{"domain":"duck.com","port":443,"address":"52.142.124.215","resolved_addresses":["52.142.124.215"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"C":"US","ST":"Pennsylvania","L":"Paoli","O":"Duck Duck Go, Inc.","CN":"*.duck.com"},"issuer":{"C":"US","O":"DigiCert Inc","CN":"DigiCert Global G2 TLS RSA SHA256 2020 CA1"},"serial":"07A6FA8812192C9F896EB98BBF2B5923","version":3,"valid_from":"2026-09-17T00:00:00+00:00","valid_to":"2026-12-15T23:59:59+00:00","validity":"valid_period","days_remaining":41,"san":"DNS:*.duck.com, DNS:duck.com","signature":"RSA-SHA256","sha256":"C6:2F:D7:44:82:F9:8A:8F:C2:BF:0E:61:5B:DB:5C:B3:9F:CA:80:BB:48:DE:B9:73:20:F4:BA:45:42:15:76:D6","key_type":"EC","key_bits":256,"curve":"prime256v1","extensions":{"authorityKeyIdentifier":"74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17","subjectKeyIdentifier":"FE:60:27:D2:F0:10:BE:04:59:2E:DA:63:FD:A8:08:70:4D:87:DD:C7","subjectAltName":"DNS:*.duck.com, DNS:duck.com","certificatePolicies":"Policy: 2.23.140.1.2.2\n  CPS: http://www.digicert.com/CPS","keyUsage":"Digital Signature, Key Agreement","extendedKeyUsage":"TLS Web Server Authentication","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl\n\nFull Name:\n  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl\n","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com\nCA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt","basicConstraints":"CA:FALSE","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:\n                C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD\n    Timestamp : Sep 17 03:23:21.341 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:03:0F:4F:6A:B1:5C:B4:F5:23:68:2B:DE:\n                CB:3D:C2:51:5E:5E:8A:04:8A:20:82:64:97:83:46:72:\n                27:D3:D5:9A:02:20:69:9F:8D:9E:43:04:64:23:50:BA:\n                24:8F:E1:E2:42:96:C6:2E:B5:9D:3B:BC:9E:A1:98:EB:\n                A0:35:09:25:46:33\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB:\n                B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14\n    Timestamp : Sep 17 03:23:21.348 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:61:AB:78:50:7A:F6:01:7C:37:AA:E5:6E:\n                97:48:1F:08:31:7C:01:AB:6B:84:5A:7A:AA:7E:CA:EC:\n                87:C8:BC:AB:02:20:07:16:AD:4A:CA:99:A6:33:D6:7C:\n                88:E6:14:4D:2C:D4:99:D6:8A:83:0E:1A:78:FC:D7:B7:\n                57:4D:74:74:E5:C3\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:\n                01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8\n    Timestamp : Sep 17 03:23:21.348 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:DD:DB:F3:83:F4:01:3E:46:1C:5B:7A:\n                AD:D9:83:2D:50:6F:AB:29:56:09:AC:93:1E:DC:AA:32:\n                56:EB:7D:4A:D4:02:20:41:56:56:7B:32:95:CA:92:1C:\n                F4:A9:2A:06:F7:E2:4D:03:1B:8F:D1:F8:CB:E3:A3:D5:\n                DA:12:18:D3:D7:AC:05"},"pem":"-----BEGIN CERTIFICATE-----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\nKlj+YflF2kQ=\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"DigiCert Inc","CN":"DigiCert Global G2 TLS RSA SHA256 2020 