www.cbs.com

- CBS Broadcasting Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 71:62:a3:4d:71:37:97:6c:dc:c9:20:7d:87:7c:8d:c6 was issued on by GeoTrust Inc..

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CBS Broadcasting Inc.

Organization: CBS Broadcasting Inc.
Organization unit: Akamai SAN SSL OV
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:62:a3:4d:71:37:97:6c:dc:c9:20:7d:87:7c:8d:c6
Serial Number (int): 150714920784204827681746638086533320134
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 72:ef:52:46:a7:9a:85:bc:3c:59:5d:42:6c:89:76:e0:a7:42:24:a3
Fingerprint (sha256): 2c:97:65:0b:a5:f5:74:90:02:86:ef:09:27:de:30:ed:c1:9d:93:e4:49:0e:33:e7:24:73:e9:57:bd:68:ba:37

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.cbs.com

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.chowhound.com
www.chowstatic.com
dw.cbsimg.net
www.chowmagazine.com
secure.tv.com
test.techrepublic.com
www.techrepublic.com
amp.insideedition.com
pm2.fonts.cbsnews.com
cc.cnetcontent.com
cdn.cnetcontent.com
rev.cbsi.com
fonts.cbsi.com
static-1.tvgcdn.net
static-5.tvgcdn.net
static-3.tvgcdn.net
static.tvgcdn.net
static-2.tvgcdn.net
cimg.tvgcdn.net
hdvod.tvgcdn.net
static-4.tvgcdn.net
pmd.tvgcdn.net
cnet4.cbsistatic.com
cnet2.cbsistatic.com
cnet1.cbsistatic.com
cnet3.cbsistatic.com
sportsline-sdg.cbsistatic.com
wwwimage-secure2.cbsstatic.com
wwwimage-secure5.cbsstatic.com
wwwimage-secure.cbsstatic.com
wwwimage-secure1.cbsstatic.com
wwwimage.cbsstatic.com
wwwimage-secure3.cbsstatic.com
wwwimage-secure4.cbsstatic.com
cdn4.cnet.com
pm2.fonts.cnet.com
www.cnet.com
test.cnet.com
cdn1.cnet.com
cdn3.cnet.com
cdn2.cnet.com
uat.cnet.com
feed.cnet.com
podcast-files.cnet.com
chowhound.chow.com
www.chow.com
search.chow.com
secure.metacritic.com
api.metacritic.com
amp.etonline.com
vidtech.cbsinteractive.com
movies.tvguide.com
www.tvguide.com
video.tvguide.com
mobilelistings.tvguide.com
rss.tvguide.com
mapi.tvguide.com
cbs.com
flv.sales.cbs.com
videoplayer.cbs.com
canstatic.cbs.com
www.cbs.com

Other certificates including the domain name cbs.com

(limited to 100 certificates)
dev-broker.mediapo.cbs.com
*.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
concur.cbs.com
box.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
viacomcbs-live.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
ny-asperafaspex.cwd.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
*.lb.cbs.com
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
airspace.cbsivideo.com
prospective.shared.global.fastly.net
*.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
adfs.cbs.com
audienceservices.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacomcbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
*.airspace-g.cbsivideo.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
cbsaavideo.com
shoogle.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
uccaas-expc.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
*.cbs.com
fluuid-dev.cbs.com
b3.shared.global.fastly.net
b3.shared.global.fastly.net
www.viacomcbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacom.tech
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
ehs.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
*.cbs.com
www.cbs.com
cbsco-cucm01-bv1.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com

