HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 04 Apr 2025 10:49:30 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 d6b30cd44d0926586624a3163e9a9e9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG53-C1
X-Amz-Cf-Id: ilTG0SKfipOSsz1fHYPURKrOsQ64_jOZpvth6YcH9UrI3Cu1GWu-pg==
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6a:12:47:cd:42:87:0f:91:f1:53:4b:d9:5e:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global CA G2
Validity
Not Before: Mar 8 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2026 GMT
Subject: CN=layla.amazon.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ea:c3:8e:c4:c2:2b:62:83:58:3c:de:b4:7e:84:
8b:62:b3:72:c6:a0:eb:f4:87:87:15:f6:7f:20:33:
8e:4a:70:df:37:8e:e0:8f:ba:3a:38:7c:a1:90:75:
53:db:42:51:42:84:18:df:32:08:28:35:e3:36:e0:
8f:84:1d:67:55:f4:6b:01:a3:66:a1:08:20:56:65:
15:62:97:68:f0:04:82:52:5f:5f:cf:0a:e9:30:7b:
2d:3d:55:05:db:9b:9f:34:78:32:f8:6e:cc:f1:33:
e5:7b:52:90:6c:3d:e3:47:5c:e7:92:a4:11:0a:c2:
6e:9f:c9:b3:a6:d2:2d:b2:ce:46:27:12:f9:72:5f:
e6:6f:a6:37:74:16:43:01:9f:04:4b:5f:31:1e:6b:
13:5b:1c:d6:e7:68:5c:f4:0b:af:cf:c0:06:db:4c:
cd:79:38:6f:63:b1:fe:93:dd:bd:35:86:86:bc:46:
bd:0f:ca:a5:45:5b:1a:ee:9f:05:64:e2:58:69:71:
6a:9c:1e:03:46:0e:5e:a4:ff:c9:c8:d2:9c:c2:cb:
82:ce:9f:f7:22:9d:84:bc:6e:96:f2:68:ed:9b:02:
69:2b:46:e7:ab:1b:3a:69:53:67:63:56:35:c2:de:
e8:19:f0:57:92:19:86:d4:11:bb:3f:df:a3:49:18:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
24:6E:2B:2D:D0:6A:92:51:51:25:69:01:AA:9A:47:A6:89:E7:40:20
X509v3 Subject Key Identifier:
DB:D7:DB:77:94:52:46:DC:3B:44:C1:8C:F4:1F:ED:9A:13:C8:E9:C9
X509v3 Subject Alternative Name:
DNS:layla.amazon.com, DNS:seamus.amazon.com, DNS:layla.amazon.co.uk, DNS:seamus.amazon.co.uk, DNS:layla.amazon.de, DNS:seamus.amazon.de, DNS:pico.amazon.co.uk, DNS:brodie.amazon.de, DNS:alexa.amazon.de, DNS:alexa.amazon.co.uk, DNS:alexa.amazon.in, DNS:guipitan.amazon.in, DNS:alexa.amazon.fr, DNS:guipitan.amazon.fr, DNS:alexa.amazon.it, DNS:guipitan.amazon.it, DNS:alexa.amazon.nl, DNS:guipitan.amazon.nl, DNS:alexa.amazon.es, DNS:guipitan.amazon.es, DNS:alexa-eu.amazon.com, DNS:pico.amazon.com, DNS:eu-api-alexa.amazon.ca, DNS:eu-api-alexa.amazon.co.jp, DNS:eu-api-alexa.amazon.co.uk, DNS:eu-api-alexa.amazon.com, DNS:eu-api-alexa.amazon.com.au, DNS:eu-api-alexa.amazon.com.br, DNS:eu-api-alexa.amazon.com.mx, DNS:eu-api-alexa.amazon.de, DNS:eu-api-alexa.amazon.es, DNS:eu-api-alexa.amazon.fr, DNS:eu-api-alexa.amazon.in, DNS:eu-api-alexa.amazon.it, DNS:eu-api-alexa.amazon.nl, DNS:test-h2-layla.amazon.com, DNS:origin-layla.amazon.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertGlobalCAG2.crl
Full Name:
URI:http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
Timestamp : Mar 8 04:12:12.741 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:BF:1F:B1:5D:4D:80:62:4F:FF:5E:4B:
86:C7:66:B8:C4:3D:EB:EE:4F:AF:8F:C3:6C:00:AD:11:
A2:78:52:D3:1D:02:20:6E:13:2D:55:89:6E:80:D0:89:
88:4C:74:D9:15:12:F1:8E:F9:4F:1F:E4:17:05:29:E5:
72:5D:F1:BC:4F:42:7D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Mar 8 04:12:12.786 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:C8:25:ED:C3:17:89:7A:74:ED:29:E3:
9A:45:51:80:8F:93:7D:73:E0:69:2C:75:72:7D:B4:69:
00:09:F2:A6:5C:02:21:00:F9:D1:95:96:D4:0E:6A:F4:
A2:81:6F:87:BE:A5:E8:4D:12:69:69:50:2B:B6:44:03:
DC:EC:FE:09:D5:F1:9F:67
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
Timestamp : Mar 8 04:12:12.799 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:E1:6F:50:63:4A:AD:17:B9:6B:4E:0D:
FD:E7:DD:8F:12:6F:F9:44:8A:30:7A:6C:85:79:30:33:
28:65:7F:9A:6C:02:21:00:FB:DD:46:B3:16:D3:46:35:
E9:11:4C:91:1A:B9:25:63:F7:4F:E6:A9:2A:A6:C5:D3:
0D:05:AB:2F:0C:CB:8F:72
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
9c:49:3d:e0:ab:12:18:50:72:0b:62:e4:d4:ea:ed:3e:0c:c0:
a1:2f:58:a0:f2:17:d3:e9:ba:a8:05:ae:af:7c:1b:e4:23:de:
e2:9e:9f:8d:a4:72:31:ac:42:13:28:f5:bd:d6:52:c2:d2:8f:
d7:85:7c:45:e3:2c:26:df:cf:b3:24:98:74:c0:cd:b5:e3:92:
d1:04:cd:59:fb:9d:46:43:77:5a:0e:9e:f0:a7:d7:12:49:d1:
0a:4d:d5:1e:57:99:82:08:ad:b0:31:a1:dd:a3:7c:c9:82:fc:
d1:d8:a1:0d:85:f9:8a:69:af:1c:e2:8e:04:8c:30:47:ae:14:
09:ff:98:8d:be:d6:6e:a1:8b:f9:d9:7b:c4:ff:47:01:d6:f9:
6b:a3:ff:68:9d:bb:06:78:84:b8:d4:45:02:e8:ec:d0:c5:8c:
8e:4b:48:5f:b0:d7:11:32:b7:68:72:83:66:ce:44:fa:9a:73:
cd:cf:80:58:98:ea:30:a3:1d:b8:c5:3c:14:1d:d1:cc:5a:2f:
f1:fb:b8:be:de:2c:27:0b:4c:85:85:83:21:e1:a3:0e:ab:23:
39:4c:bd:96:35:da:66:8d:02:2c:85:ee:af:2f:47:e0:a8:ec:
a7:1f:ca:67:21:a3:47:f7:d6:18:31:1c:e1:1b:18:42:03:b8:
c2:b4:83:aa