ticketsqa.universalorlando.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:ad:b3:4b:70:33:cc:b9:e4:00:3a:c5:22:96:9d:39 was issued on by DigiCert Inc.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
Organization unit: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:ad:b3:4b:70:33:cc:b9:e4:00:3a:c5:22:96:9d:39
Serial Number (int): 15523411838316785109139208489802308921
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ae:41:bb:d4:a0:5f:65:92:54:8e:09:2d:eb:df:04:62:db:50:a9:66
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c9:21:90:50:84:a2:30:83:0f:62:ad:bd:19:9b:df:16:8c:58:3f:78
Fingerprint (sha256): 26:10:c4:ef:fe:55:2e:e5:f3:f1:f1:0b:d2:3d:9e:63:3f:85:09:58:22:e2:c1:6a:cc:75:fc:eb:ff:17:83:83

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ticketsqa.universalorlando.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketsqa.universalorlando.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketsqa.universalorlando.com
131.halloweenhorrornights.com
services-qa-mobile.ucdp.net
mobilecoreservices-dev.ucdp.net
portugueseqa.universalorlando.com
b2bqa.universalorlando.com
secureqa.universalorlando.com
api-uat.ucdp.net
ygprod.universalorlando.com
espanolqa.universalorlando.com
mobilecoreservices-stg.ucdp.net
tickets-servicesqa.universalorlando.com
mobilecoreservices-qa.ucdp.net
services-dev02-mobile.ucdp.net
services-uat.ucdp.net
131.universalorlando.com
services-stg02-mobile.ucdp.net
services-uat-mobile.ucdp.net
giftcards.universalorlando.com
me494.universalorlando.com
services-dev-mobile.ucdp.net
services-qa.ucdp.net
262.universalorlando.com
orlandoqa.halloweenhorrornights.com
rtutickets.ticketsqa.universalorlando.com
ticketsuat.universalorlando.com
qa.universaltravelagents.com
services-stg-mobile.ucdp.net
494.universalorlando.com
services-stg02.ucdp.net
wpg.ucdp.net
events494.universalorlando.com
api-stg2.ucdp.net
orlando2.halloweenhorrornights.com
prod.halloweenhorrornights.com
app.ticketsqa.universalorlando.com
events393.universalorlando.com
legacyservices-dev-mobile.ucdp.net
purchaseqa.universalorlando.com
393.universalorlando.com
hhntickets.ticketsqa.universalorlando.com
wpgqa.ucdp.net
auditionsqa.universalorlando.com
services-stg.ucdp.net
ticketsbeta.universalorlando.com
beta.universalorlando.com
prod.universaltravelagents.com
auditionsqa.ucdp.net
464.halloweenhorrornights.com
services-dev02.ucdp.net
shopqa.universalorlando.com
siteqa.universalorlando.com
giftcardsqa.universalorlando.com
me393.universalorlando.com
hhnap.ticketsqa.universalorlando.com
stg.universalorlando.com
services-dev.ucdp.net
464.universalorlando.com
rtuap.ticketsqa.universalorlando.com
legacyservices-qa-mobile.ucdp.net
secure.halloweenhorrornights.com
legacyservices-stg-mobile.ucdp.net
api-stg.ucdp.net
api-stg02.ucdp.net
services.universalorlando.com
yg393.universalorlando.com
stg.halloweenhorrornights.com
services.ucdp.net

Other certificates including the domain name universalorlando.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
origin-siteqa.universalorlando.com
secure.universalstudios.com
origin-purchaseqa.universalorlando.com
kronos.universalorlando.com
hhnsweeps.universalorlando.com
ticketstore-uat.universalorlando.com
projects.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
storage.universalorlando.com
ticketsqa.universalorlando.com
servicesstg2-origin.universalorlando.com
origin-portuguese.universalorlando.com
specifications.universalorlando.com
www.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
specifications.universalorlando.com
blog.universalorlando.com
