*.cbs.com

- CBS Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 5c:ba:57:cb:8f:f1:97:ac:63:b6:28:58:3d:58:4e:1b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CBS Corporation

Organization: CBS Corporation
State / Province: New York
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 5c:ba:57:cb:8f:f1:97:ac:63:b6:28:58:3d:58:4e:1b
Serial Number (int): 123256523525400670121387675831496101403
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 67:85:1a:1b:80:03:4d:75:8b:f9:8c:7b:56:3b:93:d6:ed:16:86:58
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 85:5b:f1:1f:31:88:81:44:41:10:e0:04:bb:46:21:fe:7c:a7:43:44
Fingerprint (sha256): 00:3d:2e:7c:d4:bf:82:91:d0:aa:08:a2:6a:06:7d:fe:a3:8b:77:79:a5:32:1a:3e:8e:1f:d6:c4:90:c3:42:1b

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate *.cbs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cbs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cbs.com
cbs.com

Other certificates including the domain name cbs.com

(limited to 100 certificates)
dev-broker.mediapo.cbs.com
*.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
concur.cbs.com
box.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
viacomcbs-live.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
ny-asperafaspex.cwd.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
*.lb.cbs.com
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
airspace.cbsivideo.com
prospective.shared.global.fastly.net
*.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
adfs.cbs.com
audienceservices.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacomcbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
*.airspace-g.cbsivideo.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
cbsaavideo.com
shoogle.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
uccaas-expc.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
*.cbs.com
fluuid-dev.cbs.com
b3.shared.global.fastly.net
b3.shared.global.fastly.net
*.airspace-g.cbsivideo.com
www.viacomcbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacom.tech
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
ehs.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
*.cbs.com
www.cbs.com
cbsco-cucm01-bv1.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
uat-eai.cbs.com
prospective.shared.global.fastly.net

Certificate

The complete raw certificate details for *.cbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyypjwWHsuLmBeH//3ppT
FRD1XVxddzXIWke1YUZrYuipuZvHL8pbnqPOS6vXtoGbRaCnPpJ7E1QS36qJAmyx
2Hk7EGGnZvwO9PSdlsDuDyCkbw/zP8+cbhIBEoeRSSklxgj+dQZ3pdfAldZLs15n
8ptqXS8VkyUbdu0DZ7lHuQ2myF4dLUCzHvEzfzJuEH/6PSIG/+Ri86K8DGp7cvW5
VglolRCpBalCUW6add1pyDqY9eaqxJsG63uq3HwTNTnESuZp2F0i2TwdAAxP/AZp
te2EhCXC6ETfxRNGSJOvSqp+ssBQQtI5bWGJlk0WTBRFHZY12BfTT/n418/wo8oY
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123256523525400670121387675831496101403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBS Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25647279033226792203865550727990855242876043192738675366995637912454201973316684835290314744329102364636460885641770559789044480261054636369926789746944000433564934958774254711662616750769645505499785288456378976660042894575139819770651230261654668915999891404007175461235675886711436100938482338363698878580036132204814385460611858195988803309126259015750114652507616840541308788963777236186817295952707163395540904211431236927048742886963074655302287488672237545615236097806815209170934634802692148336920632713019491076235205104429451536565135527749791893171432399704941535426117323134223508478184175083163140888671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67851a1b80034d758bf98c7b563b93d6ed168658
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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