paramount.com

Issued by R3

About this certificate

This digital certificate with serial number 03:68:0d:5d:db:c1:a0:0e:8a:a1:b0:7a:cf:43:f9:56:09:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paramount.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:0d:5d:db:c1:a0:0e:8a:a1:b0:7a:cf:43:f9:56:09:fb
Serial Number (int): 296743991259799661531550807460517531486715
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:00:e7:2d:48:53:98:9c:94:b6:fd:05:42:62:4e:19:b8:3c:43:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:bc:42:2c:fb:51:7a:ed:27:02:c7:03:f2:73:e8:28:d6:c9:76:81
Fingerprint (sha256): 06:4e:3c:3d:99:d4:12:8f:63:c3:79:61:91:78:01:3a:c9:35:57:01:49:c9:dd:c8:7e:c4:44:e6:35:ff:15:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate paramount.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paramount.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paramount.com

Other certificates including the domain name paramount.com

(limited to 100 certificates)
www.viacom.com
leapfrog-ssl-51.gcs-web.com
qa.5paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
www.viacom.com
viacomcbs.com
aribatraining.paramount.com
www.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
fioriqa.paramount.com
esmailrelay.paramount.com
paramount.com
mtvnservices.com
mftdev.paramount.com
sip.paramount.com
www.viacom.com
nxSDGq06.paramount.com
sfb-ae-west.viacom.com
www.viacom.com
mail.paramount.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
cdn.privacy.paramount.com
sapssoprd.paramount.com
epmdev.paramount.com
MTVI.com
prime.paramount.com
mtvnservices.com
asperaweb.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
safety.paramount.com
www.viacomcbs.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
scriptord.paramount.com
infdev.paramount.com
mtvnservices.com
meetings.paramount.com
careers.paramount.com
mtvnservices.com
cfc.paramount.com
www.viacom.com
phe-schedule.paramount.com
screeners.paramount.com
www.viacom.com
www.viacomcbs.com
www.viacom.com
nsg.paramount.com
salesapp.paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
achievements.ets.org
www.viacom.com
sfb-webext-ams.viacom.com
achievements.ets.org
www.viacom.com
origin.paramount.com
paramount.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
achievements.ets.org
scriptord.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
san-8-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
aspera.paramount.com
achievements.ets.org
viacomcbs.com
support.paramount.com
www.viacom.com
www.viacom.com
achievements.ets.org
www.viacom.com
leapfrog-ssl-51.gcs-web.com
insights.paramount.com
sfb-webext-east.viacom.com
sapssoprd.paramount.com
achievements.ets.org
san-9-s11.tlsprovisioning.exacttarget.com
mtvnservices.com
sfb-ae-east.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
paramount.com
solmanprodsld.paramount.com
MTVI.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
ergsignup.paramount.com
noclist.paramount.com
screeners.paramount.com

Certificate

The complete raw certificate details for paramount.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cCODGhouuBwDYcX+/F2
FehLWOd4jwRh0AAnjO36d/SwzX1IHBcnN4MNDPwDvWiNAKcA9ZgBj2hF8BCWKrvd
q83QfCu75ftC0zgcodYtk184Wwk7FPKPqEVUZXGrM/8v1dxLeHbTiNuH9R7Qx6bi
Q04d5R37wvGmC7UmfOT9MJe6zzD0YAVt3vqQ25T0OJy/BC+tZ5G7L24WtK84kcfv
bq+9XnGFNn8XhCcKs6ovSFWFt05Oe86TVuorGCyZiBDYK93Chvwq4tIAydlcas7B
ux6Sydsv0IFRuE8JUv1voyKN6xg1x+m5g23Ii14z+YDTv509Idc0O6bkcUnrJjG0
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296743991259799661531550807460517531486715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 16:20:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 16:20:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paramount.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26478758086593001467919949459690774916970607638788336283638205702310279595109293841531202830199814926986803006248734867581605818447676926097370991426874363567976500475806320181676777095908191096962308463820648673857503712312902703998763309094908603043827732989367925962520642243063669408916595602014581953408760756897929579870129019786100745212322620180292962085817778368812324840804505592960294831246357223842660475348519990296204344030168799255922567034143537216012572300503735303634406854455255223000979216751083831525344172252021237732293820771911430737593977957431360471749524787678038206871456123442217891247263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a00e72d4853989c94b6fd0542624e19b83c43c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramount.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018936851a1a0000040300483046022100fe84766866c7d903f2acb7bd95ff3b90e9ad37097453d413ced9687ca703204a02210097bc0839155e169d621eed3198d835353912ff386153c9ac42ee1be20a3ac2fe0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018936851a2a000004030046304402205a6ead96e009cb9a0a1bf4887c522eda24ab22689ecf90bc9f4c0665f56643b002206c93084e25f047666cb52146be05f5c8db17febf9e31e3f957b56fe149e9d648
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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