CloudFront httpd

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sat, 20 Apr 2024 15:48:19 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 386a6404e8fa2e50e2a13baba0abed68.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SIN52-P1
X-Amz-Cf-Id: jA0JRSYOjQ33OOmemDpaU7pe_BJ9Et-k8c7GdD5nIiUmGxiD7uEY_A==

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Date: Tue, 16 Apr 2024 14:26:35 GMT
Server: Apache
Content-Security-Policy: frame-ancestors 'self' https://www.morganstanley.com https://www.pem.org https://unitedwaymassbay.org https://www.unitedwaymassbay.org https://pennstate.planmygift.org https://parametricportfolio.com https://www.parametricportfolio.com https://uscharitablegifttrust.org https://www.uscharitablegifttrust.org https://uat.morganstanley.com
Expect-CT: max-age=604800, enforce
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Access-Control-Expose-Headers: *
Access-Control-Max-Age: 3600
Location: https://www.atlcap.com
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.2o7.net b.6sc.co c.6sc.co j.6sc.co secure.adnxs.com *.adobe.com assets.adobedtm.com *.adsrvr.org static.ads-twitter.com p.adsymptotic.com *.advancedfundsolutions.com *.akafms.net *.akamaihd.net ingestion-upload-production.s3.amazonaws.com/ platform.asset.tv *.atlcap.com *.bcovlive.io *.bcvp0rtal.com match.prod.bidr.io bat.bing.com tags.bluekai.com *.boltdns.net *.brightcove.com *.brightcove.net *.brightcovecdn.com *.calvert.com *.morganstanley.com *.ms.com *.msim.com morganstanley.prospectus-express.com cdn.polyfill.io/v2/polyfill.sj cdnjs.cloudflare.com *.cloudfront.net api.company-target.com segments.company-target.com *.custombeta.com *.demandbase.com *.demdex.net dev-drwebsite www.dianomi.com *.doubleclick.net *.eatonvance.at *.eatonvance.ch *.eatonvance.co.kr *.eatonvance.co.uk *.eatonvance.com *.eatonvance.com.au *.eatonvance.de *.eatonvance.dk *.eatonvance.fi *.eatonvance.ie *.eatonvance.jp *.eatonvance.nl *.eatonvance.no *.eatonvance.se *.eatonvance.sg proxy-bedford.eatonvance.com:8443 *.eatonvancecounsel.com eatonvanceinvestment.tt *.eatonvancerealestate.com *.analytics.edgekey.net ejohn.org cm.everesttech.net *.evmanagement.com *.evwateroak.com xbrl.fasb.org servedby.flashtalking.com fluidproject.org *.fml-x.com fml-x.com *.gallerysites.net gateway.zscalertwo.net getbootstrap.com www.giftcalcs.com www.google.com www.googleadservices.com www.google-analytics.com *.googleapis.com www.googletagmanager.com fonts.gstatic.com www.gstatic.com vds.issgovernance.com weblogs.java.net www.joostdevalk.nl code.jquery.com static.knowledgevision.com www.kryogenix.org snap.licdn.com *.linkedin.com brightcove.hs.llnwd.net brightcove.vo.llnwd.net *.morningstar.com hello.myfonts.net js-agent.newrelic.com *.nextshares.com bam.nr-data.net javascript.nwbox.com *.omtrdc.net onlinexperiences.com *.parametricportfolio.com pi.pardot.com cdn.polyfill.io www.riddle.com id.rlcdn.com xbrl.sec.gov seekingalpha.com t.sf14g.com www.storygize.net t.co analytics.twitter.com platform.twitter.com cloud.typography.com ww.math.ubc.ca *.uscharitablegifttrust.org *.uslegacyincometrusts.org bcove.video www.w3.org xbrl.org youtube.com vjs.zencdn.net *.byspotify.com *.dynatrace.com *.evidon.com blob: data:
Access-Control-Allow-Credentials: true
X-Cache: Miss from cloudfront
Via: 1.1 740fccc7c62d49696904618862f889f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SIN52-P1
X-Amz-Cf-Id: _plJuZ3xddb52NZVa0Df5CBn3zVkUU21ZBjwSvlxJERePQ84puAHgQ==