CA1"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"0CF5BD062B5602F47AB8502C23CCF066","version":3,"valid_from":"2021-03-30T00:00:00+00:00","valid_to":"2031-03-29T23:59:59+00:00","validity":"valid_period","days_remaining":1606,"san":"","signature":"RSA-SHA256","sha256":"C8:02:5F:9F:C6:5F:DF:C9:5B:3C:A8:CC:78:67:B9:A5:87:B5:27:79:73:95:79:17:46:3F:C8:13:D0:B6:25:A9","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"basicConstraints":"CA:TRUE, pathlen:0","subjectKeyIdentifier":"74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17","authorityKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","authorityInfoAccess":"OCSP - URI:http://ocsp.digicert.com\nCA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt","crlDistributionPoints":"Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\n","certificatePolicies":"Policy: 2.16.840.1.114412.2.1\nPolicy: 2.23.140.1.1\nPolicy: 2.23.140.1.2.1\nPolicy: 2.23.140.1.2.2\nPolicy: 2.23.140.1.2.3"},"pem":"-----BEGIN CERTIFICATE-----\nMIIEyDCCA7CgAwIBAgIQDPW9BitWAvR6uFAsI8zwZjANBgkqhkiG9w0BAQsFADBh\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH\nMjAeFw0yMTAzMzAwMDAwMDBaFw0zMTAzMjkyMzU5NTlaMFkxCzAJBgNVBAYTAlVT\nMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkRpZ2lDZXJ0IEdsb2Jh\nbCBHMiBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTCCASIwDQYJKoZIhvcNAQEBBQAD\nggEPADCCAQoCggEBAMz3EGJPprtjb+2QUlbFbSd7ehJWivH0+dbn4Y+9lavyYEEV\ncNsSAPonCrVXOFt9slGTcZUOakGUWzUb+nv6u8W+JDD+Vu/E832X4xT1FE3LpxDy\nFuqrIvAxIhFhaZAmunjZlx/jfWardUSVc8is/+9dCopZQ+GssjoP80j812s3wWPc\n3kbW20X+fSP9kOhRBx5Ro1/tSUZUfyyIxfQTnJcVPAPooTncaQwywa8WV0yUR0J8\nosicfebUTVSvQpmowQTCd5zWSOTOEeAqgJnwQ3DPP3Zr0UxJqyRewg2C/Uaoq2yT\nzGJSQnWS+Jr6Xl6ysGHlHx+5fwmY6D36g39HaaECAwEAAaOCAYIwggF+MBIGA1Ud\nEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFHSFgMBmx9833s+9KTeqAx2+7c0XMB8G\nA1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAd\nBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYIKwYBBQUHAQEEajBoMCQG\nCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKG\nNGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RH\nMi5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29t\nL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA9BgNVHSAENjA0MAsGCWCGSAGG/WwC\nATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgGBmeBDAECAzANBgkqhkiG\n9w0BAQsFAAOCAQEAkPFwyyiXaZd8dP3A+iZ7U6utzWX9upwGnIrXWkOH7U1MVl+t\nwcW1BSAuWdH/SvWgKtiwla3JLko716f2b4gp/DA/JIS7w7d7kwcsr4drdjPtAFVS\nslme5LnQ89/nD/7d+MS5EHKBCQRfz5eeLjJ1js+aWNJXMX43AYGyZm0pGrFmCW3R\nbpD0ufovARTFXFZkAdl9h6g4U5+LXUZtXMYnhIHUfoyMo5tS58aI7Dd8KvvwVVo4\nchDYABPPTHPbqjc1qCmBaZx2vN4Ye5DUys/vZwP9BFohFrH/6j/f3IL16/RZkiMN\nJCqVJUzKoZHm1Lesh3Sz8W2jmdv51b2EQJ8HmA==\n-----END CERTIFICATE-----\n"},{"subject":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"issuer":{"C":"US","O":"DigiCert Inc","OU":"www.digicert.com","CN":"DigiCert Global Root G2"},"serial":"033AF1E6A711A9A0BB2864B11D09FAE5","version":3,"valid_from":"2013-08-01T12:00:00+00:00","valid_to":"2038-01-15T12:00:00+00:00","validity":"valid_period","days_remaining":4089,"san":"","signature":"RSA-SHA256","sha256":"CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"basicConstraints":"CA:TRUE","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","subjectKeyIdentifier":"4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39"},"pem":"-----BEGIN CERTIFICATE-----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\nMrY=\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384","cipher_bits":256,"warnings":[],"attempts":[{"address":"52.142.124.215","verified":true,"error":null}],"checked_at":"2026-11-04T14:23:11+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}