HTTP/1.1 403 Forbidden
Date: Wed, 10 Apr 2024 03:47:46 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 22081
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: BtXFdTuB5OwMzEjFpH1wYVWCK1MoCZjRHiSXrKMZnYxEkPWismiZKiicJgNYHgcsMV6MJVwGuxV5l+cOhIphKuv0w00IJWcs/blw47AYP2CQKu5lVO0IwqOWoyS8ED3i/jigO4+UxiqN9/ptZIvpeQ==$aylS9J0XpLhiKX/Z55yB5g==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: __cf_bm=nNtcOt3z9piu7RaFe0xYnO17TXkj4S6KUiagW4.d0bA-1712720866-1.0.1.1-_xrHuBRpQaahlfWmPuCvr6Z_A7tKOdueGAPWlQ42SzVdXsLRiS91vlVJBUfzabarCwdRSu0BX0XORStSzDUEjg; path=/; expires=Wed, 10-Apr-24 04:17:46 GMT; domain=.belgiantrain.be; HttpOnly; Secure; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 871fc1e988cc250d-SJC

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:f1:45:1c:0b:16:40:68:46:a6:a5:3a:18:07:f2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Oct 12 00:00:00 2023 GMT
            Not After : Oct 11 23:59:59 2024 GMT
        Subject: C=BE, L=Saint-Gilles, O=Nationale Maatschappij der Belgische Spoorwegen, CN=www.belgiantrain.be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:20:3e:19:40:bd:a3:5b:52:ab:e6:34:c3:5e:
                    ee:27:3f:29:eb:be:09:e2:cc:a8:b3:ac:95:b3:03:
                    39:ba:e3:f1:a5:15:3c:7f:6d:a8:77:1d:93:d6:21:
                    d4:ef:ee:d2:66:8f:6b:38:ad:07:4d:01:74:0c:85:
                    1b:2e:9c:e8:36:cf:1b:19:99:ce:68:19:28:5e:9f:
                    80:e6:22:6c:35:4c:6b:69:41:e6:f0:ef:ba:09:71:
                    20:f1:15:17:8f:87:4f:58:de:04:da:23:60:cb:18:
                    16:ce:b7:de:c1:e2:8e:a9:97:07:6c:90:b9:ff:52:
                    a5:f7:17:dc:70:cc:f6:b0:f9:ca:96:fd:83:e7:39:
                    6b:3e:df:b7:8b:24:89:69:04:97:7e:ac:b4:c1:9d:
                    b7:5a:1f:e1:bf:06:38:f9:6b:a9:68:08:6f:04:11:
                    69:55:23:7d:4b:a0:33:2c:27:8b:f7:7a:68:1a:64:
                    c8:1c:82:21:d7:0f:92:18:43:b9:aa:c8:e2:00:15:
                    54:81:72:8e:d3:07:88:dd:ca:3e:a9:0f:36:b0:8c:
                    f2:9d:a2:7f:ee:5e:9c:fc:14:df:ee:d0:54:cf:be:
                    cc:e3:4f:06:44:85:63:af:fe:70:68:0e:7a:84:18:
                    a0:64:67:95:e8:37:7c:bf:2f:07:6f:a1:45:29:3a:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                98:5F:22:57:16:86:2E:8E:AC:B8:DC:43:3B:72:E1:B6:41:12:33:6E
            X509v3 Subject Alternative Name: 
                DNS:www.belgiantrain.be, DNS:belgiantrain.be, DNS:belgianrail.be, DNS:nmbs.be, DNS:sncb.be, DNS:www.belgianrail.be, DNS:www.nmbs.be, DNS:www.sncb.be
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Oct 12 14:03:26.737 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:85:C9:EF:06:0E:E5:7C:81:72:97:88:
                                A7:35:68:06:61:3E:EB:27:5F:25:B8:A1:67:5F:0B:6F:
                                71:E1:B4:BD:07:02:21:00:96:F6:DB:5B:98:66:74:10:
                                48:CF:19:68:95:9D:FC:8F:86:41:93:A1:35:CD:DB:80:
                                F4:37:71:5C:DF:2E:4B:68
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Oct 12 14:03:26.645 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:90:79:BB:1A:F5:18:B5:39:10:5F:20:
                                51:83:EE:09:92:51:3E:51:F2:00:F3:59:7C:1D:5E:A6:
                                76:92:86:F4:B0:02:21:00:AC:05:8B:84:25:C2:49:BA:
                                6A:41:85:38:AA:1B:15:5F:29:21:A4:7C:FF:A6:F7:BF:
                                19:81:15:6A:20:F6:6C:37
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Oct 12 14:03:26.641 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3B:3E:4F:50:EE:D6:7D:B0:D5:56:C7:03:
                                77:35:64:3E:25:C9:A1:E3:BD:C7:37:7E:65:3E:2F:2F:
                                37:14:75:FA:02:20:7A:F2:2B:7D:E0:AD:D7:AB:C1:94:
                                2A:BE:77:DA:41:2A:4C:70:8F:8F:8D:B0:13:99:54:26:
                                3B:A0:37:F5:EF:77
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a8:c7:03:b5:80:57:8f:2d:60:85:21:53:88:72:ee:71:a5:f7:
        88:5a:47:c5:54:49:e5:b0:a6:1e:1a:a7:8a:66:ee:bb:48:28:
        23:64:68:46:c8:99:c8:1b:46:71:e8:bd:27:f2:23:d2:70:fd:
        05:c3:ea:26:7b:7a:2c:26:aa:a2:ef:16:b6:77:f5:02:94:c0:
        ac:f3:dd:ec:24:70:31:d9:5a:ed:55:d7:76:db:f4:2d:64:e5:
        64:f4:35:ce:06:6a:5d:d3:9b:a4:39:1a:f7:4a:ac:6b:b1:43:
        63:96:b2:cf:0d:49:ab:97:ba:d2:14:d2:b9:16:52:fa:7e:fa:
        05:fb:18:8f:ad:33:95:07:71:a6:61:2f:05:1d:e5:bf:73:ec:
        3c:6d:5e:e5:fc:fb:b1:56:33:f8:91:87:ea:36:de:6e:65:91:
        cf:53:ad:8f:f2:64:26:64:59:6b:ec:b8:59:a8:93:43:f6:21:
        a0:d8:d9:fe:89:cb:cd:bc:f5:57:77:0a:71:86:1d:76:ed:62:
        01:75:b1:bf:a4:1f:0b:e0:a3:19:9a:64:57:ac:e9:a5:ec:26:
        21:85:74:80:89:cf:09:7c:32:1e:cf:c9:69:cd:1d:f9:e2:5f:
        9f:f0:f7:2a:de:72:e9:9c:41:d6:93:37:59:2f:bb:c0:7f:af:
        a4:d8:43:65