ukstore.universalorlando.com
tickets.universalstudioshollywood.com
www.universalorlando.com
servicesstg2-origin.universalorlando.com
servicesstg.universalorlando.com
secure.universalstudios.com
yguat.universalorlando.com
ticketsqa.universalorlando.com
servicesstg.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
hg.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
yguat.universalorlando.com
www.universalorlando.com
origin-espanol.universalorlando.com
blog.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
beta.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
webmail.use.ucdp.net
ticketsqa.universalorlando.com
blog.universalorlando.com
www.universalorlando.com
specifications.universalorlando.com
origin393.UniversalOrlando.com
eviteuat.universalorlando.com
origin-tickets-services.universalorlando.com
origin-ticketsqa.universalorlando.com
www.universalorlando.com
blog.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
secure.universalstudios.com
teams.universalorlando.com
ticketsqa.universalorlando.com
tickets-servicesqa.universalorlando.com
blog.universalorlando.com
mediauat.universalorlando.com
osimg.universalorlando.com
www.thismoment.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
testing.universalorlando.com
etdsprod.universalorlando.com
webmail.use.ucdp.net
tickets.universalstudioshollywood.com
etds.universalstudios.com
www.thismoment.com
ticketsqa.universalorlando.com
etdsuat.universalstudios.com
www.universalorlando.com
beta.universalorlando.com
media.universalorlando.com
testing.universalorlando.com
www.thismoment.com
hg.universalorlando.com
www.universalorlando.com
origin-site.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
media.universalorlando.com

Certificate

The complete raw certificate details for ticketsqa.universalorlando.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIODDCCDPSgAwIBAgIQC62zS3AzzLnkADrFIpadOTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODA5MTgwMDAwMDBaFw0xOTEyMDkxMjAwMDBaMIGmMQswCQYDVQQGEwJVUzET
MBEGA1UECBMKQ2FsaWZvcm5pYTEXMBUGA1UEBxMOVW5pdmVyc2FsIENpdHkxHzAd
BgNVBAoTFlVuaXZlcnNhbCBDaXR5IFN0dWRpb3MxHzAdBgNVBAsTFlVuaXZlcnNh
bCBDaXR5IFN0dWRpb3MxJzAlBgNVBAMTHnRpY2tldHNxYS51bml2ZXJzYWxvcmxh
bmRvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKsYXJwg7JuN
epRRFRrnt826gvusYg3Ux9srB+cfs2SYRnbUk1cXic8Yq+jYZLGNesATG/76wivs
X1MAbyKt6AfrhTMkoBEA9Ejc0VhUjDbBAIeSTal5+NBpavfvBqUO28JceZ06zhih
S4hh8Vm0XMi+FxKzKG68rPJL5qBZ7Cffued5G8X41ebN8vSLRh2z1Dcsxg2+4tX5
dei1EMc1M7y+AwWVU8FXhejw9DwxoPdUg3/wMoXL21NFveev2DGmJbvdZYvwCaml
m7U9n3DDEgi6vggfGtZNubnjz6CLVK3Uf+FguY/C3U+Ihy/pHYRGtG0OnF8jw6H2
1mDeI53mvi8CAwEAAaOCCnswggp3MB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKj
QxY4nmzFMB0GA1UdDgQWBBSuQbvUoF9lklSOCS3r3wRi21CpZjCCB+wGA1UdEQSC
B+Mwggffgh50aWNrZXRzcWEudW5pdmVyc2Fsb3JsYW5kby5jb22CHTEzMS5oYWxs
b3dlZW5ob3Jyb3JuaWdodHMuY29tghtzZXJ2aWNlcy1xYS1tb2JpbGUudWNkcC5u
ZXSCH21vYmlsZWNvcmVzZXJ2aWNlcy1kZXYudWNkcC5uZXSCIXBvcnR1Z3Vlc2Vx
YS51bml2ZXJzYWxvcmxhbmRvLmNvbYIaYjJicWEudW5pdmVyc2Fsb3JsYW5kby5j
b22CHXNlY3VyZXFhLnVuaXZlcnNhbG9ybGFuZG8uY29tghBhcGktdWF0LnVjZHAu
bmV0ght5Z3Byb2QudW5pdmVyc2Fsb3JsYW5kby5jb22CHmVzcGFub2xxYS51bml2
ZXJzYWxvcmxhbmRvLmNvbYIfbW9iaWxlY29yZXNlcnZpY2VzLXN0Zy51Y2RwLm5l
dIIndGlja2V0cy1zZXJ2aWNlc3FhLnVuaXZlcnNhbG9ybGFuZG8uY29tgh5tb2Jp
bGVjb3Jlc2VydmljZXMtcWEudWNkcC5uZXSCHnNlcnZpY2VzLWRldjAyLW1vYmls
ZS51Y2RwLm5ldIIVc2VydmljZXMtdWF0LnVjZHAubmV0ghgxMzEudW5pdmVyc2Fs
b3JsYW5kby5jb22CHnNlcnZpY2VzLXN0ZzAyLW1vYmlsZS51Y2RwLm5ldIIcc2Vy
dmljZXMtdWF0LW1vYmlsZS51Y2RwLm5ldIIeZ2lmdGNhcmRzLnVuaXZlcnNhbG9y
bGFuZG8uY29tghptZTQ5NC51bml2ZXJzYWxvcmxhbmRvLmNvbYIcc2VydmljZXMt
