nginx

HTTP/1.1 403 Forbidden
Server: nginx
Date: Sat, 08 Mar 2025 21:19:15 GMT
Content-Type: text/plain
Content-Length: 12
Connection: keep-alive

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8d:be:66:7f:b6:31:3c:a3:e1:e3:76:d3:58:02:d6:89:15
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Jan 12 21:46:45 2025 GMT
            Not After : Apr 12 21:46:44 2025 GMT
        Subject: CN=decision.flagship.io
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f9:ef:a3:8d:d1:59:c8:b2:69:43:56:44:a6:e5:
                    89:cc:0a:c4:37:86:dd:dd:6d:e6:48:5d:c6:89:c4:
                    7b:96:29:6d:11:cc:d6:d3:91:8e:b6:c2:32:cf:ac:
                    b6:31:ed:ac:e5:33:bb:93:30:25:b6:75:ce:51:ba:
                    df:e1:3b:e8:75:28:4b:da:b0:10:8b:9d:cd:19:9e:
                    ee:23:b9:b5:5c:14:ba:a4:a4:fc:75:e2:c2:50:84:
                    b2:a6:23:ce:8e:cd:96:87:b4:49:45:8f:45:c2:54:
                    7e:4b:78:c3:c1:c2:67:9e:29:4c:d0:9f:1e:85:44:
                    34:2a:8e:6b:79:bb:9c:00:f4:cd:54:35:d8:13:14:
                    fd:06:59:77:6c:a3:c8:19:e1:41:4e:f6:d3:df:aa:
                    bc:eb:e4:34:b6:db:5f:3f:c7:2c:69:a4:c6:4f:7a:
                    b3:a5:10:cc:ef:9d:73:61:12:7b:2e:52:06:fb:f5:
                    10:70:a0:38:82:fb:a3:57:ff:12:f5:46:18:62:72:
                    0c:12:a8:20:cd:f1:47:16:38:9c:15:db:58:7b:42:
                    38:29:cd:9e:83:25:34:1e:9e:31:0d:87:4e:d3:1c:
                    90:82:6c:f1:34:e5:de:72:12:a0:08:e2:48:df:12:
                    9e:93:0a:46:10:c2:62:0a:eb:10:08:74:57:3c:c3:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                D9:43:2A:9F:F7:FB:82:6B:90:58:7B:ED:E9:03:0B:0E:5B:D4:2C:21
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:decision-v2-apnortheast1.flagship.io, DNS:decision-v2-apsouth1.flagship.io, DNS:decision-v2-apsoutheast1.flagship.io, DNS:decision-v2-apsoutheast2.flagship.io, DNS:decision-v2-cacentral1.flagship.io, DNS:decision-v2-euwest1.flagship.io, DNS:decision-v2-euwest2.flagship.io, DNS:decision-v2-euwest3.flagship.io, DNS:decision-v2-mecentral1.flagship.io, DNS:decision-v2-saeast1.flagship.io, DNS:decision-v2-useast1.flagship.io, DNS:decision-v2-useast2.flagship.io, DNS:decision-v2-uswest1.flagship.io, DNS:decision-v2.flagship.io, DNS:decision.flagship.io
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Jan 12 22:45:16.068 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:04:C0:95:79:B7:8A:B6:7B:22:DF:E1:6B:
                                87:79:AC:19:E0:D2:7F:55:93:C0:9C:E3:81:5D:62:0D:
                                C9:B2:9D:D8:02:21:00:C7:12:2D:14:AB:C2:59:2F:08:
                                3D:4B:7E:10:C8:8C:C9:2A:04:40:F3:7B:71:84:4E:D2:
                                C1:40:10:FC:57:CF:8D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Jan 12 22:45:16.076 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:50:AC:D4:D1:9C:66:BF:16:3A:FD:A4:91:
                                91:A0:8E:C5:C2:C2:00:A9:CF:0A:44:99:DF:23:07:CA:
                                EE:19:55:07:02:20:2C:18:DA:8C:94:0D:56:8B:74:CE:
                                CD:3E:2F:3B:FF:64:22:23:87:DD:7C:A1:60:42:C4:C1:
                                3E:19:BC:5E:00:A6
            TLS Feature: 
                status_request
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        74:95:16:92:82:cc:97:c3:6d:a5:59:ec:42:d1:78:22:d6:1b:
        da:07:a6:e7:b0:fd:8a:3f:fc:a0:ce:77:ad:89:73:af:a6:a7:
        93:6a:19:96:6a:39:d4:b1:81:4f:c1:52:2d:db:4b:f9:9a:bc:
        6f:6e:d3:d2:b9:6c:f8:af:ca:ad:38:f5:a0:ef:d4:22:5f:76:
        8b:9d:02:3b:16:75:b4:a1:c6:b3:8c:03:98:0f:5a:c8:7f:32:
        db:6a:8d:95:04:8f:ea:1e:e9:15:21:7d:78:3c:58:87:c0:b5:
        f7:50:87:c9:fd:b6:f4:8b:41:48:25:2d:ad:49:89:70:bb:94:
        48:4e:17:08:7d:c1:fe:c0:df:22:4a:2b:78:3c:62:49:56:e6:
        df:5c:56:d6:3e:bb:ab:a3:79:65:ac:50:42:9b:50:57:d6:4b:
        1a:19:61:aa:a0:2f:46:eb:96:5d:a7:1c:2d:2e:03:8b:fb:25:
        4f:0a:6d:77:a6:59:45:fe:b0:55:d0:0f:c6:a6:88:8d:c0:e2:
        20:93:99:24:90:c9:91:8c:d6:c6:29:69:fe:21:e6:f2:e1:db:
        c5:84:3f:46:4f:3a:66:43:d5:a6:a0:79:be:5c:4d:dc:7e:36:
        33:5f:f7:ce:b7:0e:34:21:39:e3:f8:1a:a2:ee:be:1f:e6:24:
        53:6e:6d:ad