HTTP/1.1 301 Moved Permanently
Location: https://click.email.tfl.gov.uk/
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 403 Forbidden
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Content-Type: text/html
Content-Security-Policy: default-src 'self'; frame-ancestors 'self'
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
Permissions-Policy: geolocation=(self), microphone=()
Set-Cookie: strict
Date: Mon, 21 Apr 2025 11:55:51 GMT
Connection: close
Content-Length: 1233

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:04:c9:0b:39:f4:91:56:c9:ba:2b:d6:cf:32:1f:26
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Mar 16 00:00:00 2025 GMT
            Not After : Apr 16 23:59:59 2026 GMT
        Subject: C=US, ST=California, L=San Francisco, O=Salesforce, Inc., CN=click.email.tfl.gov.uk
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:ce:d4:18:c3:1c:b1:78:09:e7:c0:d3:da:
                    df:e3:0d:9f:19:49:e8:c6:34:cb:cb:05:98:54:c8:
                    ac:c9:72:96:ed:54:6d:85:ef:85:d6:0b:f6:dc:93:
                    ec:ab:80:5c:2e:76:3c:fc:2d:3d:ac:c0:54:62:e9:
                    13:8c:d0:05:d0:fa:43:25:a2:2a:d3:c2:34:58:87:
                    c9:e0:8b:5b:dc:25:07:d6:a8:88:af:29:67:1e:16:
                    c1:02:78:cc:25:eb:8b:02:4a:b2:e0:fe:4e:2f:95:
                    48:0b:77:3e:a4:c3:99:f4:3b:a1:a7:73:5e:0d:b5:
                    80:0d:34:0d:8d:65:87:ab:2d:30:ec:5f:c0:0e:08:
                    a6:51:b2:33:8d:86:0f:56:e5:83:4c:92:b7:2d:54:
                    76:02:66:84:dc:dd:81:11:53:33:b1:5b:64:ed:06:
                    6b:e6:80:4a:f7:ed:0b:d7:8f:53:39:0d:db:50:04:
                    43:2c:c4:1f:1c:2e:fb:5e:74:5c:07:f3:7f:02:a4:
                    59:b1:84:53:37:68:7e:62:cd:f9:44:08:32:3e:4e:
                    84:cb:c5:bd:a9:6b:d7:a1:63:17:3c:76:5e:cc:2b:
                    ed:3b:b6:8f:ec:61:ec:cc:bb:cf:c9:a0:6f:26:25:
                    a4:ce:76:c0:62:13:5c:1c:63:bd:32:1e:5a:ba:97:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                BD:64:73:A0:CB:93:A3:ED:8A:2B:82:3B:C0:83:87:2E:F5:25:C2:58
            X509v3 Subject Alternative Name: 
                DNS:click.email.tfl.gov.uk
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Mar 16 18:03:28.694 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:61:6E:94:B5:C6:7E:A8:21:F6:FD:03:AD:
                                D2:A7:13:D7:FF:0C:BC:40:37:7D:00:41:87:1A:C5:F5:
                                D4:E3:74:28:02:20:51:33:9C:17:A9:7B:13:3F:D2:58:
                                E2:D2:4E:DF:E0:6C:53:77:2F:A1:6F:67:77:DE:C5:A6:
                                D5:81:3E:ED:2D:CC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Mar 16 18:03:28.627 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0A:C1:A2:7B:D9:13:51:45:35:C0:9A:B3:
                                2F:3C:E0:3A:35:86:71:27:DC:4D:66:CF:AF:29:CF:BF:
                                79:FD:01:96:02:21:00:B7:48:38:98:9B:BC:8B:BD:03:
                                8E:CE:12:D6:E8:C6:E1:51:92:44:1C:53:75:64:F0:C0:
                                23:9A:89:19:31:91:91
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Mar 16 18:03:28.644 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AF:97:B7:CF:3C:5A:E9:12:6B:9E:D2:
                                58:01:41:B8:4A:BD:6D:E5:71:BA:F4:E3:61:1E:2D:3B:
                                77:C4:7D:40:F4:02:21:00:FC:F2:7B:94:E4:22:A2:36:
                                60:7D:4E:4A:32:18:FB:4F:3A:35:1F:54:C9:94:72:91:
                                1F:FE:95:F1:5A:44:48:5F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        ac:c1:56:57:9e:f8:01:08:ec:dd:ac:da:30:0e:58:0e:c2:13:
        c3:08:da:52:3e:c5:11:4a:64:d6:59:8e:65:0c:78:fb:25:b4:
        88:98:c8:7a:4e:16:8a:0e:22:02:e4:f2:27:2a:2b:7b:f1:24:
        bb:f6:ea:a9:8f:35:20:31:ce:7e:2a:9b:57:1f:d9:e7:0c:e5:
        8c:fc:f1:a0:1f:b1:21:b9:0b:43:38:a4:c9:eb:79:1c:94:b1:
        53:48:83:b1:49:a6:c5:ac:73:a6:a2:92:3b:e3:4a:0a:9b:95:
        58:1e:56:01:cf:34:94:13:7e:7d:2a:59:af:9d:81:c2:95:35:
        32:eb:dc:b5:12:e7:84:1e:86:2a:6a:6e:aa:37:7b:76:0a:fc:
        0d:b3:fa:01:52:26:1a:5b:f5:bf:d9:7f:fd:74:17:ea:2f:5f:
        9d:d6:0d:df:63:57:77:dc:fd:03:32:f9:12:c4:29:3b:14:f0:
        be:78:dc:ac:2e:1c:72:4e:59:3e:61:b2:e3:78:92:c8:21:93:
        55:ad:08:66:3b:fb:f4:53:84:81:e0:dc:8d:c7:db:9d:18:02:
        c5:d4:2d:53:46:68:98:a1:20:7a:18:d8:0a:87:ac:40:1d:fb:
        66:9b:bc:31:46:40:cd:92:b1:6b:1d:94:a4:29:02:b3:f7:38:
        b9:8e:b2:eb