AWS ELB2.0

HTTP/1.1 403 Forbidden
Server: awselb/2.0
Date: Thu, 13 Feb 2025 11:06:26 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive

nginx

HTTP/1.1 302 Found
Date: Thu, 20 Feb 2025 07:35:25 GMT
Content-Length: 415
Connection: keep-alive
Server: nginx
location: https://signon.staging.publishing.service.gov.uk/oauth/authorize?client_id=41ca225af6c04216b652fe290e7c7aed4b077253db9a586b3953950b2fdea740&code_challenge=R-c524Ov0BFtcl1a9odE6gX6f9gPi5uc2lpFXc9I7SM&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fdraft-origin.staging.publishing.service.gov.uk%2Fauth%2Fgds%2Fcallback&response_type=code&state=14e2905c6b0c11f26b5c737f60ab2f5850fcfbee03836f28
cache-control: no-cache
set-cookie: _govuk-authenticating-proxy_session=TBSYXrmLRKU61%2F0dGwRdnOY9E2L5h%2Bihaufc%2FrIGa4LRZUfZL4Dc0xB4KRSvnF1i9fKN1cgwmJH0hBNExyYhHd%2Bpz6ANGfjYKfbiRT%2Bm7i6IFyrX1jxs3RfRjY2bCtncnOIgrn5W01k6jJkrNXtQPzOe1c5VciT3Nxo%2F6YVqyLGuxk1WThLgA1iMc3zIGaOoB%2FmclueyvZsJYyG%2BKuZa4zQsDZDLF%2F1ahuJPZ2r%2FmFZ3k8vTct38VUK3jfrUfT6C%2Bxd3U7lAMVXwcP7Yq4TlcOv6ZVAjBw3AvvQbjNQ9spDb3zZs1iLj0DSzM4AFHPEvPhxk13JV7fzzTEepy6YbrgSoQiIetraJ1qtnA5sUh2x3Lj3BmshjUeaopLVAZJ0nUotjbxk%2Ff7Y45DPFvCym1PkFgvjn3tiSKj%2BTedNPGu2cXvfe5InwXNIzdIvoLTzmmIKxc7qexit58hnJ%2B17cR1crkkf07rOlO49915hEuhJblFIT1k61sDLyFwVupIShp0P7rwY%2BcbbWXUCFjfaEhwIhbv2AtOtzREHYDZwhBSZlkMSYYeh8nySBX%2BMpI97dZHuyRsAxfw8yLoMwBbqK9Sfc4r472mIItYPIL6NPTcQTMDBQ013M6VzS1Zrp4LISKSN28kF5MAmMgO56ckGtdkt3xrtiJER2h5aFMhC%2F3pAweKWTozkTfXKYlP8NIr1vVo8wglzcjvv%2BY4%2BGnLuu0O0DKV1VtUc%3D--JrIHNdnMj2SBlnke--j6Tgu2D63NOKoZd5RB5uAA%3D%3D; path=/; httponly; samesite=lax
x-request-id: 61f7556c-21ce-4e2d-9035-2cd5a4d7aabf
x-runtime: 0.001525
Strict-Transport-Security: max-age=31536000; preload
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ef:94:5d:6c:03:21:62:13:3d:d1:05:51:60:6c:bb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Feb 10 00:00:00 2025 GMT
            Not After : Mar 12 23:59:59 2026 GMT
        Subject: CN=*.eks.staging.govuk.digital
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:e0:0e:9d:2d:cd:2d:41:de:d2:af:14:89:
                    38:39:3d:ea:31:f8:22:98:c1:e8:17:bd:68:0d:34:
                    99:d2:82:65:1a:bb:2b:f7:24:61:10:e9:fa:9b:62:
                    6f:c3:69:b5:f6:14:29:3e:f7:b4:58:e5:4e:22:18:
                    d7:9d:d9:c4:2b:da:39:b3:f6:be:0e:13:3a:50:3e:
                    9f:0f:c6:43:b7:56:ef:57:f4:f3:c7:10:92:2c:5d:
                    39:66:7d:a0:fd:e6:1b:97:6f:da:65:0c:2c:a1:27:
                    12:df:2d:06:55:20:de:9e:68:09:7a:b2:e6:c2:31:
                    d2:f5:8c:73:d3:a4:be:e0:12:87:95:3e:78:8c:d4:
                    ea:4d:b1:fa:6a:b1:ef:4f:62:2b:c3:37:24:12:34:
                    bd:24:5e:c4:ad:34:e5:f2:63:75:52:25:03:21:ef:
                    4f:63:cb:22:70:0d:43:0d:e3:5b:74:3a:60:c3:3a:
                    70:18:5b:c7:6b:d8:77:bf:a2:e1:e7:48:0d:2b:a7:
