AWS ELB2.0

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sat, 26 Oct 2024 16:01:00 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://52.21.130.134:443/

nginx

Roku

HTTP/1.1 200 OK
Cache-Control: private, no-cache, no-store, must-revalidate
Cache-control: no-cache="set-cookie"
Content-Type: text/html; charset=utf-8
Date: Tue, 29 Oct 2024 22:25:00 GMT
Expires: -1
Pragma: no-cache
Server: nginx
Set-Cookie: _csrf=JHTztzjdSj7icP_A5a2mz-3e; Path=/; HttpOnly; Secure
Set-Cookie: ks.locale=j%3A%7B%22language%22%3A%22en%22%2C%22country%22%3A%22US%22%7D; Domain=.roku.com; Path=/; HttpOnly; Secure
Set-Cookie: _uc=15805758-e976-47ad-90b8-b94b61815b58%3Aa3b8b8d4c996435282431d3081eb24bf; Max-Age=31536000; Domain=.roku.com; Path=/; Expires=Wed, 29 Oct 2025 22:25:00 GMT; Secure
Set-Cookie: amoeba=SzRWaGMzUVh5I1Rlc3QsRnZGZmZTRjE4I1Rlc3QsbFY1VkRwalFHI1Rlc3RZLF9tQTM4dmJZaSNUZXN0Z3JvdXAxLHI3OVFRT1NFZyNDb250cm9sLEFkaEhGRDVfdiNDb250cm9s; Max-Age=3600; Domain=.roku.com; Path=/; Expires=Tue, 29 Oct 2024 23:25:00 GMT; HttpOnly; Secure
Set-Cookie: ks.privacy.ccpa=j%3A%7B%22enabled%22%3Afalse%7D; Domain=.roku.com; Path=/; HttpOnly; Secure
Set-Cookie: AWSELB=6B8199BD1A2703FC6BF61FBA4E609AF57F4DC81C00F62357B163E56DE21D8D0BD79F6F3B16DD2F7417A168DC56D96F14F11E5BE0CFDE4EB306ABE390F904A89D40FB2D6AD4;PATH=/;MAX-AGE=300
Set-Cookie: AWSELBCORS=6B8199BD1A2703FC6BF61FBA4E609AF57F4DC81C00F62357B163E56DE21D8D0BD79F6F3B16DD2F7417A168DC56D96F14F11E5BE0CFDE4EB306ABE390F904A89D40FB2D6AD4;PATH=/;MAX-AGE=300;SECURE;SAMESITE=None
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Accept-Encoding
X-App-Version: 1705517839688
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 84967
Connection: keep-alive

