ush-vpn.ucdp.net

- Comcast Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 52:a7:e1:38:41:f2:9c:dd:d7:7d:70:28:95:66:5d:d4 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Comcast Corporation

Organization: Comcast Corporation
Organization unit: Hosted by Comcast Corporation
Organization unit: Unified Communications
Address: 1 Comcast Center
Postal code: 19103
State / Province: PA
Locality: Philadelphia
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 52:a7:e1:38:41:f2:9c:dd:d7:7d:70:28:95:66:5d:d4
Serial Number (int): 109868377229086166684888693291673345492
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 00:fb:1f:c9:d1:07:71:44:90:05:89:dd:66:95:9d:8e:f0:fa:db:d0
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 03:e8:81:d8:6f:59:7d:38:1b:6a:e2:8c:25:c8:85:d4:ec:ae:e3:de
Fingerprint (sha256): 06:e1:18:b3:9f:ca:3d:2e:98:5b:f5:6b:a6:51:73:21:7b:aa:a0:0c:bd:45:af:31:d4:cd:68:b8:57:22:26:c8

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate ush-vpn.ucdp.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ush-vpn.ucdp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ush-vpn.ucdp.net
www.ush-vpn.ucdp.net

Other certificates including the domain name ucdp.net

(limited to 100 certificates)
www.universalorlando.com
sphere-o.ucdp.net
p406-qa.use.ucdp.net
cred-stg02.use.ucdp.net
secure.universalstudios.com
cred-qa.use.ucdp.net
cred-qa.use.ucdp.net
usoqdtvtendvip.use.ucdp.net
acp.use.ucdp.net
secure.universalstudios.com
mdmae.use.ucdp.net
ushdevservices.use.ucdp.net
cloudant-stg02.use.ucdp.net
secure.universalstudios.com
validfill.use.ucdp.net
loc-prod.use.ucdp.net
useast1-ush-web-microsites-np.use.ucdp.net
www.universalorlando.com
ticketsqa.universalorlando.com
uoconsul.use.ucdp.net
cred-stg.use.ucdp.net
cs-qa.use.ucdp.net
ush-vpn.ucdp.net
utils-uat.use.ucdp.net
www.universalorlando.com
rms.ucdp.net
www.universalorlando.com
usoqdtvtmmvip.use.ucdp.net
hhnweb-stg02.use.ucdp.net
fraud-stg02.use.ucdp.net
hhnweb-uat-o.ucdp.net
hhnweb-dev.use.ucdp.net
inter-stg.use.ucdp.net
guest-dev.use.ucdp.net
apip-qa02.use.ucdp.net
tucppm.ucdp.net
lbqaegalaxy.use.ucdp.net
uniphd1-web.use.ucdp.net
utils-uat.use.ucdp.net
guest-uat.use.ucdp.net
et-dev.use.ucdp.net
tmt.use.ucdp.net
www.universalorlando.com
inter-dev.use.ucdp.net
usopmadmvip01.use.ucdp.net
utils-prod.use.ucdp.net
secure.universalstudios.com
hhnweb-qa.use.ucdp.net
wcs-prod.use.ucdp.net
ticketsqa.universalorlando.com
hhnweb-qa.use.ucdp.net
store.universalstudioshollywood.com
ticketsqa.universalorlando.com
hhnweb-qa-o.ucdp.net
www.universalorlando.com
loc-stg02.use.ucdp.net
utils-dev.use.ucdp.net
sphere-o.ucdp.net
creative.ucdp.net
secure.universalstudios.com
calend-dev.use.ucdp.net
minion.ucdp.net
uniphd1-webnew.use.ucdp.net
hhnweb-uat-o.ucdp.net
utils-qa.use.ucdp.net
spheresvc-o.ucdp.net
hhnweb-qa.use.ucdp.net
minionwcf.ucdp.net
hub-dev.use.ucdp.net
cloudant-uat.use.ucdp.net
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
shaggy.ucdp.net
inv-stg02.use.ucdp.net
folio-qa.use.ucdp.net
services-qa.ucdp.net
www.universalorlando.com
hhnweb-qa-o.ucdp.net
ushwebstore.nbcuni.com
usor7psnipe01.use.ucdp.net
geoip-prod.use.ucdp.net
inter-stg02.use.ucdp.net
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
useast1-ush-web-content-np.use.ucdp.net
mdmae.use.ucdp.net
cp.use.ucdp.net
rest-dev.use.ucdp.net
mdmae-dev.use.ucdp.net
ushwebstore.nbcuni.com
webmail.use.ucdp.net
guest-stg.use.ucdp.net
hhnweb-qa-o.ucdp.net
inter-stg02.use.ucdp.net
ticketsqa.universalorlando.com
p406-dev02.use.ucdp.net
creativeqa.ucdp.net

Certificate

The complete raw certificate details for ush-vpn.ucdp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwSFtSwE+SMCO+zsZhuZ
kQTa5ieBJd0ED0fmVq7ZobgRHlquu8UyKYJL+E+UE9JeiVMisRaKOYRqNV2nXEr4
tdqD+xmB1/okxw3HgvKoHlub3/g/go4QXjDjNPn7sNQzd23WZ67w7f3aKfI5XB+N
b2a+7S1YVy3M7XDGVxhfjR+iFP94IYcZWin8cj6QdA5umhjqh0Axk+CTGB19i4i3
uIRsL9R9dOIh0vXNu0uqCAKJBczLrQP5wIGUbjMrLZgKbbE24XTfhF/N5Vi5BCLw
Nco0o0zXQcQfmdzWGiJMElYjOwYH6NdakrSGhlMKo0hsmRWurChpiX+DG2lc5MTY
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109868377229086166684888693291673345492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '19103'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Comcast Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comcast Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Comcast Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ush-vpn.ucdp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19569167296870196519847894568306020030358819182709671325746304799266159996750938082186520631976754975289504911321338637417056736431527159830580617709666683101793047749554789244836068934269168225851193391616261610434031030523631491320349571044982043010035344726396361886228879945267412902698476976359566632291446142784233640382310883510385830405090514208590525467942294396772617706906619896273626276926946726964407417148682404634748938975414727247854865189656902159246485063449694850662184153405433042785682324238110234826804424804243997117623377643073388226936088638406087576382181255330867935313897317143722036877413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00fb1fc9d1077144900589dd66959d8ef0fadbd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ush-vpn.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ush-vpn.ucdp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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