HTTP/1.1 403 Forbidden
Date: Wed, 24 Apr 2024 15:02:57 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 4527
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Wed, 24 Apr 2024 15:03:12 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ogL33JRw%2BtjWYTnoBn8cojr72TCpFjMr91hGcPT90YmMGGH1DMZYjOt%2BtiQnEgjcRwLU%2F97piWtrad0BTor0cbxEavj5vUNn2BK5%2FKiKO5z%2FIrQwd031KoDlOf0MscOiU4PbRHvChlEApvzuJ08eAw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8796fa304f312518-SJC
alt-svc: h3=":443"; ma=86400

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:2f:7c:43:c5:d6:fe:31:0d:8c:77:71:f1:f4:38:9d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Google Trust Services LLC, CN=GTS CA 1P5
        Validity
            Not Before: Mar 22 05:50:02 2024 GMT
            Not After : Jun 20 05:50:01 2024 GMT
        Subject: CN=kh-uia.org.il
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:0f:14:ce:a8:3a:9e:9f:4b:57:29:88:d8:
                    dc:63:84:be:d4:2d:c9:c0:31:4b:fb:98:8d:ca:43:
                    e1:02:da:24:d3:db:8a:33:cf:06:af:67:77:3e:cf:
                    2f:19:f6:71:00:a1:5a:27:0a:4e:36:39:e5:9e:1a:
                    1a:ac:e4:79:8a:e5:c8:05:77:0c:62:76:39:40:d0:
                    8d:f4:1e:e6:02:c1:7f:2e:2b:e6:59:e1:87:38:86:
                    e4:c2:fd:79:c0:6c:da:5d:08:fe:b9:d1:d1:b9:49:
                    c0:ff:ba:89:96:da:41:18:f5:6a:38:94:1e:ad:c3:
                    ae:ce:ac:13:af:f4:44:0d:92:40:c1:8f:ca:da:8b:
                    28:ee:f9:36:01:73:f2:64:ab:51:fd:bf:02:09:9c:
                    e3:5a:91:e7:69:5b:29:ff:bc:16:bb:ce:56:4d:06:
                    41:68:15:0f:27:85:20:5e:3f:cd:b3:72:65:57:9c:
                    1f:bb:3a:5a:06:3a:04:40:1b:3e:80:15:9f:e8:34:
                    83:ee:9f:ac:2a:ec:ff:f3:09:8c:b4:18:df:12:00:
                    c4:3b:56:43:6f:a8:ef:dc:37:23:25:83:15:9e:6f:
                    5a:5e:83:8c:6b:65:d1:c0:bf:8b:b1:2b:ac:fd:b7:
                    ba:05:39:1d:9a:cb:29:5e:cc:03:21:9c:b1:73:2a:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                21:14:EF:7E:A9:ED:B8:C8:F6:33:F4:00:0F:85:14:40:1B:6F:DC:8B
            X509v3 Authority Key Identifier: 
                D5:FC:9E:0D:DF:1E:CA:DD:08:97:97:6E:2B:C5:5F:C5:2B:F5:EC:B8
            Authority Information Access: 
                OCSP - URI:http://ocsp.pki.goog/s/gts1p5/Sza9k1YYwsY
                CA Issuers - URI:http://pki.goog/repo/certs/gts1p5.der
            X509v3 Subject Alternative Name: 
                DNS:kh-uia.org.il, DNS:*.kh-uia.org.il
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.11129.2.5.3
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crls.pki.goog/gts1p5/V2yfc5CRMiw.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Mar 22 06:50:02.866 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:88:8E:7C:D3:FA:4E:4A:71:25:44:2C:
                                3A:C7:7F:09:99:76:54:8F:4D:8E:48:16:C4:AA:16:C0:
                                48:CE:E5:C4:84:02:21:00:8A:D6:6D:18:E7:B4:9D:B2:
                                7D:7F:24:05:C0:D9:06:C0:DB:C3:69:6D:87:86:40:34:
                                A1:E2:63:73:77:E7:1B:9E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Mar 22 06:50:02.807 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:A4:7A:1D:8F:50:ED:7F:CD:F1:C1:C9:
                                F1:8C:F2:97:FE:C7:11:C0:8A:3E:63:3E:CA:84:B9:FB:
                                9B:7C:85:BC:31:02:20:6B:ED:49:93:85:A6:90:A9:8D:
                                FA:AD:D0:62:55:DE:B5:9F:81:2D:1C:7A:7D:AC:48:17:
                                6E:05:2D:B7:7C:90:98
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        53:78:05:07:e2:35:dd:74:8b:db:db:7b:f6:82:66:3d:33:4c:
        53:c3:54:75:74:da:21:b2:0d:8c:ad:4f:9f:37:fc:fe:49:5a:
        6a:40:c8:59:6d:0c:b9:70:ab:bc:78:f4:91:06:ef:75:15:67:
        84:e1:13:b6:71:d3:4a:8e:a2:6e:1a:e9:6f:ab:da:3e:e1:10:
        0e:25:eb:65:46:b8:be:a6:32:d3:a3:71:d2:94:e2:03:ba:2c:
        b4:15:70:9d:b0:53:d4:f7:09:79:70:37:1e:17:1c:1b:89:35:
        c7:2f:3a:cc:67:85:b2:c0:66:7c:6b:ba:58:59:4f:17:84:d6:
        ef:c8:35:95:2f:94:5f:50:8f:2a:5a:bd:43:f8:56:92:93:18:
        0f:d1:46:45:30:d6:9a:0e:6f:66:18:ba:a4:6b:fe:6f:ea:fb:
        0d:47:34:4d:13:ae:61:79:3b:66:e0:11:4b:be:52:95:ba:f1:
        35:6f:c7:80:cd:65:05:65:3d:2c:e4:52:3c:d3:97:6f:91:c3:
        58:5d:5e:13:b7:a9:72:fe:e5:c0:3a:a0:e6:67:07:58:d2:28:
        c8:49:71:04:22:a0:f9:54:20:28:c2:c1:bd:ff:7e:79:bc:b6:
        9b:cc:ce:66:b7:4a:63:87:56:21:d4:29:ed:4d:ad:1d:db:3e:
        52:1c:91:c2