HTTP/1.1 403 Forbidden Date: Wed, 23 Apr 2025 20:30:46 GMT Upgrade: acme-tls/1 Connection: Upgrade, close Content-Length: 101 Content-Type: text/html
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d0:55:84:48:17:7f:12:c4:fd:2f:bb:2e:d7:76:db:d2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R11
Validity
Not Before: Mar 17 11:41:50 2025 GMT
Not After : Jun 15 11:41:49 2025 GMT
Subject: CN=cmt99.fortiddns.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:de:b5:cf:6f:95:a6:d6:51:28:00:43:21:10:f2:
1e:22:2a:1a:f5:e4:d8:1f:e2:db:85:a6:10:11:0d:
70:af:07:be:ba:f0:7c:7f:3f:43:84:bc:30:23:86:
4b:5e:4a:e9:89:5b:3b:4c:29:00:a2:03:1a:0a:1a:
94:a7:58:69:a3:da:e0:74:3c:58:a9:35:50:b0:49:
eb:53:0c:8e:64:36:cd:13:ed:76:d3:21:8a:02:f4:
9b:fb:27:da:c8:0c:5b:ae:32:52:64:b3:26:79:32:
5c:18:ef:87:43:72:f6:a6:a9:bd:35:f6:24:48:3e:
7d:08:5a:0a:7b:c2:53:52:14:c2:4a:2e:7f:d7:a8:
d1:11:db:ac:2f:f9:95:20:a3:96:d5:57:67:39:52:
2a:0d:98:f2:c3:c7:ff:a5:d2:20:cd:c2:0a:e8:c1:
c8:37:53:d3:42:65:a0:4b:04:45:30:49:11:96:c6:
dd:2b:9e:79:9e:8a:ef:a8:41:af:15:4c:e9:bc:60:
e3:bc:43:bf:45:88:7e:53:15:8b:bc:0e:a4:e4:d9:
c6:f7:ab:ef:7e:3d:2c:6d:d4:84:4c:99:5f:2b:53:
cb:77:3d:b3:0f:c7:af:d0:e7:d7:2a:85:f5:91:b6:
89:ce:a5:42:a5:dc:a6:bb:0a:9a:7f:00:56:68:fa:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
4B:09:2A:7D:E1:D6:60:45:FE:62:6C:32:10:50:6A:99:79:C3:16:EA
X509v3 Authority Key Identifier:
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
Authority Information Access:
OCSP - URI:http://r11.o.lencr.org
CA Issuers - URI:http://r11.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:cmt99.fortiddns.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r11.c.lencr.org/123.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Mar 17 12:40:20.897 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:C3:85:84:FB:F8:66:B3:C4:D2:F4:9F:
FF:2B:88:16:43:2E:D2:7F:F2:39:C7:62:7E:6F:77:D8:
56:29:6D:AF:CD:02:21:00:BF:3E:97:86:37:9F:D6:76:
BA:7A:76:7C:28:32:59:6B:B0:A7:AD:96:24:59:3B:91:
A3:25:36:41:09:15:C0:48
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Mar 17 12:40:20.864 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:72:DF:2E:CF:71:2A:09:1A:46:8A:80:D2:
B8:FA:3B:D8:7B:28:11:76:6D:80:0A:A3:EA:D5:E4:FE:
82:17:69:6D:02:20:0C:77:71:0A:CB:88:CC:51:11:7E:
AC:BC:8C:5B:02:3E:F3:BE:13:41:E9:F3:BA:44:D0:30:
B6:B2:29:B7:00:EC
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
8f:b9:32:4c:82:35:72:7f:f8:61:c9:d2:09:7f:08:9e:09:47:
1c:b9:24:93:7f:01:55:e4:69:dc:e5:da:af:67:62:76:da:a9:
42:8b:25:25:35:52:e0:56:35:31:d8:1b:6b:8e:b1:1f:d9:a2:
45:83:33:a5:6e:17:85:2b:66:02:7a:43:ff:5a:af:13:fb:d1:
f7:b3:41:f9:3d:65:ce:af:47:cb:0c:3d:aa:7b:d2:bf:3b:10:
4b:78:d6:fa:01:03:9e:b0:cd:94:c9:cc:2d:e0:8e:a6:07:af:
d9:85:6c:54:f9:af:6d:c2:93:43:4c:cb:86:1a:7e:8e:1c:4c:
7d:c6:40:e1:4d:c9:f4:97:03:da:63:9a:3a:47:b0:22:81:92:
51:8e:4f:15:a9:a9:3c:bb:14:e1:f7:60:e1:34:9f:3e:4e:62:
93:ef:11:94:d5:53:1f:37:38:de:31:15:60:8d:2b:f5:03:13:
2f:c4:e6:97:be:37:0a:0d:43:f7:02:07:5b:92:c9:c1:00:99:
c6:fa:ca:05:b5:e8:33:6e:1b:d4:55:f2:fd:5b:d8:ad:25:2d:
cd:cb:d5:11:53:cf:ae:19:20:21:85:38:7a:26:68:15:a2:f1:
a8:c5:c5:75:c9:57:20:7d:85:fd:d0:54:5b:87:82:b4:e3:eb:
98:b0:39:e7
HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 23:02:58 GMT Server: xxxxxxxx-xxxxx ETag: "83-678558f2" Accept-Ranges: bytes Content-Length: 131 Content-Type: text/html X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https: 'unsafe-eval' 'unsafe-inline' blob:; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d0:55:84:48:17:7f:12:c4:fd:2f:bb:2e:d7:76:db:d2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R11
Validity
Not Before: Mar 17 11:41:50 2025 GMT
Not After : Jun 15 11:41:49 2025 GMT
Subject: CN=cmt99.fortiddns.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:de:b5:cf:6f:95:a6:d6:51:28:00:43:21:10:f2:
1e:22:2a:1a:f5:e4:d8:1f:e2:db:85:a6:10:11:0d:
70:af:07:be:ba:f0:7c:7f:3f:43:84:bc:30:23:86:
4b:5e:4a:e9:89:5b:3b:4c:29:00:a2:03:1a:0a:1a:
94:a7:58:69:a3:da:e0:74:3c:58:a9:35:50:b0:49:
eb:53:0c:8e:64:36:cd:13:ed:76:d3:21:8a:02:f4:
9b:fb:27:da:c8:0c:5b:ae:32:52:64:b3:26:79:32:
5c:18:ef:87:43:72:f6:a6:a9:bd:35:f6:24:48:3e:
7d:08:5a:0a:7b:c2:53:52:14:c2:4a:2e:7f:d7:a8:
d1:11:db:ac:2f:f9:95:20:a3:96:d5:57:67:39:52:
2a:0d:98:f2:c3:c7:ff:a5:d2:20:cd:c2:0a:e8:c1:
c8:37:53:d3:42:65:a0:4b:04:45:30:49:11:96:c6:
dd:2b:9e:79:9e:8a:ef:a8:41:af:15:4c:e9:bc:60:
e3:bc:43:bf:45:88:7e:53:15:8b:bc:0e:a4:e4:d9:
c6:f7:ab:ef:7e:3d:2c:6d:d4:84:4c:99:5f:2b:53:
cb:77:3d:b3:0f:c7:af:d0:e7:d7:2a:85:f5:91:b6:
89:ce:a5:42:a5:dc:a6:bb:0a:9a:7f:00:56:68:fa:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
4B:09:2A:7D:E1:D6:60:45:FE:62:6C:32:10:50:6A:99:79:C3:16:EA
X509v3 Authority Key Identifier:
C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
Authority Information Access:
OCSP - URI:http://r11.o.lencr.org
CA Issuers - URI:http://r11.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:cmt99.fortiddns.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r11.c.lencr.org/123.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
Timestamp : Mar 17 12:40:20.897 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:C3:85:84:FB:F8:66:B3:C4:D2:F4:9F:
FF:2B:88:16:43:2E:D2:7F:F2:39:C7:62:7E:6F:77:D8:
56:29:6D:AF:CD:02:21:00:BF:3E:97:86:37:9F:D6:76:
BA:7A:76:7C:28:32:59:6B:B0:A7:AD:96:24:59:3B:91:
A3:25:36:41:09:15:C0:48
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Mar 17 12:40:20.864 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:72:DF:2E:CF:71:2A:09:1A:46:8A:80:D2:
B8:FA:3B:D8:7B:28:11:76:6D:80:0A:A3:EA:D5:E4:FE:
82:17:69:6D:02:20:0C:77:71:0A:CB:88:CC:51:11:7E:
AC:BC:8C:5B:02:3E:F3:BE:13:41:E9:F3:BA:44:D0:30:
B6:B2:29:B7:00:EC
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
8f:b9:32:4c:82:35:72:7f:f8:61:c9:d2:09:7f:08:9e:09:47:
1c:b9:24:93:7f:01:55:e4:69:dc:e5:da:af:67:62:76:da:a9:
42:8b:25:25:35:52:e0:56:35:31:d8:1b:6b:8e:b1:1f:d9:a2:
45:83:33:a5:6e:17:85:2b:66:02:7a:43:ff:5a:af:13:fb:d1:
f7:b3:41:f9:3d:65:ce:af:47:cb:0c:3d:aa:7b:d2:bf:3b:10:
4b:78:d6:fa:01:03:9e:b0:cd:94:c9:cc:2d:e0:8e:a6:07:af:
d9:85:6c:54:f9:af:6d:c2:93:43:4c:cb:86:1a:7e:8e:1c:4c:
7d:c6:40:e1:4d:c9:f4:97:03:da:63:9a:3a:47:b0:22:81:92:
51:8e:4f:15:a9:a9:3c:bb:14:e1:f7:60:e1:34:9f:3e:4e:62:
93:ef:11:94:d5:53:1f:37:38:de:31:15:60:8d:2b:f5:03:13:
2f:c4:e6:97:be:37:0a:0d:43:f7:02:07:5b:92:c9:c1:00:99:
c6:fa:ca:05:b5:e8:33:6e:1b:d4:55:f2:fd:5b:d8:ad:25:2d:
cd:cb:d5:11:53:cf:ae:19:20:21:85:38:7a:26:68:15:a2:f1:
a8:c5:c5:75:c9:57:20:7d:85:fd:d0:54:5b:87:82:b4:e3:eb:
98:b0:39:e7