mail.paramount.com

- Paramount Pictures -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 75:d0:49:bf:cb:9b:da:e5:6a:2f:d7:57:3c:20:e6:a0 was issued on by thawte, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Paramount Pictures

Organization: Paramount Pictures
Organization unit: Paramount Pictures
State / Province: California
Locality: Los Angeles
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:d0:49:bf:cb:9b:da:e5:6a:2f:d7:57:3c:20:e6:a0
Serial Number (int): 156601169064904382276531743802467083936
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 22:13:8d:c4:78:31:b6:6d:12:12:f8:72:80:55:15:f2:e0:b4:0a:2b
Fingerprint (sha256): 07:bd:fb:d4:08:86:40:a2:64:d8:4e:fa:58:39:6b:5b:36:d5:7a:2e:84:2d:c5:b7:d9:02:a0:1d:0d:2b:90:cc

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate mail.paramount.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.paramount.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.paramount.com
maildr.paramount.com
outlook.paramount.com
mail.paramount.com

Other certificates including the domain name paramount.com

(limited to 100 certificates)
www.viacom.com
leapfrog-ssl-51.gcs-web.com
qa.5paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
www.viacom.com
viacomcbs.com
aribatraining.paramount.com
www.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
fioriqa.paramount.com
esmailrelay.paramount.com
paramount.com
mtvnservices.com
mftdev.paramount.com
sip.paramount.com
www.viacom.com
nxSDGq06.paramount.com
sfb-ae-west.viacom.com
www.viacom.com
mail.paramount.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
cdn.privacy.paramount.com
sapssoprd.paramount.com
epmdev.paramount.com
MTVI.com
prime.paramount.com
mtvnservices.com
asperaweb.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
safety.paramount.com
www.viacomcbs.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
scriptord.paramount.com
infdev.paramount.com
mtvnservices.com
meetings.paramount.com
careers.paramount.com
mtvnservices.com
cfc.paramount.com
www.viacom.com
phe-schedule.paramount.com
screeners.paramount.com
www.viacom.com
www.viacomcbs.com
www.viacom.com
nsg.paramount.com
salesapp.paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
achievements.ets.org
www.viacom.com
sfb-webext-ams.viacom.com
achievements.ets.org
www.viacom.com
origin.paramount.com
paramount.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
achievements.ets.org
scriptord.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
san-8-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
aspera.paramount.com
achievements.ets.org
viacomcbs.com
support.paramount.com
www.viacom.com
www.viacom.com
achievements.ets.org
www.viacom.com
leapfrog-ssl-51.gcs-web.com
insights.paramount.com
sfb-webext-east.viacom.com
sapssoprd.paramount.com
achievements.ets.org
san-9-s11.tlsprovisioning.exacttarget.com
mtvnservices.com
sfb-ae-east.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
paramount.com
solmanprodsld.paramount.com
MTVI.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
ergsignup.paramount.com
noclist.paramount.com
screeners.paramount.com

Certificate

The complete raw certificate details for mail.paramount.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz048j0wOP/VOQMvQ46/
fvgNwPAD5/7QaovFPDHkJrlcLUullR649MTFacBhmW1pzKDe//3Bv+NUMY58lZJg
9wJnxNnrQ2vuM97Mopr4O5D65cIOVMu5+5+4+W9Q3Yy3UXhBPpLTCnKmvY7ZtvFR
grRoSqk6lQuH8pkSkCOFl83VoQI74x0FFZ6MvSbmvk4AdaSY9pZCsQQh/agEwGBW
Dy2C6WJukMvJ96hNV2giiA2aP5wpuRwZ2MXbuCmw7W8U7C6TQXteW7aYORVNB77B
BpKc/qSv94hJnEVwm/zNz9qsxP1k2+MKTnXCvGDgS60ABHqHN3YgU26TV4G+YSKY
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156601169064904382276531743802467083936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paramount Pictures'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paramount Pictures'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.paramount.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24646659381832655763550341054795573381968640256951687340213266926733115552578863152661071145253562380911745243406876796140456252428292844345593062085387422113654392793327160101480065033020493315463399513384627633170862847051742579016915576179547449344697680187664656369855114198440466251053362887799924783799660482117260070330811280979450265459092909750290655920112371802446235108033581438083457245694310991968452322028432637109639268258831992837643877293825522514692343498292272119810674013336775460318270303246456312165710631118268996536915804092825982544530334508266774841176268760028340383163780964963189937838269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maildr.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.paramount.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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