www.cbs.com

- CBS Broadcasting Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:5c:18:cd:cc:e9:3c:92:3a:f1:7f:58:77:73:73:3a was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CBS Broadcasting Inc.

Organization: CBS Broadcasting Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:5c:18:cd:cc:e9:3c:92:3a:f1:7f:58:77:73:73:3a
Serial Number (int): 3136650385575746710897326692783846202
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 27:6c:f3:bf:46:01:a9:3b:95:d3:2e:5e:2e:7d:0f:5a:5e:24:47:22
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 40:c4:ef:fc:03:90:36:01:e3:a3:1d:9d:51:45:a1:cd:59:c0:b8:2e
Fingerprint (sha256): 06:71:ad:1d:2e:89:0a:d3:d4:36:5f:39:dd:4d:07:b0:2b:7c:fa:93:08:fe:7c:ea:7b:44:15:db:54:f7:cb:5a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.cbs.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cbs.com
cbs.com
static3.giantbomb.com
pm2.fonts.cbsnews.com
static4.comicvine.com
www.chowmagazine.com
thumbnails5.cbsig.net
static.giantbomb.com
static-3.tvgcdn.net
static5.comicvine.com
cnet1.cbsistatic.com
wwwimage-secure1.cbsstatic.com
thumbnails1.cbsig.net
cdn1.cnet.com
chowhound.chow.com
pm2.fonts.cnet.com
www.chow.com
graphics.fansonly.com
www.sho.com
cdn.cnetcontent.com
thumbnails.cbsig.net
wwwimage-secure4.cbsstatic.com
www.tvguide.com
search.chow.com
static.tvgcdn.net
graphics.collegesports.com
secure.metacritic.com
static3.comicvine.com
vidtech.cbsinteractive.com
www.giantbomb.com
wwwimage.cbsstatic.com
test.techrepublic.com
cbssports.cbsi.com
thumbnails4.cbsig.net
test.zdnet.com
wwwimage-secure5.cbsstatic.com
cc.cnetcontent.com
static-5.tvgcdn.net
videoplayer.cbs.com
cdx.cbs.com
video.tvguide.com
www.chowstatic.com
mobilelistings.tvguide.com
static1.giantbomb.com
static4.giantbomb.com
amp.etonline.com
uat.cnet.com
amp.insideedition.com
cnet2.cbsistatic.com
cnet3.cbsistatic.com
flv.sales.cbs.com
static-1.tvgcdn.net
thumbnails3.cbsig.net
cdn2.cnet.com
www.zdnet.com
static-4.tvgcdn.net
static2.giantbomb.com
sportsline-sdg.cbsistatic.com
pmd.tvgcdn.net
podcast-files.cnet.com
www.techrepublic.com
rss.tvguide.com
feed.cnet.com
static.comicvine.com
static2.comicvine.com
downloads-test.zdnet.com
dws.cbsimg.net
www.sportsline.com
wwwimage-secure2.cbsstatic.com
www.cnet.com
static1.comicvine.com
cdn4.cnet.com
mapi.tvguide.com
wwwimage-secure.cbsstatic.com
hdvod.tvgcdn.net
thumbnails2.cbsig.net
wwwimage-secure3.cbsstatic.com
fonts.cbsi.com
cimg.tvgcdn.net
api.metacritic.com
downloads.zdnet.com
cnet4.cbsistatic.com
dw.cbsimg.net
test.cnet.com
static-2.tvgcdn.net
static5.giantbomb.com
movies.tvguide.com
secure.tv.com
canstatic.cbs.com
rev.cbsi.com
www.chowhound.com
cdn3.cnet.com

Other certificates including the domain name cbs.com

(limited to 100 certificates)
dev-broker.mediapo.cbs.com
*.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
concur.cbs.com
box.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
viacomcbs-live.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
ny-asperafaspex.cwd.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
*.lb.cbs.com
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
airspace.cbsivideo.com
prospective.shared.global.fastly.net
*.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
adfs.cbs.com
audienceservices.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacomcbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
*.airspace-g.cbsivideo.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
cbsaavideo.com
shoogle.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
uccaas-expc.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
*.cbs.com
fluuid-dev.cbs.com
b3.shared.global.fastly.net
b3.shared.global.fastly.net
www.viacomcbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacom.tech
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
ehs.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
*.cbs.com
www.cbs.com
cbsco-cucm01-bv1.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com

Certificate

The complete raw certificate details for www.cbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMVqBz/wQp4PqMuk0fKE
FBWrEQVhQ7h+AzL7gioEFDgvSTuJ0Kx3ON+/8ainXbqzRKPpM8OyTlk893RRb9HZ
vuX0rdZXQvaVlhzaAbL6aD8mFA4sfYzn+9QwiSA4sStZduHHaDw8b3lEKDQaMqRj
Wj5YM0EW81aDb/LsMZ1DdtJvLtMUPht5cRIJ2SWz0j3UVlg3LQaRR6FMBHYaarmr
nzSEhURUC6OUOQjkjlH/CP5Xbyx6SuD++c6bfpuYdASk1m0LVzgu/MZEvxpZAdP7
cfQA/POgjEv/r36iNriVZq237FcL6ZD09wOSs+IMqvqu7Pz3aVXXxO5+djN2MZRK
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3136650385575746710897326692783846202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBS Broadcasting Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22820243450887690749788556675700889588092110450988840671190422822198568770566916943956943143226639374354096902698710973065785462883205937799218646055674923392553449314490618039436619708963168065832846053189909098102146489160710920585152160109209339055335527162402293975041190339370250712477738281779428301201461560401154886715897817473822059706161113445562349879386813665603016297187832589542789316899293480353706635732335404224391306202349523354572476707129166577138595556116154760809837168274627286876481753408526210757716530085165027708564297524376235840470712536851879734428783535319496752333339155049173044447879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							276cf3bf4601a93b95d32e5e2e7d0f5a5e244722
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1909 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cbsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails5.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-3.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet1.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure1.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails1.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chowhound.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.fansonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure4.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.collegesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidtech.cbsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbssports.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails4.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure5.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-5.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoplayer.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdx.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilelistings.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.etonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.insideedition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet2.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet3.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flv.sales.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-1.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails3.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-4.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsline-sdg.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmd.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast-files.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads-test.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.cbsimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure2.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapi.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdvod.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails2.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure3.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimg.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet4.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dw.cbsimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-2.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canstatic.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rev.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowhound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.cnet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016252bc107100000403004630440220065e626364e532426bb0ca90bcf8a5d63ad589e42e4e25240666f96f52462c70022065f3d05fbb554a11f63dbd41e70a17eed355aa0dc2e6ce8b77195c5839d3300f0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016252bc11e10000040300483046022100c61658a018923ddcdfde993efbf11d487fb53af429bde1dadc7ea9c3c0ace0cc0221009cd840bec734e926f886be1e8c315e133b57900a8ab265c4e80393555f59fb2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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