www.duome.co

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number ad:37:bd:15:b0:ec:d5:26 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.duome.co,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ad:37:bd:15:b0:ec:d5:26
Serial Number (int): 12481652793140892966
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: af:7d:eb:25:40:bc:42:1a:2c:3e:e8:92:67:b9:d3:97:d7:cc:7a:33
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 91:79:b8:3f:d9:4a:e7:35:64:ac:82:d4:0b:fb:04:c6:ad:d5:01:65
Fingerprint (sha256): 08:09:d5:de:c5:4e:de:fa:eb:6a:a7:6a:62:64:27:d5:47:cd:61:a4:cd:ba:41:6d:bd:2a:b2:c0:5e:06:24:af

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-839.crl

Check the revocation status for certificate www.duome.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.duome.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.duome.co
duome.co

Other certificates including the domain name duome.co

(limited to 100 certificates)
fantasyapps.club
inventory.heartandsolecycleandfitness.com
hacktoberfest.pwapilipinas.org
resquash.com
abi-testing.duome.co
www.duome.co
bangumiapp.skyperfectv.co.jp
mfd.50fin.in
dev-cast.mirail.video
apis.zaka46.tw
flaniermeile-sihlfeld.ch
fa.farmart.co
mfd.50fin.in
nahoryirgaalem.dev
www.welcomments.com
dev-pulse.senti.ai
www.salehalthini.com
www.grandmasjid.com
public.duome.co
plataforma.geocab.com.mx
pandoralive.jp
www.setoelkahfi.com
standard.foodmadegood.org
public.duome.co
www.qurasense.com
app.dev.divdot.com
htechstudio.com
www.fishare.net
admin.qa6.restoplus.com
qa.classes.de
staging.supertime.app
www.emojiit.com
sonoco.com.tw
staging.supertime.app
www.duome.co
www.washingmachineservicebangalore.com
danielwjennings.com
playlist.shah.boston
gracelandchiangmai99.com
blog.ade-sede.com
bio-techne-demo.autolomate.com
www.duome.co
admin.hydro.tv
duome.co
tiwa.africa
local.commin.jp
giftr.app
tls-testing.duome.co
www.boladjivinou.com
u.knowre.com
neo-career.lfv.jp
prioritize.upslope.app
penguindiner.games235.com
www.brewerylane.com
bangumiapp.skyperfectv.co.jp
amitibank.com
inventory.heartandsolecycleandfitness.com
www.operandus.com.br
pwa.xvestor.app
www.restaurantefutu.es
admin.kiey.com
www.gcastleapp.com
wangda.pedidomovil.es
theswingerscorner.com
u.knowre.com
pwa.xvestor.app
www.duome.co
app.simonxu.com
concierge.attachelondon.com
cs-es.ml
www.masonmahaffey.com
thingsy.app
public.duome.co
app.kloudle.com
resquash.com
spinteriordesign.in
www.papergreen.in
www.yoreparo.co
admin.qa6.restoplus.com
www.washingmachineservicebangalore.com
www.aviane.cz
fantasyapps.club
demo.duome.co
link.metro-fs.com
www.lavelle.io
lavaflow.modality.co.nz
remedeelabs.ca
policy.ahmadaljaf.com
radiocristosalva.cl
duome.co
www.ilusionistanoda.com
swiftlab.co.uk
nahoryirgaalem.dev
symmetry.la
atwellcloudviewer.com
goaz.io
console.wegrou.app
bio-techne-demo.autolomate.com
noveleedevelopment.com
auth.mindos.com

