HTTP/1.1 403 Forbidden
content-length: 19
content-type: text/plain
date: Sat, 29 Mar 2025 08:21:01 GMT
server: envoy

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5a:aa:5b:e9:e3:a1:c1:ae:d5:7e:2b:56:6d:be:7f
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN=Apple Public Server ECC CA 11 - G1, O=Apple Inc., ST=California, C=US
        Validity
            Not Before: Mar  1 14:33:21 2025 GMT
            Not After : May 27 18:59:10 2025 GMT
        Subject: C=US, ST=California, O=Apple Inc., CN=gr-carry-api-video-aapse2a.smoot.apple.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:e3:f8:7f:8f:8d:12:d5:6a:d0:18:d6:db:60:5e:
                    ee:83:df:14:73:d5:4b:ff:35:38:8b:41:02:36:c1:
                    f0:f9:19:ae:ed:e5:31:dc:e2:33:5a:2e:81:31:de:
                    59:6a:76:e9:52:72:38:b3:a7:d2:9d:39:6c:91:1d:
                    a4:06:10:3a:dd
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Authority Key Identifier: 
                85:B5:94:D8:71:82:CE:CE:56:80:B3:AF:35:98:AB:76:4B:6D:AC:29
            Authority Information Access: 
                CA Issuers - URI:http://certs.apple.com/apseccca11g1.der
                OCSP - URI:http://ocsp.apple.com/ocsp03-apseccca11g1
            X509v3 Subject Alternative Name: 
                DNS:gr-carry-api-video-aapse2a.smoot.apple.com, DNS:gr-carry-api-video.smoot.apple.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: https://www.apple.com/certificateauthority/public
                Policy: 1.2.840.113635.100.5.11.4
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.apple.com/apsecca11g1.crl
            X509v3 Subject Key Identifier: 
                55:46:60:C0:CD:F4:D0:FA:EF:B9:DB:00:68:3B:06:96:13:4C:58:4F
            X509v3 Key Usage: critical
                Digital Signature
            1.2.840.113635.100.6.86: 
                ..
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar  1 14:43:22.398 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5D:74:26:74:9B:81:6A:FE:B9:34:77:06:
                                F3:31:75:30:C1:19:9A:68:28:34:B5:23:B2:7B:97:B9:
                                00:72:6E:A2:02:20:10:01:CA:9A:43:84:8E:BA:94:1C:
                                92:A0:15:C1:4A:5C:D7:2E:7F:04:00:B9:25:92:CF:E9:
                                D3:3B:BE:8A:31:F2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar  1 14:43:22.363 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:FA:10:EC:68:76:DE:B7:88:25:38:79:
                                3C:A3:AE:20:34:C8:27:67:82:30:43:9F:61:D7:BD:2A:
                                87:64:3D:64:AF:02:20:2A:C9:80:B5:37:B1:78:11:DA:
                                AB:D5:8F:92:40:A5:C5:46:D7:BE:BE:FE:D9:43:8E:EE:
                                65:4E:B5:8E:BE:36:96
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar  1 14:43:22.374 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C7:83:CC:C7:5A:67:27:7A:D8:B1:00:
                                66:33:82:F9:1E:95:81:1B:B0:24:3B:89:FC:68:5D:38:
                                36:F2:24:F3:20:02:21:00:B5:CE:32:18:EB:43:33:54:
                                65:97:CF:59:7A:E9:32:1A:F5:C3:78:00:4D:E4:33:68:
                                8B:78:BA:A2:FF:08:A1:03
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar  1 14:43:22.363 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:9B:19:27:7D:13:6C:C8:B1:71:1B:26:
                                9C:A2:EA:80:7E:45:7D:B4:C6:C3:76:6F:28:72:2B:E7:
                                DB:E0:D7:6B:FA:02:20:00:D1:91:FA:F1:78:92:30:27:
                                C0:96:EA:0A:B1:47:16:39:28:04:C7:BF:CD:4C:1E:96:
                                F7:5E:AB:CB:77:F3:C7
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:20:6e:77:44:8f:d1:98:1e:8e:3e:ee:c3:2b:84:38:
        99:a1:a7:c5:d7:50:59:f6:98:40:aa:0c:33:f8:6f:94:93:a0:
        02:21:00:a6:8d:50:2c:58:2e:a1:42:27:16:99:00:3d:62:bb:
        02:16:d8:40:3d:84:cf:48:fc:c0:43:b7:ae:2a:6c:49:63