HTTP/1.1 403 Forbidden
Date: Sun, 09 Mar 2025 20:55:48 GMT
Content-Type: application/json
Content-Length: 45
Connection: keep-alive
x-amzn-requestid: 1eba1f1d-2586-4ca4-9066-398cdac08792
access-control-allow-origin: *

HTTP/1.1 401 Unauthorized
Date: Fri, 14 Mar 2025 23:41:06 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 381
Connection: keep-alive
server: istio-envoy
strict-transport-security: max-age=31536000; includeSubDomains
www-authenticate: Basic realm="Authorization Needed"
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: brightspot-frontend-verify.dei-qa.svc.cluster.local:80/*

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f3:48:e9:3b:01:bb:19:44:7f:f0:f7:79:25:3e:3c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Aug 25 00:00:00 2024 GMT
            Not After : Sep 24 23:59:59 2025 GMT
        Subject: CN=origin.dei-qa.lower.k1.amazon.brightspot.cloud
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:b1:b1:cf:c8:ba:c5:84:ef:6f:71:ab:81:
                    ea:c2:ea:b4:93:d6:26:e0:20:8b:87:a5:17:94:ca:
                    e0:25:92:33:00:fe:a3:b9:5c:14:f6:69:7c:94:2c:
                    a2:65:35:18:85:ca:71:f1:a5:9c:e3:eb:0c:80:ef:
                    b5:0a:ea:80:a3:91:c2:dc:99:54:e0:c4:2f:25:41:
                    ce:ec:df:e0:ad:80:9d:af:d9:2c:8e:ef:a4:78:7e:
                    61:1f:b2:57:fe:39:f9:2c:8d:0d:15:75:82:ca:08:
                    85:4c:b2:f9:58:01:f2:b9:29:4b:a9:14:b5:aa:23:
                    8a:14:fc:1a:ef:54:01:87:32:15:18:9a:b0:80:f2:
                    37:7f:8b:ac:db:95:13:3f:e9:ed:06:4f:8c:b0:7a:
                    d1:1b:6f:1e:e7:92:01:f0:93:2c:dc:19:a3:47:05:
                    3c:bf:3b:72:88:e3:bd:f8:44:f6:8c:d8:e9:97:43:
                    90:3d:fd:af:17:f2:bb:aa:05:c1:e2:25:c2:2d:d9:
                    47:ae:11:c4:c4:bb:40:61:f4:29:62:bf:16:3c:21:
                    a1:2f:41:e3:75:27:62:3c:15:41:64:0f:1a:6c:05:
                    da:13:f6:72:10:98:1a:36:d4:6b:19:d1:ae:b5:45:
                    a7:d0:6e:3b:c7:cf:9c:4a:b9:fb:c1:a7:b0:54:f9:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                53:47:A8:1E:B8:08:F1:28:EE:83:3B:0C:FA:CB:47:67:8E:B3:98:78
            X509v3 Subject Alternative Name: 
                DNS:origin.dei-qa.lower.k1.amazon.brightspot.cloud, DNS:static.dei-qa.lower.k1.amazon.brightspot.cloud, DNS:verify.cms.dei-qa.lower.k1.amazon.brightspot.cloud, DNS:*.cms.dei-qa.lower.k1.amazon.brightspot.cloud, DNS:*.origin.dei-qa.lower.k1.amazon.brightspot.cloud, DNS:dei-qa.lower.k1.amazon.brightspot.cloud, DNS:cms.dei-qa.lower.k1.amazon.brightspot.cloud, DNS:verify.origin.dei-qa.lower.k1.amazon.brightspot.cloud, DNS:*.dei-qa.lower.k1.amazon.brightspot.cloud
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Aug 25 01:28:42.391 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:47:52:2F:B1:3C:67:8B:9B:CD:28:75:5A:
                                25:86:0E:28:61:28:64:C3:6B:FC:19:5F:3D:BA:EC:DC:
                                EE:A0:EB:78:02:21:00:9C:36:5D:C4:D2:E6:AF:9A:1A:
                                16:4B:FD:53:99:34:80:C4:92:F8:9B:57:49:F8:4D:E1:
                                6A:46:B5:69:25:A8:8E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Aug 25 01:28:42.327 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:7C:2E:36:18:FB:2B:3F:0D:30:83:A5:0A:
                                07:F5:9F:75:5D:46:CD:55:1A:AB:9B:8F:70:03:38:16:
                                82:C8:9F:0F:02:21:00:91:A3:56:C7:FF:51:24:BA:65:
                                65:69:4E:D9:B6:33:17:47:09:EF:72:B8:9D:99:39:75:
                                18:4C:13:4F:AA:D8:8F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Aug 25 01:28:42.348 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:03:0A:98:C4:9B:87:3C:29:DC:33:4D:84:
                                8E:6C:CD:44:C2:DD:3C:2C:BA:E6:9B:07:CB:A2:DF:2A:
                                F5:5B:05:23:02:20:17:07:69:EE:06:C3:B6:15:9A:02:
                                10:AD:D5:FC:35:5A:43:CE:74:70:98:26:12:B4:E8:6F:
                                51:58:CE:97:6C:DF
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        84:09:0c:34:06:49:10:e2:bf:2c:84:d5:5a:06:8a:d9:c5:c4:
        48:b9:1b:7c:8e:db:62:76:54:ef:f2:df:b6:2e:fc:31:4d:4b:
        8f:bf:00:bc:7e:7e:1f:4b:1b:b9:d6:e5:9f:48:61:0f:f0:e6:
        ed:da:93:77:af:6e:fb:73:9d:e0:89:97:d5:f6:9e:fc:86:84:
        1f:06:e5:a4:c2:61:06:b5:a8:02:0a:bb:10:9f:7c:4f:1f:3e:
        e5:af:91:83:6b:8e:3e:9b:76:55:a7:bf:f5:35:7d:8a:15:4e:
        53:13:94:71:f6:82:6f:a0:ce:4e:ec:94:e3:7b:dc:87:77:4e:
        37:9e:b4:c6:be:4f:76:0d:a8:ea:7d:0c:6e:28:93:6f:ef:d8:
        3a:00:87:dd:d3:01:89:3f:03:57:19:4a:68:3a:9a:0a:36:70:
        31:8a:f6:46:2d:29:f3:d8:2f:06:7d:5f:8b:93:44:3c:30:bd:
        22:ea:31:96:a8:3a:0d:47:65:5a:3f:3e:a4:79:b3:f6:c1:27:
        27:78:de:31:76:bf:4f:2b:f0:e8:4f:e4:5e:17:8e:32:7c:38:
        5a:7e:25:bc:fc:e4:46:fb:18:2f:80:f9:49:54:7a:c4:20:8c:
        a3:9f:c4:c8:45:20:cc:3e:47:14:45:d1:1f:e0:db:2d:d4:57:
        b8:b8:b6:88