HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
Date: Tue, 21 Jan 2025 09:51:43 GMT
Content-Length: 202

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:57:6e:43:6e:a8:10:fb:d9:67:fe:44:1d:b2:f4:38:4d
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Nov 30 02:21:27 2024 GMT
            Not After : Feb 28 02:21:26 2025 GMT
        Subject: CN=vv.riigikantselei.ee
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:4e:44:1c:ba:d0:4c:bc:e2:65:51:fc:8e:4c:9f:
                    69:15:23:b8:4c:f1:7a:12:c5:57:38:67:a4:a8:6b:
                    fb:6f:b3:45:80:d1:e5:1d:9a:83:c8:9a:c0:b2:6a:
                    33:3f:8b:2b:5d:49:48:36:87:77:30:5c:6a:93:d2:
                    3a:f8:fb:2a:a6
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                5C:DD:F8:99:BB:06:31:22:EA:A0:75:10:F1:7D:80:3B:9F:4A:AD:DA
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:vv.riigikantselei.ee
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Nov 30 03:19:57.586 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:07:BF:F9:09:43:63:A6:3D:A0:6B:67:36:
                                FE:A0:00:54:69:48:5F:70:CA:75:F7:B1:69:49:C7:C0:
                                A1:5B:D6:59:02:20:5D:A3:57:9E:3F:B9:73:DA:35:25:
                                1C:63:BB:8E:6E:09:15:8D:F9:6C:6E:1D:8C:03:8F:5B:
                                A8:4D:D2:9D:05:EC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Nov 30 03:19:57.626 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:60:EF:D9:56:5E:7F:79:53:BA:37:96:D4:
                                EE:EB:0D:50:D9:79:8B:AB:0D:E1:D5:55:3D:36:15:65:
                                6E:D0:BE:71:02:20:67:EC:64:E5:4A:B8:0A:66:90:A0:
                                C1:43:8A:EE:9A:05:11:3F:3A:C1:D2:17:8A:E0:33:04:
                                17:6D:8E:D4:F6:28
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:66:02:31:00:c4:75:f1:e5:55:a7:17:c8:a8:98:49:b3:71:
        1f:28:a7:4a:18:a9:32:c5:9f:3a:af:ac:9e:b1:fb:60:8d:f9:
        15:73:e8:5b:43:a8:b1:cf:29:be:fa:d6:84:8f:2c:b5:75:02:
        31:00:c3:1f:28:89:c9:ac:d6:8f:a6:ce:66:eb:f2:cb:41:a0:
        b3:34:c2:11:60:66:b2:f9:09:91:b1:0f:67:e8:df:cb:93:d1:
        93:ea:f8:8f:f9:65:3c:a9:9b:7a:5d:b0:da:41