modes:
- Transport mode: encrypts only the payload (data) of each packet; headers stay visible. Used between two endpoints (e.g., two computers).
- Tunnel mode: encrypts the entire original packet and wraps it in a new one. Used for VPN gateways (e.g., connecting two offices).
Key components of IPsec:
- AH (Authentication Header) — Provides integrity and authentication, but no encryption. Confirms the packet hasn’t been tampered with.
- ESP (Encapsulating Security Payload) — Provides encryption and authentication. This is what’s typically used.
- IKE (Internet Key Exchange) — The protocol that negotiates and establishes the security keys between two parties (usually IKEv2 today).
- SA (Security Association) — A “contract” between two peers defining which algorithms and keys to use.
How they relate
VPN is the concept (secure private tunnel); IPsec is a technology that implements it.
Other VPN technologies include OpenVPN, WireGuard (the one we use for this course) , and SSL/TLS VPNs (like those used in browsers).
IPsec is especially common in:
- Site-to-site VPNs (office to office)
- Enterprise remote access
- Router-to-router connections
What threat does it address ?¶
- Confidentiality (Only intended parties can read the data) - Violation = eavesdropping
- Integrity (Data isn’t modified in transit without detection) - Violation = tampering
- Authentication (You actually know who you’re talking to) - Violation = impersonation
What’s the trust model ?¶
- You trust your device
- The destination is not compromised
- The certificates or pre-shared keys are legitimate and haven’t been stolen
What’s the residual risk ?¶
- If authentication relies on PKI and a CA is compromised or misbehaves, fake certificates can enable undetected MitM
- Traffic is decrypted at the VPN gateway — anyone with access to that box sees everything
- Shor’s algorithm, breaking Diffie-Hellman key exchange
Demo 1 - Teleport¶
I use Teleport at Fablab4D
UniFi Teleport is a zero-configuration, client-to-site VPN built into UniFi Gateways (like the Dream Machine or Cloud Gateway). Powered by WireGuard, it lets you securely connect to your home network from anywhere in the world—even behind strict CGNAT—without needing to open ports or configure complex settings.
-
Zero Config: No need to manage certificates, usernames, or passwords. It uses a secure, time-sensitive invitation link or single-sign-on (SSO) to connect your device instantly.
-
Access Anywhere: Works over public Wi-Fi or cellular, bypassing restrictive firewalls.
-
Full Network Access: Once connected, your device acts as if it is sitting locally on your home Wi-Fi, allowing you to access local files, servers, and smart home devices.
More info on https://help.ui.com/hc/en-us/articles/5246403561495-UniFi-Gateway-Teleport-VPN
Demo 2 - Wireguard¶
This is the client side
Part 4 - MACsec (link-layer encryption)¶
What is it ?¶
MACsec (Media Access Control Security) is a Layer 2 (link-layer) encryption standard defined in IEEE 802.1AE. It provides hop-by-hop encryption and authentication of Ethernet frames between directly connected network devices.
How it works
MACsec encrypts traffic at the data link layer (Layer 2), meaning it secures data as it travels across a single Ethernet link — between two adjacent devices like a switch and a router, or a switch and a server.
It uses AES-GCM encryption (typically 128-bit or 256-bit) and operates by:
- Wrapping each Ethernet frame with a SecTAG (security tag) header
- Encrypting the payload
- Appending an ICV (Integrity Check Value) — a cryptographic tag to detect tampering
Key properties
- Confidentiality — payload is encrypted, invisible to anyone tapping the wire
- Integrity — any modification to the frame is detected
- Replay protection — sequence numbers prevent replayed packets
- Authentication — only trusted peers can communicate on the link
Typical use cases
- Data center interconnects — securing high-speed links between switches
- Campus networks — protecting traffic between access switches and uplinks
- WAN/carrier Ethernet — encrypting leased line traffic
- Compliance — meeting requirements for encryption in transit (PCI-DSS, HIPAA, etc.)
Important limitation
Because MACsec is hop-by-hop, traffic is decrypted and re-encrypted at each intermediate device (like a switch). It does not provide end-to-end encryption across multiple network segments — that’s what IPsec or TLS is for. The two are often used together for layered security.
What threat does it address ?¶
- Confidentiality (Only intended parties can read the data) - Violation = eavesdropping
- Integrity (Data isn’t modified in transit without detection) - Violation = tampering
- Authentication (You actually know who you’re talking to) - Violation = impersonation
What’s the trust model ?¶
We trust:
- The physical hardware. If the device is compromised, the keys are compromised. MACsec secures the wire, not the box.
- The key distribution mechanism
- Each intermediate switching device — because MACsec is hop-by-hop, every switch in the path decrypts and re-encrypts.
- The management plane — whoever can push config to the devices can change keys, disable MACsec, or add a rogue peer. Network management access is effectively “above” MACsec.
What’s the residual risk ?¶
- This is not enough to provide end to end encryption
- Anyone with root/admin access to a switch sees all traffic in plaintext
- MACsec encrypts the payload but not the Ethernet MAC addresses
Demo¶
Not enough $$$ to buy the very expensive hardware implementing this, sorry :-(
Part 5 - DNS Security (DNSSEC & DNS spoofing)¶
What is it ?¶
DNS (Domain Name System)¶
DNS is essentially the internet’s phone book. It translates human-readable domain names (like google.com) into IP addresses (like 142.250.80.46) that computers use to communicate.
Why it’s needed:
Computers identify each other using IP addresses, but those are hard for humans to remember. DNS lets you type amazon.com instead of a string of numbers.
How it works (simplified):
- You type example.com in your browser
- Your computer asks a recursive resolver (usually your ISP or a public one like 8.8.8.8) — “what’s the IP for this?”
- The resolver asks a root nameserver → which points to the .com nameserver
- The .com nameserver points to example.com’s authoritative nameserver
- That nameserver returns the actual IP address
- Your browser connects to that IP — the website loads
DNSSEC (DNS Security Extensions) and DNS spoofing¶
DNSSEC is a set of security extensions added to DNS to protect against data tampering and forgery.
The Problem It Solves
Regular DNS has no way to verify that a response is authentic. This opens the door to DNS spoofing / cache poisoning — where an attacker injects a fake DNS response, tricking your computer into connecting to a malicious IP instead of the real one (e.g., sending you to a fake bank website).
How DNSSEC Works
DNSSEC adds digital signatures to DNS records. Each response is cryptographically signed so you can verify it actually came from the legitimate authoritative server and wasn’t tampered with in transit.
The chain of trust:
- The root zone (.) is signed with a private key — this is the trust anchor
- Each level signs the next: root → .com → example.com
- Your resolver verifies the signature at each step before trusting the answer
If any signature check fails, the resolver rejects the response rather than returning a potentially forged result.
What threat does it address ?¶
- Integrity (Data isn’t modified in transit without detection) - Violation = tampering
- Authentication (You actually know who you’re talking to) - Violation = impersonation
What’s the trust model ?¶
- The domain owner
- Each registry in the chain
- Your resolver (some do not check)
What’s the residual risk ?¶
- Nation or state controlling the root key
- Bad key management (no rotation)
- DNSSEC tells you the DNS record is authentic — not that the endpoint is safe !
Demo¶
I’m using Godaddy for my main fablab4d.ca domain
According to the documentaiton I found, I own 5 free DNSSEC credits in my GoDaddy account, and I can apply them to domains using GoDaddy nameservers. To protect more domains, I can upgrade to Premium DNS for additional DNSSEC credits.
BUT … GoDaddy does not support DNSSEC for .ca domains when they act as your registrar. This is a GoDaddy policy/technical gap, not a CIRA restriction. CIRA’s registry fully supports DNSSEC. The solution would be to transfer my fablabd.ca domain to another registrar that supports DNSSEC, like CloudFlare.
Part 6 - IDS / IPS (detection vs. prevention)¶
What is it ?¶
DS/IPS stands for Intrusion Detection System / Intrusion Prevention System. These are two closely related network security technologies:
IDS (Intrusion Detection System) — passive monitoring
- Watches network traffic and system activity for suspicious patterns
- Alerts administrators when something looks malicious
- Does not block the threat — it only detects and reports it
- Think of it as a security camera that records and triggers an alarm
IPS (Intrusion Prevention System) — active blocking
- Does everything an IDS does, but also takes automatic action
- Can block, drop, or quarantine malicious traffic in real time
- Sits inline with network traffic (traffic flows through it)
- Think of it as a security guard who can physically stop intruders
In practice, most modern systems are IDS/IPS combined — you configure them to operate in detection mode, prevention mode, or both depending on the rule/threat type.
What threat does it address ?¶
- Integrity (Data isn’t modified in transit without detection) - Violation = tampering
- Availability, by watching for attacks in progress (The system keeps working when legitimate users need it) - Violation = denial of service
What’s the trust model ?¶
- If rules are wrong, outdated, or incomplete, threats slip through
- False positive/negative rates depend heavily on configuration
- The attacker’s behavior matches known patterns (signature-based) or deviates statistically from a baseline (anomaly-based)
- And, obviously.. traffic is not encrypted end-to-end i
What’s the residual risk ?¶
- So many false positives that real alerts get ignored
- Zero-days — no signature exists yet, so detection-based systems are blind
Demo¶
IPS is activated on my Ubiquiti router at FabLab4D
Note: not all of them are checked, there is a maximum you cannot exceed. Not sure it is a performance or a licensing issue..
According to the router documentation, IDS/IPS works by scanning network traffic for patterns, known as signatures, that indicate known threats. Deep Packet Inspection (DPI) is used to thoroughly examine the contents of data packets at various layers of network communication:
- Layer 3 (Network Layer): IP addresses
- Layer 4 (Transport Layer): Ports and protocols
- Layer 7 (Application Layer): Application payloads
A signature’s matching characteristic may consist of various elements from one or multiple layers, either within a single packet, or multiple packets throughout a communication session. For example, a given signature might look for multiple packets of a specified size being sent from a particular IP address over a specific port.
UniFi has thousands of signatures, each grouped into distinct threat categories so you can flexibly configure your network to best meet your organizational goals. UniFi’s IPS/IDS signature databases experience real-time updates to ensure you are protected, even as threats continue to change and evolve.
Additionnal exercises:¶
TLS Handshake Trace¶
Trace a real TLS handshake and an encrypted data segment. Identify how the session is established — cipher suite, certificate, key exchange — and confirm what an observer can and cannot see.
openssl s_client -connect fablab4d.ca:443 -msg -debug
-msg — shows handshake messages
-debug — raw hex of all data sent/received
-tlsextdebug — shows TLS extensions
-state — prints each handshake state transition
Output summary (created by Claude AI based on my raw output)
-
ClientHello — Your client opens a TCP connection and says “here’s what I support”: TLS versions (1.0–1.3), a list of cipher suites, and extensions like supported elliptic curves and signature algorithms. It also sends the SNI (Server Name Indication): fablab4d.ca.
-
ServerHello — The server responds by picking a protocol and cipher. It chose TLS 1.2 with ECDHE-RSA-AES256-GCM-SHA384, even though the client offered TLS 1.3. (This is a server-side configuration choice.)
-
Certificate — The server sends its certificate chain (3 certs): Leaf cert: CN = fablab4d.ca — issued by ZeroSSL, valid Apr 13 – Oct 28, 2026, Intermediate: ZeroSSL RSA DV SSL CA 2 — issued by Sectigo, Root: Sectigo Public Server Authentication Root R46 — trusted root
-
ServerKeyExchange — Because ECDHE (Elliptic Curve Diffie-Hellman Ephemeral) is used, the server sends its temporary public key (X25519 curve, 253-bit) for this session’s key exchange.
-
ServerHelloDone — Server signals it’s done with its part of the handshake.
-
ClientKeyExchange — Your client sends its own ephemeral public key.
-
ChangeCipherSpec + Finished — Both sides signal “switching to encrypted mode now” and send a Finished message (a hash of the entire handshake) to verify nothing was tampered with.
-
NewSessionTicket — The server hands the client a session ticket so future connections can resume without a full handshake (valid 300 seconds).
-
Connection closes — A TLS close_notify alert is exchanged gracefully by both sides.
This is the raw output
CONNECTED(00000003)
>>> TLS 1.0, RecordHeader [length 0005]
16 03 01 01 34
>>> TLS 1.3, Handshake [length 0134], ClientHello
01 00 01 30 03 03 f9 1a 4e fe 10 4b e9 33 15 73
6e c8 52 5b 7a 21 7e 62 eb a3 3f 6a 9b 83 a5 b8
dc 50 d9 2f ff 4e 20 1a df ab 57 b6 70 34 25 ec
5f ce 1d 8b a4 8f 48 48 0c a0 f8 9d 4b 1f d0 4a
10 3a d0 1d c2 f8 81 00 3e 13 02 13 03 13 01 c0
2c c0 30 00 9f cc a9 cc a8 cc aa c0 2b c0 2f 00
9e c0 24 c0 28 00 6b c0 23 c0 27 00 67 c0 0a c0
14 00 39 c0 09 c0 13 00 33 00 9d 00 9c 00 3d 00
3c 00 35 00 2f 00 ff 01 00 00 a9 00 00 00 10 00
0e 00 00 0b 66 61 62 6c 61 62 34 64 2e 63 61 00
0b 00 04 03 00 01 02 00 0a 00 16 00 14 00 1d 00
17 00 1e 00 19 00 18 01 00 01 01 01 02 01 03 01
04 00 23 00 00 00 16 00 00 00 17 00 00 00 0d 00
2a 00 28 04 03 05 03 06 03 08 07 08 08 08 09 08
0a 08 0b 08 04 08 05 08 06 04 01 05 01 06 01 03
03 03 01 03 02 04 02 05 02 06 02 00 2b 00 05 04
03 04 03 03 00 2d 00 02 01 01 00 33 00 26 00 24
00 1d 00 20 4a 43 96 b9 7a b5 3a ad 52 ce 48 f1
33 50 f4 bf 00 73 fb 7a 93 cd 41 5b 9e d7 7a 24
ef bc 68 52
write to 0x6428fb6078f0 [0x6428fb6d2080] (313 bytes => 313 (0x139))
0000 - 16 03 01 01 34 01 00 01-30 03 03 f9 1a 4e fe 10 ....4...0....N..
