origin-tickets-services.universalorlando.com

- Comcast Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number a3:cc:ca:05:9a:c7:9d:9e:94:42:61:86:49:cc:ce:ab was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Comcast Corporation

Organization: Comcast Corporation
Organization unit: UPR
Organization unit: Hosted by Comcast Corporation
Organization unit: Unified Communications
Address: 1 Comcast Center
Postal code: 19103
State / Province: PA
Locality: Philadelphia
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a3:cc:ca:05:9a:c7:9d:9e:94:42:61:86:49:cc:ce:ab
Serial Number (int): 217727489362865154415685131854595018411
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 56:f0:69:d1:fd:18:29:33:4d:a2:54:a8:24:22:b4:be:88:cd:44:54
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 4d:b3:fe:e1:21:27:22:c9:d2:8e:85:e7:66:b1:1f:d4:3b:2b:0c:7f
Fingerprint (sha256): 20:dd:f8:53:5e:57:64:54:63:5f:35:12:a8:14:84:74:56:48:a3:66:f6:5f:99:7c:02:66:4b:be:6b:90:76:1f

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate origin-tickets-services.universalorlando.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin-tickets-services.universalorlando.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin-tickets-services.universalorlando.com
www.origin-tickets-services.universalorlando.com

Other certificates including the domain name universalorlando.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
origin-siteqa.universalorlando.com
secure.universalstudios.com
origin-purchaseqa.universalorlando.com
kronos.universalorlando.com
hhnsweeps.universalorlando.com
ticketstore-uat.universalorlando.com
projects.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
storage.universalorlando.com
ticketsqa.universalorlando.com
servicesstg2-origin.universalorlando.com
origin-portuguese.universalorlando.com
specifications.universalorlando.com
www.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
specifications.universalorlando.com
blog.universalorlando.com
ukstore.universalorlando.com
tickets.universalstudioshollywood.com
www.universalorlando.com
servicesstg2-origin.universalorlando.com
servicesstg.universalorlando.com
secure.universalstudios.com
yguat.universalorlando.com
ticketsqa.universalorlando.com
servicesstg.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
hg.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
yguat.universalorlando.com
www.universalorlando.com
origin-espanol.universalorlando.com
blog.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
beta.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
webmail.use.ucdp.net
ticketsqa.universalorlando.com
blog.universalorlando.com
www.universalorlando.com
specifications.universalorlando.com
origin393.UniversalOrlando.com
eviteuat.universalorlando.com
origin-tickets-services.universalorlando.com
origin-ticketsqa.universalorlando.com
www.universalorlando.com
blog.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
secure.universalstudios.com
teams.universalorlando.com
ticketsqa.universalorlando.com
tickets-servicesqa.universalorlando.com
blog.universalorlando.com
mediauat.universalorlando.com
osimg.universalorlando.com
www.thismoment.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
testing.universalorlando.com
etdsprod.universalorlando.com
webmail.use.ucdp.net
tickets.universalstudioshollywood.com
etds.universalstudios.com
www.thismoment.com
ticketsqa.universalorlando.com
etdsuat.universalstudios.com
www.universalorlando.com
beta.universalorlando.com
media.universalorlando.com
testing.universalorlando.com
www.thismoment.com
hg.universalorlando.com
www.universalorlando.com
origin-site.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
media.universalorlando.com

Certificate

The complete raw certificate details for origin-tickets-services.universalorlando.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Yvqf/nhEpOAVymAMYPA
kTxbTY0g5brMgZr3h1s8bxKQRQnyajA9E/Ed+zDDAnN2cBC1mgSwhiIWXtz0bjAA
38Y3X39HSsFyI14zNcAwDyLds/oHLs1801NBkmVXy9Okh3ZCOlkL2Vwc+tN93OBY
KUwxY8BxfJq1f55+2BEcrlEvtGIhm5MQ7ZrNkVqx7H6p9mnlNyqsukzW+6XOqY0G
7nch2uFaNh6wnUFxssxgtL1iNJDjWMUj5Nb9LS5DdkXTUf1mNgnoff2FAOeDG/OJ
X+Gc4j6qwJIbA+Y3YK1/ymlfFMjM2IGVcnEREO2yroro4IiMiVFy8Axo0oloyAjh
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 217727489362865154415685131854595018411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '19103'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Comcast Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comcast Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UPR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Comcast Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin-tickets-services.universalorlando.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31502333095158164185495398112322487089454999510909321852405596226779877086007299763965964232742891664082666654724674978833760933877536560208345048742164994788502871084893381158490365615951125673664446181259883330561693873294080540113251231341016956287626079819600708192296783823577566077824337278796633091479054623377886600384828908825845035314487676223927461725029360038950877334625011535084418623731246324904080319642933389112358180265804362641206957318913409051929852019008239228023322788606594270852053169259266540804451838046637208492937454216387211250194616348137482668351470557620681431316672548368807300227549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56f069d1fd1829334da254a82422b4be88cd4454
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-tickets-services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.origin-tickets-services.universalorlando.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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