[xyrompec]

Originally Posted by DNSB

Looking at the first 3 bytes of the file, the CRL found there suggests that it is a certificate revocation list.

Thanks! So seems like it's fine to let the request pass through. I had guessed it was something related to certificates by "x-kn-appID" of the request header:

GET https://52.84.169.98/1/LATEST                                                                

Host:           d18os95hu8sz6h.cloudfront.net                                                                                             
Accept:         */*                                                                                                                       
If-None-Match:  "59f07dfa6a5832524de100f2f0118308"                                                                                        
x-kn-appID:     KINDLEAPP:com.lab126.certmand