HTTP/1.1 200 OK
Date: Thu, 02 Jan 2025 11:02:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'
X-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'
X-Webkit-CSP: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: text/html;charset=UTF-8
Server: Microsoft-IIS/10.0
Set-Cookie: CFID=6716856; Expires=Wed, 15 Jan 2025 19:57:08 GMT; Path=/; Secure; HttpOnly
Set-Cookie: CFTOKEN=4a5cff7e84b795b9-FFE9B8E9-C91E-E000-8C80ACBE5983D84B; Expires=Wed, 15 Jan 2025 19:57:08 GMT; Path=/; Secure; HttpOnly
Set-Cookie: JSESSIONID=E0B0CC12E97A09CA148B9B01FF8A6C9D.cfusion; Path=/; Secure; HttpOnly
Content-Security-Policy: script-src 'self' 'nonce-BUIZ0B1ciKtUNc2ma/znrvv7UpqBJMUpTNKsspl+OOo=' https://cdnjs.cloudflare.com https://connect.facebook.net https://ka-p.fontawesome.com https://kit.fontawesome.com https://www.google.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.gstatic.com https://code.jquery.com https://cdn.jsdelivr.net https://www.youtube.com https://static.doubleclick.net
Content-Security-Policy: style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://ka-p.fontawesome.com https://kit.fontawesome.com https://www.googletagmanager.com https://fonts.googleapis.com https://code.jquery.com https://cdn.jsdelivr.net
Content-Security-Policy: font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://kit.fontawesome.com https://ka-p.fontawesome.com
Content-Security-Policy: img-src 'self' data: blob: https://d1fe59plg962r3.cloudfront.net https://d162s0cet9s8p8.cloudfront.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://fonts.gstatic.com https://i.ytimg.com
Content-Security-Policy: frame-src 'self' https://td.doubleclick.net https://www.google.com https://www.youtube.com https://www.facebook.com https://player.vimeo.com
Content-Security-Policy: connect-src 'self' https://analytics.google.com https://ka-p.fontawesome.com https://kit.fontawesome.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net
Content-Security-Policy: object-src 'none'
Content-Security-Policy: frame-ancestors 'self'
Content-Security-Policy: form-action 'self'
Content-Security-Policy: base-uri 'self'
Content-Security-Policy: report-uri 'self'
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: geolocation=(), microphone=(), camera=()
X-Frame-Options: sameorigin
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Date: Tue, 14 Jan 2025 19:57:08 GMT
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cc:e7:b4:ae:c2:05:53:c2:e5:05:6c:fa:26:ef:cc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
Validity
Not Before: May 31 00:00:00 2024 GMT
Not After : Apr 19 23:59:59 2025 GMT
Subject: CN=*.tuitionrewards.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c8:77:a4:d4:dd:01:e2:36:41:2e:a3:d4:c9:e2:
b2:0c:39:b2:74:a3:d7:f7:b5:8a:97:03:45:c8:40:
d6:32:c1:33:1d:63:14:e1:75:cf:50:d4:73:f1:af:
