Istio Service Mesh

HTTP/1.1 403 Forbidden
content-length: 19
content-type: text/plain
date: Mon, 28 Apr 2025 05:00:12 GMT
server: istio-envoy

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:84:ec:ff:7e:f0:64:32:ee:10:32:e5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018
        Validity
            Not Before: May 10 13:21:05 2024 GMT
            Not After : Jun 11 13:21:04 2025 GMT
        Subject: C=BR, ST=SAO PAULO, L=SAO PAULO, O=NU PAGAMENTOS S.A. - INSTITUICAO DE PAGAMENTO, CN=*.nubank.com.br
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:bf:2c:bf:c9:8b:f5:c2:92:9a:c9:33:7d:fc:fb:
                    4f:88:77:8a:11:9b:98:0e:4b:f4:58:35:31:fd:cd:
                    6b:14:7b:3a:8d:d6:d1:0c:ed:49:99:f3:1d:15:10:
                    fe:7f:79:63:ca:67:89:c1:a5:86:16:1e:f3:a3:65:
                    d3:07:eb:cf:16:c0:6a:1b:53:e4:ca:6a:01:3f:15:
                    2b:7c:4c:dd:20:e4:0f:32:17:f7:e6:99:24:0c:06:
                    a9:72:75:fc:7d:0a:01:cb:4a:01:3c:85:76:7f:df:
                    5a:e4:1b:90:48:b2:e8:ba:3a:f2:fb:5d:98:55:d1:
                    64:f4:06:e5:df:97:01:cb:50:7f:3d:f8:72:1a:5a:
                    6e:b3:90:65:4d:76:52:3a:5e:2a:b9:46:64:21:59:
                    1b:2b:06:6e:3d:a9:56:f1:72:88:21:21:8d:f6:8a:
                    b2:0b:bd:dd:fc:8c:d3:99:85:7f:a8:52:c9:8a:8d:
                    ad:b6:4a:32:cb:5d:16:3f:f5:29:dd:14:ae:2c:8a:
                    e6:df:3d:98:bb:0f:af:03:c6:7a:f0:09:78:f8:7a:
                    6b:5f:9e:99:21:5a:15:69:73:a2:60:59:8b:a9:88:
                    0a:8d:3c:c5:f3:2f:ff:b2:68:a6:58:62:b6:c5:ae:
                    49:04:de:d8:09:0d:dc:af:db:a0:a2:18:9c:e1:ef:
                    96:bc:3c:b1:98:c4:0d:4b:59:ce:5f:d0:93:1c:35:
                    4b:6a:0d:7f:b0:c8:3c:1f:11:43:43:4d:33:56:7f:
                    7f:0a:47:9d:1b:ba:00:a0:dd:ed:50:78:c1:fe:fa:
                    ad:3f:65:06:a6:97:71:e3:e0:53:32:eb:f1:a4:54:
                    58:e0:0f:0d:de:79:d1:ab:b3:41:22:ef:f9:2c:a6:
                    3d:e6:d6:8a:39:11:1a:39:a9:ff:b4:62:bc:03:ac:
                    60:d6:b7:3c:b2:9c:46:b6:0b:ec:57:81:f6:26:c7:
                    93:28:c8:a8:84:0f:b8:fa:f9:20:80:65:a1:fc:b9:
                    78:5f:5a:bd:c4:18:f8:0e:88:b2:cd:41:b7:11:96:
                    03:48:56:b4:00:93:fa:3a:77:21:06:e5:26:33:7a:
                    76:51:1b:1e:76:ea:b4:20:f4:1e:af:81:40:b0:f6:
                    8b:89:d7:73:1b:50:1e:b3:08:99:42:c5:cb:e2:8b:
                    56:09:ff:5e:6b:77:be:7a:c2:2f:9f:08:0a:69:b7:
                    1d:9c:8c:3b:58:f8:e7:5a:29:c0:5c:46:0d:b5:ea:
                    2e:32:71:da:86:94:8a:96:29:6c:8d:dc:da:c1:e0:
                    37:16:4e:3b:06:02:79:de:02:04:09:3c:8d:42:26:
                    0d:68:3c:55:28:cb:5b:98:92:d5:e1:73:56:ad:bf:
                    62:22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
