viacomcbs.com

- Viacom Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:7b:52:55:86:58:99:8a:f6:34:67:a1:4f:b6:7d:9b was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Viacom Inc

Organization: Viacom Inc
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:7b:52:55:86:58:99:8a:f6:34:67:a1:4f:b6:7d:9b
Serial Number (int): 7286462426083778185921552054511631771
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9e:5a:f2:4c:ee:43:8a:5a:ab:ef:b8:5c:42:98:40:1f:4a:a9:1a:1b
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 1c:d6:81:f3:61:34:5e:4c:d5:18:b7:9d:3e:68:12:c2:13:02:9a:87
Fingerprint (sha256): 10:d3:72:41:da:0d:dc:b0:95:b6:2a:a9:9a:fd:cf:82:73:4c:23:b6:03:d8:4f:ff:21:5b:d4:cb:8d:4c:fc:52

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate viacomcbs.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for viacomcbs.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

viacomcbs.com
ads-dev-dr.viacbsops.com
ads-dr.viacbsops.com
ads-staging-dr.viacbsops.com
ads-staging.viacbsops.com
ads.viacbsops.com
api.theupload-dev.viacomcbs.com
api.theupload-qa.viacomcbs.com
api.theupload-stg.viacomcbs.com
api.theupload.viacomcbs.com
auth.mtvnservices-q.mtvi.com
auth.mtvnservices-stg.mtvi.com
awsq.vimn.com
awsvncpservices.nick.com
clicks.vidcon.com
comcast.bet.plus
cox.bet.plus
curator.sho.com
dev-curator.sho.com
dev.aboutme.viacomcbs.com
dev.globaloverview.viacomcbs.com
dev.sportsgraphics.viacomcbs.com
epg.vimn.com
epgs.vimn.com
eyes.nickelodeon.tv
idp.nickplus.asia
images.nickplus.asia
imagesstaging.nickplus.asia
jira.cbsi.com
jira.cbslocal.com
legacy.nickanimation.com
media.nickplus.asia
mediastaging.nickplus.asia
nick101.nick-d.mtvi.com
nuestrosheroes.mitelefe.com
opentext-teamsiteuat.viacomcbs.com
origin.qw.ts.mtvnservices.com
paramount.tech
productionhub.paramount.uk.vimn.com
props.viacomcbs.com
qas.sportsgraphics.viacomcbs.com
qas.sportstrack.viacomcbs.com
resources.nickplus.asia
resourcesstaging.nickplus.asia
sportsgraphics.viacomcbs.com
stg-idp.nickplus.asia
stg.sportsgraphics.viacomcbs.com
viacbs.tech
wp-avatar.southpark.cc.com
www.alonetogether.com
www.delusionsandsolutions.com
www.firsttimecomposers-d.mtvi.com
www.firsttimecomposers-q.mtvi.com
www.firsttimecomposers.com
www.firsttimedirectorshandbook-d.mtvi.com
www.firsttimedirectorshandbook-q.mtvi.com
www.firsttimeinitiatives-d.mtvi.com
www.firsttimeinitiatives-q.mtvi.com
www.firsttimescreenwriters-d.mtvi.com
www.firsttimescreenwriters-q.mtvi.com
www.keepparamount-q.mtvi.com
www.keepviacomcbs.com
www.lawmenbassreeves.com
www.mobituaries-d.mtvi.com
www.mobituaries-q.mtvi.com
www.newnownext.com
www.nick.tv
www.nickatnite.com
www.nickelodeon.es
www.nickelodeon.fr
www.nickelodeon.pt
www.nickelodeon.se
www.nickelodeonafrica.com
www.nickjr.co.uk
www.nickjr.it
www.nicktv.it
www.paramountnetwork.com.br
www.paramountnetwork.nl
www.paramountnetwork.pl
www.poptv.com
www.smithsonianchannel.co.uk
www.smithsonianchannellatam.com
www.vmaj.jp

