HTTP/1.1 403 Forbidden
Date: Thu, 20 Mar 2025 12:17:01 GMT
Upgrade: acme-tls/1
Connection: Upgrade, close
Content-Length: 101
Content-Type: text/html

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2d:f3:d1:ae:01:f9:43:40:d2:28:f3:6c:20:aa:53:70:84
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Mar 13 20:03:53 2025 GMT
            Not After : Jun 11 20:03:52 2025 GMT
        Subject: CN=amalfi2.fortiddns.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:02:df:41:13:5f:7e:27:0c:8c:ac:c6:0d:
                    0b:f8:66:7a:70:55:51:8c:bf:06:a2:d3:76:e2:7f:
                    ae:d7:3d:14:59:48:b1:e5:b2:24:d6:dd:ac:0e:66:
                    5c:00:f5:49:f0:f1:5a:42:80:7c:fb:41:ee:6c:99:
                    f9:55:8e:49:95:ac:36:cd:10:bd:8f:d5:a5:76:82:
                    6e:55:d7:38:b5:11:0f:8d:40:df:79:d0:20:5e:3f:
                    4f:91:ae:a5:76:79:66:92:09:fc:94:59:d2:78:33:
                    c7:77:e4:03:f3:83:49:39:8e:d7:dc:be:14:0d:b5:
                    e0:35:d5:31:55:24:f8:cf:55:05:3e:63:8e:00:70:
                    d5:ac:6e:e0:5d:12:9e:10:18:63:5e:db:4e:1c:15:
                    d0:d2:50:98:70:d7:eb:61:f6:13:a7:c9:aa:8b:93:
                    53:7a:1c:15:ba:89:e2:97:54:b3:45:da:58:ce:51:
                    c6:a1:aa:30:b8:d8:5e:d7:a3:e1:10:d0:ca:86:4a:
                    d8:fb:58:8e:9d:71:e9:66:db:86:20:42:e0:00:1a:
                    ca:c1:9b:e6:31:02:95:f0:b1:24:63:8a:ab:40:86:
                    8f:b2:23:0c:06:b3:75:36:96:e9:53:1d:94:8c:75:
                    4b:0f:06:9a:18:84:e2:73:1c:30:e4:44:38:37:0a:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                5D:6A:05:F8:57:71:C5:18:0C:8E:B8:1D:3B:17:4E:40:64:72:3A:EB
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:amalfi2.fortiddns.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://r10.c.lencr.org/5.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 13 21:02:23.935 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:31:4F:73:B5:00:A0:B2:AB:55:3E:18:D0:
                                30:6A:3B:2E:DA:1C:23:79:57:AD:CB:39:F4:0A:71:C8:
                                AB:C6:CF:B2:02:21:00:E8:87:C9:F7:AC:70:6B:83:62:
                                DE:3A:AC:DE:6A:78:80:5F:93:88:A4:45:AB:67:F0:BF:
                                33:F1:25:A3:76:5D:FC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar 13 21:02:24.050 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C8:40:68:FA:62:58:AE:BC:4E:47:93:
                                A5:11:4D:40:4D:7D:11:E3:3D:6A:B4:06:4A:FE:F7:70:
                                C8:E2:7A:E4:72:02:20:1B:F6:FF:DF:7C:51:D3:5F:B5:
                                17:7A:36:0B:3C:EA:74:66:90:75:1C:8B:07:A3:0B:1C:
                                14:45:67:FE:32:C2:DF
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3c:0a:3c:34:48:b7:68:10:a4:3c:6f:45:c6:c0:aa:e7:db:29:
        a4:ff:ae:d0:8a:bb:18:9e:47:70:2d:8e:13:bc:91:a7:97:87:
        f8:61:14:a3:cb:5d:35:e7:48:44:9d:79:c0:69:a6:4e:bc:0f:
        f0:e1:09:60:31:bd:c0:ca:a8:06:b9:a9:04:05:55:2b:02:1d:
        98:d8:a9:8b:19:db:a0:c9:2b:cf:8b:3d:10:f0:8d:50:4d:f4:
        7f:e1:1b:72:e4:c0:3d:02:4a:68:7f:52:c6:26:0a:73:d1:a8:
        26:2e:cd:77:22:56:f0:02:cb:38:50:59:d5:02:b9:9e:67:87:
        4c:97:4e:2c:55:ae:5f:b4:b1:1a:21:d9:02:62:39:c7:ae:25:
        d4:32:a2:d7:e8:b1:56:db:c5:84:64:0f:01:1b:86:cc:62:6f:
        7f:81:96:28:9b:63:ea:fc:5a:91:96:93:f6:f9:83:65:54:88:
        8b:d3:82:32:5f:f4:18:e1:78:ce:79:40:21:c6:94:4a:70:07:
        c5:3c:dd:ee:74:53:65:d6:bc:cd:06:66:35:0e:19:59:dc:e8:
        06:b3:9b:27:b3:65:7f:97:4c:65:c9:16:ea:18:63:b9:0b:c8:
        2f:1b:53:91:81:08:a8:bf:f9:83:79:2a:1b:81:e6:9d:66:0a:
        d6:97:43:4d

