HTTP/1.1 403 Forbidden
Date: Thu, 13 Mar 2025 12:57:30 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive
Strict-Transport-Security: max-age=31536000; includeSubDomains;

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fe:8d:93:0c:12:54:3c:6e:ab:32:74:4d:00:93:ef
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Apple Inc., CN=Apple Public Server ECC CA 1 - G1
        Validity
            Not Before: Feb 11 17:02:56 2025 GMT
            Not After : May  7 18:15:31 2025 GMT
        Subject: C=US, ST=California, O=Apple Inc., CN=gsp45-ssl-e552.ls.apple.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:04:18:9a:89:0c:a2:ee:3a:e7:f1:aa:a1:b2:6d:
                    94:7a:af:5f:c0:b1:6b:6e:39:66:64:49:ff:97:2d:
                    6c:8e:db:76:9b:09:28:2a:f5:40:8e:83:50:74:5a:
                    f9:8d:1d:28:8c:d5:8a:51:e9:30:65:c9:61:6e:4d:
                    9b:ef:44:a3:51
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                6C:97:82:45:9E:CC:6F:16:47:F6:B8:13:F3:73:53:22:FA:79:11:26
            Authority Information Access: 
                CA Issuers - URI:http://certs.apple.com/apsecca1g1.der
                CA Issuers - URI:http://certs.apple.com/apsecca1g1-ar.der
                OCSP - URI:http://ocsp.apple.com/ocsp03-apsecca1g1
            X509v3 Subject Alternative Name: 
                DNS:gsp45-ssl-e552.ls.apple.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: https://www.apple.com/certificateauthority/public
                Policy: 1.2.840.113635.100.5.11.4
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.apple.com/apsecca1g1.crl
            X509v3 Subject Key Identifier: 
                83:18:7F:A6:75:AC:E7:45:65:DE:A8:A9:85:0B:1E:53:B0:22:62:54
            X509v3 Key Usage: critical
                Digital Signature
            1.2.840.113635.100.6.86: 
                ..
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Feb 11 17:12:56.697 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C8:5E:90:47:5C:2B:FA:4D:FA:D3:14:
                                33:BD:A8:1C:7E:17:D1:12:63:5E:7C:CA:1C:F6:FF:75:
                                63:14:70:0C:60:02:21:00:AD:8A:54:AA:2B:2D:9E:6D:
                                C3:85:01:C1:FE:61:18:D0:C0:BD:4C:C0:92:64:32:00:
                                0B:92:A1:09:41:50:59:87
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 11 17:12:56.713 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:14:8A:C7:D1:08:44:58:0E:C3:A0:F5:C8:
                                AA:90:F3:61:32:BB:60:3F:E2:E9:F7:16:4C:F5:B6:D8:
                                EB:E1:75:3B:02:21:00:EA:AD:08:FE:F2:15:35:AA:96:
                                EA:EE:04:72:C3:85:B0:D7:64:43:7E:81:B0:54:E6:7B:
                                47:B1:52:73:1E:A7:EC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 11 17:12:56.660 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:AA:B4:31:04:1A:89:F5:5B:CE:D4:3B:
                                6F:8A:D8:A0:AE:3B:C2:0B:F2:3D:D0:54:85:22:73:08:
                                29:A4:57:3B:38:02:20:29:C2:5C:EA:AC:39:83:3B:93:
                                AD:C7:08:F2:EC:C9:42:4B:EB:D8:8F:6F:31:C8:F1:20:
                                41:52:6E:E4:37:6B:C7
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 11 17:12:56.726 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:70:0F:79:B0:2A:BB:84:B0:EA:16:C4:A0:
                                9D:20:B8:0F:53:C0:28:DA:A8:00:68:7E:D5:E9:1A:89:
                                BD:3F:9B:49:02:21:00:C8:78:36:9D:D1:22:B2:27:D0:
                                D1:8B:44:85:15:82:B3:AE:AF:8C:55:2C:9A:7D:CC:BF:
                                59:BA:10:B2:7B:23:66
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:21:00:fb:50:49:7e:96:d2:84:ba:ba:20:fe:cf:6a:
        0b:f8:b7:4a:62:22:21:1b:af:58:f2:23:ad:1b:10:42:c4:b4:
        ad:02:20:3f:9b:8a:35:22:84:c5:0f:31:fb:3e:c8:25:4e:78:
        cb:d3:bc:c0:db:d3:2b:e9:c8:20:17:fc:46:78:f6:6b:6d