HTTP/1.1 403 Forbidden
Date: Thu, 23 Jan 2025 07:24:21 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 9282
Connection: keep-alive
Set-Cookie: AWSALB=cO2o+NUPjF0543lVIP5jLw6Z09n60NNZDJGarjHf7N2wccTZ/QpynGGfMG4l6kV9VleqSLRE4R3A661yFkPn9ARsYNCd/H8gzG3+2aGjIXYh1Pmqd2/MRwdlJ4tP; Expires=Thu, 30 Jan 2025 07:24:21 GMT; Path=/
Set-Cookie: AWSALBCORS=cO2o+NUPjF0543lVIP5jLw6Z09n60NNZDJGarjHf7N2wccTZ/QpynGGfMG4l6kV9VleqSLRE4R3A661yFkPn9ARsYNCd/H8gzG3+2aGjIXYh1Pmqd2/MRwdlJ4tP; Expires=Thu, 30 Jan 2025 07:24:21 GMT; Path=/; SameSite=None
Server: Apache
X-Vhost: catch-all
Last-Modified: Fri, 21 Oct 2022 00:30:43 GMT
ETag: "2442-5eb808d5432c0"
Accept-Ranges: bytes
X-Dispatcher: b80-dispatcher1cacentral1

FCC trade execution, clearing, custody and back-office support

HTTP/1.1 200 OK
Date: Sat, 01 Feb 2025 05:08:16 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 53361
Connection: keep-alive
Set-Cookie: AWSALB=/tvkqlrTBBHXjD0SNuAG0j3g2X0WG1fnUQQnLjSfzcOgSJhgoJv+lSNe9DK9Ma7C03WRipUzWG1n/MGck7IpspmYewBzSHi9vYyp4xFJ/+f+S/Bi68h/8hz3gf9d; Expires=Sat, 08 Feb 2025 05:08:16 GMT; Path=/
Set-Cookie: AWSALBCORS=/tvkqlrTBBHXjD0SNuAG0j3g2X0WG1fnUQQnLjSfzcOgSJhgoJv+lSNe9DK9Ma7C03WRipUzWG1n/MGck7IpspmYewBzSHi9vYyp4xFJ/+f+S/Bi68h/8hz3gf9d; Expires=Sat, 08 Feb 2025 05:08:16 GMT; Path=/; SameSite=None; Secure
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
X-Vhost: fidca
Strict-Transport-Security: max-age=63072000; includeSubdomains;
X-Content-Type-Options: nosniff
Last-Modified: Sat, 01 Feb 2025 05:08:16 GMT
ETag: W/"d071-62d0da59d6b47"
Accept-Ranges: bytes
Vary: Accept-Encoding,Origin
Access-Control-Allow-Methods: POST,GET,OPTIONS
Access-Control-Allow-Headers: Origin,X-Requested-With,Content-Type,Accept
Access-Control-Allow-Credentials: true
X-Dispatcher: b80-dispatcher1cacentral1