                OCSP - URI:http://ocsp.globalsign.com/gsrsaovsslca2018
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.2.2
            X509v3 Subject Alternative Name: 
                DNS:*.nubank.com.br, DNS:nubank.com.br
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                F8:EF:7F:F2:CD:78:67:A8:DE:6F:8F:24:8D:88:F1:87:03:02:B3:EB
            X509v3 Subject Key Identifier: 
                49:C4:11:27:51:DD:15:19:2B:1B:F4:2A:47:23:A3:82:0E:09:38:2F
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : May 10 13:21:07.356 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A6:67:6B:48:7F:F6:9D:2B:11:05:87:
                                92:39:84:52:77:0A:57:58:AC:71:6C:1E:57:A5:E6:03:
                                28:D2:46:85:9F:02:20:1E:F5:9B:69:02:E9:47:A6:C9:
                                E3:C3:24:2D:C2:65:C3:20:2B:23:D5:05:93:8D:27:F1:
                                4A:27:C7:9A:41:45:6F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : May 10 13:21:07.254 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:05:D9:27:CD:C5:7A:BE:CB:B3:D3:40:1A:
                                42:3D:9E:A6:46:6D:A5:3E:7A:2D:3E:98:2A:BA:16:9F:
                                0F:9B:3A:B8:02:21:00:F6:48:F8:DF:F3:39:BC:36:D1:
                                19:C9:89:74:29:FD:F5:8B:86:F5:56:28:FC:22:32:23:
                                BC:DF:2E:12:F6:F5:39
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : May 10 13:21:07.627 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:78:B2:7B:0E:69:0C:78:17:E0:8C:FA:59:
                                A5:7F:00:6C:BE:07:5C:BB:CB:E0:01:A0:AF:E3:BC:02:
                                A3:F3:BD:8D:02:21:00:B8:E3:EC:69:A4:F5:43:0E:38:
                                A4:8B:07:60:82:9E:3A:76:27:8E:BB:0A:81:A0:12:73:
                                E1:42:84:60:5A:0E:A3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        50:f3:93:04:8b:74:16:17:6b:ed:f4:c8:d6:92:78:86:95:5f:
        3e:b0:e8:d5:e6:b3:ed:d6:f6:74:f1:16:d2:64:6a:d3:ee:76:
        3c:0f:f2:b6:69:86:b2:81:55:20:40:e4:a2:8c:f2:7d:e9:54:
        da:64:6c:bc:ee:4c:bc:ba:44:a5:d0:05:9c:26:ae:a2:fa:e8:
        91:b1:53:da:f7:29:27:bc:cd:82:99:bf:d3:dc:ba:61:3a:1c:
        8e:ba:29:27:f9:da:58:4c:8a:a3:1c:14:f4:38:9c:13:63:6d:
        76:46:3a:18:02:bb:d0:19:dc:78:85:be:5c:a1:59:07:fe:b6:
        7f:b3:f3:3d:f3:fc:f0:ec:90:90:e1:1a:17:22:81:e8:31:44:
        7a:3e:0d:3e:6e:93:3c:5f:61:6d:74:2e:3b:20:e4:95:e2:c2:
        db:b1:40:4d:ed:0f:bf:26:0f:22:0f:83:67:6c:88:d5:8b:ea:
        21:26:0e:bc:4c:fe:00:af:0c:67:74:60:75:47:8b:b1:f8:80:
        d6:10:0f:87:51:97:1a:d9:56:f2:6a:c4:0e:28:89:e2:94:2d:
        72:45:66:b6:a9:92:32:2d:19:0f:9d:d5:ea:73:b6:67:29:f3:
        e4:fd:fa:22:20:95:96:6e:19:fc:0d:04:f6:c2:e7:58:11:bf:
        65:6e:2d:a8