www.viacom.com

- Viacom International Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:84:bb:3d:be:5a:70:6d:c7:db:fb:aa:55:1b:78:7a was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:84:bb:3d:be:5a:70:6d:c7:db:fb:aa:55:1b:78:7a
Serial Number (int): 15310688841385954201365220581187483770
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c4:c2:5f:bc:d1:07:0b:65:2d:c7:92:ca:5f:e1:5a:cc:17:6c:a6:ca
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c3:61:20:07:00:89:0f:bc:4f:71:e5:15:9f:4a:13:36:02:3f:68:db
Fingerprint (sha256): 25:a5:1c:5f:3c:88:ee:5d:09:21:82:8f:e6:5e:24:d7:98:bb:00:f0:73:c3:32:96:bb:c2:4b:1b:6f:65:1c:bd

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.viacom.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacom.com
viacom.com
www.mtvu.com
media-utils.mtvnservices.com
media.mtvnservices-d.mtvi.com
www.spiketv.nl
api.qa.bet.com
www.ratemyprofessors-q.mtvi.com
staging.api.mtv.com
www.paramountnetwork.es
keysvc.mtvnservices.com
files.spike.com
media-utils-live.mtvnservices-q.mtvi.com
www.mtvpress.com
mobilefiles.nick.com
xbox.mtvnservices.com
detektive.mtvnservices.com
player-test.channel5.com
testing.bellator.vmn.io
media-utils-live.mtvnservices.com
player.channel5.com
relaunch.mtv.com.br
www.mtv.com.br
gameservices.mtvn.com
origin.l3.ts.mtvnservices.com
api.cc.com
api.stage.bet.com
intl.esperanto.mtvi.com
tveauth.vimn-q.mtvi.com
videos.mtvnn.com
content.epix.com
media.mtvi.com
www.vh1.com
player.mtvnservices-q.mtvi.com
www.ratemyprofessors.com
neutron-api.viacom.tech-q.mtvi.com
secure.iphone.mtvn.com
www.mtv.it
search.mtvnservices.com
www.paramountnetwork.com
akasubs-test.channel5.com
feeds.mtvnservices.com
testing.forums.southpark.de.vmn.io
feeds.mtvnservices-q.mtvi.com
hlspkg-uat.mtvnservices.com
media.mtvnservices-q.mtvi.com
content.epixhd.com
search.mtvnservices-q.mtvi.com
akasubs-staging.channel5.com
dlvrsvc-uat.mtvnservices.com
tveguest.vimn-q.mtvi.com
www.spike.com
api.spike.com
www.mtvasia.com
tve.mtvnservices.com
player-staging.channel5.com
www.nick.com
www.mtv.nl
www.paramount.com
console.mtvnservices.com
www.paramountmovies.com
www.nickpress.com
recruitment.feedback.viacom.tech
gateway.bridge.viacom.com
www.nickelodeonparents.com
api.mtvnn.com
relaunch.mtv.pt
origin.l3.tsq.mtvnservices.com
akasubs.channel5.com
auth.id.viacom.com
aka.ts.mtvnservices.com
btg.mtvnservices.com
www.howihalo.com
keysvc-uat.mtvnservices.com
www.mtvunderthethumb.com
player.mtvnservices-d.mtvi.com
test.ratemyprofessors-q.mtvi.com
media.mtvnservices.com
qa.relaunch.bet.com
player.mtvnservices.com
www.bellator.com
www.cc.com
www.mtv.ch
specials.mtvnn.com
testing.forums.southpark.vmn.io
api.playplex.viacom.com
vip.viacom.tech-q.mtvi.com
www.vh1press.com
dlvrsvc.mtvnservices.com
www.viacomaffiliate.com
mtv.ch
xbox.mtvnservices-q.mtvi.com
hlspkg.mtvnservices.com
www.mundonick.com
tveauth.vimn.com
tve.mtvnservices-q.mtvi.com
files.cc.com
mtvbrazil-services.vimn.com

