HTTP/1.1 403 Forbidden
Cache-Control: no-cache
Content-Type: application/json
transfer-encoding: chunked
Connection: keep-alive

HTTP/1.1 403 Forbidden
Cache-Control: no-cache
Content-Type: application/json
Content-Length: 97
Connection: keep-alive

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:00:02:7a:a7:96:3b:34:fc:ac:6a:07:92:00:01:00:02:7a:a7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: DC=com, DC=amazon, DC=ant, CN=Amazon.com InfoSec CA G3
        Validity
            Not Before: Jan  1 16:06:20 2017 GMT
            Not After : Jan  1 16:06:20 2018 GMT
        Subject: C=US, ST=Washington, L=Seattle, O=Amazon.com Inc., CN=*.us-east-1.cs.a9.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:80:cb:a9:e4:5c:8c:d8:17:17:d9:0a:65:e0:3c:
                    c5:b3:0e:70:64:51:10:34:f6:b8:51:d0:67:1a:fc:
                    52:64:be:6f:05:f6:25:4a:5d:e5:b0:77:88:f4:56:
                    1f:91:35:87:0f:47:4f:7f:e1:5b:01:29:0f:b0:52:
                    a7:4f:9f:e5:52:50:72:32:75:49:b3:86:bc:5f:f5:
                    11:1a:8a:90:0a:e3:43:a4:ee:ea:c8:25:89:6f:98:
                    e0:4e:bd:f8:0d:b3:a0:d2:a4:8c:26:fd:27:0c:9e:
                    3e:65:68:f9:9f:0c:59:48:2d:6b:6d:98:d8:28:b7:
                    a1:81:81:ab:e1:e0:04:93:ec:bd:aa:d1:d7:62:1e:
                    59:54:d8:e0:ba:6e:79:82:ec:b2:c1:74:87:5a:d5:
                    48:59:c3:3f:47:c6:5b:a2:f4:26:02:e2:81:77:4e:
                    c0:53:2e:85:4f:42:90:fc:5b:7b:cd:41:e9:ac:9f:
                    a6:a7:59:96:bf:a5:38:33:4d:af:53:08:6a:f5:12:
                    c3:0b:c9:12:0c:8f:68:ca:01:bb:95:63:72:97:22:
                    ea:a4:34:79:e0:15:59:53:b1:8a:02:c4:9c:e7:d0:
                    ae:be:bc:3a:13:34:7c:e2:2a:14:48:c2:95:bd:3f:
                    41:79:78:17:59:f2:f1:42:f5:3f:ab:9c:83:fb:b7:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                DNS:*.us-east-1.cs.a9.com
            X509v3 Subject Key Identifier: 
                3D:45:F3:A0:06:6C:5B:9A:1F:83:C3:EA:82:C7:40:8E:3F:4B:DD:C8
            X509v3 Authority Key Identifier: 
                82:5A:69:A8:49:9D:64:CB:14:36:B3:61:5B:93:71:A7:F0:11:C8:0C
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://pki.amazon.com/crl/Amazon.com%20InfoSec%20CA%20G3.crl
            Authority Information Access: 
                CA Issuers - URI:http://pki.amazon.com/crt/Amazon.com%20InfoSec%20CA%20G3.crt
            X509v3 Key Usage: 
                Digital Signature, Key Encipherment
            Microsoft certificate template: 
                0-.%+.....7.....A...(.../...W..#....~...
..d...
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
            Microsoft Application Policies Extension: 
                0.0
..+.......0
..+.......
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b3:d6:c8:53:61:94:1a:15:1d:1f:22:eb:74:10:98:3b:17:09:
        1e:8b:7e:f7:08:ae:07:2b:7e:77:64:99:01:1d:d2:01:c0:3a:
        69:f3:53:be:c2:47:2e:54:08:89:8e:c1:73:b5:c0:eb:e4:f2:
        72:70:06:0d:20:60:bb:b4:ca:32:60:6c:c1:0b:0d:b9:eb:5c:
        4d:b0:f9:75:64:b2:60:0a:6f:d3:c7:86:19:b0:84:91:2b:92:
        e2:cc:d4:47:06:27:a3:2f:bf:c5:14:a6:3a:77:4d:2e:29:95:
        ab:80:42:58:13:7f:6a:a8:45:e2:da:7e:c8:66:d6:af:73:9e:
        46:f1:88:0f:2c:65:ec:14:1b:45:e2:f1:16:2a:96:7c:51:b3:
        e5:44:b7:4d:99:4b:bb:21:56:ca:b3:03:f4:75:58:b8:fe:89:
        b6:f6:d8:db:7e:69:45:8e:58:2a:20:7a:f9:61:20:a1:fb:ee:
        04:bf:27:41:11:9a:3c:80:e8:e4:22:1b:55:8a:09:53:c9:23:
        67:56:08:f0:08:01:93:5d:91:c9:a5:d6:d0:6f:b2:06:a9:60:
        2f:69:58:fa:b7:ed:cf:29:a7:fd:a2:9b:56:4c:4d:ea:3a:dc:
        79:1a:bc:1d:36:17:d7:ce:d3:f9:ae:58:70:34:01:60:bd:d8:
        00:a2:08:53