www.viacomcbs.com

- VIACOM INTERNATIONAL INC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:ab:e1:6f:4f:9d:55:e1:dd:a9:01:0d:b6:df:f6:58 was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VIACOM INTERNATIONAL INC

Organization: VIACOM INTERNATIONAL INC
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ab:e1:6f:4f:9d:55:e1:dd:a9:01:0d:b6:df:f6:58
Serial Number (int): 3550911115505670676679706433814525528
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 97:f9:ed:90:98:7f:7f:29:0e:a1:82:9f:f1:9d:81:cc:06:8e:2b:39
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 96:8d:1c:e0:c7:a3:67:f1:29:95:b5:12:e4:04:76:cb:57:f4:26:bd
Fingerprint (sha256): 1f:ab:b8:92:a8:a3:25:0c:c8:9e:83:2b:29:3a:3e:d0:60:96:6a:da:60:4c:2c:46:89:eb:a0:ed:ee:3a:d3:9b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.viacomcbs.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacomcbs.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacomcbs.com
*.app.webplex.vmn.io
*.cbs.com
*.noggin.com
*.paramount.tech
*.viacomcbs.com
activate.smithsonianchannel.com
api.publife.telefe.com.ar
cp105701.adp.paramount.tech
cp112360.adp.paramount.tech
cp450888.adp.paramount.tech
cp477481.adp.paramount.tech
cp477482.adp.paramount.tech
cp479184.adp.paramount.tech
cp541865.adp.paramount.tech
cp541867.adp.paramount.tech
cp541868.adp.paramount.tech
dev-www.home.paramountglobalservicing.com
dev-www.home.viacbscontent.com
dev-www.paramountglobalservicing.com
dev-www.promopassport.com
dev-www.viacbscontent.com
dev.noggintime.com
dev2-www.home.paramountglobalservicing.com
dev2-www.home.viacbscontent.com
dev2-www.paramountglobalservicing.com
dev2-www.promopassport.com
dev2-www.viacbscontent.com
ext-jira.cbsi.com
granhermano.mitelefe.com
kca.nickelodeon.ee
kca.nickelodeon.lt
kca.nickelodeon.lv
kca.nickelodeon.ua
kids-dev.noggin.com
kids-qa.noggin.com
kids.noggin.com
mimhdi.adp.paramount.tech
mtvplus.adp.paramount.tech
netmix.cbsawswcmktg.com
neutron-api.paramount.tech
odata.publife.telefe.com.ar
pmtprodops.adp.paramount.tech
pp-www.home.paramountglobalservicing.com
pp-www.home.viacbscontent.com
pp-www.paramountglobalservicing.com
pp-www.promopassport.com
pp-www.viacbscontent.com
prd.cpauthentication.nick.com
pressviewing.mtvema.com
primetimedelivery.cbspromo.com
prodops.adp.paramount.tech
promo.paramount.digital
publife.telefe.com.ar
qa-neutron-api.paramount.tech
qa-www.home.paramountglobalservicing.com
qa-www.home.viacbscontent.com
qa-www.paramountglobalservicing.com
qa-www.promopassport.com
qa-www.viacbscontent.com
qa.noggintime.com
qa2-www.home.paramountglobalservicing.com
qa2-www.home.viacbscontent.com
qa2-www.paramountglobalservicing.com
qa2-www.promopassport.com
qa2-www.viacbscontent.com
qedata.viacomcbs.com
reporting.publife.telefe.com.ar
stage-qedata.viacomcbs.com
stage-tcms.viacomcbs.com
tcms.viacomcbs.com
telefe.adp.paramount.tech
twitter-voting.vimnservices.com
uat-www.cbssi.com
uat-www.home.cbssi.com
uat-www.home.viacbscontent.com
uat-www.promopassport.com
uat-www.viacbscontent.com
uat.ams.cbs.com
uat.cbssi.com
uat.home.cbssi.com
uat2-www.promopassport.com
uk.qa-neutron-api.paramount.tech
viacomcbs.com
www.cbstransworks.com
www.findmycbs.com
www.home.viacbscontent.com
www.noggintime.com
www.promopassport.com
www.smithsonianchannel.com
www.tmntsf.com
www.vcnipeople.com
www.viacbscontent.com

Other certificates including the domain name viacomcbs.com

(limited to 100 certificates)
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
ir.viacomcbs.com
image.serviciokia.com.ec
cloud.email.viacomcbs.com
MTVI.com
image.serviciokia.com.ec
www.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
www.viacom.tech
www.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
stillsarchive.viacomcbs.com
image.serviciokia.com.ec
inview.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
stillsarchive.viacomcbs.com
xdam-nonprod.viacomcbs.com
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
mtvi.com
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
san-5-s11.tlsprovisioning.exacttarget.com
image.serviciokia.com.ec
creativeandstrategy.viacomcbs.com
paramount.com
image.serviciokia.com.ec
image.serviciokia.com.ec
halloweencontest.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
mtvi.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
stillsarchiveuat.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdsiportal.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
eai-prd.viacomcbs.com
creativelibrary.viacomcbs.com
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
mtvi.com
www.viacomcbs.com
www.viacom.tech
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
origin.prod-acquia.viacomcbs.com
www.viacomcbs.com
inview.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdi.paramount.com
www.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
mtvi.com
MTVI.com
devplus.phxdocstore.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec

Certificate

The complete raw certificate details for www.viacomcbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEOAPbpb/+BsN6HVF5fsdPugeamThm
fOO0noDPPzWnTSQw0vHD7K70AOKtZW73+2EtCk4obnpVy7QVZXBa3HUEWg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3550911115505670676679706433814525528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VIACOM INTERNATIONAL INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacomcbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00043803dba5bffe06c37a1d51797ec74fba079a9938667ce3b49e80cf3f35a74d2430d2f1c3ecaef400e2ad656ef7fb612d0a4e286e7a55cbb41565705adc75045a
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97f9ed90987f7f290ea1829ff19d81cc068e2b39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.webplex.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activate.smithsonianchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.publife.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp105701.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp112360.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp450888.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477481.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477482.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp479184.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541865.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541867.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541868.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.home.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.noggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-www.home.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-www.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-jira.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granhermano.mitelefe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids-dev.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids-qa.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimhdi.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvplus.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netmix.cbsawswcmktg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odata.publife.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtprodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-www.home.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-www.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.cpauthentication.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressviewing.mtvema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primetimedelivery.cbspromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.paramount.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publife.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-neutron-api.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.home.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.noggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-www.home.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-www.home.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-www.paramountglobalservicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-www.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qedata.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.publife.telefe.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qedata.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-tcms.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcms.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefe.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter-voting.vimnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbssi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.home.cbssi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.home.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.ams.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cbssi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.home.cbssi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2-www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.qa-neutron-api.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbstransworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findmycbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.home.viacbscontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noggintime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promopassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmntsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vcnipeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacbscontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018505761b1f00000403004630440220277dfe561a029b7aad3f27c7653b5cbc3ca75d50027d7e0c66850ebc7050146a022067489afb4941a6208105b70da5e2cc63f07ee9c619319612b3be840bfb86aa7b007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018505761b0d0000040300473045022051b3dc94e2209f5a42e109819e89163b722eebbdcf9d145ffcb28ef91b4dd12c022100c888d2d265c88c97bbdb9014fc738440b220e006707e2faad92bc1c016998a080077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018505761c3c000004030048304602210083b37d9b04cfaddb68e78fe8c87e2d8738aee23717c18ce91a34f449567298a4022100855892daf83d51f1e7156bebb64a75ac585ba709ac448e92aff08d58740d940c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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