ticketsqa.universalorlando.com

- Universal City Studios LLC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:d8:ac:ae:ab:70:f6:ad:c3:1f:e6:15:8e:8a:e0:cf was issued on by DigiCert Inc.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios LLC

Organization: Universal City Studios LLC
Organization unit: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d8:ac:ae:ab:70:f6:ad:c3:1f:e6:15:8e:8a:e0:cf
Serial Number (int): 17075774484073120090664497580258025679
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 19:69:73:5a:68:58:6d:b0:3e:87:67:11:1a:71:3d:27:cf:4a:2b:ee
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 1c:55:08:08:28:d4:ed:3d:4c:c0:a4:88:f9:a1:75:f7:0a:94:3b:9f
Fingerprint (sha256): 19:2b:62:f0:81:df:49:82:fc:16:f7:61:32:87:b3:46:21:65:8e:e7:f4:33:6e:aa:ed:6b:09:c9:ab:fc:d6:48

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ticketsqa.universalorlando.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketsqa.universalorlando.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketsqa.universalorlando.com
rtutickets.ticketsqa.universalorlando.com
262.universalorlando.com
purchaseqa.universalorlando.com
stage.universalorlando.com
services-dev02.ucdp.net
hhntickets.ticketsqa.universalorlando.com
api-stg.ucdp.net
portugueseqa.universalorlando.com
stage.universalparks.com
services-stg02.ucdp.net
qa.universaltravelagents.com
secureqa.universalorlando.com
services-stg-mobile.ucdp.net
beta.universalorlando.com
rtuap.ticketsqa.universalorlando.com
events494.universalorlando.com
espanolqa.universalorlando.com
events393.universalorlando.com
secure.halloweenhorrornights.com
ygprod.universalorlando.com
prod.universaltravelagents.com
stg.universalorlando.com
siteqa.universalorlando.com
stage02.universalorlando.com
api-stg02.ucdp.net
services-dev.ucdp.net
tickets-servicesqa.universalorlando.com
giftcardsqa.universalorlando.com
stg.halloweenhorrornights.com
legacyservices-stg-mobile.ucdp.net
orlando-stg.halloweenhorrornights.com
494.universalorlando.com
orlandoqa.halloweenhorrornights.com
legacyservices-qa-mobile.ucdp.net
services.universalorlando.com
orlando-stg02.halloweenhorrornights.com
464.universalorlando.com
app.ticketsqa.universalorlando.com
mobilecoreservices-dev.ucdp.net
services-dev02-mobile.ucdp.net
131.universalorlando.com
b2bstage.universalorlando.com
me393.universalorlando.com
services.ucdp.net
services-stg02-mobile.ucdp.net
auditionsqa.ucdp.net
services-dev-mobile.ucdp.net
uat.universalparks.com
auditionsqa.universalorlando.com
131.halloweenhorrornights.com
services-uat.ucdp.net
mobilecoreservices-stg.ucdp.net
me494.universalorlando.com
wpgqa.ucdp.net
ticketsbeta.universalorlando.com
shopqa.universalorlando.com
etdsuat.universalparks.com
services-qa-mobile.ucdp.net
uat.universalorlando.com
orlando2.halloweenhorrornights.com
services-stg.ucdp.net
api-stg2.ucdp.net
etdsuat-api.ucdp.net
b2bqa.universalorlando.com
api-uat.ucdp.net
wpg.ucdp.net
legacyservices-dev-mobile.ucdp.net
stage02.universalparks.com
purchasestage.universalorlando.com
mobilecoreservices-qa.ucdp.net
464.halloweenhorrornights.com
prod.halloweenhorrornights.com
393.universalorlando.com
ticketsuat.universalorlando.com
yg393.universalorlando.com
services-qa.ucdp.net
hhnap.ticketsqa.universalorlando.com
orlando-uat.halloweenhorrornights.com
giftcards.universalorlando.com
services-uat-mobile.ucdp.net

