www.viacomcbs.com

- VIACOM INTERNATIONAL INC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:b6:1e:fc:cb:a2:77:84:07:46:e9:63:17:d6:72:64 was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

VIACOM INTERNATIONAL INC

Organization: VIACOM INTERNATIONAL INC
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:b6:1e:fc:cb:a2:77:84:07:46:e9:63:17:d6:72:64
Serial Number (int): 11579450495339596129965459918095282788
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 39:11:49:02:bd:31:08:a3:b7:a0:14:ca:78:ed:bc:54:dd:86:a8:d7
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 51:7e:5c:3b:75:43:83:7c:b3:f3:51:3a:15:ad:44:dc:18:58:94:b3
Fingerprint (sha256): 0c:58:76:15:80:85:3b:2e:95:a7:13:de:75:b5:2b:4b:2a:44:40:58:37:e2:ac:91:f2:48:b3:e0:a0:bd:52:31

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.viacomcbs.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacomcbs.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacomcbs.com
*.app.webplex.vmn.io
*.cbs.com
*.eden.paramount.tech
*.events.paramount.tech
*.neutron.paramount.tech
*.noggin.com
*.ns.paramount.tech
*.paramount.com
*.paramount.tech
*.paramountmsc.com
*.viacomcbs.com
activate.smithsonianchannel.com
apps.paramountpictures.com
bugfix.publife.desa.telefe.com.ar
cp105701.adp.paramount.tech
cp112360.adp.paramount.tech
cp450888.adp.paramount.tech
cp477481.adp.paramount.tech
cp477482.adp.paramount.tech
cp479184.adp.paramount.tech
cp541865.adp.paramount.tech
cp541867.adp.paramount.tech
cp541868.adp.paramount.tech
dev-www.home.paramountglobalservicing.com
dev-www.paramountglobalservicing.com
dev-www.promopassport.com
dev.noggintime.com
dev2-www.home.paramountglobalservicing.com
dev2-www.paramountglobalservicing.com
dev2-www.promopassport.com
ext-jira.cbsi.com
glim.cbsawswcmktg.com
kca.nickelodeon.ee
kca.nickelodeon.lt
kca.nickelodeon.lv
kca.nickelodeon.ua
mimhdi.adp.paramount.tech
mtvplus.adp.paramount.tech
netmix.cbsawswcmktg.com
neutron-api.paramount.tech
odata.publife.desa.telefe.com.ar
pmtprodops.adp.paramount.tech
pp-www.home.paramountglobalservicing.com
pp-www.paramountglobalservicing.com
pp-www.promopassport.com
prd.cpauthentication.nick.com
pressviewing.mtvema.com
primetimedelivery.cbspromo.com
prodops.adp.paramount.tech
promo.paramount.digital
publife.desa.telefe.com.ar
publishing.paramountpictures.com
qa-neutron-api.paramount.tech
qa-www.home.paramountglobalservicing.com
qa-www.paramountglobalservicing.com
qa-www.promopassport.com
qa.noggintime.com
qa2-www.home.paramountglobalservicing.com
qa2-www.paramountglobalservicing.com
qa2-www.promopassport.com
qedata.viacomcbs.com
reporting-bugfix.publife.desa.telefe.com.ar
reporting.publife.desa.telefe.com.ar
stage-qedata.viacomcbs.com
stage-tcms.viacomcbs.com
tcms.viacomcbs.com
telefe.adp.paramount.tech
twitter-voting.vimnservices.com
uat-www.promopassport.com
uat.ams.cbs.com
uat2-www.promopassport.com
uatplus.ams.cbs.com
uk.qa-neutron-api.paramount.tech
viacomcbs.com
www.findmycbs.com
www.mobituaries.com
www.nick.com.au
www.noggintime.com
www.paramountpictures.com
www.paramountspecialevents.com
www.paramountstudios.com
www.paramountstudiotour.com
www.promopassport.com
www.smithsonianchannel.com
www.tmntsf.com
www.vcnipeople.com

