www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:b4:2a:77:6f:a1:ad:cb:c9:b3:f5:c1:8f:16:09:40 was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:b4:2a:77:6f:a1:ad:cb:c9:b3:f5:c1:8f:16:09:40
Serial Number (int): 20873894695212993510058646631121029440
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 98:13:3f:b9:17:05:0f:76:6a:09:c7:4c:67:c5:c9:d5:cc:2f:82:46
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f5:ae:80:27:69:13:0e:a0:2c:e9:52:0f:af:6d:b3:06:be:45:e6:40
Fingerprint (sha256): 0a:f6:8e:dc:17:5a:ec:a2:07:66:43:f7:98:cf:67:f0:07:f8:d6:26:ad:65:c1:2e:87:0c:c7:a8:12:55:d7:2f

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacom.com
viacom.com
xbox.mtvnservices-q.mtvi.com
testing.forums.southpark.de.vmn.io
gameservices.mtvn.com
www.cc.com
www.mtvunderthethumb.com
akasubs-test.channel5.com
staging.api.mtv.com
dlvrsvc-uat.mtvnservices.com
player-test.channel5.com
www.mundonick.com
vip.viacom.tech-q.mtvi.com
tve.mtvnservices-q.mtvi.com
feeds.mtvnservices-q.mtvi.com
media-utils-live.mtvnservices.com
www.vh1press.com
hlspkg-uat.mtvnservices.com
hlspkg.mtvnservices.com
www.paramountmovies.com
www.nick.com
api.stage.bet.com
tve.mtvnservices.com
www.nickelodeonparents.com
www.vh1.com
media.mtvnservices-d.mtvi.com
secure.iphone.mtvn.com
api.cc.com
keysvc.mtvnservices.com
www.mtv.it
miaw.mtv.com.br
feeds.mtvnservices.com
tveauth.vimn-q.mtvi.com
tveguest.vimn-q.mtvi.com
www.bellator.com
tveauth.vimn.com
neutron-api.viacom.tech-q.mtvi.com
player-staging.channel5.com
files.spike.com
gateway.bridge.viacom.com
origin.l3.ts.mtvnservices.com
origin.vz.tsq.mtvnservices.com
auth.id.viacom.com
www.paramountnetwork.com
media-utils.mtvnservices.com
www.paramount.com
player.channel5.com
media.mtvnservices.com
media.mtvi.com
videos.mtvnn.com
origin.l3.tsq.mtvnservices.com
recruitment.feedback.viacom.tech
keysvc-uat.mtvnservices.com
www.howihalo.com
player.mtvnservices.com
files.cc.com
media-utils-live.mtvnservices-q.mtvi.com
console.mtvnservices.com
www.mtvu.com
miaw.mtvla.com
api.mtvnn.com
aka.ts.mtvnservices.com
search.mtvnservices.com
media.mtvnservices-q.mtvi.com
mtvbrazil-services.vimn.com
xbox.mtvnservices.com
search.mtvnservices-q.mtvi.com
www.mtvasia.com
www.mtv.nl
akasubs-staging.channel5.com
qa.relaunch.bet.com
testing.forums.southpark.vmn.io
api.playplex.viacom.com
testing.bellator.vmn.io
specials.mtvnn.com
origin.vz.ts.mtvnservices.com
www.mtv.com.br
intl.esperanto.mtvi.com
www.spiketv.nl
www.paramountnetwork.es
www.keepviacom.com
detektive.mtvnservices.com
api.spike.com
api.qa.bet.com
www.mtv.ch
akasubs.channel5.com
player.mtvnservices-q.mtvi.com
btg.mtvnservices.com
www.mtvpress.com
mobilefiles.nick.com
www.nickpress.com
dlvrsvc.mtvnservices.com
mtv.ch
player.mtvnservices-d.mtvi.com

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i3z7MC11yODNEEy4IeU
OD+6SRzm/K4fCtGHYcodMExT/fRcnGq6oqA+Vc6JiCZIkU5qSoawsPK2tnqsV9NL
bc2Zxj+kDUqr55QzZBBj0lY9Hwuqh5ie7ReRCDE56DpTmzUdBrcLeFwqoPraDKkv
3fHlKAjjXNRNQP6MjJMuuRwnoRTN7OiGTH0mJHJOf5IaJOiwLTalafN+ndT/m6QB
3Xb/9AozGb8ojvfo+SWKmaI6PwAlZ+GlVPovrvLf/FMMfGhxTgI3pYNrkCQR/9tx
KfG50jgCfCgDIbm+oj/Q0RJl1Jo9yb7Bi5nOR8oLsgjxCjv49qUGEE5eiKiU7YwY
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20873894695212993510058646631121029440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27037657448412511963776255416704329410883677998244461132886140355040903644469273892335104381841928852487811894372604652904087652555627041636913220867086906473226540984439173529188434899025654177403903044463102031275531807939732332477869485917281874465598241849053568724853186155594672771054903867845563429649426433112057236747353270273868369110815278981427009060921071825569611899481886785584865185092801008953629920936491759945937935447785751337454207359334175998137222461384627680747302044495057099638379682803924515525757822718027610123700765722233775914758671576775080820157598640065144961719258208046445593630873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98133fb917050f766a09c74c67c5c9d5cc2f8246
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameservices.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs-test.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-test.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlspkg-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlspkg.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iphone.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miaw.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-staging.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howihalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miaw.mtvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvbrazil-services.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs-staging.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.relaunch.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specials.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.esperanto.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiketv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btg.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016926e215ef0000040300483046022100f0218986c58e64e3314779c40a9b4cf20a90963c6eea38108de8b1a6f207f725022100a2a73e8d94dc95e0ab965b48ba205688de1dc9115553aecca06a04f2d9845b160077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016926e215fa0000040300483046022100ba5ecbec23529f5f7502b93503826b8689d1307dff881fb4947d67640020ab49022100b9336cc387165a74c34479cdaeafb306d54402abac9155f23e4839398893bc8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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