www.universalstudioshollywood.com

- Universal City Studios -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:3b:db:91:ae:3f:0b:c3:19:58:1a:35:37:ba:4c:66 was issued on by DigiCert Inc.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:db:91:ae:3f:0b:c3:19:58:1a:35:37:ba:4c:66
Serial Number (int): 5627710887506592186372731036797389926
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3a:46:03:77:0c:b9:ca:3b:2f:34:68:a1:4c:01:21:b4:5a:6d:9b:ef
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 02:f7:10:3a:84:26:a4:ae:5f:b0:88:39:dd:05:77:ae:27:b2:42:c3
Fingerprint (sha256): 0e:98:90:d1:95:a3:8f:58:14:ec:ee:7e:e9:45:78:fa:37:0b:70:e4:77:13:ab:fc:fe:e7:7d:3e:21:cc:97:82

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.universalstudioshollywood.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalstudioshollywood.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalstudioshollywood.com
universalstudioshollywood.com
www.universalpictures.fr
www.abominavel-ofilme.pt
api.universalpictures.co.nz
www.universalpictures.it
ww.universalpictures.it
myhalloweenmovie.upqa.com
www.universalpictures.ie
www.ma-lapelicula.com
admin.universalpictures-latam.com
www.us-movie.be
www.pets-film.at
api.universalpictures.fr
www.universalpictures.com.mx
*.universalstudioshollywood.com
www.myhalloweenmovie.com
api.universalpictures.ie
api.universalpictures.com.au
api.universalpictures-latam.com
admin.universalpictures.it
api.universalpictures.ru
api.universalpictures.es
adminit.universalpictures.it
www.mafilm.nl
www.usfilm.nl
api.universalpictures.jp
api.universalpictures.com.mx
www.thesecretlifeofpets.nl
mstg.hhnticketsstg.universalstudioshollywood.com
www.nos-ofilme.pt
www.universalpics.com.br
api.universalpictures.com.ar
www.watchyourself.com
www.commedesbetes-lefilm.ch
www.commedesbetes-lefilm.be
www.wir-film.at
universalpictures.com.au
www.wir-derfilm.ch
www.kiskedvencekmozi.hu
www.universalpictures.es
api.universalpictures.gr
www.bizfilmi.com.tr
api.universalpics.com.br
api.universalpictures.it
www.universalpictures.gr
www.thesecretlifeofpets.ch
www.universalpictures.co.nz
www.us-lefilm.ch
www.universalpictures.com.ar
www.universalpictures.tw
api.universalpictures.se
www.universalpictures.jp
www.universalpictures.ru
www.universalpictures.com.au
www.universalpictures-latam.com
m.hhntickets.universalstudioshollywood.com
www.universalpicturessverige.com
www.huisdiergeheimen-movie.be
www.universalpictures.se
www.mi-mozi.hu
www.us-lefilm.be
api.universalpictures.tw

Other certificates including the domain name universalstudioshollywood.com

(limited to 100 certificates)
www.universalorlando.com
tickets.universalstudioshollywood.com
www.universalstudioshollywood.com
media.universalstudioshollywood.com
store-services.universalstudioshollywood.com
www.universalorlando.com
storestg.universalstudioshollywood.com
www.universalorlando.com
ticketsqa.universalorlando.com
muklga.universalstudioshollywood.com
www.universalorlando.com
www.universalstudioshollywood.com
www.universalorlando.com
www.universalstudioshollywood.com
media.universalstudioshollywood.com
www.universalstudioshollywood.com
res.vacations.universalstudioshollywood.com
promotions.universalstudioshollywood.com
ushwebstore.nbcuni.com
m.hhntickets.universalstudioshollywood.com
www.universalstudioshollywood.com
media.universalstudioshollywood.com
osimg.universalstudioshollywood.com
tickets.universalstudioshollywood.com
vacations.universalstudioshollywood.com
www.universalstudioshollywood.com
calendar.universalstudioshollywood.com