0010 - 4b e9 33 15 73 6e c8 52-5b 7a 21 7e 62 eb a3 3f K.3.sn.R[z!~b..?
0020 - 6a 9b 83 a5 b8 dc 50 d9-2f ff 4e 20 1a df ab 57 j.....P./.N ...W
0030 - b6 70 34 25 ec 5f ce 1d-8b a4 8f 48 48 0c a0 f8 .p4%._.....HH...
0040 - 9d 4b 1f d0 4a 10 3a d0-1d c2 f8 81 00 3e 13 02 .K..J.:......>..
0050 - 13 03 13 01 c0 2c c0 30-00 9f cc a9 cc a8 cc aa .....,.0........
0060 - c0 2b c0 2f 00 9e c0 24-c0 28 00 6b c0 23 c0 27 .+./...$.(.k.#.'
0070 - 00 67 c0 0a c0 14 00 39-c0 09 c0 13 00 33 00 9d .g.....9.....3..
0080 - 00 9c 00 3d 00 3c 00 35-00 2f 00 ff 01 00 00 a9 ...=.<.5./......
0090 - 00 00 00 10 00 0e 00 00-0b 66 61 62 6c 61 62 34 .........fablab4
00a0 - 64 2e 63 61 00 0b 00 04-03 00 01 02 00 0a 00 16 d.ca............
00b0 - 00 14 00 1d 00 17 00 1e-00 19 00 18 01 00 01 01 ................
00c0 - 01 02 01 03 01 04 00 23-00 00 00 16 00 00 00 17 .......#........
00d0 - 00 00 00 0d 00 2a 00 28-04 03 05 03 06 03 08 07 .....*.(........
00e0 - 08 08 08 09 08 0a 08 0b-08 04 08 05 08 06 04 01 ................
00f0 - 05 01 06 01 03 03 03 01-03 02 04 02 05 02 06 02 ................
0100 - 00 2b 00 05 04 03 04 03-03 00 2d 00 02 01 01 00 .+........-.....
0110 - 33 00 26 00 24 00 1d 00-20 4a 43 96 b9 7a b5 3a 3.&.$... JC..z.:
0120 - ad 52 ce 48 f1 33 50 f4-bf 00 73 fb 7a 93 cd 41 .R.H.3P...s.z..A
0130 - 5b 9e d7 7a 24 ef bc 68-52 [..z$..hR
read from 0x6428fb6078f0 [0x6428fb6c8e53] (5 bytes => 5 (0x5))
0000 - 16 03 03 00 45 ....E
<<< TLS 1.2, RecordHeader [length 0005]
16 03 03 00 45
read from 0x6428fb6078f0 [0x6428fb6c8e58] (69 bytes => 69 (0x45))
0000 - 02 00 00 41 03 03 47 56-eb e7 0f 8e e7 13 8e 30 ...A..GV.......0
0010 - 51 43 fa 00 93 41 3b 9e-7a 4f 9d f4 f1 54 bc 93 QC...A;.zO...T..
0020 - 5f 23 8e e2 d4 de 00 c0-30 00 00 19 ff 01 00 01 _#......0.......
0030 - 00 00 00 00 00 00 0b 00-04 03 00 01 02 00 23 00 ..............#.
0040 - 00 00 17 00 00 .....
<<< TLS 1.3, Handshake [length 0045], ServerHello
02 00 00 41 03 03 47 56 eb e7 0f 8e e7 13 8e 30
51 43 fa 00 93 41 3b 9e 7a 4f 9d f4 f1 54 bc 93
5f 23 8e e2 d4 de 00 c0 30 00 00 19 ff 01 00 01
00 00 00 00 00 00 0b 00 04 03 00 01 02 00 23 00
00 00 17 00 00
read from 0x6428fb6078f0 [0x6428fb6c8e53] (5 bytes => 5 (0x5))
0000 - 16 03 03 11 cf .....
<<< TLS 1.2, RecordHeader [length 0005]
16 03 03 11 cf
read from 0x6428fb6078f0 [0x6428fb6c8e58] (4559 bytes => 1369 (0x559))
0000 - 0b 00 11 cb 00 11 c8 00-06 1d 30 82 06 19 30 82 ..........0...0.
0010 - 04 81 a0 03 02 01 02 02-11 00 cd 12 47 72 38 f5 ............Gr8.
0020 - 99 fb dc c9 a2 90 88 30-37 34 30 0d 06 09 2a 86 .......0740...*.
0030 - 48 86 f7 0d 01 01 0b 05-00 30 46 31 0b 30 09 06 H........0F1.0..
0040 - 03 55 04 06 13 02 41 54-31 15 30 13 06 03 55 04 .U....AT1.0...U.
0050 - 0a 13 0c 5a 65 72 6f 53-53 4c 20 47 6d 62 48 31 ...ZeroSSL GmbH1
0060 - 20 30 1e 06 03 55 04 03-13 17 5a 65 72 6f 53 53 0...U....ZeroSS
0070 - 4c 20 52 53 41 20 44 56-20 53 53 4c 20 43 41 20 L RSA DV SSL CA
0080 - 32 30 1e 17 0d 32 36 30-34 31 33 30 30 30 30 30 20...26041300000
0090 - 30 5a 17 0d 32 36 31 30-32 38 32 33 35 39 35 39 0Z..261028235959
00a0 - 5a 30 16 31 14 30 12 06-03 55 04 03 13 0b 66 61 Z0.1.0...U....fa
00b0 - 62 6c 61 62 34 64 2e 63-61 30 82 01 22 30 0d 06 blab4d.ca0.."0..
00c0 - 09 2a 86 48 86 f7 0d 01-01 01 05 00 03 82 01 0f .*.H............
00d0 - 00 30 82 01 0a 02 82 01-01 00 e6 25 ac a9 32 47 .0.........%..2G
00e0 - e9 06 38 da a2 f6 9c 8d-dc 81 b7 6a 1e 13 1c f0 ..8........j....
00f0 - 54 f6 24 4a 66 80 16 6e-8e 04 3d eb dc 99 19 a3 T.$Jf..n..=.....
0100 - f6 f7 1f 8d 11 9e 65 c3-0d ff b0 96 d3 5f b7 91 ......e......_..
0110 - 11 11 ae 68 6b 81 8c c2-ab dd 06 b6 1f 1f f6 77 ...hk..........w
0120 - b1 b5 85 07 86 65 24 23-19 32 83 ff 25 8c 89 3c .....e$#.2..%..<
0130 - f8 43 73 b9 46 c7 a9 6e-90 b0 14 f3 df 6b 64 b8 .Cs.F..n.....kd.
0140 - 07 92 5d 0d 4a ab db 46-05 e5 99 8b 51 61 b8 55 ..].J..F....Qa.U
0150 - 74 f9 84 fd 97 5b e5 06-16 b8 d2 23 6b 1c 04 50 t....[.....#k..P
0160 - 43 a8 5e 8c 85 1b 0d 92-2e 3c f7 78 8f cf f1 12 C.^......<.x....
0170 - 48 c4 bb ea 9d b0 29 fb-d4 9a d5 fd b8 dd a6 cc H.....).........
0180 - 4d 31 c8 7d 4f f9 79 75-e2 bf 49 44 13 5e 45 05 M1.}O.yu..ID.^E.
0190 - 12 0a a2 32 86 41 d8 69-37 2c 8b c5 52 21 cb 49 ...2.A.i7,..R!.I
01a0 - 65 2d e0 b3 9b 3a 19 3d-8d 5a d6 82 3b f4 2c d9 e-...:.=.Z..;.,.
01b0 - a5 d7 7b 09 26 6a 5b d3-51 eb c2 a5 c5 ad e1 93 ..{.&j[.Q.......
01c0 - fa 03 58 93 6b 94 14 4c-66 1b ca 50 b2 4c 6f 5e ..X.k..Lf..P.Lo^
01d0 - 1e 25 e8 04 7d cc 86 f0-93 45 02 03 01 00 01 a3 .%..}....E......
01e0 - 82 02 b0 30 82 02 ac 30-1f 06 03 55 1d 23 04 18 ...0...0...U.#..
01f0 - 30 16 80 14 4b be fa 76-84 23 44 04 b9 ce be 31 0...K..v.#D....1
0200 - 6f e9 f5 32 06 ff 0c 57-30 1d 06 03 55 1d 0e 04 o..2...W0...U...
0210 - 16 04 14 b3 d6 dc 5a 04-28 49 c0 9b 27 9a d2 ed ......Z.(I..'...
0220 - f6 49 8f 8b e0 6b 02 30-0e 06 03 55 1d 0f 01 01 .I...k.0...U....
0230 - ff 04 04 03 02 05 a0 30-0c 06 03 55 1d 13 01 01 .......0...U....
0240 - ff 04 02 30 00 30 13 06-03 55 1d 25 04 0c 30 0a ...0.0...U.%..0.
0250 - 06 08 2b 06 01 05 05 07-03 01 30 13 06 03 55 1d ..+.......0...U.
0260 - 20 04 0c 30 0a 30 08 06-06 67 81 0c 01 02 01 30 ..0.0...g.....0
0270 - 6e 06 08 2b 06 01 05 05-07 01 01 04 62 30 60 30 n..+........b0`0
0280 - 39 06 08 2b 06 01 05 05-07 30 02 86 2d 68 74 74 9..+.....0..-htt
0290 - 70 3a 2f 2f 63 72 74 2e-73 65 63 74 69 67 6f 2e p://crt.sectigo.
02a0 - 63 6f 6d 2f 5a 65 72 6f-53 53 4c 52 53 41 44 56 com/ZeroSSLRSADV
02b0 - 53 53 4c 43 41 32 2e 63-72 74 30 23 06 08 2b 06 SSLCA2.crt0#..+.
02c0 - 01 05 05 07 30 01 86 17-68 74 74 70 3a 2f 2f 6f ....0...http://o
02d0 - 63 73 70 2e 73 65 63 74-69 67 6f 2e 63 6f 6d 30 csp.sectigo.com0
02e0 - 27 06 03 55 1d 11 04 20-30 1e 82 0b 66 61 62 6c '..U... 0...fabl
02f0 - 61 62 34 64 2e 63 61 82-0f 77 77 77 2e 66 61 62 ab4d.ca..www.fab
0300 - 6c 61 62 34 64 2e 63 61-30 82 01 87 06 0a 2b 06 lab4d.ca0.....+.
0310 - 01 04 01 d6 79 02 04 02-04 82 01 77 04 82 01 73 ....y......w...s
0320 - 01 71 00 76 00 d7 6d 7d-10 d1 a7 f5 77 c2 c7 e9 .q.v..m}....w...
0330 - 5f d7 00 bf f9 82 c9 33-5a 65 e1 d0 b3 01 73 17 _......3Ze....s.
0340 - c0 c8 c5 69 77 00 00 01-9d 86 db 43 3d 00 00 04 ...iw......C=...
0350 - 03 00 47 30 45 02 21 00-a6 e2 00 f6 54 0b 34 54 ..G0E.!.....T.4T
0360 - 49 16 67 4e fe b2 b2 7c-68 8b 5e 4a 6a 01 62 02 I.gN...|h.^Jj.b.
0370 - fc 6e 99 1c d0 41 da e6-02 20 65 06 ca 9d 14 07 .n...A... e.....
0380 - 69 6f f0 41 3a e6 4c 13-19 80 0b d6 f9 8e 3c 9b io.A:.L.......<.
0390 - f3 2f b9 91 de ef 6b 76-24 b0 00 77 00 c8 a3 c4 ./....kv$..w....
03a0 - 7f c7 b3 ad b9 35 6b 01-3f 6a 7a 12 6d e3 3a 4e .....5k.?jz.m.:N
03b0 - 43 a5 c6 46 f9 97 ad 39-75 99 1d cf 9a 00 00 01 C..F...9u.......
03c0 - 9d 86 db 43 86 00 00 04-03 00 48 30 46 02 21 00 ...C......H0F.!.
03d0 - aa 19 c8 1d 5a 21 e9 7a-53 8b 02 45 c1 71 f6 45 ....Z!.zS..E.q.E
03e0 - 5c 9a 02 28 a9 88 9e 06-bb e8 b1 84 6d 64 75 73 \..(........mdus
03f0 - 02 21 00 8c f3 0b 6f 82-d5 f1 7d 81 b4 b9 f1 38 .!....o...}....8
0400 - 51 6f 5c 69 dc fc b4 d1-c8 dd 0e 15 6f 8e ca 56 Qo\i........o..V
0410 - 4c c4 4a 00 7e 00 6c fe-50 19 43 a8 5e a9 16 bc L.J.~.l.P.C.^...
0420 - 52 d1 33 e4 dc c9 1e f1-41 1c 7d 25 84 20 d1 73 R.3.....A.}%. .s
0430 - 80 9e 18 18 eb 3a 00 00-01 9d 86 db 44 a6 00 08 .....:......D...
0440 - 00 00 05 00 07 04 d6 b2-04 03 00 47 30 45 02 20 ...........G0E.
0450 - 2c f7 1b 0d 54 46 d5 ce-66 86 5e e8 cb e4 62 5a ,...TF..f.^...bZ
0460 - 98 9b bd cd ec c6 0b 09-02 9b e7 8b e7 a3 b8 94 ................
0470 - 02 21 00 94 44 7f f7 72-de 63 53 56 f7 66 e6 b8 .!..D..r.cSV.f..