Other certificates including the domain name universalorlando.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
origin-siteqa.universalorlando.com
secure.universalstudios.com
origin-purchaseqa.universalorlando.com
kronos.universalorlando.com
hhnsweeps.universalorlando.com
ticketstore-uat.universalorlando.com
projects.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
storage.universalorlando.com
ticketsqa.universalorlando.com
servicesstg2-origin.universalorlando.com
origin-portuguese.universalorlando.com
specifications.universalorlando.com
www.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
specifications.universalorlando.com
blog.universalorlando.com
ukstore.universalorlando.com
tickets.universalstudioshollywood.com
www.universalorlando.com
servicesstg2-origin.universalorlando.com
servicesstg.universalorlando.com
secure.universalstudios.com
yguat.universalorlando.com
ticketsqa.universalorlando.com
servicesstg.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
hg.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
yguat.universalorlando.com
www.universalorlando.com
origin-espanol.universalorlando.com
blog.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
beta.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
webmail.use.ucdp.net
ticketsqa.universalorlando.com
blog.universalorlando.com
www.universalorlando.com
specifications.universalorlando.com
origin393.UniversalOrlando.com
eviteuat.universalorlando.com
origin-tickets-services.universalorlando.com
origin-ticketsqa.universalorlando.com
www.universalorlando.com
blog.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
secure.universalstudios.com
teams.universalorlando.com
ticketsqa.universalorlando.com
tickets-servicesqa.universalorlando.com
blog.universalorlando.com
mediauat.universalorlando.com
osimg.universalorlando.com
www.thismoment.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
testing.universalorlando.com
etdsprod.universalorlando.com
webmail.use.ucdp.net
tickets.universalstudioshollywood.com
etds.universalstudios.com
www.thismoment.com
ticketsqa.universalorlando.com
etdsuat.universalstudios.com
www.universalorlando.com
beta.universalorlando.com
media.universalorlando.com
testing.universalorlando.com
www.thismoment.com
hg.universalorlando.com
www.universalorlando.com
origin-site.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
media.universalorlando.com

Certificate

The complete raw certificate details for ticketsqa.universalorlando.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE+hCZyVxq7i7tbAH3sR
NNsr/UuNj3s8Wb+nQYzKLCkV9IyT/RPoWB9tHujycCYFe8QKLcL0CukmAbHj5HId
R22/cTdX5XeY8oLkpBd4keEvlS8EBZaWoLB2Lc4JD1dZBS2uNX10d+LpHI8Ggcsl
mOl7S4yUcM4yUNqfeERGDHYb9FUdbX+bzINBsccniqNrUDB6l5jd6YoQUjB+lNaT
vJE59IxjDeE3Vr4DvRQY51mmJaDqWS1bHGN8Tbsolh6aR935XD7PaIljfnThJx/I
hSqFM9ie0tNW+7lIliSiCyBnebfBa4BDpGBWQkACGHHhNx4bB7UYNzdgQCq6YE5b
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17075774484073120090664497580258025679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketsqa.universalorlando.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25791880762551354141985379998695311711826071079336112247342185701094078597625010826336172216082231242461287827963706911122535355866963930654871696264686074082667460091183741125345509438591822633769751039950505007322489771956928737038560232163826213984784201182187220627045590291692133824944469193596067488827317836352426335534161497077992160121630176172124066238675821038049683821489701162453788476670252397587377087721243038979977165203830439577344676490583791386176609877203626084013991200606794233440384805352115851124517986806734649609184620345702120545238136693649269680893107395911467154908847299781003951627159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1969735a68586db03e8767111a713d27cf4a2bee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2417 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtutickets.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '262.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchaseqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhntickets.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugueseqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtuap.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanolqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygprod.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-servicesqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcardsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-stg-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando-stg.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandoqa.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-qa-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando-stg02.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '464.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-dev.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev02-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bstage.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg02-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-uat.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpgqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etdsuat.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando2.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg2.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etdsuat-api.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-dev-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasestage.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-qa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '464.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yg393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhnap.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando-uat.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-uat-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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