www.viacom.tech

- Viacom International Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:3c:8c:3e:b1:87:d2:1e:b5:25:9a:6f:ff:0d:0d:b6 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3c:8c:3e:b1:87:d2:1e:b5:25:9a:6f:ff:0d:0d:b6
Serial Number (int): 5631294299085384255018127276246896054
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b7:28:51:93:71:fa:a9:2b:73:f4:9f:48:7c:65:ef:c3:3d:be:a3:62
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 5a:0c:03:55:79:c9:08:f8:15:10:68:48:2a:74:51:de:74:cb:5b:a7
Fingerprint (sha256): 09:99:52:9e:63:38:6a:db:0b:12:45:dd:21:8c:3d:4b:86:fc:fb:81:10:c4:68:e6:44:65:d1:b4:ea:d5:2d:65

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate www.viacom.tech

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.voteforyourlife.com
www.viacomprivacy.com
www.viacompitchbox.com
www.viacomcbspartners.com
www.viacomcbsaffiliate.com
www.viacom.tech
www.supertv.it
www.southparkstudios.com.br
www.southparkstudios.com
www.southpark.lat
www.sitemaps.webplex.viacom.com
www.paramountnetwork.se
www.paramountnetwork.it
www.paramountnetwork.dk
www.paramountchannel.la
www.paramountchannel.com.br
www.nickslimefest-q.mtvi.com
www.nickslimefest-d.mtvi.com
www.nickelodeonparents-q.mtvi.com
www.nickelodeon.nl
www.nickelodeon.la
www.nickelodeon.com.br
www.nick.de
www.nick.com.pl
www.mtvshuga.com
www.mtvla.com
www.meuspremiosnick.com.br
www.keepmyviacomcbs.com
www.kcamexico.com
www.j-one.com
www.halfofus.com
www.garfield.com
www.gameone.net
www.comedycentral.nl
www.comedycentral.co.uk
www.comedycentral.be
www.bikinibottomexperience.com
www.betintl.co.uk
www.betchannel.fr
www.betafrica.tv
www.balconystories.tv
wiki.southpark.cc.com
viacom.tech
testing.api.playplex.viacom.vmn.io
stg2.gateway.bridge.viacom.com
stg2.bridge.viacom.com
stage-slack.eai.vmn.io
slack.eai.vmn.io
qa.keepmyviacomcbs.com
qa-slack.eai.vmn.io
prod-slack.eai.vmn.io
pr.contentplatform.viacom.com
playplex-bff.qa.viacom.tech
playplex-bff.prod.viacom.tech
kca.nicktv.it
kca.nickelodeonarabia.com
kca.nickelodeonafrica.com
kca.nickelodeon.tv
kca.nickelodeon.se
kca.nickelodeon.ru
kca.nickelodeon.ro
kca.nickelodeon.pt
kca.nickelodeon.no
kca.nickelodeon.nl
kca.nickelodeon.hu
kca.nickelodeon.gr
kca.nickelodeon.fr
kca.nickelodeon.es
kca.nickelodeon.dk
kca.nickelodeon.be
kca.nick.tv
kca.nick.de
kca.nick.com.pl
kca.nick.com.au
kca.nick.co.uk
kca.nick-asia.com
kca.mundonick.com.br
kca.mundonick.com
forums.southparkstudios.com.br
events.nick.com.au
dev-slack.eai.vmn.io
dba-notification.viacomcbs.tech
dba-notification-dev.viacomcbs.tech
cms.vimn.com
clicks.southparkstudios.com
clicks.noggin.com
clicks.bet.plus
catalogue.awesomenesstv.com
bps.viacomcbs-q.mtvi.com
avatar.southparkstudios.nu
avatar.southparkstudios.com.br
avatar.southparkstudios.com
avatar.southparkstudios.co.uk
avatar.southpark.lat
avatar.southpark.de
avatar.southpark.cc.com
archive.garfield.com
apps.spongebobmobileapp.com
api.viacom-aemstage.mtvi.com