Other certificates including the domain name viacomcbs.com

(limited to 100 certificates)
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
ir.viacomcbs.com
image.serviciokia.com.ec
cloud.email.viacomcbs.com
MTVI.com
image.serviciokia.com.ec
www.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
www.viacom.tech
www.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
stillsarchive.viacomcbs.com
image.serviciokia.com.ec
inview.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
stillsarchive.viacomcbs.com
xdam-nonprod.viacomcbs.com
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
mtvi.com
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
san-5-s11.tlsprovisioning.exacttarget.com
image.serviciokia.com.ec
creativeandstrategy.viacomcbs.com
paramount.com
image.serviciokia.com.ec
image.serviciokia.com.ec
halloweencontest.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
mtvi.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
stillsarchiveuat.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdsiportal.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
eai-prd.viacomcbs.com
creativelibrary.viacomcbs.com
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
mtvi.com
www.viacomcbs.com
www.viacom.tech
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
origin.prod-acquia.viacomcbs.com
www.viacomcbs.com
inview.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdi.paramount.com
www.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
mtvi.com
MTVI.com
devplus.phxdocstore.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec

Certificate

The complete raw certificate details for viacomcbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOKDCCDRCgAwIBAgIQBXtSVYZYmYr2NGehT7Z9mzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yNDAxMDcwMDAwMDBa
Fw0yNDA2MTkyMzU5NTlaMGAxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y
azERMA8GA1UEBxMITmV3IFlvcmsxEzARBgNVBAoTClZpYWNvbSBJbmMxFjAUBgNV
BAMTDXZpYWNvbWNicy5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASq7G4o
Twe6A/s+E96uOWRRsxju3VLLuyU7rpRSwOTsAIJbO9TDPxrl+i2y4Ng/jOehz1Ra
/Imd9C0iq/Dm/1WMo4ILuDCCC7QwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iy
xZV2ufQwHQYDVR0OBBYEFJ5a8kzuQ4paq++4XEKYQB9KqRobMIIIXwYDVR0RBIII
VjCCCFKCDXZpYWNvbWNicy5jb22CGGFkcy1kZXYtZHIudmlhY2Jzb3BzLmNvbYIU
YWRzLWRyLnZpYWNic29wcy5jb22CHGFkcy1zdGFnaW5nLWRyLnZpYWNic29wcy5j
b22CGWFkcy1zdGFnaW5nLnZpYWNic29wcy5jb22CEWFkcy52aWFjYnNvcHMuY29t
gh9hcGkudGhldXBsb2FkLWRldi52aWFjb21jYnMuY29tgh5hcGkudGhldXBsb2Fk
LXFhLnZpYWNvbWNicy5jb22CH2FwaS50aGV1cGxvYWQtc3RnLnZpYWNvbWNicy5j
b22CG2FwaS50aGV1cGxvYWQudmlhY29tY2JzLmNvbYIcYXV0aC5tdHZuc2Vydmlj
ZXMtcS5tdHZpLmNvbYIeYXV0aC5tdHZuc2VydmljZXMtc3RnLm10dmkuY29tgg1h
d3NxLnZpbW4uY29tghhhd3N2bmNwc2VydmljZXMubmljay5jb22CEWNsaWNrcy52
aWRjb24uY29tghBjb21jYXN0LmJldC5wbHVzggxjb3guYmV0LnBsdXOCD2N1cmF0
b3Iuc2hvLmNvbYITZGV2LWN1cmF0b3Iuc2hvLmNvbYIZZGV2LmFib3V0bWUudmlh
Y29tY2JzLmNvbYIgZGV2Lmdsb2JhbG92ZXJ2aWV3LnZpYWNvbWNicy5jb22CIGRl
di5zcG9ydHNncmFwaGljcy52aWFjb21jYnMuY29tggxlcGcudmltbi5jb22CDWVw
Z3Mudmltbi5jb22CE2V5ZXMubmlja2Vsb2Rlb24udHaCEWlkcC5uaWNrcGx1cy5h
c2lhghRpbWFnZXMubmlja3BsdXMuYXNpYYIbaW1hZ2Vzc3RhZ2luZy5uaWNrcGx1
