viacomcbs.com

- Viacom Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:9a:ea:6d:26:06:bb:8c:a9:31:d1:fd:e1:8e:86:6d was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Viacom Inc

Organization: Viacom Inc
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:9a:ea:6d:26:06:bb:8c:a9:31:d1:fd:e1:8e:86:6d
Serial Number (int): 18084332392903807953632213455627781741
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:c6:9b:06:c8:16:d8:aa:76:27:16:1b:78:24:dc:56:7f:4c:df:57
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 02:82:ed:86:c2:27:b7:bb:18:cf:c7:a1:7e:a3:eb:7d:fb:e0:34:a0
Fingerprint (sha256): 01:ce:29:d9:72:ad:a8:81:bd:a0:db:f7:bb:28:d8:9c:fb:5c:3e:f1:62:78:63:19:08:9e:e9:bd:da:c5:98:c3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate viacomcbs.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for viacomcbs.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

viacomcbs.com
ads-dev-dr.viacbsops.com
ads-dr.viacbsops.com
ads-staging-dr.viacbsops.com
ads-staging.viacbsops.com
ads.viacbsops.com
api.theupload-dev.viacomcbs.com
api.theupload-qa.viacomcbs.com
api.theupload-stg.viacomcbs.com
api.theupload.viacomcbs.com
auth.mtvnservices-q.mtvi.com
auth.mtvnservices-stg.mtvi.com
awsq.vimn.com
awsvncpservices.nick.com
clicks.vidcon.com
comcast.bet.plus
cox.bet.plus
curator.sho.com
dev-curator.sho.com
dev.aboutme.viacomcbs.com
dev.globaloverview.viacomcbs.com
dev.sportsgraphics.viacomcbs.com
epg.vimn.com
epgs.vimn.com
eyes.nickelodeon.tv
idp.nickplus.asia
images.nickplus.asia
imagesstaging.nickplus.asia
jira.cbsi.com
jira.cbslocal.com
legacy.nickanimation.com
media.nickplus.asia
mediastaging.nickplus.asia
nick101.nick-d.mtvi.com
nuestrosheroes.mitelefe.com
opentext-teamsiteuat.viacomcbs.com
opslink-euw1.sureview.paramount.com
opslink-use1.sureview.paramount.com
opslink-usw2.sureview.paramount.com
origin.qw.ts.mtvnservices.com
paramount.tech
productionhub.paramount.uk.vimn.com
productionhub.uk.paramount.com
props.viacomcbs.com
qas.sportsgraphics.viacomcbs.com
qas.sportstrack.viacomcbs.com
resources.nickplus.asia
resourcesstaging.nickplus.asia
sportsgraphics.viacomcbs.com
stg-idp.nickplus.asia
stg.sportsgraphics.viacomcbs.com
viacbs.tech
wp-avatar.southpark.cc.com
www.alonetogether.com
www.delusionsandsolutions.com
www.firsttimecomposers-d.mtvi.com
www.firsttimecomposers-q.mtvi.com
www.firsttimecomposers.com
www.firsttimedirectorshandbook-d.mtvi.com
www.firsttimedirectorshandbook-q.mtvi.com
www.firsttimeinitiatives-d.mtvi.com
www.firsttimeinitiatives-q.mtvi.com
www.firsttimescreenwriters-d.mtvi.com
www.firsttimescreenwriters-q.mtvi.com
www.keepparamount-q.mtvi.com
www.keepviacomcbs.com
www.lawmenbassreeves.com
www.mobituaries-d.mtvi.com
www.mobituaries-q.mtvi.com
www.newnownext.com
www.nick.tv
www.nickatnite.com
www.nickelodeon.es
www.nickelodeon.fr
www.nickelodeon.pt
www.nickelodeon.se
www.nickelodeonafrica.com
www.nickjr.co.uk
www.nickjr.it
www.nicktv.it
www.paramountnetwork.com.br
www.paramountnetwork.nl
www.paramountnetwork.pl
www.poptv.com
www.smithsonianchannel.co.uk
www.smithsonianchannellatam.com
www.vmaj.jp

Other certificates including the domain name viacomcbs.com

(limited to 100 certificates)
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
ir.viacomcbs.com
image.serviciokia.com.ec
cloud.email.viacomcbs.com
MTVI.com
image.serviciokia.com.ec
www.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
www.viacom.tech
www.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
stillsarchive.viacomcbs.com
image.serviciokia.com.ec
inview.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
stillsarchive.viacomcbs.com
xdam-nonprod.viacomcbs.com
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
mtvi.com
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
san-5-s11.tlsprovisioning.exacttarget.com
image.serviciokia.com.ec
creativeandstrategy.viacomcbs.com
paramount.com
image.serviciokia.com.ec
image.serviciokia.com.ec
halloweencontest.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
mtvi.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
stillsarchiveuat.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdsiportal.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
eai-prd.viacomcbs.com
creativelibrary.viacomcbs.com
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
mtvi.com
www.viacomcbs.com
www.viacom.tech
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
origin.prod-acquia.viacomcbs.com
www.viacomcbs.com
inview.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdi.paramount.com
www.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
mtvi.com
MTVI.com
devplus.phxdocstore.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec

Certificate

The complete raw certificate details for viacomcbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELs00sUNoY73cmube2cp8+DTGKply
kLCH/hYBdWfW/S4jQSDiBHfjGoiQZvAirURDkd7+VQQtNDG1+tpyBZk5Vg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18084332392903807953632213455627781741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'viacomcbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00042ecd34b1436863bddc9ae6ded9ca7cf834c62a997290b087fe16017567d6fd2e234120e20477e31a889066f022ad444391defe55042d3431b5fada7205993956
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbc69b06c816d8aa7627161b7824dc567f4cdf57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2277 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dev-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-dev.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-qa.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-stg.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-stg.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsq.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsvncpservices.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcast.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aboutme.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globaloverview.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epg.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epgs.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyes.nickelodeon.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nickanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nick101.nick-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuestrosheroes.mitelefe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentext-teamsiteuat.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opslink-euw1.sureview.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opslink-use1.sureview.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opslink-usw2.sureview.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.qw.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionhub.paramount.uk.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionhub.uk.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'props.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportstrack.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-avatar.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alonetogether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delusionsandsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepparamount-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawmenbassreeves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnownext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickatnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannellatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vmaj.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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