# Easiest way to debug is to disable proxy for a second on that DNS-record, or use curl from the same host as the web host and override dns resolution to see the certificate it is serving