*.hockey.cbssports.com

- CBS Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 5e:2e:04:0f:0b:ce:67:78:53:70:93:38:c6:68:95:c7 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CBS Corporation

Organization: CBS Corporation
State / Province: New York
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 5e:2e:04:0f:0b:ce:67:78:53:70:93:38:c6:68:95:c7
Serial Number (int): 125186359580989408894761927348821988807
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9b:82:02:30:8f:97:d1:63:5a:37:ca:32:5b:ed:97:e5:8d:34:28:b5
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): dc:da:30:5f:f4:50:1b:df:cd:8e:f8:ac:72:0c:67:02:9d:dd:b7:4f
Fingerprint (sha256): 19:66:ea:71:f0:e5:6a:03:d3:dd:d2:49:83:8f:c3:0f:e7:26:be:f8:61:a2:5a:05:64:95:74:67:01:fb:cb:e6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate *.hockey.cbssports.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hockey.cbssports.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hockey.cbssports.com
hockey.cbssports.com

Other certificates including the domain name cbssports.com

(limited to 100 certificates)
sli.cbssports.com
ey-campfire.com
cbslocal.com
radio.cbssports.com
*.baseball.cbssports.com
cc.cnetcontent.com
devemendous.com
image.e.outdoors.org
*.basketball.cbssports.com
image.e.outdoors.org
image.e.outdoors.org
safety.cbssports.com
penyadap.com
*.cbssports.com
gottlieb.radio.cbssports.com
*.mayhem.cbssports.com
www.bitfog.co
cbssports.com
cbssports.com
*.basketball.cbssports.com
justdogs.app
*.cbssports.com
sportsnowplanning.cbssports.com
n1to.com
tls.automattic.com
cc.cnetcontent.com
cbssports.com
*.basketball.cbssports.com
*.hockey.cbssports.com
tls.automattic.com
horseracing.cbssports.com
gottlieb.radio.cbssports.com
agartheanstudios.co
gottlieb.radio.cbssports.com
secure01.teamfanshop.com
secure01.teamfanshop.com
tls.automattic.com
*.cbssports.com
cc.cnetcontent.com
qa.app.pspro.ai
secure01.teamfanshop.com
*.football.cbssports.com
nabilcook.com
cc.cnetcontent.com
image.e.outdoors.org
*.baseball.cbssports.com
*.hockey.cbssports.com
cc.cnetcontent.com
tikiandtierney.radio.cbssports.com
image.e.outdoors.org
*.cbssports.com
business.shopsavee.com
tropez-pearls.com
*.ephm-bison.cbssports.com
*.hockey.cbssports.com
*.football.qa.cbssports.com
sushiuplus.ca
image.e.outdoors.org
secure01.teamfanshop.com
image.e.outdoors.org
*.basketball.cbssports.com
secure01.teamfanshop.com
cc.cnetcontent.com
gottlieb.radio.cbssports.com
*.apipufi.cbssports.com
*.cbssports.com
*.hera.cbssports.com
*.cbssports.com
*.cbssports.com
*.apipufi.cbssports.com
*.cbssports.com
thesimplegeography.de
shop.cbssports.com
secure01.teamfanshop.com
gottlieb.radio.cbssports.com
coderbin.com
*.cbssports.com
gottlieb.radio.cbssports.com
thesimplegeography.de
firebasetest.mglsk.be
image.e.outdoors.org
secure01.teamfanshop.com
secure01.teamfanshop.com
image.e.outdoors.org
meta-studio.world
ops.cbssports.com
saa.cbssports.com
nucdn.cbssports.com
fantasy.img.cbssports.com
click.email.cbssports.com
mta-sts.openresearch.news
secure01.teamfanshop.com
sechighlights.cbssports.com
www.litz.co
www.seelan.co
*.mayhem.cbssports.com
gottlieb.radio.cbssports.com
*.hockey.cbssports.com
cc.cnetcontent.com
secure01.teamfanshop.com

