AWS ELB2.0

HTTP/1.1 202 Accepted
Server: awselb/2.0
Date: Mon, 13 Jan 2025 20:48:25 GMT
Content-Length: 2011
Connection: keep-alive
x-amzn-waf-action: challenge
Cache-Control: no-store, max-age=0
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 86400
Access-Control-Allow-Methods: OPTIONS,GET,POST

<empty title>

HTTP/1.1 403 Forbidden
Date: Sat, 25 Jan 2025 18:56:58 GMT
Content-Type: text/plain
Content-Length: 19
Connection: keep-alive
server: istio-envoy
x-envoy-decorator-operation: ancillary-sku-service.ancillary-sku-service-usw2-dev.svc.cluster.local:443/*

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0b:eb:f7:1a:dc:da:a1:9c:03:d8:ae:80:8b:4a:fe:f3:a5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Jan 25 02:08:11 2025 GMT
            Not After : Apr 25 02:08:10 2025 GMT
        Subject: CN=dev.ancillary-sku-service.dev.aws-01.legalzoom.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:66:1b:d9:40:78:6e:26:db:9d:61:71:3e:
                    86:66:33:f2:c2:29:46:d4:54:a1:39:f5:9c:05:be:
                    ca:ac:1d:6a:88:a4:a5:9e:40:95:46:00:80:28:69:
                    72:3e:af:6a:ab:55:76:6e:e1:32:5f:63:37:e5:e1:
                    6b:1a:b0:aa:fc:c9:ac:99:d6:be:27:33:05:5a:92:
                    f1:67:ea:41:33:ec:09:1c:14:c3:5b:6b:eb:f1:47:
                    c1:04:58:ca:82:35:19:b0:a1:33:59:6c:00:87:b9:
                    59:c1:94:0b:89:36:2b:88:81:4d:ab:77:ed:0a:ef:
                    a3:ad:78:3f:1c:47:fb:e6:62:cd:44:8a:f8:d4:cc:
                    be:95:69:38:ca:e4:07:31:a9:d1:7a:b3:42:b7:f6:
                    ed:1f:ea:50:00:93:dc:bc:2e:a9:87:d7:b9:0f:36:
                    80:2f:ed:43:09:31:ea:c8:2c:38:40:a1:d0:d0:2a:
                    0c:dd:74:7c:cb:49:6a:3c:2d:0f:cf:59:44:bd:65:
                    e9:d4:54:ed:2a:9c:43:79:ea:fd:61:6f:8e:2f:92:
                    10:42:13:d2:2b:3c:cb:25:96:3b:de:eb:c4:71:d5:
                    2f:fb:ef:82:48:8d:bd:57:fd:96:d5:d9:2b:c2:6b:
                    44:bf:87:b0:e2:dd:41:83:09:3d:44:59:01:66:f7:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                AC:F4:97:1D:5C:D7:5A:45:4C:B0:ED:DF:4B:E1:36:E2:D6:A7:43:00
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:dev.ancillary-sku-service.dev.aws-01.legalzoom.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jan 25 03:06:41.590 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:85:AF:E0:3A:02:7D:C0:AC:71:08:3E:
                                D1:64:7B:63:50:8F:FB:C2:8F:C0:D9:D4:FD:77:C4:D5:
                                7C:03:D1:A8:7E:02:20:21:20:7E:44:8E:BB:7F:D8:4B:
                                EA:C2:70:18:2D:16:51:5B:FD:39:F5:E4:DA:6E:5F:FC:
                                5E:C3:86:8C:FB:DA:E0
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Jan 25 03:06:41.602 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1B:ED:E0:9C:6F:91:F3:0A:8B:53:2E:08:
                                E9:44:BC:5F:FF:9B:B8:96:E4:B7:D2:6A:5F:FB:11:96:
                                A1:4A:55:9D:02:21:00:D2:B4:C4:14:63:7E:BF:4E:C7:
                                3F:1A:14:33:22:F9:88:BE:0F:57:C6:7A:B2:26:06:BE:
                                48:CD:4C:2A:DE:A9:09
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        50:65:bf:7b:ed:29:e9:39:76:d5:fc:c1:13:81:09:bf:62:9d:
        32:79:1e:e9:c4:31:23:1a:2a:c2:b8:6e:86:76:5e:92:75:8a:
        92:06:4f:9b:cc:00:d6:52:0b:ee:de:87:34:9e:12:ef:bb:4f:
        68:f6:14:bc:ab:6f:1b:5b:e5:9a:d3:51:ea:df:83:0a:75:45:
        5e:1f:82:91:79:0a:6e:30:3f:aa:33:2a:d5:16:cf:f1:67:74:
        22:cf:a2:9c:18:d0:61:14:fc:03:dd:a1:2f:53:16:ce:8e:ae:
        23:3c:a8:24:06:35:7b:0e:f8:8f:08:f4:13:40:c1:92:fd:88:
        b1:92:aa:20:a9:d3:be:45:3b:57:76:16:d5:c0:23:9f:33:26:
        70:67:a2:fc:8f:f2:c3:7e:13:dd:0c:39:4c:8f:fd:c2:d9:1e:
        e8:e8:3d:b3:50:33:18:1a:02:d7:32:4d:9d:07:ae:24:2c:89:
        21:be:fd:e2:6c:c0:8e:4d:03:00:0b:c3:1f:ca:bd:31:f8:f9:
        2d:e6:dd:07:3f:06:bb:7c:ae:b5:a3:af:40:33:92:5a:fa:3f:
        55:18:1f:30:ca:8f:73:23:e5:86:5c:0d:1d:d2:2d:09:dc:14:
        53:33:73:60:cb:81:08:12:89:55:72:43:c1:45:69:76:1a:65:
        d2:92:fa:b1