Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            01:ca:49:70:b9:39:18:32:1b:64:67:ac:fe:78:f4:6f

        Signature Algorithm: sha256WithRSAEncryption

        Issuer: C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1

        Validity

            Not Before: Jun 23 00:00:00 2025 GMT

            Not After : Dec 19 23:59:59 2025 GMT

        Subject: C = US, ST = Pennsylvania, L = Paoli, O = "Duck Duck Go, Inc.", CN = *.duckduckgo.com

        Subject Public Key Info:

            Public Key Algorithm: rsaEncryption

                Public-Key: (2048 bit)

                Modulus:

                    00:f5:5d:a6:34:fb:8e:9a:a1:9a:4a:a0:da:b5:d2:

                    70:26:80:88:97:2a:2f:9b:95:bc:57:88:2e:33:d2:

                    e3:c4:ed:e1:fe:19:6c:53:17:8b:08:b8:4c:aa:68:

                    c6:47:70:30:39:93:21:cf:07:a4:23:d4:b1:68:2c:

                    e8:b3:61:2c:2d:35:39:20:ce:eb:2e:ea:0e:17:11:

                    ec:bf:61:fd:4b:e7:65:64:2e:f5:3d:a9:bf:81:a0:

                    e7:4f:9d:9a:3b:b6:37:07:e2:2e:a5:b5:c5:b2:03:

                    eb:f6:b1:43:37:5b:5f:7b:fd:eb:ae:d4:33:23:9b:

                    b7:30:94:c8:66:54:a4:b7:a9:a4:af:2f:cc:a2:d3:

                    c1:df:c7:83:3f:01:cb:04:04:db:bf:d9:90:92:7d:

                    ec:99:17:45:93:24:4e:2f:e6:a2:41:61:9f:d6:ee:

                    5a:43:30:a7:fd:6f:94:4f:ce:cb:30:f8:fd:87:f3:

                    fb:84:46:32:05:9f:27:db:d3:b6:1b:72:f8:ec:07:

                    74:8c:fc:90:f8:c3:83:f2:cb:d1:cf:d7:ad:b1:3f:

                    60:79:8a:be:b4:2f:8e:15:68:3d:51:d6:3e:d5:ac:

                    14:f4:50:23:ae:9e:16:2e:6f:0b:e5:d3:77:15:e2:

                    01:1a:45:1c:d6:3b:3d:14:bf:52:93:8e:04:da:b0:

                    cf:23

                Exponent: 65537 (0x10001)

        X509v3 extensions:

            X509v3 Authority Key Identifier:

                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17

            X509v3 Subject Key Identifier:

                36:BD:9F:CF:39:E9:E2:E2:F5:0D:08:F3:F0:3B:7D:EE:14:40:7A:62

            X509v3 Subject Alternative Name:

                DNS:*.duckduckgo.com, DNS:duckduckgo.com

            X509v3 Certificate Policies:

                Policy: 2.23.140.1.2.2

                  CPS: http://www.digicert.com/CPS

            X509v3 Key Usage: critical

                Digital Signature, Key Encipherment

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 CRL Distribution Points:

                Full Name:

                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

                Full Name:

                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

            Authority Information Access:

                OCSP - URI:http://ocsp.digicert.com

                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

            X509v3 Basic Constraints: critical

                CA:FALSE

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:

                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A

                    Timestamp : Jun 23 14:22:30.132 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:44:02:20:6A:F4:6A:35:23:57:A6:35:CE:3B:15:B5:

                                4E:FD:CC:74:B4:54:B3:91:EA:9E:0F:0D:26:D5:FE:8C:

                                6A:32:56:96:02:20:53:C9:6C:FA:B7:A8:57:EE:C9:BD:

                                D0:A1:B1:D2:E8:3B:5F:AD:86:52:B0:64:50:D7:2E:D0:

                                9D:0D:69:77:46:FF

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : ED:3C:4B:D6:E8:06:C2:A4:A2:00:57:DB:CB:24:E2:38:

                                01:DF:51:2F:ED:C4:86:C5:70:0F:20:DD:B7:3E:3F:E0

                    Timestamp : Jun 23 14:22:30.173 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:44:02:20:18:ED:E1:28:A6:E3:04:3D:29:20:C6:0D:

                                0B:89:DA:8B:BF:1D:0A:40:1A:44:93:BE:9A:91:AA:6F:

                                FB:7E:57:A4:02:20:27:DC:DE:C3:8E:83:6A:BE:FD:6F:

                                25:DB:52:31:53:02:DA:55:4B:6F:7B:F4:2B:5D:52:DE:

                                DC:67:10:4F:60:AA

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : A4:42:C5:06:49:60:61:54:8F:0F:D4:EA:9C:FB:7A:2D:

                                26:45:4D:87:A9:7F:2F:DF:45:59:F6:27:4F:3A:84:54

                    Timestamp : Jun 23 14:22:30.200 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:21:00:FD:79:24:2D:49:08:DE:B8:59:8B:0F:

                                51:48:3F:09:CE:06:20:C3:DF:1C:45:92:F8:D2:33:A1:

                                B1:75:1F:8F:61:02:20:4B:51:E0:DA:C7:79:1B:EF:48:

                                58:73:EA:68:EF:33:BF:D9:CB:8E:3E:8E:AF:DA:80:FB:

                                E7:D5:61:F6:F0:66:A1

    Signature Algorithm: sha256WithRSAEncryption

    Signature Value:

        8e:8a:99:93:3a:e5:12:0d:7c:1d:0b:25:f8:2f:4c:79:70:eb:

        68:f0:13:34:5f:53:19:cf:f8:db:c2:2c:92:b9:33:2d:c1:05:

