Caddy, in the container.

This is SNI passthrough. The certificate you are looking at was obtained by Caddy inside the container yinyue-nl and never left it — the router read the ClientHello, picked this container and spliced the bytes on without decrypting them.

served by : caddy on :1443 (container)
name      : test-nl.11100.top
scheme    : https