www.universalpictures.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:fa:3c:72:2a:04:ed:e4:e6:ef:8f:22:4b:36:98:0e was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:fa:3c:72:2a:04:ed:e4:e6:ef:8f:22:4b:36:98:0e
Serial Number (int): 17250036153643772647467948145200502798
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 00:bf:d8:64:28:dd:8e:72:97:93:d3:38:82:49:67:e9:4a:21:1f:47
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 01:eb:a2:92:0f:3f:d5:68:25:8f:10:83:76:a7:8d:b0:ce:42:49:0a
Fingerprint (sha256): 47:eb:87:d3:b2:d1:bf:ad:38:3c:f7:67:62:b9:89:d3:5d:13:74:69:8e:c4:ed:a6:02:45:1b:24:8a:0f:c2:5a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalpictures.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalpictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalpictures.com
universalpictures.com
staging.seattleindependentpress.net
staging.freetheminions.com
movies.universalpictures.com
jointhewinterswar.com
tablet.universalpictures.com
freetheminions.com
monsterhighmask.com
www.mybigfatmoment.com
www.housewithaclock.com
www.upheoffer.com
www.grinchmovie.com
www.mypetmoji.com
adminuniversalpictures.upqa.com
staging.halloweenhorrornights.com
www.cantstopthefunk.com
ultravioletuniversal.com
www.universalpictures.co.uk
ouijaknowsall.com
www.wizardingworldhollywood.com
universalkids.com
grinchmovie.com
realmomsof.com
www.pitch2smash.com
prod.universalpictures.com
www.monsterhighmask.com
www.jointhewinterswar.com
universalanytime.com
johnnyenglishfilm.com
www.londonwelcomesyou.com
www.eastereggwraps.com
www.universalscreenings.com
www.dreamworkstrollsactivityhub.com
www.ouijaknowsall.com
www.universalanytime.com
www.splitfilmtickets.co.uk
www.halloweenhorrornights.com
www.ultravioletuniversal.com
www.breakinginmovie.com
www.thefirstpurge.com
www.escapemichaelmyers.com
stage.jaegeracademy.com
bannerassets.universalstudios.com
blumhousestruthordare.com
www.bttfmovie.com
seattleindependentpress.net
prodapp.mypetmoji.com
www.jurassicworld.com
universalpictures.co.uk
halloweenhorrornights.com
www.workingtitlefilms.com
assets.conflagrationmovie.com
www.skyscrapermovie.com
workingtitlefilms.com
faceyourfate.halloweenmovie.com
www.firstman.com
api.universalpictures.co.uk
www.freetheminions.com
splitfilmtickets.co.uk
www.pitchperfectmovie.com
www.muttcutts.com
www.mortalengines.com
www.jurassicworldsweeps.com
www.conflagrationmovie.com
www.jaegeracademy.com
trollshairband.com
www.fiftyshadessweeps.com
mypetmoji.com
www.vdayprintablecards.com
hollywood.halloweenhorrornights.com
moviesuniversalpictures.upqa.com
www.dreamworkstrollshugs.com
stage.workingtitlefilms.com
m.halloweenhorrornights.com
jointhewinterswar.upqa.com
prod.halloweenhorrornights.com
www.dreamworkstrollmate.com
admin.universalpictures.com
www.realmomsof.com
www.seattleindependentpress.net
www.johnnyenglishfilm.com
www.trollshairband.com
www.barbieparty.org
www.hotelbelladonna.com
wizardingworldholllywood.upqa.com
newuniversalpictures.upqa.com
www.blumhousestruthordare.com
staging.workingtitlefilms.com
www.pumpkinprintables.com
live.jurassicworld.com
www.magicmoviecard.com
stageapp.mypetmoji.com
www.universalkids.com
