www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:de:7b:b8:14:21:35:cb:2b:30:72:05:d0:cb:89:b5 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:de:7b:b8:14:21:35:cb:2b:30:72:05:d0:cb:89:b5
Serial Number (int): 17105935172606722770178653535758682549
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5d:1d:96:25:c8:d3:c3:5b:93:2f:f7:8d:88:34:e4:78:87:45:8e:bc
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 88:9d:55:8d:51:5d:a9:ec:04:2e:c0:40:20:f6:f8:85:30:7f:73:a4
Fingerprint (sha256): 14:6c:bd:71:67:50:93:27:0b:7e:32:9c:63:72:43:ac:0f:d4:63:31:e5:f7:fe:20:d8:a7:b1:29:77:86:91:5e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xbox.mtvnservices-q.mtvi.com
www.viacomcbsamericas.com
www.viacom.com
www.vh1press.com
www.vh1.com
www.spiketv.nl
www.slimefest.it
www.paramountnetwork.hu
www.paramountnetwork.es
www.paramountnetwork.cz
www.paramountnetwork.com
www.paramountmovies.com
www.paramountcomedy.ru
www.paramount.com
www.pandemmyawards.com
www.nickpress.com
www.nickjr.tv
www.nickjr.nl
www.nickjr.es
www.nickjr.dk
www.nickjr.de
www.nickjr.com.pl
www.nickjr.com.br
www.nickjr.com.au
www.nickhelps-q.mtvi.com
www.nickelodeonparents.com
www.nickelodeonjunior.fr
www.mtvunderthethumb.com
www.mtvpress.com
www.mtventertainment-q.mtvi.com
www.mtventertainment-d.mtvi.com
www.mtvasia.com
www.mtv.nl
www.mtv.it
www.mtv.com.br
www.mtv.com.au
www.mtv.co.il
www.keepviacomcbs-q.mtvi.com
www.keepviacom.com
www.keepcbs-q.mtvi.com
www.isleofmtv.com
www.betcelebratesher.com
www.bellator.com
www.awesomenesstv.com
vip.viacom.tech-q.mtvi.com
videos.mtvnn.com
viacom.com
tveguest.vimn-q.mtvi.com
tveauth.vimn-q.mtvi.com
tve.mtvnservices.com
tve.mtvnservices-q.mtvi.com
testing.isleofmtv.vmn.io
testing.forums.southpark.vmn.io
testing.forums.southpark.de.vmn.io
testing.bellator.vmn.io
staging.api.mtv.com
solutions.viacom-q.mtvi.com
secure.iphone.mtvn.com
search.mtvnservices-q.mtvi.com
relaunch-solutions.viacom-q.mtvi.com
recruitment.feedback.viacom.tech
player.mtvnservices.com
player.mtvnservices-q.mtvi.com
player.mtvnservices-d.mtvi.com
origin.vz.tsq.mtvnservices.com
origin.vz.ts.mtvnservices.com
origin.sp.tsq.mtvnservices.com
origin.sp.ts.mtvnservices.com
origin.l3.tsq.mtvnservices.com
origin.l3.ts.mtvnservices.com
origin.fs.tsq.mtvnservices.com
origin.fs.ts.mtvnservices.com
mtvbrazil-services.vimn.com
mobilefiles.nick.com
media.mtvnservices-q.mtvi.com
media.mtvnservices-d.mtvi.com
media.mtvi.com
media-utils-live.mtvnservices.com
media-utils-live.mtvnservices-q.mtvi.com
la.nickjr.tv
keysvc-uat.mtvnservices.com
intl.esperanto.mtvi.com
files.spike.com
files.cc.com
feeds.mtvnservices-q.mtvi.com
dlvrsvc-uat.mtvnservices.com
detektive.mtvnservices.com
dashboard.api.noggin-q.mtvi.com
auth.id.viacom.com
api.stage.bet.com
api.spike.com
api.qa.bet.com
api.playplex.viacom.com
api.mtvnn.com
api.cc.com

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ0rUOKmBTXP+ctjLLqo
3r2YR7zDZa0HOAmYwneS2aSroFIsVgd4ETkAv0DxoMnvj9iVWXFt2i4u/nuNxj1q
0I8PQ11TgwZiNJ5RDYtNE1VtVX58fewwqiz6s+2ctje0jIyARWpiOaB3uKRRQig+
gbfrjIBdoPwzX8LLYRoVHfnp94O6Kz+azJ78B0hLTQgl00wOoAV/G2/g5R/JKzgz
nnNzbhU9N9L4hnSdTZ45iB2NxFnH2jjpU0PzdOkPGvqNm/BE8b81hxAMDzqtBq8O
ugbU4INClwRD9NSwLhR50/FvMDxQX2cBg8PdzbLSjG46FUxJQUvJIno0GWuowfVd
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17105935172606722770178653535758682549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24370486834463888622296234025754311159314281249466282888902013764495652352689906131182902583515624296083146854484636505001289358294682797203495640885605259359746160663042996981012194013949734090019412466436006635204109146541863954649679381706510925488023024496953683260662679035780798003220981516180824384953317793403635266809103449310778147020282106981194630492580258887710444489272957919723586425012954135637920352288679202122433477691487881489099627795350767072210893349330443503301253159715221917585724368879583685058788749341464286928647726014808673135285860192803872313511721707167172087971807766040906541915423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d1d9625c8d3c35b932ff78d8834e47887458ebc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbsamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiketv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slimefest.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountcomedy.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandemmyawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickhelps-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonjunior.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isleofmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betcelebratesher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.isleofmtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iphone.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch-solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvbrazil-services.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.esperanto.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.api.noggin-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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