ticketsqa.universalorlando.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:17:be:57:78:28:d5:09:5c:4e:63:ae:9c:8e:70:86 was issued on by DigiCert Inc.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
Organization unit: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:17:be:57:78:28:d5:09:5c:4e:63:ae:9c:8e:70:86
Serial Number (int): 8098651390318193079335869006375448710
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 75:6e:78:bf:92:c3:66:7f:fe:88:13:40:be:57:58:18:55:35:98:ab
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): dd:1f:94:8d:86:cf:88:9f:3e:ba:dc:b7:03:a7:eb:35:08:15:ca:db
Fingerprint (sha256): 19:78:10:66:65:36:e7:a6:d2:04:85:d1:14:09:88:b5:fa:b0:03:ab:84:50:b9:1b:bb:5f:e2:1e:07:f2:53:f6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ticketsqa.universalorlando.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketsqa.universalorlando.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketsqa.universalorlando.com
services-stg02.ucdp.net
api-stg02.ucdp.net
orlando2.halloweenhorrornights.com
mobilecoreservices-qa.ucdp.net
services-dev02.ucdp.net
stg.universalorlando.com
espanolqa.universalorlando.com
rtuap.ticketsqa.universalorlando.com
events393.universalorlando.com
orlando-stg02.halloweenhorrornights.com
auditionsqa.universalorlando.com
services-uat.ucdp.net
131.universalorlando.com
ticketsbeta.universalorlando.com
262.universalorlando.com
giftcards.universalorlando.com
393.universalorlando.com
beta.universalorlando.com
stg.halloweenhorrornights.com
services-qa-mobile.ucdp.net
services-stg.ucdp.net
portugueseqa.universalorlando.com
131.halloweenhorrornights.com
rtutickets.ticketsqa.universalorlando.com
464.halloweenhorrornights.com
me393.universalorlando.com
mobilecoreservices-stg.ucdp.net
api-stg.ucdp.net
app.ticketsqa.universalorlando.com
services-stg-mobile.ucdp.net
orlando-stg.halloweenhorrornights.com
services.ucdp.net
uat.universalorlando.com
uat.universalparks.com
mobilecoreservices-dev.ucdp.net
prod.halloweenhorrornights.com
494.universalorlando.com
orlandoqa.halloweenhorrornights.com
b2bqa.universalorlando.com
services-uat-mobile.ucdp.net
stage.universalparks.com
services-dev-mobile.ucdp.net
wpgqa.ucdp.net
stage02.universalparks.com
services-dev02-mobile.ucdp.net
hhntickets.ticketsqa.universalorlando.com
siteqa.universalorlando.com
ygprod.universalorlando.com
stage02.universalorlando.com
purchaseqa.universalorlando.com
services-dev.ucdp.net
api-stg2.ucdp.net
legacyservices-dev-mobile.ucdp.net
auditionsqa.ucdp.net
events494.universalorlando.com
464.universalorlando.com
legacyservices-stg-mobile.ucdp.net
services.universalorlando.com
wpg.ucdp.net
yg393.universalorlando.com
orlando-uat.halloweenhorrornights.com
me494.universalorlando.com
secure.halloweenhorrornights.com
qa.universaltravelagents.com
stage.universalorlando.com
legacyservices-qa-mobile.ucdp.net
services-stg02-mobile.ucdp.net
ticketsuat.universalorlando.com
hhnap.ticketsqa.universalorlando.com
services-qa.ucdp.net
giftcardsqa.universalorlando.com
secureqa.universalorlando.com
shopqa.universalorlando.com
tickets-servicesqa.universalorlando.com
api-uat.ucdp.net
prod.universaltravelagents.com