media.universalstudioshollywood.com
muklga.universalstudioshollywood.com
www.universalorlando.com
media.universalstudioshollywood.com
www.universalstudioshollywood.com
www.universalstudioshollywood.com
mapi-app.universalstudioshollywood.com
universalstudioshollywood.com
origin-www.universalstudioshollywood.com
store.universalstudioshollywood.com
www.universalorlando.com
store-servicesstg.universalstudioshollywood.com
hhnticketsstg.universalstudioshollywood.com
m.universalstudioshollywood.com
origin-www.universalstudioshollywood.com
www.universalorlando.com
muklga.universalstudioshollywood.com
www.universalorlando.com
www.universalorlando.com
universalstudioshollywood.com
media.universalstudioshollywood.com
universalstudioshollywood.com
ushdenaliaccertify.universalstudioshollywood.com
res.vacations.universalstudioshollywood.com
www.universalorlando.com
mapi-app.universalstudioshollywood.com
osimg.universalstudioshollywood.com
www.universalstudioshollywood.com
mapi-storestg.universalstudioshollywood.com
ushwebstore.nbcuni.com
app.universalstudioshollywood.com
www.universalstudioshollywood.com
timedentry.universalstudioshollywood.com
osimg.universalstudioshollywood.com
ushwebstore.nbcuni.com
ushwebstore.nbcuni.com
www.universalorlando.com
mstorestg.universalstudioshollywood.com
www.mi.universalstudioshollywood.com
store-services.universalstudioshollywood.com
www.universalorlando.com
mapi.universalstudioshollywood.com
ushwebstore.nbcuni.com
media.universalstudioshollywood.com
ushwebstore.nbcuni.com
www.mi.universalstudioshollywood.com
ushwebstore.nbcuni.com
mapi.universalstudioshollywood.com
muklga.universalstudioshollywood.com
www.universalstudioshollywood.com
tickets.universalstudioshollywood.com
www.universalorlando.com
promotions.universalstudioshollywood.com
universalstudioshollywood.com
vacations.universalstudioshollywood.com
www.universalstudioshollywood.com
ushwebstore.nbcuni.com
www.universalstudioshollywood.com
m.universalstudioshollywood.com
storetemp.universalstudioshollywood.com
www.mi.universalstudioshollywood.com
tickets.universalstudioshollywood.com
www.universalstudioshollywood.com
universalstudioshollywood.com
osimg.universalstudioshollywood.com
click.email.universalstudioshollywood.com
mstore.universalstudioshollywood.com
www.mi.universalstudioshollywood.com
ushwebstore.nbcuni.com
store.universalstudioshollywood.com
media.universalstudioshollywood.com
hhnticketsstg.universalstudioshollywood.com
app.universalstudioshollywood.com

Certificate

The complete raw certificate details for www.universalstudioshollywood.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMyDCCC7CgAwIBAgIQBDvbka4/C8MZWBo1N7pMZjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwMzExMDAwMDAwWhcN
MjAwMzEwMTIwMDAwWjCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExFzAVBgNVBAcTDlVuaXZlcnNhbCBDaXR5MR8wHQYDVQQKExZVbml2ZXJzYWwg
Q2l0eSBTdHVkaW9zMSowKAYDVQQDEyF3d3cudW5pdmVyc2Fsc3R1ZGlvc2hvbGx5
d29vZC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlRoYES3uA
lfjpzHeEuxHG3eEQSiXMERBvMH1zuZfxKbVdMMwqlrIQaTJLg38PziTvdbU3kwBV
oUmG7IQgPMYWrzw9SpyQsc9tqRh2jxaOf18atpiPYnEDbAwqfwIy3wZJSA8dQ4fl
3lP+3mi7N2L3r1MnHLndYFRl2y4Nd0lmXARPvDJabiU8o3orZls0pIUL3VTtBbv9
W0z7SR7UBSBEGakhKspYcfxRn8HFeXTFdpMFI15nBwqqwZg1CF1e0r+65TAr8nVg
+lSVqiwtw0QKeYVKzBgW03vcqXfBT1b3OTVrVIYybl0hZ1bImR+AAbUxPslzsAnM
jNTHhrMKyyZZAgMBAAGjgglmMIIJYjAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541G
OLQs4cbZ4jAdBgNVHQ4EFgQUOkYDdwy5yjsvNGihTAEhtFptm+8wggahBgNVHREE
ggaYMIIGlIIhd3d3LnVuaXZlcnNhbHN0dWRpb3Nob2xseXdvb2QuY29tgh11bml2
