www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:11:04:6c:78:9e:6b:56:a2:f0:23:21:bb:e0:08:f5 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:11:04:6c:78:9e:6b:56:a2:f0:23:21:bb:e0:08:f5
Serial Number (int): 6734498749129355930869309534734649589
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 35:bf:60:41:09:c4:e0:6d:69:0e:33:0f:5f:d2:ca:ff:ff:62:4a:07
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ea:89:67:34:fd:a9:49:b6:1f:20:61:c4:15:c5:ce:36:0b:03:6f:a9
Fingerprint (sha256): 22:0a:61:de:c2:11:0c:9f:71:e1:7f:56:60:3c:a8:3c:74:04:23:dc:e4:5e:d4:c2:f1:bc:0b:c9:ff:89:29:92

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xbox.mtvnservices-q.mtvi.com
www.viacomcbsamericas.com
www.viacom.com
www.vh1press.com
www.vh1.com
www.spiketv.nl
www.slimefest.it
www.paramountnetwork.hu
www.paramountnetwork.es
www.paramountnetwork.cz
www.paramountnetwork.com
www.paramountmovies.com
www.paramountcomedy.ru
www.paramount.com
www.pandemmyawards.com
www.nickpress.com
www.nickjr.tv
www.nickjr.nl
www.nickjr.es
www.nickjr.dk
www.nickjr.de
www.nickjr.com.pl
www.nickjr.com.br
www.nickjr.com.au
www.nickhelps-q.mtvi.com
www.nickelodeonparents.com
www.nickelodeonjunior.fr
www.nick.co.uk
www.mtvunderthethumb.com
www.mtvpress.com
www.mtventertainment-q.mtvi.com
www.mtventertainment-d.mtvi.com
www.mtvasia.com
www.mtv.nl
www.mtv.it
www.mtv.com.br
www.mtv.com.au
www.mtv.co.il
www.keepviacomcbs-q.mtvi.com
www.keepviacom.com
www.keepcbs-q.mtvi.com
www.isleofmtv.com
www.firsttimedirectors-q.mtvi.com
www.betcelebratesher.com
www.bellator.com
www.awesomenesstv.com
vip.viacom.tech-q.mtvi.com
videos.mtvnn.com
viacom.com
tveguest.vimn-q.mtvi.com
tveauth.vimn-q.mtvi.com
tve.mtvnservices.com
tve.mtvnservices-q.mtvi.com
testing.isleofmtv.vmn.io
testing.forums.southpark.vmn.io
testing.forums.southpark.de.vmn.io
testing.bellator.vmn.io
staging.api.mtv.com
solutions.viacom-q.mtvi.com
secure.iphone.mtvn.com
search.mtvnservices-q.mtvi.com
relaunch-solutions.viacom-q.mtvi.com
recruitment.feedback.viacom.tech
player.mtvnservices.com
player.mtvnservices-q.mtvi.com
player.mtvnservices-d.mtvi.com
origin.vz.tsq.mtvnservices.com
origin.vz.ts.mtvnservices.com
origin.sp.tsq.mtvnservices.com
origin.sp.ts.mtvnservices.com
origin.l3.tsq.mtvnservices.com
origin.l3.ts.mtvnservices.com
origin.fs.tsq.mtvnservices.com
origin.fs.ts.mtvnservices.com
mtvbrazil-services.vimn.com
mobilefiles.nick.com
media.mtvnservices-q.mtvi.com
media.mtvnservices-d.mtvi.com
media.mtvi.com
media-utils-live.mtvnservices.com
media-utils-live.mtvnservices-q.mtvi.com
la.nickjr.tv
keysvc-uat.mtvnservices.com
intl.esperanto.mtvi.com
files.spike.com
files.cc.com
feeds.mtvnservices-q.mtvi.com
dlvrsvc-uat.mtvnservices.com
detektive.mtvnservices.com
dashboard.api.noggin-q.mtvi.com
auth.id.viacom.com
api.stage.bet.com
api.spike.com
api.qa.bet.com