Certificate

The complete raw certificate details for www.duome.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIJAK03vRWw7NUmMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE4MDYyMDEwMTIxMVoX
DTE5MDMxMjE2MzMwMlowOjEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh
dGVkMRUwEwYDVQQDEwx3d3cuZHVvbWUuY28wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0sQViR/SEFQy29Ra2rI55ysJzwPTs4XZjJsWYi/+tpoIzUbY/
BaESx/RLkF2iYAt1DTmEp0YEDlOdW2liIqqXBTz0/fruAAntEX6wtgB8ptS6z8+u
U9l6aQETTLu8DQ0b+fvkKMqXxfRMCKlFcP1jCD+391bT8ttPJE1CYwZQatIwrb86
S0KWRLOxo7vYnVSuKDKmBIfwY0glLsUHlh8g9jmhDcA3if5kbBhMt3oeATOG5MvT
58O4qD/Tx2H0mhz9zkFzxfMWV2+uxruM5tW3caWmUrWWxsheA04BKhJHF+ZbnOQW
bBWfbMpMzU7a69qMjzP5/sYkPEN/pppe5maXAgMBAAGjggK8MIICuDAMBgNVHRMB
Af8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8E
BAMCBaAwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5nb2RhZGR5LmNvbS9n
ZGlnMnMxLTgzOS5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsG
AQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRv
cnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6
Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmlj
YXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAW
gBRAwr0njsw0gzCiM9f7bLPwtCyAzjAhBgNVHREEGjAYggx3d3cuZHVvbWUuY2+C
CGR1b21lLmNvMB0GA1UdDgQWBBSvfeslQLxCGiw+6JJnudOX18x6MzCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I
DdwQAAABZByu5aQAAAQDAEcwRQIhAKYtXZT32CRsQJrPY42+yI/54cVtux5AuH+y
I4mRyDDYAiBCG0Oeenif4kL2GRABNbuALtrV1Rl0JXgBABnrli3yeAB2AHR+2oMx
rTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABZByu6C8AAAQDAEcwRQIhANpr
QMSzdocLuhPB1QScacyVgCzenN9pfduktMf+EgGZAiAGBurJRB/Wz1L6b3wEixUf
2YGPOAIMSJvYV2cDYpYnDjANBgkqhkiG9w0BAQsFAAOCAQEAG2+ufO7Tmr0jIAAc
lTh65jtrFX1GCdXVU7LI3cu88oV7tTKWeNUXkzuxIiHSvw51S2cFWUSlnzpg5kkM
Qmo2cwiZCuOGQEp8UFogXx7ZKB25EHfO8IUjoWDaX4NxUiHYLLHys/U+oEjxm3ZR
7gtCwEZ9PCwfssLBg+PsL2ul/e9ClhlMlZT7aC3WFspxD4ley7l9Lni8Ip1QRDjO
E+gvvEJqgvxjkd3Kh3hheE7oOCbcvuE5xwpmUAFcEcXM+zloxbgwvSgYDyCtauBZ
b2kzb7ImqwHbZ2FE2YkxaOllG09krerTRKEKP7jKRauHg3cHBE2Dml9ayHgZcJZm
XT5+LQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLEFYkf0hBUMtvUWtqyO
ecrCc8D07OF2YybFmIv/raaCM1G2PwWhEsf0S5BdomALdQ05hKdGBA5TnVtpYiKq
lwU89P367gAJ7RF+sLYAfKbUus/PrlPZemkBE0y7vA0NG/n75CjKl8X0TAipRXD9
Ywg/t/dW0/LbTyRNQmMGUGrSMK2/OktClkSzsaO72J1UrigypgSH8GNIJS7FB5Yf
IPY5oQ3AN4n+ZGwYTLd6HgEzhuTL0+fDuKg/08dh9Joc/c5Bc8XzFldvrsa7jObV
t3GlplK1lsbIXgNOASoSRxfmW5zkFmwVn2zKTM1O2uvajI8z+f7GJDxDf6aaXuZm
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12481652793140892966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-20 10:12:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 16:33:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.duome.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22810187217656896184689592852978026011830600052292969320890673704188823189585314933194723863198016260258354408789699713743000736452996659459641223455893318455568421114247352779467950526605967437241348248955626072805865826903601201410976796151309954864856623419677690812664405874412200571935168390400933935358932517720361680404944934231566372559492875965250663895360185995952138293076531859359440003547046667107387986570051272721007678622035358770544705288852083922333499351170660996140154364869106514345813065188268495094708062683953513113121364448344570433566303215019429033225168956926941713459520708290575155488407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-839.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duome.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af7deb2540bc421a2c3ee89267b9d397d7cc7a33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001641caee5a40000040300473045022100a62d5d94f7d8246c409acf638dbec88ff9e1c56dbb1e40b87fb2238991c830d80220421b439e7a789fe242f619100135bb802edad5d519742578010019eb962df278007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001641caee82f0000040300473045022100da6b40c4b376870bba13c1d5049c69cc95802cde9cdf697ddba4b4c7fe12019902200606eac9441fd6cf52fa6f7c048b151fd9818f38020c489bd85767036296270e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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