CloudFront httpd

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 10 Mar 2025 05:22:05 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 49b0a784530e09f22671459cadc376ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: TLV50-C1
X-Amz-Cf-Id: 9_4dJiQ1fuzvREjsRdGmIDcU1C6IewEAA1wWO2ieyrn6LQqN7qo8EQ==

CloudFront httpd

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 20 Mar 2025 05:41:19 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 66c9faed33e20303fb7807416114a960.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: TLV50-C1
X-Amz-Cf-Id: LJuLXSS1Ss-Vo7UUATvdOgeZACe9rWZ_S32X5QzXj2TBVbgv1_6Gjw==

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:94:df:54:63:a0:c9:90:0e:d8:fd:d9:b5:07:3e:b9:09:c7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=(STAGING) Let's Encrypt, CN=(STAGING) Counterfeit Cashew R10
        Validity
            Not Before: Jan 11 17:37:53 2025 GMT
            Not After : Apr 11 17:37:52 2025 GMT
        Subject: CN=cert-test.wdesk.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:9f:6b:bd:60:35:6b:b0:e6:5a:b6:d7:32:
                    8c:9e:31:a9:92:a9:37:0e:ea:57:23:59:b1:7e:b4:
                    97:cc:a9:45:13:1f:ec:2d:8b:03:f5:cd:a7:1f:18:
                    8e:2b:ff:72:3e:ae:36:32:20:ec:97:dc:4c:b9:27:
                    70:2f:52:b2:20:f2:8b:d1:3b:9e:7b:fb:7b:bf:02:
                    e5:2b:d1:af:c7:a8:43:cf:74:7e:17:09:37:c5:83:
                    a2:73:f1:c8:da:cc:ba:ad:58:0d:6b:66:3a:2c:50:
                    97:4c:60:df:4d:93:7b:f7:a0:17:f6:24:c3:b6:f7:
                    bc:e0:da:b1:3f:be:4d:6f:42:6e:d7:a7:7c:31:3a:
                    a5:e7:ae:9d:72:a8:55:ff:0a:6f:74:22:76:f0:7b:
                    d8:2c:b8:0a:01:15:ac:26:be:4f:4f:4f:34:1a:81:
                    95:fb:75:29:c4:35:42:1d:c2:56:af:26:71:52:51:
                    4c:ef:7a:3a:8b:d6:a9:69:3b:80:aa:64:7b:26:cd:
                    67:f7:40:00:ae:3d:e2:89:e8:6a:8b:56:df:86:27:
                    3b:03:ee:fa:81:7a:28:9c:ce:99:7b:2e:bc:dc:4e:
                    2b:fd:08:00:fd:ae:94:51:09:ad:9e:a3:97:e5:aa:
                    44:b2:0e:a2:a9:9c:b6:94:e0:ba:2d:29:dc:d4:42:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                4F:D3:49:9B:C3:EA:D6:F4:E3:D9:26:8D:88:1D:75:88:2C:D5:97:C3
            X509v3 Authority Key Identifier: 
                A4:52:46:EA:58:A8:8F:68:D8:B7:B1:90:D1:4A:42:4A:8F:6B:28:71
            Authority Information Access: 
                OCSP - URI:http://stg-r10.o.lencr.org
                CA Issuers - URI:http://stg-r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.cert-test.wdesk.org, DNS:cert-test.wdesk.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 21:E5:1A:44:D8:B9:E7:54:0E:A7:FB:E0:BA:D7:77:36:
                                15:60:66:84:D1:5A:EB:33:E6:45:B4:E9:55:F3:88:83
                    Timestamp : Jan 11 18:36:23.874 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F8:A1:DD:DC:9F:79:E5:BB:6A:AF:F3:
                                30:2A:39:5A:EC:08:9C:D3:37:ED:30:9E:D5:2D:B1:36:
                                2D:F5:23:80:86:02:20:56:43:07:D3:66:F3:66:16:CC:
                                DC:C6:F7:4F:6E:F4:D6:09:B0:19:1D:F0:B9:2B:12:61:
                                69:FD:BF:BB:75:F4:09
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 16:E8:69:C1:D1:95:EA:D7:C3:F8:97:1A:E3:F0:76:01:
                                F7:8C:E1:B6:9D:31:A8:52:18:B6:83:7F:31:A8:15:08
                    Timestamp : Jan 11 18:36:23.914 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:90:2C:5C:88:5D:03:C9:F8:9B:D4:83:
                                0E:33:B7:33:23:CA:E9:6F:13:6C:C4:AE:23:54:90:43:
                                80:0B:B0:94:9D:02:20:14:62:FA:AC:34:8D:95:2F:B4:
                                65:A5:11:6E:4B:36:1C:22:E6:59:19:87:3D:2D:3E:3D:
                                20:E0:40:F4:AB:8D:25
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        88:2f:9a:65:ea:e0:15:54:62:14:b1:9c:44:97:7e:5b:33:14:
        b7:19:4f:26:13:6c:c7:c1:5b:06:b1:d7:41:b5:8a:d2:f0:79:
        81:a6:9e:2b:23:20:7d:e3:19:27:dd:7b:cd:70:48:7f:e9:7c:
        af:19:f6:7f:9e:04:ff:e2:bd:97:3f:25:d9:4b:b9:b6:41:03:
        c9:53:18:33:05:ee:a7:ee:a8:44:8b:2e:74:2d:cb:44:e2:4c:
        da:57:b9:8a:ae:88:3c:e3:dc:2f:0b:f1:0d:e1:65:a6:1c:58:
        f7:43:d1:5a:a7:7f:35:e6:a1:ae:e9:5c:a9:9d:31:de:cb:ec:
        0a:85:3a:1f:9c:5e:2e:e8:ac:e4:31:0f:d0:cf:5c:3f:f5:af:
        b7:da:c7:7d:e8:25:bc:66:2b:e6:d2:5e:92:06:dd:fe:67:b4:
        e8:da:e4:82:24:36:db:8b:9f:a2:e6:b2:f8:07:fc:f5:98:ce:
        b6:af:0f:02:6f:a9:90:01:6e:ec:bb:a5:46:51:c7:d0:9f:26:
        38:36:37:f3:23:66:dd:25:87:c1:63:7f:a7:e4:fe:9c:a8:c0:
        98:87:8e:a5:63:38:ef:08:6d:ae:61:0f:13:53:65:6d:c3:2c:
        8e:c8:a2:bc:e8:52:f1:d1:0a:c9:0f:ec:b8:f6:28:d8:af:79:
        93:d1:96:2b