www.universalpictures.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:f2:50:f7:b4:80:70:52:a3:66:e2:4a:30:12:a3:30 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f2:50:f7:b4:80:70:52:a3:66:e2:4a:30:12:a3:30
Serial Number (int): 3916634049322267891043523051029439280
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ab:ee:5b:3d:46:28:d6:73:fa:12:8e:bf:7b:bf:9e:6a:e2:96:23:8a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 1c:19:e3:99:b5:cf:ff:0d:7b:4b:5a:45:ef:ca:13:b3:f3:04:90:f8
Fingerprint (sha256): 04:0a:f0:f0:d3:5a:64:68:08:09:97:5c:0f:85:bd:d8:99:2e:0e:4e:61:6a:fb:3f:45:4b:95:e7:92:88:78:70

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalpictures.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalpictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalpictures.com
universalpictures.com
www.jointhewinterswar.com
www.universalscreenings.com
staging.freetheminions.com
trollshairband.com
www.vdayprintablecards.com
www.skyscrapermovie.com
www.realmomsof.com
universalkids.com
www.hotelbelladonna.com
www.muttcutts.com
ultravioletuniversal.com
prod.universalpictures.com
www.jurassicworld.com
www.universalpictures.co.uk
prod.halloweenhorrornights.com
www.universalanytime.com
stageapp.mypetmoji.com
www.greenbookfilm.com
www.ultravioletuniversal.com
live.jurassicworld.com
ouijaknowsall.com
m.halloweenhorrornights.com
www.mybigfatmoment.com
www.halloweenhorrornights.com
admin.universalpictures.com
splitfilmtickets.co.uk
www.jaegeracademy.com
www.thefirstpurge.com
www.wizardingworldhollywood.com
mypetmoji.com
www.jurassicworldsweeps.com
www.fiftyshadessweeps.com
prodapp.mypetmoji.com
www.workingtitlefilms.com
grinchmovie.com
www.monsterhighmask.com
www.eastereggwraps.com
www.pumpkinprintables.com
www.dreamworkstrollshugs.com
wizardingworldholllywood.upqa.com
workingtitlefilms.com
www.blumhousestruthordare.com
newuniversalpictures.upqa.com
www.grinchmovie.com
www.dreamworkstrollsactivityhub.com
www.bttfmovie.com
stage.jaegeracademy.com
www.escapemichaelmyers.com
www.trollshairband.com
www.ouijaknowsall.com
www.housewithaclock.com
blumhousestruthordare.com
staging.workingtitlefilms.com
www.seattleindependentpress.net
universalpictures.co.uk
jointhewinterswar.upqa.com
halloweenhorrornights.com
www.johnnyenglishfilm.com
www.splitfilmtickets.co.uk
www.mypetmoji.com
realmomsof.com
assets.conflagrationmovie.com
www.magicmoviecard.com
staging.seattleindependentpress.net
adminuniversalpictures.upqa.com
johnnyenglishfilm.com
jointhewinterswar.com
moviesuniversalpictures.upqa.com
www.pitchperfectmovie.com
freetheminions.com
www.freetheminions.com
movies.universalpictures.com
www.cantstopthefunk.com
www.pitch2smash.com
api.universalpictures.co.uk
www.conflagrationmovie.com
www.universalkids.com
prod.workingtitlefilms.com
stage.workingtitlefilms.com
www.firstman.com
www.barbieparty.org
seattleindependentpress.net
www.upheoffer.com
www.mortalengines.com
www.londonwelcomesyou.com
monsterhighmask.com
www.breakinginmovie.com
faceyourfate.halloweenmovie.com
universalanytime.com
staging.halloweenhorrornights.com
www.dreamworkstrollmate.com
hollywood.halloweenhorrornights.com
bannerassets.universalstudios.com
tablet.universalpictures.com

Other certificates including the domain name universalpictures.com

(limited to 100 certificates)
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for www.universalpictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JuRGnoLLDm8xOFRV/ce
eETo69lmWfMqTBRA0T/jS1b5MIDcr3WEYXNt9Io8FWbFbKdfUdGyJq7vzknqbImm
cqZ2rUk8ia1StU9XCNVsH0lGIqoRGgDdQ9/1xL9U0A0qnTe5JVWLE5LbnSCcn8gx
nE/l13B+oOcJJwewENOR6duR9BG/PcyEc8INg9oUUgw6138Sw/FGBXDwiq78V16u
Ac7D6DYv6dfN3QjBI2G4FEZCnzNCHvT1Wc2ziR+zaclTlNkDkwiZd00d4vcGYbAa
4QnmnJlndRFV9Bvj4IfNLfibPmBU5kB/yhn0VtXJGdSDvrUqY28JpaYaIZymrkRS
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3916634049322267891043523051029439280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalpictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28859046385524258459863446626408212221543474049194036331170825658121781118726307921578557950998656679386548736047191756453718034504632649786245954195186736036090432289546131891100180028858818931960416419592502712723012234286214690407131601564567194706582092308623842154980346159730999734354910260301995457768347360855877031091420121263161101844464863300490786105850798965982022735487261261711585935011983861812394921208981492341000670708333828367184104277427716430921744252652913276531921534438380818497421466171482487973071194490437481372158405678180297977275230990103514347168503954032722620998596208639748136522467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abee5b3d4628d673fa128ebf7bbf9e6ae296238a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2514 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalscreenings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdayprintablecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyscrapermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbelladonna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muttcutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stageapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenbookfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybigfatmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstpurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wizardingworldhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworldsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftyshadessweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastereggwraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpkinprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollshugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizardingworldholllywood.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollsactivityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bttfmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapemichaelmyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housewithaclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmoviecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitchperfectmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantstopthefunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitch2smash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbieparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upheoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortalengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonwelcomesyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakinginmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceyourfate.halloweenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywood.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerassets.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.universalpictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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