Other certificates including the domain name viacom.tech

(limited to 100 certificates)
www.viacom.tech
www.viacom.com
mtvnservices.com
www.viacom.com
viacom.tech
www.viacom.tech
eden-kafka-connect-ui.i.viacom.tech
reko.i.viacom.tech
www.viacom.com
www.viacom.com
www.viacom.tech
viacom.tech
viacom.tech
eden-kafka-connect-dev.i.viacom.tech
viacom.tech
mtvnservices.com
www.viacom.tech
mtvnservices.com
www.viacom.tech
www.viacom.com
neutron-arc-sync.i.viacom.tech
www.viacom.tech
origin.onboarding.noggin.com
MTVI.com
www.viacom.tech
www.viacom.tech
www.viacom.tech
mtvnservices.com
www.viacom.com
www.viacom.com
www.viacom.tech
mtvnservices.com
www.viacom.tech
www.viacom.tech
mtvnservices.com
mtvnservices.com
www.viacom.tech
viacom.tech
eden-kafka-connect-prod.i.viacom.tech
origin.admin.officeapp.viacom.tech
origin.connect.viacom.tech
origin.neutron-api.viacom.tech
eden-kafka-topics-ui.i.viacom.tech
www.viacom.tech
mtvnservices.com
www.viacom.tech
qa-etl-feeds-partnerplatform.viacom.tech
www.viacom.com
voice-assistant-debug-helper.viacom.tech
www.viacom.com
eden-kafka-connect-qa.i.viacom.tech
blog.viacom.tech
www.viacom.tech
viacom.tech
www.viacom.tech
origin.as.viacom.tech
origin.neutron-api-config.viacom.tech
www.viacom.com
www.viacom.com
qa-officetv.i.viacom.tech
www.viacom.com
qa-voice-assistant-google-action-comedy-central.viacom.tech
www.viacom.tech
pai.viacom.tech
viacom.tech
www.viacom.tech
mtvnservices.com
recs.viacom.tech
MTVI.com
www.viacom.tech
origin.interview-helper.viacom.tech
www.viacom.tech
www.viacom.com
origin.connect.viacom.tech
blog.viacom.tech
blog.viacom.tech
www.viacom.tech
as.viacom.tech
www.viacom.com
officeapp.viacom.tech-d.mtvi.com
www.viacom.tech
www.viacom.tech
paramount.tech
www.viacom.com
www.viacom.tech
qa-recs.viacom.tech
www.viacom.tech
eden-kafka-schema-registry-qa.i.viacom.tech
www.viacom.com
staging-neutron-api.viacom.tech
www.viacom.com
mtvnservices.com
www.viacom.tech
www.viacom.tech
mtvnservices.com
mtvnservices.com
viacom.tech
www.viacom.com
officetv-api.i.viacom.tech
MTVI.com

Certificate

The complete raw certificate details for www.viacom.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JM0pMwMDvo3/GakJ8Ir
pomLXhWEMTjfmWDw8VOkk2QF2agwy+/Q8QpEeGseeSbpDbN5mvVAYj8sFwLehA2P
cGywzPkge47H4WTYMw0IGGxPVY8yyEtMfOvrSMB60/LFL8lvKP5Q7VeTB8GQnNlh
WOOkl9UYROayYaX075TtCfZwylX+RxyWJltM9tEHbH8s8hqjWfrJiGbogwOOXFvy
qBK0bcZmtQgjus3o0mTCxdhwOQcpbVlIUSWYIencedWXd8W2Qb/cUq8KDJrgQ64g
vVeuaUq2i61WohegrkhlBH1IzPZxzguz4ZVP9oycd5TWQUnTYGG1F/0V6RDHIHAD
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5631294299085384255018127276246896054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28854923338609014695840020123161652170132225517597223679722392206901427213353859156681706754078209682492184673099320829044161002197810889255304433722141310041243722179415237411173998479618283892823331946004287603348663930602329506908433415673249401900604402879603144900883749806379829202164590957538089462520536731366088511347729887647908820332514619915928619555383009752121266471921619587662943923256884962393272085916658834811942831641791381145897179891734096512480189052185630186493314961977687179283943655916656221481083610584209272310627591134790777070376417213706218091680360337846752405426947537143641320457011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b728519371faa92b73f49f487c65efc33dbea362
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2283 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voteforyourlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomprivacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacompitchbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbspartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbsaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supertv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southpark.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitemaps.webplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickslimefest-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickslimefest-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvshuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meuspremiosnick.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepmyviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcamexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.j-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halfofus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikinibottomexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betintl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betchannel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betafrica.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balconystories.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.api.playplex.viacom.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.gateway.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.keepmyviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playplex-bff.qa.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playplex-bff.prod.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeonarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.mundonick.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.nick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dba-notification.viacomcbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dba-notification-dev.viacomcbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps.viacomcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.garfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.spongebobmobileapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.viacom-aemstage.mtvi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0038f201fd7ebbb493ce5a3ff75bbe75952c3cd7758906c7e5f4f3dde356d806efde9d885b44a09029016eafc639e3155058f9084ef749c0cc754f97709d20ba19faae3816ba891e9574c463c2b5a50f082c4b611de02a078a19043277e0b1b8cd4c3cd4c0cbe6ed3fd151acd7db508dc5f0d4411255f97276be60c4975a11540aaef228cda6fec67d07f4d3b3a8a57233455141b7bbdc00934ce1b86f9b37aadbef9182ea2eb2687c3170c7525574dfa4819f984da03e21d0358865a3a80f1aafe92d3f12077010e372588828d7fa727092ea2e0463c2bd4cd2b5a9ec8f92873b38ccdcdc0cbd9ce638ea2703620fd4d913b701dbd016be4c5322e30f8a3b8ef9