HTTP/1.1 403 Forbidden
Server: rdwr
Date: Thu, 18 Apr 2024 22:05:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:a9:13:67:b3:a1:19:01:c0:90:cf:e8:5c:5b:22
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K
        Validity
            Not Before: Jul 24 19:18:41 2023 GMT
            Not After : Jul 24 19:18:40 2024 GMT
        Subject: C=CA, ST=Ontario, L=Ottawa, O=NAV CANADA, CN=questionnaire.navcanada.ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:7a:08:bd:c8:5a:39:78:1e:57:56:09:b4:
                    6f:4d:cd:59:4a:37:00:9c:bd:36:d4:c7:36:34:19:
                    1a:45:3d:a2:66:18:1f:f7:e9:1f:96:5d:bb:35:96:
                    f9:86:3a:df:a3:dc:49:d0:ea:d5:6e:5b:6a:ce:fe:
                    93:de:49:84:07:b6:7e:8c:3c:b1:3e:6f:95:bf:78:
                    c3:0c:38:13:53:ce:0a:ac:42:11:d2:2b:22:97:33:
                    19:48:75:f4:04:2c:6a:1a:3c:17:fd:23:3f:95:90:
                    8f:24:e3:3e:94:0e:2e:a0:4c:57:b7:3c:20:38:95:
                    b3:2a:1b:a0:d1:45:21:9b:20:21:79:63:48:20:41:
                    c5:2b:6f:f2:d9:68:32:dc:28:9d:fd:e3:e6:df:74:
                    93:13:e4:51:6e:f1:ee:e4:98:90:2c:7e:0e:d9:d7:
                    d0:39:42:3e:58:5b:8e:b7:f7:06:a5:32:a4:f8:1b:
                    bc:ce:ca:0c:35:72:45:42:11:51:dc:57:7c:27:dc:
                    25:d8:fa:a8:00:ec:3d:bd:e3:fd:83:64:42:47:f8:
                    47:f4:b4:ef:4c:7a:9f:cb:a2:ce:68:15:c7:57:50:
                    b0:4e:3e:9b:49:c0:7b:d2:6a:0f:2f:33:03:fa:a8:
                    9b:46:35:2e:66:99:ad:23:75:cf:bf:ab:83:f4:d3:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                A6:57:23:04:96:13:40:84:C1:68:C3:4B:35:B8:44:89:44:F7:BC:D7
            X509v3 Authority Key Identifier: 
                82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.entrust.net/level1k.crl
            X509v3 Subject Alternative Name: 
                DNS:questionnaire.navcanada.ca, DNS:questionnaireapi.navcanada.ca
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114028.10.1.5
                  CPS: https://www.entrust.net/rpa
                Policy: 2.23.140.1.2.2
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Jul 24 19:18:41.708 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0B:B3:11:1F:25:06:B5:1A:D9:3D:0A:77:
                                FB:33:92:94:21:18:18:CC:DE:62:C2:F7:20:CB:8C:1B:
                                0B:ED:5D:F8:02:20:1F:52:05:97:AD:74:D8:A7:EC:41:
                                96:5B:FC:07:24:A5:C3:D9:CF:21:E4:5D:B9:0D:64:C0:
                                A2:03:A0:FF:C9:B5
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Jul 24 19:18:41.779 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:7F:BD:15:2D:02:0D:B4:B9:65:FA:3C:59:
                                98:67:31:47:92:B6:40:3A:74:47:44:F4:A9:5F:6C:71:
                                F4:0C:34:51:02:20:30:16:4D:16:B3:1C:4C:62:A6:D5:
                                82:64:FC:A5:9F:9E:30:C0:21:84:43:B5:59:36:93:33:
                                EC:D1:3B:88:F2:8E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Jul 24 19:18:41.886 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5F:9B:13:DB:BA:4C:6E:65:5D:5F:57:EC:
                                35:95:3C:EE:79:BA:A5:0B:DF:13:A8:93:4C:92:B7:63:
                                D5:F6:28:62:02:21:00:F1:85:FC:DB:71:84:30:2D:8D:
                                77:77:1B:D9:B2:9F:C6:23:79:CC:0D:B7:E7:11:E0:E6:
                                33:24:23:1E:65:A1:FF
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2a:7e:a9:67:f8:b0:c9:0c:e1:5a:7a:00:e3:2a:60:41:3b:04:
        0a:f5:b8:10:0d:c3:46:46:8b:e6:b9:71:3e:ef:9c:bc:40:eb:
        4c:2a:b0:e2:72:17:15:9d:55:24:d1:19:b0:1c:1a:49:99:5e:
        54:b5:16:a6:5c:27:ef:b6:7f:50:f5:d4:ed:f4:b9:da:29:ba:
        80:40:25:83:b4:c9:56:c1:3a:c2:99:28:75:32:85:ba:14:40:
        1f:66:c7:d1:42:ed:71:00:e3:c8:7e:67:4c:b2:c4:a1:87:ec:
        46:4a:60:91:d0:47:ce:5e:7e:56:37:02:87:00:7e:0d:f2:f7:
        97:61:13:1f:73:ca:6e:50:20:29:ac:49:1f:61:f9:c9:72:dd:
        c6:a6:3d:01:79:e8:0d:80:3d:d1:13:e8:6b:5c:72:fc:03:c6:
        47:f7:ad:d8:70:dc:e4:01:66:13:1e:c9:19:93:6c:91:b7:2d:
        b1:25:89:ca:0b:de:d1:c5:aa:4e:6a:dc:24:d3:04:71:65:22:
        c9:98:03:9c:d0:00:00:17:f7:e3:4b:54:83:0a:ab:51:f0:e9:
        c3:15:58:2b:ce:93:8e:81:ef:80:32:ee:60:d0:cf:23:39:d1:
        b7:38:d1:6e:86:f4:6a:e3:06:6a:5c:8f:4c:88:cc:26:3a:69:
        8e:49:16:98