0480 - f9 45 d6 2c cc 01 18 ad-2a 44 ea 17 e5 ef e3 84 .E.,....*D......
0490 - 2b 18 17 30 0d 06 09 2a-86 48 86 f7 0d 01 01 0b +..0...*.H......
04a0 - 05 00 03 82 01 81 00 01-70 1e 9e 19 ce 72 f3 86 ........p....r..
04b0 - 20 a3 75 7e 6e df 57 f2-e5 01 82 d1 b5 d0 21 59 .u~n.W.......!Y
04c0 - 6c fc a1 95 8b 71 1e 7d-24 50 29 21 20 fd 30 8c l....q.}$P)! .0.
04d0 - 82 80 3f c8 08 ae ea 21-f8 5f e0 00 39 fa b0 2a ..?....!._..9..*
04e0 - b8 e6 62 ec b6 8e 9a 68-e3 87 de c8 f2 4f c6 d2 ..b....h.....O..
04f0 - 00 6a 87 9a a1 48 33 0a-05 2b dc e1 49 f9 73 93 .j...H3..+..I.s.
0500 - a3 ee c2 e1 ad 06 f0 07-50 e6 e5 ca 32 33 32 63 ........P...232c
0510 - 7a 60 95 db 87 fc b6 ee-33 fe bc 29 ae ac 34 35 z`......3..)..45
0520 - e0 d5 61 fc 6b c9 10 1c-68 4c 8c 4a d3 83 91 28 ..a.k...hL.J...(
0530 - 2c 5c 41 94 4c 11 a5 1c-02 d4 39 67 7c ee db ff ,\A.L.....9g|...
0540 - 8b 20 bc 79 b5 87 68 8f-1c cf c2 23 a9 42 1e ee . .y..h....#.B..
0550 - 5d d4 03 45 17 ef 46 b0-d5 ]..E..F..
read from 0x6428fb6078f0 [0x6428fb6c93b1] (3190 bytes => 2648 (0xA58))
0000 - e6 ea 0d 7e 33 1f e4 3c-1f 82 59 af 0e 4b 5c 3f ...~3..<..Y..K\?
0010 - 6e ad 75 20 fe d3 d5 dd-ef 6f 73 6c 0c 51 cf 6c n.u .....osl.Q.l
0020 - 36 1b fc c1 3f 40 44 d5-16 4d b6 5c f3 70 36 27 6...?@D..M.\.p6'
0030 - 08 30 4b d0 1b 6b 3d 58-05 fe 9f 51 48 a8 45 73 .0K..k=X...QH.Es
0040 - d2 81 44 c8 e6 17 e7 95-ce 9f eb 00 c9 b4 4b 58 ..D...........KX
0050 - d5 57 a8 81 21 c8 ad 60-ab 66 2b 59 20 46 72 75 .W..!..`.f+Y Fru
0060 - 45 81 1c c3 85 5a a1 ae-61 d8 5d 78 35 b0 3c a2 E....Z..a.]x5.<.
0070 - 19 53 36 b0 15 75 87 04-17 a2 71 8e 62 4c 6a 8e .S6..u....q.bLj.
0080 - d1 f4 e5 42 17 ce 4c d1-40 d0 3a ab 19 f0 a0 a3 ...B..L.@.:.....
0090 - 6f 3d b5 c2 ab 7d 5f 9b-ac 65 51 ac ef c7 7c 8e o=...}_..eQ...|.
00a0 - 82 0e 62 4b 7e 2d 50 01-17 d0 a0 c9 0a 3c bd 4e ..bK~-P......<.N
00b0 - 73 f1 77 28 af dd 85 f8-e1 e1 0f 86 7c 0e 0f 3a s.w(........|..:
00c0 - 8e 46 0c f3 d0 5a f3 c9-eb c3 01 8b d2 fd 00 06 .F...Z..........
00d0 - 25 30 82 06 21 30 82 04-09 a0 03 02 01 02 02 11 %0..!0..........
00e0 - 00 d0 a9 08 25 5f 8e 50-e5 f3 39 6d 11 14 70 2a ....%_.P..9m..p*
00f0 - 37 30 0d 06 09 2a 86 48-86 f7 0d 01 01 0c 05 00 70...*.H........
0100 - 30 5f 31 0b 30 09 06 03-55 04 06 13 02 47 42 31 0_1.0...U....GB1
0110 - 18 30 16 06 03 55 04 0a-13 0f 53 65 63 74 69 67 .0...U....Sectig
0120 - 6f 20 4c 69 6d 69 74 65-64 31 36 30 34 06 03 55 o Limited1604..U
0130 - 04 03 13 2d 53 65 63 74-69 67 6f 20 50 75 62 6c ...-Sectigo Publ
0140 - 69 63 20 53 65 72 76 65-72 20 41 75 74 68 65 6e ic Server Authen
0150 - 74 69 63 61 74 69 6f 6e-20 52 6f 6f 74 20 52 34 tication Root R4
0160 - 36 30 1e 17 0d 32 35 30-39 32 34 30 30 30 30 30 60...25092400000
0170 - 30 5a 17 0d 33 35 30 39-32 33 32 33 35 39 35 39 0Z..350923235959
0180 - 5a 30 46 31 0b 30 09 06-03 55 04 06 13 02 41 54 Z0F1.0...U....AT
0190 - 31 15 30 13 06 03 55 04-0a 13 0c 5a 65 72 6f 53 1.0...U....ZeroS
01a0 - 53 4c 20 47 6d 62 48 31-20 30 1e 06 03 55 04 03 SL GmbH1 0...U..
01b0 - 13 17 5a 65 72 6f 53 53-4c 20 52 53 41 20 44 56 ..ZeroSSL RSA DV
01c0 - 20 53 53 4c 20 43 41 20-32 30 82 01 a2 30 0d 06 SSL CA 20...0..
01d0 - 09 2a 86 48 86 f7 0d 01-01 01 05 00 03 82 01 8f .*.H............
01e0 - 00 30 82 01 8a 02 82 01-81 00 a7 5d 7d d0 9b f1 .0.........]}...
01f0 - be ba 3c a5 bd 82 24 84-9e 77 65 9e d7 33 4d ef ..<...$..we..3M.
0200 - 5d 8d 37 b0 29 ce f5 55-a3 c0 cb 15 d2 a0 90 32 ].7.)..U.......2
0210 - 5b e1 b9 18 89 c2 b9 b8-33 98 e0 19 e8 71 22 20 [.......3....q"
0220 - 91 d6 a4 f4 03 22 f6 ac-74 d6 25 1d 3b be 32 73 ....."..t.%.;.2s
0230 - b8 d9 a9 ee ea 0a bb 71-ca c2 2c 41 93 d4 2e 5c .......q..,A...\
0240 - 3e 5a 96 23 bc fc 40 db-cd d6 43 70 6f c7 9b 9a >Z.#..@...Cpo...
0250 - 42 98 e7 ae b0 bb 5d b3-f5 04 fc 8a b6 e2 7c 39 B.....].......|9
0260 - 5a 97 20 64 4e 4b cb e1-7f c8 26 03 b8 46 bb 85 Z. dNK....&..F..
0270 - 72 c9 00 f3 39 49 e7 09-21 b9 46 d4 e4 37 ba 43 r...9I..!.F..7.C
0280 - 25 1c 73 41 6c 3c 41 a4-65 93 c8 3b 9d 77 40 d3 %.sAl<A.e..;.w@.
0290 - 79 dd 0d 4e 00 8f b3 5b-7c 45 93 e1 5b d1 ad ff y..N...[|E..[...
02a0 - c9 c3 c0 55 f4 a5 0e 1e-1d f3 c4 07 c7 3a 78 d9 ...U.........:x.
02b0 - 76 b1 1a f6 01 fa 75 60-4a da 91 1f b9 df 21 17 v.....u`J.....!.
02c0 - d9 25 dc d8 ac f4 7d b4-e5 51 cf 93 a3 45 0b 19 .%....}..Q...E..
02d0 - c2 62 58 dc 99 c2 3f ff-0d 36 7e 33 8c 71 b1 3d .bX...?..6~3.q.=
02e0 - 93 aa 34 38 5d fb e6 d8-45 13 ca 6a d7 0e b8 75 ..48]...E..j...u
02f0 - 3e 6f f0 90 1a 2e bb ce-b4 73 a7 9e 41 f3 65 2a >o.......s..A.e*
0300 - 57 1c 53 21 ce 49 e2 82-b4 f2 16 ad e3 2f 1f 70 W.S!.I......./.p
0310 - 5e 61 d7 ae dc 3c 08 f2-57 9f 9f f5 54 85 20 76 ^a...<..W...T. v
0320 - 05 bc fb 85 7d ea cf 7a-0c 9a d4 93 99 68 53 9e ....}..z.....hS.
0330 - 86 f2 2a 5c 75 2f 66 ff-a2 5a 1a aa 9c b5 70 17 ..*\u/f..Z....p.
0340 - 3f 42 22 d1 48 ea 6d 60-63 e3 66 d5 f4 a5 1a d3 ?B".H.m`c.f.....
0350 - 54 a4 17 78 fd ab 3d 49-34 cb 9a bf e3 45 91 a6 T..x..=I4....E..
0360 - e8 12 94 70 97 e9 a7 1e-5a 7b 02 03 01 00 01 a3 ...p....Z{......
0370 - 82 01 6f 30 82 01 6b 30-1f 06 03 55 1d 23 04 18 ..o0..k0...U.#..
0380 - 30 16 80 14 56 73 58 64-95 f9 92 1a b0 12 2a 04 0...VsXd......*.
0390 - 62 79 a1 40 15 88 21 49-30 1d 06 03 55 1d 0e 04 by.@..!I0...U...
03a0 - 16 04 14 4b be fa 76 84-23 44 04 b9 ce be 31 6f ...K..v.#D....1o
03b0 - e9 f5 32 06 ff 0c 57 30-0e 06 03 55 1d 0f 01 01 ..2...W0...U....
03c0 - ff 04 04 03 02 01 86 30-12 06 03 55 1d 13 01 01 .......0...U....
03d0 - ff 04 08 30 06 01 01 ff-02 01 00 30 13 06 03 55 ...0.......0...U
03e0 - 1d 25 04 0c 30 0a 06 08-2b 06 01 05 05 07 03 01 .%..0...+.......
03f0 - 30 13 06 03 55 1d 20 04-0c 30 0a 30 08 06 06 67 0...U. ..0.0...g
0400 - 81 0c 01 02 01 30 54 06-03 55 1d 1f 04 4d 30 4b .....0T..U...M0K
0410 - 30 49 a0 47 a0 45 86 43-68 74 74 70 3a 2f 2f 63 0I.G.E.Chttp://c
0420 - 72 6c 2e 73 65 63 74 69-67 6f 2e 63 6f 6d 2f 53 rl.sectigo.com/S
0430 - 65 63 74 69 67 6f 50 75-62 6c 69 63 53 65 72 76 ectigoPublicServ
0440 - 65 72 41 75 74 68 65 6e-74 69 63 61 74 69 6f 6e erAuthentication
0450 - 52 6f 6f 74 52 34 36 2e-63 72 6c 30 81 84 06 08 RootR46.crl0....
0460 - 2b 06 01 05 05 07 01 01-04 78 30 76 30 4f 06 08 +........x0v0O..
0470 - 2b 06 01 05 05 07 30 02-86 43 68 74 74 70 3a 2f +.....0..Chttp:/
0480 - 2f 63 72 74 2e 73 65 63-74 69 67 6f 2e 63 6f 6d /crt.sectigo.com
0490 - 2f 53 65 63 74 69 67 6f-50 75 62 6c 69 63 53 65 /SectigoPublicSe
04a0 - 72 76 65 72 41 75 74 68-65 6e 74 69 63 61 74 69 rverAuthenticati
04b0 - 6f 6e 52 6f 6f 74 52 34-36 2e 70 37 63 30 23 06 onRootR46.p7c0#.
04c0 - 08 2b 06 01 05 05 07 30-01 86 17 68 74 74 70 3a .+.....0...http:
04d0 - 2f 2f 6f 63 73 70 2e 73-65 63 74 69 67 6f 2e 63 //ocsp.sectigo.c
04e0 - 6f 6d 30 0d 06 09 2a 86-48 86 f7 0d 01 01 0c 05 om0...*.H.......
04f0 - 00 03 82 02 01 00 89 ff-7b f6 fe f7 5e c4 7b 1d ........{...^.{.
0500 - 57 25 cb f5 a0 93 40 4d-35 61 79 76 df ce ba 4d W%....@M5ayv...M
0510 - 53 3f 2e 04 69 45 6f a4-9d e6 57 5d 9c 4f d2 1c S?..iEo...W].O..
0520 - b8 1a 7b e5 a9 47 31 4e-af 7b 07 aa 8f 75 07 10 ..{..G1N.{...u..
0530 - c5 0c 69 1a 77 bb 09 19-f4 9d 66 ae ce a8 9e 31 ..i.w.....f....1
0540 - c2 73 62 5d df 0c 2d 90-fc 03 72 3e 1c ab 6f 00 .sb]..-...r>..o.
0550 - 88 cf 1f 44 b1 1a e0 7e-3b ee 24 26 94 32 d9 5f ...D...~;.$&.2._
0560 - 62 92 aa 05 46 22 3c e0-8f 00 dd 07 76 b2 c3 e6 b...F"<.....v...
0570 - 15 3a a1 5d 6d bd 65 6c-53 34 c0 e3 7b 24 0b 7b .:.]m.elS4..{$.{
0580 - 87 c1 03 39 60 f2 24 d0-d0 c9 17 0d cd 85 03 ce ...9`.$.........
0590 - 20 ec 1b ab 4f 53 f9 26-12 11 9b ec 27 7b 78 b0 ...OS.&....'{x.
