HTTP/1.1 403 Forbidden
Date: Fri, 24 Jan 2025 12:08:31 GMT
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
Age: 0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Cache: MISS prod-cache-101.com.tui.plusline.net 82.98.80.198 
Connection: keep-alive

HTTP/1.1 403 Forbidden
Date: Mon, 13 Jan 2025 07:38:57 GMT
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
Age: 0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Cache: MISS prod-cache-102.com.tui.plusline.net 82.98.80.198 
Connection: keep-alive
Strict-Transport-Security: max-age=31536000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4f:9d:53:c5:f6:f0:04:4a:6c:4b:3c:b5:ce:eb:ff
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=Thawte EV RSA CA G2
        Validity
            Not Before: Oct 16 00:00:00 2024 GMT
            Not After : Oct 15 23:59:59 2025 GMT
        Subject: jurisdictionC=DE/jurisdictionST=Berlin/jurisdictionL=Charlottenburg/businessCategory=Private Organization/serialNumber=HRB 321, C=DE, ST=Niedersachsen, L=Hannover, O=TUI AG, CN=tui.ch
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b7:c7:b0:6c:9f:25:02:59:49:30:45:4a:ad:c2:
                    f5:0e:fc:5d:7d:04:bd:4b:ee:69:33:ca:8f:5b:7a:
                    09:9b:73:99:6b:11:dc:51:4d:b0:de:64:85:85:3e:
                    71:2c:bc:6a:f6:f7:c5:f3:22:20:16:dc:76:40:3a:
                    4d:b2:be:88:28:31:9f:98:c4:9c:35:be:92:ed:77:
                    e7:58:23:3f:3a:77:6e:7f:bf:13:06:7d:d3:ee:ed:
                    b3:a8:11:9e:54:33:25:ff:77:5a:1b:e8:b1:61:b2:
                    55:7b:10:1e:9e:52:05:ec:d2:aa:ec:6a:39:33:1c:
                    81:40:c4:b0:4c:bc:fc:3f:a1:2e:a0:a7:df:8c:ec:
                    f9:e9:4e:62:50:bc:8e:35:3d:62:cd:12:5c:09:2d:
                    6f:78:97:96:03:e5:56:a2:79:bf:0f:f4:64:5a:c0:
                    48:cd:3a:2f:59:39:c8:d8:1e:90:20:cb:17:e1:d8:
                    37:8d:33:78:f5:38:34:53:48:e1:10:f8:f5:dc:ed:
                    4b:19:7e:28:37:db:95:a7:c5:94:e4:fb:31:cc:03:
                    c3:3e:7c:92:22:55:b1:c3:d1:b6:21:e1:e8:b2:c0:
                    08:21:e6:6e:ef:22:05:0f:ae:0f:68:fa:1c:01:fc:
                    69:dd:a1:3c:86:b9:f8:5a:4a:e2:7e:72:89:81:f2:
                    08:e6:7d:80:88:31:e2:bb:e5:24:fc:5b:e1:63:b5:
                    ab:69:4f:c0:a9:9d:ba:53:e5:5a:0f:36:5b:b9:bd:
                    47:c0:98:a0:ee:6d:e7:a2:73:a7:10:2c:91:3f:f2:
                    f8:10:f1:39:af:08:41:2c:be:25:3b:46:1a:54:d9:
                    89:75:34:c0:63:59:16:e0:04:3b:fe:41:4a:b7:22:
                    e9:40:ed:2b:31:6f:00:72:4d:d6:7d:48:2f:5a:ac:
                    5d:f7:de:eb:12:7c:6e:9e:09:57:47:e4:fd:98:85:
                    e1:39:45:93:af:dc:a8:0f:79:9e:dc:9e:dd:6c:27:
                    da:8f:19:c6:bc:c6:5a:6c:e7:c8:97:40:06:3f:96:
                    1d:40:30:24:e8:82:54:f6:75:98:59:3b:64:8d:ec:
                    b3:11:7d:80:28:00:70:7e:68:ae:a6:2f:e3:a0:13:
                    da:15:8e:f6:9d:1d:c3:3a:d4:81:fe:ad:7b:9a:b9:
                    49:68:bf:93:70:bb:88:2c:ea:ef:55:89:8a:38:d9:
                    7f:17:cc:16:73:2a:56:e4:d0:30:f2:19:ee:ec:7a:
                    a1:03:6b:43:77:5c:02:d5:f1:c8:a6:ba:55:92:d8:
