HTTP/1.1 403 Forbidden
Content-Type: text/html
access-control-allow-origin: *
access-control-allow-headers: content-type
Date: Mon, 20 May 2024 15:20:11 GMT
Content-Length: 1233
Set-Cookie: OSS_SESSION_ENCRYPTED=!ynyTesOTq8NaOgLKhIMeHzpugmgOWgaQIZyZrjzqjykmc1SPLDCTRnPNPCl3KUXx+0CWGfhpnsTjDg+hWOIjHVKYyITRE2veYXehB3byWd3GI41+2HZmN89VRkW9p1SlmuMyqqduzkEY3nrRqByH8z6N51SDwpA=; path=/; Httponly; Secure; SameSite=LAX
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload;
Referrer-Policy: no-referrer-when-downgrade
Expect-CT: max-age=60; enforce

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a4:d2:0a:44:12:a9:38:dd:ec:d5:c6:17:be:dc:9c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Extended Validation Secure Server CA
        Validity
            Not Before: Oct 24 00:00:00 2023 GMT
            Not After : Oct 23 23:59:59 2024 GMT
        Subject: serialNumber=05-11-1858/jurisdictionC=US/businessCategory=Government Entity, C=US, ST=Minnesota, O=State of Minnesota, CN=commoncontent.sos.state.mn.us
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f2:d5:32:1a:9c:c7:ba:3a:ee:b9:67:00:83:09:
                    ae:f4:07:2a:ed:2d:40:36:11:fb:10:5d:7f:9e:65:
                    7d:4e:68:fb:a0:0e:e9:91:58:90:50:3c:ff:55:f0:
                    e6:ae:1a:c4:3c:a0:1c:bb:9e:78:9a:70:f5:c9:be:
                    72:e4:01:e9:2a:9a:a5:2e:b6:e3:51:b3:57:b5:ef:
                    72:5a:0e:5d:4e:6a:c9:a4:81:34:58:eb:64:5a:81:
                    f2:5c:dc:1b:3a:3a:fd:02:17:4a:66:bb:e2:3e:7c:
                    89:97:27:82:33:d8:ea:e4:80:5c:cc:e6:ed:2d:1e:
                    ca:ff:f5:5e:cc:4b:61:8f:21:23:29:23:ff:c0:56:
                    6c:76:5f:f0:da:0a:79:b5:00:59:e7:5a:ac:e6:ae:
                    74:4c:ac:3b:c5:f6:db:e5:60:2e:41:2c:ea:03:66:
                    72:d1:54:62:a5:dd:82:70:75:9b:c7:e8:a8:de:a8:
                    15:4a:5d:f2:8b:9d:4b:b0:d3:68:41:6e:89:bd:cc:
                    38:d6:13:4a:54:9a:52:62:fa:a1:da:b5:f7:23:62:
                    94:3b:e0:5e:c5:d4:70:4b:44:2d:99:2c:f9:8f:13:
                    06:c5:41:ed:ba:09:9c:d7:81:cb:4c:86:1a:d8:12:
                    e5:1f:ce:79:f6:f3:65:89:df:b2:d7:c2:17:57:0a:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                2C:69:FF:80:C9:87:90:AE:34:E1:B4:E7:4C:93:85:99:40:E9:A7:B2
            X509v3 Subject Key Identifier: 
                56:3E:21:66:92:3C:D0:BA:6C:7B:60:AC:5F:45:13:82:BF:AB:E4:15
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.5.1
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Oct 24 19:54:07.743 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:29:71:15:A5:F5:52:40:F3:89:99:95:3B:
                                9C:F0:2C:4B:54:9C:31:E5:C7:7A:BC:D1:88:4B:4E:35:
                                58:46:0E:41:02:21:00:B9:F3:CA:0E:51:74:D7:A5:07:
                                9F:F4:57:4A:CA:72:2D:1B:05:C8:2A:7E:79:D8:02:72:
                                08:BF:3D:4F:1B:34:FA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Oct 24 19:54:07.833 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:75:8D:6C:09:63:BD:AA:91:AD:CA:1D:59:
                                A8:DB:B9:70:2B:20:15:74:A4:33:DD:4E:21:0C:2C:B6:
                                1B:86:27:DA:02:20:53:38:B0:10:F3:F9:D5:41:5A:09:
                                2D:EF:6A:F1:3F:FA:2A:4C:4A:6B:2A:B5:C0:FC:6F:B5:
                                2B:59:E9:67:17:31
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Oct 24 19:54:07.788 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:F4:B1:8F:4B:28:49:CE:B6:9C:31:3C:
                                33:56:3D:C6:27:9F:E5:E0:60:6B:12:7D:B5:10:AD:A3:
                                91:DB:8A:7A:4D:02:21:00:AE:E5:64:76:75:62:42:8C:
                                6E:62:70:18:AE:EE:5E:56:96:B9:BF:72:64:1C:2A:30:
                                D2:C6:36:FD:50:A2:8A:51
            X509v3 Subject Alternative Name: 
                DNS:commoncontent.sos.state.mn.us, DNS:commoncontent.sos.mn.gov
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        22:0f:9f:9c:50:b2:f4:08:24:8a:13:b3:19:a9:15:0f:74:fa:
        16:3f:43:33:04:83:ba:b8:5c:a0:d5:98:44:ca:4d:c6:7e:97:
        78:29:03:0f:cf:7f:76:57:1d:c0:9c:b6:f8:f4:fd:0e:d7:fd:
        8c:fc:6d:df:1d:0c:da:e2:c7:ab:78:11:0e:ab:5c:78:3c:1d:
        26:23:fd:c9:ea:5b:7f:94:f8:5b:50:19:10:0c:6f:a8:c4:ba:
        fc:87:ac:d4:b3:6b:d9:30:33:7b:f5:e6:fb:0a:2d:bb:c3:00:
        d9:50:4c:08:f8:89:16:15:f4:a2:fb:27:76:2d:a9:b6:05:76:
        a1:2c:b6:cd:f3:3b:8a:c1:db:1d:fe:3c:d6:2e:e8:c7:cc:0c:
        e6:2c:04:24:ba:d9:d0:b0:f5:e3:1c:50:3e:00:d8:c4:5b:a4:
        19:b4:d8:fc:3f:a9:ab:b9:f9:f3:6a:a4:ae:e3:27:4b:37:1e:
        06:fd:f2:f0:a8:d0:21:5c:78:95:78:3e:e2:05:41:59:3d:49:
        67:bb:be:f2:7f:7d:b1:d2:27:db:aa:dd:ff:2c:cb:a0:52:7e:
        3f:64:28:7f:e6:f7:d2:be:98:36:b3:28:61:7d:85:87:4e:e1:
        63:05:00:ce:dd:b2:60:78:ea:3b:5b:3c:eb:93:66:22:03:78:
        58:cb:63:5c