www.universalpictures.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:f8:a5:67:e4:57:59:8b:93:f7:f9:68:82:72:49:ab was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:f8:a5:67:e4:57:59:8b:93:f7:f9:68:82:72:49:ab
Serial Number (int): 18571008394874066745421593226364733867
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e7:5e:81:bf:80:f2:fb:88:ca:3c:ec:f4:d4:aa:27:dc:03:d0:ac:ee
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 50:32:d8:84:20:17:45:1c:da:fa:d1:4d:e3:06:9e:f3:5c:66:09:03
Fingerprint (sha256): 08:2e:ec:51:e6:ed:66:99:e5:c8:6c:21:cf:07:7b:3f:8a:bc:50:d6:b1:01:96:e6:6c:94:09:79:e4:19:68:37

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalpictures.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalpictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalpictures.com
universalpictures.com
www.vdayprintablecards.com
www.universalscreenings.com
staging.seattleindependentpress.net
www.splitfilmtickets.co.uk
staging.workingtitlefilms.com
monsterhighmask.com
www.universalpictures.co.uk
workingtitlefilms.com
universalanytime.com
live.jurassicworld.com
stage.jaegeracademy.com
admin.universalpictures.com
www.jointhewinterswar.com
www.wizardingworldhollywood.com
mypetmoji.com
bannerassets.universalstudios.com
prod.workingtitlefilms.com
www.eastereggwraps.com
realmomsof.com
www.freetheminions.com
movies.universalpictures.com
seattleindependentpress.net
m.halloweenhorrornights.com
hollywood.halloweenhorrornights.com
assets.conflagrationmovie.com
www.thefirstpurge.com
www.dreamworkstrollmate.com
halloweenhorrornights.com
prodapp.mypetmoji.com
ouijaknowsall.com
www.housewithaclock.com
www.skyscrapermovie.com
www.dreamworkstrollsactivityhub.com
www.fiftyshadessweeps.com
www.cantstopthefunk.com
www.ouijaknowsall.com
www.realmomsof.com
www.blumhousestruthordare.com
www.jurassicworld.com
staging.freetheminions.com
faceyourfate.halloweenmovie.com
jointhewinterswar.upqa.com
freetheminions.com
johnnyenglishfilm.com
prod.halloweenhorrornights.com
www.ultravioletuniversal.com
stageapp.mypetmoji.com
www.jurassicworldsweeps.com
www.mypetmoji.com
www.muttcutts.com
www.mortalengines.com
www.barbieparty.org
www.workingtitlefilms.com
www.conflagrationmovie.com
prod.universalpictures.com
www.hotelbelladonna.com
universalkids.com
blumhousestruthordare.com
www.dreamworkstrollshugs.com
trollshairband.com
www.universalkids.com
www.grinchmovie.com
www.pitchperfectmovie.com
jointhewinterswar.com
www.londonwelcomesyou.com
tablet.universalpictures.com
www.halloweenhorrornights.com
adminuniversalpictures.upqa.com
stage.workingtitlefilms.com
www.trollshairband.com
www.monsterhighmask.com
splitfilmtickets.co.uk
moviesuniversalpictures.upqa.com
www.seattleindependentpress.net
ultravioletuniversal.com
www.escapemichaelmyers.com
www.pitch2smash.com
grinchmovie.com
www.upheoffer.com
www.magicmoviecard.com
wizardingworldholllywood.upqa.com
www.universalanytime.com
www.breakinginmovie.com
universalpictures.co.uk
www.bttfmovie.com
newuniversalpictures.upqa.com
www.johnnyenglishfilm.com
www.mybigfatmoment.com
www.pumpkinprintables.com
www.jaegeracademy.com
staging.halloweenhorrornights.com

Other certificates including the domain name universalpictures.com

(limited to 100 certificates)
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for www.universalpictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h2NqbUn+pR+dtQruEE5
PFY+K4rW7JCLC7hu0BR1oKZugbNRdFK8gLeolktZA5tNQR8vnyFPazH0RcAhwCEq
LTLRijOh75RY+7Dk/LO/FBmmXm5q5fOTxsTyCaeGthHm0FrhoRK4SWvKXJYiIKd9
wdOSR7OUoG3xcopzxsgh2Bf0JopoLNlwQ9W5d78NJts1f0k/r4is/inSeSm3kbNr
TEZ89Gz5NE/eIPbn6qR8a6ga9k87mbpVvDYUcJP7TBwGv6/lJZrIuDdW8mrJnuer
JqafHwi16JC1LMT98dT3vNaGAVoEHzNI03TwcbdRoX/QfJM2ALxEa8Rc/ac+9m2a
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18571008394874066745421593226364733867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalpictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29049383452481342713999450185073567954748866852351844160875396564823771892812253076979486669643833121299743773201684122349757689956191306451463240556896857245802805619679275349575382662924885191534194149104466564891359720646663602698765483386876778061022715335385821021348006977650167440956480142502001575866897590178144546749728568093653857659884360658137749214970239930536567125576644269459330130050232236695535596586392878756655110110595404460037439418079947998174799975120709881674296766152882180481836677083692631355771854059694500885228097035296938394070132675631275973289351768892792961442866604964226341378631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e75e81bf80f2fb88ca3cecf4d4aa27dc03d0acee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2444 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdayprintablecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalscreenings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wizardingworldhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerassets.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastereggwraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywood.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstpurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housewithaclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyscrapermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollsactivityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftyshadessweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantstopthefunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceyourfate.halloweenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stageapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworldsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muttcutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortalengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbieparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbelladonna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollshugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitchperfectmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonwelcomesyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapemichaelmyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitch2smash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upheoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmoviecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizardingworldholllywood.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakinginmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bttfmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybigfatmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpkinprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167c855e87b0000040300473045022100e336127cd4a45b2faa8f13c41bc3b0ecf389540c0352abb22f98b2d7cd845baf0220480b5ed1a2eb1884e6d379e044dd9bb4bbca03cc9615eaa442790b26c8bb9ed80076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167c855e93c000004030047304502202ac6cc57f17f39e9b27c5c113b6f8f4398e517e297cf62f1ba91e2da30241fc9022100d8db00a7a4b348f1ae69dc9a85ccf44ea4cbcaa9395dedfeabb4d9dd39adb60d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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