05a0 - 0e 07 de 08 74 dd 11 13-35 a0 30 4d c4 cd 4b ff ....t...5.0M..K.
05b0 - ae d6 d0 1e 41 46 59 98-a4 32 2d 66 0b ca 8c 6f ....AFY..2-f...o
05c0 - 6c 84 a9 fc c1 6b f7 1a-a1 0e aa e9 02 ea d8 54 l....k.........T
05d0 - d7 a2 2c 9e 7e e3 f5 99-3e 69 76 d3 23 59 8d cc ..,.~...>iv.#Y..
05e0 - 55 28 aa 91 61 d1 2e ae-5f 2b 98 8d ad a0 29 c2 U(..a..._+....).
05f0 - 0d 68 84 71 30 ef a1 81-ad cf ad 1e 60 8b 7b 54 .h.q0.......`.{T
0600 - 92 03 e0 3a c2 8d 3c 40-59 35 a1 d9 3e 5a 83 6a ...:..<@Y5..>Z.j
0610 - 4a af 23 49 1a df 01 14-62 ed 8d e0 fb ef 84 b1 J.#I....b.......
0620 - 00 59 f9 30 66 01 56 f1-0a e0 b5 e6 0a 35 57 ef .Y.0f.V......5W.
0630 - ca 5b eb fd 03 71 ea 3b-d5 d9 50 50 ae bc c9 fb .[...q.;..PP....
0640 - 5b fb 24 de ca 8a a3 c2-09 36 2f cb cd 4a b9 23 [.$......6/..J.#
0650 - e9 44 e4 be fa 97 48 e3-45 b9 55 3b 6e f0 b4 3b .D....H.E.U;n..;
0660 - ff 5b 8b 93 17 06 fe d0-52 2b cc 37 10 ec 4e d6 .[......R+.7..N.
0670 - 93 21 93 bb 3e c4 82 46-62 eb 69 03 36 10 f0 60 .!..>..Fb.i.6..`
0680 - 6c d2 fd 95 14 84 62 2e-07 8f e3 62 71 3f de f3 l.....b....bq?..
0690 - ba 5b 86 ff 3c 93 4a 1e-73 dc 46 72 79 1c bd 9a .[..<.J.s.Fry...
06a0 - 4d b0 90 73 ef c9 a4 65-f7 85 20 88 e1 d3 67 b6 M..s...e.. ...g.
06b0 - cb d9 1e fc 5a b0 d4 56-dd 84 7b 54 da 6c 9a 16 ....Z..V..{T.l..
06c0 - 75 f4 b1 1c 86 2e 62 3f-bf 35 d2 c3 2b d3 f8 ac u.....b?.5..+...
06d0 - 65 5b 1f 05 57 ae 33 d8-f0 5d c1 dd 2f 5d 16 80 e[..W.3..]../]..
06e0 - 31 7a 26 18 2d 0c d6 f4-1a e5 f0 43 9f 87 62 9b 1z&.-......C..b.
06f0 - 37 b0 b1 28 a9 85 00 05-7d 30 82 05 79 30 82 04 7..(....}0..y0..
0700 - 61 a0 03 02 01 02 02 11-00 e3 7c a2 e9 70 1e 33 a.........|..p.3
0710 - 9c 2f 3f b0 ed 36 0f f9-0a 30 0d 06 09 2a 86 48 ./?..6...0...*.H
0720 - 86 f7 0d 01 01 0c 05 00-30 7b 31 0b 30 09 06 03 ........0{1.0...
0730 - 55 04 06 13 02 47 42 31-1b 30 19 06 03 55 04 08 U....GB1.0...U..
0740 - 0c 12 47 72 65 61 74 65-72 20 4d 61 6e 63 68 65 ..Greater Manche
0750 - 73 74 65 72 31 10 30 0e-06 03 55 04 07 0c 07 53 ster1.0...U....S
0760 - 61 6c 66 6f 72 64 31 1a-30 18 06 03 55 04 0a 0c alford1.0...U...
0770 - 11 43 6f 6d 6f 64 6f 20-43 41 20 4c 69 6d 69 74 .Comodo CA Limit
0780 - 65 64 31 21 30 1f 06 03-55 04 03 0c 18 41 41 41 ed1!0...U....AAA
0790 - 20 43 65 72 74 69 66 69-63 61 74 65 20 53 65 72 Certificate Ser
07a0 - 76 69 63 65 73 30 1e 17-0d 32 31 30 33 32 32 30 vices0...2103220
07b0 - 30 30 30 30 30 5a 17 0d-32 38 31 32 33 31 32 33 00000Z..28123123
07c0 - 35 39 35 39 5a 30 5f 31-0b 30 09 06 03 55 04 06 5959Z0_1.0...U..
07d0 - 13 02 47 42 31 18 30 16-06 03 55 04 0a 13 0f 53 ..GB1.0...U....S
07e0 - 65 63 74 69 67 6f 20 4c-69 6d 69 74 65 64 31 36 ectigo Limited16
07f0 - 30 34 06 03 55 04 03 13-2d 53 65 63 74 69 67 6f 04..U...-Sectigo
0800 - 20 50 75 62 6c 69 63 20-53 65 72 76 65 72 20 41 Public Server A
0810 - 75 74 68 65 6e 74 69 63-61 74 69 6f 6e 20 52 6f uthentication Ro
0820 - 6f 74 20 52 34 36 30 82-02 22 30 0d 06 09 2a 86 ot R460.."0...*.
0830 - 48 86 f7 0d 01 01 01 05-00 03 82 02 0f 00 30 82 H.............0.
0840 - 02 0a 02 82 02 01 00 93-be d5 36 52 75 d8 01 23 ..........6Ru..#
0850 - a0 1c 47 42 49 ee 63 b6-b7 21 fd c4 95 d5 48 2b ..GBI.c..!....H+
0860 - 26 7c 14 53 10 da 79 fd-2b b7 2d a4 d4 2c fa ea &|.S..y.+.-..,..
0870 - 32 dd 49 c2 b9 bd 0f 48-3d 7b 5a 98 54 af 9e 5d 2.I....H={Z.T..]
0880 - 31 74 4f 07 fc 50 21 dd-a4 cf 68 4f 1b 12 63 6d 1tO..P!...hO..cm
0890 - 25 99 4c 2a 99 f3 48 30-61 fa 81 7c 1e a7 08 4a %.L*..H0a..|...J
08a0 - dc 3e 2b 1c 1f 18 4c 71-aa 35 8c ad f8 6e e8 3b .>+...Lq.5...n.;
08b0 - 4a d9 e5 94 02 d6 89 84-13 aa 6d c8 4f 33 cc 50 J.........m.O3.P
08c0 - 96 37 92 33 dc 5f 88 e7-9f 54 d9 48 f0 98 43 d6 .7.3._...T.H..C.
08d0 - 66 fd 9f 17 38 43 c5 01-51 0b d7 e3 23 0f 14 5d f...8C..Q...#..]
08e0 - 5b 14 e7 4b be dd f4 c8-da 03 37 d1 d6 39 a1 21 [..K......7..9.!
08f0 - 51 30 83 b0 6d d7 30 4e-96 5b 91 f0 70 24 ab bf Q0..m.0N.[..p$..
0900 - 45 81 64 43 0d bd 21 3a-2f 3c e9 9e 0d cb 20 b5 E.dC..!:/<.... .
0910 - 42 27 cc da 6f 9b ee 64-30 90 39 cd 93 65 81 21 B'..o..d0.9..e.!
0920 - 31 b5 23 50 33 37 22 e3-38 ed f8 31 30 cc 45 fe 1.#P37".8..10.E.
0930 - 62 f9 d1 5d 32 79 42 87-df 6a cc 56 19 40 4d ce b..]2yB..j.V.@M.
0940 - aa bb f9 b5 76 49 94 f1-27 f8 91 a5 83 e5 06 b3 ....vI..'.......
0950 - 63 0e 80 dc e0 12 55 80-a6 3b 66 b4 39 87 2d c8 c.....U..;f.9.-.
0960 - f0 d0 d1 14 e9 e4 0d 4d-0e f6 5d 57 72 c5 3b 1c .......M..]Wr.;.
0970 - 47 56 9d e2 d5 fb 81 61-8c cc 4d 80 90 34 5b b7 GV.....a..M..4[.
0980 - d7 14 75 dc d8 04 48 9f-c0 c1 28 88 b4 e9 1c ca ..u...H...(.....
0990 - a7 b1 f1 56 b7 7b 49 4c-59 e5 20 15 a8 84 02 29 ...V.{ILY. ....)
09a0 - fa 38 94 69 9a 49 06 8f-cd 1f 79 14 17 12 0c 83 .8.i.I....y.....
09b0 - 7a de 1f b1 97 ee f9 97-78 28 a4 c8 44 92 e9 7d z.......x(..D..}
09c0 - 26 05 a6 58 72 9b 79 13-d8 11 5f ae c5 38 62 34 &..Xr.y..._..8b4
09d0 - 68 b2 86 30 8e f8 90 61-9e 32 6c f5 07 36 cd a2 h..0...a.2l..6..
09e0 - 4c 6e ec 8a 36 ed f2 e6-99 15 44 70 c3 7c bc 9c Ln..6.....Dp.|..
09f0 - 39 c0 b4 e1 6b f7 83 25-23 57 d9 12 80 e5 49 f0 9...k..%#W....I.
0a00 - 75 0f ef 8d eb 1c 9b 54-28 b4 21 3c fc 7c 0a ff u......T(.!<.|..
0a10 - ef 7b 6b 75 ff 8b 1d a0-19 05 ab fa f8 2b 81 42 .{ku.........+.B
0a20 - e8 38 ba bb fb aa fd 3d-e0 f3 ca df 4e 97 97 29 .8.....=....N..)
0a30 - ed f3 18 56 e9 a5 96 ac-bd c3 90 98 b2 e0 f9 a2 ...V............
0a40 - d4 a6 47 43 7c 6d cf 02-03 01 00 01 a3 82 01 12 ..GC|m..........
0a50 - 30 82 01 0e 30 1f 06 03- 0...0...
read from 0x6428fb6078f0 [0x6428fb6c9e09] (542 bytes => 542 (0x21E))
0000 - 55 1d 23 04 18 30 16 80-14 a0 11 0a 23 3e 96 f1 U.#..0......#>..
0010 - 07 ec e2 af 29 ef 82 a5-7f d0 30 a4 b4 30 1d 06 ....).....0..0..
0020 - 03 55 1d 0e 04 16 04 14-56 73 58 64 95 f9 92 1a .U......VsXd....
0030 - b0 12 2a 04 62 79 a1 40-15 88 21 49 30 0e 06 03 ..*.by.@..!I0...
0040 - 55 1d 0f 01 01 ff 04 04-03 02 01 86 30 0f 06 03 U...........0...
0050 - 55 1d 13 01 01 ff 04 05-30 03 01 01 ff 30 1d 06 U.......0....0..
0060 - 03 55 1d 25 04 16 30 14-06 08 2b 06 01 05 05 07 .U.%..0...+.....
0070 - 03 01 06 08 2b 06 01 05-05 07 03 02 30 11 06 03 ....+.......0...
0080 - 55 1d 20 04 0a 30 08 30-06 06 04 55 1d 20 00 30 U. ..0.0...U. .0
0090 - 43 06 03 55 1d 1f 04 3c-30 3a 30 38 a0 36 a0 34 C..U...<0:08.6.4
00a0 - 86 32 68 74 74 70 3a 2f-2f 63 72 6c 2e 63 6f 6d .2http://crl.com
00b0 - 6f 64 6f 63 61 2e 63 6f-6d 2f 41 41 41 43 65 72 odoca.com/AAACer
00c0 - 74 69 66 69 63 61 74 65-53 65 72 76 69 63 65 73 tificateServices
00d0 - 2e 63 72 6c 30 34 06 08-2b 06 01 05 05 07 01 01 .crl04..+.......
00e0 - 04 28 30 26 30 24 06 08-2b 06 01 05 05 07 30 01 .(0&0$..+.....0.
00f0 - 86 18 68 74 74 70 3a 2f-2f 6f 63 73 70 2e 63 6f ..http://ocsp.co
0100 - 6d 6f 64 6f 63 61 2e 63-6f 6d 30 0d 06 09 2a 86 modoca.com0...*.
0110 - 48 86 f7 0d 01 01 0c 05-00 03 82 01 01 00 6f 8b H.............o.
0120 - ed b9 98 3c 3d 60 1a d2-58 00 ba c5 25 f3 2f 88 ...<=`..X...%./.
0130 - 39 68 1e fb 52 f4 bc 8a-bf 44 4d ef f2 a5 84 1b 9h..R....DM.....
0140 - ed d5 21 80 be 78 11 07-7b b5 a4 b4 c2 32 ea bd ..!..x..{....2..
0150 - 8f 84 70 d8 cc 95 04 cf-df 3d 5a a1 a6 bf 68 ce ..p......=Z...h.
0160 - 0c a5 8f a6 2d f4 c6 c5-ee 67 5e 0f e5 08 19 6e ....-....g^....n
0170 - e9 38 74 e0 76 72 55 91-8f f7 3f 29 c1 92 32 a4 .8t.vrU...?)..2.
0180 - 5e bb d5 d4 14 30 57 fb-9d 4a 01 f7 32 16 63 c6 ^....0W..J..2.c.
0190 - 7a 6b 46 5e 97 b4 e0 58-ba e8 46 ad e7 57 77 fb zkF^...X..F..Ww.
01a0 - 65 33 16 96 b0 23 24 bc-f0 81 0d c5 57 4c 54 79 e3...#$.....WLTy
01b0 - 39 d3 eb 44 08 0f e7 ee-5f 55 fa d9 6a 15 db c3 9..D...._U..j...
01c0 - 42 0a 53 45 75 1a d4 3d-f4 d1 f9 ef 41 38 f1 ca B.SEu..=....A8..
