www.cbs.com

- CBS Broadcasting Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:72:fd:7e:42:cf:1c:7f:55:44:e3:64:ef:e7:ee:ea was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CBS Broadcasting Inc.

Organization: CBS Broadcasting Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:72:fd:7e:42:cf:1c:7f:55:44:e3:64:ef:e7:ee:ea
Serial Number (int): 8572431269637059125010420684806418154
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 57:97:2f:37:ba:8e:bb:ac:d6:3a:c9:39:aa:52:0c:0d:94:bf:07:4a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 22:7d:19:10:f6:ec:ea:f4:b2:35:46:63:fb:71:fb:0c:e9:8e:af:62
Fingerprint (sha256): 0d:48:cd:e8:31:41:57:d3:c5:86:99:bc:91:ef:97:2f:17:03:e8:4c:97:16:85:65:aa:5d:44:71:d4:cc:60:8e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.cbs.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cbs.com
cbs.com
pm2.fonts.cbsnews.com
cdn3.cnet.com
downloads-test.zdnet.com
static5.comicvine.com
thumbnails5.cbsig.net
static.comicvine.com
rev.cbsi.com
wwwimage.cbsstatic.com
www.techrepublic.com
static3.comicvine.com
pmd.tvgcdn.net
secure.tv.com
cnet2.cbsistatic.com
wwwimage-secure3.cbsstatic.com
wwwimage-secure.cbsstatic.com
static5.giantbomb.com
cdn.cnetcontent.com
search.chow.com
mobilelistings.tvguide.com
cdn4.cnet.com
cdn2.cnet.com
cnet4.cbsistatic.com
podcast-files.cnet.com
movies.tvguide.com
thumbnails1.cbsig.net
static-3.tvgcdn.net
graphics.fansonly.com
test.cnet.com
graphics.collegesports.com
www.scout.com
dw.cbsimg.net
amp.tvguide.com
uat.cnet.com
cnet3.cbsistatic.com
cnet1.cbsistatic.com
cc.cnetcontent.com
www.zdnet.com
hdvod.tvgcdn.net
www.sho.com
cimg.tvgcdn.net
api.metacritic.com
pm2.fonts.cnet.com
downloads.zdnet.com
static2.comicvine.com
thumbnails4.cbsig.net
thumbnails2.cbsig.net
canstatic.cbs.com
static.metacritic.com
www.tvguide.com
video.tvguide.com
thumbnails.cbsig.net
amp.etonline.com
cdn1.cnet.com
videoplayer.cbs.com
www.metacritic.com
www.cnet.com
static4.giantbomb.com
static-5.tvgcdn.net
vidtech.cbsinteractive.com
chowhound.chow.com
test.zdnet.com
static.giantbomb.com
static-4.tvgcdn.net
static1.comicvine.com
www.giantbomb.com
static3.giantbomb.com
www.chowmagazine.com
dws.cbsimg.net
static4.comicvine.com
www.chow.com
static-1.tvgcdn.net
cdx.cbs.com
flv.sales.cbs.com
wwwimage-secure4.cbsstatic.com
wwwimage-secure1.cbsstatic.com
amp.insideedition.com
test.techrepublic.com
rss.tvguide.com
www.chowstatic.com
fonts.cbsi.com
www.chowhound.com
feed.cnet.com
wwwimage-secure2.cbsstatic.com
static1.giantbomb.com
sportsline-sdg.cbsistatic.com
mapi.tvguide.com
thumbnails3.cbsig.net
secure.metacritic.com
www.sportsline.com
wwwimage-secure5.cbsstatic.com
cbssports.cbsi.com
static2.giantbomb.com
static-2.tvgcdn.net
static.tvgcdn.net

Other certificates including the domain name cbs.com

(limited to 100 certificates)
dev-broker.mediapo.cbs.com
*.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
concur.cbs.com
box.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
viacomcbs-live.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
ny-asperafaspex.cwd.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
*.lb.cbs.com
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
airspace.cbsivideo.com
prospective.shared.global.fastly.net
*.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
adfs.cbs.com
audienceservices.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacomcbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
*.airspace-g.cbsivideo.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
cbsaavideo.com
shoogle.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
uccaas-expc.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
*.cbs.com
fluuid-dev.cbs.com
b3.shared.global.fastly.net
b3.shared.global.fastly.net
www.viacomcbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacom.tech
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
ehs.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
*.cbs.com
www.cbs.com
cbsco-cucm01-bv1.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com

Certificate

The complete raw certificate details for www.cbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Im543Zs+IKwic6WuKf
AAMdHhFSeXpOSTHKrMqAMO+hcgCoputHdAFKIBnkyA/sUx5Vt3gDLqMGj1oMx8DZ
aGjLJPzHO5QTj1maGYiAbeq4I1IUG6aOWnbt6XYReRsDDL8fefN8W3py5yckOsRW
ETZXYPUrKny4tEblcSY3Z996jom95H7f0pMaKl1fzhCZr1D0qzkcrN+v3P6DI8RG
euZxz6IyuliF5Anr7ZDCIL+yFC+e+TvM4HBunHOIVYSPJ3rljVV7PF/1WO/XH0fN
K2KMcvCnXXbyrTcc05pFMlIoVlYBR2SOu5XcGmh9Gk1WIjJSMoy0UQkafdWvBEmR
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8572431269637059125010420684806418154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBS Broadcasting Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27702479222309607113238585667349852726642823912374691424852572887645774338252988334238352969634424558883111929125198102110057496685256718097630415631203446791805506190525729509556808417868379912307571325125524517878788665977036985715112329908650688823188438190139727107242426856637821228730902860908794088788581855169912831030538584030128163130695932338607742580231658471198867796831517083924422376252308883781545848340594793986820480910215331505663255584125282573511771121908334405789135139218908137204605624001618940121196100644827026905335140966342664485108872782666517932959267728994678425772285308149124882338077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57972f37ba8ebbacd63ac939aa520c0d94bf074a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1984 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cbsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads-test.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails5.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rev.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmd.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet2.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure3.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilelistings.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet4.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast-files.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails1.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-3.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.fansonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.collegesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dw.cbsimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet3.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet1.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdvod.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimg.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails4.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails2.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canstatic.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.etonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoplayer.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-5.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidtech.cbsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chowhound.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-4.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.cbsimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-1.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdx.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flv.sales.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure4.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure1.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.insideedition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowhound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure2.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsline-sdg.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapi.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails3.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure5.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbssports.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-2.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tvgcdn.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a4a236f8d0000040300483046022100e1585453725be767774b07306d50cde8aca1fcd47687c84637a597f42a3217cd022100cecc0ea05695b6685f63dd7eb3ef6827a1a1abc8f02d477cb946cb061ff9c0310076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a4a2370a2000004030047304502202233bc04b8d8e24d385a2daabcf98d7112226a57fa1851fae4f838020f0d2a60022100d177d356c6a9c26c84bda8ebb94b7565b760f4d4ec6abfd50f511949a3a55bb1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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