www.universalpictures.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:38:d8:3e:9f:f7:76:23:64:57:e2:54:b6:c5:28:05 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:d8:3e:9f:f7:76:23:64:57:e2:54:b6:c5:28:05
Serial Number (int): 4282838573560441742259829492880320517
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: bf:aa:47:06:3a:97:da:ca:00:32:ef:7f:0d:42:dc:01:eb:7b:76:4b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f9:81:3b:6a:68:68:f9:6c:71:e4:cf:96:82:32:55:eb:01:0d:d6:93
Fingerprint (sha256): 0c:9d:18:b5:0d:90:0c:0f:25:b5:13:90:78:c6:eb:c2:62:73:54:bc:fb:13:59:6d:49:a9:52:ae:a1:e8:93:a5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalpictures.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalpictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalpictures.com
universalpictures.com
hollywood.halloweenhorrornights.com
moviesuniversalpictures.upqa.com
staging.freetheminions.com
www.realmomsof.com
www.breakinginmovie.com
faceyourfate.halloweenmovie.com
www.vdayprintablecards.com
workingtitlefilms.com
www.escapemichaelmyers.com
www.dreamworkstrollmate.com
www.jaegeracademy.com
prod.halloweenhorrornights.com
www.ouijaknowsall.com
www.magicmoviecard.com
www.freetheminions.com
splitfilmtickets.co.uk
grinchmovie.com
www.upheoffer.com
seattleindependentpress.net
www.universalscreenings.com
www.dreamworkstrollsactivityhub.com
www.conflagrationmovie.com
www.skyscrapermovie.com
www.dreamworkstrollshugs.com
www.fiftyshadessweeps.com
www.johnnyenglishfilm.com
www.housewithaclock.com
halloweenhorrornights.com
universalanytime.com
www.mypetmoji.com
www.jurassicworld.com
www.wizardingworldhollywood.com
www.pitchperfectmovie.com
www.ultravioletuniversal.com
www.halloweenhorrornights.com
staging.seattleindependentpress.net
www.universalkids.com
jointhewinterswar.com
www.londonwelcomesyou.com
prod.universalpictures.com
www.blumhousestruthordare.com
tablet.universalpictures.com
www.thefirstpurge.com
johnnyenglishfilm.com
www.mortalengines.com
newuniversalpictures.upqa.com
www.pumpkinprintables.com
stage.jaegeracademy.com
www.workingtitlefilms.com
admin.universalpictures.com
blumhousestruthordare.com
www.trollshairband.com
www.barbieparty.org
stageapp.mypetmoji.com
www.jointhewinterswar.com
freetheminions.com
mypetmoji.com
prodapp.mypetmoji.com
www.universalanytime.com
prod.workingtitlefilms.com
universalkids.com
assets.conflagrationmovie.com
www.splitfilmtickets.co.uk
adminuniversalpictures.upqa.com
www.pitch2smash.com
ultravioletuniversal.com
wizardingworldholllywood.upqa.com
bannerassets.universalstudios.com
www.jurassicworldsweeps.com
www.cantstopthefunk.com
monsterhighmask.com
jointhewinterswar.upqa.com
staging.workingtitlefilms.com
live.jurassicworld.com
www.bttfmovie.com
m.halloweenhorrornights.com
stage.workingtitlefilms.com
staging.halloweenhorrornights.com
ouijaknowsall.com
www.muttcutts.com
trollshairband.com
www.monsterhighmask.com
www.grinchmovie.com
www.mybigfatmoment.com
movies.universalpictures.com
www.hotelbelladonna.com
www.seattleindependentpress.net
www.eastereggwraps.com
realmomsof.com