                    15:d4:6c:99:82:b1:6c:fe:03:0b:11:c9:62:0a:37:
                    47:eb:51:c9:23:3c:09:e8:49:5c:ef:9a:fd:11:a7:
                    1d:f1:f4:3e:2e:1f:d0:a8:32:23:7c:91:87:48:66:
                    f5:eb:a8:42:18:d9:2d:9e:d7:39:21:c9:54:90:ef:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                40:40:ED:48:3B:EE:28:04:59:78:E7:0E:E7:53:FB:E2:33:53:3A:64
            X509v3 Subject Alternative Name: 
                DNS:*.eks.staging.govuk.digital, DNS:*.staging.publishing.service.gov.uk
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Feb 10 01:31:31.859 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:21:4F:F0:06:31:6B:F6:AF:0D:03:F2:2E:
                                9F:38:E7:38:4C:E8:7E:46:81:33:79:AA:30:5D:AB:4F:
                                82:B9:15:C6:02:21:00:CD:3E:49:47:16:99:16:0E:BE:
                                E5:93:5D:D9:74:DE:B9:7F:5C:B0:2F:3D:73:9B:39:C9:
                                36:7B:FF:DB:14:7E:93
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Feb 10 01:31:31.923 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E9:9C:A5:3B:07:85:80:FB:5E:04:3F:
                                CB:21:A0:86:A3:F6:EE:04:32:19:EB:7F:4E:58:71:F3:
                                74:07:A8:B1:AB:02:21:00:C6:CA:50:43:E4:87:2D:AA:
                                7F:74:E0:B1:9C:1C:6B:47:F6:67:B1:3D:D3:D0:1D:08:
                                91:E3:A8:8C:9A:F5:8E:57
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Feb 10 01:31:31.937 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5A:E4:51:92:24:CD:95:74:C3:C8:89:2D:
                                DF:CD:FD:06:76:D8:68:25:51:FE:30:AB:CE:50:1A:B6:
                                D7:EC:9F:17:02:20:59:3F:F1:9E:D2:10:49:5D:83:66:
                                46:F4:D6:46:D0:BF:D4:FF:2C:76:A0:55:C6:A0:47:92:
                                F0:B3:AC:C3:04:2F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6f:e3:99:10:f8:9c:e7:60:f3:b1:2e:fa:f0:5b:35:37:5b:17:
        25:78:3e:7d:ec:78:59:50:33:d7:db:8a:fc:ae:2e:0d:4c:82:
        ff:10:81:9a:db:6c:42:a2:7a:16:44:c9:d4:61:39:b7:02:e1:
        88:e2:ce:1a:12:69:e0:24:bc:01:46:8d:b5:fc:1e:9b:84:fd:
        39:64:72:04:f6:26:17:86:f9:17:68:4c:1d:f9:bf:ef:45:95:
        0b:07:7a:b5:81:0f:1c:33:33:87:77:a8:d2:bb:46:60:12:80:
        b0:81:63:57:51:78:cf:d7:ec:9f:40:f2:25:56:bb:f8:1c:29:
        aa:7a:cf:89:47:a3:50:97:72:56:27:49:f2:34:54:15:3d:9f:
        87:e9:84:d2:4d:9a:3f:43:c2:a3:d8:80:4c:f7:bd:fd:98:81:
        15:e0:a7:e8:09:3c:23:b2:10:a5:ec:a7:23:1d:be:08:4d:64:
        cd:b6:66:79:bb:c5:8b:78:72:6f:4f:ae:3a:0b:f7:b8:97:27:
        be:c1:86:25:34:17:d9:7e:d9:45:c1:5d:6d:95:25:5f:0b:9e:
        19:81:d4:cb:86:6c:b9:95:ca:d5:b3:98:b2:7b:d0:a9:9c:18:
        01:67:90:98:c5:82:cd:38:f8:43:2b:6a:a5:5b:a0:7f:3b:4f:
        85:7f:9d:52