HTTP/1.1 403 Forbidden
Date: Sun, 19 Jan 2025 10:47:35 GMT
Access-Control-Allow-Headers: origin, range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: session=-,INT-391918928,-,-; HttpOnly
Server: JuJu
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Connection: keep-alive

nginx

HTTP/1.1 403 Forbidden
Server: nginx
Date: Fri, 17 Jan 2025 20:01:32 GMT
Content-Type: text/html
Content-Length: 548
Connection: keep-alive

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e0:ab:78:f9:64:27:e8:24:59:23:72:59:41:3a:6c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Mar 15 00:00:00 2024 GMT
            Not After : Mar 14 23:59:59 2025 GMT
        Subject: C=DE, ST=Nordrhein-Westfalen, L=Bonn, O=Deutsche Telekom AG, CN=*.main.px.t-online.de
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:c8:16:5f:51:e8:5f:05:02:3b:73:25:e4:eb:11:
                    21:2b:37:d7:c7:20:c6:52:eb:9c:b3:c4:e3:36:53:
                    2d:69:e2:bd:fc:66:61:6a:16:d6:68:b9:da:05:6c:
                    61:a0:41:d2:8b:53:0f:43:5d:b2:27:12:21:38:67:
                    9a:ae:26:6a:cb
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                F2:CB:70:D8:75:7A:DB:44:64:F9:C0:26:DB:70:F7:E6:B4:A0:E8:EA
            X509v3 Subject Alternative Name: 
                DNS:*.main.px.t-online.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Agreement
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 15 09:03:34.880 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E8:97:A9:6E:BC:94:01:4B:72:67:90:
                                30:BB:5B:22:4A:A1:C4:1B:33:82:7B:6B:EE:D5:45:16:
                                01:4D:C1:BE:F8:02:21:00:B3:20:80:3E:A2:73:02:29:
                                24:FC:A9:D1:E2:88:E0:8D:52:A0:DC:62:81:21:A2:8C:
                                3C:40:CF:3D:25:0D:6E:2B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar 15 09:03:34.944 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A1:F9:28:A6:F5:26:BE:C4:E4:4C:23:
                                1B:40:81:66:80:CB:75:E5:E4:D8:B6:70:C8:5F:75:76:
                                77:D9:0C:A5:BE:02:20:20:6C:E8:D7:0B:0D:88:9E:36:
                                1C:A3:BF:44:E8:B5:56:67:B6:AA:80:68:00:65:E1:83:
                                9F:0A:AD:A6:E3:3A:1B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 15 09:03:34.967 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:87:34:33:80:2D:4E:A4:A9:22:C5:50:
                                CE:23:26:86:A4:70:3E:D2:1B:CD:C6:49:4B:87:EE:15:
                                99:C8:35:78:20:02:20:39:5E:D1:D4:49:22:77:21:E5:
                                CB:FD:05:66:BB:3D:32:59:68:68:57:6F:A0:51:B6:E0:
                                32:8F:2B:0A:F4:7C:74
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b6:66:da:d9:cd:0d:52:e6:2b:07:f4:c7:3c:86:88:4a:5f:de:
        85:90:d7:19:95:89:65:cb:bd:b5:a1:a8:b7:91:bb:53:44:a3:
        fd:da:fd:93:99:05:9c:5f:56:0b:db:5a:27:77:b3:d3:03:bb:
        f2:a8:f2:c0:4d:3d:10:62:10:1f:33:43:bf:66:83:9c:e9:67:
        e6:69:ce:33:a6:de:e4:78:fa:29:04:9d:1c:74:07:f6:60:b8:
        57:23:67:f8:12:e2:47:99:89:ec:29:d6:83:24:93:a4:6f:49:
        64:dc:1b:12:6c:26:01:14:52:8a:fc:f8:ff:43:27:be:20:a3:
        f6:e1:ae:c9:a9:b2:ea:a5:bc:17:09:48:c2:a4:01:77:1e:73:
        48:17:06:17:96:55:54:54:80:fa:ef:61:c7:58:73:bb:0c:62:
        dd:a7:39:59:dc:8f:c4:fb:e7:0b:c0:94:63:b1:e4:40:f9:aa:
        91:f0:ea:de:8d:77:e3:b7:31:5b:8b:b3:5a:61:9f:26:00:14:
        d8:c4:8c:fc:2f:96:6c:e9:b1:c4:13:c5:44:b4:72:16:34:03:
        ac:74:54:a2:19:eb:17:79:1b:32:04:b0:1f:67:18:e4:15:a3:
        11:d9:1a:e7:d8:2c:95:99:58:05:53:1c:89:8d:ab:3e:95:ac:
        9a:1a:6c:f9