www.cbs.com

- CBS Broadcasting Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:b7:f7:06:74:d2:57:9a:38:9c:9b:35:be:b2:b1:8b was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CBS Broadcasting Inc.

Organization: CBS Broadcasting Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:b7:f7:06:74:d2:57:9a:38:9c:9b:35:be:b2:b1:8b
Serial Number (int): 3613656583377331502166438607932535179
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c6:4d:c4:2e:c5:05:82:2f:7a:60:d9:7c:ea:d1:80:72:e6:38:82:f2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f7:1b:04:d9:9a:fe:e4:11:02:ac:15:69:24:6a:8a:d8:0a:01:2f:46
Fingerprint (sha256): 17:5f:18:a6:20:eb:3c:f7:05:d3:47:39:7e:d4:23:f2:e7:41:49:e0:a1:fe:e8:e9:e3:8e:37:a7:21:39:8d:eb

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.cbs.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cbs.com
cbs.com
cimg.tvgcdn.net
cnet4.cbsistatic.com
movies.tvguide.com
secure.metacritic.com
static5.comicvine.com
pm2.fonts.cbsnews.com
sportsline-sdg.cbsistatic.com
wwwimage-secure3.cbsstatic.com
dws.cbsimg.net
static.metacritic.com
podcast-files.cnet.com
canstatic.cbs.com
secure.tv.com
thumbnails5.cbsig.net
amp.etonline.com
downloads.zdnet.com
graphics.collegesports.com
static-5.tvgcdn.net
cdn4.cnet.com
static-3.tvgcdn.net
pmd.tvgcdn.net
static5.giantbomb.com
thumbnails.cbsig.net
uat.cnet.com
wwwimage-secure.cbsstatic.com
flv.sales.cbs.com
mobilelistings.tvguide.com
canhls.cbs.com
static3.comicvine.com
cnet3.cbsistatic.com
search.chow.com
www.techrepublic.com
static-1.tvgcdn.net
hdvod.tvgcdn.net
www.chowhound.com
www.cnet.com
downloads-test.zdnet.com
static2.comicvine.com
www.chowstatic.com
www.chow.com
wwwimage-secure2.cbsstatic.com
cbssports.cbsi.com
video.tvguide.com
www.zdnet.com
www.scout.com
static.comicvine.com
cc.cnetcontent.com
cdn2.cnet.com
cdn.cnetcontent.com
thumbnails4.cbsig.net
amp.tvguide.com
test.techrepublic.com
thumbnails1.cbsig.net
static4.comicvine.com
www.giantbomb.com
wwwimage-secure5.cbsstatic.com
static4.giantbomb.com
feed.cnet.com
vidtech.cbsinteractive.com
mapi.tvguide.com
wwwimage-secure4.cbsstatic.com
www.tvguide.com
cdn1.cnet.com
static.giantbomb.com
www.sportsline.com
cnet2.cbsistatic.com
rss.tvguide.com
www.chowmagazine.com
wwwimage.cbsstatic.com
dw.cbsimg.net
thumbnails3.cbsig.net
static1.comicvine.com
www.metacritic.com
api.metacritic.com
static1.giantbomb.com
videoplayer.cbs.com
static-2.tvgcdn.net
cnet1.cbsistatic.com
static.tvgcdn.net
cdx.cbs.com
amp.insideedition.com
static-4.tvgcdn.net
static2.giantbomb.com
static3.giantbomb.com
www.sho.com
graphics.fansonly.com
rev.cbsi.com
chowhound.chow.com
test.cnet.com
wwwimage-secure1.cbsstatic.com
fonts.cbsi.com
thumbnails2.cbsig.net
pm2.fonts.cnet.com
cdn3.cnet.com
test.zdnet.com

Other certificates including the domain name cbs.com

(limited to 100 certificates)
dev-broker.mediapo.cbs.com
*.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
concur.cbs.com
box.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
viacomcbs-live.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
ny-asperafaspex.cwd.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
*.lb.cbs.com
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
airspace.cbsivideo.com
prospective.shared.global.fastly.net
*.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
adfs.cbs.com
audienceservices.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacomcbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
*.airspace-g.cbsivideo.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
cbsaavideo.com
shoogle.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
uccaas-expc.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
*.cbs.com
fluuid-dev.cbs.com
b3.shared.global.fastly.net
b3.shared.global.fastly.net
www.viacomcbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacom.tech
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
ehs.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
*.cbs.com
www.cbs.com
cbsco-cucm01-bv1.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com

Certificate

The complete raw certificate details for www.cbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMD5p9a/uo4fE/EqQIOf
4c2kb8R45852h5SKW2ifxnX5XUyTSVxLYriyiVyp0FG3T9/Z6V3XWePR+11w5kFA
B74N8DOJRZQxpHz0nybIou0rfSnxLDuutW4JB/uoSw+GQ/PhBz55JOInRjNsCBLI
KiIf7kyTX3o8RXx9m8lzCqeV/fRPH07J/K+6nEU7x9QmKBed4ZhlWGI6kKCCkYHs
TwlpzAYFIo/ECFQNHijTnwE5WXzeruyPSJQcZY6atiuZS0GZP5vZO/J2x7/IEedF
nkhjT8QMCYCL7n3zfBphC/74Zflxi+R0nnp4AlwpD8/srXWw8XTC9JNI8r6SYf2/
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3613656583377331502166438607932535179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBS Broadcasting Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25847773839358556348375450383600327344760131816423772483808371105202070193524279383621742784167927032492501274948082603906692921469132186623810585982056544422836366593820215399777322232026424720202047050445453102990169562731434984915585477073174692481189154933700026692597890480981673745550163451120058675244721202246398391144382113323806060512674968849516457354167800758964739288368560875184588482369844288680873571362868308533126821362824427264771784718837592742427962408727262367821532200673531546348430140719475314744362662879815310282991350988095247566007924896385748108312869731430939495459832058023107329113981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c64dc42ec505822f7a60d97cead18072e63882f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimg.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet4.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cbsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsline-sdg.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure3.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.cbsimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast-files.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canstatic.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails5.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.etonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.collegesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-5.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-3.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmd.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flv.sales.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilelistings.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canhls.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet3.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-1.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdvod.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowhound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads-test.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure2.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbssports.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zdnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails4.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails1.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure5.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidtech.cbsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapi.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure4.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet2.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dw.cbsimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails3.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.comicvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoplayer.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-2.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet1.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdx.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.insideedition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-4.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.giantbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.fansonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rev.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chowhound.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure1.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails2.cbsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.zdnet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001670fe5c35a0000040300473045022035aa33fba43e7a823be70d6436ceb884502add7d974b60d7984ba8d0165da07902210097c4af110e9d4e6fa80aca380bfded6b368176ff0b7ea84585c9c38dfb3415b70077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001670fe5c3320000040300483046022100c8641109ba32d7fbb144eeb3817ef6adb27a8beae5c1d8da1cf1d5f00e1b8633022100c407f26f387913104ded3c4b74c294e4f7d4d2ba523686aba9b0421e93540eaf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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