\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

nginx

HTTP/1.1 403 Forbidden
Server: nginx
Date: Thu, 18 Apr 2024 16:13:33 GMT
Content-Type: text/html
Content-Length: 548
Connection: keep-alive
Strict-Transport-Security: max-age=63072000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:dc:de:49:f2:00:c9:93:5e:ce:c0:bd:56:d9:fb:37
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
        Validity
            Not Before: Feb 20 00:00:00 2024 GMT
            Not After : Mar 22 23:59:59 2025 GMT
        Subject: C=DE, ST=Bayern, O=Vesterling AG, CN=*.vesterling.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:d1:c9:d3:0c:1e:81:c9:2c:2f:64:fe:ac:22:f1:
                    c1:f9:ae:05:49:b1:71:9c:dd:52:94:00:45:8a:f3:
                    0c:83:c9:9a:59:b6:b1:7c:06:30:78:e6:4a:06:42:
                    69:37:8c:52:18:7c:cb:c8:36:07:c1:88:cf:0b:9e:
                    71:04:19:af:40:18:f7:f1:90:33:76:d4:85:92:7a:
                    69:b5:a5:6b:a9:a3:8c:7b:85:68:88:01:0a:0a:ea:
                    18:63:da:5e:70:31:e0:db:de:84:cc:c0:f3:b1:82:
                    18:01:21:68:28:13:a4:b5:50:8e:64:62:9e:a6:c6:
                    e3:ab:95:c0:a4:10:b9:3a:e0:41:64:7a:e4:42:7e:
                    04:12:96:da:d1:ad:e4:fc:05:1a:b4:e1:2a:a9:35:
                    4f:34:9d:c0:b0:d2:10:6e:43:73:6b:a2:42:bb:52:
                    3a:c2:2b:86:cf:37:e8:93:55:57:ab:db:79:a1:c0:
                    10:5d:32:24:82:66:dd:e1:fd:f0:03:15:75:67:c3:
                    cc:2d:ee:d4:b7:e8:ef:44:b3:da:f3:25:e4:a7:27:
                    43:d6:1b:f7:4a:36:a9:ef:01:8c:83:87:db:fb:a3:
                    a2:2d:29:f8:0b:9f:65:31:d9:48:24:ed:2f:0e:4e:
                    75:c9:37:c5:0d:e3:ab:e9:a9:7e:53:43:57:3d:3e:
                    6a:ba:03:80:74:62:b8:bd:52:f7:06:cd:74:d8:98:
                    88:5d:d3:0b:21:0e:26:3d:ca:e8:85:14:fb:31:be:
                    b0:0d:34:8f:78:86:41:7f:bc:38:11:02:7f:ad:47:
                    10:43:ec:58:cc:5b:23:7f:05:e8:ea:e9:0e:d2:52:
                    fc:e2:a7:0e:23:ed:96:5c:c0:10:2b:f4:88:bb:1b:
                    ca:48:0d:0a:86:c7:95:c2:bb:0f:dd:fd:01:2c:6b:
                    09:14:30:90:cc:f8:b0:3f:28:c4:e4:ff:b8:25:e6:
                    cd:3a:a1:60:7d:64:3a:f9:e6:4a:3a:b3:40:56:01:
                    4e:53:a4:97:6d:42:53:e5:8c:ad:c2:11:c5:fc:bd:
                    53:b2:8c:6e:ae:d4:ff:f4:a0:2e:95:4d:9d:ab:f3:
                    e5:65:73:61:b4:c2:e8:76:47:b1:40:2b:aa:3b:81:
                    d9:05:2e:fa:7c:47:8a:7d:0c:b3:be:59:7f:d9:02:
                    c6:d9:a4:94:10:ba:5f:aa:a8:83:db:84:3a:65:dc:
                    af:2b:af:9f:1d:e1:b9:ce:b3:4d:8a:50:64:b0:64:
                    56:c3:38:2b:e7:97:21:05:e5:96:95:4b:e8:ef:de:
                    03:67:f5:c3:78:ef:3c:b1:9f:04:76:29:04:74:58:
