AWS ELB2.0

HTTP/1.1 403 Forbidden
Server: awselb/2.0
Date: Fri, 28 Mar 2025 01:07:51 GMT
Content-Type: text/html
Content-Length: 520
Connection: keep-alive

Trade-off Tool for Sampling (TOTS) | US EPA

HTTP/1.1 200 OK
Date: Tue, 01 Apr 2025 08:06:06 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 41510
Connection: keep-alive
Vary: Accept-Encoding
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Cross-Origin-Resource-Policy: same-origin
Etag: W/"a226-18e43537a00"
Expires: 0
Last-Modified: Fri, 15 Mar 2024 18:15:28 GMT
Origin-Agent-Cluster: ?1
Pragma: no-cache
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=31536000; includeSubDomains
Surrogate-Control: no-store
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-Vcap-Request-Id: 8dc6301a-878a-4016-57c9-caa4155aa386
X-Xss-Protection: 0
X-Frame-Options: SAMEORIGIN

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:08:90:3f:dd:97:e3:a0:41:04:d9:fb:5c:b7:43:f0:c2:7a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb 13 19:21:19 2025 GMT
            Not After : May 14 19:21:18 2025 GMT
        Subject: CN=tots.epa.gov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:1a:b5:e9:34:37:e4:78:8f:ad:16:51:93:
                    b9:a4:5e:ff:ef:36:01:2d:36:bc:5b:80:4a:cb:d2:
                    ab:63:37:62:49:90:c1:40:e9:db:14:6e:28:35:1e:
                    16:e2:5f:a3:be:69:30:c2:6e:59:58:4d:8a:c1:b0:
                    9c:93:c0:2f:d4:33:d6:b1:bb:86:15:7b:68:1d:8f:
                    db:93:6f:f0:bd:52:1a:0c:8b:72:6c:e9:09:ed:8f:
                    65:b3:24:78:1c:a5:c5:27:bc:02:33:5d:d6:ce:26:
                    73:76:33:6e:41:b3:03:3c:7c:d8:81:c0:ab:04:3c:
                    cb:be:01:33:58:b9:fd:69:ef:15:2f:56:0a:17:9c:
                    49:64:cb:29:80:6c:82:67:1d:05:cf:97:7f:47:82:
                    11:c3:97:23:84:60:a5:73:65:b6:43:e3:e7:8a:8b:
                    92:3f:c6:5c:86:87:9d:86:c3:b1:6c:08:c9:1e:b3:
                    0c:1d:10:12:e3:5c:15:bf:a9:29:da:61:c8:b9:d9:
                    83:b9:73:dc:f0:8a:75:d7:09:36:8c:68:8e:cc:1d:
                    23:03:32:23:03:38:47:90:de:6d:b3:d2:ee:64:21:
                    9c:8a:60:62:ef:54:ef:42:7f:88:dc:85:de:8f:c0:
                    76:52:b7:c6:32:bf:14:3f:a5:d0:56:ee:29:65:40:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                C9:2A:AB:81:F0:B9:15:7A:48:BC:78:9A:A1:22:55:C0:9B:AF:82:A2
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:tots.epa.gov
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Feb 13 20:19:49.197 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D2:CB:D6:2D:A2:91:76:82:48:B9:A6:
                                18:27:7D:0A:3B:8D:1A:AE:D6:FA:29:45:E3:3C:EF:8A:
                                E7:59:A4:12:2C:02:20:06:3D:C7:4E:B8:23:E5:54:23:
                                0C:31:AC:4C:F6:1A:50:FA:7A:ED:15:53:0E:8D:1A:DD:
                                52:76:03:DB:05:C9:A9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Feb 13 20:19:49.208 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:62:FD:47:D7:D3:D3:37:7E:9A:DB:42:06:
                                1C:9E:B1:A1:9C:CB:8B:25:16:18:B2:B2:1A:A4:E5:BF:
                                64:C4:FB:A9:02:21:00:FD:85:52:85:A4:A6:DA:76:A2:
                                B6:15:26:8E:CD:BE:AD:7C:4B:6B:94:1F:90:2E:D3:DD:
                                3C:3D:5D:99:54:4B:1C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5a:42:93:44:da:48:4e:5c:64:ea:99:83:3e:35:54:76:33:8c:
        1b:c7:aa:c8:65:3e:93:c5:7c:0d:14:d0:6a:20:d8:e8:78:6f:
        03:72:9e:b6:52:9a:1e:51:7b:7c:99:b0:c4:6d:c0:ca:ac:a8:
        db:bd:75:ab:4a:00:1a:9a:c5:14:2a:b6:97:fd:82:e5:1f:0f:
        6a:79:7f:ed:ff:9a:f3:82:63:2f:87:8d:26:53:b8:dc:b7:2d:
        34:aa:73:b0:f4:c4:be:3d:62:97:47:33:bf:cb:f6:8d:a1:ae:
        ce:4d:97:f2:88:e9:c4:9a:ac:1f:89:d8:81:9f:76:53:e2:4d:
        94:cb:52:f7:a5:53:bd:af:bf:c3:4d:56:15:d8:47:6c:4d:45:
        73:ae:dc:d9:94:ae:70:93:9c:f9:42:f9:f6:b9:a8:0f:6e:d6:
        69:72:73:eb:e0:29:54:c9:ca:78:0a:53:af:41:59:0e:0e:52:
        55:c3:2d:95:fd:1b:48:86:8a:b8:47:8f:7c:2c:2e:c1:12:09:
        3e:d5:c4:22:e6:49:6c:5a:82:10:1f:64:ad:44:95:29:a7:54:
        84:18:32:fc:de:3d:7a:ce:16:31:bb:84:2d:03:b0:37:a2:3a:
        3f:ea:03:33:1e:36:85:bd:8b:68:19:74:19:c7:29:e2:11:65:
        d2:bb:87:04