cy5hc2lhgg1qaXJhLmNic2kuY29tghFqaXJhLmNic2xvY2FsLmNvbYIYbGVnYWN5
Lm5pY2thbmltYXRpb24uY29tghNtZWRpYS5uaWNrcGx1cy5hc2lhghptZWRpYXN0
YWdpbmcubmlja3BsdXMuYXNpYYIXbmljazEwMS5uaWNrLWQubXR2aS5jb22CG251
ZXN0cm9zaGVyb2VzLm1pdGVsZWZlLmNvbYIib3BlbnRleHQtdGVhbXNpdGV1YXQu
dmlhY29tY2JzLmNvbYIdb3JpZ2luLnF3LnRzLm10dm5zZXJ2aWNlcy5jb22CDnBh
cmFtb3VudC50ZWNogiNwcm9kdWN0aW9uaHViLnBhcmFtb3VudC51ay52aW1uLmNv
bYITcHJvcHMudmlhY29tY2JzLmNvbYIgcWFzLnNwb3J0c2dyYXBoaWNzLnZpYWNv
bWNicy5jb22CHXFhcy5zcG9ydHN0cmFjay52aWFjb21jYnMuY29tghdyZXNvdXJj
ZXMubmlja3BsdXMuYXNpYYIecmVzb3VyY2Vzc3RhZ2luZy5uaWNrcGx1cy5hc2lh
ghxzcG9ydHNncmFwaGljcy52aWFjb21jYnMuY29tghVzdGctaWRwLm5pY2twbHVz
LmFzaWGCIHN0Zy5zcG9ydHNncmFwaGljcy52aWFjb21jYnMuY29tggt2aWFjYnMu
dGVjaIIad3AtYXZhdGFyLnNvdXRocGFyay5jYy5jb22CFXd3dy5hbG9uZXRvZ2V0
aGVyLmNvbYIdd3d3LmRlbHVzaW9uc2FuZHNvbHV0aW9ucy5jb22CIXd3dy5maXJz
dHRpbWVjb21wb3NlcnMtZC5tdHZpLmNvbYIhd3d3LmZpcnN0dGltZWNvbXBvc2Vy
cy1xLm10dmkuY29tghp3d3cuZmlyc3R0aW1lY29tcG9zZXJzLmNvbYIpd3d3LmZp
cnN0dGltZWRpcmVjdG9yc2hhbmRib29rLWQubXR2aS5jb22CKXd3dy5maXJzdHRp
bWVkaXJlY3RvcnNoYW5kYm9vay1xLm10dmkuY29tgiN3d3cuZmlyc3R0aW1laW5p
dGlhdGl2ZXMtZC5tdHZpLmNvbYIjd3d3LmZpcnN0dGltZWluaXRpYXRpdmVzLXEu
bXR2aS5jb22CJXd3dy5maXJzdHRpbWVzY3JlZW53cml0ZXJzLWQubXR2aS5jb22C
JXd3dy5maXJzdHRpbWVzY3JlZW53cml0ZXJzLXEubXR2aS5jb22CHHd3dy5rZWVw
cGFyYW1vdW50LXEubXR2aS5jb22CFXd3dy5rZWVwdmlhY29tY2JzLmNvbYIYd3d3
Lmxhd21lbmJhc3NyZWV2ZXMuY29tghp3d3cubW9iaXR1YXJpZXMtZC5tdHZpLmNv
bYIad3d3Lm1vYml0dWFyaWVzLXEubXR2aS5jb22CEnd3dy5uZXdub3duZXh0LmNv
bYILd3d3Lm5pY2sudHaCEnd3dy5uaWNrYXRuaXRlLmNvbYISd3d3Lm5pY2tlbG9k
ZW9uLmVzghJ3d3cubmlja2Vsb2Rlb24uZnKCEnd3dy5uaWNrZWxvZGVvbi5wdIIS
d3d3Lm5pY2tlbG9kZW9uLnNlghl3d3cubmlja2Vsb2Rlb25hZnJpY2EuY29tghB3
d3cubmlja2pyLmNvLnVrgg13d3cubmlja2pyLml0gg13d3cubmlja3R2Lml0ght3
d3cucGFyYW1vdW50bmV0d29yay5jb20uYnKCF3d3dy5wYXJhbW91bnRuZXR3b3Jr
Lm5sghd3d3cucGFyYW1vdW50bmV0d29yay5wbIINd3d3LnBvcHR2LmNvbYIcd3d3
LnNtaXRoc29uaWFuY2hhbm5lbC5jby51a4Ifd3d3LnNtaXRoc29uaWFuY2hhbm5l
bGxhdGFtLmNvbYILd3d3LnZtYWouanAwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAn
BggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB
/wQEAwIDiDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSB
hzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExT
UlNBU0hBMjU2MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDB/BggrBgEF
BQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJ
BggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYB
BAHWeQIEAgSCAW0EggFpAWcAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG
cR+1mwAAAYzlcU8xAAAEAwBGMEQCIF1zAwuqISbwLNpNs9KPH32ANq5t1qbc14MV
k6Hs88pQAiA5lBBUAFhC/L9aDOINdeAf1c5VrnDUr8EsRawXee0XvwB2AEiw42va
pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjOVxTx8AAAQDAEcwRQIhAKR5
315rV5csNmyon0lkdAMWjOKsMPzpl0JUBjkvDeVMAiA4BTLrflazTkwK51gm8z0u
XIElpEyEsAoyo5zvTX0+5gB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI
1/urAAABjOVxTwEAAAQDAEcwRQIhAM+8XE8D5iDk93308xDIF3GuTuCO4/+YjwPU
9n+8yGSfAiAYrjc/Q1rGuUZM6sd/ObscCD5bcp2VPuvjTht4MLSEoTANBgkqhkiG
9w0BAQsFAAOCAQEAhdk3173p+E6ix8lwVCetCCD+Pki6PsiKvtofC+s3pRGeOpIs
yO5EwaiAJ8A0s+Qe1kTPHL7CaRLQWvBveygZosYSkLIFUxvtckfDGooD7HB7u4Zm
5o1++WuBsP4ogJHES6VIGShfyr1zPzSaKa7Gu6hhWAuYG7sjGVpF/kd1iRvly6ju
