HTTP/1.1 403 Forbidden
Date: Wed, 12 Mar 2025 20:39:31 GMT
Content-Type: application/xml
Content-Length: 180
Connection: keep-alive
Vary: Accept-Encoding
Server: BunnyCDN-IL1-1029
CDN-PullZone: 749867
CDN-Uid: 17a2c386-d447-4608-a871-05a2e698306e
CDN-RequestCountryCode: US
Cache-Control: no-cache
Perma-Cache: MISS
x-amz-request-id: 0e9162b5e2e31f5e
x-amz-id-2: adXluM2s0bhxvZ3e6buE=
Strict-Transport-Security: max-age=63072000
CDN-ProxyVer: 1.19
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 403
CDN-CachedAt: 03/12/2025 20:39:31
CDN-EdgeStorageId: 1235
CDN-Status: 403
CDN-RequestTime: 1
CDN-RequestId: fd822761d10030568318ba03303ab87a
CDN-Cache: MISS

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:46:a3:12:71:82:5a:7f:0c:29:38:03:3d:05:22:86:3d:02
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Feb  9 22:11:08 2025 GMT
            Not After : May 10 22:11:07 2025 GMT
        Subject: CN=media.kzfr.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:d9:58:49:3a:fd:d5:47:7a:04:c1:65:bd:
                    50:77:b8:e8:57:3f:72:39:0a:88:b1:71:df:36:99:
                    65:8a:09:e2:24:bd:bf:c1:fa:11:15:f7:a1:1e:e5:
                    84:c0:b7:46:7d:8c:16:69:8a:f0:5e:02:8a:81:38:
                    6c:c8:c2:5a:75:9b:5e:85:49:0f:4c:27:5a:bd:4c:
                    e9:13:d3:08:73:5c:7a:2a:30:23:ac:52:e5:e6:6a:
                    cd:dc:6c:7f:b0:45:4c:f1:86:d6:6b:b9:00:af:76:
                    a2:a7:d8:34:6a:aa:be:da:59:09:c4:7c:9b:fd:5f:
                    f4:dc:b5:f6:b2:e7:49:7c:b0:66:23:53:db:5c:84:
                    65:1d:79:3b:fe:14:85:23:4d:61:76:ad:e5:2e:d5:
                    44:10:93:14:94:97:27:85:5b:33:24:ca:43:c6:39:
                    e5:a9:fd:c0:bf:f5:04:a9:d3:1f:df:74:d2:6e:4c:
                    bb:7b:7a:52:ec:5d:82:6d:18:07:e2:fd:dc:24:55:
                    6f:8e:ea:fc:37:ed:c4:9b:fe:8e:c4:2e:22:7b:b6:
                    56:04:2f:71:12:cd:65:5b:5c:92:9b:00:e8:96:fd:
                    77:16:89:4f:fe:58:0e:5b:86:54:29:76:a6:72:4b:
                    24:cc:51:01:4e:3b:53:8f:ac:2c:f6:5b:d8:f6:d6:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                99:C5:60:60:66:B0:C7:97:CA:54:B5:DE:FA:46:33:49:63:E9:C7:AC
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:media.kzfr.org
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb  9 23:09:38.422 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:87:D2:D5:0A:E1:F6:83:C7:BB:38:55:
                                ED:D8:33:7B:1D:38:60:6A:A4:77:99:CA:98:BD:61:88:
                                A5:FF:EB:5F:2A:02:21:00:DA:EB:3C:00:8C:B5:92:CA:
                                A8:11:E3:BC:76:8D:1B:F8:0D:71:61:05:00:83:06:EE:
                                BA:40:41:D5:9A:22:C4:B0
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb  9 23:09:38.712 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:90:9C:EC:28:2D:43:68:66:0A:1D:99:
                                31:BA:42:2A:1C:D1:4E:64:42:1A:F6:06:BE:C2:1C:D1:
                                EE:B0:34:75:B9:02:20:45:F4:92:BD:5F:D5:6A:50:3C:
                                AD:43:52:AE:9B:B1:82:3E:82:78:2F:FB:B6:07:D3:26:
                                F1:E6:8A:9B:98:32:B7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        68:61:d1:7a:58:14:3e:3b:e4:fd:c6:a7:3b:18:f2:a6:3a:70:
        9d:f8:18:76:13:eb:81:b5:0d:01:2c:ee:0b:18:92:22:8b:3f:
        03:16:2d:8b:c1:49:52:63:2f:53:ea:c1:33:61:12:3d:3a:8d:
        78:6b:15:39:0c:28:60:5c:de:99:04:20:21:fe:97:8b:dd:22:
        2f:fa:de:84:7c:e8:58:a5:e1:24:89:0b:d9:a7:86:b5:22:75:
        9e:92:34:7b:21:94:cf:05:e2:8a:66:4b:79:02:c7:37:f6:48:
        e9:4a:3e:8b:b4:50:82:16:a5:81:6c:4e:ba:3b:c8:94:32:29:
        69:b7:2e:a7:9c:c0:5f:ca:df:90:11:2c:7f:15:43:fc:9d:5a:
        37:52:a4:12:e8:ae:18:d3:af:2d:20:e3:50:2f:89:88:cc:3e:
        e6:fe:78:6a:19:bf:0d:e4:b3:25:58:26:63:0d:4c:c4:18:8d:
        67:71:c5:7a:8b:73:e2:02:37:fd:26:82:d1:47:31:1f:ba:36:
        ed:39:4b:1b:ba:6b:27:1e:c4:48:3f:0c:86:67:f6:c9:5a:6c:
        cc:50:14:64:60:bb:5f:88:9e:d7:4c:d2:c9:80:d1:b3:15:de:
        89:9a:05:e8:15:bf:79:24:ff:16:99:de:6e:dd:1d:35:70:be:
        f2:23:7c:1f