Other certificates including the domain name universalorlando.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
origin-siteqa.universalorlando.com
secure.universalstudios.com
origin-purchaseqa.universalorlando.com
kronos.universalorlando.com
hhnsweeps.universalorlando.com
ticketstore-uat.universalorlando.com
projects.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
storage.universalorlando.com
ticketsqa.universalorlando.com
servicesstg2-origin.universalorlando.com
origin-portuguese.universalorlando.com
specifications.universalorlando.com
www.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
specifications.universalorlando.com
blog.universalorlando.com
ukstore.universalorlando.com
tickets.universalstudioshollywood.com
www.universalorlando.com
servicesstg2-origin.universalorlando.com
servicesstg.universalorlando.com
secure.universalstudios.com
yguat.universalorlando.com
ticketsqa.universalorlando.com
servicesstg.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
hg.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
yguat.universalorlando.com
www.universalorlando.com
origin-espanol.universalorlando.com
blog.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
beta.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
webmail.use.ucdp.net
ticketsqa.universalorlando.com
blog.universalorlando.com
www.universalorlando.com
specifications.universalorlando.com
origin393.UniversalOrlando.com
eviteuat.universalorlando.com
origin-tickets-services.universalorlando.com
origin-ticketsqa.universalorlando.com
www.universalorlando.com
blog.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
secure.universalstudios.com
teams.universalorlando.com
ticketsqa.universalorlando.com
tickets-servicesqa.universalorlando.com
blog.universalorlando.com
mediauat.universalorlando.com
osimg.universalorlando.com
www.thismoment.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
testing.universalorlando.com
etdsprod.universalorlando.com
webmail.use.ucdp.net
tickets.universalstudioshollywood.com
etds.universalstudios.com
www.thismoment.com
ticketsqa.universalorlando.com
etdsuat.universalstudios.com
www.universalorlando.com
beta.universalorlando.com
media.universalorlando.com
testing.universalorlando.com
www.thismoment.com
hg.universalorlando.com
www.universalorlando.com
origin-site.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
media.universalorlando.com

Certificate

The complete raw certificate details for ticketsqa.universalorlando.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fpyUYU7TSSsO3PY8ktc
b3RNNSGwZRWisCLo04HJy1xwSY7ERShqNC2OApByNJ/NiLodXWf/xiwQSOJGX8DX
9YftR1IvHXTtX57XjfcynGMJtEgSy6/hkIaKk8o6iLvYtrmaKFaFn7B3wFwHdff/
S93Xb9HQa5DtwiFJepGcFd7xcNz/ZQZPSYtWYzMV5GBiMXKwGk2WHvyL3jlgN6+R
2mELLgKKEY9YjHjtaSiGRmhhAoVslQNOpUzZXjMZF+xI/cd6QkC5TBOwJw00+0xS
2YWpWtNV673ZLMqHHea2W8zBUHMwcKNhJuWkgDYWPzxQ6fOHDVT977yxmLbPSUUQ
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8098651390318193079335869006375448710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketsqa.universalorlando.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27012258757633450063577729999706770768088591128324422753647498446501438704096395875670925449007697745284500711861482458405744514117611887325925764278622844301874089711408792538508918506887365194588484339205922795404476607665661695027262852539848053291146180945104869238315717696003875655248654081090960131414013347537789629519649375710588452089381942291997850590658542823563791865243151294268916561684391778296102164399279546777360282028110193171933656903835525330527319506606598823718019985512921830391449358532103486253753440029628820853571277951009960077665337188634596715181856672100806723979414425860589159256279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							756e78bf92c3667ffe881340be575818553598ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando2.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-qa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanolqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtuap.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando-stg02.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-uat.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '262.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugueseqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtutickets.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '464.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando-stg.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-dev.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandoqa.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-uat-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpgqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.universalparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev02-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhntickets.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygprod.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchaseqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg2.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-dev-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '464.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-stg-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yg393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando-uat.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-qa-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg02-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhnap.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcardsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-servicesqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universaltravelagents.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016aff35abff000004030047304502206bc98b1e9b86ba206b306525a5a110238412a816efac8c95715eb48f38616259022100a74419466f677cfbb3c8fe880bc678906c943ad7ab50ba33a86b1f14374af4960076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016aff35acf30000040300473045022100cbf8c11d1eb16afa19ca78d90b1b2bbd8089aaf78cb9ac8aa987baac5138ec0a022033e8ef057ea325d6ea55fe2b8256aa58e6f3fe68e2047a8caeabc404db094ba8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ceba11327acc01bc3a8069916c6fd1d1c0afca0ce1baeef8fde57efc394c22b71d2294b406d82193fb13bebe922ee799f0832bad399b1a57e04536f5e5b89454edeb17ad8c4ac723ef95439642a2bb3617a785d00843ff2a1b8a0aa7354a444313993c051044b1359fc005227d6632d65366b0056d695ac609d0d098f6d65ead30915435854d9e445ec7d6bdbc1d432b4e119dbac07d61f4f0ec5b233527b468d10676cef404a2d396cc9a209ab19addc9b9db21c46ed4167d6a251cea7454ac7856738ed0b7f8de550c09e62021b4c160d773a3ac1b66636fd55a3717963776201fcb494cb3e6c02b4d64ab8f0eb831dec7b9474719ea22a34cfc9f79238ed