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:64:2d:1b:1f:41:69:64:a7:33:5e:29:e6:53:9b:c0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Jul 11 00:00:00 2024 GMT
            Not After : Aug  8 23:59:59 2025 GMT
        Subject: CN=2019.1.7.roku.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:98:67:15:5e:4d:16:72:56:e8:2a:cd:1d:53:e4:
                    12:6e:c6:10:61:ea:40:90:ee:df:72:5a:9e:45:71:
                    d8:d2:bb:97:0e:e8:12:58:52:2f:8a:65:3f:cb:9b:
                    02:11:3a:f8:98:df:37:66:9c:13:34:c8:0a:d3:8e:
                    fa:2f:bf:07:49:51:5f:07:77:3d:30:2d:b9:f2:b5:
                    21:a6:5c:a5:12:b0:0c:39:48:ca:f3:57:ad:26:66:
                    be:c7:86:78:d0:49:e5:58:d9:bc:88:15:22:57:ca:
                    e1:ce:ef:ee:6f:0b:19:03:a6:db:81:cd:3f:99:ae:
                    97:90:41:ed:bc:86:81:9b:1f:c7:53:eb:c0:77:f6:
                    83:af:bf:39:d9:79:d0:4b:50:64:c0:3a:0e:55:38:
                    61:47:36:c9:6f:9c:af:4a:66:5a:af:cc:df:0b:67:
                    33:cb:3f:5d:54:e5:0a:5f:37:f9:38:62:ca:f0:37:
                    62:7a:e1:db:9a:19:f6:66:17:15:28:b3:55:3e:e6:
                    17:c2:8f:9a:39:8b:b9:0c:0a:59:74:d6:b6:08:d2:
                    2d:55:dd:b9:29:09:51:3e:58:f8:0b:87:1e:76:98:
                    c6:09:ce:ef:c0:c9:29:b4:f0:07:21:37:43:76:b7:
                    ab:f3:87:f5:86:8c:e2:74:96:78:61:bb:bb:c6:e7:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                7C:A3:D6:27:25:E5:8B:02:19:05:70:47:DE:5C:F7:CF:DB:3D:5B:5A
            X509v3 Subject Alternative Name: 
                DNS:2019.1.7.roku.com, DNS:channelstore.roku.com, DNS:my.roku.com, DNS:www.roku.com, DNS:support.roku.com, DNS:roku.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Jul 11 05:09:33.459 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3E:C8:D7:E3:93:E2:E5:19:BE:12:A6:CA:
                                5D:64:32:F3:90:80:D6:B3:9E:16:93:FF:F8:BA:2D:DB:
                                83:0E:CF:A7:02:21:00:ED:C1:77:5C:07:85:7A:B4:DF:
                                7E:BE:82:BA:17:47:1C:C8:16:64:12:BA:D3:B2:A2:03:
                                F6:F9:21:FD:02:36:67
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jul 11 05:09:33.534 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:01:3F:82:C8:1B:44:FF:9B:31:7B:6C:9C:
                                E2:11:5A:A8:76:21:82:9F:23:E2:9E:C5:C6:B4:22:02:
                                47:EC:84:A3:02:20:44:77:DF:12:76:D1:5A:7F:55:AD:
                                BB:75:82:DA:38:11:AD:96:2B:5E:9E:0B:F7:A9:B4:C6:
                                E8:EB:B5:45:74:2D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Jul 11 05:09:33.517 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:52:62:EE:7D:1F:E8:A4:E4:50:F0:ED:95:
                                BF:B1:FC:0B:47:BC:65:65:BA:97:78:92:69:15:AF:11:
                                E8:4D:3E:27:02:21:00:93:36:CD:B8:40:9F:B2:5A:90:
                                42:75:B2:AD:36:9C:97:EA:AF:0F:2D:F9:8F:2D:51:5C:
                                E5:E6:AB:B7:D8:6B:FC
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        17:f2:78:0a:06:95:47:68:b4:75:54:76:5f:19:93:37:6f:fa:
        f8:d8:16:1e:15:3a:09:42:80:21:bc:a5:25:06:80:ed:6c:e5:
        41:18:9d:88:bb:f5:d7:7e:a9:8d:7f:51:dd:61:e4:cc:68:7d:
        b6:e0:a9:2b:9f:0c:ca:9f:59:4e:b8:17:25:ac:46:b7:3c:f5:
        3a:dd:2d:5c:d6:0e:2c:bd:36:87:79:9b:ff:51:ce:be:2e:cb:
        0a:48:88:83:a7:80:3c:7a:5a:ec:c8:c1:94:f6:55:d8:32:f0:
        73:d6:f2:0e:bb:6d:79:73:21:6e:93:70:c3:11:88:de:ab:be:
        3c:a3:af:95:7a:c8:b7:f8:cf:2e:c5:87:94:12:70:e6:69:ad:
        93:e2:74:51:f8:a7:01:2b:ea:be:8e:46:e3:3b:9f:57:9c:a4:
        82:2f:9b:c6:f6:51:4e:c3:cd:d9:17:14:76:1d:38:1f:ef:f1:
        b9:b0:d0:40:01:10:b6:a3:d0:df:a3:7f:69:8f:cf:91:2e:72:
        25:4c:a0:5f:34:9a:e5:a4:c0:e8:e2:0a:2e:23:f3:bf:c7:d2:
        70:0d:ee:73:ec:89:92:39:78:75:74:b0:2b:56:88:69:24:a6:
        6b:8b:8f:30:9b:db:a0:e4:e4:71:9e:06:47:71:72:2f:ea:0d:
        72:aa:2b:1a