www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:cc:c9:ac:9f:e7:46:34:b5:17:47:27:2a:bd:e5:2f was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:cc:c9:ac:9f:e7:46:34:b5:17:47:27:2a:bd:e5:2f
Serial Number (int): 10367914970697512349626464813725902127
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 10:d2:e6:c2:d0:fe:be:d7:61:8c:92:a3:5e:dd:d5:51:bb:fa:5a:22
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): b4:4a:3f:e8:d1:bb:7f:29:4f:82:86:82:f9:3b:76:02:eb:8c:f8:9c
Fingerprint (sha256): 1a:6b:66:d7:73:4e:63:60:b1:f9:3b:fe:70:b8:bb:6a:2f:94:08:16:6f:8f:9b:80:02:55:81:36:54:04:0c:ec

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacom.com
viacom.com
mobilefiles.nick.com
gateway.bridge.viacom.com
auth.id.viacom.com
api.qa.bet.com
content.epix.com
player-staging.channel5.com
hlspkg-uat.mtvnservices.com
hlspkg.mtvnservices.com
origin.l3.ts.mtvnservices.com
dlvrsvc-uat.mtvnservices.com
www.ratemyprofessors.com
api.playplex.viacom.com
feeds.mtvnservices.com
detektive.mtvnservices.com
tveguest.vimn-q.mtvi.com
www.cc.com
www.nick.com
relaunch.mtv.com.br
www.mtvunderthethumb.com
www.paramountmovies.com
keysvc-uat.mtvnservices.com
www.mtv.nl
www.mtvasia.com
dlvrsvc.mtvnservices.com
search.mtvnservices.com
feeds.mtvnservices-q.mtvi.com
www.howihalo.com
media.mtvnservices-q.mtvi.com
www.mtv.com.br
tve.mtvnservices-q.mtvi.com
secure.iphone.mtvn.com
www.mtvpress.com
vip.viacom.tech-q.mtvi.com
www.mtvu.com
media-utils-live.mtvnservices-q.mtvi.com
gameservices.mtvn.com
media.mtvi.com
media.mtvnservices-d.mtvi.com
xbox.mtvnservices.com
content.epixhd.com
console.mtvnservices.com
api.mtvnn.com
staging.api.mtv.com
akasubs.channel5.com
player.mtvnservices-q.mtvi.com
akasubs-staging.channel5.com
relaunch.mtv.pt
qa.relaunch.bet.com
testing.bellator.vmn.io
media-utils.mtvnservices.com
files.cc.com
player.mtvnservices.com
www.spiketv.nl
www.mtv.ch
www.mtv.it
tveauth.vimn.com
www.paramount.com
xbox.mtvnservices-q.mtvi.com
aka.ts.mtvnservices.com
www.nickpress.com
origin.l3.tsq.mtvnservices.com
mtv.ch
player.channel5.com
videos.mtvnn.com
www.mundonick.com
www.bellator.com
keysvc.mtvnservices.com
tveauth.vimn-q.mtvi.com
tve.mtvnservices.com
player.mtvnservices-d.mtvi.com
intl.esperanto.mtvi.com
www.ratemyprofessors-q.mtvi.com
www.nickelodeonparents.com
www.vh1press.com
api.cc.com
test.ratemyprofessors-q.mtvi.com
recruitment.feedback.viacom.tech
api.stage.bet.com
media-utils-live.mtvnservices.com
www.spike.com
media.mtvnservices.com
testing.forums.southpark.vmn.io
btg.mtvnservices.com
www.viacomaffiliate.com
testing.forums.southpark.de.vmn.io
files.spike.com
www.vh1.com
search.mtvnservices-q.mtvi.com
mtvbrazil-services.vimn.com
api.spike.com
player-test.channel5.com
specials.mtvnn.com
akasubs-test.channel5.com

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7meTI/wHmAO0Ra8YlU0
44590/hBPtujIFyM/7Go+vPQ+xFTLxQq/WXmWL8qzxMXDWN5wwE6beJ1ZWpQgJdw
RTTtIRcxFHIq5ZWB9sRwxeGFr34KIFBteo2UnbuFa6b6xnk5SUHXD8tqe62siz2d
3pWg2Bd2Y6l0yadtKzA7PSZTnQUx4A7BT+aOuziUNbAJ6MskF2DT2VdeawFCS6fM
gyHRSIOruGiKq2LboGkouBwqitIffWwepEunbC2P092BtZhKd4pvGpbNkd2r61jo
lS0rBrvaDc+FCHKsNdhX7pyDIGPDbenRroM2NXn5+X5FzCF5t5RBDTSCcFPiX7za
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10367914970697512349626464813725902127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26222860950630896757738575680466590267884157571069834402382926205154328372899331948329763009182747480302951644155824963331453859176044673873974484513098647841569483504531091243999689472429164871917995943098559405712357358592489592179505231985791651508112410262182691885399737608682577323343011056889397411428736625872177956740888898260563474683726436891074254970270426088678958521767131370623553153105373894796231853730498408182605041994972518513772703546349814379173727788099876948686961678482424334924110915745525794855935136449432580812690944169237195993004538578901586550523501311280860317293459858888205478451723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10d2e6c2d0febed7618c92a35eddd551bbfa5a22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.epix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-staging.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlspkg-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlspkg.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratemyprofessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howihalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iphone.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameservices.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.epixhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs-staging.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch.mtv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.relaunch.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiketv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.esperanto.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratemyprofessors-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ratemyprofessors-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btg.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvbrazil-services.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-test.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specials.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs-test.channel5.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007400bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000164f491ea160000040300453043022011d58503fcc74e556360249d9876b564cd1dda58772931d318ac640c8168bc4c021f6690fdc57953f1037a9a22ec7cd65ee806d409edf5c0fc38b79991cacefdc50076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000164f491eae20000040300473045022100fc77804cc76119ded187da623b395cbaff796f18545486fa6cb81ab890e0b6140220752a936b811dfb134ae24a13eb8106992810d72af229cb14f10f2a2c77cb2708
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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