Other certificates including the domain name viacomcbs.com

(limited to 100 certificates)
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
ir.viacomcbs.com
image.serviciokia.com.ec
cloud.email.viacomcbs.com
MTVI.com
image.serviciokia.com.ec
www.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
www.viacom.tech
www.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
stillsarchive.viacomcbs.com
image.serviciokia.com.ec
inview.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
stillsarchive.viacomcbs.com
xdam-nonprod.viacomcbs.com
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
mtvi.com
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
san-5-s11.tlsprovisioning.exacttarget.com
image.serviciokia.com.ec
creativeandstrategy.viacomcbs.com
paramount.com
image.serviciokia.com.ec
image.serviciokia.com.ec
halloweencontest.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
mtvi.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
stillsarchiveuat.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdsiportal.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
eai-prd.viacomcbs.com
creativelibrary.viacomcbs.com
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
mtvi.com
www.viacomcbs.com
www.viacom.tech
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
origin.prod-acquia.viacomcbs.com
www.viacomcbs.com
inview.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
mtvi.com
MTVI.com
devplus.phxdocstore.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
MTVI.com

Certificate

The complete raw certificate details for www.viacomcbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPGzCCDgOgAwIBAgIQCLYe/Muid4QHRuljF9ZyZDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzExMDIwMDAwMDBa
Fw0yNDExMDIyMzU5NTlaMHIxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y
azERMA8GA1UEBxMITmV3IFlvcmsxITAfBgNVBAoTGFZJQUNPTSBJTlRFUk5BVElP
TkFMIElOQzEaMBgGA1UEAxMRd3d3LnZpYWNvbWNicy5jb20wWTATBgcqhkjOPQIB
BggqhkjOPQMBBwNCAAT7ZncnS17I4XIyvDzqYY9KXnkmvOEC2x1+q+7GTQ6ejcCr
+9+UIZwhJW8GGPXc7Q9L5yOk7zEL50bhHv5GUhdKo4IMmTCCDJUwHwYDVR0jBBgw
FoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFDkRSQK9MQijt6AUynjt
vFTdhqjXMIIJPwYDVR0RBIIJNjCCCTKCEXd3dy52aWFjb21jYnMuY29tghQqLmFw
cC53ZWJwbGV4LnZtbi5pb4IJKi5jYnMuY29tghUqLmVkZW4ucGFyYW1vdW50LnRl
Y2iCFyouZXZlbnRzLnBhcmFtb3VudC50ZWNoghgqLm5ldXRyb24ucGFyYW1vdW50
LnRlY2iCDCoubm9nZ2luLmNvbYITKi5ucy5wYXJhbW91bnQudGVjaIIPKi5wYXJh
bW91bnQuY29tghAqLnBhcmFtb3VudC50ZWNoghIqLnBhcmFtb3VudG1zYy5jb22C
DyoudmlhY29tY2JzLmNvbYIfYWN0aXZhdGUuc21pdGhzb25pYW5jaGFubmVsLmNv
bYIaYXBwcy5wYXJhbW91bnRwaWN0dXJlcy5jb22CIWJ1Z2ZpeC5wdWJsaWZlLmRl
c2EudGVsZWZlLmNvbS5hcoIbY3AxMDU3MDEuYWRwLnBhcmFtb3VudC50ZWNoghtj
cDExMjM2MC5hZHAucGFyYW1vdW50LnRlY2iCG2NwNDUwODg4LmFkcC5wYXJhbW91
bnQudGVjaIIbY3A0Nzc0ODEuYWRwLnBhcmFtb3VudC50ZWNoghtjcDQ3NzQ4Mi5h
ZHAucGFyYW1vdW50LnRlY2iCG2NwNDc5MTg0LmFkcC5wYXJhbW91bnQudGVjaIIb
Y3A1NDE4NjUuYWRwLnBhcmFtb3VudC50ZWNoghtjcDU0MTg2Ny5hZHAucGFyYW1v
dW50LnRlY2iCG2NwNTQxODY4LmFkcC5wYXJhbW91bnQudGVjaIIpZGV2LXd3dy5o
b21lLnBhcmFtb3VudGdsb2JhbHNlcnZpY2luZy5jb22CJGRldi13d3cucGFyYW1v
dW50Z2xvYmFsc2VydmljaW5nLmNvbYIZZGV2LXd3dy5wcm9tb3Bhc3Nwb3J0LmNv
bYISZGV2Lm5vZ2dpbnRpbWUuY29tgipkZXYyLXd3dy5ob21lLnBhcmFtb3VudGds
b2JhbHNlcnZpY2luZy5jb22CJWRldjItd3d3LnBhcmFtb3VudGdsb2JhbHNlcnZp
Y2luZy5jb22CGmRldjItd3d3LnByb21vcGFzc3BvcnQuY29tghFleHQtamlyYS5j
YnNpLmNvbYIVZ2xpbS5jYnNhd3N3Y21rdGcuY29tghJrY2Eubmlja2Vsb2Rlb24u
ZWWCEmtjYS5uaWNrZWxvZGVvbi5sdIISa2NhLm5pY2tlbG9kZW9uLmx2ghJrY2Eu
bmlja2Vsb2Rlb24udWGCGW1pbWhkaS5hZHAucGFyYW1vdW50LnRlY2iCGm10dnBs
dXMuYWRwLnBhcmFtb3VudC50ZWNoghduZXRtaXguY2JzYXdzd2Nta3RnLmNvbYIa
