www.universalorlando.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:e9:a5:57:a9:10:71:e1:64:cf:d3:6c:a1:07:62:3a was issued on by DigiCert Inc.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:a5:57:a9:10:71:e1:64:cf:d3:6c:a1:07:62:3a
Serial Number (int): 6530070693935866853795544543940534842
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7d:5b:2e:78:c8:07:30:72:6f:5c:b6:12:1f:d9:99:8b:34:d1:72:be
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): cb:65:a6:8d:b4:c0:15:82:dd:ba:c7:75:20:9b:33:84:c3:7e:dd:a3
Fingerprint (sha256): 3d:72:7e:ae:4e:a5:84:fd:f8:20:76:c3:96:6a:0d:e8:2c:2d:85:ba:e2:18:df:29:e7:90:14:c5:c2:a1:65:dc

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalorlando.com

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalorlando.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalorlando.com
universalorlando.com
www.universalorlandoresort.com
ushwebstorestg.nbcuni.com
tickets-services.universalorlando.com
494.universalorlando.com
ticketsqa.universalorlando.com
events393.universalorlando.com
393.universalorlando.com
me393.universalorlando.com
www.universalorlando.co.uk
giftcardsqa.universalorlando.com
ticketsuat.universalorlando.com
auditions.universalorlando.com
beta.universalorlando.com
prod.universaltravelagents.com
media.universalorlando.com
giftcards.universalorlando.com
www.universalevents.com
yg393.universalorlando.com
api-prod.ucdp.net
services.universalorlando.com
tickets-servicesqa.universalorlando.com
harrypotternews.universalorlando.com
www.universalorlandoyouth.com
tickets.universalorlando.com
ticketsbeta.universalorlando.com
tickets.universalstudioshollywood.com
www.orlando.halloweenhorrornights.com
262.universalorlando.com
secure.universalstudios.com
141.universalorlando.com
ygprod.universalorlando.com
api-prd.ucdp.net
ushwebstore.nbcuni.com
services-mobile.ucdp.net
www.universaltravelagents.com
me494.universalorlando.com
orlando429847484.halloweenhorrornights.com
qa.universaltravelagents.com
www.uomeetingsandevents.com
ticketsstg.universalstudioshollywood.com
events494.universalorlando.com

Other certificates including the domain name universalorlando.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
origin-siteqa.universalorlando.com
secure.universalstudios.com
origin-purchaseqa.universalorlando.com
kronos.universalorlando.com
hhnsweeps.universalorlando.com
ticketstore-uat.universalorlando.com
projects.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
storage.universalorlando.com
ticketsqa.universalorlando.com
servicesstg2-origin.universalorlando.com
origin-portuguese.universalorlando.com
specifications.universalorlando.com
www.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
specifications.universalorlando.com
blog.universalorlando.com
ukstore.universalorlando.com
tickets.universalstudioshollywood.com
www.universalorlando.com
servicesstg2-origin.universalorlando.com
servicesstg.universalorlando.com
secure.universalstudios.com
yguat.universalorlando.com
ticketsqa.universalorlando.com
servicesstg.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
hg.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
yguat.universalorlando.com
www.universalorlando.com
origin-espanol.universalorlando.com
blog.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
beta.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
webmail.use.ucdp.net
ticketsqa.universalorlando.com
blog.universalorlando.com
www.universalorlando.com
specifications.universalorlando.com
origin393.UniversalOrlando.com
eviteuat.universalorlando.com
origin-tickets-services.universalorlando.com
origin-ticketsqa.universalorlando.com
www.universalorlando.com
blog.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
secure.universalstudios.com
teams.universalorlando.com
ticketsqa.universalorlando.com
tickets-servicesqa.universalorlando.com
blog.universalorlando.com
mediauat.universalorlando.com
osimg.universalorlando.com
www.thismoment.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
testing.universalorlando.com
etdsprod.universalorlando.com
webmail.use.ucdp.net
tickets.universalstudioshollywood.com
etds.universalstudios.com
www.thismoment.com
ticketsqa.universalorlando.com
etdsuat.universalstudios.com
www.universalorlando.com
beta.universalorlando.com
media.universalorlando.com
testing.universalorlando.com
www.thismoment.com
hg.universalorlando.com
www.universalorlando.com
origin-site.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
media.universalorlando.com

Certificate

The complete raw certificate details for www.universalorlando.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCvvylg4qKvkgieK88ow
kXhvckmYiJtzxChd5dxpbl3IrnROKmXPl5/0p2Zk/CHhLQGD8ODhujOv9NauP2B0
9tXvyigLWdDHcH4G+CH47wHVv5ZTOlT31tei84NA0ljP3sycfzoGcmfQUFmINXdh
Ff92xZ50XB035qvAn3C3tn6tCfDcKwLnurYAiCDNg9DT3SYZy0yvy+qEmQDhTnyk
j05pxRifRXsx6y+OYOjQKkwu/AmJc/BWXXQTJN7aoLQ17D/VZXEYg33Rr2KejdN4
06zb8+52poD+v9CbSMflFXf9QzwcU/D984EOve0UnD1nxsDaAoKUCy//nT13359C
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6530070693935866853795544543940534842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalorlando.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25774280198119317398062948603666003359592302500411174982486673451021080651914912169634143830249639013800603521889965561710538468083792344627862473689993701148250468127359002628162533773105143453269319454863711316359679667085785024609707919005241248239406364161330829052435980155004588801261558619771996276422737906177573070583421293391078316158956449126235255017862319126568817575871288504460990862025646718205580943534726387248968363137999629926990965876049853173180800803070807144281063761021487806112747496652944316013752637110275490385907034167072817133570070854335976140403494181784563167664970121811293802283737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d5b2e78c80730726f5cb6121fd9998b34d172be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlandoresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushwebstorestg.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlando.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcardsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditions.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yg393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-servicesqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotternews.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlandoyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orlando.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '262.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '141.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygprod.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prd.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushwebstore.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando429847484.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uomeetingsandevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsstg.universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events494.universalorlando.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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