www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:24:13:8b:50:b5:7f:1b:2a:2f:87:5b:7b:d8:37:0b was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:24:13:8b:50:b5:7f:1b:2a:2f:87:5b:7b:d8:37:0b
Serial Number (int): 10821143056661856243041599764670461707
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0f:35:d2:14:cf:de:cd:85:8a:71:82:e4:d6:d4:45:1d:a0:0a:65:c4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 07:9a:86:07:90:3b:6a:cd:57:97:fe:0c:6a:61:a9:24:b2:82:e7:7b
Fingerprint (sha256): 01:91:fa:9b:7a:3f:89:db:4e:a0:98:1e:74:a7:01:c4:6b:57:ed:ec:ef:12:b5:f0:13:8b:30:ac:62:63:8c:4c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xbox.mtvnservices-q.mtvi.com
www.viacomcbsamericas.com
www.viacom.com
www.vh1press.com
www.vh1.com
www.spiketv.nl
www.slimefest.it
www.paramountnetwork.hu
www.paramountnetwork.es
www.paramountnetwork.cz
www.paramountnetwork.com
www.paramountmovies.com
www.paramountcomedy.ru
www.paramount.com
www.pandemmyawards.com
www.nickpress.com
www.nickjr.tv
www.nickjr.nl
www.nickjr.es
www.nickjr.dk
www.nickjr.de
www.nickjr.com.pl
www.nickjr.com.br
www.nickjr.com.au
www.nickhelps-q.mtvi.com
www.nickelodeonparents.com
www.nickelodeonjunior.fr
www.nick.co.uk
www.mtvunderthethumb.com
www.mtvpress.com
www.mtventertainment-q.mtvi.com
www.mtventertainment-d.mtvi.com
www.mtvasia.com
www.mtv.nl
www.mtv.it
www.mtv.com.br
www.mtv.com.au
www.mtv.co.il
www.keepviacomcbs-q.mtvi.com
www.keepviacom.com
www.keepcbs-q.mtvi.com
www.isleofmtv.com
www.firsttimedirectors-q.mtvi.com
www.betcelebratesher.com
www.bellator.com
www.awesomenesstv.com
vsf.vimnservices.com
vip.viacom.tech-q.mtvi.com
videos.mtvnn.com
viacom.com
tveguest.vimn-q.mtvi.com
tveauth.vimn-q.mtvi.com
tve.mtvnservices.com
tve.mtvnservices-q.mtvi.com
testing.isleofmtv.vmn.io
testing.forums.southpark.vmn.io
testing.forums.southpark.de.vmn.io
testing.bellator.vmn.io
staging.api.mtv.com
solutions.viacom-q.mtvi.com
secure.iphone.mtvn.com
search.mtvnservices-q.mtvi.com
relaunch-solutions.viacom-q.mtvi.com
recruitment.feedback.viacom.tech
productionhub.viacomcbs.uk.vimn.com
player.mtvnservices.com
player.mtvnservices-q.mtvi.com
player.mtvnservices-d.mtvi.com
origin.vz.tsq.mtvnservices.com
origin.vz.ts.mtvnservices.com
origin.sp.tsq.mtvnservices.com
origin.sp.ts.mtvnservices.com
origin.l3.tsq.mtvnservices.com
origin.l3.ts.mtvnservices.com
origin.fs.tsq.mtvnservices.com
origin.fs.ts.mtvnservices.com
mobilefiles.nick.com
media.mtvnservices-q.mtvi.com
media.mtvnservices-d.mtvi.com
media.mtvi.com
media-utils-live.mtvnservices.com
media-utils-live.mtvnservices-q.mtvi.com
la.nickjr.tv
keysvc-uat.mtvnservices.com
intl.esperanto.mtvi.com
files.spike.com
files.cc.com
feeds.mtvnservices-q.mtvi.com
dlvrsvc-uat.mtvnservices.com
detektive.mtvnservices.com
dashboard.api.noggin-q.mtvi.com
auth.id.viacom.com
api.stage.bet.com
api.spike.com
api.qa.bet.com
api.playplex.viacom.com
api.mtvnn.com
api.cc.com
advertising.viacomcbs.digital

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ACSAEBAmTg026qCvsSp
q83N+bhMqcoXDv8fnxnzTNxx5CtnmA7V3XpZTWhwOL+ZItp5DRx63wqGqEI+b7jJ
y4xXawoNVi68VfbBzCN9bNMvm2R3oASJ304BPNDEsWdjBhqCPiAaLFwpasPY1Z65
xARN9T/mOB2eTPUSYSycm/g7Yn5js2TyEwO/f4QnlzOLKTikhSIOdUZ4o2Fz2ude
/TVZpVhx1RDAuPcWN4bJr7nMSXNfjkCrZIC068AlfHxfiBQh8+5uGPt55NSE1kKY
FCoOG+VKYMBdJnlz8kbQsNpuRVK3kR1oKsvpWftyK+YrOrpL2v+Car7Zxd6GHiLf
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10821143056661856243041599764670461707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30297474425317977785896398590026047820952833026333055877478352004078764161333208804997788510795682745954653774549586371291065468582256966175478501500174838433438698733537392206184642776785157221151152734499549892573137545254126789154156708585143785126205166764230257174542495259811813595465102431060265960430101585385188109246249365334781989057932911038414928955036995781706690513009120338770565385197128257925327342033252264209935711634305896484027398837646929897408206159872664124644965890681050529669716415352361320244001428292982356297591205476920833688439437271207401725619839484412284847613796380156675716472773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f35d214cfdecd858a7182e4d6d4451da00a65c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbsamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiketv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slimefest.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountcomedy.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandemmyawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickhelps-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonjunior.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isleofmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectors-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betcelebratesher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsf.vimnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.isleofmtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iphone.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch-solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionhub.viacomcbs.uk.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.esperanto.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.api.noggin-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.viacomcbs.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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