                    25:34:ce:c2:85:a7:24:3f:0b:b1:a9:a6:a5:22:f3:
                    9c:d1:88:a1:c2:66:fc:62:a2:6e:96:a8:8d:b8:ea:
                    bd:f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                6C:2E:E4:61:B4:C3:B9:BD:F0:CA:AD:A6:C1:68:7A:B8:D4:CC:1D:A0
            X509v3 Subject Key Identifier: 
                FC:8D:71:27:E1:4B:CD:7D:1C:AC:14:18:2C:A9:2F:62:36:55:DB:08
            X509v3 Subject Alternative Name: 
                DNS:tui.ch, DNS:www.tui.ch
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.2.1
                Policy: 2.23.140.1.1
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/ThawteEVRSACAG2.crl
                Full Name:
                  URI:http://crl4.digicert.com/ThawteEVRSACAG2.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/ThawteEVRSACAG2.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Oct 16 08:28:23.986 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:ED:9C:15:AF:A1:1C:3B:77:31:C7:AE:
                                B8:DD:45:80:0B:AD:6E:A4:C7:0D:77:62:D5:D4:A4:73:
                                89:61:CB:76:79:02:21:00:BD:69:61:3F:A8:E4:EE:68:
                                06:12:99:5B:D4:B2:DB:A6:CE:A6:6F:9E:94:9F:2F:85:
                                4B:23:43:A8:96:BC:72:AD
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Oct 16 08:28:23.825 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:FC:8E:6E:A9:74:14:73:48:3F:9A:A7:
                                66:5C:50:37:52:7C:6A:D1:CA:93:63:20:50:F9:DC:EC:
                                FD:C0:AD:DA:DE:02:20:16:2A:70:8A:D1:3E:A2:E8:AB:
                                FD:B3:0E:ED:9A:85:93:5A:B7:8B:BC:3D:57:90:57:A8:
                                2D:A1:86:5C:79:C0:A3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Oct 16 08:28:23.873 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A3:35:D2:BB:B9:0E:80:61:54:AA:03:
                                45:01:74:B6:43:65:87:5B:8F:14:49:13:79:FB:7B:87:
                                74:89:21:12:17:02:20:36:0A:AF:1D:A9:9B:6C:64:4F:
                                88:A5:87:30:CE:11:ED:8E:3C:48:FD:0E:59:30:BE:30:
                                54:52:DF:C7:54:B4:BD
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        90:88:8c:cb:da:67:af:79:be:33:59:4a:60:65:3d:d4:60:47:
        b7:bf:bd:33:88:50:7a:64:10:85:a7:94:60:03:05:f7:8c:fa:
        11:db:1e:f5:43:f3:77:f2:d7:29:5b:15:98:d9:44:bb:aa:7c:
        7f:4c:07:e5:54:0a:89:c2:7f:f4:83:a2:27:33:a7:3a:d9:d8:
        b1:b8:be:f4:70:4c:b1:56:8b:98:9f:39:76:5f:95:22:c6:58:
        49:d2:80:2a:a9:9e:84:cf:f7:53:59:7d:39:03:6b:c2:84:e0:
        fe:d4:22:87:bd:75:a4:d8:28:30:b4:51:95:d6:11:c4:e3:8b:
        ca:c1:d9:4a:88:4a:b4:f6:4e:91:9e:03:9b:67:e1:25:eb:31:
        96:55:4a:2b:76:23:ff:c6:f6:1b:85:ea:39:d1:ef:6f:06:52:
        ec:3c:09:f3:89:ef:9b:b8:41:d2:75:2f:37:14:ff:ec:e2:c7:
        f5:79:57:c5:69:d1:58:c7:c6:f6:d4:81:2e:c2:da:28:6b:8c:
        91:10:17:de:3f:69:3e:46:b2:c2:6d:59:76:8d:98:54:85:5e:
        d0:37:80:87:b3:79:42:80:21:3e:94:5e:5c:1c:77:61:c7:f6:
        7d:08:5a:8b:19:5f:2a:8a:a6:98:45:1b:a9:18:55:8e:3f:e6:
        3e:3b:a0:fa