51:7e:22:82:99:ec:56:e1:8e:21:4e:45:b0:b6:70:
2a:84:91:6c:c3:32:0c:cf:04:fd:0e:47:25:88:d2:
f3:fb:b4:09:f2:3e:8a:87:72:e0:66:a4:49:68:cc:
a9:b0:70:8d:8b:f0:5e:bf:7a:72:62:48:0a:c3:3f:
36:d0:5b:0b:fc:c3:a2:a2:5e:a8:83:82:bf:67:1d:
a1:98:1a:e7:9e:78:97:cc:c9:2b:17:1b:d3:8f:6a:
6d:13:56:2b:cd:24:22:8a:3b:2e:40:fe:5b:76:dd:
ef:d6:b8:95:73:a6:86:83:9c:5d:a9:41:a9:cc:41:
f4:35:33:14:9b:c3:41:3f:83:14:53:88:a5:93:0e:
e9:0f:95:fc:c4:67:1d:11:b9:73:6a:44:10:b4:c1:
64:72:1b:cf:57:62:14:0b:17:70:72:53:b7:bc:d7:
63:26:31:8f:e3:ba:17:08:e3:92:69:58:26:c6:f4:
45:b8:5d:8f:d0:35:63:b6:cf:b7:18:b4:3d:f1:13:
1b:59:f5:cf:42:83:e0:4b:51:28:e6:c2:a3:b6:80:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
X509v3 Subject Key Identifier:
88:04:64:00:D5:31:D1:79:38:B1:BE:BD:12:E8:EF:83:F6:BA:D4:09
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
Authority Information Access:
CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com
X509v3 Subject Alternative Name:
DNS:*.tuitionrewards.com, DNS:tuitionrewards.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : May 31 11:13:53.157 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:65:79:3E:F8:28:1E:D2:5A:DD:D8:90:BF:
78:19:3A:AE:7E:A1:51:79:99:1F:06:E7:46:3A:E0:4A:
03:65:37:22:02:20:6A:72:E6:B2:8E:AF:44:23:AA:0A:
12:51:BF:53:76:74:7C:D8:B6:77:FE:AB:14:5C:09:F7:
51:42:6F:7D:D7:2D
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 31 11:13:53.079 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:C2:E2:B2:19:23:63:06:0B:E9:F2:0E:
00:66:ED:35:D1:AF:46:F1:D2:6D:1B:DE:05:08:EE:86:
17:AB:A9:74:80:02:21:00:80:84:D1:24:15:AE:B7:38:
91:8A:3C:10:5D:4B:FF:F0:B8:1C:55:0F:73:A2:B2:A5:
30:E5:9E:5A:F0:93:12:11
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 31 11:13:53.050 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:AD:2C:31:85:FA:04:8F:74:15:52:F3:
CE:B5:44:BD:11:56:89:CC:0F:79:3C:CD:6E:C8:15:7E:
3C:5D:F2:85:22:02:20:35:3F:92:1B:AF:E3:53:3E:39:
5F:9B:A0:94:1C:4F:5B:88:6E:F4:B6:5C:9E:B5:96:DC:
38:81:09:A9:2C:67:A6
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
40:c7:3a:df:b4:ef:46:93:ae:ae:32:a4:8c:72:b1:c1:37:c3:
d9:aa:25:7f:01:5c:e4:55:57:2c:25:ec:bc:c8:4d:2b:2e:0f:
a7:83:36:59:a9:72:dc:69:1a:d8:14:94:00:2b:8a:f7:3a:50:
86:4a:a3:38:79:a3:2b:4b:38:e6:8c:01:75:9b:de:31:2d:13:
4d:8c:38:e3:3d:43:bf:3d:73:e2:7b:83:29:37:ae:14:cf:18:
f4:a2:25:ee:ba:75:ac:3d:c7:79:f5:5e:67:a9:b9:97:f0:1e:
d8:e3:33:5b:d1:13:ab:ea:d3:84:5b:ba:07:45:a8:e9:34:11:
8a:5a:91:cb:b4:ea:fc:6a:1d:cf:d5:bf:36:b3:c7:89:da:a0:
dc:8f:cd:35:28:68:ed:8e:40:e3:62:47:dd:6b:99:62:79:b5:
73:01:d1:9e:64:e3:0e:d2:d7:ec:e4:65:47:d7:bc:b4:c1:40:
3b:de:e3:17:7b:cf:65:7b:d9:7a:74:11:f5:3a:e3:0a:f7:66:
13:68:8a:29:1f:b4:49:90:2b:04:7a:91:28:42:25:b5:b6:3e:
06:cd:50:ed:8f:53:fb:c3:aa:10:d1:03:9d:50:8a:e8:10:5f:
81:be:04:30:8d:67:f8:52:5f:7d:95:2f:1a:31:7d:d0:52:8e:
46:ee:1f:cd