prod.workingtitlefilms.com

Other certificates including the domain name universalpictures.com

(limited to 100 certificates)
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for www.universalpictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPwDCCDqigAwIBAgIQDPo8cioE7eTm748iSzaYDjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTAxMDkwMDAwMDBaFw0xOTAzMTUxMjAwMDBaMIGAMQswCQYDVQQGEwJVUzET
MBEGA1UECBMKQ2FsaWZvcm5pYTEXMBUGA1UEBxMOVW5pdmVyc2FsIENpdHkxHzAd
BgNVBAoTFlVuaXZlcnNhbCBDaXR5IFN0dWRpb3MxIjAgBgNVBAMTGXd3dy51bml2
ZXJzYWxwaWN0dXJlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC64VJA8p7qTqmsX0LIR6orfdH+YJ03oNJeXllg8bN+gELyhgPCwjEe8tStqgJx
n0otFuMl+UGzHspyD6jRNw288f8fMGFc+zsLCJr/JaaBb9jpL2b9xoH3ECbpJdEY
L/hlo5iakCZv2/nbGB/9S0v1+TzO7UhRmaD2koCv1ucAxyZ7NcTdm8/moyCciqo/
nX1CowSY2inErJ4bSkD7lPwXbtdwdx7tc6tsJmzza6v8FXqXQdc/lWUj4h7Yexxl
Xx9aYbu3MgYVyTD8UBxs+KnT8vHpYrHleARzl6PgjBHguL1t1s/+HtrehK+LlJRn
UOFgVYYfEUM7ANosf4KqwfvJAgMBAAGjggxVMIIMUTAfBgNVHSMEGDAWgBSQWP+w
nHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUAL/YZCjdjnKXk9M4gkln6UohH0cw
ggnEBgNVHREEggm7MIIJt4IZd3d3LnVuaXZlcnNhbHBpY3R1cmVzLmNvbYIVdW5p
dmVyc2FscGljdHVyZXMuY29tgiNzdGFnaW5nLnNlYXR0bGVpbmRlcGVuZGVudHBy
ZXNzLm5ldIIac3RhZ2luZy5mcmVldGhlbWluaW9ucy5jb22CHG1vdmllcy51bml2
ZXJzYWxwaWN0dXJlcy5jb22CFWpvaW50aGV3aW50ZXJzd2FyLmNvbYIcdGFibGV0
LnVuaXZlcnNhbHBpY3R1cmVzLmNvbYISZnJlZXRoZW1pbmlvbnMuY29tghNtb25z
dGVyaGlnaG1hc2suY29tghZ3d3cubXliaWdmYXRtb21lbnQuY29tghd3d3cuaG91
c2V3aXRoYWNsb2NrLmNvbYIRd3d3LnVwaGVvZmZlci5jb22CE3d3dy5ncmluY2ht
b3ZpZS5jb22CEXd3dy5teXBldG1vamkuY29tgh9hZG1pbnVuaXZlcnNhbHBpY3R1
cmVzLnVwcWEuY29tgiFzdGFnaW5nLmhhbGxvd2VlbmhvcnJvcm5pZ2h0cy5jb22C
F3d3dy5jYW50c3RvcHRoZWZ1bmsuY29tghh1bHRyYXZpb2xldHVuaXZlcnNhbC5j
b22CG3d3dy51bml2ZXJzYWxwaWN0dXJlcy5jby51a4IRb3VpamFrbm93c2FsbC5j
b22CH3d3dy53aXphcmRpbmd3b3JsZGhvbGx5d29vZC5jb22CEXVuaXZlcnNhbGtp
ZHMuY29tgg9ncmluY2htb3ZpZS5jb22CDnJlYWxtb21zb2YuY29tghN3d3cucGl0
Y2gyc21hc2guY29tghpwcm9kLnVuaXZlcnNhbHBpY3R1cmVzLmNvbYIXd3d3Lm1v
bnN0ZXJoaWdobWFzay5jb22CGXd3dy5qb2ludGhld2ludGVyc3dhci5jb22CFHVu
aXZlcnNhbGFueXRpbWUuY29tghVqb2hubnllbmdsaXNoZmlsbS5jb22CGXd3dy5s
b25kb253ZWxjb21lc3lvdS5jb22CFnd3dy5lYXN0ZXJlZ2d3cmFwcy5jb22CG3d3
dy51bml2ZXJzYWxzY3JlZW5pbmdzLmNvbYIjd3d3LmRyZWFtd29ya3N0cm9sbHNh
Y3Rpdml0eWh1Yi5jb22CFXd3dy5vdWlqYWtub3dzYWxsLmNvbYIYd3d3LnVuaXZl
cnNhbGFueXRpbWUuY29tghp3d3cuc3BsaXRmaWxtdGlja2V0cy5jby51a4Idd3d3
LmhhbGxvd2VlbmhvcnJvcm5pZ2h0cy5jb22CHHd3dy51bHRyYXZpb2xldHVuaXZl
cnNhbC5jb22CF3d3dy5icmVha2luZ2lubW92aWUuY29tghV3d3cudGhlZmlyc3Rw
dXJnZS5jb22CGnd3dy5lc2NhcGVtaWNoYWVsbXllcnMuY29tghdzdGFnZS5qYWVn
ZXJhY2FkZW15LmNvbYIhYmFubmVyYXNzZXRzLnVuaXZlcnNhbHN0dWRpb3MuY29t
ghlibHVtaG91c2VzdHJ1dGhvcmRhcmUuY29tghF3d3cuYnR0Zm1vdmllLmNvbYIb
c2VhdHRsZWluZGVwZW5kZW50cHJlc3MubmV0ghVwcm9kYXBwLm15cGV0bW9qaS5j
b22CFXd3dy5qdXJhc3NpY3dvcmxkLmNvbYIXdW5pdmVyc2FscGljdHVyZXMuY28u
dWuCGWhhbGxvd2VlbmhvcnJvcm5pZ2h0cy5jb22CGXd3dy53b3JraW5ndGl0bGVm
aWxtcy5jb22CHWFzc2V0cy5jb25mbGFncmF0aW9ubW92aWUuY29tghd3d3cuc2t5
c2NyYXBlcm1vdmllLmNvbYIVd29ya2luZ3RpdGxlZmlsbXMuY29tgh9mYWNleW91
cmZhdGUuaGFsbG93ZWVubW92aWUuY29tghB3d3cuZmlyc3RtYW4uY29tghthcGku
dW5pdmVyc2FscGljdHVyZXMuY28udWuCFnd3dy5mcmVldGhlbWluaW9ucy5jb22C