ZGV2LW1vYmlsZS51Y2RwLm5ldIIUc2VydmljZXMtcWEudWNkcC5uZXSCGDI2Mi51
bml2ZXJzYWxvcmxhbmRvLmNvbYIjb3JsYW5kb3FhLmhhbGxvd2VlbmhvcnJvcm5p
Z2h0cy5jb22CKXJ0dXRpY2tldHMudGlja2V0c3FhLnVuaXZlcnNhbG9ybGFuZG8u
Y29tgh90aWNrZXRzdWF0LnVuaXZlcnNhbG9ybGFuZG8uY29tghxxYS51bml2ZXJz
YWx0cmF2ZWxhZ2VudHMuY29tghxzZXJ2aWNlcy1zdGctbW9iaWxlLnVjZHAubmV0
ghg0OTQudW5pdmVyc2Fsb3JsYW5kby5jb22CF3NlcnZpY2VzLXN0ZzAyLnVjZHAu
bmV0ggx3cGcudWNkcC5uZXSCHmV2ZW50czQ5NC51bml2ZXJzYWxvcmxhbmRvLmNv
bYIRYXBpLXN0ZzIudWNkcC5uZXSCIm9ybGFuZG8yLmhhbGxvd2VlbmhvcnJvcm5p
Z2h0cy5jb22CHnByb2QuaGFsbG93ZWVuaG9ycm9ybmlnaHRzLmNvbYIiYXBwLnRp
Y2tldHNxYS51bml2ZXJzYWxvcmxhbmRvLmNvbYIeZXZlbnRzMzkzLnVuaXZlcnNh
bG9ybGFuZG8uY29tgiJsZWdhY3lzZXJ2aWNlcy1kZXYtbW9iaWxlLnVjZHAubmV0
gh9wdXJjaGFzZXFhLnVuaXZlcnNhbG9ybGFuZG8uY29tghgzOTMudW5pdmVyc2Fs
b3JsYW5kby5jb22CKWhobnRpY2tldHMudGlja2V0c3FhLnVuaXZlcnNhbG9ybGFu
ZG8uY29tgg53cGdxYS51Y2RwLm5ldIIgYXVkaXRpb25zcWEudW5pdmVyc2Fsb3Js
YW5kby5jb22CFXNlcnZpY2VzLXN0Zy51Y2RwLm5ldIIgdGlja2V0c2JldGEudW5p
dmVyc2Fsb3JsYW5kby5jb22CGWJldGEudW5pdmVyc2Fsb3JsYW5kby5jb22CHnBy
b2QudW5pdmVyc2FsdHJhdmVsYWdlbnRzLmNvbYIUYXVkaXRpb25zcWEudWNkcC5u
ZXSCHTQ2NC5oYWxsb3dlZW5ob3Jyb3JuaWdodHMuY29tghdzZXJ2aWNlcy1kZXYw
Mi51Y2RwLm5ldIIbc2hvcHFhLnVuaXZlcnNhbG9ybGFuZG8uY29tghtzaXRlcWEu
dW5pdmVyc2Fsb3JsYW5kby5jb22CIGdpZnRjYXJkc3FhLnVuaXZlcnNhbG9ybGFu
ZG8uY29tghptZTM5My51bml2ZXJzYWxvcmxhbmRvLmNvbYIkaGhuYXAudGlja2V0
c3FhLnVuaXZlcnNhbG9ybGFuZG8uY29tghhzdGcudW5pdmVyc2Fsb3JsYW5kby5j
b22CFXNlcnZpY2VzLWRldi51Y2RwLm5ldIIYNDY0LnVuaXZlcnNhbG9ybGFuZG8u
Y29tgiRydHVhcC50aWNrZXRzcWEudW5pdmVyc2Fsb3JsYW5kby5jb22CIWxlZ2Fj
eXNlcnZpY2VzLXFhLW1vYmlsZS51Y2RwLm5ldIIgc2VjdXJlLmhhbGxvd2Vlbmhv
cnJvcm5pZ2h0cy5jb22CImxlZ2FjeXNlcnZpY2VzLXN0Zy1tb2JpbGUudWNkcC5u
ZXSCEGFwaS1zdGcudWNkcC5uZXSCEmFwaS1zdGcwMi51Y2RwLm5ldIIdc2Vydmlj
ZXMudW5pdmVyc2Fsb3JsYW5kby5jb22CGnlnMzkzLnVuaXZlcnNhbG9ybGFuZG8u
Y29tgh1zdGcuaGFsbG93ZWVuaG9ycm9ybmlnaHRzLmNvbYIRc2VydmljZXMudWNk
cC5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo
BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB
AgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdl
b3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3Qu
Y29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUA
AAFl7m15rAAABAMASDBGAiEArCQrMMy8bbBfedl5bmUAtxV7x5jYxcTAjrsKdsV/
crMCIQCNEjF/M2TB5GZNzXAQL6w9MlUk4tW80reMNLp0GN1y/gB1AId1v+dZfPiM
Q5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZe5tejsAAAQDAEYwRAIgGsUkYqGY
z/BDpuSxh1S7+FkziSxPXpA+w75XK10IuLACIE4B8HMtmjKiMMZHPo/fKmdwxu43
QMFcygbc8pdbmNG4MA0GCSqGSIb3DQEBCwUAA4IBAQBMpYrAZXtSxV7kLDTeDLO9
On9XFqjLpOcPDaErll9A9mf75G5LvGRlSxY1pQDgGDMh9zkeA36odaQbOfYOS2GF
xshg0qC1whXz3OtSZ1GaAwuDxNXtFFUIz2iCg6Za6uldC2MxyhM06DmA1cKfpmo7
CoJjydCrvtzA6pIxf6OB+NM4+SSPmbOMOfXwzDjqEl7+NfMiusKIjZVC42B8oNTS
7sQRZYS5mFyz3CEvZ6KVtKHtW3H2Zs6RbwnM2RTreutfqEE6a0IN+TQCovxrWdKq
1Ljl+IKXzVq5CtC/6mcrZlJWroHCAax+D6Q/nvulJEmnqPuYSwQnDuBW86cUsJ+K
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxhcnCDsm416lFEVGue3
zbqC+6xiDdTH2ysH5x+zZJhGdtSTVxeJzxir6NhksY16wBMb/vrCK+xfUwBvIq3o
B+uFMySgEQD0SNzRWFSMNsEAh5JNqXn40Glq9+8GpQ7bwlx5nTrOGKFLiGHxWbRc
yL4XErMobrys8kvmoFnsJ9+553kbxfjV5s3y9ItGHbPUNyzGDb7i1fl16LUQxzUz
vL4DBZVTwVeF6PD0PDGg91SDf/AyhcvbU0W956/YMaYlu91li/AJqaWbtT2fcMMS
CLq+CB8a1k25uePPoItUrdR/4WC5j8LdT4iHL+kdhEa0bQ6cXyPDofbWYN4jnea+
