*.hellofresh.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:ab:fb:6b:87:f8:27:ad:af:7c:a5:3a:2b:5c:81:a6 was issued on by Amazon.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.hellofresh.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ab:fb:6b:87:f8:27:ad:af:7c:a5:3a:2b:5c:81:a6
Serial Number (int): 10197578137608249535736630067626541478
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9d:b6:42:51:8a:7c:c9:0f:0b:1d:0f:36:e3:d3:40:8a:9a:5d:e4:e7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 6e:77:55:9e:fe:fe:a8:a2:db:60:eb:da:6f:d4:1b:20:cb:67:31:80
Fingerprint (sha256): 0c:8e:da:40:2f:12:46:6c:b6:79:1b:0b:25:36:b1:3b:f0:16:91:b6:57:5c:8b:81:66:32:10:41:90:1b:d7:78

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.hellofresh.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hellofresh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hellofresh.com
*.hellofresh.ie
*.thepetstable.com
hellofresh.de
*.hellofresh.co.uk
*.factormeals.nl
hellofresh.dk
hellofresh.lu
*.factor75.com
*.factormeals.be
*.hellofresh.it
*.hellofresh.es
*.hellofresh.com.au
*.everyplate.com
repasfactor.ca
*.hellofresh.io
factormeals.nl
everyplate.com
*.hellofresh.de
chefsplate.com
goodchop.com
hellofresh.it
factormeals.se
everyplate.com.au
*.youfoodz.com
*.greenchef.co.uk
factormeals.be
*.hellofresh.lu
hellofresh.com.au
hellofresh.ie
*.hellofresh.dk
hellofresh.nl
factormeals.ca
hellofresh.no
greenchef.com
hellofresh.be
*.hellofresh.ca
hellofresh.jp
greenchef.nl
*.hellofresh.se
hellofresh.fr
*.hellofresh.co.nz
hellofresh.es
hellofresh.com
hellofresh.at
*.hellofresh.ch
*.everyplate.com.au
factor75.com
hellofresh.co.uk
*.factormeals.dk
hellofresh.ca
*.live.hellofresh.io
*.repasfactor.ca
*.factormeals.se
*.hellofresh.no
hellofresh.co.nz
*.hellofresh.nl
hellofresh.ch
*.factormeals.ca
*.greenchef.com
*.hellofresh.at
youfoodz.com
greenchef.co.uk
thepetstable.com
*.hellofresh.fr
*.goodchop.com
*.chefsplate.com
hellofresh.se
*.hellofresh.be
*.greenchef.nl
*.hellofresh.jp
*.live-k8s.hellofresh.io
factormeals.dk

Other certificates including the domain name hellofresh.com

(limited to 100 certificates)
s2-san.cloudinary.com
s2-san.cloudinary.com
*.hellofresh.com
incapsula.com
hellofresh.com
*.hellofresh.com
hellofresh.com
s3-cloudinary-pin.map.fastly.net
*.hellofresh.com
gtms.hft.hellofresh.com
s2-san.cloudinary.com
dam-us.hellofresh.com
s3-cloudinary-pin.map.fastly.net
hellofresh.com
*.hellofresh.com
partner.hellofresh.com
gtms.hft.hellofresh.com
s2-san.cloudinary.com
s2-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
mi.hellofresh.com
mi.hellofresh.com
intranet.hellofresh.com
s2-san.cloudinary.com
careers.hellofresh.com
s2-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
*.hellofresh.com
s2-san.cloudinary.com
sentinel-prime.hellofresh.com
s2-san.cloudinary.com
try.hellofresh.com
partner.hellofresh.com
*.hellofresh.com
hft.hellofresh.se
s2-san.cloudinary.com
*.hellofresh.com
gtms.hft.hellofresh.com
hft.hellofresh.ca
s2-san.cloudinary.com
careers.hellofresh.com
*.hellofresh.com
*.hellofresh.com
tms.hft.hellofresh.at
mdm.hellofresh.com
s2-san.cloudinary.com
incapsula.com
hubspot.hellofresh.com
s2-san.cloudinary.com
sentinel-prime.hellofresh.com
hb.hellofresh.com
*.ops.hellofresh.com
*.hellofresh.com
akamai-san85.exacttarget.com
blog.hellofresh.com
incapsula.com
intranet.hellofresh.com
factormeals.com
incapsula.com
s2-san.cloudinary.com
intranet.hellofresh.com
hft.hellofresh.ca
share.hellofresh.com
lp.hellofresh.com
s2-san.cloudinary.com
tms.hft.hellofresh.com
s2-san.cloudinary.com
s2-san.cloudinary.com
careers.hellofresh.com
www.blog.hellofresh.com
support.hellofresh.com
incapsula.com
tms.hft.hellofresh.at
s2-san.cloudinary.com
s2-san.cloudinary.com
hb.hellofresh.com
hft.hellofresh.ca
tms.hft.hellofresh.at
*.hellofresh.com
s2-san.cloudinary.com
try.hellofresh.com
bici.hellofresh.com
hellofresh.com
blog.hellofresh.com
zest.hellofresh.com
s2-cloudinary-pin.map.fastly.net
sentinel-prime.hellofresh.com
careers.hellofresh.com
s2-san.cloudinary.com
akamai-san85.exacttarget.com
s3-cloudinary-pin.map.fastly.net
hellofresh.com
blog.hellofresh.com
s2-san.cloudinary.com
s2-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
blog.hellofresh.com
s2-san.cloudinary.com
blog.hellofresh.com

Certificate

The complete raw certificate details for *.hellofresh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf157dItNwgQ+udeUMJn
0l33gcssZGF7No8tCPTxktnJfYFxHg8A2/mXw9W0A0Y8fjP0xTnkz6tHalouB+QO
DlWLa0rdvhmS2txfUVU3LtVoWJz3XjzhHpAb/3hD0WV4NxmExHrAW9Hgilu/kgJi
1CIZQ9MCJ9pFl3BpdHilNREt1IifHg863WejgnTt61BGV9NTBTSpdjopbVBHPGxn
32yADSSyJlN9kJFv1cyFNoQcNfCCDsd4uXW3XRwcH2cukALrcmtvoMbLff48mktG
7XtD1Wcp61BLTKle8MaLHd2vlsCzTVql3MZx5UW0YGnKCsTbnFulz1mIhx3TlL1G
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10197578137608249535736630067626541478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hellofresh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21964220573899408321150384428172891790520765160085591326017160082019840372593865205895000294135795138142828551785961384501261014429101736851458060543258502516014561208269941603480188406226573246396744088713513290883917678680129255696687968942087995383304532877525123181016264834878954659503373214824244817835047156364516005582551599081022753809785962977247791518959763723252257108506903784272449213501482247089635485195369057635261433133336271756823922113897608852154076547203217506736572507576445272487566167828050127736122490665659491094944483287124846674933354601179409176530231956498600139902593226874602647275189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9db642518a7cc90f0b1d0f36e3d3408a9a5de4e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepetstable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factormeals.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factor75.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factormeals.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everyplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repasfactor.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factormeals.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everyplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefsplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodchop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factormeals.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everyplate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youfoodz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenchef.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factormeals.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factormeals.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenchef.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everyplate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor75.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factormeals.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live.hellofresh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repasfactor.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factormeals.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factormeals.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youfoodz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenchef.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepetstable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodchop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chefsplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenchef.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-k8s.hellofresh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factormeals.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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