ZXJzYWxzdHVkaW9zaG9sbHl3b29kLmNvbYIYd3d3LnVuaXZlcnNhbHBpY3R1cmVz
LmZyghh3d3cuYWJvbWluYXZlbC1vZmlsbWUucHSCG2FwaS51bml2ZXJzYWxwaWN0
dXJlcy5jby5ueoIYd3d3LnVuaXZlcnNhbHBpY3R1cmVzLml0ghd3dy51bml2ZXJz
YWxwaWN0dXJlcy5pdIIZbXloYWxsb3dlZW5tb3ZpZS51cHFhLmNvbYIYd3d3LnVu
aXZlcnNhbHBpY3R1cmVzLmllghV3d3cubWEtbGFwZWxpY3VsYS5jb22CIWFkbWlu
LnVuaXZlcnNhbHBpY3R1cmVzLWxhdGFtLmNvbYIPd3d3LnVzLW1vdmllLmJlghB3
d3cucGV0cy1maWxtLmF0ghhhcGkudW5pdmVyc2FscGljdHVyZXMuZnKCHHd3dy51
bml2ZXJzYWxwaWN0dXJlcy5jb20ubXiCHyoudW5pdmVyc2Fsc3R1ZGlvc2hvbGx5
d29vZC5jb22CGHd3dy5teWhhbGxvd2Vlbm1vdmllLmNvbYIYYXBpLnVuaXZlcnNh
bHBpY3R1cmVzLmllghxhcGkudW5pdmVyc2FscGljdHVyZXMuY29tLmF1gh9hcGku
dW5pdmVyc2FscGljdHVyZXMtbGF0YW0uY29tghphZG1pbi51bml2ZXJzYWxwaWN0
dXJlcy5pdIIYYXBpLnVuaXZlcnNhbHBpY3R1cmVzLnJ1ghhhcGkudW5pdmVyc2Fs
cGljdHVyZXMuZXOCHGFkbWluaXQudW5pdmVyc2FscGljdHVyZXMuaXSCDXd3dy5t
YWZpbG0ubmyCDXd3dy51c2ZpbG0ubmyCGGFwaS51bml2ZXJzYWxwaWN0dXJlcy5q
cIIcYXBpLnVuaXZlcnNhbHBpY3R1cmVzLmNvbS5teIIad3d3LnRoZXNlY3JldGxp
ZmVvZnBldHMubmyCMG1zdGcuaGhudGlja2V0c3N0Zy51bml2ZXJzYWxzdHVkaW9z
aG9sbHl3b29kLmNvbYIRd3d3Lm5vcy1vZmlsbWUucHSCGHd3dy51bml2ZXJzYWxw
aWNzLmNvbS5icoIcYXBpLnVuaXZlcnNhbHBpY3R1cmVzLmNvbS5hcoIVd3d3Lndh
dGNoeW91cnNlbGYuY29tght3d3cuY29tbWVkZXNiZXRlcy1sZWZpbG0uY2iCG3d3
dy5jb21tZWRlc2JldGVzLWxlZmlsbS5iZYIPd3d3Lndpci1maWxtLmF0ghh1bml2
ZXJzYWxwaWN0dXJlcy5jb20uYXWCEnd3dy53aXItZGVyZmlsbS5jaIIXd3d3Lmtp
c2tlZHZlbmNla21vemkuaHWCGHd3dy51bml2ZXJzYWxwaWN0dXJlcy5lc4IYYXBp
LnVuaXZlcnNhbHBpY3R1cmVzLmdyghN3d3cuYml6ZmlsbWkuY29tLnRyghhhcGku
dW5pdmVyc2FscGljcy5jb20uYnKCGGFwaS51bml2ZXJzYWxwaWN0dXJlcy5pdIIY
d3d3LnVuaXZlcnNhbHBpY3R1cmVzLmdyghp3d3cudGhlc2VjcmV0bGlmZW9mcGV0
cy5jaIIbd3d3LnVuaXZlcnNhbHBpY3R1cmVzLmNvLm56ghB3d3cudXMtbGVmaWxt
LmNoghx3d3cudW5pdmVyc2FscGljdHVyZXMuY29tLmFyghh3d3cudW5pdmVyc2Fs
cGljdHVyZXMudHeCGGFwaS51bml2ZXJzYWxwaWN0dXJlcy5zZYIYd3d3LnVuaXZl
cnNhbHBpY3R1cmVzLmpwghh3d3cudW5pdmVyc2FscGljdHVyZXMucnWCHHd3dy51
bml2ZXJzYWxwaWN0dXJlcy5jb20uYXWCH3d3dy51bml2ZXJzYWxwaWN0dXJlcy1s
YXRhbS5jb22CKm0uaGhudGlja2V0cy51bml2ZXJzYWxzdHVkaW9zaG9sbHl3b29k
LmNvbYIgd3d3LnVuaXZlcnNhbHBpY3R1cmVzc3ZlcmlnZS5jb22CHXd3dy5odWlz
ZGllcmdlaGVpbWVuLW1vdmllLmJlghh3d3cudW5pdmVyc2FscGljdHVyZXMuc2WC
Dnd3dy5taS1tb3ppLmh1ghB3d3cudXMtbGVmaWxtLmJlghhhcGkudW5pdmVyc2Fs
cGljdHVyZXMudHcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNl
cnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEw
KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZn
gQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k
aWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADCC
AQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AO5Lvbd1zmC64UJpH6vhnmajD35fsHLY
gwDEe4l6qP3LAAABaW2zwtMAAAQDAEgwRgIhAP3cNK3ccGWjyRhU96bl06j02DSg
BB8jQR4HbjcqjsqbAiEAvcMvfHMdMvQ9U5x/vr8d5k3Y6/2E00jwPzM5hJ4mb9cA
dwCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWlts8QbAAAEAwBI
MEYCIQDkgJRSUum3PfGAGNnBI7aBSjZJhwtNHfH4D9pk1tKf7wIhAK+g8tPKfVFt
r6dzGFAaR4aJxaur7SBXkZwrNC7zL3sdMA0GCSqGSIb3DQEBCwUAA4IBAQBrjeiT
Tp1tZdcQrKs7O6flipH1pfVVB4LpSZsVZEvcrsCGFwjtes43mk+SqpeqMx9BLrlH
63/vqKkzMpBGBcIOlPXNAvtJDeJWa0jrOYfHMZHPO2wvU38vfs9bsYUZJV9tb4wM
kzZr4aSQlKlIwsU5UP7kBaYh8uj95kpj9OAPeR9yK38vzWf4UW5pkyNsa4EuASir
SLVZzZaVTtIGubUL85VEsUoZ4xEvgrMeES6pjASNGJLylTFWwLGeFDaD0lhnB0r4
G4gfkFnRldAXJfNzLYCfmN/ww6gWTxP1uaAWACzGvFN0wpLxcBngl0ffVCZlz56/
1/WUf7YGzu5sSFpt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UaGBEt7gJX46cx3hLsR
xt3hEEolzBEQbzB9c7mX8Sm1XTDMKpayEGkyS4N/D84k73W1N5MAVaFJhuyEIDzG
Fq88PUqckLHPbakYdo8Wjn9fGraYj2JxA2wMKn8CMt8GSUgPHUOH5d5T/t5ouzdi
