www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:6c:bb:48:ea:c8:fc:7e:60:2f:f6:eb:f6:2b:a9:c3 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:6c:bb:48:ea:c8:fc:7e:60:2f:f6:eb:f6:2b:a9:c3
Serial Number (int): 3223022639977646848782630794663012803
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 09:a4:0c:19:05:1e:79:29:4e:ba:43:ab:07:5c:4e:0c:fd:da:c7:cc
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 4a:77:e7:2a:a7:40:a2:ea:30:af:5d:90:b3:13:2f:57:d3:96:e1:1b
Fingerprint (sha256): 1f:01:5c:8a:8f:b3:1c:b8:f1:72:da:cb:43:24:c4:f9:4b:e5:d9:fd:62:ba:bd:23:4c:87:41:58:73:8b:f1:d1

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xbox.mtvnservices-q.mtvi.com
www.viacomcbsamericas.com
www.viacom.com
www.vh1press.com
www.vh1.com
www.spiketv.nl
www.slimefest.it
www.paramountnetwork.hu
www.paramountnetwork.es
www.paramountnetwork.cz
www.paramountnetwork.com
www.paramountmovies.com
www.paramountcomedy.ru
www.paramount.com
www.pandemmyawards.com
www.nickpress.com
www.nickjr.tv
www.nickjr.nl
www.nickjr.es
www.nickjr.dk
www.nickjr.de
www.nickjr.com.pl
www.nickjr.com.br
www.nickjr.com.au
www.nickhelps-q.mtvi.com
www.nickelodeonparents.com
www.nickelodeonjunior.fr
www.mundonick.com
www.mtvunderthethumb.com
www.mtvpress.com
www.mtventertainment-q.mtvi.com
www.mtventertainment-d.mtvi.com
www.mtvasia.com
www.mtv.nl
www.mtv.it
www.mtv.com.br
www.mtv.com.au
www.mtv.co.il
www.keepviacomcbs-q.mtvi.com
www.keepviacom.com
www.keepcbs-q.mtvi.com
www.isleofmtv.com
www.betcelebratesher.com
www.bellator.com
www.awesomenesstv.com
vip.viacom.tech-q.mtvi.com
videos.mtvnn.com
viacom.com
tveguest.vimn-q.mtvi.com
tveauth.vimn-q.mtvi.com
tve.mtvnservices.com
tve.mtvnservices-q.mtvi.com
testing.isleofmtv.vmn.io
testing.forums.southpark.vmn.io
testing.forums.southpark.de.vmn.io
testing.bellator.vmn.io
staging.api.mtv.com
solutions.viacom-q.mtvi.com
secure.iphone.mtvn.com
search.mtvnservices-q.mtvi.com
relaunch-solutions.viacom-q.mtvi.com
recruitment.feedback.viacom.tech
player.mtvnservices.com
player.mtvnservices-q.mtvi.com
player.mtvnservices-d.mtvi.com
partner.viacom.com
origin.vz.tsq.mtvnservices.com
origin.vz.ts.mtvnservices.com
origin.sp.tsq.mtvnservices.com
origin.sp.ts.mtvnservices.com
origin.l3.tsq.mtvnservices.com
origin.l3.ts.mtvnservices.com
origin.fs.tsq.mtvnservices.com
origin.fs.ts.mtvnservices.com
neutron-api.viacom.tech-q.mtvi.com
mtvbrazil-services.vimn.com
mobilefiles.nick.com
media.mtvnservices-q.mtvi.com
media.mtvnservices-d.mtvi.com
media.mtvi.com
media-utils-live.mtvnservices.com
media-utils-live.mtvnservices-q.mtvi.com
la.nickjr.tv
keysvc-uat.mtvnservices.com
intl.esperanto.mtvi.com
gateway.bridge.viacom.com
files.spike.com
files.cc.com
feeds.mtvnservices-q.mtvi.com
dlvrsvc-uat.mtvnservices.com
dev.mtvshuga.com
detektive.mtvnservices.com
dashboard.api.noggin-q.mtvi.com
auth.id.viacom.com
api.stage.bet.com
api.spike.com
api.qa.bet.com
api.playplex.viacom.com
api.mtvnn.com
api.cc.com

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqdoLV16bAF5UD5boll6
xbFvdLUErQV+Eabnf0fXS7mlAunjTy0VC724gso7kysbvF9j6Nv+3swa3va77qMC
1cY4Dx9wXPB2XVB5CS41l24+1Ms4o59TuZPaX+l3ysYtT7n98E45APyTuDxeTq/c
KUztZqSntxpptnd6d6wUE+tVt+CbmfKz8pboKvkKjNHFViNWBzTdQFnV1jVp28Bh
AD4wZfw1oyTtyeBbj0l36fjwEjuv57q8Tt74fsCVOMCYd66hLoL1Af/+m84zcyRE
8x7C9FuD6kehofKYo12bN5Wp0XoWtnwibHKyAQ3XLHK3YPjFWtHqimvXrWV9DtuT
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3223022639977646848782630794663012803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22552969723900058668019654945020030585513661077991966037859191646796843625450222562921387022008878681843697647358533506788418157717044607777321990675573031335836138996091111001817522099567585219413236930212025778628875864564654257236710740484742825392552512180808329709524069076106745146330457884881517820656175894521754076281898203747580807174464735512606902559539773047419725863505079944027231002002330716589599011818892041282159673885817555728462158741741644731243414859539570437631209461101634475233460455272831338759500950600627853947110891823597097736599491233501396746625279275837052584477521360044041485128541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09a40c19051e79294eba43ab075c4e0cfddac7cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2392 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbsamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiketv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slimefest.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountcomedy.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandemmyawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickhelps-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonjunior.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isleofmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betcelebratesher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.isleofmtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iphone.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch-solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvbrazil-services.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.esperanto.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mtvshuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.api.noggin-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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