HTTP/1.1 403 Forbidden
Date: Wed, 15 Jan 2025 17:58:15 GMT
Vary: accept-language,accept-charset
Access-Control-Allow-Headers: Content-Type,X-Requested-With,Accept,Authorization,Origin,Access-Control-Request-Method,Access-Control-Request-Headers,authorization,vToken,Src-Application,Src-Event,Src-UUID,X-AIAHK-Trace-ID,X-AIAHK-Context-ID,X-AIA-ENV,X-AIA-LBU
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
Content-Security-Policy: frame-ancestors 'self' https://*.aia.com.hk https://*.aia.biz http://*.aia.biz https://*.aiaazure.biz http://*.aiaazure.biz;
X-Content-Type-Options: nosniff
X-XSS-ProTection: 1; mode=block
Strict-Transport-Security: max-age=10886400; includeSubDomains
Set-Cookie: HttpOnly;Secure;HttpOnly;Secure
Content-Type: text/html; charset=utf-8
Content-Language: en
Via: 1.1 sjc1-bit7002
Set-Cookie: TS01080ace=019f2dd6b1cba2d85a1dcfad4ec9d663b16a144984887ec1dc9343ed3536b00bc357f7a787178662fe17715c1aa48710afb5c84be2; Path=/; Secure; HTTPOnly
Set-Cookie: TSd634b783027=08a3112531ab200022c0f3b35f3ec755bc54917bdf785dffe8b8557ac78f6ebd36839776deae33690816b4da851130004df7d6838fcd0b4b2d991b636466de6cbbb8558d7b6be0a3dcf16795c9190ddb7f1b6f8ab9803b6afc1f477263cf0df7; Path=/
Transfer-Encoding: chunked
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:dd:56:9f:79:f1:30:9b:b8:41:8e:a0:19:e3:36:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, CN=DigiCert EV RSA CA G2
Validity
Not Before: Apr 26 00:00:00 2024 GMT
Not After : Apr 26 23:59:59 2025 GMT
Subject: jurisdictionC=BM/businessCategory=Private Organization/serialNumber=11, C=HK, L=Quarry Bay, O=AIA international ltd, CN=www4.aia.com.hk
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:dd:b2:48:d6:10:ce:b7:c4:e8:a6:96:fd:92:0d:
3a:57:98:ae:1b:51:b5:14:f1:dc:52:2e:50:0f:bd:
0e:3d:8e:0f:39:d2:73:c1:8c:3f:68:bc:54:95:ea:
0d:80:21:91:d8:57:08:4b:d3:4d:77:48:33:d4:4a:
92:db:c1:da:39:6c:10:c4:de:51:7b:2d:30:7c:df:
6f:df:56:4b:03:82:3b:bf:b7:ac:27:a7:5d:ac:16:
62:96:33:ca:01:2e:b4:4d:c1:bd:b7:9d:58:56:f9:
6a:68:01:3d:58:21:f0:c4:9c:1b:9a:96:c0:8f:45:
df:df:01:6e:f0:ee:08:54:a2:8f:8a:0a:43:a4:af:
7a:f3:bc:74:cc:51:2c:5a:a6:1c:1d:ca:ff:8f:6b:
5f:9e:54:98:04:d3:9d:ad:ec:51:e2:74:07:ba:3b:
ae:ec:ae:92:e4:24:9b:14:ff:fc:31:7b:93:a5:d3:
10:66:79:3a:44:df:ac:1c:19:bd:dc:8a:cf:ee:24:
78:af:ce:f8:60:99:6a:b5:ad:90:ad:8c:e8:21:e1:
96:f6:d9:1e:c0:13:e8:78:04:cd:5c:fe:1f:c5:68:
b9:a4:32:00:9f:f3:19:3a:a4:d8:30:df:35:3e:4a:
62:d9:61:cf:73:bd:a6:67:d9:7a:22:a2:ee:db:ec:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
X509v3 Subject Key Identifier:
E4:A9:05:5C:D5:FB:AF:40:33:8F:EF:CA:E2:EA:9C:CB:A7:4F:CC:6C
X509v3 Subject Alternative Name:
DNS:www4.aia.com.hk
X509v3 Certificate Policies:
Policy: 2.16.840.1.114412.2.1
Policy: 2.23.140.1.1
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl
Full Name:
URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Apr 26 03:53:08.044 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:86:DE:09:78:E3:AD:7F:80:38:C9:43:
BB:AB:B6:6D:54:BD:33:D0:6A:CE:A4:DC:8B:F3:C3:F9:
EF:83:FA:0E:8B:02:20:55:AE:38:B2:2B:9E:89:3C:1B:
3D:0B:D4:DC:6D:AB:9E:B6:34:19:34:1C:5D:40:17:21:
81:29:46:B2:E1:A5:7C
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
Timestamp : Apr 26 03:53:07.907 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:25:CA:EE:57:80:80:1D:BA:48:89:F0:C8:
1D:86:E4:39:52:75:DC:82:A9:3B:FD:ED:F6:0C:39:ED:
DD:C1:D2:30:02:20:65:72:9C:B4:20:28:F3:DB:9D:C3:
3E:A3:2A:73:A9:86:7F:EF:75:A7:27:78:73:03:27:BB:
D5:39:EB:04:66:F1
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Apr 26 03:53:07.929 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:69:48:3D:E2:39:C2:AE:E1:F7:BB:6C:E9:
EF:DC:CC:8C:98:7E:EC:5B:D2:9D:A6:7B:71:4E:62:D9:
1C:7C:24:D9:02:20:01:3D:E3:BE:C7:BB:5A:78:91:B8:
E5:D2:62:F0:9F:D0:DF:3B:69:54:C1:73:B5:41:DD:17:
55:92:3C:60:B8:3E
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
66:31:6f:62:56:66:bf:0c:b9:1d:56:fa:7d:9b:b8:da:8e:1a:
9a:2e:c9:07:04:4d:39:49:6a:5e:6a:3c:c0:57:e1:33:1e:f2:
73:c6:e7:18:ee:65:c8:12:85:88:bb:d7:f5:86:2f:f9:45:8b:
25:27:1b:c9:56:c5:c3:3f:e3:9e:ac:36:47:3f:bd:fb:e9:81:
6d:b6:25:0c:61:53:be:d0:b2:02:f2:d5:d0:58:fa:4c:a5:6d:
81:7b:2c:6f:63:c1:96:b6:6c:53:9d:ec:84:44:51:75:e5:44:
ee:54:bf:aa:b9:87:8a:74:66:dc:8e:2e:d5:47:85:22:5a:49:
23:c7:44:bf:ce:b3:b8:a1:0b:9d:f4:c8:e1:ba:0b:fd:3f:07:
46:18:44:2c:84:cd:5f:d1:ec:74:c1:9a:23:92:cd:43:db:3f:
2e:76:9a:10:5c:31:fe:c2:df:3b:96:b5:f3:ec:69:2f:b5:6e:
a1:64:69:c5:31:c9:7b:15:21:6a:f1:b8:ca:50:54:67:6b:1d:
9f:0d:ae:1f:ea:dd:d9:35:77:e2:6a:07:3a:d3:fa:c8:ef:bd:
67:13:e8:2d:2f:31:7d:60:0f:33:57:85:cb:d8:e2:58:1d:81:
ba:aa:4b:b7:09:8b:84:1b:8c:42:e7:5c:27:6f:46:30:b3:fc:
3b:79:34:6a