                    92:81:d7:06:35:63:db:84:02:3a:5a:d7:2c:ff:7c:
                    6e:cf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                17:D9:D6:25:27:67:F9:31:C2:49:43:D9:30:36:44:8C:6C:A9:4F:EB
            X509v3 Subject Key Identifier: 
                4B:BC:35:C9:C2:C1:27:14:14:8E:F6:8D:74:F8:34:45:07:F4:BB:5D
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.vesterling.com, DNS:vesterling.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Feb 20 18:59:09.254 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:17:E2:B1:90:73:7E:ED:54:E1:E0:A7:5E:
                                D1:FF:7F:D2:09:7C:6E:41:D6:6E:0D:45:8B:87:FF:54:
                                6D:C9:91:5D:02:21:00:84:8D:68:37:B4:31:A0:74:A4:
                                A8:F8:E1:B7:AC:75:B5:AC:67:09:DC:F0:8F:5D:3D:06:
                                29:9F:C3:CE:84:4A:59
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 20 18:59:09.578 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:23:E9:06:7D:D1:83:BF:61:29:9B:BD:BD:
                                46:A1:FF:E5:AF:D6:5B:F4:78:09:1D:A4:B4:D3:5A:85:
                                55:8F:46:7A:02:20:4F:A9:00:EA:06:F6:3A:3D:B2:5D:
                                18:E3:63:D1:7C:3C:A4:9E:D3:96:D4:58:DA:46:6D:AC:
                                99:DA:30:91:4A:A9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 20 18:59:09.303 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:1D:AA:6A:12:FD:B7:B3:E1:A2:A2:06:91:
                                80:82:32:CB:85:74:09:15:D3:8A:9A:80:7E:BE:A9:01:
                                19:42:6E:6E:02:21:00:E7:ED:57:0E:86:0F:11:89:F3:
                                7A:1D:88:86:F3:54:C4:5C:ED:72:03:65:BD:30:93:AE:
                                7B:24:D1:11:AB:84:9C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4f:6c:07:55:dd:76:6c:fe:2f:ea:6c:be:e3:3b:d4:4d:dd:55:
        46:fb:27:fd:b8:f2:d2:56:e2:e3:90:42:d4:c0:72:b7:d7:1b:
        83:c3:91:9a:85:d0:69:5f:ed:b9:4b:ef:63:93:5e:65:5c:2e:
        ff:c8:83:60:01:dc:04:09:da:f7:a3:6d:6f:03:84:e2:a8:df:
        04:de:1b:9f:3e:8a:fc:f6:c6:73:55:8e:c5:2b:94:bb:5a:e8:
        2e:02:16:e1:8b:44:ee:12:68:08:c1:4e:a0:81:69:4e:51:a9:
        d4:e9:9d:36:2f:ff:77:5b:ed:b8:b9:22:81:aa:7e:56:4a:fe:
        1a:76:39:1a:6b:0f:08:a6:ad:54:74:e6:90:5b:8b:5b:1a:75:
        27:26:eb:b5:14:f3:c7:b1:f1:9d:0f:8e:fa:52:08:a9:8b:62:
        55:39:23:d9:26:e4:35:6e:96:29:7d:66:22:93:75:0c:73:29:
        49:c0:39:d6:a6:32:c8:31:78:36:5c:08:70:a6:b7:35:72:a6:
        c8:c2:3f:fa:cb:d6:a1:d4:11:39:2f:7f:ab:2b:9b:06:7f:de:
        7a:d5:5e:70:c6:63:96:4c:67:ca:d9:80:d9:8e:cd:d6:39:25:
        19:48:95:a4:fd:68:dd:4d:55:01:48:a6:c3:47:55:aa:53:d9:
        c3:a1:42:3e