www.universalpictures.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:c7:b7:57:02:ac:99:91:15:f0:e5:a6:74:95:38:44 was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:c7:b7:57:02:ac:99:91:15:f0:e5:a6:74:95:38:44
Serial Number (int): 3695441641053499899617327946776524868
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c6:9d:61:92:2e:fa:2e:6e:d5:97:41:8f:a7:a7:b6:46:bc:d7:2a:08
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 31:6e:7d:5c:07:0c:3a:c6:9e:b0:77:33:a6:25:33:ab:4b:0b:97:c4
Fingerprint (sha256): 4b:24:7e:63:c8:53:52:55:8f:e2:50:75:b3:d7:5b:a0:c8:08:4a:20:e1:20:e5:04:a8:46:69:12:f0:bf:a1:27

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalpictures.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalpictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalpictures.com
universalpictures.com
www.dreamworkstrollmate.com
prod.universalpictures.com
faceyourfate.halloweenmovie.com
movies.universalpictures.com
www.jurassicworldsweeps.com
www.halloweenhorrornights.com
halloweenhorrornights.com
jointhewinterswar.upqa.com
www.hotelbelladonna.com
universalkids.com
www.workingtitlefilms.com
bannerassets.universalstudios.com
www.muttcutts.com
www.jointhewinterswar.com
moviesuniversalpictures.upqa.com
trollshairband.com
adminuniversalpictures.upqa.com
www.londonwelcomesyou.com
prod.halloweenhorrornights.com
hollywood.halloweenhorrornights.com
www.mortalengines.com
newuniversalpictures.upqa.com
www.jaegeracademy.com
www.barbieparty.org
johnnyenglishfilm.com
seattleindependentpress.net
staging.seattleindependentpress.net
monsterhighmask.com
staging.workingtitlefilms.com
www.cantstopthefunk.com
www.universalkids.com
www.conflagrationmovie.com
www.realmomsof.com
www.magicmoviecard.com
stage.workingtitlefilms.com
mypetmoji.com
prod.workingtitlefilms.com
workingtitlefilms.com
www.jurassicworld.com
realmomsof.com
www.mypetmoji.com
www.eastereggwraps.com
assets.conflagrationmovie.com
www.pitchperfectmovie.com
staging.freetheminions.com
www.bttfmovie.com
ultravioletuniversal.com
prodapp.mypetmoji.com
www.blumhousestruthordare.com
www.johnnyenglishfilm.com
grinchmovie.com
www.housewithaclock.com
freetheminions.com
www.pumpkinprintables.com
admin.universalpictures.com
www.ultravioletuniversal.com
tablet.universalpictures.com
www.upheoffer.com
stageapp.mypetmoji.com
www.breakinginmovie.com
stage.jaegeracademy.com
www.fiftyshadessweeps.com
www.monsterhighmask.com
staging.halloweenhorrornights.com
www.vdayprintablecards.com
wizardingworldholllywood.upqa.com
blumhousestruthordare.com
www.pitch2smash.com
www.ouijaknowsall.com
m.halloweenhorrornights.com
www.escapemichaelmyers.com
www.universalanytime.com
splitfilmtickets.co.uk
www.trollshairband.com
www.seattleindependentpress.net
www.skyscrapermovie.com
www.universalscreenings.com
www.splitfilmtickets.co.uk
universalanytime.com
www.freetheminions.com
jointhewinterswar.com
www.wizardingworldhollywood.com
ouijaknowsall.com
www.mybigfatmoment.com
www.grinchmovie.com
www.thefirstpurge.com

Other certificates including the domain name universalpictures.com

(limited to 100 certificates)
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for www.universalpictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvnHy4hLjRQcI8/66A6y
nO2swftibRdK8JDSf4zpPSP28WbtemTkiyyGR7IxkrkQFKACRuiG02DOv3m50E7W
Xesjle7MT321Rbrrrj6UTI3PsGpZ3uJSAs09fX6niwW2MCc7Vsa/gV1REsOkijfn
v0qqeLpRzxeVSAnSNQGUly/dOwYFSiUS8KiOlWReV0b4z+iS0pkedhrNtvrbKPpa
mxcCN7hH9yHRMNfHPlnXTsRKy7LHI3bBurxCIWTqe+xML33bwVx4mf8uWvGHHSQy
mkldcTStQRTM1y04+B/OU6sV6Wh3NZjgsLnTQLHpUHJ6ve6nnLqrrD63y6YzmlUo
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3695441641053499899617327946776524868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalpictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23098542834084101016497895494681269450833231069341364831803236864958355602500869539293239850899758601997229855676292537380041360163192882474582641181123659899531072638283192454919073517001430616682740529521111009731310447846746923536379706213925310909140232309328905315356178941466161784037982128630785401654688777193932064067938400886979788324070990786318245519524968121764562800496902281574532694228105716086555228260208015303498087984660493522763615479186397401291956338120652407997133609062124446302479697678851228977427570930133078089456424387640029647834447369835701378997733281656805444470424379613162098731043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c69d61922efa2e6ed597418fa7a7b646bcd72a08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceyourfate.halloweenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworldsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbelladonna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerassets.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muttcutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonwelcomesyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywood.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortalengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbieparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantstopthefunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmoviecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmomsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastereggwraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitchperfectmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bttfmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housewithaclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpkinprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upheoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stageapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakinginmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftyshadessweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdayprintablecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizardingworldholllywood.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumhousestruthordare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitch2smash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapemichaelmyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyscrapermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalscreenings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wizardingworldhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybigfatmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstpurge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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