www.universalpictures.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:f7:e6:62:32:b5:cc:ad:96:bf:c1:1e:46:fb:07:27 was issued on by DigiCert Inc.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:f7:e6:62:32:b5:cc:ad:96:bf:c1:1e:46:fb:07:27
Serial Number (int): 11920994024600228318909425748924892967
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:bd:c9:8e:be:4b:5b:1f:ff:9d:c9:d4:ef:3f:5f:53:ab:16:fa:e5
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 0e:53:7c:a1:1e:5f:a3:a0:13:94:cb:4d:17:13:6e:2a:d3:47:e1:2c
Fingerprint (sha256): 65:34:ab:a9:77:d0:b2:9d:31:1a:64:a0:ba:b7:50:9c:88:dd:02:75:27:66:55:ad:12:bc:45:2f:96:14:49:d5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalpictures.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalpictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalpictures.com
universalpictures.com
www.mybigfatmoment.com
www.jaegeracademy.com
www.universalscreenings.com
www.conflagrationmovie.com
www.barbieparty.org
ultravioletuniversal.com
www.bttfmovie.com
jointhewinterswar.upqa.com
www.seattleindependentpress.net
www.muttcutts.com
www.jurassicworld.com
grinchmovie.com
www.universalanytime.com
www.grinchmovie.com
www.freetheminions.com
moviesuniversalpictures.upqa.com
bannerassets.universalstudios.com
www.magicmoviecard.com
www.monsterhighmask.com
www.eastereggwraps.com
www.vdayprintablecards.com
www.pumpkinprintables.com
stageapp.mypetmoji.com
www.johnnyenglishfilm.com
www.mypetmoji.com
johnnyenglishfilm.com
tablet.universalpictures.com
stage.jaegeracademy.com
movies.universalpictures.com
www.splitfilmtickets.co.uk
www.fiftyshadessweeps.com
newuniversalpictures.upqa.com
www.trollshairband.com
www.pitchperfectmovie.com
wizardingworldholllywood.upqa.com
www.ultravioletuniversal.com
universalanytime.com
staging.seattleindependentpress.net
staging.freetheminions.com
www.cantstopthefunk.com
prod.universalpictures.com
workingtitlefilms.com
jointhewinterswar.com
freetheminions.com
ouijaknowsall.com
splitfilmtickets.co.uk
seattleindependentpress.net
trollshairband.com
universalkids.com
monsterhighmask.com
www.jointhewinterswar.com
mypetmoji.com
www.universalkids.com
www.pitch2smash.com
www.halloweenhorrornights.com
www.ouijaknowsall.com
www.workingtitlefilms.com
halloweenhorrornights.com
www.wizardingworldhollywood.com
adminuniversalpictures.upqa.com
prodapp.mypetmoji.com
www.dreamworkstrollmate.com
www.upheoffer.com
www.jurassicworldsweeps.com
assets.conflagrationmovie.com
admin.universalpictures.com

Other certificates including the domain name universalpictures.com

(limited to 100 certificates)
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for www.universalpictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM2TCCC8GgAwIBAgIQCPfmYjK1zK2Wv8EeRvsHJzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODAzMjcwMDAwMDBaFw0xOTAzMTUxMjAwMDBaMIGAMQswCQYDVQQGEwJVUzET
MBEGA1UECBMKQ2FsaWZvcm5pYTEXMBUGA1UEBxMOVW5pdmVyc2FsIENpdHkxHzAd
BgNVBAoTFlVuaXZlcnNhbCBDaXR5IFN0dWRpb3MxIjAgBgNVBAMTGXd3dy51bml2
ZXJzYWxwaWN0dXJlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrJTunGzfJuR/0tQgWlwVHBeaH2BEQy/Xv9fwMTlkPwcULrVDpkgCmysO7gvBZ
Rc7I/6sYoK9qxKsKkLg+pTDa/Z+75MZeefD3gY7d434q86dm6WJ3/xgP65m+wCO+
IJvGd/cuHoghlEYrqHdRQpQiYu/e5R7FC1G13spFKx/CkggyQTY+Dtqu5+5tULkX
abSqfa16JVHPUWn+ga6IrFkfKiO8NLKAJZikMfnYPbtGiWN1QAD17u++JaXU1fun
Vqx79tawK73/Evmt2lBs8MhqYpDhDKPllMildYU4xyovqFTuc0+buykUOb8ZDAca
F849RH1qh0R0mFWK5ar7LmmHAgMBAAGjggluMIIJajAfBgNVHSMEGDAWgBSQWP+w
nHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUFL3Jjr5LWx//ncnU7z9fU6sW+uUw
ggbfBgNVHREEggbWMIIG0oIZd3d3LnVuaXZlcnNhbHBpY3R1cmVzLmNvbYIVdW5p
dmVyc2FscGljdHVyZXMuY29tghZ3d3cubXliaWdmYXRtb21lbnQuY29tghV3d3cu
amFlZ2VyYWNhZGVteS5jb22CG3d3dy51bml2ZXJzYWxzY3JlZW5pbmdzLmNvbYIa
d3d3LmNvbmZsYWdyYXRpb25tb3ZpZS5jb22CE3d3dy5iYXJiaWVwYXJ0eS5vcmeC
GHVsdHJhdmlvbGV0dW5pdmVyc2FsLmNvbYIRd3d3LmJ0dGZtb3ZpZS5jb22CGmpv
aW50aGV3aW50ZXJzd2FyLnVwcWEuY29tgh93d3cuc2VhdHRsZWluZGVwZW5kZW50
cHJlc3MubmV0ghF3d3cubXV0dGN1dHRzLmNvbYIVd3d3Lmp1cmFzc2ljd29ybGQu
Y29tgg9ncmluY2htb3ZpZS5jb22CGHd3dy51bml2ZXJzYWxhbnl0aW1lLmNvbYIT
d3d3LmdyaW5jaG1vdmllLmNvbYIWd3d3LmZyZWV0aGVtaW5pb25zLmNvbYIgbW92
aWVzdW5pdmVyc2FscGljdHVyZXMudXBxYS5jb22CIWJhbm5lcmFzc2V0cy51bml2
ZXJzYWxzdHVkaW9zLmNvbYIWd3d3Lm1hZ2ljbW92aWVjYXJkLmNvbYIXd3d3Lm1v
bnN0ZXJoaWdobWFzay5jb22CFnd3dy5lYXN0ZXJlZ2d3cmFwcy5jb22CGnd3dy52
ZGF5cHJpbnRhYmxlY2FyZHMuY29tghl3d3cucHVtcGtpbnByaW50YWJsZXMuY29t
ghZzdGFnZWFwcC5teXBldG1vamkuY29tghl3d3cuam9obm55ZW5nbGlzaGZpbG0u
Y29tghF3d3cubXlwZXRtb2ppLmNvbYIVam9obm55ZW5nbGlzaGZpbG0uY29tghx0
YWJsZXQudW5pdmVyc2FscGljdHVyZXMuY29tghdzdGFnZS5qYWVnZXJhY2FkZW15
LmNvbYIcbW92aWVzLnVuaXZlcnNhbHBpY3R1cmVzLmNvbYIad3d3LnNwbGl0Zmls
bXRpY2tldHMuY28udWuCGXd3dy5maWZ0eXNoYWRlc3N3ZWVwcy5jb22CHW5ld3Vu
aXZlcnNhbHBpY3R1cmVzLnVwcWEuY29tghZ3d3cudHJvbGxzaGFpcmJhbmQuY29t
ghl3d3cucGl0Y2hwZXJmZWN0bW92aWUuY29tgiF3aXphcmRpbmd3b3JsZGhvbGxs
eXdvb2QudXBxYS5jb22CHHd3dy51bHRyYXZpb2xldHVuaXZlcnNhbC5jb22CFHVu
aXZlcnNhbGFueXRpbWUuY29tgiNzdGFnaW5nLnNlYXR0bGVpbmRlcGVuZGVudHBy
ZXNzLm5ldIIac3RhZ2luZy5mcmVldGhlbWluaW9ucy5jb22CF3d3dy5jYW50c3Rv
cHRoZWZ1bmsuY29tghpwcm9kLnVuaXZlcnNhbHBpY3R1cmVzLmNvbYIVd29ya2lu
Z3RpdGxlZmlsbXMuY29tghVqb2ludGhld2ludGVyc3dhci5jb22CEmZyZWV0aGVt
aW5pb25zLmNvbYIRb3VpamFrbm93c2FsbC5jb22CFnNwbGl0ZmlsbXRpY2tldHMu
Y28udWuCG3NlYXR0bGVpbmRlcGVuZGVudHByZXNzLm5ldIISdHJvbGxzaGFpcmJh
bmQuY29tghF1bml2ZXJzYWxraWRzLmNvbYITbW9uc3RlcmhpZ2htYXNrLmNvbYIZ
d3d3LmpvaW50aGV3aW50ZXJzd2FyLmNvbYINbXlwZXRtb2ppLmNvbYIVd3d3LnVu
aXZlcnNhbGtpZHMuY29tghN3d3cucGl0Y2gyc21hc2guY29tgh13d3cuaGFsbG93
ZWVuaG9ycm9ybmlnaHRzLmNvbYIVd3d3Lm91aWpha25vd3NhbGwuY29tghl3d3cu
d29ya2luZ3RpdGxlZmlsbXMuY29tghloYWxsb3dlZW5ob3Jyb3JuaWdodHMuY29t
gh93d3cud2l6YXJkaW5nd29ybGRob2xseXdvb2QuY29tgh9hZG1pbnVuaXZlcnNh
bHBpY3R1cmVzLnVwcWEuY29tghVwcm9kYXBwLm15cGV0bW9qaS5jb22CG3d3dy5k
cmVhbXdvcmtzdHJvbGxtYXRlLmNvbYIRd3d3LnVwaGVvZmZlci5jb22CG3d3dy5q
dXJhc3NpY3dvcmxkc3dlZXBzLmNvbYIdYXNzZXRzLmNvbmZsYWdyYXRpb25tb3Zp
ZS5jb22CG2FkbWluLnVuaXZlcnNhbHBpY3R1cmVzLmNvbTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6Ax
oC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNy
bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcw
JgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUF
BzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIw
MTguY3J0MAkGA1UdEwQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC72d+8
H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWJlwKmwAAAEAwBHMEUCIFnB
LJV8B86FHPAp8e9aZzTp4POa4XmKGU++bH7gbnTiAiEA+Z4Ed06HFxPl+zBLxEJg
6KJKcMX8cgwtZLuvayKOQqwAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbII
mjfZEwAAAWJlwKo+AAAEAwBHMEUCIQCzm7ZWzV0tVyDTd9MG/drrzPCAtOMO60Oy
5hFqf+ukOAIgTv/q/BHyIop7u7i82sLfIVWPHxMz61vzzYsj6ZcuIMYwDQYJKoZI
hvcNAQELBQADggEBAKnqLJYUs+pN0JvBWG+qnmdYq7wt687jFaT+q1UPfn3/YP3e
1O9N5IUY6LVDYvEdJWO9e8EuUf3Z3SrxjIzgkY5yLq2vMnDYEXacYcl1W1pmPzrQ
SO6a6HVj/kFL+xDycKJBtvY6VTIXZZvR7VMYxcGySiqZKzCAYgW8fWx+Ujso6GTu
zc3t5i6NmAhJ9liE4LdHHMEoi7azTsf0FiSduskCk8bLkwxvaCtfTEWrjrq0ErGz