01d0 - dd cc 51 32 2f 38 38 c1-88 65 1f ad 9c 88 32 a7 ..Q2/88..e....2.
01e0 - 9d a6 89 19 10 0e c3 48-17 34 bb d2 e9 83 17 0f .......H.4......
01f0 - 3e ba f1 cd 26 7c 8d fd-3c e8 8f 55 6f 83 5d 6f >...&|..<..Uo.]o
0200 - d6 d9 7d 56 51 0a 8b e1-50 14 ef 8c 8e 14 51 e4 ..}VQ...P.....Q.
0210 - 1b 30 68 e7 cd 77 37 85-79 d5 25 8c db 55 .0h..w7.y.%..U
<<< TLS 1.2, Handshake [length 11cf], Certificate
0b 00 11 cb 00 11 c8 00 06 1d 30 82 06 19 30 82
04 81 a0 03 02 01 02 02 11 00 cd 12 47 72 38 f5
99 fb dc c9 a2 90 88 30 37 34 30 0d 06 09 2a 86
48 86 f7 0d 01 01 0b 05 00 30 46 31 0b 30 09 06
03 55 04 06 13 02 41 54 31 15 30 13 06 03 55 04
0a 13 0c 5a 65 72 6f 53 53 4c 20 47 6d 62 48 31
20 30 1e 06 03 55 04 03 13 17 5a 65 72 6f 53 53
4c 20 52 53 41 20 44 56 20 53 53 4c 20 43 41 20
32 30 1e 17 0d 32 36 30 34 31 33 30 30 30 30 30
30 5a 17 0d 32 36 31 30 32 38 32 33 35 39 35 39
5a 30 16 31 14 30 12 06 03 55 04 03 13 0b 66 61
62 6c 61 62 34 64 2e 63 61 30 82 01 22 30 0d 06
09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f
00 30 82 01 0a 02 82 01 01 00 e6 25 ac a9 32 47
e9 06 38 da a2 f6 9c 8d dc 81 b7 6a 1e 13 1c f0
54 f6 24 4a 66 80 16 6e 8e 04 3d eb dc 99 19 a3
f6 f7 1f 8d 11 9e 65 c3 0d ff b0 96 d3 5f b7 91
11 11 ae 68 6b 81 8c c2 ab dd 06 b6 1f 1f f6 77
b1 b5 85 07 86 65 24 23 19 32 83 ff 25 8c 89 3c
f8 43 73 b9 46 c7 a9 6e 90 b0 14 f3 df 6b 64 b8
07 92 5d 0d 4a ab db 46 05 e5 99 8b 51 61 b8 55
74 f9 84 fd 97 5b e5 06 16 b8 d2 23 6b 1c 04 50
43 a8 5e 8c 85 1b 0d 92 2e 3c f7 78 8f cf f1 12
48 c4 bb ea 9d b0 29 fb d4 9a d5 fd b8 dd a6 cc
4d 31 c8 7d 4f f9 79 75 e2 bf 49 44 13 5e 45 05
12 0a a2 32 86 41 d8 69 37 2c 8b c5 52 21 cb 49
65 2d e0 b3 9b 3a 19 3d 8d 5a d6 82 3b f4 2c d9
a5 d7 7b 09 26 6a 5b d3 51 eb c2 a5 c5 ad e1 93
fa 03 58 93 6b 94 14 4c 66 1b ca 50 b2 4c 6f 5e
1e 25 e8 04 7d cc 86 f0 93 45 02 03 01 00 01 a3
82 02 b0 30 82 02 ac 30 1f 06 03 55 1d 23 04 18
30 16 80 14 4b be fa 76 84 23 44 04 b9 ce be 31
6f e9 f5 32 06 ff 0c 57 30 1d 06 03 55 1d 0e 04
16 04 14 b3 d6 dc 5a 04 28 49 c0 9b 27 9a d2 ed
f6 49 8f 8b e0 6b 02 30 0e 06 03 55 1d 0f 01 01
ff 04 04 03 02 05 a0 30 0c 06 03 55 1d 13 01 01
ff 04 02 30 00 30 13 06 03 55 1d 25 04 0c 30 0a
06 08 2b 06 01 05 05 07 03 01 30 13 06 03 55 1d
20 04 0c 30 0a 30 08 06 06 67 81 0c 01 02 01 30
6e 06 08 2b 06 01 05 05 07 01 01 04 62 30 60 30
39 06 08 2b 06 01 05 05 07 30 02 86 2d 68 74 74
70 3a 2f 2f 63 72 74 2e 73 65 63 74 69 67 6f 2e
63 6f 6d 2f 5a 65 72 6f 53 53 4c 52 53 41 44 56
53 53 4c 43 41 32 2e 63 72 74 30 23 06 08 2b 06
01 05 05 07 30 01 86 17 68 74 74 70 3a 2f 2f 6f
63 73 70 2e 73 65 63 74 69 67 6f 2e 63 6f 6d 30
27 06 03 55 1d 11 04 20 30 1e 82 0b 66 61 62 6c
61 62 34 64 2e 63 61 82 0f 77 77 77 2e 66 61 62
6c 61 62 34 64 2e 63 61 30 82 01 87 06 0a 2b 06
01 04 01 d6 79 02 04 02 04 82 01 77 04 82 01 73
01 71 00 76 00 d7 6d 7d 10 d1 a7 f5 77 c2 c7 e9
5f d7 00 bf f9 82 c9 33 5a 65 e1 d0 b3 01 73 17
c0 c8 c5 69 77 00 00 01 9d 86 db 43 3d 00 00 04
03 00 47 30 45 02 21 00 a6 e2 00 f6 54 0b 34 54
49 16 67 4e fe b2 b2 7c 68 8b 5e 4a 6a 01 62 02
fc 6e 99 1c d0 41 da e6 02 20 65 06 ca 9d 14 07
69 6f f0 41 3a e6 4c 13 19 80 0b d6 f9 8e 3c 9b
f3 2f b9 91 de ef 6b 76 24 b0 00 77 00 c8 a3 c4
7f c7 b3 ad b9 35 6b 01 3f 6a 7a 12 6d e3 3a 4e
43 a5 c6 46 f9 97 ad 39 75 99 1d cf 9a 00 00 01
9d 86 db 43 86 00 00 04 03 00 48 30 46 02 21 00
aa 19 c8 1d 5a 21 e9 7a 53 8b 02 45 c1 71 f6 45
5c 9a 02 28 a9 88 9e 06 bb e8 b1 84 6d 64 75 73
02 21 00 8c f3 0b 6f 82 d5 f1 7d 81 b4 b9 f1 38
51 6f 5c 69 dc fc b4 d1 c8 dd 0e 15 6f 8e ca 56
4c c4 4a 00 7e 00 6c fe 50 19 43 a8 5e a9 16 bc
52 d1 33 e4 dc c9 1e f1 41 1c 7d 25 84 20 d1 73
80 9e 18 18 eb 3a 00 00 01 9d 86 db 44 a6 00 08
00 00 05 00 07 04 d6 b2 04 03 00 47 30 45 02 20
2c f7 1b 0d 54 46 d5 ce 66 86 5e e8 cb e4 62 5a
98 9b bd cd ec c6 0b 09 02 9b e7 8b e7 a3 b8 94
02 21 00 94 44 7f f7 72 de 63 53 56 f7 66 e6 b8
f9 45 d6 2c cc 01 18 ad 2a 44 ea 17 e5 ef e3 84
2b 18 17 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b
05 00 03 82 01 81 00 01 70 1e 9e 19 ce 72 f3 86
20 a3 75 7e 6e df 57 f2 e5 01 82 d1 b5 d0 21 59
6c fc a1 95 8b 71 1e 7d 24 50 29 21 20 fd 30 8c
82 80 3f c8 08 ae ea 21 f8 5f e0 00 39 fa b0 2a
b8 e6 62 ec b6 8e 9a 68 e3 87 de c8 f2 4f c6 d2
00 6a 87 9a a1 48 33 0a 05 2b dc e1 49 f9 73 93
a3 ee c2 e1 ad 06 f0 07 50 e6 e5 ca 32 33 32 63
7a 60 95 db 87 fc b6 ee 33 fe bc 29 ae ac 34 35
e0 d5 61 fc 6b c9 10 1c 68 4c 8c 4a d3 83 91 28
2c 5c 41 94 4c 11 a5 1c 02 d4 39 67 7c ee db ff
8b 20 bc 79 b5 87 68 8f 1c cf c2 23 a9 42 1e ee
5d d4 03 45 17 ef 46 b0 d5 e6 ea 0d 7e 33 1f e4
3c 1f 82 59 af 0e 4b 5c 3f 6e ad 75 20 fe d3 d5
dd ef 6f 73 6c 0c 51 cf 6c 36 1b fc c1 3f 40 44
d5 16 4d b6 5c f3 70 36 27 08 30 4b d0 1b 6b 3d
58 05 fe 9f 51 48 a8 45 73 d2 81 44 c8 e6 17 e7
95 ce 9f eb 00 c9 b4 4b 58 d5 57 a8 81 21 c8 ad
60 ab 66 2b 59 20 46 72 75 45 81 1c c3 85 5a a1
ae 61 d8 5d 78 35 b0 3c a2 19 53 36 b0 15 75 87
04 17 a2 71 8e 62 4c 6a 8e d1 f4 e5 42 17 ce 4c
d1 40 d0 3a ab 19 f0 a0 a3 6f 3d b5 c2 ab 7d 5f
9b ac 65 51 ac ef c7 7c 8e 82 0e 62 4b 7e 2d 50
01 17 d0 a0 c9 0a 3c bd 4e 73 f1 77 28 af dd 85
f8 e1 e1 0f 86 7c 0e 0f 3a 8e 46 0c f3 d0 5a f3
c9 eb c3 01 8b d2 fd 00 06 25 30 82 06 21 30 82
04 09 a0 03 02 01 02 02 11 00 d0 a9 08 25 5f 8e
50 e5 f3 39 6d 11 14 70 2a 37 30 0d 06 09 2a 86
48 86 f7 0d 01 01 0c 05 00 30 5f 31 0b 30 09 06
03 55 04 06 13 02 47 42 31 18 30 16 06 03 55 04
0a 13 0f 53 65 63 74 69 67 6f 20 4c 69 6d 69 74
65 64 31 36 30 34 06 03 55 04 03 13 2d 53 65 63
74 69 67 6f 20 50 75 62 6c 69 63 20 53 65 72 76
65 72 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f
6e 20 52 6f 6f 74 20 52 34 36 30 1e 17 0d 32 35
30 39 32 34 30 30 30 30 30 30 5a 17 0d 33 35 30
39 32 33 32 33 35 39 35 39 5a 30 46 31 0b 30 09
06 03 55 04 06 13 02 41 54 31 15 30 13 06 03 55
04 0a 13 0c 5a 65 72 6f 53 53 4c 20 47 6d 62 48
31 20 30 1e 06 03 55 04 03 13 17 5a 65 72 6f 53
53 4c 20 52 53 41 20 44 56 20 53 53 4c 20 43 41
20 32 30 82 01 a2 30 0d 06 09 2a 86 48 86 f7 0d
01 01 01 05 00 03 82 01 8f 00 30 82 01 8a 02 82
01 81 00 a7 5d 7d d0 9b f1 be ba 3c a5 bd 82 24
84 9e 77 65 9e d7 33 4d ef 5d 8d 37 b0 29 ce f5
55 a3 c0 cb 15 d2 a0 90 32 5b e1 b9 18 89 c2 b9
b8 33 98 e0 19 e8 71 22 20 91 d6 a4 f4 03 22 f6
ac 74 d6 25 1d 3b be 32 73 b8 d9 a9 ee ea 0a bb
71 ca c2 2c 41 93 d4 2e 5c 3e 5a 96 23 bc fc 40
db cd d6 43 70 6f c7 9b 9a 42 98 e7 ae b0 bb 5d
b3 f5 04 fc 8a b6 e2 7c 39 5a 97 20 64 4e 4b cb
e1 7f c8 26 03 b8 46 bb 85 72 c9 00 f3 39 49 e7
09 21 b9 46 d4 e4 37 ba 43 25 1c 73 41 6c 3c 41
a4 65 93 c8 3b 9d 77 40 d3 79 dd 0d 4e 00 8f b3
5b 7c 45 93 e1 5b d1 ad ff c9 c3 c0 55 f4 a5 0e
1e 1d f3 c4 07 c7 3a 78 d9 76 b1 1a f6 01 fa 75
60 4a da 91 1f b9 df 21 17 d9 25 dc d8 ac f4 7d
b4 e5 51 cf 93 a3 45 0b 19 c2 62 58 dc 99 c2 3f
ff 0d 36 7e 33 8c 71 b1 3d 93 aa 34 38 5d fb e6
d8 45 13 ca 6a d7 0e b8 75 3e 6f f0 90 1a 2e bb
ce b4 73 a7 9e 41 f3 65 2a 57 1c 53 21 ce 49 e2
82 b4 f2 16 ad e3 2f 1f 70 5e 61 d7 ae dc 3c 08
f2 57 9f 9f f5 54 85 20 76 05 bc fb 85 7d ea cf
7a 0c 9a d4 93 99 68 53 9e 86 f2 2a 5c 75 2f 66
ff a2 5a 1a aa 9c b5 70 17 3f 42 22 d1 48 ea 6d
60 63 e3 66 d5 f4 a5 1a d3 54 a4 17 78 fd ab 3d
49 34 cb 9a bf e3 45 91 a6 e8 12 94 70 97 e9 a7
1e 5a 7b 02 03 01 00 01 a3 82 01 6f 30 82 01 6b
30 1f 06 03 55 1d 23 04 18 30 16 80 14 56 73 58
64 95 f9 92 1a b0 12 2a 04 62 79 a1 40 15 88 21
49 30 1d 06 03 55 1d 0e 04 16 04 14 4b be fa 76
84 23 44 04 b9 ce be 31 6f e9 f5 32 06 ff 0c 57
30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86
30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01
