staging.gatewayticketing.hosting

- Gateway Ticketing Systems Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:11:fd:7d:22:84:f1:61:5a:59:d5:0a:e0:1e:f2:f1 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Gateway Ticketing Systems Inc.

Organization: Gateway Ticketing Systems Inc.
State / Province: Pennsylvania
Locality: Gilbertsville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:11:fd:7d:22:84:f1:61:5a:59:d5:0a:e0:1e:f2:f1
Serial Number (int): 20031830347202076747183461290425119473
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3e:79:44:7c:5d:a0:ce:48:46:49:86:99:a0:17:98:0f:8b:f6:ec:20
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a7:bd:90:fe:0e:e0:26:a0:12:84:e1:7a:48:4b:3e:fe:4c:b4:6f:b6
Fingerprint (sha256): 4d:9b:66:e9:b9:f9:50:88:73:51:68:be:07:43:62:6c:56:49:72:cf:ac:2c:c1:53:60:79:eb:fd:4a:25:af:42

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate staging.gatewayticketing.hosting

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.gatewayticketing.hosting

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gatewayticketing.hosting
staging.portaventuraworld.com
staging.nwtrek.org
staging.oaklandzoo.org
staging.odyseaaquarium.com
staging.oldsavannahtours.com
staging.pdza.org
staging.phoenixzoo.org
staging.pier81nyc.com
staging.rhfleet.org
staging.naplesgarden.org
staging.royalgorgebridge.com
staging.sandiegozoo.org
staging.schlitterbahn.com
staging.scmuseum.org
staging.shorelinesightseeing.com
staging.sparkscience.ca
staging.ssgreatbritain.org
staging.thebeastnyc.com
staging.nmajh.org
staging.mtcubacenter.org
staging.tidalcovemiami.com
staging.louisianastatemuseum.org
staging.storybookland.com
staging.kennedyspacecenter.com
staging.kentuckykingdom.com
staging.kew.org
staging.knoebels.com
staging.lazoo.org
staging.legoland.dk
staging.livingdesert.org
staging.lowryparkzoo.com
staging.mshersheyfoundation.org
staging.mackinacferry.com
staging.malik-nuuk.gl
staging.mcm.org
staging.mercurycruises.com
staging.midway.org
staging.mobot.org
staging.monticello.org
staging.moodygardens.com
wwtemp.wildwadi.com
staging.gatewayticketing.hosting
staging.titanicattraction.com
tickets-test.statuecruises.com
staging-tickets.walibi.com
stgtickets.hudsonyardsnewyork.com
storestaging.detroitzoo.org
testing.themobmuseum.org
thedalistaging.gatewayticketing.hosting
thehouseontherockstaging.gatewayticketing.hosting
ticketing-staging.wcs.org
train.esbnyc.com
stagingtickets.seabreeze.com
tnmuseumstaging.gatewayticketing.hosting
vegasexperiencestaging.gatewayticketing.hosting
visitinfinitystaging.gatewayticketing.hosting
visitstaging.911memorial.org
wavesresortccstaging.gatewayticketing.hosting
wdfmuseumstaging.gatewayticketing.hosting
whistlepunksstaging.gatewayticketing.hosting
wildislandstaging.gatewayticketing.hosting
stagingtickets.spacecenter.org
staging-tickets-aqualibi.walibi.com
stagingtickets.patriotspoint.org
stagingnbc.naturalbridgecaverns.com
staging.visitsealife.com
staging.walibi.nl
staging.wbstudiotour.com
staging.yorkminster.org
staging.zooatlanta.org
staging.thelivingplanet.com
stagingtickets.atlantisthepalm.com
stagingtickets.fi.edu
stagingreseller.hersheypa.com
tickets-staging.historic-scotland.gov.uk
staging.liverpoolmuseumstickets.org.uk
staging.tickets.hersheypa.com
staging.themeparktickets.tsogosun.com
staging-tickets.nhm.ac.uk
staging.kidzania-london.co.uk
wave2go.test.wsdot.com
staging.thackraymedicalmuseum.co.uk
staging.sundownadventureland.co.uk
staging.wbstudiotour.co.uk
staging.stpauls.co.uk
tktstaging.test.cntower.ca
staging.windsorgreatpark.co.uk
staging.partyman.co.uk
tickets.staging.creationmuseum.org
tickets.staging.arkencounter.com
staging.ullswater-steamers.co.uk
staging.ravenglass-railway.co.uk
staging.zoossa.com.au
test.ticket.ox.ac.uk

