CloudFront httpd

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 15 Apr 2025 05:56:24 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 ae77ff90d6837f5ad73a77c09e1ae242.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: IAH50-P2
X-Amz-Cf-Id: dOHQ5b0qhGEs2wEd7QXKf0gXo0kB4Ryhgzcs2CoycUKtHtA_CyZ3hg==

nginx

CAS – Central Authentication Service

HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 16 Apr 2025 17:46:47 GMT
Server: nginx
Set-Cookie: AWSALB=6Hc30+DFHnBsOQKMXmfogapvXD8bb4RtnsP2LNbErE6MfvSYLaoiZ2WtoceKeYGM4Qb2OEQRRE7VgL0BqyLEf4u4JR5D/PZ6+GQFzHJY5v0W3F9KwF0GUyWP+WWv; Expires=Wed, 23 Apr 2025 17:46:47 GMT; Path=/; Secure
Set-Cookie: AWSALBCORS=6Hc30+DFHnBsOQKMXmfogapvXD8bb4RtnsP2LNbErE6MfvSYLaoiZ2WtoceKeYGM4Qb2OEQRRE7VgL0BqyLEf4u4JR5D/PZ6+GQFzHJY5v0W3F9KwF0GUyWP+WWv; Expires=Wed, 23 Apr 2025 17:46:47 GMT; Path=/; Secure; SameSite=None
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache
Cache-Control: no-store
Set-Cookie: JSESSIONID=445EA90D0D637FE741A01EA4D2FBE604.cas11; Path=/; Secure; Secure; HttpOnly
Content-Security-Policy: frame-ancestors https://*.minipreco.pt/
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 8ce3c4c57ea16145b2cade4ce92236d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DFW57-P9
X-Amz-Cf-Id: 84dtDNTU77xDhbXLA34fpIcVDHJVWi7SJBQO1VwUlE1M3Vr4iqQ_bA==

