HTTP/1.0 400 Bad Request
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 312
Expires: Sat, 12 Apr 2025 07:33:43 GMT
Date: Sat, 12 Apr 2025 07:33:43 GMT
Connection: close
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:79:27:07:b9:15:7c:6c:16:e2:8d:94:48:05:03:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Extended Validation Server CA
Validity
Not Before: Dec 19 00:00:00 2024 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: jurisdictionC=US/jurisdictionST=New York/businessCategory=Private Organization/serialNumber=1918-04-09, C=US, ST=New York, L=New York, O=Teachers Insurance and Annuity Association of America, CN=public-www-at.test.tiaa.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a3:6f:1d:87:e1:2f:4a:d3:22:06:78:b5:47:d5:
ea:fe:94:73:3d:d5:ce:07:72:73:fc:e9:16:84:a1:
8f:32:1f:be:c2:85:79:c5:61:52:ef:bb:09:63:80:
a9:28:ed:54:ed:30:32:b2:5d:c1:1f:e8:88:7a:27:
ce:ce:77:23:2d:31:a6:9a:87:0d:fb:49:df:4d:6b:
10:bd:b1:e0:ba:86:8c:94:6c:ae:e8:1a:e6:6e:5a:
77:71:6a:f4:f2:5d:8d:62:3a:a2:5f:d1:79:ae:f6:
fb:2b:94:17:54:1d:fc:22:42:a9:10:01:b4:b2:a3:
7a:fb:b5:a8:15:11:62:6d:b2:d8:40:68:0d:a1:49:
4a:ba:24:4f:0f:90:75:2a:4a:92:05:16:13:d3:eb:
8f:f6:d1:79:67:79:9f:a9:23:0c:78:9b:13:f5:1a:
18:9f:bc:9e:8d:e7:2e:8d:9a:ea:ac:61:7f:ab:48:
df:62:9a:44:fc:90:6f:92:20:a4:99:29:cd:05:4b:
cb:74:e8:2e:eb:31:33:0a:6a:b5:52:a9:76:57:7f:
2b:a2:cb:13:60:a0:fd:01:0d:d5:d7:9f:de:39:08:
3e:e6:ad:07:4a:48:75:50:64:e5:3b:31:31:ce:45:
29:a1:8c:f8:71:9b:0a:75:ff:40:20:33:f6:0d:7f:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
3D:D3:50:A5:D6:A0:AD:EE:F3:4A:60:0A:65:D3:21:D4:F8:F8:D6:0F
X509v3 Subject Key Identifier:
85:62:89:E7:F6:22:A4:E3:A9:A3:B1:53:5F:38:01:01:DB:C4:28:72
X509v3 Subject Alternative Name:
DNS:public-www-at.test.tiaa.org, DNS:aem-preview-developer.test.tiaa.org, DNS:aem-preview-ms.test.tiaa.org, DNS:aem-preview.test.kaspick.com, DNS:nre-at.test.apps.nuveen.com, DNS:nre-dev.test.apps.nuveen.com, DNS:public-a-at.tiaa-cdn.net, DNS:public-a-ct.tiaa-cdn.net, DNS:public-a-dev1.tiaa-cdn.net, DNS:public-a-it1.tiaa-cdn.net, DNS:public-a-pf.tiaa-cdn.net, DNS:public-a-st2.tiaa-cdn.net, DNS:public-a-st4.tiaa-cdn.net, DNS:public-accessit-at.test.tiaa-cref.org, DNS:public-accessit-at.test.tiaa.org, DNS:public-api-at.nuveen.com, DNS:public-apps-at.nuveen.com, DNS:public-auth-at.test.tiaa.org, DNS:public-cobrowse-at.test.tiaa.org, DNS:public-community-at.test.tiaa-cref.org, DNS:public-connect-at.kaspick.com, DNS:public-developer-at.test.tiaa.org, DNS:public-documents-at.nuveen.com, DNS:public-feeanalysis-at.test.tiaa.org, DNS:public-istitch-at.nuveen.com, DNS:public-iwc-at.test.tiaa.org, DNS:public-mobile-at.test.tiaa.org, DNS:public-mobileapm-at.test.tiaa-cref.org, DNS:public-my-dev1.test.tiaa.org, DNS:public-nsm-at.nuveen.com, DNS:public-ofx-service-at.test.tiaa-cref.org, DNS:public-partnergateway-at.test.tiaa.org, DNS:public-planfocus-at.test.tiaa-cref.org, DNS:public-planfocus-at.test.tiaa.org, DNS:public-publictools-at.test.tiaa-cref.org, DNS:public-search-at.test.tiaa.org, DNS:public-service-at.test.tiaa-cref.org, DNS:public-shared-at.test.tiaa-cref.org, DNS:public-shared-at.test.tiaa.org, DNS:public-sihttps-at.test.tiaa-cref.org, DNS:public-stitch-at.nuveen.com, DNS:public-tclifemgroup-at.test.tiaa-cref.org, DNS:public-tclifemgroup-at.test.tiaa.org, DNS:public-tclifesolutions-at.test.tiaa-cref.org, DNS:public-tclifesolutions-at.test.tiaa.org, DNS:public-tcm-at.test.tiaa.org, DNS:public-view-at.nuveenglobal.com, DNS:public-webapp-at.nuveen.com, DNS:public-welis-service-at.test.tiaa-cref.org, DNS:public-www-at.cefconnect.com, DNS:public-www-at.compliancecoordinator.org, DNS:public-www-at.kaspick.com, DNS:public-www-at.nuveen.com, DNS:public-www-at.nuveenglobalreit.com, DNS:public-www-at.nuveenproxy.com, DNS:public-www-at.nwq.com, DNS:public-www-at.retirementatwork.org, DNS:public-www-at.sbasset.com, DNS:public-www-at.test.tiaa-cref.org, DNS:public-www-at.test.tiaabank.com, DNS:public-www-at.test.tiaabank.org, DNS:public-www-at.tiaa-crefinstitute.org, DNS:public-www-at.tiaabank.com, DNS:public-www-at.tiaabank.org, DNS:public-www-at.tiaadirect.com, DNS:public-www-at.tiaadirect.org, DNS:public-www-at.tiaainstitute.org, DNS:public-www-at.tiaaventures.org, DNS:public-www-at.tiaavision.com, DNS:public-www2-at.nuveen.com, DNS:public-www2-at.test.tiaa.org, DNS:public-www3-at.test.tiaa.org, DNS:public-wwwlegacy-at.cefconnect.com, DNS:public-wwwlegacy-at.nuveen.com, DNS:public-wwwlegacy-at.nuveenglobal.com, DNS:tclifemgroupat.tiaa-cref.org, DNS:tclifesolutionsat.tiaa-cref.org, DNS:www-beta.tiaa-cref.org, DNS:www-beta.tiaa.org, DNS:wwwat.tclifemgroup.com, DNS:wwwat.tiaa-cref.org
X509v3 Certificate Policies:
Policy: 2.16.840.1.114412.2.1
Policy: 2.23.140.1.1
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/sha2-ev-server-g3.crl
Full Name:
URI:http://crl4.digicert.com/sha2-ev-server-g3.crl
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
Timestamp : Dec 19 15:02:39.983 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:80:50:A7:FF:53:3E:86:C0:B8:75:75:
50:FB:48:3A:C1:B4:DE:37:48:66:4C:F0:59:05:26:FD:
92:E4:CC:98:06:02:21:00:D3:9C:30:90:71:6F:E2:B4:
24:0B:C7:65:93:CC:E7:AF:75:03:F5:EC:AC:28:04:CB:
AE:CF:60:45:A0:2E:68:6B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : ED:3C:4B:D6:E8:06:C2:A4:A2:00:57:DB:CB:24:E2:38:
01:DF:51:2F:ED:C4:86:C5:70:0F:20:DD:B7:3E:3F:E0
Timestamp : Dec 19 15:02:40.044 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:74:5E:DE:93:9A:C1:72:55:17:56:05:29:
44:E0:5C:05:A0:29:0A:75:CC:11:47:B5:AA:4B:B7:88:
F8:85:FC:F8:02:21:00:82:E7:74:43:63:BB:0F:EC:86:
53:CF:F4:8E:97:C5:07:33:4A:C1:64:37:FE:FF:C9:CE:
CB:48:56:A8:D4:D7:C3
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Dec 19 15:02:40.061 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:F5:47:6E:F3:E7:AC:55:6F:D3:42:6C:
D0:73:B1:CB:CF:3F:AF:0D:20:B0:01:18:DE:BD:68:35:
8D:B9:AC:67:3F:02:21:00:91:8F:88:56:F3:8C:6C:09:
B1:D8:D0:D4:41:6B:77:3A:9C:7C:62:78:ED:9D:80:D8:
C9:8F:34:61:83:87:06:57
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
90:df:d8:04:2a:96:3a:9c:e5:65:50:78:88:2f:79:af:20:5c:
d3:2b:43:e0:06:32:95:94:91:bb:97:36:2e:c0:7d:3b:a6:5a:
fd:b1:cb:18:9f:cf:4a:c4:cb:7d:b5:de:53:44:61:41:fc:8b:
4d:87:c0:91:45:02:fc:29:58:2b:10:09:b8:f6:f0:13:bf:a9:
93:0e:81:d0:d9:2f:56:c4:dd:27:38:83:00:ee:ac:73:98:09:
6b:ca:aa:1c:96:a1:24:33:88:35:5d:f1:82:3d:67:91:04:c8:
11:91:73:4b:7c:70:9b:27:14:22:cf:bc:4f:23:38:96:7a:03:
21:77:f0:f6:51:17:22:0a:a8:bb:f9:da:85:f6:30:7f:68:07:
ee:e7:01:08:5d:2c:ec:51:4c:9b:f0:f3:e4:5b:fc:da:a1:91:
74:3e:4b:1c:4f:51:70:64:ca:db:15:75:a2:ba:0a:d1:3e:ed:
8b:73:51:e9:ab:8b:3d:c3:27:51:e8:9a:85:34:b1:d1:18:66:
89:85:7e:eb:76:05:ae:4b:5b:85:12:2c:5e:0b:02:78:02:98:
f4:1f:87:2a:40:6f:04:d9:29:4a:8a:22:ed:9b:9b:ed:2f:d7:
e1:fe:aa:5e:b5:0f:7d:1e:84:81:a5:17:62:df:00:81:75:26:
06:0c:5c:9e