Other certificates including the domain name gatewayticketing.hosting

(limited to 100 certificates)
incapsula.com
staging.gatewayticketing.hosting
incapsula.com
staging.gatewayticketing.hosting
incapsula.com
staging.gatewayticketing.hosting
teststore.gatewayticketing.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
staging.gatewayticketing.hosting
incapsula.com
incapsula.com
incapsula.com
teststore.gatewayticketing.com
incapsula.com
incapsula.com
incapsula.com
proddevelopment.gatewayticketing.hosting
incapsula.com
incapsula.com
reseller.nycl.com.gatewayticketing.hosting
incapsula.com
sites.gatewayticketing.hosting
staging.royalgorgebridge.com.gatewayticketing.hosting
staging2.gatewayticketing.hosting
incapsula.com
teststore.gatewayticketing.com
sites.gatewayticketing.hosting
incapsula.com
staging.gatewayticketing.hosting
buytickets.atlantahistorycenter.com.gatewayticketing.hosting
sites2.gatewayticketing.hosting
incapsula.com
incapsula.com
incapsula.com
incapsula.com
sites.gatewayticketing.hosting
staging.gatewayticketing.hosting
ironbridgestaging.gatewayticketing.hosting
incapsula.com
incapsula.com
incapsula.com
uks.reporting.gatewayticketing.hosting
sites.gatewayticketing.hosting
incapsula.com
incapsula.com
incapsula.com
staging2.gatewayticketing.hosting
incapsula.com
staging.gatewayticketing.hosting
sites.gatewayticketing.hosting
incapsula.com
store.zooknoxville.org.gatewayticketing.hosting
secure4.gatewayticketing.com.gatewayticketing.hosting
sites.gatewayticketing.hosting
staging.gatewayticketing.hosting
incapsula.com
incapsula.com
testing2.gatewayticketing.hosting
incapsula.com
staging2.gatewayticketing.hosting
incapsula.com
sites2.gatewayticketing.hosting
staging2.gatewayticketing.hosting
incapsula.com
incapsula.com
staging.gatewayticketing.hosting
staging.titanicattraction.com.gatewayticketing.hosting
tuffnut.gatewayticketing.hosting
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
staging.gatewayticketing.hosting
incapsula.com
sites.gatewayticketing.hosting
incapsula.com
incapsula.com
incapsula.com
sites2.gatewayticketing.hosting
incapsula.com
incapsula.com
incapsula.com
incapsula.com
simpsons4dresellerstaging.gatewayticketing.hosting
incapsula.com
tickets.butchartgardens.com.gatewayticketing.hosting
incapsula.com
incapsula.com
designmuseumstaging.gatewayticketing.hosting
sites2.gatewayticketing.hosting
incapsula.com
incapsula.com
incapsula.com

Certificate

The complete raw certificate details for staging.gatewayticketing.hosting in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv80C6mb1mT2GGH8CNg1w
MNxFDaGDyqHd2gr88WalPQohNPw85D+Os+L7OVh0vb/XoSjTeTJLEjCyn5NtPUME
mdl1HRvHNWq81YiQ+msJ5O0ydkGT8rMwsXPP+4Kz+io3sr5zG7GFVxbitUt1Kv4J
vy6cdnBeLCAKmsLxGlOzMCVQ5vDegu2O8bHlzodENYeUWAr6kvmxQcABQMWP/EMy
i6gWTgfQ4vKpfrYCmo91LxZ7CP28lZtXgWM0zzEvs+scBEzHy1jhX8UegwQHovUQ
yMR9FYY1PgouNx5KUwgYaVucr/uLYLtcyPjz/Tf0og/vC6QgCpGCM/z6tXIksfXQ
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20031830347202076747183461290425119473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gilbertsville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gateway Ticketing Systems Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.gatewayticketing.hosting'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24212611132386431398266560699695974145967910942988676345298105125206712106535912133107303264782160519127396062854287438875307071932058657047281223632139223095289207296346432933814522944222270429965840588141312975629047460418455875228308925212505498725426393716778762170151127899998779212440107207240927479379292308552272500334328329606976569941664026507873172101977533565849542643572110213597040364266112528310847427765639484877715330561703910873401510163070143462415944101180260628130818387927530860059832691226685142981888808661502861146273160453870723818179717426284746070963740562311808378501554580960761513103381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e79447c5da0ce4846498699a017980f8bf6ec20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2789 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.portaventuraworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nwtrek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.oaklandzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.odyseaaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.oldsavannahtours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pdza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.phoenixzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pier81nyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.rhfleet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.naplesgarden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.royalgorgebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.schlitterbahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.scmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.shorelinesightseeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sparkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ssgreatbritain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.thebeastnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nmajh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mtcubacenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tidalcovemiami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.louisianastatemuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.storybookland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.kennedyspacecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.kentuckykingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.kew.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.knoebels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lazoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.legoland.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.livingdesert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lowryparkzoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mshersheyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mackinacferry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.malik-nuuk.gl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mcm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mercurycruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.midway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mobot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.monticello.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.moodygardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwtemp.wildwadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.titanicattraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-test.statuecruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-tickets.walibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgtickets.hudsonyardsnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storestaging.detroitzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.themobmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedalistaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehouseontherockstaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing-staging.wcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.esbnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingtickets.seabreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnmuseumstaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegasexperiencestaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitinfinitystaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitstaging.911memorial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavesresortccstaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdfmuseumstaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whistlepunksstaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildislandstaging.gatewayticketing.hosting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingtickets.spacecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-tickets-aqualibi.walibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingtickets.patriotspoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingnbc.naturalbridgecaverns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.visitsealife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.walibi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wbstudiotour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.yorkminster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.zooatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.thelivingplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingtickets.atlantisthepalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingtickets.fi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingreseller.hersheypa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-staging.historic-scotland.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.liverpoolmuseumstickets.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tickets.hersheypa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.themeparktickets.tsogosun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-tickets.nhm.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.kidzania-london.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wave2go.test.wsdot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.thackraymedicalmuseum.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sundownadventureland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wbstudiotour.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.stpauls.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tktstaging.test.cntower.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.windsorgreatpark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.partyman.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.staging.creationmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.staging.arkencounter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ullswater-steamers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ravenglass-railway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.zoossa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ticket.ox.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001720f904dda000004030046304402201500d3b3b2021545c6fe73fa1f144aa3dd1cc5aa51fa9d85144b9ce78d438d720220656248b87afca9b9f4cd95439917c0e45efaa028290e746ed596697078a81f910076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001720f904ddf0000040300473045022100a8c2be5c75ceb7394b4a807817efbdf883b47a7c8296ba37af24c6bcec46b1ef022061e2cb534dcf2b4b66b86d180a46a6b532f7e9d97b100fe87f4af809b6bdce82
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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