J1kR4PzI4lGP/b/oh/ub3TP9ITNpJnM0fRW/ttH3jJNsgYp8c1YcZkKSmQ4TzfNd
V3BRA8p8yJ28HR9ZbEoTul4yKb1JnEBkAXfTo3GjDl8Zvg7/lfNySC0XBQKfmY11
ePgn2b+kRIKxtPUuN7URC1x0RbmYdUW2DtWwbQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEquxuKE8HugP7PhPerjlkUbMY7t1S
y7slO66UUsDk7ACCWzvUwz8a5fotsuDYP4znoc9UWvyJnfQtIqvw5v9VjA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7286462426083778185921552054511631771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'viacomcbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004aaec6e284f07ba03fb3e13deae396451b318eedd52cbbb253bae9452c0e4ec00825b3bd4c33f1ae5fa2db2e0d83f8ce7a1cf545afc899df42d22abf0e6ff558c
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e5af24cee438a5aabefb85c4298401f4aa91a1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dev-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-dev.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-qa.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-stg.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-stg.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsq.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsvncpservices.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcast.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aboutme.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globaloverview.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epg.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epgs.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyes.nickelodeon.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nickanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nick101.nick-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuestrosheroes.mitelefe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentext-teamsiteuat.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.qw.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionhub.paramount.uk.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'props.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportstrack.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-avatar.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alonetogether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delusionsandsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepparamount-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawmenbassreeves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnownext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickatnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannellatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vmaj.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085d937d7bde9f84ea2c7c9705427ad0820fe3e48ba3ec88abeda1f0beb37a5119e3a922cc8ee44c1a88027c034b3e41ed644cf1cbec26912d05af06f7b2819a2c61290b205531bed7247c31a8a03ec707bbb8666e68d7ef96b81b0fe288091c44ba54819285fcabd733f349a29aec6bba861580b981bbb23195a45fe4775891be5cba8ee275911e0fcc8e2518ffdbfe887fb9bdd33fd2133692673347d15bfb6d1f78c936c818a7c73561c664292990e13cdf35d57705103ca7cc89dbc1d1f596c4a13ba5e3229bd499c40640177d3a371a30e5f19be0eff95f372482d1705029f998d7578f827d9bfa44482b1b4f52e37b5110b5c7445b9987545b60ed5b06d