FnNwbGl0ZmlsbXRpY2tldHMuY28udWuCGXd3dy5waXRjaHBlcmZlY3Rtb3ZpZS5j
b22CEXd3dy5tdXR0Y3V0dHMuY29tghV3d3cubW9ydGFsZW5naW5lcy5jb22CG3d3
dy5qdXJhc3NpY3dvcmxkc3dlZXBzLmNvbYIad3d3LmNvbmZsYWdyYXRpb25tb3Zp
ZS5jb22CFXd3dy5qYWVnZXJhY2FkZW15LmNvbYISdHJvbGxzaGFpcmJhbmQuY29t
ghl3d3cuZmlmdHlzaGFkZXNzd2VlcHMuY29tgg1teXBldG1vamkuY29tghp3d3cu
dmRheXByaW50YWJsZWNhcmRzLmNvbYIjaG9sbHl3b29kLmhhbGxvd2VlbmhvcnJv
cm5pZ2h0cy5jb22CIG1vdmllc3VuaXZlcnNhbHBpY3R1cmVzLnVwcWEuY29tghx3
d3cuZHJlYW13b3Jrc3Ryb2xsc2h1Z3MuY29tghtzdGFnZS53b3JraW5ndGl0bGVm
aWxtcy5jb22CG20uaGFsbG93ZWVuaG9ycm9ybmlnaHRzLmNvbYIaam9pbnRoZXdp
bnRlcnN3YXIudXBxYS5jb22CHnByb2QuaGFsbG93ZWVuaG9ycm9ybmlnaHRzLmNv
bYIbd3d3LmRyZWFtd29ya3N0cm9sbG1hdGUuY29tghthZG1pbi51bml2ZXJzYWxw
aWN0dXJlcy5jb22CEnd3dy5yZWFsbW9tc29mLmNvbYIfd3d3LnNlYXR0bGVpbmRl
cGVuZGVudHByZXNzLm5ldIIZd3d3LmpvaG5ueWVuZ2xpc2hmaWxtLmNvbYIWd3d3
LnRyb2xsc2hhaXJiYW5kLmNvbYITd3d3LmJhcmJpZXBhcnR5Lm9yZ4IXd3d3Lmhv
dGVsYmVsbGFkb25uYS5jb22CIXdpemFyZGluZ3dvcmxkaG9sbGx5d29vZC51cHFh
LmNvbYIdbmV3dW5pdmVyc2FscGljdHVyZXMudXBxYS5jb22CHXd3dy5ibHVtaG91
c2VzdHJ1dGhvcmRhcmUuY29tgh1zdGFnaW5nLndvcmtpbmd0aXRsZWZpbG1zLmNv
bYIZd3d3LnB1bXBraW5wcmludGFibGVzLmNvbYIWbGl2ZS5qdXJhc3NpY3dvcmxk
LmNvbYIWd3d3Lm1hZ2ljbW92aWVjYXJkLmNvbYIWc3RhZ2VhcHAubXlwZXRtb2pp
LmNvbYIVd3d3LnVuaXZlcnNhbGtpZHMuY29tghpwcm9kLndvcmtpbmd0aXRsZWZp
bG1zLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29t
L0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAq
MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeB
DAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMu
Z2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVz
dC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggEGBgorBgEE
AdZ5AgQCBIH3BIH0APIAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7R
hQAAAWgzHxpEAAAEAwBIMEYCIQD/0EL0/y9ilomXHfhh+at2wcMccpYGg5u3LzP3
tQXu4QIhALA+v6E61mui9tNu9K2qsFulfP7J/yQPDa+8Td8QF+IYAHcAh3W/51l8
+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFoMx8bCAAABAMASDBGAiEAob8M
CLZZs17cXhQfgEabuckQkyLETUF/lnDrOg5HEIgCIQCW9i9yW0rRhPht+W4ImPGi
/VSNcNNZ4ZLg3iSxU6wg1zANBgkqhkiG9w0BAQsFAAOCAQEARW7XM0De/0ocTjK7
81p6MY+3KFVylCQc3yWkFP6HssTHgxQ8FMdMPO04s6VIccVY4qkdGa9MUkEpBWeJ
+IRjoertH7xGd7Pj64FtKdZsHTs6MLH1vi8ETGPQeqsVEm9cnO0xW/ubUiyiPIJ8
Wy0iGa27IFGnxZCEqBFjhssXFRBnn4afq48vg5GMnvQbwDeH8t4e7lYQH7h0ZStR
y/2NemKuO7yQa8iMB1XZr3idbNPyuZCV/lE2o5yfb0ic/dFaJvf6a/NQfzP2cLg6
OgOcIrdWeI/i56xiV+KGmg38UbFP+JV17cmer1kH1aH2T6iknlN1h/dtHvpFG83e
SJ/tZw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuFSQPKe6k6prF9CyEeq
K33R/mCdN6DSXl5ZYPGzfoBC8oYDwsIxHvLUraoCcZ9KLRbjJflBsx7Kcg+o0TcN
vPH/HzBhXPs7Cwia/yWmgW/Y6S9m/caB9xAm6SXRGC/4ZaOYmpAmb9v52xgf/UtL
9fk8zu1IUZmg9pKAr9bnAMcmezXE3ZvP5qMgnIqqP519QqMEmNopxKyeG0pA+5T8
F27XcHce7XOrbCZs82ur/BV6l0HXP5VlI+Ie2HscZV8fWmG7tzIGFckw/FAcbPip
0/Lx6WKx5XgEc5ej4IwR4Li9bdbP/h7a3oSvi5SUZ1DhYFWGHxFDOwDaLH+CqsH7