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:2b:a9:e8:16:41:39:61:99:2f:03:1f:ed:97:39:e9
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
        Validity
            Not Before: Jan 17 00:00:00 2025 GMT
            Not After : Feb 16 23:59:59 2026 GMT
        Subject: C=ES, ST=Madrid, O=DIA RETAIL ESPA\xC3\x91A SA., CN=*.minipreco.pt
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:f2:35:4f:19:b8:5b:0f:e9:3f:dd:77:84:
                    e4:d9:30:5a:78:16:cc:79:10:db:be:9b:ec:11:36:
                    ca:a6:08:67:95:a2:bd:ff:3c:76:23:4c:a9:9b:44:
                    27:c9:94:3d:11:20:a2:4e:8d:33:b5:8a:c7:d1:04:
                    78:c5:79:2f:0f:f1:fa:00:47:9d:81:1a:3b:c0:4d:
                    52:cd:df:0c:15:a8:df:87:06:a2:3b:51:8d:8d:85:
                    fa:54:1f:f1:47:1e:49:47:69:4a:fa:79:f8:75:2d:
                    c9:27:97:a5:4a:8f:59:a9:e0:4d:4d:8f:77:f9:19:
                    2e:1b:74:ff:9a:a9:46:de:8b:cd:f2:28:ce:ed:57:
                    51:e9:fe:4b:08:2a:68:bd:bb:71:aa:06:38:d3:4b:
                    8b:59:75:dc:d7:7d:14:33:95:7d:10:0b:f9:f5:98:
                    98:e3:d3:06:bf:29:dd:b4:4d:18:5b:4a:50:96:9d:
                    b2:1f:b9:a6:6c:9a:0b:d6:1c:eb:6c:82:39:af:fc:
                    5b:6f:de:1a:b8:82:6d:99:37:29:64:d0:84:7f:c5:
                    dc:5a:be:a3:a6:7b:89:e8:0e:73:b9:13:ee:1b:da:
                    2a:68:44:f0:44:53:87:48:4a:6a:8e:1e:85:d5:fc:
                    bf:70:2d:d4:0b:5d:44:dc:cd:2f:64:ab:07:e5:7a:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                17:D9:D6:25:27:67:F9:31:C2:49:43:D9:30:36:44:8C:6C:A9:4F:EB
            X509v3 Subject Key Identifier: 
                55:81:56:29:2A:1B:10:E0:6E:93:71:C8:7D:32:B7:9F:11:95:3F:FA
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.minipreco.pt, DNS:minipreco.pt
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
                                E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
                    Timestamp : Jan 17 15:30:17.772 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:1E:59:1D:8C:34:95:EF:80:80:25:53:73:
                                0F:77:BD:C8:35:0F:70:D6:C5:6E:F0:EF:85:7A:C1:E5:
                                85:82:5B:80:02:20:58:01:27:7C:2B:07:78:84:44:71:
                                8C:6A:CD:15:51:3C:3B:14:AC:1A:19:42:40:0F:80:CE:
                                44:1C:94:42:9B:C5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:86:D4:C7:28:AA:6F:FE:BA:03:6F:78:2A:4D:01:91:
                                AA:CE:2D:72:31:0F:AE:CE:5D:70:41:2D:25:4C:C7:D4
                    Timestamp : Jan 17 15:30:17.656 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:01:1D:3C:C1:A5:13:A5:1C:37:67:B4:D2:
                                95:A6:51:1B:CD:B0:11:7E:13:B2:0A:64:0E:67:D6:C4:
                                7E:29:93:0B:02:20:63:8D:2E:AA:F9:B3:0B:A9:7B:69:
                                95:37:CD:A4:46:6B:5F:FC:75:00:CF:5B:5B:1F:6F:CD:
                                6C:2B:1B:A4:7D:CB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
                                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
                    Timestamp : Jan 17 15:30:17.704 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C3:AA:32:02:B5:B5:11:0A:56:DD:D1:
                                00:51:9A:BA:BC:5C:44:0B:4D:CE:FD:1A:93:84:A8:53:
                                9B:7E:0D:7C:62:02:21:00:D4:F4:18:8B:B2:FF:64:50:
                                E8:51:5E:D9:81:AC:73:D9:82:D5:93:00:09:68:E8:93:
                                F8:88:ED:4A:E5:A8:FD:BD
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        96:d2:b3:79:fb:20:07:59:bf:3b:64:6a:e5:02:43:9b:38:bc:
        cd:ef:b7:a3:08:8a:ea:de:28:db:97:c0:12:a8:e6:79:e1:63:
        05:bd:29:c3:4d:1d:7b:f5:23:0f:2a:22:ef:db:3e:bb:87:83:
        ef:c6:87:cb:28:88:71:0a:98:8c:57:0d:bb:6d:3b:63:fe:96:
        15:9a:95:b4:d9:7b:3f:1b:d2:99:87:40:a1:52:78:51:e4:ee:
        97:d6:a1:8c:32:51:33:5f:e3:0b:19:24:1b:7e:78:1f:8a:f7:
        d4:3d:26:b1:81:d1:df:48:2f:a0:e9:f4:5c:a9:11:44:fb:32:
        b1:d2:6c:2e:45:dc:66:a8:ba:61:7f:28:1f:4c:b2:5b:bf:bc:
        f2:e3:12:5e:e2:b1:5b:2d:54:37:0a:77:63:53:f4:0c:90:be:
        36:a4:1a:b3:a5:b5:e8:df:13:9b:4c:77:aa:ec:06:c0:af:6a:
        61:be:15:3e:a5:88:ee:d4:d1:78:3a:8d:5c:14:76:d5:0d:cc:
        33:1f:9e:4e:df:e9:8e:f9:ac:79:6d:88:f3:0d:db:7c:32:03:
        ed:ec:cc:b7:48:0a:ad:4b:be:2a:19:7a:03:50:89:c4:44:b6:
        ba:84:17:11:b8:45:96:d6:d1:20:f2:fc:3c:d0:ff:f4:69:e2:
        5b:78:d9:b2