HTTP/1.1 403 Forbidden
content-length: 93
cache-control: no-cache
content-type: text/html

HTTP/1.1 403 Forbidden
content-length: 93
cache-control: no-cache
content-type: text/html
strict-transport-security: max-age=31536000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8e:d9:8b:bb:56:2c:ac:48:05:5c:96:24:c6:cf:6e:a3:16
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Apr  2 07:10:33 2025 GMT
            Not After : Jul  1 07:10:32 2025 GMT
        Subject: CN=www.dfg.de
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:39:ae:40:e3:14:1c:a5:c7:74:cf:30:3a:38:f8:
                    6f:4b:64:f6:c4:6b:94:c3:2f:26:cb:fb:2d:d1:38:
                    b3:7b:c3:15:c6:46:14:45:10:e2:0f:c2:a6:f3:75:
                    f1:b5:6e:57:f8:5f:4b:72:bf:7f:d6:42:4d:d1:3a:
                    06:20:b2:61:88
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                E0:AC:51:8C:92:4B:D9:E6:97:F5:1A:62:07:09:0D:1D:2B:63:82:DA
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:dfg.de, DNS:www.dfg.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://e5.c.lencr.org/23.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Apr  2 08:09:03.581 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5C:E8:AD:0E:FB:2F:E7:0B:5D:26:FD:6D:
                                26:46:AE:6D:BE:79:23:06:F2:2C:73:53:79:D1:FF:3F:
                                2B:36:32:40:02:20:15:48:BF:6D:2C:78:78:61:2D:53:
                                FF:39:55:AE:3F:D9:69:9B:F9:31:19:C3:4B:8D:3E:B7:
                                F5:F5:C7:B6:7F:B1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Apr  2 08:09:03.567 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:FF:5C:A0:77:14:A8:FF:5D:5C:02:85:
                                B0:3B:F7:1B:61:FD:9C:04:69:84:66:7E:EA:B4:11:D7:
                                D0:B8:6C:12:BE:02:20:7F:5D:E5:93:32:70:8E:2A:83:
                                29:48:03:F3:A7:F7:1C:BB:75:E0:FC:F0:48:F9:E7:73:
                                A7:92:9F:FC:EF:2A:72
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:22:ca:9e:fa:16:2e:be:30:2e:d7:97:88:04:10:
        64:9a:25:65:66:b7:59:38:ef:09:9f:2f:d9:71:7b:3f:40:35:
        5b:54:61:c4:f3:99:41:b3:65:e0:00:e7:95:9a:8b:c5:02:31:
        00:eb:b3:73:74:1a:0a:3d:77:95:30:43:d7:a0:1a:3e:b9:41:
        e8:33:fd:40:6f:99:33:9e:f3:14:68:f0:f0:be:e9:94:cd:51:
        79:34:c1:8b:19:9a:cd:bc:13:f3:b9:e6:e8