HTTP/1.1 403 Forbidden
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Set-Cookie: JSESSIONID=E8B4E09748122807007C151A23CB9742; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Length: 0
Date: Thu, 14 Nov 2024 10:03:53 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1c:cd:c9:26:eb:76:49:10:2f:84:ca:ec:05:b0:38
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Google Trust Services, CN=WR3
        Validity
            Not Before: Nov 11 09:39:46 2024 GMT
            Not After : Feb  9 10:10:05 2025 GMT
        Subject: CN=nextgen-sso-stage.icp-cfh.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:ef:25:4b:94:3f:22:6e:73:e9:86:a5:1a:
                    f1:b0:fd:a2:31:22:74:c4:37:70:c0:84:64:52:20:
                    bf:23:33:8c:36:85:6b:54:f4:a5:8d:c2:b8:2e:d5:
                    0b:e6:23:a7:20:14:6c:7f:5c:87:f3:26:de:14:a2:
                    74:25:6f:27:86:1b:f5:38:c7:9b:98:f9:38:12:db:
                    a5:1c:43:2f:d9:ea:49:d5:77:84:4d:97:31:fc:25:
                    c9:5f:a4:e6:60:5d:70:3f:45:f4:bf:2d:c5:77:75:
                    32:75:3d:c0:ed:71:eb:ae:6f:99:32:c6:a3:74:07:
                    88:6d:0a:39:e9:16:10:41:ed:ab:46:00:eb:df:39:
                    36:36:5e:d3:de:7a:f6:3b:35:6c:f2:eb:60:b7:9c:
                    d2:84:e3:39:01:5d:3f:b6:0f:f1:47:9c:4f:4b:b0:
                    20:c5:2b:90:f1:8b:7c:6c:c0:61:56:f2:89:fb:87:
                    ce:0e:08:2a:7b:03:59:1a:15:80:6a:4b:ed:17:d1:
                    05:50:76:01:05:e4:26:ad:7d:b0:3c:a7:8b:f4:4a:
                    6f:f3:55:1e:9a:c9:ea:7a:ac:43:d0:3b:3c:97:0e:
                    7f:86:77:c8:41:56:92:bb:70:79:89:3a:e0:cf:35:
                    41:4b:51:15:64:17:f8:c4:86:80:07:74:2a:bb:a6:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                E0:68:18:54:C4:6C:8D:24:FA:92:86:84:0A:52:18:BD:B2:A6:15:52
            X509v3 Authority Key Identifier: 
                C7:81:F5:FD:8E:88:D9:00:3C:4D:63:A2:50:31:24:A0:CE:23:FE:23
            Authority Information Access: 
                OCSP - URI:http://o.pki.goog/s/wr3/YBw
                CA Issuers - URI:http://i.pki.goog/wr3.crt
            X509v3 Subject Alternative Name: 
                DNS:nextgen-sso-stage.icp-cfh.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://c.pki.goog/wr3/EHVLGGRafuE.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Nov 11 10:39:47.213 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:7F:4A:97:29:80:8D:FD:2F:DD:A5:B9:20:
                                D5:20:CF:84:94:BE:17:F9:61:A0:43:50:28:92:19:89:
                                DF:C7:A1:0A:02:20:32:2E:3B:9A:3A:6B:65:6B:76:5C:
                                84:56:58:7E:56:2B:3C:FE:F4:9C:53:49:9C:23:64:C7:
                                8D:2B:A0:6C:A8:98
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Nov 11 10:39:48.234 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:46:E6:D1:B3:55:ED:82:C3:43:9F:4A:64:
                                86:18:A2:B0:25:F3:0B:83:8D:88:90:DB:03:12:17:7A:
                                EE:E2:6E:FC:02:20:75:05:FD:84:DC:C7:8A:ED:4D:52:
                                53:EC:A5:29:EF:2F:B2:38:8D:10:EE:B7:B4:1B:C4:72:
                                6B:08:CF:6D:B2:45
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8c:1b:34:73:59:2f:7b:7e:e6:bb:20:ff:56:df:64:de:c4:2b:
        23:56:0f:61:5c:2e:e0:1d:c1:02:9f:42:3e:e8:ff:bd:a1:18:
        4c:2a:01:7c:e0:1e:fc:b4:06:74:3f:1c:50:fa:19:47:a9:37:
        d8:d2:b8:78:e7:48:74:85:06:62:51:ba:da:dd:b3:5a:93:59:
        b1:3c:d4:95:54:a6:cd:ab:5b:ef:2f:a4:50:69:0b:00:42:70:
        d8:6c:79:13:72:73:c3:c3:fe:95:25:44:d2:60:c4:1e:20:62:
        a1:94:9b:4a:ab:ea:df:37:f0:f5:93:e2:50:a8:1d:7f:17:60:
        5f:c2:cd:92:41:8f:06:59:6a:60:93:85:04:a1:cd:51:e8:51:
        ca:60:2a:b5:c3:4e:b7:ad:e1:2e:db:0f:94:a0:2e:f9:86:a6:
        76:00:61:9f:98:0a:60:25:e6:c0:88:d8:35:46:a6:b4:b2:fa:
        43:03:4e:62:c4:2d:4d:bd:ef:fc:64:e8:4a:92:50:04:95:5d:
        7d:2a:1b:6f:8e:22:d9:5a:89:8d:a9:39:6c:0b:25:c9:4a:dd:
        13:10:6e:c0:eb:a6:e5:48:ae:d0:49:85:99:49:3e:ff:63:7e:
        e8:5c:26:5c:b0:3e:88:94:83:77:41:68:12:3f:11:2f:4b:a3:
        b7:e6:95:7d

-Connection closed by server.

''