ff 02 01 00 30 13 06 03 55 1d 25 04 0c 30 0a 06
08 2b 06 01 05 05 07 03 01 30 13 06 03 55 1d 20
04 0c 30 0a 30 08 06 06 67 81 0c 01 02 01 30 54
06 03 55 1d 1f 04 4d 30 4b 30 49 a0 47 a0 45 86
43 68 74 74 70 3a 2f 2f 63 72 6c 2e 73 65 63 74
69 67 6f 2e 63 6f 6d 2f 53 65 63 74 69 67 6f 50
75 62 6c 69 63 53 65 72 76 65 72 41 75 74 68 65
6e 74 69 63 61 74 69 6f 6e 52 6f 6f 74 52 34 36
2e 63 72 6c 30 81 84 06 08 2b 06 01 05 05 07 01
01 04 78 30 76 30 4f 06 08 2b 06 01 05 05 07 30
02 86 43 68 74 74 70 3a 2f 2f 63 72 74 2e 73 65
63 74 69 67 6f 2e 63 6f 6d 2f 53 65 63 74 69 67
6f 50 75 62 6c 69 63 53 65 72 76 65 72 41 75 74
68 65 6e 74 69 63 61 74 69 6f 6e 52 6f 6f 74 52
34 36 2e 70 37 63 30 23 06 08 2b 06 01 05 05 07
30 01 86 17 68 74 74 70 3a 2f 2f 6f 63 73 70 2e
73 65 63 74 69 67 6f 2e 63 6f 6d 30 0d 06 09 2a
86 48 86 f7 0d 01 01 0c 05 00 03 82 02 01 00 89
ff 7b f6 fe f7 5e c4 7b 1d 57 25 cb f5 a0 93 40
4d 35 61 79 76 df ce ba 4d 53 3f 2e 04 69 45 6f
a4 9d e6 57 5d 9c 4f d2 1c b8 1a 7b e5 a9 47 31
4e af 7b 07 aa 8f 75 07 10 c5 0c 69 1a 77 bb 09
19 f4 9d 66 ae ce a8 9e 31 c2 73 62 5d df 0c 2d
90 fc 03 72 3e 1c ab 6f 00 88 cf 1f 44 b1 1a e0
7e 3b ee 24 26 94 32 d9 5f 62 92 aa 05 46 22 3c
e0 8f 00 dd 07 76 b2 c3 e6 15 3a a1 5d 6d bd 65
6c 53 34 c0 e3 7b 24 0b 7b 87 c1 03 39 60 f2 24
d0 d0 c9 17 0d cd 85 03 ce 20 ec 1b ab 4f 53 f9
26 12 11 9b ec 27 7b 78 b0 0e 07 de 08 74 dd 11
13 35 a0 30 4d c4 cd 4b ff ae d6 d0 1e 41 46 59
98 a4 32 2d 66 0b ca 8c 6f 6c 84 a9 fc c1 6b f7
1a a1 0e aa e9 02 ea d8 54 d7 a2 2c 9e 7e e3 f5
99 3e 69 76 d3 23 59 8d cc 55 28 aa 91 61 d1 2e
ae 5f 2b 98 8d ad a0 29 c2 0d 68 84 71 30 ef a1
81 ad cf ad 1e 60 8b 7b 54 92 03 e0 3a c2 8d 3c
40 59 35 a1 d9 3e 5a 83 6a 4a af 23 49 1a df 01
14 62 ed 8d e0 fb ef 84 b1 00 59 f9 30 66 01 56
f1 0a e0 b5 e6 0a 35 57 ef ca 5b eb fd 03 71 ea
3b d5 d9 50 50 ae bc c9 fb 5b fb 24 de ca 8a a3
c2 09 36 2f cb cd 4a b9 23 e9 44 e4 be fa 97 48
e3 45 b9 55 3b 6e f0 b4 3b ff 5b 8b 93 17 06 fe
d0 52 2b cc 37 10 ec 4e d6 93 21 93 bb 3e c4 82
46 62 eb 69 03 36 10 f0 60 6c d2 fd 95 14 84 62
2e 07 8f e3 62 71 3f de f3 ba 5b 86 ff 3c 93 4a
1e 73 dc 46 72 79 1c bd 9a 4d b0 90 73 ef c9 a4
65 f7 85 20 88 e1 d3 67 b6 cb d9 1e fc 5a b0 d4
56 dd 84 7b 54 da 6c 9a 16 75 f4 b1 1c 86 2e 62
3f bf 35 d2 c3 2b d3 f8 ac 65 5b 1f 05 57 ae 33
d8 f0 5d c1 dd 2f 5d 16 80 31 7a 26 18 2d 0c d6
f4 1a e5 f0 43 9f 87 62 9b 37 b0 b1 28 a9 85 00
05 7d 30 82 05 79 30 82 04 61 a0 03 02 01 02 02
11 00 e3 7c a2 e9 70 1e 33 9c 2f 3f b0 ed 36 0f
f9 0a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0c 05
00 30 7b 31 0b 30 09 06 03 55 04 06 13 02 47 42
31 1b 30 19 06 03 55 04 08 0c 12 47 72 65 61 74
65 72 20 4d 61 6e 63 68 65 73 74 65 72 31 10 30
0e 06 03 55 04 07 0c 07 53 61 6c 66 6f 72 64 31
1a 30 18 06 03 55 04 0a 0c 11 43 6f 6d 6f 64 6f
20 43 41 20 4c 69 6d 69 74 65 64 31 21 30 1f 06
03 55 04 03 0c 18 41 41 41 20 43 65 72 74 69 66
69 63 61 74 65 20 53 65 72 76 69 63 65 73 30 1e
17 0d 32 31 30 33 32 32 30 30 30 30 30 30 5a 17
0d 32 38 31 32 33 31 32 33 35 39 35 39 5a 30 5f
31 0b 30 09 06 03 55 04 06 13 02 47 42 31 18 30
16 06 03 55 04 0a 13 0f 53 65 63 74 69 67 6f 20
4c 69 6d 69 74 65 64 31 36 30 34 06 03 55 04 03
13 2d 53 65 63 74 69 67 6f 20 50 75 62 6c 69 63
20 53 65 72 76 65 72 20 41 75 74 68 65 6e 74 69
63 61 74 69 6f 6e 20 52 6f 6f 74 20 52 34 36 30
82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01
05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00
93 be d5 36 52 75 d8 01 23 a0 1c 47 42 49 ee 63
b6 b7 21 fd c4 95 d5 48 2b 26 7c 14 53 10 da 79
fd 2b b7 2d a4 d4 2c fa ea 32 dd 49 c2 b9 bd 0f
48 3d 7b 5a 98 54 af 9e 5d 31 74 4f 07 fc 50 21
dd a4 cf 68 4f 1b 12 63 6d 25 99 4c 2a 99 f3 48
30 61 fa 81 7c 1e a7 08 4a dc 3e 2b 1c 1f 18 4c
71 aa 35 8c ad f8 6e e8 3b 4a d9 e5 94 02 d6 89
84 13 aa 6d c8 4f 33 cc 50 96 37 92 33 dc 5f 88
e7 9f 54 d9 48 f0 98 43 d6 66 fd 9f 17 38 43 c5
01 51 0b d7 e3 23 0f 14 5d 5b 14 e7 4b be dd f4
c8 da 03 37 d1 d6 39 a1 21 51 30 83 b0 6d d7 30
4e 96 5b 91 f0 70 24 ab bf 45 81 64 43 0d bd 21
3a 2f 3c e9 9e 0d cb 20 b5 42 27 cc da 6f 9b ee
64 30 90 39 cd 93 65 81 21 31 b5 23 50 33 37 22
e3 38 ed f8 31 30 cc 45 fe 62 f9 d1 5d 32 79 42
87 df 6a cc 56 19 40 4d ce aa bb f9 b5 76 49 94
f1 27 f8 91 a5 83 e5 06 b3 63 0e 80 dc e0 12 55
80 a6 3b 66 b4 39 87 2d c8 f0 d0 d1 14 e9 e4 0d
4d 0e f6 5d 57 72 c5 3b 1c 47 56 9d e2 d5 fb 81
61 8c cc 4d 80 90 34 5b b7 d7 14 75 dc d8 04 48
9f c0 c1 28 88 b4 e9 1c ca a7 b1 f1 56 b7 7b 49
4c 59 e5 20 15 a8 84 02 29 fa 38 94 69 9a 49 06
8f cd 1f 79 14 17 12 0c 83 7a de 1f b1 97 ee f9
97 78 28 a4 c8 44 92 e9 7d 26 05 a6 58 72 9b 79
13 d8 11 5f ae c5 38 62 34 68 b2 86 30 8e f8 90
61 9e 32 6c f5 07 36 cd a2 4c 6e ec 8a 36 ed f2
e6 99 15 44 70 c3 7c bc 9c 39 c0 b4 e1 6b f7 83
25 23 57 d9 12 80 e5 49 f0 75 0f ef 8d eb 1c 9b
54 28 b4 21 3c fc 7c 0a ff ef 7b 6b 75 ff 8b 1d
a0 19 05 ab fa f8 2b 81 42 e8 38 ba bb fb aa fd
3d e0 f3 ca df 4e 97 97 29 ed f3 18 56 e9 a5 96
ac bd c3 90 98 b2 e0 f9 a2 d4 a6 47 43 7c 6d cf
02 03 01 00 01 a3 82 01 12 30 82 01 0e 30 1f 06
03 55 1d 23 04 18 30 16 80 14 a0 11 0a 23 3e 96
f1 07 ec e2 af 29 ef 82 a5 7f d0 30 a4 b4 30 1d
06 03 55 1d 0e 04 16 04 14 56 73 58 64 95 f9 92
1a b0 12 2a 04 62 79 a1 40 15 88 21 49 30 0e 06
03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 0f 06
03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 1d
06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05
07 03 01 06 08 2b 06 01 05 05 07 03 02 30 11 06
03 55 1d 20 04 0a 30 08 30 06 06 04 55 1d 20 00
30 43 06 03 55 1d 1f 04 3c 30 3a 30 38 a0 36 a0
34 86 32 68 74 74 70 3a 2f 2f 63 72 6c 2e 63 6f
6d 6f 64 6f 63 61 2e 63 6f 6d 2f 41 41 41 43 65
72 74 69 66 69 63 61 74 65 53 65 72 76 69 63 65
73 2e 63 72 6c 30 34 06 08 2b 06 01 05 05 07 01
01 04 28 30 26 30 24 06 08 2b 06 01 05 05 07 30
01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 63
6f 6d 6f 64 6f 63 61 2e 63 6f 6d 30 0d 06 09 2a
86 48 86 f7 0d 01 01 0c 05 00 03 82 01 01 00 6f
8b ed b9 98 3c 3d 60 1a d2 58 00 ba c5 25 f3 2f
88 39 68 1e fb 52 f4 bc 8a bf 44 4d ef f2 a5 84
1b ed d5 21 80 be 78 11 07 7b b5 a4 b4 c2 32 ea
bd 8f 84 70 d8 cc 95 04 cf df 3d 5a a1 a6 bf 68
ce 0c a5 8f a6 2d f4 c6 c5 ee 67 5e 0f e5 08 19
6e e9 38 74 e0 76 72 55 91 8f f7 3f 29 c1 92 32
a4 5e bb d5 d4 14 30 57 fb 9d 4a 01 f7 32 16 63
c6 7a 6b 46 5e 97 b4 e0 58 ba e8 46 ad e7 57 77
fb 65 33 16 96 b0 23 24 bc f0 81 0d c5 57 4c 54
79 39 d3 eb 44 08 0f e7 ee 5f 55 fa d9 6a 15 db
c3 42 0a 53 45 75 1a d4 3d f4 d1 f9 ef 41 38 f1
ca dd cc 51 32 2f 38 38 c1 88 65 1f ad 9c 88 32
a7 9d a6 89 19 10 0e c3 48 17 34 bb d2 e9 83 17
0f 3e ba f1 cd 26 7c 8d fd 3c e8 8f 55 6f 83 5d
6f d6 d9 7d 56 51 0a 8b e1 50 14 ef 8c 8e 14 51
e4 1b 30 68 e7 cd 77 37 85 79 d5 25 8c db 55
depth=2 C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
verify return:1
depth=1 C = AT, O = ZeroSSL GmbH, CN = ZeroSSL RSA DV SSL CA 2
verify return:1
depth=0 CN = fablab4d.ca
verify return:1
read from 0x6428fb6078f0 [0x6428fb6c8e53] (5 bytes => 5 (0x5))
0000 - 16 03 03 01 2c ....,
<<< TLS 1.2, RecordHeader [length 0005]
16 03 03 01 2c
read from 0x6428fb6078f0 [0x6428fb6c8e58] (300 bytes => 300 (0x12C))
0000 - 0c 00 01 28 03 00 1d 20-23 7e 29 e7 24 d0 e0 b1 ...(... #~).$...
0010 - f7 19 04 f3 2c 29 62 4b-34 bf b8 ac 64 af ce f5 ....,)bK4...d...
0020 - 12 86 8b 6c dd 8c c6 01-08 04 01 00 2b fe d5 d9 ...l........+...
0030 - bf b5 28 ed b9 8e 57 c4-9b 45 f1 19 91 83 23 14 ..(...W..E....#.
0040 - 8d e6 4c 18 a4 52 34 c4-0e a8 9e a3 49 b6 2d 92 ..L..R4.....I.-.
