*.hellofresh.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:3c:d7:7a:a8:be:18:69:6e:c7:b1:92:f2:e8:71:ba was issued on by Amazon.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.hellofresh.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:3c:d7:7a:a8:be:18:69:6e:c7:b1:92:f2:e8:71:ba
Serial Number (int): 16266644197054984819346861383687369146
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 38:92:c4:af:bc:8b:82:10:0b:e0:f5:10:0f:bd:16:fd:66:59:f9:0c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 73:30:69:97:3a:34:93:2c:84:16:0c:1d:c0:84:0a:bb:66:72:f0:08
Fingerprint (sha256): 0e:12:e0:73:a2:6d:05:fa:27:66:c9:39:6a:91:08:4b:c0:58:c9:28:87:bc:19:83:4d:9b:70:e0:e9:27:4f:83

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.hellofresh.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hellofresh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hellofresh.com
hellofresh.de
*.hellofresh.co.uk
hellofresh.dk
hellofresh.lu
*.factor75.com
*.hellofresh.it
*.hellofresh.com.au
*.everyplate.com
*.hellofresh.io
everyplate.com
*.hellofresh.de
chefsplate.com
goodchop.com
hellofresh.it
everyplate.com.au
*.greenchef.co.uk
hellofresh.com.au
*.hellofresh.lu
*.hellofresh.dk
hellofresh.nl
hellofresh.no
greenchef.com
hellofresh.be
*.hellofresh.ca
hellofresh.jp
*.hellofresh.se
*.hellofresh.co.nz
hellofresh.fr
hellofresh.com
hellofresh.at
*.hellofresh.ch
*.everyplate.com.au
factor75.com
hellofresh.co.uk
*.live.hellofresh.io
hellofresh.ca
*.hellofresh.no
hellofresh.co.nz
*.hellofresh.nl
hellofresh.ch
*.greenchef.com
*.hellofresh.at
*.hellofresh.fr
greenchef.co.uk
*.goodchop.com
*.chefsplate.com
hellofresh.se
*.hellofresh.be
*.hellofresh.jp
*.live-k8s.hellofresh.io

Other certificates including the domain name hellofresh.com

(limited to 100 certificates)
s2-san.cloudinary.com
s2-san.cloudinary.com
*.hellofresh.com
incapsula.com
hellofresh.com
*.hellofresh.com
hellofresh.com
s3-cloudinary-pin.map.fastly.net
*.hellofresh.com
gtms.hft.hellofresh.com
s2-san.cloudinary.com
dam-us.hellofresh.com
s3-cloudinary-pin.map.fastly.net
hellofresh.com
*.hellofresh.com
partner.hellofresh.com
gtms.hft.hellofresh.com
s2-san.cloudinary.com
s2-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
mi.hellofresh.com
mi.hellofresh.com
intranet.hellofresh.com
s2-san.cloudinary.com
careers.hellofresh.com
s2-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
*.hellofresh.com
s2-san.cloudinary.com
sentinel-prime.hellofresh.com
s2-san.cloudinary.com
try.hellofresh.com
partner.hellofresh.com
*.hellofresh.com
hft.hellofresh.se
s2-san.cloudinary.com
*.hellofresh.com
gtms.hft.hellofresh.com
hft.hellofresh.ca
s2-san.cloudinary.com
careers.hellofresh.com
*.hellofresh.com
*.hellofresh.com
tms.hft.hellofresh.at
mdm.hellofresh.com
s2-san.cloudinary.com
incapsula.com
hubspot.hellofresh.com
s2-san.cloudinary.com
sentinel-prime.hellofresh.com
hb.hellofresh.com
*.ops.hellofresh.com
*.hellofresh.com
akamai-san85.exacttarget.com
blog.hellofresh.com
incapsula.com
intranet.hellofresh.com
factormeals.com
incapsula.com
s2-san.cloudinary.com
intranet.hellofresh.com
hft.hellofresh.ca
share.hellofresh.com
lp.hellofresh.com
s2-san.cloudinary.com
tms.hft.hellofresh.com
s2-san.cloudinary.com
s2-san.cloudinary.com
careers.hellofresh.com
www.blog.hellofresh.com
support.hellofresh.com
incapsula.com
tms.hft.hellofresh.at
s2-san.cloudinary.com
s2-san.cloudinary.com
hb.hellofresh.com
hft.hellofresh.ca
tms.hft.hellofresh.at
*.hellofresh.com
s2-san.cloudinary.com
try.hellofresh.com
bici.hellofresh.com
hellofresh.com
blog.hellofresh.com
zest.hellofresh.com
s2-cloudinary-pin.map.fastly.net
sentinel-prime.hellofresh.com
careers.hellofresh.com
s2-san.cloudinary.com
akamai-san85.exacttarget.com
s3-cloudinary-pin.map.fastly.net
hellofresh.com
blog.hellofresh.com
s2-san.cloudinary.com
s2-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
blog.hellofresh.com
s2-san.cloudinary.com
blog.hellofresh.com

