anchor.diff:    SSLCertificateFile /etc/ssl/certs/www.openstreetmap.org.pem
     SSLCertificateKeyFile /etc/ssl/private/www.openstreetmap.org.key
   
  +  Header always set Cache-Control "max-age=31536000"
  +  Header always set Expires "Tue, 19 Jan 2038 03:14:08 GMT"
  +
     RedirectPermanent / https://www.openstreetmap.org/
   </VirtualHost>
   
  
positive.code:   ServerName openstreetmap.org
    ServerAlias *
  
    RewriteEngine on
  
    RewriteRule ^/\.well-known/acme-challenge/(.*)$ http://acme.openstreetmap.org/.well-known/acme-challenge/$1 [R=permanent,L]
  
    RewriteCond %{REQUEST_URI} !^/server-status$
    RewriteRule ^(.*)$ https://openstreetmap.org$1 [L,NE,R=permanent]
  </VirtualHost>
  
  <VirtualHost *:443>
  
negative.code: 
    #
    # Block requests for the old 404 map tile
    # and force cache headers on response
    #
    <Location /openlayers/img/404.png>
      Header always set Cache-Control "max-age=31536000"
      Header always set Expires "Tue, 19 Jan 2038 03:14:08 GMT"
      RewriteRule ^ - [G,L]
    </Location>
  
    #
    # Block attempts to access old API versions
  