bmV1dHJvbi1hcGkucGFyYW1vdW50LnRlY2iCIG9kYXRhLnB1YmxpZmUuZGVzYS50
ZWxlZmUuY29tLmFygh1wbXRwcm9kb3BzLmFkcC5wYXJhbW91bnQudGVjaIIocHAt
d3d3LmhvbWUucGFyYW1vdW50Z2xvYmFsc2VydmljaW5nLmNvbYIjcHAtd3d3LnBh
cmFtb3VudGdsb2JhbHNlcnZpY2luZy5jb22CGHBwLXd3dy5wcm9tb3Bhc3Nwb3J0
LmNvbYIdcHJkLmNwYXV0aGVudGljYXRpb24ubmljay5jb22CF3ByZXNzdmlld2lu
Zy5tdHZlbWEuY29tgh5wcmltZXRpbWVkZWxpdmVyeS5jYnNwcm9tby5jb22CGnBy
b2RvcHMuYWRwLnBhcmFtb3VudC50ZWNoghdwcm9tby5wYXJhbW91bnQuZGlnaXRh
bIIacHVibGlmZS5kZXNhLnRlbGVmZS5jb20uYXKCIHB1Ymxpc2hpbmcucGFyYW1v
dW50cGljdHVyZXMuY29tgh1xYS1uZXV0cm9uLWFwaS5wYXJhbW91bnQudGVjaIIo
cWEtd3d3LmhvbWUucGFyYW1vdW50Z2xvYmFsc2VydmljaW5nLmNvbYIjcWEtd3d3
LnBhcmFtb3VudGdsb2JhbHNlcnZpY2luZy5jb22CGHFhLXd3dy5wcm9tb3Bhc3Nw
b3J0LmNvbYIRcWEubm9nZ2ludGltZS5jb22CKXFhMi13d3cuaG9tZS5wYXJhbW91
bnRnbG9iYWxzZXJ2aWNpbmcuY29tgiRxYTItd3d3LnBhcmFtb3VudGdsb2JhbHNl
cnZpY2luZy5jb22CGXFhMi13d3cucHJvbW9wYXNzcG9ydC5jb22CFHFlZGF0YS52
aWFjb21jYnMuY29tgityZXBvcnRpbmctYnVnZml4LnB1YmxpZmUuZGVzYS50ZWxl
ZmUuY29tLmFygiRyZXBvcnRpbmcucHVibGlmZS5kZXNhLnRlbGVmZS5jb20uYXKC
GnN0YWdlLXFlZGF0YS52aWFjb21jYnMuY29tghhzdGFnZS10Y21zLnZpYWNvbWNi
cy5jb22CEnRjbXMudmlhY29tY2JzLmNvbYIZdGVsZWZlLmFkcC5wYXJhbW91bnQu
dGVjaIIfdHdpdHRlci12b3RpbmcudmltbnNlcnZpY2VzLmNvbYIZdWF0LXd3dy5w
cm9tb3Bhc3Nwb3J0LmNvbYIPdWF0LmFtcy5jYnMuY29tghp1YXQyLXd3dy5wcm9t
b3Bhc3Nwb3J0LmNvbYITdWF0cGx1cy5hbXMuY2JzLmNvbYIgdWsucWEtbmV1dHJv
bi1hcGkucGFyYW1vdW50LnRlY2iCDXZpYWNvbWNicy5jb22CEXd3dy5maW5kbXlj
YnMuY29tghN3d3cubW9iaXR1YXJpZXMuY29tgg93d3cubmljay5jb20uYXWCEnd3
dy5ub2dnaW50aW1lLmNvbYIZd3d3LnBhcmFtb3VudHBpY3R1cmVzLmNvbYIed3d3
LnBhcmFtb3VudHNwZWNpYWxldmVudHMuY29tghh3d3cucGFyYW1vdW50c3R1ZGlv
cy5jb22CG3d3dy5wYXJhbW91bnRzdHVkaW90b3VyLmNvbYIVd3d3LnByb21vcGFz
c3BvcnQuY29tghp3d3cuc21pdGhzb25pYW5jaGFubmVsLmNvbYIOd3d3LnRtbnRz
Zi5jb22CEnd3dy52Y25pcGVvcGxlLmNvbTA+BgNVHSAENzA1MDMGBmeBDAECAjAp
MCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0P
AQH/BAQDAgOIMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0f
BIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRU
TFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdp
Y2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMH8GCCsG
AQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
MEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl
cnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAwggF+Bgor
BgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI
WUZxH7WbAAABi460BucAAAQDAEcwRQIhAIGdg2M+D6+eMurJBvwoLLFuUJHwP5nz
YfLULdMwyPd1AiA/hfYJv7HO1nPPC/BlpIIA8OANjd+g2FfVXip8GFu47wB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi460BtgAAAQDAEcwRQIh
AKgKiqiOmp6VBALBNgrq9ojXqR6TdmdE6pizQqkWMv+QAiAt3QiWEIRXfeJCLQqr
vu0IBKk+NnIQ6CzNLZYwlrRKLwB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k
PTBI1/urAAABi460Bt0AAAQDAEcwRQIgGHlPWqg2BxriYVGEQfJsQPML6x+jYhtG
AVHfY5VTitICIQDBnX6jqXZ1cLQj8jamQWqmXMXrydqCKo8oN/2EMmpIyTANBgkq
hkiG9w0BAQsFAAOCAQEAV1D+Orzo1MqyZMBQi4LBqPSBiiARw0RJ7WSkpxu3NcQV
N+KVd3tuuquiflBz+CbpiN7XcDb7GxisCXIfhPUu16qNSRiCj6zvIP3BcRPlO6bF
e7RUcGaUBteDD3bFhJI/bNMAbI0M+jjmZA773yJe8QpwolS5kaGTOOsalT48XDpw
G+FA+rpC2EgnU5mRSKxMipU9n/W0Gu7bgEKeR3vJEk2dwa2ESo24QTdftQOMEe2o
DIdy3V9xoxaWmEBUct1AYZc9gSV2LmqErdLS5o4UQirFutabEqw/yoBA47Q2lEP4
MiCoTfAduVFKqnPufqUrNUFkNT3X5OPAUvPj7w6lKA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE+2Z3J0teyOFyMrw86mGPSl55Jrzh
Atsdfqvuxk0Ono3Aq/vflCGcISVvBhj13O0PS+cjpO8xC+dG4R7+RlIXSg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11579450495339596129965459918095282788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VIACOM INTERNATIONAL INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacomcbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004fb6677274b5ec8e17232bc3cea618f4a5e7926bce102db1d7eabeec64d0e9e8dc0abfbdf94219c21256f0618f5dced0f4be723a4ef310be746e11efe4652174a
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39114902bd3108a3b7a014ca78edbc54dd86a8d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.webplex.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eden.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.events.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neutron.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ns.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramountmsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activate.smithsonianchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.paramountpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugfix.publife.desa.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp105701.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp112360.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp450888.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477481.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477482.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp479184.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541865.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541867.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541868.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.noggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-jira.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glim.cbsawswcmktg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimhdi.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvplus.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netmix.cbsawswcmktg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odata.publife.desa.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtprodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.cpauthentication.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressviewing.mtvema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primetimedelivery.cbspromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.paramount.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publife.desa.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publishing.paramountpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-neutron-api.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.noggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qedata.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting-bugfix.publife.desa.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.publife.desa.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qedata.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-tcms.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcms.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefe.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter-voting.vimnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.ams.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatplus.ams.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.qa-neutron-api.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findmycbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountspecialevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountstudiotour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmntsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vcnipeople.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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