Vxpv6T4HOYoDd8o5sOZ3zP5ch23XTspnVeqpt9HD0EVljQZQO9UhzaOtYekvl8wo
RasMyAUale8sOgQghNjL1t7RJ34YUSgEsFOM3es=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyU7pxs3ybkf9LUIFpcF
RwXmh9gREMv17/X8DE5ZD8HFC61Q6ZIApsrDu4LwWUXOyP+rGKCvasSrCpC4PqUw
2v2fu+TGXnnw94GO3eN+KvOnZulid/8YD+uZvsAjviCbxnf3Lh6IIZRGK6h3UUKU
ImLv3uUexQtRtd7KRSsfwpIIMkE2Pg7arufubVC5F2m0qn2teiVRz1Fp/oGuiKxZ
HyojvDSygCWYpDH52D27RoljdUAA9e7vviWl1NX7p1ase/bWsCu9/xL5rdpQbPDI
amKQ4Qyj5ZTIpXWFOMcqL6hU7nNPm7spFDm/GQwHGhfOPUR9aodEdJhViuWq+y5p
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11920994024600228318909425748924892967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalpictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21605110434960018387259365345713029256334069621979375252586039390951344559463847371534332340648009825427366951389818055140957072029948540610587782140325471924050989453107753835886607291426796931242980321256230370333054419502277976345480866775282695597744292412772238023291448512723277222291592151817007232877978510320758336008547805692359897829362693972938607004274789685852735011298903440960882861993551384867182964094080002482206257023941742225883289811940420930280258630194402719873989554330640379149124374444085945302438838057024587697444103591400288570036055901766448999561652855867739762351062724519598704454023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14bdc98ebe4b5b1fff9dc9d4ef3f5f53ab16fae5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybigfatmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalscreenings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbieparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bttfmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muttcutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grinchmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerassets.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmoviecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastereggwraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdayprintablecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpkinprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stageapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnyenglishfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jaegeracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftyshadessweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitchperfectmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizardingworldholllywood.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultravioletuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantstopthefunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trollshairband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitch2smash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wizardingworldhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upheoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworldsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016265c0a9b00000040300473045022059c12c957c07ce851cf029f1ef5a6734e9e0f39ae1798a194fbe6c7ee06e74e2022100f99e04774e871713e5fb304bc44260e8a24a70c5fc720c2d64bbaf6b228e42ac0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016265c0aa3e0000040300473045022100b39bb656cd5d2d5720d377d306fddaebccf080b4e30eeb43b2e6116a7feba43802204effeafc11f2228a7bbbb8bcdac2df21558f1f1333eb5bf3cd8b23e9972e20c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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