www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:db:da:2d:06:3f:96:70:7c:1a:40:89:c6:f3:2f:82 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:db:da:2d:06:3f:96:70:7c:1a:40:89:c6:f3:2f:82
Serial Number (int): 15763046098147893874151758292638183298
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:90:d5:8b:1c:65:39:51:21:d4:59:99:d7:57:88:04:46:ca:21:8a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3c:f1:dc:3c:4b:14:79:90:50:c6:39:fc:47:24:c9:31:52:74:5e:23
Fingerprint (sha256): 0c:9a:19:17:ff:31:7b:e1:85:9d:42:77:66:10:99:db:a5:bd:fa:a7:cf:5e:b4:9c:60:7a:31:38:3e:61:3b:56

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacom.com
advertising.viacomcbs.digital
api.cc.com
api.spike.com
auth.id.viacom.com
c3-linear-monitoring.paramountmsc.com
dashboard.api.noggin-q.mtvi.com
detektive.mtvnservices.com
dev-c3-linear-monitoring.paramountmsc.com
dev-nx-cloud.paramountmsc.com
dlvrsvc-uat.mtvnservices.com
featuredcreators.vidcon.com
feeds.mtvnservices-q.mtvi.com
files.cc.com
files.spike.com
keysvc-uat.mtvnservices.com
la.nickjr.tv
manual.vidcon.com
media-utils-live.mtvnservices-q.mtvi.com
media-utils-live.mtvnservices.com
media.mtvi.com
media.mtvnservices-d.mtvi.com
media.mtvnservices-q.mtvi.com
mobilefiles.nick.com
origin.fs.ts.mtvnservices.com
origin.l3.ts.mtvnservices.com
origin.l3.tsq.mtvnservices.com
origin.sp.ts.mtvnservices.com
origin.sp.tsq.mtvnservices.com
origin.vz.ts.mtvnservices.com
origin.vz.tsq.mtvnservices.com
player.mtvnservices-d.mtvi.com
player.mtvnservices-q.mtvi.com
player.mtvnservices.com
pp.cbsaffiliates.com
qa-glim-operationsconsole.paramountmsc.com
recruitment.feedback.viacom.tech
search.mtvnservices-q.mtvi.com
sponsors.vidcon.com
stg.cbsaffiliates.com
synbible.cbstvd.com
testing.bellator.vmn.io
testing.forums.southpark.de.vmn.io
testing.forums.southpark.vmn.io
testing.isleofmtv.vmn.io
tve.mtvnservices-q.mtvi.com
tve.mtvnservices.com
tveauth.vimn-q.mtvi.com
tveguest.vimn-q.mtvi.com
uat-glim-operationsconsole.paramountmsc.com
uat.cbsbrand.com
uat.startrekportal.com
viacom.com
videos.mtvnn.com
vip.viacom.tech-q.mtvi.com
vsf.vimnservices.com
www.bellator.com
www.betcelebratesher.com
www.cbsaffiliates.com
www.cbsbrand.com
www.cbsfootagelicensing.com
www.cbsnewsfootagelicensing.com
www.firsttimedirectors-q.mtvi.com
www.isleofmtv.com
www.keepcbs-q.mtvi.com
www.keepviacomcbs-q.mtvi.com
www.mtv.co.il
www.mtv.com.au
www.mtv.com.br
www.mtv.nl
www.mtvasia.com
www.mtventertainment-d.mtvi.com
www.mtventertainment-q.mtvi.com
www.mtvpress.com
www.mtvunderthethumb.com
www.mysuperstay16.com
www.nick.co.uk
www.nickelodeonjunior.fr
www.nickelodeonparents.com
www.nickhelps-q.mtvi.com
www.nickjr.com.au
www.nickjr.com.br
www.nickjr.com.pl
www.nickjr.de
www.nickjr.dk
www.nickjr.es
www.nickjr.nl
www.nickjr.tv
www.pandemmyawards.com
www.paramount.com
www.paramountmovies.com
www.paramountnetwork.com
www.paramountnetwork.cz
www.paramountnetwork.es
www.paramountnetwork.hu
www.startrekportal.com
www.vh1.com
www.vh1press.com
xbox.mtvnservices-q.mtvi.com

