HTTP/1.1 403 Forbidden
Accept-Ranges: bytes
Content-Type: text/html; charset=UTF-8
Date: Fri, 03 May 2024 16:52:41 GMT
ETag: "133f-5c6f23d09f000"
Last-Modified: Mon, 12 Jul 2021 19:36:32 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4927
Connection: keep-alive

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:01:8d:6b:69:c2:4b:8e:31:56:34:1a:d4:79:8a:d9
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=IdenTrust, OU=HydrantID Trusted Certificate Service, CN=HydrantID Server CA O1
        Validity
            Not Before: Feb  2 20:01:49 2024 GMT
            Not After : Mar  3 20:00:49 2025 GMT
        Subject: C=US, ST=District of Columbia, L=Washington, O=US Department of Health and Human Services, CN=macprodev2.cms.gov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:a7:13:e1:3c:95:31:f9:12:7f:1c:90:e5:
                    e5:b3:80:70:43:fd:7f:11:bd:60:a5:28:c8:42:b0:
                    fd:1b:dc:fe:8d:fd:8b:59:19:2b:52:08:97:dd:a2:
                    01:f0:13:44:c2:f0:9e:d1:fb:fe:84:0b:34:7f:f4:
                    b8:03:6e:e0:db:b4:ff:8b:f3:32:bc:ac:6c:fc:08:
                    19:56:62:39:72:d6:0d:86:ee:2f:89:83:08:9e:ca:
                    57:ac:61:5c:7d:9a:c1:29:3f:58:2e:cf:c4:47:b1:
                    93:87:b4:00:bc:43:1b:8f:a0:00:d9:31:73:22:6d:
                    c8:4e:e0:0c:16:91:94:fa:e4:9b:bc:53:05:5b:77:
                    39:cf:82:88:fc:cd:34:69:2e:19:8b:c7:1b:7d:2f:
                    2d:96:11:83:c3:7b:da:b3:bd:12:81:da:7c:61:ea:
                    dc:21:39:5c:33:1d:39:00:a8:78:0a:02:1a:22:b6:
                    ea:17:82:17:f4:bb:be:7d:e1:ed:9e:87:64:52:e6:
                    b1:db:06:3a:ba:a0:aa:aa:b2:5d:b5:f7:9d:e8:8c:
                    79:ce:64:64:82:dd:05:fc:4b:f5:cd:e8:b2:7a:04:
                    51:1b:85:0d:cf:04:84:fb:b3:3d:45:4d:3c:28:58:
                    ad:8a:0b:cd:d8:af:8c:d3:5a:c8:a1:d8:62:5e:de:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            Authority Information Access: 
                OCSP - URI:http://commercial.ocsp.identrust.com
                CA Issuers - URI:http://validation.identrust.com/certs/hydrantidcaO1.p7c
            X509v3 Authority Key Identifier: 
                89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 2.16.840.1.113839.0.6.3
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://validation.identrust.com/crl/hydrantidcao1.crl
            X509v3 Subject Alternative Name: 
                DNS:macprodev2.cms.gov
            X509v3 Subject Key Identifier: 
                BE:66:30:5E:17:0C:4D:A9:93:7C:D6:FC:B2:AD:3C:06:C2:5B:40:49
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb  2 20:01:49.952 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B2:27:36:52:1B:DA:02:73:B9:70:AB:
                                0D:D3:1A:17:D6:3C:59:56:A5:02:B4:4C:D6:A7:73:48:
                                27:C2:97:B6:9C:02:20:79:D7:C9:47:F2:25:52:BF:C0:
                                97:1D:9B:55:5B:6E:2E:DA:39:8F:07:F7:01:CC:91:50:
                                09:D6:13:0F:6C:76:B6
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Feb  2 20:01:50.541 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:09:C4:F0:62:C5:2E:D2:85:7F:D3:2A:E0:
                                8D:0E:DA:19:47:1D:83:F3:70:CF:0A:5A:2A:F7:94:C7:
                                5E:2E:27:29:02:21:00:EE:DF:23:1A:4B:ED:AA:D7:CC:
                                A3:2C:35:16:D9:A7:34:0B:52:58:9C:54:A6:7F:C1:61:
                                4B:6F:A7:4D:EC:88:5E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Feb  2 20:01:49.907 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9E:E8:2D:76:64:C5:82:BE:63:27:E3:
                                32:4E:AE:08:36:42:B3:8D:4B:21:69:C1:1D:50:DD:7C:
                                74:21:34:D1:76:02:21:00:AC:26:35:75:A4:41:F4:8A:
                                86:C4:15:2B:E3:19:BE:2B:2F:7B:92:15:A8:46:18:F9:
                                B2:53:DC:E4:AC:B3:3C:83
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        87:b0:95:c7:2c:61:c3:c8:ab:cc:26:eb:0d:21:f7:4d:9e:17:
        0d:ed:50:70:d6:66:fe:cf:d1:37:d9:d8:88:de:4c:38:36:25:
        32:cf:5e:8e:92:08:78:c2:a9:65:e1:9b:73:9f:50:dc:f9:03:
        b8:7c:58:6e:cc:9d:75:c1:55:68:98:7b:50:ee:f1:77:5b:f5:
        74:67:bf:5f:ca:99:de:b4:ee:3b:fd:cd:0b:2f:de:9e:20:e7:
        2b:17:53:d2:d2:95:e6:99:03:87:39:d6:ff:90:66:92:15:af:
        4e:c9:6b:e0:0c:6c:25:0c:f3:c4:dd:65:9f:3b:18:eb:ae:4e:
        85:0b:c0:9e:86:6d:6c:f7:de:70:f7:54:b6:d9:95:ec:ec:10:
        9f:88:11:c2:fe:2a:7d:9e:86:4b:98:52:67:d9:fc:ef:ff:2c:
        f2:38:b3:f5:e6:23:da:21:1f:11:7f:2c:57:cb:4d:56:18:f7:
        93:c6:39:69:e1:24:27:b4:33:22:9d:09:10:25:4c:84:bd:d5:
        96:7f:ec:e4:9a:5b:60:2a:9f:38:37:19:39:b1:71:fe:70:54:
        20:53:2f:b8:37:87:a5:a3:cd:37:26:f8:29:33:27:58:d0:e8:
        ba:11:1a:d6:ed:a4:b6:cc:6d:b0:ea:15:88:9a:8f:8b:36:3b:
        5e:da:bc:6c