Other certificates including the domain name universalpictures.com

(limited to 100 certificates)
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for www.universalpictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPWDCCDkCgAwIBAgIQAzjYPp/3diNkV+JUtsUoBTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODEyMTAwMDAwMDBaFw0xOTAzMTUxMjAwMDBaMIGAMQswCQYDVQQGEwJVUzET
MBEGA1UECBMKQ2FsaWZvcm5pYTEXMBUGA1UEBxMOVW5pdmVyc2FsIENpdHkxHzAd
BgNVBAoTFlVuaXZlcnNhbCBDaXR5IFN0dWRpb3MxIjAgBgNVBAMTGXd3dy51bml2
ZXJzYWxwaWN0dXJlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2OOYYogAWH9gFvpIeKsIpCrAZAMtYu132x18T0Q4uyWv3fNXOkzf6t9bLeb8w
0WiFatA+XBQxJFtdYpiVcFQcv4PIhNhIzSZ6eJUbn/j+/p17OMdL7yUJ74mHOaiV
Wxo6/2nZk+BfMIQLeoZqJSiAFQGp8A1wGJlN6AZh+hxhNCG8NwM2A9ZbMMrAw+UH
r/yJK4ArTja9BrDgUuPkTiKNg98NMXcXGR7kX88xh09WZt5V/LlSS6PboS35nRVI
QRO+5egPzWryf6VGzmPgZ+P2OUNRAsbOxaIcMFyFj3cpGL8wE9ML9193FUL8yF6E
Nd7K03P+wQ8c77MH6GrMTMr/AgMBAAGjggvtMIIL6TAfBgNVHSMEGDAWgBSQWP+w
nHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUv6pHBjqX2soAMu9/DULcAet7dksw
gglfBgNVHREEgglWMIIJUoIZd3d3LnVuaXZlcnNhbHBpY3R1cmVzLmNvbYIVdW5p
dmVyc2FscGljdHVyZXMuY29tgiNob2xseXdvb2QuaGFsbG93ZWVuaG9ycm9ybmln
aHRzLmNvbYIgbW92aWVzdW5pdmVyc2FscGljdHVyZXMudXBxYS5jb22CGnN0YWdp
bmcuZnJlZXRoZW1pbmlvbnMuY29tghJ3d3cucmVhbG1vbXNvZi5jb22CF3d3dy5i
cmVha2luZ2lubW92aWUuY29tgh9mYWNleW91cmZhdGUuaGFsbG93ZWVubW92aWUu
Y29tghp3d3cudmRheXByaW50YWJsZWNhcmRzLmNvbYIVd29ya2luZ3RpdGxlZmls
bXMuY29tghp3d3cuZXNjYXBlbWljaGFlbG15ZXJzLmNvbYIbd3d3LmRyZWFtd29y
a3N0cm9sbG1hdGUuY29tghV3d3cuamFlZ2VyYWNhZGVteS5jb22CHnByb2QuaGFs
bG93ZWVuaG9ycm9ybmlnaHRzLmNvbYIVd3d3Lm91aWpha25vd3NhbGwuY29tghZ3
d3cubWFnaWNtb3ZpZWNhcmQuY29tghZ3d3cuZnJlZXRoZW1pbmlvbnMuY29tghZz
cGxpdGZpbG10aWNrZXRzLmNvLnVrgg9ncmluY2htb3ZpZS5jb22CEXd3dy51cGhl
b2ZmZXIuY29tghtzZWF0dGxlaW5kZXBlbmRlbnRwcmVzcy5uZXSCG3d3dy51bml2
ZXJzYWxzY3JlZW5pbmdzLmNvbYIjd3d3LmRyZWFtd29ya3N0cm9sbHNhY3Rpdml0
eWh1Yi5jb22CGnd3dy5jb25mbGFncmF0aW9ubW92aWUuY29tghd3d3cuc2t5c2Ny
YXBlcm1vdmllLmNvbYIcd3d3LmRyZWFtd29ya3N0cm9sbHNodWdzLmNvbYIZd3d3
LmZpZnR5c2hhZGVzc3dlZXBzLmNvbYIZd3d3LmpvaG5ueWVuZ2xpc2hmaWxtLmNv
bYIXd3d3LmhvdXNld2l0aGFjbG9jay5jb22CGWhhbGxvd2VlbmhvcnJvcm5pZ2h0
cy5jb22CFHVuaXZlcnNhbGFueXRpbWUuY29tghF3d3cubXlwZXRtb2ppLmNvbYIV
d3d3Lmp1cmFzc2ljd29ybGQuY29tgh93d3cud2l6YXJkaW5nd29ybGRob2xseXdv
b2QuY29tghl3d3cucGl0Y2hwZXJmZWN0bW92aWUuY29tghx3d3cudWx0cmF2aW9s
ZXR1bml2ZXJzYWwuY29tgh13d3cuaGFsbG93ZWVuaG9ycm9ybmlnaHRzLmNvbYIj
c3RhZ2luZy5zZWF0dGxlaW5kZXBlbmRlbnRwcmVzcy5uZXSCFXd3dy51bml2ZXJz
YWxraWRzLmNvbYIVam9pbnRoZXdpbnRlcnN3YXIuY29tghl3d3cubG9uZG9ud2Vs
Y29tZXN5b3UuY29tghpwcm9kLnVuaXZlcnNhbHBpY3R1cmVzLmNvbYIdd3d3LmJs
dW1ob3VzZXN0cnV0aG9yZGFyZS5jb22CHHRhYmxldC51bml2ZXJzYWxwaWN0dXJl
cy5jb22CFXd3dy50aGVmaXJzdHB1cmdlLmNvbYIVam9obm55ZW5nbGlzaGZpbG0u
Y29tghV3d3cubW9ydGFsZW5naW5lcy5jb22CHW5ld3VuaXZlcnNhbHBpY3R1cmVz
LnVwcWEuY29tghl3d3cucHVtcGtpbnByaW50YWJsZXMuY29tghdzdGFnZS5qYWVn
ZXJhY2FkZW15LmNvbYIZd3d3Lndvcmtpbmd0aXRsZWZpbG1zLmNvbYIbYWRtaW4u
dW5pdmVyc2FscGljdHVyZXMuY29tghlibHVtaG91c2VzdHJ1dGhvcmRhcmUuY29t
ghZ3d3cudHJvbGxzaGFpcmJhbmQuY29tghN3d3cuYmFyYmllcGFydHkub3JnghZz
