www.universalpictures.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:4f:7e:10:7c:d4:77:91:c5:c5:6f:03:cf:a9:a0:36 was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:7e:10:7c:d4:77:91:c5:c5:6f:03:cf:a9:a0:36
Serial Number (int): 5729660324857573355217317042114371638
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e5:60:a0:16:a4:15:ae:28:8f:bb:7b:96:34:92:d6:ef:d0:ad:5a:25
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): e8:88:15:93:ba:11:1e:94:44:09:39:3b:1f:1c:62:7c:80:90:bb:76
Fingerprint (sha256): 49:a9:92:d0:9e:09:58:f2:fa:d2:d4:61:ae:3f:6f:8a:cc:2d:67:18:92:61:66:bc:80:ab:7c:00:e9:52:d0:8d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalpictures.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalpictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalpictures.com
universalpictures.com
www.magicmoviecard.com
ultravioletuniversal.com
www.dreamworkstrollmate.com
www.eastereggwraps.com
freetheminions.com
www.muttcutts.com
wizardingworldholllywood.upqa.com
halloweenhorrornights.com
www.fiftyshadessweeps.com
www.mybigfatmoment.com
adminuniversalpictures.upqa.com
movies.universalpictures.com
www.ultravioletuniversal.com
www.pumpkinprintables.com
assets.conflagrationmovie.com
www.universalkids.com
www.jurassicworld.com
www.escapemichaelmyers.com
www.splitfilmtickets.co.uk
prod.halloweenhorrornights.com
admin.universalpictures.com
www.cantstopthefunk.com
prodapp.mypetmoji.com
staging.seattleindependentpress.net
www.housewithaclock.com
www.blumhousestruthordare.com
www.johnnyenglishfilm.com
workingtitlefilms.com
www.mypetmoji.com
bannerassets.universalstudios.com
m.halloweenhorrornights.com
ouijaknowsall.com
www.universalscreenings.com
mypetmoji.com
monsterhighmask.com
tablet.universalpictures.com
moviesuniversalpictures.upqa.com
www.jaegeracademy.com
www.monsterhighmask.com
www.pitchperfectmovie.com
staging.workingtitlefilms.com
www.mortalengines.com
www.hotelbelladonna.com
www.halloweenhorrornights.com
hollywood.halloweenhorrornights.com
staging.freetheminions.com
prod.universalpictures.com
www.freetheminions.com
www.vdayprintablecards.com
jointhewinterswar.com
staging.halloweenhorrornights.com
jointhewinterswar.upqa.com
trollshairband.com
www.ouijaknowsall.com
www.conflagrationmovie.com
www.bttfmovie.com
universalkids.com
www.pitch2smash.com
www.upheoffer.com
splitfilmtickets.co.uk
www.seattleindependentpress.net
blumhousestruthordare.com
www.workingtitlefilms.com
www.universalanytime.com
www.grinchmovie.com
realmomsof.com
grinchmovie.com
www.thefirstpurge.com
faceyourfate.halloweenmovie.com
www.jurassicworldsweeps.com
johnnyenglishfilm.com
prod.workingtitlefilms.com
www.barbieparty.org
newuniversalpictures.upqa.com
www.trollshairband.com
www.realmomsof.com
www.wizardingworldhollywood.com
stage.workingtitlefilms.com
www.breakinginmovie.com
universalanytime.com
www.jointhewinterswar.com
stage.jaegeracademy.com
www.skyscrapermovie.com
stageapp.mypetmoji.com
