cdn.privacy.paramount.com
- Paramount Global -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 8d:18:f8:2d:b5:8c:d5:1e:c1:27:13:c8:48:fd:73:cd was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Paramount Global
Organization:
Paramount Global
State / Province:
New York
Country: US
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 8d:18:f8:2d:b5:8c:d5:1e:c1:27:13:c8:48:fd:73:cdSerial Number (int): 187550796189314035522472651932938630093
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 16:b2:79:41:ec:14:35:6b:21:c9:02:43:17:ad:07:6d:bf:f9:83:3c
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 7f:5d:84:8b:2f:92:4e:0b:1e:f3:3a:b6:14:ae:78:96:e8:10:ea:c7
Fingerprint (sha256): 08:79:50:70:35:63:7c:7e:3d:2b:ee:6c:45:88:99:9f:cf:8e:32:17:c4:33:77:8b:25:ef:28:4a:cb:9d:7c:ab
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate cdn.privacy.paramount.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.privacy.paramount.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.privacy.paramount.com
www.cdn.privacy.paramount.com
www.cdn.privacy.paramount.com
Other certificates including the domain name paramount.com
(limited to 100 certificates)
www.viacom.com
leapfrog-ssl-51.gcs-web.com
qa.5paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
www.viacom.com
viacomcbs.com
aribatraining.paramount.com
www.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
fioriqa.paramount.com
esmailrelay.paramount.com
paramount.com
mtvnservices.com
mftdev.paramount.com
sip.paramount.com
www.viacom.com
nxSDGq06.paramount.com
sfb-ae-west.viacom.com
www.viacom.com
mail.paramount.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
cdn.privacy.paramount.com
sapssoprd.paramount.com
epmdev.paramount.com
MTVI.com
prime.paramount.com
mtvnservices.com
asperaweb.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
safety.paramount.com
www.viacomcbs.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
scriptord.paramount.com
infdev.paramount.com
mtvnservices.com
meetings.paramount.com
careers.paramount.com
mtvnservices.com
cfc.paramount.com
www.viacom.com
phe-schedule.paramount.com
screeners.paramount.com
www.viacom.com
www.viacomcbs.com
www.viacom.com
nsg.paramount.com
salesapp.paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
achievements.ets.org
www.viacom.com
sfb-webext-ams.viacom.com
achievements.ets.org
www.viacom.com
origin.paramount.com
paramount.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
achievements.ets.org
scriptord.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
san-8-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
aspera.paramount.com
achievements.ets.org
viacomcbs.com
support.paramount.com
www.viacom.com
www.viacom.com
achievements.ets.org
www.viacom.com
leapfrog-ssl-51.gcs-web.com
insights.paramount.com
sfb-webext-east.viacom.com
sapssoprd.paramount.com
achievements.ets.org
san-9-s11.tlsprovisioning.exacttarget.com
mtvnservices.com
sfb-ae-east.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
paramount.com
solmanprodsld.paramount.com
MTVI.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
ergsignup.paramount.com
noclist.paramount.com
screeners.paramount.com
leapfrog-ssl-51.gcs-web.com
qa.5paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
www.viacom.com
viacomcbs.com
aribatraining.paramount.com
www.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
fioriqa.paramount.com
esmailrelay.paramount.com
paramount.com
mtvnservices.com
mftdev.paramount.com
sip.paramount.com
www.viacom.com
nxSDGq06.paramount.com
sfb-ae-west.viacom.com
www.viacom.com
mail.paramount.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
cdn.privacy.paramount.com
sapssoprd.paramount.com
epmdev.paramount.com
MTVI.com
prime.paramount.com
mtvnservices.com
asperaweb.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
safety.paramount.com
www.viacomcbs.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
scriptord.paramount.com
infdev.paramount.com
mtvnservices.com
meetings.paramount.com
careers.paramount.com
mtvnservices.com
cfc.paramount.com
www.viacom.com
phe-schedule.paramount.com
screeners.paramount.com
www.viacom.com
www.viacomcbs.com
www.viacom.com
nsg.paramount.com
salesapp.paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
achievements.ets.org
www.viacom.com
sfb-webext-ams.viacom.com
achievements.ets.org
www.viacom.com
origin.paramount.com
paramount.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
achievements.ets.org
scriptord.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
san-8-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
aspera.paramount.com
achievements.ets.org
