HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 18 Mar 2025 23:00:10 GMT
Server: istio-envoy
strict-transport-security: max-age=31536000; includeSubDomains
x-powered-by: Brightspot
x-envoy-upstream-service-time: 73
x-envoy-decorator-operation: brightspot-frontend-verify.soi-dotorg.svc.cluster.local:80/*
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 7d38f3897cdb444e56484e816dfbc442.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATL58-P2
X-Amz-Cf-Id: em-kD7hrrhcm8VAj0Lx3Qh5ASqFPz9v2qFoUPwcCslctABiUrZnaQQ==
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:18:e4:af:1a:c4:b7:e1:18:7a:f3:bf:2e:05:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
Validity
Not Before: Feb 13 00:00:00 2025 GMT
Not After : Mar 14 23:59:59 2026 GMT
Subject: CN=www.specialolympics.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:9f:e8:22:00:07:a5:25:67:18:be:cc:c8:e5:40:
92:f6:34:8b:ec:60:6b:33:6a:7d:f7:64:4a:20:d8:
84:72:17:87:ea:ec:ea:8d:b4:73:46:9a:d6:0e:0a:
25:41:ea:2f:e6:03:d1:84:18:51:1c:12:98:57:b6:
a3:a8:75:7b:1d:b0:a1:e3:48:1f:69:b5:70:d2:e3:
ba:30:f2:03:cc:07:51:59:60:69:f4:56:28:cc:26:
74:d1:b0:33:28:85:56:54:02:c6:04:80:16:c2:56:
50:6b:52:81:38:2b:c4:e2:eb:fd:04:9b:95:52:10:
28:cd:80:c7:9a:75:57:83:4c:0e:6f:ef:df:c3:89:
00:e8:86:df:6b:d5:b7:42:a5:81:5c:e4:03:22:a8:
69:f0:01:aa:03:64:55:27:ef:e6:99:2e:47:12:30:
ef:64:ef:a5:0f:d9:2b:c7:36:4c:7c:b4:b2:8c:f8:
2e:8c:6f:ea:61:38:1a:42:84:99:41:58:ca:2d:91:
a1:5e:dd:b0:75:6a:c4:b0:36:1d:d6:21:9d:27:7d:
f9:2a:a3:16:59:68:d6:da:43:fb:1e:36:76:07:fd:
95:52:eb:89:4b:bc:0f:69:bc:88:93:7d:13:90:09:
ce:63:c4:02:b9:88:54:23:b3:a2:e2:0d:f0:db:5d:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
X509v3 Subject Key Identifier:
25:B0:C4:FD:FF:46:E0:5A:AC:5B:3C:F4:74:7E:35:79:11:E3:EE:E7
X509v3 Subject Alternative Name:
DNS:www.specialolympics.org, DNS:www.solegacygiving.org, DNS:www.jointherevolution.org, DNS:*.eunicekennedyshriver.org, DNS:annualreport.specialolympics.org, DNS:getintoit.specialolympics.org, DNS:archive.spreadtheword.global, DNS:polarplunge.com, DNS:www.olimpiadasespeciales.org, DNS:donate.specialolympics.org, DNS:*.specialolympicstn.org, DNS:specialolympicsva.org, DNS:eunicekennedyshriver.org, DNS:olimpiadasespeciales.org, DNS:www.playunified.org, DNS:*.averyspecialchristmas.org, DNS:specialolympicsusa.org, DNS:www.polarplunge.com, DNS:solegacygiving.org, DNS:www.specialolympicsva.org, DNS:www.spreadtheword.global, DNS:inclusivehealth.specialolympics.org, DNS:www.specialolympicsglobalyouth.org, DNS:resources.specialolympics.org, DNS:www.specialolympicsusa.org, DNS:averyspecialchristmas.org, DNS:www.r-word.org, DNS:specialolympicstn.org
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.r2m03.amazontrust.com/r2m03.crl
Authority Information Access:
OCSP - URI:http://ocsp.r2m03.amazontrust.com
CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
Timestamp : Feb 13 14:32:42.010 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:0D:42:55:BF:91:B4:EB:76:D8:2B:3A:4A:
5C:23:4F:A7:44:CA:0F:FA:5D:A7:62:6F:A5:6D:3D:E4:
46:27:3A:82:02:20:43:3C:4C:CB:89:92:B2:40:E3:8D:
AE:34:0D:B2:4B:89:EA:4B:E2:E9:84:D1:6A:C9:24:5E:
17:0A:4E:1B:1B:76
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Feb 13 14:32:42.076 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:7E:59:21:CA:A7:C7:22:7F:DD:BA:56:0D:
37:77:44:A9:8A:F0:CD:2C:08:F6:4B:CD:E7:C6:13:6D:
97:F6:20:88:02:20:40:09:E4:B7:A6:76:25:87:85:A4:
09:ED:00:38:E1:05:B3:AE:90:83:FA:04:E8:4A:97:3D:
5D:6B:2B:D5:DE:F0
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
Timestamp : Feb 13 14:32:42.094 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:6C:56:12:51:99:25:DE:CD:C1:E8:59:2C:
76:48:E6:4A:45:FC:89:F2:04:3F:2C:37:83:72:14:3C:
2F:57:58:68:02:21:00:FA:B9:75:8B:68:F6:7E:5D:3D:
2E:D9:4E:19:EE:B4:08:DC:BC:C2:EE:84:E0:A2:28:35:
F3:90:61:44:1F:14:05
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
81:d9:62:d0:4e:16:c2:e0:0f:e0:b6:c3:31:25:a2:01:7f:f4:
de:e4:a1:48:c8:51:b9:80:1f:ba:29:79:8d:a2:7d:a0:36:41:
9e:04:d9:e7:93:0d:19:c2:fc:93:a1:83:b8:db:2f:11:55:fe:
73:1b:c9:24:78:99:54:62:28:4c:14:e1:b0:5f:d5:0e:d6:83:
c8:86:00:85:51:65:a4:bf:d1:82:f2:09:e7:db:eb:e1:12:1e:
56:ec:63:10:70:82:13:46:dc:80:a7:02:58:82:77:e7:2f:b6:
56:e2:33:2d:21:10:aa:50:a8:58:4c:e5:8c:1b:68:29:52:c7:
f3:74:1c:ff:92:d1:45:e9:8b:be:b8:b0:8a:e4:02:54:0d:6a:
35:0f:bf:b5:41:e1:db:e9:7a:0e:03:76:02:5d:20:62:7e:d9:
50:a6:01:00:f8:16:c4:35:8e:95:13:6a:1a:e6:d1:4f:f9:16:
85:a7:5b:68:62:5f:8e:c0:75:d8:ae:06:37:a4:7b:c1:89:74:
67:f5:1f:1f:80:c0:4b:07:8e:9c:a4:a7:5e:73:7e:4f:d1:4b:
f3:6e:ae:86:3e:f6:88:6b:eb:0d:97:78:40:16:d6:69:8c:aa:
5f:ab:1f:eb:fb:99:48:7c:40:f5:ab:17:3e:b9:c4:6e:b4:34:
e3:9b:cd:01