www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:55:c4:ad:d8:48:e7:ae:ae:ab:fc:81:7e:62:d9:03 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:55:c4:ad:d8:48:e7:ae:ae:ab:fc:81:7e:62:d9:03
Serial Number (int): 19054526299655612133612119451620268291
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:8a:63:02:1d:d1:60:b1:f3:ff:8d:b7:a0:ab:0b:c6:c3:5a:d3:00
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d8:05:86:f7:cb:ad:50:2e:f3:4d:d9:f0:33:c2:ff:5d:b8:f0:16:3b
Fingerprint (sha256): 24:22:7f:a8:17:09:fd:c0:5e:bb:b1:53:12:5d:7d:6d:3a:31:d3:6e:c6:12:03:f0:04:2f:c5:ad:3d:ba:a2:43

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacom.com
viacom.com
mtv.ch
dev.mtvshuga.com
staging.api.mtv.com
player.channel5.com
gameservices.mtvn.com
player.mtvnservices-q.mtvi.com
akasubs-test.channel5.com
www.mtv.nl
testing.forums.southpark.de.vmn.io
www.mtvu.com
player.mtvnservices.com
tve.mtvnservices.com
www.bellator.com
specials.mtvnn.com
www.nick.com
files.cc.com
origin.sp.tsq.mtvnservices.com
www.paramountnetwork.es
feeds.mtvnservices.com
recruitment.feedback.viacom.tech
www.cc.com
secure.iphone.mtvn.com
dlvrsvc-uat.mtvnservices.com
player-staging.channel5.com
videos.mtvnn.com
api.playplex.viacom.com
www.mtv.it
player.mtvnservices-d.mtvi.com
tveauth.vimn-q.mtvi.com
player-test.channel5.com
origin.sp.ts.mtvnservices.com
akasubs.channel5.com
dlvrsvc.mtvnservices.com
mtvbrazil-services.vimn.com
www.spiketv.nl
www.mundonick.com
media-utils-live.mtvnservices.com
search.mtvnservices-q.mtvi.com
auth.id.viacom.com
testing.forums.southpark.vmn.io
tveguest.vimn-q.mtvi.com
media-utils-live.mtvnservices-q.mtvi.com
www.paramountmovies.com
testing.isleofmtv.vmn.io
xbox.mtvnservices.com
feeds.mtvnservices-q.mtvi.com
media.mtvnservices-d.mtvi.com
neutron-api.viacom.tech-q.mtvi.com
tveauth.vimn.com
keysvc.mtvnservices.com
keysvc-uat.mtvnservices.com
media-utils.mtvnservices.com
www.mtv.com.br
www.mtvunderthethumb.com
www.isleofmtv.com
origin.l3.ts.mtvnservices.com
media.mtvnservices-q.mtvi.com
testing.bellator.vmn.io
mobilefiles.nick.com
detektive.mtvnservices.com
www.mtv.ch
search.mtvnservices.com
www.howihalo.com
intl.esperanto.mtvi.com
btg.mtvnservices.com
www.vh1.com
api.cc.com
xbox.mtvnservices-q.mtvi.com
files.spike.com
hlspkg-uat.mtvnservices.com
media.mtvnservices.com
vip.viacom.tech-q.mtvi.com
console.mtvnservices.com
www.awesomenesstv.com
hlspkg.mtvnservices.com
www.vh1press.com
media.mtvi.com
tve.mtvnservices-q.mtvi.com
solutions.viacom-q.mtvi.com
www.nickelodeonparents.com
origin.l3.tsq.mtvnservices.com
origin.vz.tsq.mtvnservices.com
api.mtvnn.com
origin.vz.ts.mtvnservices.com
www.nickpress.com
www.mtvpress.com
gateway.bridge.viacom.com
qa.relaunch.bet.com
akasubs-staging.channel5.com
api.stage.bet.com
www.paramount.com
www.mtvasia.com
api.spike.com
aka.ts.mtvnservices.com
www.keepviacom.com
api.qa.bet.com
www.paramountnetwork.com

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75WYKeKAr4K6zMJsTRw8
iQqu0nz9ZsrRoN8gSMcjKVyLZRMz7GIsPjHidJDtNYiSxpRHFTrnDI7weqAWVeI3
CzmTvEQ7v++K7pQmR91kw3jCqsPwn9E3Ur52qyXis+7XU6PO6xHL5ycsXld/9K2U
vt/xSslmCjapYvX3+otpSaks+eX2/ST9Yhkrv7DVKNRgqAKiTnI2B/THpNvG48vb
si9mcXwGz3LDpg5NciB96YA7GRfUL9koKU8r1yevuahwNSYKDdFtwncYkNVU7Vyy
AuQftLBfTA2bjHKsCIylpVpyOjxkw/w1NrM6GZVPHeQ9QzzE+Cqjsnuo+Bort5re
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19054526299655612133612119451620268291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30244722629520045938649258123669767513381228896915868879779969522924323548691196658431688601611859204450835201152852975774876339571344933381387504717021805907511662988639384654330636785911724265758574277297160630013213501646684689588821937470895214395346699443725306900306501566417611919215230472006654244401930042991441205474696541694824973981867370787291362040778613111957648848720412874381121580991169378416029828673372033296653290760151189497739202971566287873034167393405334023085864259425295811394586220699508169949214583378725693519265338490048800968468430129647791909726691766146575652712968233707587201851101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							048a63021dd160b1f3ff8db7a0ab0bc6c35ad300
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mtvshuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameservices.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs-test.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specials.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iphone.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-staging.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-test.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.sp.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvbrazil-services.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiketv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.isleofmtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isleofmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howihalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.esperanto.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btg.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlspkg-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlspkg.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.vz.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.relaunch.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs-staging.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c74485f3000000403004630440220191aaf976ddb83dada0f9c04b4c73eeebd0f89fb4658f6def6dc651c0a74c8120220575c3171477223efa6b4c4f3aa544a45babf77d26e338177502a42150908ec2e0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c74485fb70000040300473045022100c19bb04c8397d2e96f75e6d5ea50c672d4a6f1a793ff78833c742e71f648df930220031a07ede01f93c7c99b56b75a5a14a1e55337aee2459449462eb68f46b67d5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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