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9b:3b:08:cd:5a:b6:8c:ef:6a:28:d4:17:c5:11:92
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: Apr  8 00:00:00 2024 GMT
            Not After : May  7 23:59:59 2025 GMT
        Subject: CN=www.atlcap.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:a2:62:d1:ef:de:be:cb:9d:c7:b2:19:06:
                    2d:e5:e8:f1:2c:d7:ee:61:f3:0b:8e:43:41:22:3f:
                    00:66:17:44:27:f4:5f:fd:49:01:66:5d:66:88:0f:
                    a2:b5:45:55:c5:80:e6:a2:12:6e:40:65:ee:40:bb:
                    7e:3e:da:c4:b4:c0:b1:14:af:47:ba:da:51:39:3c:
                    79:fc:47:fd:29:32:d7:93:2e:c6:cf:d3:2a:f1:56:
                    0c:25:c0:2f:d9:bc:75:21:5f:25:e8:11:c8:b4:18:
                    bf:96:80:2c:59:f6:72:b6:89:d6:d2:9d:ac:5c:21:
                    17:7d:68:ef:5a:a7:25:31:12:42:cd:27:9b:ed:5e:
                    f1:16:22:13:c8:50:ae:05:40:65:58:17:12:50:21:
                    f0:a9:85:90:48:c2:e8:9c:83:84:b0:9b:79:d6:bc:
                    12:5b:73:82:23:2b:91:17:91:c0:62:ac:ca:dd:39:
                    9e:d2:b6:7b:90:de:e4:9d:e3:37:d2:ac:48:e1:85:
                    20:16:73:30:f1:7b:51:71:cc:aa:22:62:71:3d:a9:
                    fb:d1:47:a7:98:c5:9c:90:5d:64:a6:92:11:cb:27:
                    4e:72:d6:08:6a:51:5c:6d:64:4e:27:dd:c5:d7:6d:
                    b6:8f:ea:8b:43:2d:e4:55:28:61:75:d8:5b:d9:fe:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                81:F0:2F:5D:23:9A:75:EE:D0:AD:20:30:47:6D:CC:D6:23:85:4D:AC
            X509v3 Subject Alternative Name: 
                DNS:www.atlcap.com, DNS:www-aws.atlcap.com, DNS:atlcap.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Apr  8 05:46:03.801 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:15:87:29:8A:A5:9E:C0:FB:F2:6F:CA:01:
                                0F:0B:FD:D5:4E:00:4C:67:6B:4C:2F:08:19:74:DA:C6:
                                61:57:62:21:02:21:00:E3:CA:6B:4A:82:E4:9B:B6:52:
                                C0:5C:F4:DF:55:48:32:9C:6D:63:79:A0:52:46:22:57:
                                32:AA:84:4A:CC:E9:D0
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Apr  8 05:46:03.907 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:61:BF:42:07:1A:E2:A3:68:F7:6C:7E:96:
                                C3:77:86:40:E0:FB:1E:76:16:C9:D0:B3:7D:35:4A:84:
                                57:86:FD:89:02:21:00:C5:06:04:A1:DB:BD:3C:89:FB:
                                99:B3:C1:56:4F:3C:7A:DF:0C:B3:1F:94:ED:C9:45:7B:
                                0A:6A:8C:08:4F:F7:1A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Apr  8 05:46:03.875 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C1:03:0F:BC:BF:46:33:11:F3:60:49:
                                29:B9:57:11:3E:01:A8:5C:99:79:A1:80:28:8A:FC:DF:
                                0F:7B:E5:8D:79:02:21:00:EF:22:3A:DA:22:67:74:3C:
                                8A:FD:74:F0:EE:28:EB:C7:7A:EC:1D:5C:14:4F:71:F6:
                                4A:61:91:B6:F9:44:AC:B7
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        50:74:eb:29:22:cf:17:1e:55:50:67:ed:eb:f9:2a:da:35:7c:
        50:0d:8a:2e:02:35:3c:7b:87:31:e6:61:9d:f0:57:64:41:cd:
        18:c0:6d:f7:27:7e:0c:5e:50:a2:03:c2:64:0e:43:8a:f5:fb:
        be:2d:f0:3f:1f:82:ac:05:73:8c:4c:3f:1f:61:7e:c5:05:f2:
        bc:1b:87:07:7c:3d:fd:ff:98:b3:c2:0a:2c:27:8a:08:d3:0f:
        86:4d:b4:ba:6e:3b:c9:06:89:96:24:09:1c:39:66:61:f1:11:
        70:a3:07:d7:a6:3e:39:43:01:2a:dc:a8:22:ca:de:7c:e3:e8:
        93:fd:21:a4:10:ed:2e:92:4f:45:cc:8e:9d:61:b0:9b:ae:d3:
        50:d9:b1:a4:89:1d:77:12:9d:77:25:1d:ac:29:80:c2:59:1d:
        96:a6:7d:36:ef:23:9f:e7:8d:75:fd:db:1d:7d:89:cf:bb:13:
        8c:48:f0:80:95:eb:3d:6a:d0:7b:84:44:67:ba:d9:26:81:73:
        05:fb:06:5b:b8:49:65:5c:d6:de:75:d2:7c:3e:5e:cd:11:af:
        af:df:4a:9e:2b:2c:20:e4:38:3c:32:0e:44:c8:8d:e7:fe:ff:
        74:a6:62:78:fb:23:0b:7f:6c:5e:d4:8d:99:5e:21:1a:73:aa:
        9d:e5:15:44