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQCjCCDvKgAwIBAgIQC9vaLQY/lnB8GkCJxvMvgjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMzExMjMwMDAwMDBaFw0yNDExMjcyMzU5NTlaMHAxCzAJBgNVBAYTAlVTMREw
DwYDVQQIEwhOZXcgWW9yazERMA8GA1UEBxMITmV3IFlvcmsxIjAgBgNVBAoTGVZp
YWNvbSBJbnRlcm5hdGlvbmFsIEluYy4xFzAVBgNVBAMTDnd3dy52aWFjb20uY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK2Yba2gtRXjigz4fgMe
FX4NG6c+1RFgudCbX25qDG+o9zgga53ZfYEQGdEzpey34dpxKeCeTYijTvTskA5+
QS0V9a0U39NV9EYbv3FtnUCoSj6Ti7rDHT7B0B24fS+HoOc8YEJCr9+vHdXBBxtv
MB8YpQoN9txjw/X/4CKROXPkdpF/0y4rtKE4pHp3BglNtdbh7mg2xG6tH/Dd6Cgm
wNQyX1qbqBtnF2vjHJR3NM7AAcLtb1V7/urQtGBE32XmqZS5HLmuCvnDTkOLho4r
1VD0l9nes7oM8+/q0EsRjLjhoXyqs0kPaKxmn5I6roszQ1Q8DEsBofWpGRpKoJ2K
GQIDAQABo4IMsDCCDKwwHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUw
HQYDVR0OBBYEFKaQ1YscZTlRIdRZmddXiARGyiGKMIIJsgYDVR0RBIIJqTCCCaWC
Dnd3dy52aWFjb20uY29tgh1hZHZlcnRpc2luZy52aWFjb21jYnMuZGlnaXRhbIIK
YXBpLmNjLmNvbYINYXBpLnNwaWtlLmNvbYISYXV0aC5pZC52aWFjb20uY29tgiVj
My1saW5lYXItbW9uaXRvcmluZy5wYXJhbW91bnRtc2MuY29tgh9kYXNoYm9hcmQu
YXBpLm5vZ2dpbi1xLm10dmkuY29tghpkZXRla3RpdmUubXR2bnNlcnZpY2VzLmNv
bYIpZGV2LWMzLWxpbmVhci1tb25pdG9yaW5nLnBhcmFtb3VudG1zYy5jb22CHWRl
di1ueC1jbG91ZC5wYXJhbW91bnRtc2MuY29tghxkbHZyc3ZjLXVhdC5tdHZuc2Vy
dmljZXMuY29tghtmZWF0dXJlZGNyZWF0b3JzLnZpZGNvbi5jb22CHWZlZWRzLm10
dm5zZXJ2aWNlcy1xLm10dmkuY29tggxmaWxlcy5jYy5jb22CD2ZpbGVzLnNwaWtl
LmNvbYIba2V5c3ZjLXVhdC5tdHZuc2VydmljZXMuY29tggxsYS5uaWNranIudHaC
EW1hbnVhbC52aWRjb24uY29tgihtZWRpYS11dGlscy1saXZlLm10dm5zZXJ2aWNl
cy1xLm10dmkuY29tgiFtZWRpYS11dGlscy1saXZlLm10dm5zZXJ2aWNlcy5jb22C
Dm1lZGlhLm10dmkuY29tgh1tZWRpYS5tdHZuc2VydmljZXMtZC5tdHZpLmNvbYId
bWVkaWEubXR2bnNlcnZpY2VzLXEubXR2aS5jb22CFG1vYmlsZWZpbGVzLm5pY2su
Y29tgh1vcmlnaW4uZnMudHMubXR2bnNlcnZpY2VzLmNvbYIdb3JpZ2luLmwzLnRz
Lm10dm5zZXJ2aWNlcy5jb22CHm9yaWdpbi5sMy50c3EubXR2bnNlcnZpY2VzLmNv
bYIdb3JpZ2luLnNwLnRzLm10dm5zZXJ2aWNlcy5jb22CHm9yaWdpbi5zcC50c3Eu
bXR2bnNlcnZpY2VzLmNvbYIdb3JpZ2luLnZ6LnRzLm10dm5zZXJ2aWNlcy5jb22C
Hm9yaWdpbi52ei50c3EubXR2bnNlcnZpY2VzLmNvbYIecGxheWVyLm10dm5zZXJ2
aWNlcy1kLm10dmkuY29tgh5wbGF5ZXIubXR2bnNlcnZpY2VzLXEubXR2aS5jb22C
F3BsYXllci5tdHZuc2VydmljZXMuY29tghRwcC5jYnNhZmZpbGlhdGVzLmNvbYIq
cWEtZ2xpbS1vcGVyYXRpb25zY29uc29sZS5wYXJhbW91bnRtc2MuY29tgiByZWNy
dWl0bWVudC5mZWVkYmFjay52aWFjb20udGVjaIIec2VhcmNoLm10dm5zZXJ2aWNl
cy1xLm10dmkuY29tghNzcG9uc29ycy52aWRjb24uY29tghVzdGcuY2JzYWZmaWxp
YXRlcy5jb22CE3N5bmJpYmxlLmNic3R2ZC5jb22CF3Rlc3RpbmcuYmVsbGF0b3Iu
dm1uLmlvgiJ0ZXN0aW5nLmZvcnVtcy5zb3V0aHBhcmsuZGUudm1uLmlvgh90ZXN0
aW5nLmZvcnVtcy5zb3V0aHBhcmsudm1uLmlvghh0ZXN0aW5nLmlzbGVvZm10di52
bW4uaW+CG3R2ZS5tdHZuc2VydmljZXMtcS5tdHZpLmNvbYIUdHZlLm10dm5zZXJ2
aWNlcy5jb22CF3R2ZWF1dGgudmltbi1xLm10dmkuY29tghh0dmVndWVzdC52aW1u
LXEubXR2aS5jb22CK3VhdC1nbGltLW9wZXJhdGlvbnNjb25zb2xlLnBhcmFtb3Vu
dG1zYy5jb22CEHVhdC5jYnNicmFuZC5jb22CFnVhdC5zdGFydHJla3BvcnRhbC5j
b22CCnZpYWNvbS5jb22CEHZpZGVvcy5tdHZubi5jb22CGnZpcC52aWFjb20udGVj
aC1xLm10dmkuY29tghR2c2YudmltbnNlcnZpY2VzLmNvbYIQd3d3LmJlbGxhdG9y
LmNvbYIYd3d3LmJldGNlbGVicmF0ZXNoZXIuY29tghV3d3cuY2JzYWZmaWxpYXRl
cy5jb22CEHd3dy5jYnNicmFuZC5jb22CG3d3dy5jYnNmb290YWdlbGljZW5zaW5n
