Hello, I'm Angie!
$ grep -A20 ^http /etc/angie/angie.conf | sed -e 's/email=.*$/email=taro.yamada@example.com/'
http {
resolver 172.31.0.2;
acme_client myacme0 https://acme-v02.api.letsencrypt.org/directory
key_type=ecdsa
key_bits=384
email=taro.yamada@example.com
renew_before_expiry=10d
challenge=http;
server {
listen 80;
listen 443 ssl;
server_name angie.tcpreplay.net;
acme myacme0;
ssl_certificate $acme_cert_myacme0;
ssl_certificate_key $acme_cert_key_myacme0;
location / {
root /var/angie/angie.tcpreplay.net;
index index.html index.htm;
}
$ sudo openssl x509 -noout -text -in /var/lib/angie/acme/myacme0/certificate.pem
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5b:97:ce:9b:28:b2:ed:d4:84:e3:42:9e:10:d0:52:6e:16
Signature Algorithm: ecdsa-with-SHA384
Issuer: C = US, O = Let's Encrypt, CN = E5
Validity
Not Before: May 22 15:44:00 2025 GMT
Not After : Aug 20 15:43:59 2025 GMT
Subject: CN = angie.tcpreplay.net
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (384 bit)
pub:
04:77:8b:ba:90:b9:c8:bd:a8:50:0e:c4:b2:f2:f9:
0b:a7:29:54:0f:ae:83:dd:de:df:a7:18:12:5b:88:
42:46:8b:c1:d0:e8:f4:07:e4:aa:55:d1:f0:3e:b2:
21:0c:95:4b:3a:8b:85:07:0a:cc:ba:d9:40:f1:ca:
54:6f:8d:42:8b:a4:43:a0:ff:ab:1d:87:9a:ac:d0:
cf:5d:18:1f:12:a5:e5:8a:9b:23:5a:01:97:ce:ca:
0e:4a:c5:b7:74:a0:28
ASN1 OID: secp384r1
NIST CURVE: P-384
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
AF:0E:F6:D3:D4:5E:86:5C:73:61:FC:B6:7D:FE:B2:98:79:88:17:29
X509v3 Authority Key Identifier:
9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
Authority Information Access:
CA Issuers - URI:http://e5.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:angie.tcpreplay.net
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://e5.c.lencr.org/23.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
Timestamp : May 22 16:42:31.063 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:10:38:EC:85:81:5F:FF:3F:B3:01:5C:09:
6B:0B:B3:A2:56:43:68:9F:6A:14:BD:9F:47:AC:53:4F:
9D:AD:AA:A3:02:20:09:66:10:B8:FC:19:3A:E2:80:68:
80:64:4B:8A:9E:1F:91:82:03:FD:8F:B0:AD:75:46:4E:
60:5F:DE:8D:96:AF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
Timestamp : May 22 16:42:31.121 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:20:18:FC:D1:FE:75:FB:57:1B:26:25:1D:
23:77:B1:9F:FA:13:BA:B1:DB:09:2A:B4:19:0C:25:52:
53:92:EE:35:02:21:00:C6:A2:2C:AE:55:A8:BB:2F:46:
5F:16:CB:21:EB:74:39:BB:71:EF:3A:FA:43:8C:E5:7E:
1D:AB:7E:E2:9C:3F:E6
Signature Algorithm: ecdsa-with-SHA384
Signature Value:
30:65:02:30:09:a7:49:a7:f4:46:e0:ca:6d:10:c8:95:0d:a2:
f2:f8:4f:dd:7f:78:7a:5c:8f:33:20:3b:7b:65:52:c7:33:12:
14:cf:0b:88:68:ca:08:9e:62:00:d5:6d:6f:07:32:a7:02:31:
00:ce:6e:b1:ae:ed:24:66:48:03:2e:aa:8d:2b:23:37:db:aa:
60:74:81:8d:45:2d:60:de:22:2a:fa:80:7c:e4:3f:bf:e6:90:
41:0b:f1:ee:f3:b4:1e:46:c5:f3:02:2e:0b