This endpoint is expected to require a **client certificate** (mTLS). (Detected via origin TLS vars or the clientCertificateInfo header.)
Signals
HTTPS
true
Client cert presented (Origin TLS vars OR Imperva header)
false
Origin mTLS: client verify
(empty)
Origin mTLS: Client CN
(empty)
Origin mTLS: Client DN
(empty)
Imperva header: clientCertificateInfo present
false
Imperva header: clientCertificateInfo length
0
Imperva header: clientCertificateInfo sha256
(empty)
This page detects client certs either via origin TLS vars (SSL_CLIENT_*) or an Imperva-forwarded header (clientCertificateInfo).
Note: your clientCertificateInfo appears to be base64 (not PEM), which is fine for presence + hash proof.
Origin TLS Protocol/Cipherunknown on LiteSpeed because those vars aren’t exposed to PHP.
TLS Snapshot
Host
site.owen.rocks
Expected host
site.owen.rocks
Real client IP (Imperva)
(not provided)
Origin TLS protocol (LiteSpeed)
unknown
Origin TLS cipher (LiteSpeed)
unknown
Client TLS protocol (Imperva header)
(not provided)
Client TLS cipher (Imperva header)
(not provided)
Server
LiteSpeed
User-Agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Intended result here is HTTPS=true and Client cert presented=true (via Imperva header or origin mTLS).
If you want Client TLS protocol/cipher populated, add Imperva headers clientTlsProtocol and clientTlsCipher.