        05:1f:44:c0:70:89:ea:c3:b0:08:0b:77:81:75:aa:ba:56:7e:

        f1:17:54:4d:92:13:b6:39:13:1e:d6:3b:f2:49:55:4a:33:59:

        71:da:46:20:42:5e:03:72:48:a1:b0:05:72:ea:f4:d2:bf:30:

        cf:f1:a8:e3:4c:a2:14:42:6a:2a:be:a1:69:a8:fb:3c:54:2c:

        cf:b8:5b:a8:46:a3:b0:74:9d:36:b6:96:2c:54:a4:53:6f:ef:

        44:22:97:68:2f:bd:1a:59:96:62:67:c3:30:99:79:a4:29:b2:

        20:fe:a9:b6:7a:39:59:7f:93:b1:0c:01:88:bc:53:b4:ba:ed:

        b9:0e:4b:9d:e6:ba:5d:12:8f:5c:d8:22:f4:54:29:8e:23:43:

        de:9e:31:b8:06:a7:42:03:54:50:6a:66:b6:26:0b:c8:f0:75:

        a1:93:6a:4f:27:0b:ea:f0:de:e1:8a:c2:c9:64:c7:1f:15:3e:

        0e:80:59:cc:86:c9:46:34:d8:82:4d:21:3d:a2:a3:d4:92:15:

        ba:cd:ac:cf:07:d8:24:3e:c5:f7:58:a7:3a:75:7a:89:68:75:

        ae:2e:28:99

-----BEGIN CERTIFICATE-----

MIIG6zCCBdOgAwIBAgIQAcpJcLk5GDIbZGes/nj0bzANBgkqhkiG9w0BAQsFADBZ

MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE

aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjUw

NjIzMDAwMDAwWhcNMjUxMjE5MjM1OTU5WjBsMQswCQYDVQQGEwJVUzEVMBMGA1UE

CBMMUGVubnN5bHZhbmlhMQ4wDAYDVQQHEwVQYW9saTEbMBkGA1UEChMSRHVjayBE

dWNrIEdvLCBJbmMuMRkwFwYDVQQDDBAqLmR1Y2tkdWNrZ28uY29tMIIBIjANBgkq

hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9V2mNPuOmqGaSqDatdJwJoCIlyovm5W8

V4guM9LjxO3h/hlsUxeLCLhMqmjGR3AwOZMhzwekI9SxaCzos2EsLTU5IM7rLuoO

FxHsv2H9S+dlZC71Pam/gaDnT52aO7Y3B+IupbXFsgPr9rFDN1tfe/3rrtQzI5u3

MJTIZlSkt6mkry/MotPB38eDPwHLBATbv9mQkn3smRdFkyROL+aiQWGf1u5aQzCn

/W+UT87LMPj9h/P7hEYyBZ8n29O2G3L47Ad0jPyQ+MOD8svRz9etsT9geYq+tC+O

FWg9UdY+1awU9FAjrp4WLm8L5dN3FeIBGkUc1js9FL9Sk44E2rDPIwIDAQABo4ID

mjCCA5YwHwYDVR0jBBgwFoAUdIWAwGbH3zfez70pN6oDHb7tzRcwHQYDVR0OBBYE

FDa9n8856eLi9Q0I8/A7fe4UQHpiMCsGA1UdEQQkMCKCECouZHVja2R1Y2tnby5j

b22CDmR1Y2tkdWNrZ28uY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYB

BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMC

BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQw

SKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcy

VExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGln

aWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEu

Y3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp

Z2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQu

Y29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAwG

A1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1ABLxTjS9U3JM

hAYZw48/ehP457Vih4icbTAFhOvlhiY6AAABl50rTPQAAAQDAEYwRAIgavRqNSNX

pjXOOxW1Tv3MdLRUs5Hqng8NJtX+jGoyVpYCIFPJbPq3qFfuyb3QobHS6DtfrYZS

sGRQ1y7QnQ1pd0b/AHUA7TxL1ugGwqSiAFfbyyTiOAHfUS/txIbFcA8g3bc+P+AA

AAGXnStNHQAABAMARjBEAiAY7eEopuMEPSkgxg0LidqLvx0KQBpEk76akapv+35X

pAIgJ9zew46Dar79byXbUjFTAtpVS2979CtdUt7cZxBPYKoAdgCkQsUGSWBhVI8P

1Oqc+3otJkVNh6l/L99FWfYnTzqEVAAAAZedK004AAAEAwBHMEUCIQD9eSQtSQje

uFmLD1FIPwnOBiDD3xxFkvjSM6GxdR+PYQIgS1Hg2sd5G+9IWHPqaO8zv9nLjj6O

r9qA++fVYfbwZqEwDQYJKoZIhvcNAQELBQADggEBAI6KmZM65RINfB0LJfgvTHlw

62jwEzRfUxnP+NvCLJK5My3BBQUfRMBwierDsAgLd4F1qrpWfvEXVE2SE7Y5Ex7W

O/JJVUozWXHaRiBCXgNySKGwBXLq9NK/MM/xqONMohRCaiq+oWmo+zxULM+4W6hG

o7B0nTa2lixUpFNv70Qil2gvvRpZlmJnwzCZeaQpsiD+qbZ6OVl/k7EMAYi8U7S6

7bkOS53mul0Sj1zYIvRUKY4jQ96eMbgGp0IDVFBqZrYmC8jwdaGTak8nC+rw3uGK

wslkxx8VPg6AWcyGyUY02IJNIT2io9SSFbrNrM8H2CQ+xfdYpzp1eoloda4uKJk=

-----END CERTIFICATE-----