viacomcbs.com
support.paramount.com
www.viacom.com
www.viacom.com
achievements.ets.org
www.viacom.com
leapfrog-ssl-51.gcs-web.com
insights.paramount.com
sfb-webext-east.viacom.com
sapssoprd.paramount.com
achievements.ets.org
san-9-s11.tlsprovisioning.exacttarget.com
mtvnservices.com
sfb-ae-east.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
paramount.com
solmanprodsld.paramount.com
MTVI.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
ergsignup.paramount.com
noclist.paramount.com
screeners.paramount.com
Certificate
The complete raw certificate details for cdn.privacy.paramount.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHADCCBeigAwIBAgIRAI0Y+C21jNUewScTyEj9c80wDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yMzAyMDQwMDAwMDBaFw0yNDAyMDQyMzU5NTlaMF8xCzAJBgNV BAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazEZMBcGA1UEChMQUGFyYW1vdW50IEds b2JhbDEiMCAGA1UEAxMZY2RuLnByaXZhY3kucGFyYW1vdW50LmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANdlSp72NV9iqImcy2GUEMXGKIRLLWl5 DSFEnHWMREXrSB9Gqvri3g0oeZtcIvWr6Ei7K0KPd5yexPJCxqh82Cq2NofsRxVz xjxSUy22N+Npge1R9TZcPs6TkRBIyWQD1Yq6TLhj6TCkdbOCbv0ZVZ4syyB3C7GI pxVn9ixxyZx/BTqa5L+eJ2s40fVLk74ilISkUZ9Ng3SKm1NP4o6QoZIfduZv6es2 67Kpjb05RlDJuYDyQaRGfMCsVRxChrb1TwOEIoxZ+gof/6wZWuizMWjdtdFAPvW/ iqMP8sFc4IjkU2TCLY6mCqvzjz/fYxilMm5qfrcA548vSwoCNFDOhe0CAwEAAaOC A34wggN6MB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1UdDgQW BBQWsnlB7BQ1ayHJAkMXrQdtv/mDPDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/ BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1 BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNv bS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2Vj dGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVT ZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDov L2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlv blNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2Vj dGlnby5jb20wQwYDVR0RBDwwOoIZY2RuLnByaXZhY3kucGFyYW1vdW50LmNvbYId d3d3LmNkbi5wcml2YWN5LnBhcmFtb3VudC5jb20wggF/BgorBgEEAdZ5AgQCBIIB bwSCAWsBaQB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABhhoP 3IoAAAQDAEgwRgIhANdcfnsfp/VNxTleH9xCzwNCGKIECc7r+GAJANRu25bhAiEA 8GgEjBgW97+PimQVEkp3WkE4ZLGTfxVH5YyGPm2DTAEAdQDatr9rP7W2Ip+bwrtc a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYYaD9xrAAAEAwBGMEQCIC4X5Jgj5VsFQ4eF wHhawfWEvSW7x+t4at53B4DqQE7+AiBF11UaWjlvvGwzJpSo+FPwnbTTDltZDHVG mv4YZxP1MwB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhhoP 3DsAAAQDAEgwRgIhAM94/Yy6GArpYtzmkqix1FI+vySunGN6Xh7NLa2tDuObAiEA 87/SEiIZTktkpavBiONrq9ZJGoGuinvGQLCIah0rFlUwDQYJKoZIhvcNAQELBQAD ggEBAJbHP42W3TcgiYzaUGZ0GmVDSdCp6/wXjX0N4PvhUvm5jLAUCgpejOwKW4sm nzjAKIZOA54cmrLAr2jb/W0RJx9OizINWygyZvtkoXlOmabazzwJjZOeuoow7dtA yBO+Uj716AU88Fg8VtPmRdHuuiE2UCgkzcFwF3h4bHQkr/2Lz9FjjLiYSBNajHo9 aFBAWNqg9kNTc8ZiIivnzlNELxLw+WVFcZ0+kf64znRrObX91k4V7iRUaF3cEafC jrzaEq1mt2z7AF0neTV/0EcwxJglDFUfmr6LD3SyLEJuPrLvDbgcuAuG1lf8CLYY nqe0MpZa3cWa87gPuBm4Ot7CEAM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12VKnvY1X2KoiZzLYZQQ xcYohEstaXkNIUScdYxERetIH0aq+uLeDSh5m1wi9avoSLsrQo93nJ7E8kLGqHzY KrY2h+xHFXPGPFJTLbY342mB7VH1Nlw+zpOREEjJZAPVirpMuGPpMKR1s4Ju/RlV nizLIHcLsYinFWf2LHHJnH8FOprkv54nazjR9UuTviKUhKRRn02DdIqbU0/ijpCh kh925m/p6zbrsqmNvTlGUMm5gPJBpEZ8wKxVHEKGtvVPA4QijFn6Ch//rBla6LMx aN210UA+9b+Kow/ywVzgiORTZMItjqYKq/OPP99jGKUybmp+twDnjy9LCgI0UM6F 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 187550796189314035522472651932938630093 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paramount Global' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.privacy.paramount.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27191184262080217383792311909681469588776168041961659937474559289844104769181854868223039670879220501423735191055036794697280690099420266704226499282202040206394128739198115698790297600381153393957525473645873368687197891429592860240960139156358561361701725022246030409369305098459459013921374409966449948774419917385644647586807511540077839758280140172319200126834895024446663726815396233409686422663017386108158371103878574168479018945533053407950338133093673980775127523061303180638760669251642752308437752660441747878277229364025379249113552996652207734630943007104405716052587474167696526660591258008613798446573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 16b27941ec14356b21c9024317ad076dbff9833c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.privacy.paramount.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.privacy.paramount.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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