LmNvbYIfd3d3LmNic25ld3Nmb290YWdlbGljZW5zaW5nLmNvbYIhd3d3LmZpcnN0
dGltZWRpcmVjdG9ycy1xLm10dmkuY29tghF3d3cuaXNsZW9mbXR2LmNvbYIWd3d3
LmtlZXBjYnMtcS5tdHZpLmNvbYIcd3d3LmtlZXB2aWFjb21jYnMtcS5tdHZpLmNv
bYINd3d3Lm10di5jby5pbIIOd3d3Lm10di5jb20uYXWCDnd3dy5tdHYuY29tLmJy
ggp3d3cubXR2Lm5sgg93d3cubXR2YXNpYS5jb22CH3d3dy5tdHZlbnRlcnRhaW5t
ZW50LWQubXR2aS5jb22CH3d3dy5tdHZlbnRlcnRhaW5tZW50LXEubXR2aS5jb22C
EHd3dy5tdHZwcmVzcy5jb22CGHd3dy5tdHZ1bmRlcnRoZXRodW1iLmNvbYIVd3d3
Lm15c3VwZXJzdGF5MTYuY29tgg53d3cubmljay5jby51a4IYd3d3Lm5pY2tlbG9k
ZW9uanVuaW9yLmZyghp3d3cubmlja2Vsb2Rlb25wYXJlbnRzLmNvbYIYd3d3Lm5p
Y2toZWxwcy1xLm10dmkuY29tghF3d3cubmlja2pyLmNvbS5hdYIRd3d3Lm5pY2tq
ci5jb20uYnKCEXd3dy5uaWNranIuY29tLnBsgg13d3cubmlja2pyLmRlgg13d3cu
bmlja2pyLmRrgg13d3cubmlja2pyLmVzgg13d3cubmlja2pyLm5sgg13d3cubmlj
a2pyLnR2ghZ3d3cucGFuZGVtbXlhd2FyZHMuY29tghF3d3cucGFyYW1vdW50LmNv
bYIXd3d3LnBhcmFtb3VudG1vdmllcy5jb22CGHd3dy5wYXJhbW91bnRuZXR3b3Jr
LmNvbYIXd3d3LnBhcmFtb3VudG5ldHdvcmsuY3qCF3d3dy5wYXJhbW91bnRuZXR3
b3JrLmVzghd3d3cucGFyYW1vdW50bmV0d29yay5odYIWd3d3LnN0YXJ0cmVrcG9y
dGFsLmNvbYILd3d3LnZoMS5jb22CEHd3dy52aDFwcmVzcy5jb22CHHhib3gubXR2
bnNlcnZpY2VzLXEubXR2aS5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggr
BgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAz
oDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTgu
Y3JsMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5n
ZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0
LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisG
AQQB1nkCBAIEggFuBIIBagFoAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ
RnEftZsAAAGL+Yb3iAAABAMARzBFAiEA1btOQJn9SUXcGlKmnQqcDJKwsw0sYfWg
AzvPzbxREyACIDXM34bgBwg1CgXuc/j46SAgo9h1hAeBppw9qY/HyrYWAHYASLDj
a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGL+Yb3sAAABAMARzBFAiEA
oe+YrEM5hhYVtxgUUpfzwLfAbJ843lOPbNN3gmIMgyACIFnokkj4iXo9Ax2gBQyq
a0GpPqbl0rMZ5o9q+D5Ho7FeAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9
MEjX+6sAAAGL+Yb3hwAABAMARzBFAiEAwYGxXOME7Q1uiES5cgR/YnbSTHgva/wR
ijtlb1OlGcECIBBvzK1DE7x8rftRx34gVDmrYdQN3pHi3oJ2/WgXG+iNMA0GCSqG
SIb3DQEBCwUAA4IBAQBte6yI6+Ngsv4RhMlUskGQS/bRuS63MkmUGuddCq2qyWvm
MfcV69ZV5tvz6yOIZnNWsjTBt6ZrPjEScwPkY62MaOpZqCTreZ4JuzH/NDdbZKLZ
MKlUXf88/zSr15vRIt9WDdfVezhvuJMNRxyNi19pciS/DNeyMjEba/r0q0FTwPQD
FM+xyz3NE6JM7U1DG3YlzJwVMRU8fa3LLITqJbVT0UEw1ZyzCnQnPVZ96862ZXUx
L5zZ4cjQdQwr6gNDihBgbNBep2AzIp44aP5gdQqljin1fkBu+1M+dzE2o41x69J4
cGDxT6+964kj5A3ccphI5weMu/ZVoykowU5ptN4k
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK2Yba2gtRXjigz4fgMe
FX4NG6c+1RFgudCbX25qDG+o9zgga53ZfYEQGdEzpey34dpxKeCeTYijTvTskA5+
QS0V9a0U39NV9EYbv3FtnUCoSj6Ti7rDHT7B0B24fS+HoOc8YEJCr9+vHdXBBxtv
MB8YpQoN9txjw/X/4CKROXPkdpF/0y4rtKE4pHp3BglNtdbh7mg2xG6tH/Dd6Cgm
wNQyX1qbqBtnF2vjHJR3NM7AAcLtb1V7/urQtGBE32XmqZS5HLmuCvnDTkOLho4r
1VD0l9nes7oM8+/q0EsRjLjhoXyqs0kPaKxmn5I6roszQ1Q8DEsBofWpGRpKoJ2K
