secure.universalstudios.com

- Universal City Studios LLC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:c4:6d:69:5f:e2:56:3d:64:6a:f0:de:7f:83:b0:ef was issued on by DigiCert Inc.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios LLC

Organization: Universal City Studios LLC
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:c4:6d:69:5f:e2:56:3d:64:6a:f0:de:7f:83:b0:ef
Serial Number (int): 3678365307121220415096712571438477551
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cd:5e:ed:6c:f1:dc:fc:b5:ca:ad:17:9b:7f:f4:43:34:3b:53:e6:6b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f1:9d:8d:b8:7f:36:69:e5:87:80:28:d9:6d:5e:70:da:54:09:dc:16
Fingerprint (sha256): 04:78:86:ed:95:88:15:ff:b7:03:8f:34:31:f1:45:f8:d0:64:53:54:6f:43:59:5d:78:3e:07:3d:62:84:c5:cb

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate secure.universalstudios.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.universalstudios.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.universalstudios.com
app.tickets2.universalorlando.com
b2b.universalorlando.com
bluemanorlando.com
espanol.universalorlando.com
etds-api.ucdp.net
etds.universalorlando.com
etds.universalstudios.com
etdsuat-api.ucdp.net
giftcards.universalorlando.com
harrypotternews.universalorlando.com
hhnap.universalorlando.com
hhntickets.universalorlando.com
letyourselfwhoa.com
letyourselfwhoa.net
letyourselfwoah.com
letyourselfwoah.net
media.universalorlando.com
mobile.halloweenhorrornights.com
orlando-uat.halloweenhorrornights.com
orlando.halloweenhorrornights.com
portuguese.universalorlando.com
prod.universaltravelagents.com
purchase.universalorlando.com
qa.universalorlando.co.uk
rtuap.universalorlando.com
rtutickets.universalorlando.com
secure.universalorlando.com
services.universalorlando.com
services2.universalorlando.com
shop.universalorlando.com
site.universalorlando.com
sphere.ucdp.net
sphereqa.ucdp.net
spheresvc.ucdp.net
spheresvcqa.ucdp.net
tickets-services.universalorlando.com
tickets.universalorlando.com
tickets2.universalorlando.com
universalorlando.com
usj.universalplay.games
www.bluemanorlando.com
www.letyourselfwhoa.com
www.letyourselfwhoa.net
www.letyourselfwoah.com
www.letyourselfwoah.net
www.universalevents.com
www.universalorlando.co.uk
www.universalorlando.com
www.universalorlandoresort.com
www.universalorlandoyouth.com
www.universaltravelagents.com
www.uomeetingsandevents.com

Other certificates including the domain name universalstudios.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
secure.universalstudios.com
secure.universalstudios.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
secure.universalstudios.com
www.universalorlando.com
propsstg.universalstudios.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.seeso.com
secure.universalstudios.com
web2.sourceaudio.com
www.universalorlando.com
www.universalpictures.com
www.seeso.com
www.seeso.com
www.universalpictures.com
secure.universalstudios.com
studio.florida.universalstudios.com
www.universalpictures.com
www.universalorlando.com
oltsuat.secure.universalstudios.com
secure.universalstudios.com
www.universalorlando.com
www.universalpictures.com
props.universalstudios.com
www.universalpictures.com
twuat.secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.seeso.com
www.seeso.com
propsstg.universalstudios.com
san-3-s6.tlsprovisioning.exacttarget.com
secure.universalstudios.com
www.universalpictures.com
secure.universalstudios.com
www.universalpictures.com
www.seeso.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.universalpictures.com
www.seeso.com
studioopsportal.universalstudios.com
studio.florida.universalstudios.com
san-3-s6.tlsprovisioning.exacttarget.com
etds.universalstudios.com
web2.sourceaudio.com
etdsuat.universalstudios.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
studioopsportal.universalstudios.com
www.seeso.com
san-3-s6.tlsprovisioning.exacttarget.com
www.seeso.com
www.universalpictures.com
www.universalpictures.com
secure.universalstudios.com
studio.florida.universalstudios.com
web2.sourceaudio.com
www.universalpictures.com
www.universalorlando.com
signup.universalstudios.com
nbcuat.secure.universalstudios.com
www.universalpictures.com
secure.universalstudios.com
www.universalorlando.com
www.universalpictures.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
props.universalstudios.com
secure.universalstudios.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
web2.sourceaudio.com
www.universalpictures.com
etdsuat-o.ucdp.net
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
propsstg.universalstudios.com

Certificate

The complete raw certificate details for secure.universalstudios.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdYhUCwx0FlQwPh1pjTy
v04BIE9hQZCjntg7AtjCJuAYwenWFPKyxj62Te1JZnk/sioe+Ut19vKXfTMfBEE+
NfkatUPnuzu18VNNIVsVy9sIHfLk0LOzwvmeApT1+KBXqMYETnh5osfog0JSCjlJ
HSooWM5vdcwwUIuIS6wRUTX5scCFD0XuoJgjc1v05GZr5pFLl9NYZblTPG1+gHt4
EgKBp/39iVzBf8i3GpgZb1dtYhehO4lQSCaotJp45agecrlUIcX5jDARVmHGblyn
AbcCcklZo3mMFo4md6SjpfVSzxNsEzeXmSQQDcSeHRNnDvIJ4hZfzKF7lZH0JH0M
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3678365307121220415096712571438477551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.universalstudios.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24469584360798012181907063443531589793176193243073401362564409609089274272933725746131387036946996626655571656387441829529559973958014391848138512065395802756451822681322738344950930141908098944763024647786573203949370555323455122207615578393526456718648330151784769623235339777365032676870765169139715984055179081740080243425569775356895954400797571861659676888386455941931903381965290419300641990521163197272733038788413664095041995922833982592835934704541577455211172593465476873870776914653264947403774798529043545328817945287129244265879017671976264628728590175953904599377485808595622013727974221365373694708991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd5eed6cf1dcfcb5caad179b7ff443343b53e66b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1471 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tickets2.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluemanorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etds-api.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etds.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etds.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etdsuat-api.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotternews.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhnap.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhntickets.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letyourselfwhoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letyourselfwhoa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letyourselfwoah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letyourselfwoah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando-uat.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portuguese.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.universalorlando.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtuap.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtutickets.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services2.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphere.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphereqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spheresvc.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spheresvcqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets2.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usj.universalplay.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluemanorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letyourselfwhoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letyourselfwhoa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letyourselfwoah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letyourselfwoah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlando.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlandoresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlandoyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uomeetingsandevents.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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