seattleindependentpress.net

Other certificates including the domain name universalpictures.com

(limited to 100 certificates)
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for www.universalpictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO5DCCDcygAwIBAgIQBE9+EHzUd5HFxW8Dz6mgNjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODEwMDEwMDAwMDBaFw0xOTAzMTUxMjAwMDBaMIGAMQswCQYDVQQGEwJVUzET
MBEGA1UECBMKQ2FsaWZvcm5pYTEXMBUGA1UEBxMOVW5pdmVyc2FsIENpdHkxHzAd
BgNVBAoTFlVuaXZlcnNhbCBDaXR5IFN0dWRpb3MxIjAgBgNVBAMTGXd3dy51bml2
ZXJzYWxwaWN0dXJlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCa4cVVzrCd8XReXFWWDPoQFwLJj5/BYwiR/l80DDDhTbQVoYzkawoBYw8MoW4U
y6UYeKnHnV4Dg/6Bc6ozNnKyEOoYMyNwVuo/ixlydOfkvMN0VZleulZnlLcZSbAQ
supxot5Xohzq2q1pWfVbxrFImQw0Hndrd69byPyTm8S6GFtyUHvzQAWx8uDyAC2F
4oJ4pKFXq5tPI1q9eIPXmnAIqNzPSalmS0zJPWna+gHI4E4Mxr5QRsYdd13GskB+
KJh2biv3sIlX80enB5DNY4BWh8fVQx9EzznzE4ACU7Rpr8KWQqX3I9BH2yqnOWy1
TZvohkJWBErKzsMoCC050q85AgMBAAGjggt5MIILdTAfBgNVHSMEGDAWgBSQWP+w
nHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU5WCgFqQVriiPu3uWNJLW79CtWiUw
ggjpBgNVHREEggjgMIII3IIZd3d3LnVuaXZlcnNhbHBpY3R1cmVzLmNvbYIVdW5p
dmVyc2FscGljdHVyZXMuY29tghZ3d3cubWFnaWNtb3ZpZWNhcmQuY29tghh1bHRy
YXZpb2xldHVuaXZlcnNhbC5jb22CG3d3dy5kcmVhbXdvcmtzdHJvbGxtYXRlLmNv
bYIWd3d3LmVhc3RlcmVnZ3dyYXBzLmNvbYISZnJlZXRoZW1pbmlvbnMuY29tghF3
d3cubXV0dGN1dHRzLmNvbYIhd2l6YXJkaW5nd29ybGRob2xsbHl3b29kLnVwcWEu
Y29tghloYWxsb3dlZW5ob3Jyb3JuaWdodHMuY29tghl3d3cuZmlmdHlzaGFkZXNz
d2VlcHMuY29tghZ3d3cubXliaWdmYXRtb21lbnQuY29tgh9hZG1pbnVuaXZlcnNh
bHBpY3R1cmVzLnVwcWEuY29tghxtb3ZpZXMudW5pdmVyc2FscGljdHVyZXMuY29t
ghx3d3cudWx0cmF2aW9sZXR1bml2ZXJzYWwuY29tghl3d3cucHVtcGtpbnByaW50
YWJsZXMuY29tgh1hc3NldHMuY29uZmxhZ3JhdGlvbm1vdmllLmNvbYIVd3d3LnVu
aXZlcnNhbGtpZHMuY29tghV3d3cuanVyYXNzaWN3b3JsZC5jb22CGnd3dy5lc2Nh
cGVtaWNoYWVsbXllcnMuY29tghp3d3cuc3BsaXRmaWxtdGlja2V0cy5jby51a4Ie
cHJvZC5oYWxsb3dlZW5ob3Jyb3JuaWdodHMuY29tghthZG1pbi51bml2ZXJzYWxw
aWN0dXJlcy5jb22CF3d3dy5jYW50c3RvcHRoZWZ1bmsuY29tghVwcm9kYXBwLm15
cGV0bW9qaS5jb22CI3N0YWdpbmcuc2VhdHRsZWluZGVwZW5kZW50cHJlc3MubmV0
ghd3d3cuaG91c2V3aXRoYWNsb2NrLmNvbYIdd3d3LmJsdW1ob3VzZXN0cnV0aG9y
ZGFyZS5jb22CGXd3dy5qb2hubnllbmdsaXNoZmlsbS5jb22CFXdvcmtpbmd0aXRs
ZWZpbG1zLmNvbYIRd3d3Lm15cGV0bW9qaS5jb22CIWJhbm5lcmFzc2V0cy51bml2
ZXJzYWxzdHVkaW9zLmNvbYIbbS5oYWxsb3dlZW5ob3Jyb3JuaWdodHMuY29tghFv
dWlqYWtub3dzYWxsLmNvbYIbd3d3LnVuaXZlcnNhbHNjcmVlbmluZ3MuY29tgg1t
eXBldG1vamkuY29tghNtb25zdGVyaGlnaG1hc2suY29tghx0YWJsZXQudW5pdmVy
c2FscGljdHVyZXMuY29tgiBtb3ZpZXN1bml2ZXJzYWxwaWN0dXJlcy51cHFhLmNv
bYIVd3d3LmphZWdlcmFjYWRlbXkuY29tghd3d3cubW9uc3RlcmhpZ2htYXNrLmNv
bYIZd3d3LnBpdGNocGVyZmVjdG1vdmllLmNvbYIdc3RhZ2luZy53b3JraW5ndGl0
bGVmaWxtcy5jb22CFXd3dy5tb3J0YWxlbmdpbmVzLmNvbYIXd3d3LmhvdGVsYmVs
bGFkb25uYS5jb22CHXd3dy5oYWxsb3dlZW5ob3Jyb3JuaWdodHMuY29tgiNob2xs
eXdvb2QuaGFsbG93ZWVuaG9ycm9ybmlnaHRzLmNvbYIac3RhZ2luZy5mcmVldGhl
bWluaW9ucy5jb22CGnByb2QudW5pdmVyc2FscGljdHVyZXMuY29tghZ3d3cuZnJl
ZXRoZW1pbmlvbnMuY29tghp3d3cudmRheXByaW50YWJsZWNhcmRzLmNvbYIVam9p