Certificate

The complete raw certificate details for *.hockey.cbssports.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIQXi4EDwvOZ3hTcJM4xmiVxzANBgkqhkiG9w0BAQsFADCB
lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD
EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy
dmVyIENBMB4XDTIzMTExNDAwMDAwMFoXDTI0MTIxMzIzNTk1OVowWzELMAkGA1UE
BhMCVVMxETAPBgNVBAgTCE5ldyBZb3JrMRgwFgYDVQQKEw9DQlMgQ29ycG9yYXRp
b24xHzAdBgNVBAMMFiouaG9ja2V5LmNic3Nwb3J0cy5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDzaPFP3jNirabzfQLfx/ptzzBPDs15r/DN1NA5
w1ZUv9uxgLRToJD7NbPsy65/PbZaQ5scOkisZuat5+Rk8CfJ49wstMlBT0OQ4zVG
HjfLWar9UkG1mRi+bJ2Qhc0DkiWATuTFzaV4/J0ZW/klBjRRdDIhseAImloKhP7i
+udpk7vxdEGwCUutNF1rtLCA7yqpZKb5I9JgvVM9r3VOueihP6O/zBtPzRCNe8nt
V3CrhtFs2dtGYncCH//+kstjhjUOWGw62PQKNtfJ7dkWA06a1mU1FU97PeKakB4z
GlzHKbXeAwOaTHldfSzIn2o6LFw7iqLBmXErbwClYlKA1ppDAgMBAAGjggNwMIID
bDAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4EFgQUm4IC
MI+X0WNaN8oyW+2X5Y00KLUwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYMKwYB
BAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BT
MAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLnNlY3RpZ28u
Y29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVy
Q0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQu
c2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1
cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28u
Y29tMDcGA1UdEQQwMC6CFiouaG9ja2V5LmNic3Nwb3J0cy5jb22CFGhvY2tleS5j
YnNzcG9ydHMuY29tMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgB2/4g/Crb7
lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYvNv0ftAAAEAwBHMEUCIQDcRPjE
A/qCMqPOM4Yf2kMpIFQBxYFxObLuqvggpINJeQIgOM7TKYLRKMEc3hAL62N3P00b
Xl6iv3qk3ZsjEsxkyS4AdQA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7Phk
bgAAAYvNv0gTAAAEAwBGMEQCIDN4o//XjAN88lMQViX2NYrjklmlOkIt9pea8GyI
Po2mAiAVA2FvyubRC8fWCCb6YUZ7Kx9k9Sr7a/FmQMmjJ1X0CgB2AO7N0GTV2xrO
xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi82/SBsAAAQDAEcwRQIhAIhg6Nkh
L261SjvpIF1fqV/E03HSpl1tI+iRK1KX/xdDAiA7D5jb8uASf30MjgYLWHOT7wmz
r2IYAaTiO2ZcRUUBVTANBgkqhkiG9w0BAQsFAAOCAQEAhwxbcTX41/mk/YmCjTAw
NVd0lpVusbgywZELp/h13Pyu5QANd+m29rfo34UbZWNl9pmcqaqUHJqe4L0ryQcH
Ok7shkzRQ8r72J1NEFZFmffTe5djOZ5LQ4PtHVzZWEHO9KWZ1bTAp4i5o6PRo1O7
nuerlEYYjMwvyuhm+aPoxDd6PU7im4tw7PJQ3SxMHCxRfbiGXpBqwLHE5x9qwvB7
Jrg4uPehMxnnZ2+mM3lxvswa8bWIJd/J3uVN176CS/N2KiFQceB1PqrBa6Q/JXSs
t+Ytc71h3mCTkXi4Xp3KmZ+fT48JVUdRXTgrgqJibdH79Cbd1HTJCTGw5KKCqQKf
ig==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82jxT94zYq2m830C38f6
bc8wTw7Nea/wzdTQOcNWVL/bsYC0U6CQ+zWz7Muufz22WkObHDpIrGbmrefkZPAn
yePcLLTJQU9DkOM1Rh43y1mq/VJBtZkYvmydkIXNA5IlgE7kxc2lePydGVv5JQY0
UXQyIbHgCJpaCoT+4vrnaZO78XRBsAlLrTRda7SwgO8qqWSm+SPSYL1TPa91Trno
oT+jv8wbT80QjXvJ7Vdwq4bRbNnbRmJ3Ah///pLLY4Y1DlhsOtj0CjbXye3ZFgNO
mtZlNRVPez3impAeMxpcxym13gMDmkx5XX0syJ9qOixcO4qiwZlxK28ApWJSgNaa
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125186359580989408894761927348821988807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBS Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hockey.cbssports.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30727657243826186652922530837611601687467521668646430113114831221372714409710141104500567577742521956863391347179905458069600949181771187735302322192940736864451290747410039311939076143122437410974195416568258795596637814285371286070259692387772624750534025548989063456008679450060470397378695271359174826992446862885217214617592219872082213631457263956818607523979988592128318842196086550620003755471097289241723142695315121540898595110184645896023714810833345572732258614164641991425224498619724857769806530837097261022505411557226252496105974358811599475227228609867853001810968597290489279658264119921497903372867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b8202308f97d1635a37ca325bed97e58d3428b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hockey.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockey.cbssports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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