Other certificates including the domain name viacom.com

(limited to 100 certificates)
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
www.viacom.com
rockit.viacom.com
leapfrog-ssl-16.gcs-web.com
viacom.com
sapmdq01.mts.viacom.com
partner.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
viacom.com
orbusreporting.mtvi.com
www.nick.com
leapfrog-ssl-16.gcs-web.com
www.nick.com
mtvnservices.com
statuspage.io
www.viacom.com
thespotawayuatps.viacom.com
www.viacom.tech
fioriqa.viacom.com
casper.viacom.com
citrix.viacom.com
origin-stg.gateway.globalentry.viacom.com
www.viacom.com
spark.viacom.com
sapsrp.viacom.com
www.nick.com
smart.viacom.com
predict.rockit.viacom.com
statuspage.io
statuspage.io
leapfrog-ssl-16.gcs-web.com
statuspage.io
origin.test-science.viacom.com
statuspage.io
www.viacom.com
securemail.viacom.com
statuspage.io
www.viacom.com
vkfscreeners.viacom.com
www.viacom.com
webvpn.viacom.com
api-status.zipwhip.com
origin.www.viacom.com
estado.medios.com.ar
origin.tca.viacom.com
mx.viacom.com
statuspage.io
leapfrog-ssl-16.gcs-web.com
www.nick.com
api-status.zipwhip.com
labs.viacom.com
statuspage.io
marketqa.viacom.com
mtvnservices.com
origin.wpadmin.viacom.com
statuspage.io
www.viacom.tech
statuspage.io
statuspage.io
mtvnservices.com
www.nick.com
uat1.netcorepoc.bridge.viacom.com
vkfscreeners.viacom.com
statuspage.io
catalyst.viacom.com
www.nick.com
sandlot.viacom.com
www.viacom.com
statuspage.io
sfb-ae-west.viacom.com
www.viacom.tech
statuspage.io
www.viacom.com
statuspage.io
www.viacom.com
bps.viacom.com
saperq.viacom.com
leapfrog-ssl-16.gcs-web.com
www.viacom.tech
thespotaway.viacom.com
mybenefits.viacom.com
qa.gateway.globalentry.viacom.com
statuspage.io
MTVI.com
leapfrog-ssl-16.gcs-web.com
vegphotos.viacom.com
www.viacom.tech
statuspage.io
www.viacom.tech
www.viacom.tech
internal-status.viacom.com
spowa.viacom.com
prod-www-paramountnetwork-com.webplex.viacom.com
mtvnservices.com
statuspage.io

Certificate

The complete raw certificate details for www.viacom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbKPdXTSXXLlAMF6iI99
YFse83nJ2Fq1SQUFWERGTuYhYJJ+UJjgptwbsB4Md06oMXwAycjyjRsCWQa0hDoG
PIo8xYJb2XKp4GoculpDiYauxyve/SFyNqyiPKOhCZSQU+INkJA0Rn5Q5bayCWlF
hmt9fqMbdBDqCcXSNs9mv+gw4IVrnjaqPi5OHdaEQLUZXpP6RA2Gp1BPH+Iqklbj
Xt40zRaXjjVBtqsUuFGJIJEeTDUfuckyIE0U2CcgzE3JioovZ7/elEt8JpLYW6FO
uKZMLBkeCZTIk2CZnYa40+jkj8HB063L6CJXONXE8M3YtS7Y4QX26ZocQIDsN8nS
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15310688841385954201365220581187483770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20917371727452970953134386651581432217722836806496644630814317328642622124743267897147994818947684997585264837679475428875323001954365162018517129570576834969132048610036566071232921576289652937330899526181848014915574951216559165132949308918668355683722988123886180223792689246749714476764910542135945746183184105645538527055292009941130033919703257591589235288632989069667974115263457598021299212995450859322773556353602864461876855970958670969638192995179957537115740361126662386391069450080919242447291739211102563946759193994726500334232282004065927729640377484281655128617390424322878360087423791044402443047467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4c25fbcd1070b652dc792ca5fe15acc176ca6ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiketv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratemyprofessors-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefiles.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detektive.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-test.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.bellator.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-utils-live.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameservices.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.esperanto.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.epix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratemyprofessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iphone.mtvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs-test.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlspkg-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.epixhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs-staging.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveguest.vimn-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-staging.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.feedback.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch.mtv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasubs.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btg.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howihalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvc-uat.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvunderthethumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ratemyprofessors-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.relaunch.bet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specials.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.forums.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.viacom.tech-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vh1press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlvrsvc.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlspkg.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveauth.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tve.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvbrazil-services.vimn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166179d09cc000004030046304402204f748b79315e06209f6e57799ce9cc21b9a5d4c8938b9c39b85e5f0382f6c7ff0220242ac08ad267920cc9b7530b7124eddeb10b00a0ccdbee596b205d69788be7770076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166179d0aaf00000403004730450220047968c412bf5d950b04a5ad626b1a1f4140c3e97e04dc4909d3ae7351c6da7c022100a65841ca2a995950847c7dda81c147a0f2fc5227f751a67ec90032bd80026e3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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