cfc.paramount.com

Issued by R3

About this certificate

This digital certificate with serial number 04:49:e6:d0:03:f9:1e:89:5b:9e:55:b6:09:a1:e7:4a:85:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cfc.paramount.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:e6:d0:03:f9:1e:89:5b:9e:55:b6:09:a1:e7:4a:85:29
Serial Number (int): 373596559029631092197031424847957344290089
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:34:4a:f8:b5:e3:29:38:49:c4:95:cc:57:f2:43:e1:bd:43:a2:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:67:d6:28:38:18:99:4a:4c:c0:49:22:88:c0:71:d9:52:e4:d1:b4
Fingerprint (sha256): 0f:8c:b2:1c:2e:42:06:d4:30:cb:36:52:ea:5a:c5:62:fd:18:9a:c1:5d:47:8f:f7:da:4e:d4:47:5f:b6:60:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cfc.paramount.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfc.paramount.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cfc.paramount.com

Other certificates including the domain name paramount.com

(limited to 100 certificates)
www.viacom.com
leapfrog-ssl-51.gcs-web.com
qa.5paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
www.viacom.com
viacomcbs.com
aribatraining.paramount.com
www.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
fioriqa.paramount.com
esmailrelay.paramount.com
paramount.com
mtvnservices.com
mftdev.paramount.com
sip.paramount.com
www.viacom.com
nxSDGq06.paramount.com
sfb-ae-west.viacom.com
www.viacom.com
mail.paramount.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
cdn.privacy.paramount.com
sapssoprd.paramount.com
epmdev.paramount.com
MTVI.com
prime.paramount.com
mtvnservices.com
asperaweb.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
safety.paramount.com
www.viacomcbs.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
scriptord.paramount.com
infdev.paramount.com
mtvnservices.com
meetings.paramount.com
careers.paramount.com
mtvnservices.com
cfc.paramount.com
www.viacom.com
phe-schedule.paramount.com
screeners.paramount.com
www.viacom.com
www.viacomcbs.com
www.viacom.com
nsg.paramount.com
salesapp.paramount.com
leapfrog-ssl-51.gcs-web.com
mtvnservices.com
achievements.ets.org
www.viacom.com
sfb-webext-ams.viacom.com
achievements.ets.org
www.viacom.com
origin.paramount.com
paramount.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
achievements.ets.org
scriptord.paramount.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
san-8-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-51.gcs-web.com
aspera.paramount.com
achievements.ets.org
viacomcbs.com
support.paramount.com
www.viacom.com
www.viacom.com
achievements.ets.org
www.viacom.com
leapfrog-ssl-51.gcs-web.com
insights.paramount.com
sfb-webext-east.viacom.com
sapssoprd.paramount.com
achievements.ets.org
san-9-s11.tlsprovisioning.exacttarget.com
mtvnservices.com
sfb-ae-east.viacom.com
san-13-s11.tlsprovisioning.exacttarget.com
paramount.com
solmanprodsld.paramount.com
MTVI.com
www.viacom.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-51.gcs-web.com
www.viacom.com
ergsignup.paramount.com
noclist.paramount.com
screeners.paramount.com

Certificate

The complete raw certificate details for cfc.paramount.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vx4E8IelO3IZIhn351e
fvXHOt6BGZocQNhAtJ0mWF9BwaduQUVNhT7HBkG+G5gTp2aNEzm4uyhz3hMy8aG7
iYexQcJU3hKnsxPNbmi/Ipbo3/aUn7fgUO1047UmJPaETrrAl2bWKMIeAvGkaCm5
t6oTTTRnG1gEdd5iMJ64kN6GCU61+EehaDKFbrpE+55mt2kSllqAuSfwAtj4iGrm
JEIdtrCuf7GLTULIvhdNYCj6j9w8IpNgBZhOxI/O5FEe78eGjiwN53kRIXhnV5IR
OmceE5fpd2f2rLeSubXp8zaevm5HAw/aQQ2QgMnRfuCgojaeM/w6RgAQeBxku6wU
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373596559029631092197031424847957344290089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 08:50:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 08:50:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfc.paramount.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27139494392096543914318614548367707689478475757323415021000263127637399313595157317159020937089411283260964848401543667904633187487577000522308344415025766265908399436284505841616980775165790746690902441714026536891863342953657255386067626862531535723194359392058897374395120841758507253140728659699167753393991016526286316010572829473036918633826397616581217076254662779669219348753037315120581222978598502905665964788171516535013875676195630661682351972001370403154843086178497144933210448281135519802370651311023515017440612623362925982360535986998243058366049599448642685095192669938691898942380996736675008484563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3344af8b5e3293849c495cc57f243e1bd43a24f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.paramount.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ba9307fcb00000403004630440220235c9456dd2bda77dbeaf826f09a3088f28d9d40e24df130ad824e73893595a102204ec7ffb4061475d483b8316e084204a89bf485dc9ee4956d26f7c77bbd7b344a00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ba9307fce00000403004830460221009462ea27b4affe4e5af22e52e12ab4c0e6a86931230db13e57905f10c17040b402210089f86ff798c568b6772417963cac435aa382b40670f931f790ce94bb7e266aad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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