Certificate

The complete raw certificate details for *.hellofresh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHwjCCBqqgAwIBAgIQDDzXeqi+GGlux7GS8uhxujANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTExMDYwMDAwMDBaFw0yMjEyMDUy
MzU5NTlaMBsxGTAXBgNVBAMMECouaGVsbG9mcmVzaC5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCs6f4lnDWr6j+082yxniGP+QZwg7vByFN7k4eS
II4nrd/AjhyvXgqjuKWm6FP3X3oxgRo2fmSHJpSva3PQtfmLAWF7XEfPY4pJJN7z
zpOppONEnfOsEToorsO45DvlzHmBr+CjV0hOniZeW3IpYHMgYS+Ypx2MMvCgqtDC
IqhajG3TM5Qo5/siJ5Gcb7nAEXYxhsMqJ/JwzpEoH512Oh1YbNVDwl7C44wzd6tP
WwQW6stw7IyOz0u3RSpWcj551RmLZ9d69df3zhWu3LR5pBlS0DGMa6tFcFo547B6
PcGPCzYv+ODbT6aUfbzJadqZ2+1zDC1mZcRHHsTqx4xPctY5AgMBAAGjggTVMIIE
0TAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUOJLE
r7yLghAL4PUQD70W/WZZ+QwwggNwBgNVHREEggNnMIIDY4IQKi5oZWxsb2ZyZXNo
LmNvbYINaGVsbG9mcmVzaC5kZYISKi5oZWxsb2ZyZXNoLmNvLnVrgg1oZWxsb2Zy
ZXNoLmRrgg1oZWxsb2ZyZXNoLmx1gg4qLmZhY3Rvcjc1LmNvbYIPKi5oZWxsb2Zy
ZXNoLml0ghMqLmhlbGxvZnJlc2guY29tLmF1ghAqLmV2ZXJ5cGxhdGUuY29tgg8q
LmhlbGxvZnJlc2guaW+CDmV2ZXJ5cGxhdGUuY29tgg8qLmhlbGxvZnJlc2guZGWC
DmNoZWZzcGxhdGUuY29tggxnb29kY2hvcC5jb22CDWhlbGxvZnJlc2guaXSCEWV2
ZXJ5cGxhdGUuY29tLmF1ghEqLmdyZWVuY2hlZi5jby51a4IRaGVsbG9mcmVzaC5j
b20uYXWCDyouaGVsbG9mcmVzaC5sdYIPKi5oZWxsb2ZyZXNoLmRrgg1oZWxsb2Zy
ZXNoLm5sgg1oZWxsb2ZyZXNoLm5vgg1ncmVlbmNoZWYuY29tgg1oZWxsb2ZyZXNo
LmJlgg8qLmhlbGxvZnJlc2guY2GCDWhlbGxvZnJlc2guanCCDyouaGVsbG9mcmVz
aC5zZYISKi5oZWxsb2ZyZXNoLmNvLm56gg1oZWxsb2ZyZXNoLmZygg5oZWxsb2Zy
ZXNoLmNvbYINaGVsbG9mcmVzaC5hdIIPKi5oZWxsb2ZyZXNoLmNoghMqLmV2ZXJ5
cGxhdGUuY29tLmF1ggxmYWN0b3I3NS5jb22CEGhlbGxvZnJlc2guY28udWuCFCou
bGl2ZS5oZWxsb2ZyZXNoLmlvgg1oZWxsb2ZyZXNoLmNhgg8qLmhlbGxvZnJlc2gu
bm+CEGhlbGxvZnJlc2guY28ubnqCDyouaGVsbG9mcmVzaC5ubIINaGVsbG9mcmVz
aC5jaIIPKi5ncmVlbmNoZWYuY29tgg8qLmhlbGxvZnJlc2guYXSCDyouaGVsbG9m
cmVzaC5mcoIPZ3JlZW5jaGVmLmNvLnVrgg4qLmdvb2RjaG9wLmNvbYIQKi5jaGVm
c3BsYXRlLmNvbYINaGVsbG9mcmVzaC5zZYIPKi5oZWxsb2ZyZXNoLmJlgg8qLmhl
bGxvZnJlc2guanCCGCoubGl2ZS1rOHMuaGVsbG9mcmVzaC5pbzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQw
MqAwoC6GLGh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEu
Y3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF
BQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF
BzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQw
DAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAfqOSS3R62ZEkoylOMQ4uJ8FnTRf+wzn97DdpacBbsQMHWtW/15/18t1G
jffoVpbqfCwgvvN3x+/yn+X3AXuGllGnCleFZM4uOseUZ54gg4zrS+ma4yxNSV/Q
9rx9c1JJtkx0DZCXKl9sC6tMTM6GEXiuvaeOWoB91EN4aUIHEl2QTJn4A1POC/FE
M7a3+WeXSqRdRjnfIrPLgCuE6zWRMJYZIN217zG0ChELdeTG9OBnhulHf/GrfYhn
abXLyUcOH8Ox12E0wEcNyIp2LQKxU93172heWnb5/uKeAS11xocZl6cUNwBUQc2m
sfEj1YhGAxSDEWia/G24iilpECA8wQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOn+JZw1q+o/tPNssZ4h
j/kGcIO7wchTe5OHkiCOJ63fwI4cr14Ko7ilpuhT9196MYEaNn5khyaUr2tz0LX5
