HTTP/1.1 403 Forbidden
x-denied-reason: src_is_not_cloudfront
content-length: 0

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:67:20:07:8b:d8:82:84:82:60:ea:96:f5:b7:81:e4
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
        Validity
            Not Before: Sep 18 00:00:00 2023 GMT
            Not After : Sep 17 23:59:59 2024 GMT
        Subject: C=NL, L=Amsterdam, O=Booking.com BV, CN=*.booking.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:2f:af:33:34:3f:d5:cb:01:db:fb:0b:fd:20:6c:
                    58:15:eb:a0:2e:46:24:91:a8:ce:24:a7:26:c0:48:
                    34:ad:36:46:46:d6:84:b7:d4:28:52:08:78:7e:8a:
                    23:46:a3:4d:41:a9:f5:d6:02:d0:16:79:c4:6e:2d:
                    24:7e:ae:9b:ed
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0A:BC:08:29:17:8C:A5:39:6D:7A:0E:CE:33:C7:2E:B3:ED:FB:C3:7A
            X509v3 Subject Key Identifier: 
                D4:FA:A6:2B:39:AA:E7:2F:8F:2F:3C:A2:81:5C:E5:48:14:A1:9E:A6
            X509v3 Subject Alternative Name: 
                DNS:*.booking.com, DNS:booking.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Agreement
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Sep 18 13:20:54.891 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CD:AE:CE:6F:FA:2B:A8:D4:AD:5D:3A:
                                22:69:AB:EF:1F:36:32:A8:1E:0D:06:B7:1B:10:53:7E:
                                28:83:E1:75:A7:02:21:00:92:51:70:0A:65:37:76:9E:
                                6F:C3:CC:7C:1F:95:B5:68:72:05:5A:C2:59:C5:7B:BB:
                                E5:51:64:53:0F:71:64:6E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Sep 18 13:20:54.916 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:75:DA:40:78:D8:1F:4F:44:B5:58:4E:91:
                                1B:C5:0C:5A:41:9A:DE:8D:8C:C4:4E:EC:CA:90:87:E1:
                                E1:F9:B5:04:02:21:00:CD:49:A2:04:A8:47:9D:68:4E:
                                A4:04:03:80:16:CD:07:0F:A1:2C:DF:3C:4D:43:67:83:
                                ED:17:79:53:83:78:BE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Sep 18 13:20:54.863 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:61:7B:BC:38:3D:3D:E0:AE:36:C7:4E:D2:
                                B8:42:7B:0E:F6:1B:EA:BC:85:A4:3E:3B:5F:F2:75:46:
                                26:4B:AB:50:02:20:7C:B7:D4:92:7E:B8:F1:DC:9A:AE:
                                E2:E1:09:81:A0:87:30:63:1F:10:36:3B:23:ED:A9:F8:
                                78:BE:64:D3:84:C6
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:1f:39:d2:0d:ad:8d:f0:c2:da:6c:de:e5:62:a0:
        c1:b5:bb:65:f9:51:be:3e:20:1e:a8:bd:e1:13:3d:79:2f:fd:
        78:1c:8b:d2:63:22:b5:00:3c:ac:be:d6:ae:64:3a:32:02:31:
        00:fc:cf:42:a4:84:77:60:20:a6:34:55:b4:0e:73:5a:b4:6f:
        95:a6:84:38:8f:c8:da:f9:f5:df:27:a0:79:96:61:72:50:ac:
        4e:78:39:fd:90:5c:69:be:8e:45:84:e9:92