dGFnZWFwcC5teXBldG1vamkuY29tghl3d3cuam9pbnRoZXdpbnRlcnN3YXIuY29t
ghJmcmVldGhlbWluaW9ucy5jb22CDW15cGV0bW9qaS5jb22CFXByb2RhcHAubXlw
ZXRtb2ppLmNvbYIYd3d3LnVuaXZlcnNhbGFueXRpbWUuY29tghpwcm9kLndvcmtp
bmd0aXRsZWZpbG1zLmNvbYIRdW5pdmVyc2Fsa2lkcy5jb22CHWFzc2V0cy5jb25m
bGFncmF0aW9ubW92aWUuY29tghp3d3cuc3BsaXRmaWxtdGlja2V0cy5jby51a4If
YWRtaW51bml2ZXJzYWxwaWN0dXJlcy51cHFhLmNvbYITd3d3LnBpdGNoMnNtYXNo
LmNvbYIYdWx0cmF2aW9sZXR1bml2ZXJzYWwuY29tgiF3aXphcmRpbmd3b3JsZGhv
bGxseXdvb2QudXBxYS5jb22CIWJhbm5lcmFzc2V0cy51bml2ZXJzYWxzdHVkaW9z
LmNvbYIbd3d3Lmp1cmFzc2ljd29ybGRzd2VlcHMuY29tghd3d3cuY2FudHN0b3B0
aGVmdW5rLmNvbYITbW9uc3RlcmhpZ2htYXNrLmNvbYIaam9pbnRoZXdpbnRlcnN3
YXIudXBxYS5jb22CHXN0YWdpbmcud29ya2luZ3RpdGxlZmlsbXMuY29tghZsaXZl
Lmp1cmFzc2ljd29ybGQuY29tghF3d3cuYnR0Zm1vdmllLmNvbYIbbS5oYWxsb3dl
ZW5ob3Jyb3JuaWdodHMuY29tghtzdGFnZS53b3JraW5ndGl0bGVmaWxtcy5jb22C
IXN0YWdpbmcuaGFsbG93ZWVuaG9ycm9ybmlnaHRzLmNvbYIRb3VpamFrbm93c2Fs
bC5jb22CEXd3dy5tdXR0Y3V0dHMuY29tghJ0cm9sbHNoYWlyYmFuZC5jb22CF3d3
dy5tb25zdGVyaGlnaG1hc2suY29tghN3d3cuZ3JpbmNobW92aWUuY29tghZ3d3cu
bXliaWdmYXRtb21lbnQuY29tghxtb3ZpZXMudW5pdmVyc2FscGljdHVyZXMuY29t
ghd3d3cuaG90ZWxiZWxsYWRvbm5hLmNvbYIfd3d3LnNlYXR0bGVpbmRlcGVuZGVu
dHByZXNzLm5ldIIWd3d3LmVhc3RlcmVnZ3dyYXBzLmNvbYIOcmVhbG1vbXNvZi5j
b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9U
cnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr
BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw
dQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3Ry
dXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29t
L0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBAwYKKwYBBAHWeQIE
AgSB9ASB8QDvAHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFn
mNv/gQAABAMARjBEAiBmnIDUv+aJGYyUheCF2gInvfr3XZXTxFUqxE6s83F6igIg
Nc3vX6MSS2mzfcCd193/ChsQIMSAoonKlbbtCqrE/yQAdgCHdb/nWXz4jEOZX73z
bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWeY3ABXAAAEAwBHMEUCIQDaCswwWU/8au9f
etMFfk3zkuB6+eRpVswdlsExLp91MQIgAfeyzJ5xFSfhB3WxlGSA7nfU+EC5o8T8
MqY6dEMeuyswDQYJKoZIhvcNAQELBQADggEBALawSqzcjiu9w90xsP86PfIHVd/j
H/NmdUrTg1L9RhPuozuHqtaFA9Ze1DuE/pGva9tQalBmzC6RWsQtL3tzUQUE0/iC
wYobqekVhyDursXfdqa2HJBEZ4YErYtVphwX2zaZ3AcJju6B/8NFN2t6TA3coBwd
UM1Ge8O/K/Mz+RdCw3T56WzxKP0AfkGDUc6ujwOT3H5MgPRGtQIVaS8B06i8vv0h
qXe2e7FLGn+Wy/JWaxSIN+W6cSwbdG1Gn/d1L4++MpsrRhKDI0CzEblx2l1kH7BV
ZDEmra64Ut275d9wP3grzQL0H9TmFKAxijBNN1Kp/ciYU5j2drailK+rXlo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjjmGKIAFh/YBb6SHirC
KQqwGQDLWLtd9sdfE9EOLslr93zVzpM3+rfWy3m/MNFohWrQPlwUMSRbXWKYlXBU
HL+DyITYSM0meniVG5/4/v6dezjHS+8lCe+JhzmolVsaOv9p2ZPgXzCEC3qGaiUo
gBUBqfANcBiZTegGYfocYTQhvDcDNgPWWzDKwMPlB6/8iSuAK042vQaw4FLj5E4i
jYPfDTF3Fxke5F/PMYdPVmbeVfy5Ukuj26Et+Z0VSEETvuXoD81q8n+lRs5j4Gfj
9jlDUQLGzsWiHDBchY93KRi/MBPTC/dfdxVC/MhehDXeytNz/sEPHO+zB+hqzEzK