api.playplex.viacom.com
api.mtvnn.com
api.cc.com

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPdDCCDlygAwIBAgIQBREEbHiea1ai8CMhu+AI9TANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMTA3MTkwMDAwMDBaFw0yMjAzMzAyMzU5NTlaMHAxCzAJBgNVBAYTAlVTMREw
DwYDVQQIEwhOZXcgWW9yazERMA8GA1UEBxMITmV3IFlvcmsxIjAgBgNVBAoTGVZp
YWNvbSBJbnRlcm5hdGlvbmFsIEluYy4xFzAVBgNVBAMTDnd3dy52aWFjb20uY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyIcYGwZcab+LWC9UzX
S2t2Xdac/Jkk1vylnb5CKYqhRfHn978yxgmmVxNBCDRJqi0sUDJ48wJdw8EYAwk/
fy7bRk0U6GhWBd06/SC4h9IPEPVILKVl3tFyeC8h1POFrqGi1eKsyIlQ2dkiyG5T
idfFSafVX3bcl3Jq/DnUPdBOSTxp9oM/nruobQA+ItCIL5iklRlsUZ31mN6jZYSI
+RbeMX6tgLOpIEK7vCHe9poO++tMrzkqaG1+8eXZCxuZry760Zve1HV7iUFKYc5x
7lvCy7aEyS/ZR+325/Cs8PS6vEbOv2lsDDEsl1wT43S+YKJ7RYvqnr5d2HWQE2Ag
gwIDAQABo4IMGjCCDBYwHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUw
HQYDVR0OBBYEFDW/YEEJxOBtaQ4zD1/Syv//YkoHMIIJHAYDVR0RBIIJEzCCCQ+C
HHhib3gubXR2bnNlcnZpY2VzLXEubXR2aS5jb22CGXd3dy52aWFjb21jYnNhbWVy
aWNhcy5jb22CDnd3dy52aWFjb20uY29tghB3d3cudmgxcHJlc3MuY29tggt3d3cu
dmgxLmNvbYIOd3d3LnNwaWtldHYubmyCEHd3dy5zbGltZWZlc3QuaXSCF3d3dy5w
YXJhbW91bnRuZXR3b3JrLmh1ghd3d3cucGFyYW1vdW50bmV0d29yay5lc4IXd3d3
LnBhcmFtb3VudG5ldHdvcmsuY3qCGHd3dy5wYXJhbW91bnRuZXR3b3JrLmNvbYIX
d3d3LnBhcmFtb3VudG1vdmllcy5jb22CFnd3dy5wYXJhbW91bnRjb21lZHkucnWC
EXd3dy5wYXJhbW91bnQuY29tghZ3d3cucGFuZGVtbXlhd2FyZHMuY29tghF3d3cu
bmlja3ByZXNzLmNvbYINd3d3Lm5pY2tqci50doINd3d3Lm5pY2tqci5ubIINd3d3
Lm5pY2tqci5lc4INd3d3Lm5pY2tqci5ka4INd3d3Lm5pY2tqci5kZYIRd3d3Lm5p
Y2tqci5jb20ucGyCEXd3dy5uaWNranIuY29tLmJyghF3d3cubmlja2pyLmNvbS5h
dYIYd3d3Lm5pY2toZWxwcy1xLm10dmkuY29tghp3d3cubmlja2Vsb2Rlb25wYXJl
bnRzLmNvbYIYd3d3Lm5pY2tlbG9kZW9uanVuaW9yLmZygg53d3cubmljay5jby51
a4IYd3d3Lm10dnVuZGVydGhldGh1bWIuY29tghB3d3cubXR2cHJlc3MuY29tgh93
d3cubXR2ZW50ZXJ0YWlubWVudC1xLm10dmkuY29tgh93d3cubXR2ZW50ZXJ0YWlu
bWVudC1kLm10dmkuY29tgg93d3cubXR2YXNpYS5jb22CCnd3dy5tdHYubmyCCnd3
dy5tdHYuaXSCDnd3dy5tdHYuY29tLmJygg53d3cubXR2LmNvbS5hdYINd3d3Lm10
di5jby5pbIIcd3d3LmtlZXB2aWFjb21jYnMtcS5tdHZpLmNvbYISd3d3LmtlZXB2
aWFjb20uY29tghZ3d3cua2VlcGNicy1xLm10dmkuY29tghF3d3cuaXNsZW9mbXR2
LmNvbYIhd3d3LmZpcnN0dGltZWRpcmVjdG9ycy1xLm10dmkuY29tghh3d3cuYmV0
Y2VsZWJyYXRlc2hlci5jb22CEHd3dy5iZWxsYXRvci5jb22CFXd3dy5hd2Vzb21l
bmVzc3R2LmNvbYIadmlwLnZpYWNvbS50ZWNoLXEubXR2aS5jb22CEHZpZGVvcy5t
dHZubi5jb22CCnZpYWNvbS5jb22CGHR2ZWd1ZXN0LnZpbW4tcS5tdHZpLmNvbYIX
dHZlYXV0aC52aW1uLXEubXR2aS5jb22CFHR2ZS5tdHZuc2VydmljZXMuY29tght0
dmUubXR2bnNlcnZpY2VzLXEubXR2aS5jb22CGHRlc3RpbmcuaXNsZW9mbXR2LnZt
bi5pb4IfdGVzdGluZy5mb3J1bXMuc291dGhwYXJrLnZtbi5pb4IidGVzdGluZy5m
b3J1bXMuc291dGhwYXJrLmRlLnZtbi5pb4IXdGVzdGluZy5iZWxsYXRvci52bW4u
aW+CE3N0YWdpbmcuYXBpLm10di5jb22CG3NvbHV0aW9ucy52aWFjb20tcS5tdHZp
LmNvbYIWc2VjdXJlLmlwaG9uZS5tdHZuLmNvbYIec2VhcmNoLm10dm5zZXJ2aWNl
cy1xLm10dmkuY29tgiRyZWxhdW5jaC1zb2x1dGlvbnMudmlhY29tLXEubXR2aS5j