bnRoZXdpbnRlcnN3YXIuY29tgiFzdGFnaW5nLmhhbGxvd2VlbmhvcnJvcm5pZ2h0
cy5jb22CGmpvaW50aGV3aW50ZXJzd2FyLnVwcWEuY29tghJ0cm9sbHNoYWlyYmFu
ZC5jb22CFXd3dy5vdWlqYWtub3dzYWxsLmNvbYIad3d3LmNvbmZsYWdyYXRpb25t
b3ZpZS5jb22CEXd3dy5idHRmbW92aWUuY29tghF1bml2ZXJzYWxraWRzLmNvbYIT
d3d3LnBpdGNoMnNtYXNoLmNvbYIRd3d3LnVwaGVvZmZlci5jb22CFnNwbGl0Zmls
bXRpY2tldHMuY28udWuCH3d3dy5zZWF0dGxlaW5kZXBlbmRlbnRwcmVzcy5uZXSC
GWJsdW1ob3VzZXN0cnV0aG9yZGFyZS5jb22CGXd3dy53b3JraW5ndGl0bGVmaWxt
cy5jb22CGHd3dy51bml2ZXJzYWxhbnl0aW1lLmNvbYITd3d3LmdyaW5jaG1vdmll
LmNvbYIOcmVhbG1vbXNvZi5jb22CD2dyaW5jaG1vdmllLmNvbYIVd3d3LnRoZWZp
cnN0cHVyZ2UuY29tgh9mYWNleW91cmZhdGUuaGFsbG93ZWVubW92aWUuY29tght3
d3cuanVyYXNzaWN3b3JsZHN3ZWVwcy5jb22CFWpvaG5ueWVuZ2xpc2hmaWxtLmNv
bYIacHJvZC53b3JraW5ndGl0bGVmaWxtcy5jb22CE3d3dy5iYXJiaWVwYXJ0eS5v
cmeCHW5ld3VuaXZlcnNhbHBpY3R1cmVzLnVwcWEuY29tghZ3d3cudHJvbGxzaGFp
cmJhbmQuY29tghJ3d3cucmVhbG1vbXNvZi5jb22CH3d3dy53aXphcmRpbmd3b3Js
ZGhvbGx5d29vZC5jb22CG3N0YWdlLndvcmtpbmd0aXRsZWZpbG1zLmNvbYIXd3d3
LmJyZWFraW5naW5tb3ZpZS5jb22CFHVuaXZlcnNhbGFueXRpbWUuY29tghl3d3cu
am9pbnRoZXdpbnRlcnN3YXIuY29tghdzdGFnZS5qYWVnZXJhY2FkZW15LmNvbYIX
d3d3LnNreXNjcmFwZXJtb3ZpZS5jb22CFnN0YWdlYXBwLm15cGV0bW9qaS5jb22C
G3NlYXR0bGVpbmRlcGVuZGVudHByZXNzLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0
dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYB
BQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFo
dHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0
MAkGA1UdEwQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgC72d+8H4pxtZOU
I5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWYwT2tzAAAEAwBHMEUCIQDkOSS/K6Rk
wkGKY+ggHUOU56WaGI0v3ubIogsMjMJ6VgIgPlSmqnmsR8lOZAD4NQGpA1XCYfli
wU7GlfHmAYrecDsAdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAA
AWYwT2xHAAAEAwBIMEYCIQDtvewbfr7cc7zkn7D42zn7cTRBPlkvkSBrb2S5TPCm
fQIhAPZWtxl6o9yZi+05OcH85+WXkSQd7qie9yXSl7BEfq65MA0GCSqGSIb3DQEB
CwUAA4IBAQBQJOQXMHwIcz9jmK27kxFYPGswl4HMGU1q/HXvHMcFCJ/7/zBK9LY4
Uv/jGs+jFSBMgCcq7fPkZQB6wWZG6IdArNseZGjg2SgYUK1DzXZ629alNcPrSGvf
U70QExk/WHjlSRZwzJ4MI96gji+CAC5pOrR/OMmk39kLar+Saytva90RMaeQVnGR
uCyHl4xZHAWGF8hyphrJMSb76AjL9hR5xAafs16KFlXYU/jzH8pHF/1AV3Zu0yxq
dfyzTXToFDs7f4dLUagZ8vxZRcc+qgnoYpQ+t5fXms2cKHXPovFnclMlwxHlDrZy
Txq6HGbkA9osy9eCtzRj4J3AWWM6gAxR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuHFVc6wnfF0XlxVlgz6
EBcCyY+fwWMIkf5fNAww4U20FaGM5GsKAWMPDKFuFMulGHipx51eA4P+gXOqMzZy
shDqGDMjcFbqP4sZcnTn5LzDdFWZXrpWZ5S3GUmwELLqcaLeV6Ic6tqtaVn1W8ax
SJkMNB53a3evW8j8k5vEuhhbclB780AFsfLg8gAtheKCeKShV6ubTyNavXiD15pw
CKjcz0mpZktMyT1p2voByOBODMa+UEbGHXddxrJAfiiYdm4r97CJV/NHpweQzWOA
VofH1UMfRM858xOAAlO0aa/ClkKl9yPQR9sqpzlstU2b6IZCVgRKys7DKAgtOdKv