969TJxy53WBUZdsuDXdJZlwET7wyWm4lPKN6K2ZbNKSFC91U7QW7/VtM+0ke1AUg
RBmpISrKWHH8UZ/BxXl0xXaTBSNeZwcKqsGYNQhdXtK/uuUwK/J1YPpUlaosLcNE
CnmFSswYFtN73Kl3wU9W9zk1a1SGMm5dIWdWyJkfgAG1MT7Jc7AJzIzUx4azCssm
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5627710887506592186372731036797389926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalstudioshollywood.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28943348272709118404997565896063028474256345308513463779966283142976727740382766113892859721172871694936772135798275461747364985828382266390991598036321547764539798974353256919580409920026764686839989415487359818989770737377889768134585771901731349182070981608952266263430218293423816086378388091485883111873748417457784248114173966555432972288768007293203376794837208437247886554160314106754953494316803050442261458029270280221320087697010329491716965307049850971226510661914688339632817597493987334144292444038006300702314170501944786380932219127147181453255909744105799784234887749477849118618814637502444545451609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a4603770cb9ca3b2f3468a14c0121b45a6d9bef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abominavel-ofilme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.universalpictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhalloweenmovie.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lapelicula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures-latam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pets-film.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhalloweenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures-latam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminit.universalpictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mafilm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usfilm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretlifeofpets.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstg.hhnticketsstg.universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nos-ofilme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpics.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchyourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commedesbetes-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commedesbetes-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wir-film.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wir-derfilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiskedvencekmozi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bizfilmi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpics.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretlifeofpets.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures-latam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hhntickets.universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpicturessverige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huisdiergeheimen-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mi-mozi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001696db3c2d30000040300483046022100fddc34addc7065a3c91854f7a6e5d3a8f4d834a0041f23411e076e372a8eca9b022100bdc32f7c731d32f43d539c7fbebf1de64dd8ebfd84d348f03f3339849e266fd70077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001696db3c41b0000040300483046022100e480945252e9b73df18018d9c123b6814a3649870b4d1df1f80fda64d6d29fef022100afa0f2d3ca7d516dafa77318501a478689c5ababed2057919c2b342ef32f7b1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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