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4282838573560441742259829492880320517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalpictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23003429354424305373624760347394487722373224909498628079456246001059237772732981046437595944151404188558389420180644688110448834381919763949839068776421776370509037842775386462243935061746611306730252861118374620658899939225053802622164411498531590510981092929855494184545499785919528899367615008755091682961090887568472691220640202141325299981339975026757387559036447839722355079651944288808119970861638910295270389620689280350335102600393971942376564470527522535901871833250205556800580489024429882458355872607493769891671410605575966524812830401740938291924573462588811280751075385043980178609168051717563180960511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfaa47063a97daca0032ef7f0d42dc01eb7b764b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywood.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakinginmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceyourfate.halloweenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdayprintablecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapemichaelmyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmoviecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upheoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalscreenings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollsactivityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyscrapermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollshugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftyshadessweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housewithaclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wizardingworldhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitchperfectmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonwelcomesyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstpurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortalengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpkinprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbieparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stageapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitch2smash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizardingworldholllywood.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerassets.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworldsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantstopthefunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bttfmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muttcutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybigfatmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbelladonna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastereggwraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmomsof.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016798dbff8100000403004630440220669c80d4bfe689198c9485e085da0227bdfaf75d95d3c4552ac44eacf3717a8a022035cdef5fa3124b69b37dc09dd7ddff0a1b1020c480a289ca95b6ed0aaac4ff240076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016798dc00570000040300473045022100da0acc30594ffc6aef5f7ad3057e4df392e07af9e46956cc1d96c1312e9f7531022001f7b2cc9e711527e10775b1946480ee77d4f840b9a3c4fc32a63a74431ebb2b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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