0050 - a5 fe c0 cb 36 e8 ad b2-31 e5 81 47 35 80 94 34 ....6...1..G5..4
0060 - 50 62 b6 83 ce 13 ed 5c-2d a3 b8 1a 21 b6 92 6c Pb.....\-...!..l
0070 - 48 58 5b 9a e7 fe 39 18-27 e4 2f d2 ca b3 91 ef HX[...9.'./.....
0080 - 16 34 e1 e5 f5 8c 8b a1-a1 83 3e ed e3 87 ff 19 .4........>.....
0090 - d4 71 0b 74 85 ad 61 b6-be f2 6d 95 04 ce 20 ee .q.t..a...m... .
00a0 - 52 22 08 28 9c 0f 27 dd-20 e5 23 b4 a1 2d 69 e7 R".(..'. .#..-i.
00b0 - e4 14 da 7e 24 35 e5 a3-40 03 af 74 a9 10 b6 56 ...~$5..@..t...V
00c0 - c5 35 90 b4 e1 8b 00 69-56 ab 9d 6b 26 4e fb fa .5.....iV..k&N..
00d0 - 28 8d fb 7c ed 98 2c 92-19 a7 fd 5b 18 b5 60 4a (..|..,....[..`J
00e0 - c3 c4 3d 5c 78 c1 f2 dc-3c 56 c8 73 48 41 9b 75 ..=\x...<V.sHA.u
00f0 - e4 08 42 ec 13 53 d1 e8-cb fc bc 0b da 67 10 8b ..B..S.......g..
0100 - d2 59 bc a5 10 47 f1 b3-e1 21 1e e1 6b 79 e5 b6 .Y...G...!..ky..
0110 - b3 27 1c 0f f4 89 65 31-d3 8c 59 20 68 3e f0 4e .'....e1..Y h>.N
0120 - 0a ef fe 1a 01 19 78 2a-6c 8a 5a d9 ......x*l.Z.
<<< TLS 1.2, Handshake [length 012c], ServerKeyExchange
0c 00 01 28 03 00 1d 20 23 7e 29 e7 24 d0 e0 b1
f7 19 04 f3 2c 29 62 4b 34 bf b8 ac 64 af ce f5
12 86 8b 6c dd 8c c6 01 08 04 01 00 2b fe d5 d9
bf b5 28 ed b9 8e 57 c4 9b 45 f1 19 91 83 23 14
8d e6 4c 18 a4 52 34 c4 0e a8 9e a3 49 b6 2d 92
a5 fe c0 cb 36 e8 ad b2 31 e5 81 47 35 80 94 34
50 62 b6 83 ce 13 ed 5c 2d a3 b8 1a 21 b6 92 6c
48 58 5b 9a e7 fe 39 18 27 e4 2f d2 ca b3 91 ef
16 34 e1 e5 f5 8c 8b a1 a1 83 3e ed e3 87 ff 19
d4 71 0b 74 85 ad 61 b6 be f2 6d 95 04 ce 20 ee
52 22 08 28 9c 0f 27 dd 20 e5 23 b4 a1 2d 69 e7
e4 14 da 7e 24 35 e5 a3 40 03 af 74 a9 10 b6 56
c5 35 90 b4 e1 8b 00 69 56 ab 9d 6b 26 4e fb fa
28 8d fb 7c ed 98 2c 92 19 a7 fd 5b 18 b5 60 4a
c3 c4 3d 5c 78 c1 f2 dc 3c 56 c8 73 48 41 9b 75
e4 08 42 ec 13 53 d1 e8 cb fc bc 0b da 67 10 8b
d2 59 bc a5 10 47 f1 b3 e1 21 1e e1 6b 79 e5 b6
b3 27 1c 0f f4 89 65 31 d3 8c 59 20 68 3e f0 4e
0a ef fe 1a 01 19 78 2a 6c 8a 5a d9
read from 0x6428fb6078f0 [0x6428fb6c8e53] (5 bytes => 5 (0x5))
0000 - 16 03 03 00 04 .....
<<< TLS 1.2, RecordHeader [length 0005]
16 03 03 00 04
read from 0x6428fb6078f0 [0x6428fb6c8e58] (4 bytes => 4 (0x4))
0000 - 0e 00 00 00 ....
<<< TLS 1.2, Handshake [length 0004], ServerHelloDone
0e 00 00 00
>>> TLS 1.2, RecordHeader [length 0005]
16 03 03 00 25
>>> TLS 1.2, Handshake [length 0025], ClientKeyExchange
10 00 00 21 20 8c 94 ee 7c 7f 30 82 de 56 27 0f
50 e6 35 c6 0f 8d 16 a9 db 17 09 f6 00 30 0e 35
27 31 bd 8d 07
>>> TLS 1.2, RecordHeader [length 0005]
14 03 03 00 01
>>> TLS 1.2, ChangeCipherSpec [length 0001]
01
>>> TLS 1.2, RecordHeader [length 0005]
16 03 03 00 28
>>> TLS 1.2, Handshake [length 0010], Finished
14 00 00 0c 83 2e 97 0c c7 b0 3e 64 37 dd 02 b8
write to 0x6428fb6078f0 [0x6428fb6d2080] (93 bytes => 93 (0x5D))
0000 - 16 03 03 00 25 10 00 00-21 20 8c 94 ee 7c 7f 30 ....%...! ...|.0
0010 - 82 de 56 27 0f 50 e6 35-c6 0f 8d 16 a9 db 17 09 ..V'.P.5........
0020 - f6 00 30 0e 35 27 31 bd-8d 07 14 03 03 00 01 01 ..0.5'1.........
0030 - 16 03 03 00 28 25 ad 3b-7e c2 d3 15 e3 c2 9b 92 ....(%.;~.......
0040 - e5 41 fd 87 65 4e de de-57 73 d4 de 8a 57 f4 6b .A..eN..Ws...W.k
0050 - a8 e3 e6 3a f9 6a b1 ae-0a 0b 5b 5a f1 ...:.j....[Z.
read from 0x6428fb6078f0 [0x6428fb6c8e53] (5 bytes => 5 (0x5))
0000 - 16 03 03 00 da .....
<<< TLS 1.2, RecordHeader [length 0005]
16 03 03 00 da
read from 0x6428fb6078f0 [0x6428fb6c8e58] (218 bytes => 218 (0xDA))
0000 - 04 00 00 d6 00 00 01 2c-00 d0 d3 2d 19 ef 1d ea .......,...-....
0010 - 22 e7 c6 75 06 35 f3 96-12 f3 66 fe 5b 48 ae 36 "..u.5....f.[H.6
0020 - 72 ee ce 99 b4 75 d8 ef-36 44 a1 f3 39 69 d3 6a r....u..6D..9i.j
0030 - 57 25 55 61 af a1 1c 81-f9 8c 86 e2 13 bc 74 ef W%Ua..........t.
0040 - 11 2f 5f 18 67 a4 69 a8-97 1a ff 3a c0 0c eb 14 ./_.g.i....:....
0050 - 3d ba 26 e7 b1 e3 6e ae-2a 56 f1 a6 15 5c 62 31 =.&...n.*V...\b1
0060 - bd 18 23 b4 a1 fd 1c 66-18 9e 5c 61 51 3e 48 c3 ..#....f..\aQ>H.
0070 - cc 9d 1f 9b 4d fe 0c a1-04 8a a2 ef 08 83 4c f5 ....M.........L.
0080 - 70 a5 8c a4 4c 77 da 6f-a2 18 5e 3f d4 2b da 69 p...Lw.o..^?.+.i
0090 - ff 30 d6 a6 53 29 c0 5a-ed 21 a6 fa 9e e6 97 f9 .0..S).Z.!......
00a0 - 24 9c 53 bc 82 64 af e6-04 2a 40 a9 ba 57 fa 05 $.S..d...*@..W..
00b0 - 93 eb 90 64 fd fe 11 0d-05 22 56 45 9f 49 f2 9d ...d....."VE.I..
00c0 - 74 a3 6f dd e4 56 54 b7-58 74 e0 6e be c3 2b b7 t.o..VT.Xt.n..+.
00d0 - ad d6 a2 a1 5d a6 16 b1-a9 63 ....]....c
<<< TLS 1.2, Handshake [length 00da], NewSessionTicket
04 00 00 d6 00 00 01 2c 00 d0 d3 2d 19 ef 1d ea
22 e7 c6 75 06 35 f3 96 12 f3 66 fe 5b 48 ae 36
72 ee ce 99 b4 75 d8 ef 36 44 a1 f3 39 69 d3 6a
57 25 55 61 af a1 1c 81 f9 8c 86 e2 13 bc 74 ef
11 2f 5f 18 67 a4 69 a8 97 1a ff 3a c0 0c eb 14
3d ba 26 e7 b1 e3 6e ae 2a 56 f1 a6 15 5c 62 31
bd 18 23 b4 a1 fd 1c 66 18 9e 5c 61 51 3e 48 c3
cc 9d 1f 9b 4d fe 0c a1 04 8a a2 ef 08 83 4c f5
70 a5 8c a4 4c 77 da 6f a2 18 5e 3f d4 2b da 69
ff 30 d6 a6 53 29 c0 5a ed 21 a6 fa 9e e6 97 f9
24 9c 53 bc 82 64 af e6 04 2a 40 a9 ba 57 fa 05
93 eb 90 64 fd fe 11 0d 05 22 56 45 9f 49 f2 9d
74 a3 6f dd e4 56 54 b7 58 74 e0 6e be c3 2b b7
ad d6 a2 a1 5d a6 16 b1 a9 63
read from 0x6428fb6078f0 [0x6428fb6c8e53] (5 bytes => 5 (0x5))
0000 - 14 03 03 00 01 .....
<<< TLS 1.2, RecordHeader [length 0005]
14 03 03 00 01
read from 0x6428fb6078f0 [0x6428fb6c8e58] (1 bytes => 1 (0x1))
0000 - 01 .
read from 0x6428fb6078f0 [0x6428fb6c8e53] (5 bytes => 5 (0x5))
0000 - 16 03 03 00 28 ....(
<<< TLS 1.2, RecordHeader [length 0005]
16 03 03 00 28
read from 0x6428fb6078f0 [0x6428fb6c8e58] (40 bytes => 40 (0x28))
0000 - 28 d9 60 28 6a e9 f3 04-49 fe 0e c1 88 69 b6 25 (.`(j...I....i.%
0010 - 44 91 12 fd 26 51 9b 5e-7f e2 ab a3 7b 0e 6f c9 D...&Q.^....{.o.
0020 - 5c a2 78 ff 5c 4d 32 d1- \.x.\M2.
<<< TLS 1.2, Handshake [length 0010], Finished
14 00 00 0c 66 1c 6f 06 fb e9 e6 d8 d7 88 a9 83
---
Certificate chain
0 s:CN = fablab4d.ca
i:C = AT, O = ZeroSSL GmbH, CN = ZeroSSL RSA DV SSL CA 2
a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
v:NotBefore: Apr 13 00:00:00 2026 GMT; NotAfter: Oct 28 23:59:59 2026 GMT
1 s:C = AT, O = ZeroSSL GmbH, CN = ZeroSSL RSA DV SSL CA 2
i:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
a:PKEY: rsaEncryption, 3072 (bit); sigalg: RSA-SHA384
v:NotBefore: Sep 24 00:00:00 2025 GMT; NotAfter: Sep 23 23:59:59 2035 GMT
2 s:C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
i:C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA384
v:NotBefore: Mar 22 00:00:00 2021 GMT; NotAfter: Dec 31 23:59:59 2028 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIGGTCCBIGgAwIBAgIRAM0SR3I49Zn73MmikIgwNzQwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCQVQxFTATBgNVBAoTDFplcm9TU0wgR21iSDEgMB4GA1UEAxMX
WmVyb1NTTCBSU0EgRFYgU1NMIENBIDIwHhcNMjYwNDEzMDAwMDAwWhcNMjYxMDI4
MjM1OTU5WjAWMRQwEgYDVQQDEwtmYWJsYWI0ZC5jYTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAOYlrKkyR+kGONqi9pyN3IG3ah4THPBU9iRKZoAWbo4E
PevcmRmj9vcfjRGeZcMN/7CW01+3kRERrmhrgYzCq90Gth8f9nextYUHhmUkIxky
g/8ljIk8+ENzuUbHqW6QsBTz32tkuAeSXQ1Kq9tGBeWZi1FhuFV0+YT9l1vlBha4
0iNrHARQQ6hejIUbDZIuPPd4j8/xEkjEu+qdsCn71JrV/bjdpsxNMch9T/l5deK/
SUQTXkUFEgqiMoZB2Gk3LIvFUiHLSWUt4LObOhk9jVrWgjv0LNml13sJJmpb01Hr
wqXFreGT+gNYk2uUFExmG8pQskxvXh4l6AR9zIbwk0UCAwEAAaOCArAwggKsMB8G
A1UdIwQYMBaAFEu++naEI0QEuc6+MW/p9TIG/wxXMB0GA1UdDgQWBBSz1txaBChJ
wJsnmtLt9kmPi+BrAjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADATBgNV
HSUEDDAKBggrBgEFBQcDATATBgNVHSAEDDAKMAgGBmeBDAECATBuBggrBgEFBQcB
AQRiMGAwOQYIKwYBBQUHMAKGLWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vWmVyb1NT
TFJTQURWU1NMQ0EyLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGln
by5jb20wJwYDVR0RBCAwHoILZmFibGFiNGQuY2GCD3d3dy5mYWJsYWI0ZC5jYTCC
AYcGCisGAQQB1nkCBAIEggF3BIIBcwFxAHYA1219ENGn9XfCx+lf1wC/+YLJM1pl
4dCzAXMXwMjFaXcAAAGdhttDPQAABAMARzBFAiEApuIA9lQLNFRJFmdO/rKyfGiL
XkpqAWIC/G6ZHNBB2uYCIGUGyp0UB2lv8EE65kwTGYAL1vmOPJvzL7mR3u9rdiSw
AHcAyKPEf8ezrbk1awE/anoSbeM6TkOlxkb5l605dZkdz5oAAAGdhttDhgAABAMA
SDBGAiEAqhnIHVoh6XpTiwJFwXH2RVyaAiipiJ4Gu+ixhG1kdXMCIQCM8wtvgtXx
fYG0ufE4UW9cadz8tNHI3Q4Vb47KVkzESgB+AGz+UBlDqF6pFrxS0TPk3Mke8UEc
fSWEINFzgJ4YGOs6AAABnYbbRKYACAAABQAHBNayBAMARzBFAiAs9xsNVEbVzmaG
XujL5GJamJu9zezGCwkCm+eL56O4lAIhAJREf/dy3mNTVvdm5rj5RdYszAEYrSpE
6hfl7+OEKxgXMA0GCSqGSIb3DQEBCwUAA4IBgQABcB6eGc5y84Ygo3V+bt9X8uUB
gtG10CFZbPyhlYtxHn0kUCkhIP0wjIKAP8gIruoh+F/gADn6sCq45mLsto6aaOOH
3sjyT8bSAGqHmqFIMwoFK9zhSflzk6PuwuGtBvAHUOblyjIzMmN6YJXbh/y27jP+
vCmurDQ14NVh/GvJEBxoTIxK04ORKCxcQZRMEaUcAtQ5Z3zu2/+LILx5tYdojxzP
wiOpQh7uXdQDRRfvRrDV5uoNfjMf5DwfglmvDktcP26tdSD+09Xd729zbAxRz2w2
G/zBP0BE1RZNtlzzcDYnCDBL0BtrPVgF/p9RSKhFc9KBRMjmF+eVzp/rAMm0S1jV
V6iBIcitYKtmK1kgRnJ1RYEcw4Vaoa5h2F14NbA8ohlTNrAVdYcEF6JxjmJMao7R
9OVCF85M0UDQOqsZ8KCjbz21wqt9X5usZVGs78d8joIOYkt+LVABF9CgyQo8vU5z
8Xcor92F+OHhD4Z8Dg86jkYM89Ba88nrwwGL0v0=
-----END CERTIFICATE-----
subject=CN = fablab4d.ca
issuer=C = AT, O = ZeroSSL GmbH, CN = ZeroSSL RSA DV SSL CA 2
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5226 bytes and written 406 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 8A519446F68E770FC88DD499FD35243816F18A2BED953EDBFF34BCDE38815692
Session-ID-ctx:
Master-Key: 74A9D5F7AE2F6118744F284BCBEB13C3A05F4FC7990D85513DEE88067A5E7F2BAE28F796849A71D6A868E4E18B5CD0E9
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - d3 2d 19 ef 1d ea 22 e7-c6 75 06 35 f3 96 12 f3 .-...."..u.5....