b22CIHJlY3J1aXRtZW50LmZlZWRiYWNrLnZpYWNvbS50ZWNoghdwbGF5ZXIubXR2
bnNlcnZpY2VzLmNvbYIecGxheWVyLm10dm5zZXJ2aWNlcy1xLm10dmkuY29tgh5w
bGF5ZXIubXR2bnNlcnZpY2VzLWQubXR2aS5jb22CHm9yaWdpbi52ei50c3EubXR2
bnNlcnZpY2VzLmNvbYIdb3JpZ2luLnZ6LnRzLm10dm5zZXJ2aWNlcy5jb22CHm9y
aWdpbi5zcC50c3EubXR2bnNlcnZpY2VzLmNvbYIdb3JpZ2luLnNwLnRzLm10dm5z
ZXJ2aWNlcy5jb22CHm9yaWdpbi5sMy50c3EubXR2bnNlcnZpY2VzLmNvbYIdb3Jp
Z2luLmwzLnRzLm10dm5zZXJ2aWNlcy5jb22CHm9yaWdpbi5mcy50c3EubXR2bnNl
cnZpY2VzLmNvbYIdb3JpZ2luLmZzLnRzLm10dm5zZXJ2aWNlcy5jb22CG210dmJy
YXppbC1zZXJ2aWNlcy52aW1uLmNvbYIUbW9iaWxlZmlsZXMubmljay5jb22CHW1l
ZGlhLm10dm5zZXJ2aWNlcy1xLm10dmkuY29tgh1tZWRpYS5tdHZuc2VydmljZXMt
ZC5tdHZpLmNvbYIObWVkaWEubXR2aS5jb22CIW1lZGlhLXV0aWxzLWxpdmUubXR2
bnNlcnZpY2VzLmNvbYIobWVkaWEtdXRpbHMtbGl2ZS5tdHZuc2VydmljZXMtcS5t
dHZpLmNvbYIMbGEubmlja2pyLnR2ghtrZXlzdmMtdWF0Lm10dm5zZXJ2aWNlcy5j
b22CF2ludGwuZXNwZXJhbnRvLm10dmkuY29tgg9maWxlcy5zcGlrZS5jb22CDGZp
bGVzLmNjLmNvbYIdZmVlZHMubXR2bnNlcnZpY2VzLXEubXR2aS5jb22CHGRsdnJz
dmMtdWF0Lm10dm5zZXJ2aWNlcy5jb22CGmRldGVrdGl2ZS5tdHZuc2VydmljZXMu
Y29tgh9kYXNoYm9hcmQuYXBpLm5vZ2dpbi1xLm10dmkuY29tghJhdXRoLmlkLnZp
YWNvbS5jb22CEWFwaS5zdGFnZS5iZXQuY29tgg1hcGkuc3Bpa2UuY29tgg5hcGku
cWEuYmV0LmNvbYIXYXBpLnBsYXlwbGV4LnZpYWNvbS5jb22CDWFwaS5tdHZubi5j
b22CCmFwaS5jYy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3Ry
dXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwB
AgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHUG
CCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz
dC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkC
BAIEggFuBIIBagFoAHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcA
AAF6vByZ+wAABAMARzBFAiEA7OggRPQzk65PuQn0REh7gLUkyWVfEtVcq6GlRvDK
MJcCIEZDOFcERrZ9ceTLNuHgiDlTxC4CdPxMt9lbs5vAk0+bAHYAUaOw9f0BeZxW
bbg3eI8MpHrMGyfL956IQpoN/tSLBeUAAAF6vByaJgAABAMARzBFAiBBBpFPn3w/
u7yJrfZGm9pNyW/zH0Pzq69Awq7jn+C0vAIhAJj4Do1d/byfQOWqrI22iRI/W/me
i2HtFk+ZnNOaQMgUAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYA
AAF6vByZlgAABAMARzBFAiBzCACcJu46PwmAjOG4JIuQsqGbgHE0zuq6q2ujmQQT
uQIhAONBhI4tgCdv7ES0TBXkB0Vzcurw1dp+o1hFDl98i5RlMA0GCSqGSIb3DQEB
CwUAA4IBAQCbuBprf66YF2Wrb+Q9p/fEaCL7GQGmd+8gYYA5jRnmFw11ZbH5PWR2
qvwh9SxYgXzgppCl+bnkGbhOtud36njh1fYz4b6IaC64DW27jneQdlXfda45eBJ9
31jumq3CTN+S9O8UH/jskyVRP/E6GGc91vZgTPGWTVlidLWw/PFIQl/4/VwBEDtD
Opk1f9AbKxYFrhg224sXRgXUesInJaYBONaftzxuxSnWPMSNeCs3a+4Av6wszH1G
GapSzhv0BOTsl/uPagd8HpoChcEladgrAC5Sfs9MCXusopx0N+2kQ1ZPNqZ9vwIL
u7deGw4Aer+i0MG55/rSuVkyxGMRID5w
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyIcYGwZcab+LWC9UzX
S2t2Xdac/Jkk1vylnb5CKYqhRfHn978yxgmmVxNBCDRJqi0sUDJ48wJdw8EYAwk/
fy7bRk0U6GhWBd06/SC4h9IPEPVILKVl3tFyeC8h1POFrqGi1eKsyIlQ2dkiyG5T
idfFSafVX3bcl3Jq/DnUPdBOSTxp9oM/nruobQA+ItCIL5iklRlsUZ31mN6jZYSI
+RbeMX6tgLOpIEK7vCHe9poO++tMrzkqaG1+8eXZCxuZry760Zve1HV7iUFKYc5x
7lvCy7aEyS/ZR+325/Cs8PS6vEbOv2lsDDEsl1wT43S+YKJ7RYvqnr5d2HWQE2Ag