FortiGate

HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/html
ETag: jzw35kmn0pqHb6g4bHr5kHnzg9ktkdm5
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=15552000
Date: Sun, 09 Mar 2025 12:25:08 GMT
Connection: keep-alive
Transfer-Encoding: chunked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:db:0d:44:ea:32:c1:bd:c3:c8:f2:3a:95:c7:36:67:e8:af
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Jan 12 21:01:46 2025 GMT
            Not After : Apr 12 21:01:45 2025 GMT
        Subject: CN=amalfi2.fortiddns.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:b3:f9:dc:41:36:f7:f1:92:82:e0:1f:35:
                    ce:e3:5a:5d:8f:5c:f8:38:ee:4d:63:c8:1f:5e:97:
                    72:50:17:5d:54:83:ab:85:6b:8e:a1:3f:1c:60:79:
                    1c:5d:4c:02:3c:30:43:ae:61:89:95:7a:46:e1:70:
                    78:9a:60:a8:f3:b7:c0:85:2b:77:f0:4d:62:7a:8a:
                    c4:9b:6a:f4:89:63:c2:25:bb:ec:fc:83:d1:c3:d7:
                    15:8c:a9:2d:05:5c:17:de:7b:6b:cc:10:bc:00:4d:
                    ed:57:56:82:61:f2:76:6b:6e:fc:70:7d:97:7d:ca:
                    a8:1a:c6:bd:74:11:53:c0:ce:b2:7f:34:ba:50:49:
                    fd:3b:54:61:7e:65:3d:72:74:2d:7b:b4:d8:62:1b:
                    a7:49:aa:84:91:84:a8:0e:4c:5c:8e:f1:b0:b9:96:
                    c7:18:e2:e7:92:bf:63:c4:f1:39:69:ea:df:61:c1:
                    43:99:7c:3c:3e:4a:54:aa:73:4f:be:96:d3:0e:ff:
                    a8:b3:f8:62:e3:98:02:85:ee:1a:26:0c:b6:2e:19:
                    d6:33:5e:ec:7d:31:bd:4d:dc:65:70:06:b0:22:85:
                    a9:f6:da:a2:f5:7c:07:4b:2b:b0:31:62:e9:be:d8:
                    f0:76:04:09:4c:71:33:d1:05:1a:60:af:d3:60:9f:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                97:56:8B:C6:25:36:8C:13:6A:C1:03:94:F5:57:BB:12:59:36:DA:FB
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:amalfi2.fortiddns.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 73:20:22:0F:08:16:8A:F9:F3:C4:A6:8B:0A:B2:6A:9A:
                                4A:00:EE:F5:77:85:8A:08:4D:05:00:D4:A5:42:44:59
                    Timestamp : Jan 12 22:00:16.358 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D0:DA:AE:71:62:36:3D:1C:94:26:5A:
                                6C:47:23:C9:E6:C5:22:FA:59:7E:FB:47:42:4B:FB:F6:
                                73:23:23:71:0F:02:21:00:A4:96:89:18:9F:35:D3:9F:
                                4A:89:52:C6:EB:15:D9:52:1A:30:23:21:D9:28:3F:F7:
                                75:8D:74:26:43:5C:A0:B6
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Jan 12 22:00:16.544 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5F:5C:F9:04:1B:FD:2E:78:8B:D1:5D:8B:
                                16:3E:59:DF:B4:D4:05:B9:93:D8:52:D8:79:E5:A9:24:
                                25:E8:B5:64:02:21:00:90:24:D7:89:BE:F1:16:35:7A:
                                5A:7E:01:E5:72:77:A7:97:74:A3:FB:1D:51:85:74:F3:
                                E3:88:85:8B:87:B8:EB
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6e:3d:8a:df:b2:13:d3:54:e1:2a:f0:c4:d9:5e:e9:2a:26:70:
        72:05:8d:f3:0a:f2:d7:bf:c6:82:5d:4c:53:5b:c6:f2:b6:3c:
        dd:90:ae:19:9a:1f:17:cd:7e:1b:48:b2:2b:04:d9:7a:3f:5b:
        91:1b:a8:64:7e:b8:fa:00:02:0f:f4:90:78:ed:ed:ae:a4:a9:
        5e:26:26:ed:11:7f:8f:27:d6:0c:c9:f2:88:3b:e0:b3:27:c6:
        14:c2:f7:9f:b7:6b:df:47:d1:d4:85:84:58:7d:98:b9:ba:2e:
        f9:3e:c7:3f:ee:23:ac:5a:6d:cc:28:06:8e:be:9a:3c:38:d8:
        7b:10:b6:df:b5:eb:1b:d7:3d:3e:d8:37:58:b3:70:90:77:9e:
        e9:fd:98:7d:c5:e7:93:88:51:c5:93:a6:39:e8:2c:18:8c:d4:
        5e:44:52:24:9a:ee:61:f8:ba:32:5c:78:f0:6b:01:da:ac:9a:
        8f:02:3e:ba:b0:71:e4:8e:84:9e:39:5a:79:43:82:65:8f:ef:
        a7:b0:d6:dd:7b:e1:dd:94:11:69:b4:8e:5a:00:e1:a2:30:53:
        0d:1a:31:13:cf:51:12:58:9e:c2:fc:d7:23:1e:b5:f0:7a:97:
        49:69:d2:28:0e:f2:0e:41:3a:7b:f8:c3:a1:3c:34:71:c2:e3:
        c0:d4:6e:07