0010 - 66 fe 5b 48 ae 36 72 ee-ce 99 b4 75 d8 ef 36 44 f.[H.6r....u..6D
0020 - a1 f3 39 69 d3 6a 57 25-55 61 af a1 1c 81 f9 8c ..9i.jW%Ua......
0030 - 86 e2 13 bc 74 ef 11 2f-5f 18 67 a4 69 a8 97 1a ....t../_.g.i...
0040 - ff 3a c0 0c eb 14 3d ba-26 e7 b1 e3 6e ae 2a 56 .:....=.&...n.*V
0050 - f1 a6 15 5c 62 31 bd 18-23 b4 a1 fd 1c 66 18 9e ...\b1..#....f..
0060 - 5c 61 51 3e 48 c3 cc 9d-1f 9b 4d fe 0c a1 04 8a \aQ>H.....M.....
0070 - a2 ef 08 83 4c f5 70 a5-8c a4 4c 77 da 6f a2 18 ....L.p...Lw.o..
0080 - 5e 3f d4 2b da 69 ff 30-d6 a6 53 29 c0 5a ed 21 ^?.+.i.0..S).Z.!
0090 - a6 fa 9e e6 97 f9 24 9c-53 bc 82 64 af e6 04 2a ......$.S..d...*
00a0 - 40 a9 ba 57 fa 05 93 eb-90 64 fd fe 11 0d 05 22 @..W.....d....."
00b0 - 56 45 9f 49 f2 9d 74 a3-6f dd e4 56 54 b7 58 74 VE.I..t.o..VT.Xt
00c0 - e0 6e be c3 2b b7 ad d6-a2 a1 5d a6 16 b1 a9 63 .n..+.....]....c
Start Time: 1782437943
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: yes
---
read from 0x6428fb6078f0 [0x6428fb6c8e53] (5 bytes => 5 (0x5))
0000 - 15 03 03 00 1a .....
<<< TLS 1.2, RecordHeader [length 0005]
15 03 03 00 1a
read from 0x6428fb6078f0 [0x6428fb6c8e58] (26 bytes => 26 (0x1A))
0000 - 28 d9 60 28 6a e9 f3 05-c5 8f 51 73 53 17 d4 2d (.`(j.....QsS..-
0010 - 9b 07 f8 71 94 4d c3 bf-b1 85 ...q.M....
<<< TLS 1.2, Alert [length 0002], warning close_notify
01 00
closed
>>> TLS 1.2, RecordHeader [length 0005]
15 03 03 00 1a
write to 0x6428fb6078f0 [0x6428fb6ccfa3] (31 bytes => 31 (0x1F))
0000 - 15 03 03 00 1a 25 ad 3b-7e c2 d3 15 e4 63 cf 87 .....%.;~....c..
0010 - e6 f0 8c 79 60 a5 3f 4e-71 dc f3 2c 98 0f 31 ...y`.?Nq..,..1
>>> TLS 1.2, Alert [length 0002], warning close_notify
01 00
read from 0x6428fb6078f0 [0x6428fb5c3320] (8192 bytes => 0)
Port Scan & Firewall¶
Your VM will be subjected to a port scan. Determine what it reveals about your exposed services, then configure the firewall to reduce what’s reachable from outside.
Step 1 - figure out where I am, what to protect. What ports are open on my VM ?¶
Looks who’s around
sudo apt install nmap
nmap -sn 192.168.80.0/24
Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-06-25 15:56 UTC
Nmap scan report for unifi.localdomain (192.168.80.1)
Host is up (0.0017s latency).
Nmap scan report for ff-cs-sonam-peldon (192.168.80.8)
Host is up (0.0012s latency).
Nmap scan report for ff-cs-test-charlie (192.168.80.12)
Host is up (0.0016s latency).
Nmap scan report for 192.168.80.13
Host is up (0.00078s latency).
Nmap scan report for 192.168.80.15
Host is up (0.00064s latency).
Nmap scan report for 192.168.80.16
Host is up (0.00059s latency).
Nmap scan report for 192.168.80.19
Host is up (0.0012s latency).
Nmap scan report for 192.168.80.23
Host is up (0.00091s latency).
Nmap scan report for 192.168.80.31
Host is up (0.0016s latency).
Nmap scan report for 192.168.80.36
Host is up (0.0021s latency).
Nmap scan report for 192.168.80.39
Host is up (0.0015s latency).
Nmap scan report for 192.168.80.57
Host is up (0.0019s latency).
Nmap scan report for ff-cs-rinchen-khandu (192.168.80.69)
Host is up (0.0020s latency).
Nmap scan report for 192.168.80.70
Host is up (0.0014s latency).
Nmap scan report for ff-cs-vincent (192.168.80.77)
Host is up (0.0012s latency).
Nmap scan report for ff-cs-ralph (192.168.80.82)
Host is up (0.00072s latency).
Nmap scan report for 192.168.80.85
Host is up (0.00083s latency).
Nmap scan report for 192.168.80.91
Host is up (0.0018s latency).
Nmap scan report for 192.168.80.102
Host is up (0.0017s latency).
Nmap scan report for 192.168.80.104
Host is up (0.0017s latency).
Nmap scan report for 192.168.80.118
Host is up (0.00081s latency).
Nmap scan report for 192.168.80.122
Host is up (0.00062s latency).
Nmap scan report for 192.168.80.124
Host is up (0.0016s latency).
Nmap scan report for 192.168.80.129
Host is up (0.0061s latency).
Nmap scan report for 192.168.80.131
Host is up (0.0026s latency).
Nmap scan report for 192.168.80.138
Host is up (0.0060s latency).
Nmap scan report for ff-cs-hamed (192.168.80.145)
Host is up (0.0058s latency).
Nmap scan report for 192.168.80.147
Host is up (0.0057s latency).
Nmap scan report for 192.168.80.148
Host is up (0.0019s latency).
Nmap scan report for 192.168.80.152
Host is up (0.0057s latency).
Nmap scan report for ff-c-ralph-two (192.168.80.171)
Host is up (0.0018s latency).
Nmap scan report for 192.168.80.174
Host is up (0.0050s latency).
Nmap scan report for 192.168.80.180
Host is up (0.0025s latency).
Nmap scan report for 192.168.80.183
Host is up (0.0019s latency).
Nmap scan report for 192.168.80.187
Host is up (0.0015s latency).
Nmap scan report for 192.168.80.188
Host is up (0.0020s latency).
Nmap scan report for 192.168.80.203
Host is up (0.0010s latency).
Nmap scan report for 192.168.80.204
Host is up (0.0010s latency).
Nmap scan report for 192.168.80.207
Host is up (0.00094s latency).
Nmap scan report for ff-test-temp-v1 (192.168.80.209)
Host is up (0.0013s latency).
Nmap scan report for 192.168.80.212
Host is up (0.0011s latency).
Nmap scan report for 192.168.80.217
Host is up (0.00071s latency).
Nmap scan report for 192.168.80.219
Host is up (0.0012s latency).
Nmap scan report for ff-cs-philippelibioulle (192.168.80.220)
Host is up (0.000064s latency).
Nmap scan report for 192.168.80.228
Host is up (0.0044s latency).
Nmap scan report for 192.168.80.238
Host is up (0.00080s latency).
Nmap scan report for 192.168.80.250
Host is up (0.00098s latency).
Nmap scan report for 192.168.80.251
Host is up (0.0026s latency).
Nmap scan report for 192.168.80.254
Host is up (0.0016s latency).
Nmap done: 256 IP addresses (49 hosts up) scanned in 1.93 seconds
What are my open ports ?
sudo ss -tulnp
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
udp UNCONN 0 0 0.0.0.0:53233 0.0.0.0:* users:(("avahi-daemon",pid=843,fd=14))
udp UNCONN 0 0 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=671,fd=16))
udp UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=671,fd=14))
udp UNCONN 0 0 192.168.80.220%eth0:68 0.0.0.0:* users:(("systemd-network",pid=789,fd=21))
udp UNCONN 0 0 0.0.0.0:5353 0.0.0.0:* users:(("avahi-daemon",pid=843,fd=12))
udp UNCONN 0 0 [::]:5353 [::]:* users:(("avahi-daemon",pid=843,fd=13))
udp UNCONN 0 0 [::]:46738 [::]:* users:(("avahi-daemon",pid=843,fd=15))
tcp LISTEN 0 4096 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=2430,fd=3),("systemd",pid=1,fd=283))
tcp LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=671,fd=15))
tcp LISTEN 0 4096 127.0.0.1:631 0.0.0.0:* users:(("cupsd",pid=14248,fd=7))
tcp LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=671,fd=17))
tcp LISTEN 0 100 0.0.0.0:6081 0.0.0.0:* users:(("python3",pid=1177,fd=3))
tcp LISTEN 0 5 0.0.0.0:5901 0.0.0.0:* users:(("Xtigervnc",pid=2619,fd=9))
tcp LISTEN 0 4096 [::]:22 [::]:* users:(("sshd",pid=2430,fd=4),("systemd",pid=1,fd=284))
tcp LISTEN 0 5 [::]:5901 [::]:* users:(("Xtigervnc",pid=2619,fd=10))
tcp LISTEN 0 4096 [::1]:631 [::]:* users:(("cupsd",pid=14248,fd=6))
Nicely formatted by Claude AI
Scan my VM to see what’s visible externally:
sudo nmap -sS -sV -p- localhost
Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-06-25 21:55 UTC
Nmap scan report for localhost (127.0.0.1)
Host is up (0.0000010s latency).
Other addresses for localhost (not scanned): ::1
Not shown: 65531 closed tcp ports (reset)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 9.6p1 Ubuntu 3ubuntu13.16 (Ubuntu Linux; protocol 2.0)
631/tcp open ipp CUPS 2.4
5901/tcp open vnc VNC (protocol 3.8)
6081/tcp open ssl/geneve?
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Step 2 - Analyze¶
TCP 22 : I need this to connect
TCP 5901: sends traffic unencrypted and is exposed to the whole network. Anyone on the subnet can try to connect or sniff the traffic.
TCP 6081: Websockify ?? I don’t know what it is but that guy is way too exposed
TCP 631: no need for printing, but it is harmfull, localhost only
DNS and DHCP things… looks ok
Step 3 - Mitigate¶
Block any incoming VNC calls
sudo ufw deny 5901
sudo ufw deny 6081
Note: do not forget to enable the firewall (sudo ufw enable) if it wasn’t (sudo ufw status)
Another option, if we need VNC, would be to tunnel it, as Neil mentionned. Instead of connecting directly to VNC, I could:
Make SSH create a local tunnel on my client machine
ssh -L 5901:localhost:5901 ubuntu@192.168.80.220
My VNC client connects to localhost. VNC client thinks it’s talking locally, but SSH is secretly carrying the traffic encrypted to the VM.
vnc://localhost:5901
Hello gateway !!
Step 4 - Monitor¶
Install WireShark (on the VM)
sudo apt install wireshark
Collect data
sudo tcpdump -i eth0 -w capture.pcap
Let’s have a look on the data
You have a nice printer at the office :-))
And a new MacBook Pro, as I can see