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:52:e4:f9:67:2a:05:e3:9c:7e:a4:45:3b:a9:77:cd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Jun 20 00:00:00 2024 GMT
            Not After : Jun 16 23:59:59 2025 GMT
        Subject: C=CA, ST=Ontario, L=TORONTO, O=FIDELITY INVESTMENTS CANADA ULC, CN=www.wealth.fidelity.ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:fb:1f:30:98:93:a0:f8:ec:d9:10:8c:02:
                    9f:d1:65:1b:76:2b:f9:03:57:00:a4:43:78:0f:49:
                    6c:94:df:f8:e2:1a:f9:33:0a:00:aa:c6:04:18:87:
                    85:d2:b3:fc:19:17:7d:04:5f:52:cc:0d:4b:c8:09:
                    b7:74:d6:21:39:d8:eb:b4:17:80:df:15:91:2f:db:
                    b7:57:92:7f:28:fe:0a:26:aa:b0:00:fb:6f:0a:c4:
                    b6:8f:59:09:8d:61:df:3b:5c:4f:05:da:e9:85:0d:
                    be:5a:f5:80:a7:c8:eb:ff:4b:83:fe:c7:5a:fa:94:
                    ce:fd:3e:1b:dd:09:67:f5:12:34:c5:b9:d0:d4:f5:
                    4a:77:d0:9f:9d:f7:f1:1d:c3:ea:23:23:21:4d:4d:
                    ae:e3:48:34:b6:ba:82:e1:74:ca:c5:ea:59:ee:32:
                    52:c1:39:e1:9f:85:1a:d3:73:eb:15:95:9f:cd:35:
                    26:13:a9:00:0f:d5:bb:87:94:9e:48:78:73:68:61:
                    4d:a1:60:da:28:08:a9:7d:d2:a7:8b:5f:61:08:68:
                    55:64:e9:10:3f:4f:05:16:ec:f0:77:6b:d2:53:a2:
                    a9:0a:05:60:3c:4f:5d:69:b7:50:f7:8e:3f:e6:1d:
                    22:36:54:5e:e0:72:aa:b6:37:f6:84:1f:3c:58:c6:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                79:2D:F3:25:AC:3C:32:36:FB:29:2D:6E:44:DF:EB:26:C1:BA:80:83
            X509v3 Subject Alternative Name: 
                DNS:www.wealth.fidelity.ca, DNS:www.fidelity.ca, DNS:www.clearing.fidelity.ca, DNS:www.gestionprivee.fidelity.ca, DNS:www.institutional.fidelity.ca, DNS:www.privatewealth.fidelity.ca, DNS:careers.fidelity.ca, DNS:clearing.fidelity.ca, DNS:fidelity.ca, DNS:gestionprivee.fidelity.ca, DNS:insite.fidelity.ca, DNS:institutional.fidelity.ca, DNS:privatewealth.fidelity.ca, DNS:www-prd.fidelity.ca, DNS:careers-prd.fidelity.ca, DNS:clearing-prd.fidelity.ca, DNS:gestionprivee-prd.fidelity.ca, DNS:insite-prd.fidelity.ca, DNS:institutional-prd.fidelity.ca, DNS:privatewealth-prd.fidelity.ca, DNS:www-prd1.fidelity.ca, DNS:careers-prd1.fidelity.ca, DNS:clearing-prd1.fidelity.ca, DNS:gestionprivee-prd1.fidelity.ca, DNS:insite-prd1.fidelity.ca, DNS:institutional-prd1.fidelity.ca, DNS:privatewealth-prd1.fidelity.ca, DNS:wealth.fidelity.ca
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jun 20 00:21:26.136 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:34:5F:DA:8A:CD:42:4B:F4:5C:FB:11:44:
                                18:6D:DB:26:E5:BB:3B:4F:87:1C:1C:A9:81:23:48:7F:
                                00:6E:C8:E1:02:21:00:88:D9:8D:1E:1C:FC:F9:6F:CF:
                                60:76:AA:59:E0:99:B3:5A:93:31:BF:4E:3B:E4:A4:88:
                                F4:21:72:E6:01:C7:A5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jun 20 00:21:26.071 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:55:9C:85:E1:99:C1:D6:EC:E4:6E:FB:32:
                                DC:A0:CC:88:4A:68:7D:6D:4B:E2:BA:4A:FF:0F:4C:AF:
                                52:78:15:97:02:21:00:9A:AD:0E:E1:46:3D:D8:78:1F:
                                6E:37:FB:66:84:04:65:05:18:E0:CD:CC:57:26:70:3A:
                                AD:96:8D:CE:47:51:AC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jun 20 00:21:26.091 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:18:97:A2:B6:DB:71:10:CD:22:5A:7A:40:
                                9E:46:9D:C3:97:2F:2A:EF:A3:29:AF:54:51:E7:34:EC:
                                9C:D1:68:66:02:21:00:9E:A1:7A:4D:ED:80:38:D0:26:
                                ED:38:D1:46:0F:FB:DE:E9:83:A1:43:99:B9:02:5B:A6:
                                7D:FB:5A:2D:1D:34:49
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        14:0f:42:a9:94:57:fe:cb:85:49:6b:5f:25:9d:a1:7b:81:a4:
        a1:5a:8c:46:2f:da:6b:63:c0:75:38:13:40:77:9a:3b:0a:75:
        58:53:8c:d6:1f:2c:71:46:df:2d:7b:c7:d5:9d:75:c4:6b:9d:
        0e:f3:b1:59:0a:f9:15:a1:94:6a:98:91:cc:72:95:e3:92:9d:
        56:1d:52:ba:70:16:6b:f1:dd:be:4b:05:03:2d:26:1a:7c:b9:
        17:11:31:d8:aa:c3:71:15:0e:d7:68:80:b6:f3:ce:79:d5:f4:
        f0:e1:73:44:db:b5:c3:85:86:93:71:8b:8b:9a:c7:73:56:d3:
        eb:f2:50:9e:3a:5a:6a:f4:4a:f8:72:fe:28:d7:38:ec:e5:fe:
        01:71:96:50:9d:4e:7d:a2:e0:59:9d:6f:c6:73:e2:97:28:21:
        af:75:de:eb:8d:3d:f5:82:9a:e7:65:e2:48:b3:f0:03:cc:8d:
        88:91:b2:c4:53:86:17:5a:18:f8:63:c5:37:61:74:7e:21:ca:
        07:1b:27:87:e7:b7:af:a8:5c:76:f1:e3:77:97:cb:d2:be:fe:
        5b:f9:02:63:3b:32:ef:06:3a:50:26:43:54:d4:df:a9:b5:29:
        2e:46:cf:83:0a:6d:17:18:e9:23:2b:46:dc:94:78:01:ea:fc:
        b9:56:d0:70