ticketsqa.universalorlando.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:3d:df:55:06:a0:4d:5c:42:d6:e3:3b:6f:f9:ef:d1 was issued on by DigiCert Inc.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
Organization unit: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3d:df:55:06:a0:4d:5c:42:d6:e3:3b:6f:f9:ef:d1
Serial Number (int): 1650487817941671907419736544837758929
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 7d:d3:1d:d8:64:63:d7:a3:49:9c:67:ec:27:7a:23:35:91:2e:21:d9
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 03:f6:bf:b5:84:ff:82:c3:12:57:50:eb:83:9a:69:c8:fa:39:a9:dc
Fingerprint (sha256): 10:d2:43:8f:2a:6d:76:33:40:37:41:5d:ba:8d:00:ef:76:fc:a1:a8:d2:2a:48:c5:0c:c6:a4:7c:68:cc:3d:06

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ticketsqa.universalorlando.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketsqa.universalorlando.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketsqa.universalorlando.com
events393.universalorlando.com
services-qa.ucdp.net
auditionsqa.ucdp.net
uat.universalparks.com
ticketsbeta.universalorlando.com
api-uat.ucdp.net
stg.universalorlando.com
b2bqa.universalorlando.com
tickets-servicesqa.universalorlando.com
siteqa.universalorlando.com
stage02.universalorlando.com
hhntickets.ticketsqa.universalorlando.com
me494.universalorlando.com
131.halloweenhorrornights.com
services-stg-mobile.ucdp.net
purchaseqa.universalorlando.com
app.ticketsqa.universalorlando.com
mobilecoreservices-qa.ucdp.net
legacyservices-qa-mobile.ucdp.net
services-stg02-mobile.ucdp.net
services-dev02.ucdp.net
events494.universalorlando.com
giftcards.universalorlando.com
espanolqa.universalorlando.com
stage02.universalparks.com
prod.halloweenhorrornights.com
131.universalorlando.com
ygprod.universalorlando.com
orlando2.halloweenhorrornights.com
secureqa.universalorlando.com
wpg.ucdp.net
mobilecoreservices-stg.ucdp.net
prod.universaltravelagents.com
services-dev02-mobile.ucdp.net
services-uat.ucdp.net
services-stg.ucdp.net
262.universalorlando.com
494.universalorlando.com
rtuap.ticketsqa.universalorlando.com
qa.universaltravelagents.com
services-qa-mobile.ucdp.net
464.halloweenhorrornights.com
api-stg2.ucdp.net
stg.halloweenhorrornights.com
portugueseqa.universalorlando.com
secure.halloweenhorrornights.com
beta.universalorlando.com
shopqa.universalorlando.com
api-stg.ucdp.net
services-dev-mobile.ucdp.net
mobilecoreservices-dev.ucdp.net
orlandoqa.halloweenhorrornights.com
464.universalorlando.com
me393.universalorlando.com
services.universalorlando.com
393.universalorlando.com
api-stg02.ucdp.net
auditionsqa.universalorlando.com
services-uat-mobile.ucdp.net
stage.universalorlando.com
giftcardsqa.universalorlando.com
stage.universalparks.com
legacyservices-stg-mobile.ucdp.net
services-dev.ucdp.net
services.ucdp.net
legacyservices-dev-mobile.ucdp.net
yg393.universalorlando.com
services-stg02.ucdp.net
rtutickets.ticketsqa.universalorlando.com
wpgqa.ucdp.net
uat.universalorlando.com
hhnap.ticketsqa.universalorlando.com
ticketsuat.universalorlando.com

Other certificates including the domain name universalorlando.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
origin-siteqa.universalorlando.com
secure.universalstudios.com
origin-purchaseqa.universalorlando.com
kronos.universalorlando.com
hhnsweeps.universalorlando.com
ticketstore-uat.universalorlando.com
projects.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
storage.universalorlando.com
ticketsqa.universalorlando.com
servicesstg2-origin.universalorlando.com
origin-portuguese.universalorlando.com
specifications.universalorlando.com
www.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
specifications.universalorlando.com
blog.universalorlando.com
ukstore.universalorlando.com
tickets.universalstudioshollywood.com
www.universalorlando.com
servicesstg2-origin.universalorlando.com
servicesstg.universalorlando.com
secure.universalstudios.com
yguat.universalorlando.com
ticketsqa.universalorlando.com
servicesstg.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
hg.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
yguat.universalorlando.com
www.universalorlando.com
origin-espanol.universalorlando.com
blog.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
beta.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
webmail.use.ucdp.net
ticketsqa.universalorlando.com
blog.universalorlando.com
www.universalorlando.com
specifications.universalorlando.com
origin393.UniversalOrlando.com
eviteuat.universalorlando.com
origin-tickets-services.universalorlando.com
origin-ticketsqa.universalorlando.com
www.universalorlando.com
blog.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
secure.universalstudios.com
teams.universalorlando.com
ticketsqa.universalorlando.com
tickets-servicesqa.universalorlando.com
blog.universalorlando.com
mediauat.universalorlando.com
osimg.universalorlando.com
www.thismoment.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
testing.universalorlando.com
etdsprod.universalorlando.com
webmail.use.ucdp.net
tickets.universalstudioshollywood.com
etds.universalstudios.com
www.thismoment.com
ticketsqa.universalorlando.com
etdsuat.universalstudios.com
www.universalorlando.com
beta.universalorlando.com
media.universalorlando.com
testing.universalorlando.com
www.thismoment.com
hg.universalorlando.com
www.universalorlando.com
origin-site.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
media.universalorlando.com

Certificate

The complete raw certificate details for ticketsqa.universalorlando.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreAkzEei7CzLGd0TjCLt
KAvjtDDMiKiYd8SjsZV6NxAIzzxpTuUbDX+4ul0E+t3yF6nMwwMIBQbGpiFr/yrg
rLoslwcnOz9pSvX/5xtvBylkDLtuc4aTDpT4J68eFHULvoKufpmrkFxwG747BYSb
8l9XF10hvoFAgOCK+JquvWydtmYB0AjAQkU6b7pZ5chttkTUms4J01gUwubEihZ5
1vwhRrSxknelTgk3bZ+nqdPE5CWehca4uOJlJep0MOUsP9mzXqWiaDQX+FkwIli7
rKzN9wSRcFdQZhvYHkuw6rqBiCdivGS87jYaZONNAqIFp1mPXrSLwz0XsT1pDptw
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1650487817941671907419736544837758929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketsqa.universalorlando.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21949756157826428192606278247638890340464209131519986988635017753069928578131385985469695946924338536481304225484506024485543941908125210288283604780414895826490916800836341704123374980677140324890550156822878105627489549867668685916562844231401996403249325683673968076788095111608225517612343133384003317637440796934330399926021597627748337234324370112569819157126582124810656378454367253626529807662053957595713274244670937004584217515566007202425297451595151632527337012449454410565230638919071052500099932432948009055706138217355986517403946923728561043508965610860005927123218708974355737306240262820517690175697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7dd31dd86463d7a3499c67ec277a2335912e21d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-servicesqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhntickets.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchaseqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-qa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-qa-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg02-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanolqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygprod.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando2.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev02-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-uat.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '262.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtuap.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '464.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg2.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugueseqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-dev.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandoqa.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '464.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-uat-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcardsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-stg-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-dev-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yg393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtutickets.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpgqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhnap.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.universalorlando.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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