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17250036153643772647467948145200502798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalpictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23591434799583741246590810203687485924253796063296279668493687833059291082528714424489355181794962550899918301587244834046138497030901228005502258822813033663802939010440451099446076135324211209827783008145736590757404436775674737442810588038038896216067404633036524967092978514838546171879661015029402062846388615124671416124528131301441584889502211564388900563311573138717320428204718412984005729618018983276046445041152463766272513670464371152530145823647062054238196457284233408952274242488936393717002119743664837701060096933283138005543785225453107810234976644391129882795175755456815271938145883075079336754121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00bfd86428dd8e729793d338824967e94a211f47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2491 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybigfatmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housewithaclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upheoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantstopthefunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wizardingworldhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitch2smash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonwelcomesyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastereggwraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalscreenings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollsactivityhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakinginmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstpurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapemichaelmyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerassets.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bttfmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyscrapermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceyourfate.halloweenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.universalpictures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitchperfectmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muttcutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortalengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworldsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftyshadessweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdayprintablecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywood.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollshugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbieparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbelladonna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizardingworldholllywood.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpkinprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmoviecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stageapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168331f1a440000040300483046022100ffd042f4ff2f629689971df861f9ab76c1c31c729606839bb72f33f7b505eee1022100b03ebfa13ad66ba2f6d36ef4adaab05ba57cfec9ff240f0dafbc4ddf1017e2180077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168331f1b080000040300483046022100a1bf0c08b659b35edc5e141f80469bb9c9109322c44d417f9670eb3a0e47108802210096f62f725b4ad184f86df96e0898f1a2fd548d70d359e192e0de24b153ac20d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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