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15763046098147893874151758292638183298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25838217306902929015577278123683018405140314108464117966974431782169994213207644116612941959156996933491098575920285030451460786905080537873526412750424316880632542446361542128320537205097495479702004124820616207914131753400920097399452356923995514097530286233301450468924698493146366349712582912412806403116676821003121286124190612679211610612730324617132836515987570124319490573439882576472371347913249044592787341661389018421921146816021029943898985939095389853168147972906903293917553838142498095977129802033709139938275358280626671118115545402172790198663981478907904260485954350508455005810638998179491855829529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a690d58b1c65395121d45999d757880446ca218a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2473 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c3-linear-monitoring.paramountmsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.api.noggin-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-c3-linear-monitoring.paramountmsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-nx-cloud.paramountmsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featuredcreators.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp.cbsaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-glim-operationsconsole.paramountmsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsors.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cbsaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synbible.cbstvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.isleofmtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-glim-operationsconsole.paramountmsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cbsbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.startrekportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsf.vimnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betcelebratesher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbsaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbsbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbsfootagelicensing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbsnewsfootagelicensing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectors-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isleofmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysuperstay16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonjunior.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickhelps-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandemmyawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.startrekportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d7bac88ebe360b2fe1184c954b241904bf6d1b92eb73249941ae75d0aadaac96be631f715ebd655e6dbf3eb2388667356b234c1b7a66b3e31127303e463ad8c68ea59a824eb799e09bb31ff34375b64a2d930a9545dff3cff34abd79bd122df560dd7d57b386fb8930d471c8d8b5f697224bf0cd7b232311b6bfaf4ab4153c0f40314cfb1cb3dcd13a24ced4d431b7625cc9c1531153c7dadcb2c84ea25b553d14130d59cb30a74273d567debceb66575312f9cd9e1c8d0750c2bea03438a10606cd05ea76033229e3868fe60750aa58e29f57e406efb533e773136a38d71ebd2787060f14fafbdeb8923e40ddc729848e7078cbbf655a32928c14e69b4de24