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6734498749129355930869309534734649589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24835676851763496003339382422012061384004818206881915689364803207055429565346334800241239773094366090814249138903791088029118084259922865752819547457566896607288807165814075648035609380442952704653441954988184567086074386503906931932584176903719051499666782286306085899069426539220618662207140019421346106441333734541000125602579585038617089128154317797532331724901699981839093572652209669229404549351058284880676483471983794158949210380216491149010926972932148826026347492619324419219693661653215823385138020353951137028865303613424545276857164547388226824397902553556462164149700206538178872996155126721564196741251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35bf604109c4e06d690e330f5fd2caffff624a07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2323 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbsamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiketv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slimefest.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountcomedy.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandemmyawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickhelps-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonjunior.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtventertainment-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isleofmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectors-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betcelebratesher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.isleofmtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iphone.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch-solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.fs.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvbrazil-services.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.nickjr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.esperanto.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.api.noggin-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017abc1c99fb0000040300473045022100ece82044f43393ae4fb909f444487b80b524c9655f12d55caba1a546f0ca30970220464338570446b67d71e4cb36e1e0883953c42e0274fc4cb7d95bb39bc0934f9b00760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017abc1c9a26000004030047304502204106914f9f7c3fbbbc89adf6469bda4dc96ff31f43f3abaf40c2aee39fe0b4bc02210098f80e8d5dfdbc9f40e5aaac8db689123f5bf99e8b61ed164f999cd39a40c81400760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017abc1c9996000004030047304502207308009c26ee3a3f09808ce1b8248b90b2a19b807134ceeabaab6ba3990413b9022100e341848e2d80276fec44b44c15e407457372eaf0d5da7ea358450e5f7c8b9465
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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