iwFhe1xHz2OKSSTe886TqaTjRJ3zrBE6KK7DuOQ75cx5ga/go1dITp4mXltyKWBz
IGEvmKcdjDLwoKrQwiKoWoxt0zOUKOf7IieRnG+5wBF2MYbDKifycM6RKB+ddjod
WGzVQ8JewuOMM3erT1sEFurLcOyMjs9Lt0UqVnI+edUZi2fXevXX984Vrty0eaQZ
UtAxjGurRXBaOeOwej3Bjws2L/jg20+mlH28yWnamdvtcwwtZmXERx7E6seMT3LW
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16266644197054984819346861383687369146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hellofresh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21828374585301528767898960413913774961112202443066116331410620871804172352090736123461402496955734972000565474943532265301658479109789957558712131846077198049045476566754661454598530534421277433353478079663443050455225981071775273632139864933016177819380285015533478034673950873205019092271146936610356326618033521538077726842325456222177346371310389946340196984548789144212569291947359968614049018728556336418717857254710353321569344086545095748754459604555122784529929560543170662236299565683214134798200348490065808032549314413452824639940212679805808899807418425136316779547483553688777569710462753823727958545977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3892c4afbc8b82100be0f5100fbd16fd6659f90c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (871 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factor75.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everyplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everyplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefsplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodchop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everyplate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenchef.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everyplate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor75.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live.hellofresh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenchef.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodchop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chefsplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellofresh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellofresh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-k8s.hellofresh.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ea3924b747ad99124a3294e310e2e27c1674d17fec339fdec376969c05bb103075ad5bfd79ff5f2dd468df7e85696ea7c2c20bef377c7eff29fe5f7017b869651a70a578564ce2e3ac794679e20838ceb4be99ae32c4d495fd0f6bc7d735249b64c740d90972a5f6c0bab4c4cce861178aebda78e5a807dd44378694207125d904c99f80353ce0bf14433b6b7f967974aa45d4639df22b3cb802b84eb359130961920ddb5ef31b40a110b75e4c6f4e06786e9477ff1ab7d886769b5cbc9470e1fc3b1d76134c0470dc88a762d02b153ddf5ef685e5a76f9fee29e012d75c6871997a71437005441cda6b1f123d5884603148311689afc6db88a296910203cc1