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5729660324857573355217317042114371638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalpictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19552030715647671020597359887496542356590830778955504315651074021797571552916059516764883166105845747721128137532032291928551865443179810085533534077266067731666093282559785746163005220511199445968731892610863470376742116267619707391579246946043814105741308435357930113546245070236139459610456625450792644513097922792890335576154873650605369132730769373407779877630597077955458594778684565586943726970828430835453425221269843889817479736489432979732230904740803381040612881208252981414839882077496262915392705271954936564011619878349805914664809850648751040457498211355879448627899536875205591470568332203857162710841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e560a016a415ae288fbb7b963492d6efd0ad5a25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmoviecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastereggwraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muttcutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizardingworldholllywood.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftyshadessweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybigfatmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpkinprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapemichaelmyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantstopthefunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housewithaclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerassets.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalscreenings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitchperfectmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortalengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbelladonna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywood.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdayprintablecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bttfmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitch2smash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upheoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstpurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceyourfate.halloweenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworldsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbieparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wizardingworldhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakinginmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyscrapermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stageapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleindependentpress.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000166304f6b730000040300473045022100e43924bf2ba464c2418a63e8201d4394e7a59a188d2fdee6c8a20b0c8cc27a5602203e54a6aa79ac47c94e6400f83501a90355c261f962c14ec695f1e6018ade703b0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166304f6c470000040300483046022100edbdec1b7ebedc73bce49fb0f8db39fb7134413e592f91206b6f64b94cf0a67d022100f656b7197aa3dc998bed3939c1fce7e59791241deea89ef725d297b0447eaeb9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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