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15523411838316785109139208489802308921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketsqa.universalorlando.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21598763379476413133393131864522270808423971596971618974313457105980070760826797518671274707951477359023277354937147726545188084872548730852423743197575323164973310571856536916502356334394392107335910654225023403341697536100464202556945246092782915604332533518765796391481222621692892481025915131513761562622021509715862726978375649422134770536947016906785066325052154282768890910197291017487585470138032884590427927158863492742158295937966342273498769328937326399145807372072282541190160748593058606136404312605106987695205787989083183028393051739331936378748391335152018433717623086342609544934594920065589699853871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae41bbd4a05f6592548e092debdf0462db50a966
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2019 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-dev.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugueseqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygprod.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanolqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-servicesqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilecoreservices-qa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev02-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-uat.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg02-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-uat-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-qa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '262.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandoqa.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtutickets.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg2.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando2.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-dev-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchaseqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhntickets.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpgqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsqa.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '464.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcardsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhnap.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-dev.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '464.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtuap.ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-qa-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyservices-stg-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg02.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yg393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ucdp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000165ee6d79ac0000040300483046022100ac242b30ccbc6db05f79d9796e6500b7157bc798d8c5c4c08ebb0a76c57f72b30221008d12317f3364c1e4664dcd70102fac3d325524e2d5bcd2b78c34ba7418dd72fe0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165ee6d7a3b000004030046304402201ac52462a198cff043a6e4b18754bbf85933892c4f5e903ec3be572b5d08b8b002204e01f0732d9a32a230c6473e8fdf2a6770c6ee3740c15cca06dcf2975b98d1b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ca58ac0657b52c55ee42c34de0cb3bd3a7f5716a8cba4e70f0da12b965f40f667fbe46e4bbc64654b1635a500e0183321f7391e037ea875a41b39f60e4b6185c6c860d2a0b5c215f3dceb5267519a030b83c4d5ed145508cf688283a65aeae95d0b6331ca1334e83980d5c29fa66a3b0a8263c9d0abbedcc0ea92317fa381f8d338f9248f99b38c39f5f0cc38ea125efe35f322bac2888d9542e3607ca0d4d2eec4116584b9985cb3dc212f67a295b4a1ed5b71f666ce916f09ccd914eb7aeb5fa8413a6b420df93402a2fc6b59d2aad4b8e5f88297cd5ab90ad0bfea672b665256ae81c201ac7e0fa43f9efba52449a7a8fb984b04270ee056f3a714b09f8a