HTTP/1.1 403 Forbidden
content-length: 93
cache-control: no-cache
content-type: text/html

HTTP/1.1 403 Forbidden
content-length: 93
cache-control: no-cache
content-type: text/html
strict-transport-security: max-age=31536000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:61:04:7b:3e:dc:5f:9b:4b:a7:22:e1:1e:6a:5f:76:5c:97
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Jan  2 07:07:38 2025 GMT
            Not After : Apr  2 07:07:37 2025 GMT
        Subject: CN=piwik.bmz.de
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:ce:52:18:01:6a:85:90:e3:19:af:d6:49:f5:87:
                    91:3c:1d:fb:4a:cf:2f:42:87:d7:cc:0b:8b:a8:ee:
                    8f:c1:99:eb:fb:5a:4a:a3:10:d8:bb:7a:34:e5:31:
                    fa:cb:73:3c:e4:2d:61:96:5b:97:9f:d7:bc:ab:af:
                    0d:a0:9c:3d:a4
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CA:0A:12:B9:BF:D9:85:B7:19:A9:E7:92:1F:A3:5E:42:3C:3A:68:88
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:piwik.bmz.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : Jan  2 08:06:08.337 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F6:4A:FA:2F:C8:4C:C6:9E:96:1B:26:
                                0C:3C:71:2C:49:97:D2:6E:DE:3C:93:D1:6C:56:1E:6C:
                                60:DA:A7:A9:B8:02:21:00:A6:D7:E7:6E:E7:4F:36:6E:
                                2C:FD:EB:B5:B0:A1:8E:12:F4:A7:7A:FA:35:98:E0:37:
                                13:AF:B0:69:2D:78:35:4F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jan  2 08:06:08.313 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0A:E8:0B:FB:9F:21:B2:6E:27:27:16:4E:
                                1E:B3:DE:D3:18:4B:2E:FD:C9:25:5D:0D:19:13:63:44:
                                F4:F8:31:1C:02:20:60:56:6C:F0:84:CE:98:83:69:22:
                                56:BE:3B:53:C5:9F:A2:AD:4C:9C:45:22:F1:2A:10:5E:
                                8E:24:A7:13:48:D1
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:66:02:31:00:9c:37:03:d1:35:a1:9b:d7:75:a5:5c:87:3d:
        13:cf:fa:b5:87:6c:34:0e:59:0e:c4:ad:10:5a:f4:fb:97:f3:
        bd:14:fc:39:97:43:f2:b8:22:30:3b:a3:7c:a1:1a:ba:c5:02:
        31:00:ac:3f:2a:c6:be:9c:6a:73:24:12:5e:79:43:b5:4d:e6:
        8f:84:f6:04:c9:fc:d0:e7:a7:f9:5e:59:0e:34:48:e5:97:e5:
        83:c9:cd:0a:d8:01:23:54:42:19:d2:77:be:83