Certificate

The complete raw certificate details for www.cbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK5DCCCcygAwIBAgIQcWKjTXE3l2zcySB9h3yNxjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYxMjEzMDAwMDAwWhcNMTgwMTE0MjM1
OTU5WjCBhTELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE5ldyBZb3JrMREwDwYDVQQH
DAhOZXcgWW9yazEeMBwGA1UECgwVQ0JTIEJyb2FkY2FzdGluZyBJbmMuMRowGAYD
VQQLDBFBa2FtYWkgU0FOIFNTTCBPVjEUMBIGA1UEAwwLd3d3LmNicy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyR3tqEyY4+ugUy17n4DA//l/
Di7rVUnaZiueJ4r7GFV702Ccle6xLVSdQFqUg7ygyHpGLjSqdgG1I5ugmHgXjXm3
P33FHbRiafiFafdTr6Fnhpo8GaroNtMzRr6BvRUTOmyDndjsTnSz+E+EcY5Jf1kt
VCwYpA1xgDpBLCAbTlT68hB7eQ7JnC/9eC26gwkTqhz47rlVf/B5E+TPgM66EQuv
hgcjZWybT3Jht8wHJObBMBptN27FvaMoJwjLqy1VoNeybwkLrbpgEUc0PZsET892
Y5KEnbNQpEekV4eES5s446WuQlgKj1hETBMxTBo/LDPjyNxh++UKKuMlGz+LAgMB
AAGjggeOMIIHijCCBP0GA1UdEQSCBPQwggTwghF3d3cuY2hvd2hvdW5kLmNvbYIS
d3d3LmNob3dzdGF0aWMuY29tgg1kdy5jYnNpbWcubmV0ghR3d3cuY2hvd21hZ2F6
aW5lLmNvbYINc2VjdXJlLnR2LmNvbYIVdGVzdC50ZWNocmVwdWJsaWMuY29tghR3
d3cudGVjaHJlcHVibGljLmNvbYIVYW1wLmluc2lkZWVkaXRpb24uY29tghVwbTIu
Zm9udHMuY2JzbmV3cy5jb22CEmNjLmNuZXRjb250ZW50LmNvbYITY2RuLmNuZXRj
b250ZW50LmNvbYIMcmV2LmNic2kuY29tgg5mb250cy5jYnNpLmNvbYITc3RhdGlj
LTEudHZnY2RuLm5ldIITc3RhdGljLTUudHZnY2RuLm5ldIITc3RhdGljLTMudHZn
Y2RuLm5ldIIRc3RhdGljLnR2Z2Nkbi5uZXSCE3N0YXRpYy0yLnR2Z2Nkbi5uZXSC
D2NpbWcudHZnY2RuLm5ldIIQaGR2b2QudHZnY2RuLm5ldIITc3RhdGljLTQudHZn
Y2RuLm5ldIIOcG1kLnR2Z2Nkbi5uZXSCFGNuZXQ0LmNic2lzdGF0aWMuY29tghRj
bmV0Mi5jYnNpc3RhdGljLmNvbYIUY25ldDEuY2JzaXN0YXRpYy5jb22CFGNuZXQz
LmNic2lzdGF0aWMuY29tgh1zcG9ydHNsaW5lLXNkZy5jYnNpc3RhdGljLmNvbYIe
d3d3aW1hZ2Utc2VjdXJlMi5jYnNzdGF0aWMuY29tgh53d3dpbWFnZS1zZWN1cmU1
LmNic3N0YXRpYy5jb22CHXd3d2ltYWdlLXNlY3VyZS5jYnNzdGF0aWMuY29tgh53
d3dpbWFnZS1zZWN1cmUxLmNic3N0YXRpYy5jb22CFnd3d2ltYWdlLmNic3N0YXRp
Yy5jb22CHnd3d2ltYWdlLXNlY3VyZTMuY2Jzc3RhdGljLmNvbYIed3d3aW1hZ2Ut
c2VjdXJlNC5jYnNzdGF0aWMuY29tgg1jZG40LmNuZXQuY29tghJwbTIuZm9udHMu
Y25ldC5jb22CDHd3dy5jbmV0LmNvbYINdGVzdC5jbmV0LmNvbYINY2RuMS5jbmV0
LmNvbYINY2RuMy5jbmV0LmNvbYINY2RuMi5jbmV0LmNvbYIMdWF0LmNuZXQuY29t
gg1mZWVkLmNuZXQuY29tghZwb2RjYXN0LWZpbGVzLmNuZXQuY29tghJjaG93aG91
bmQuY2hvdy5jb22CDHd3dy5jaG93LmNvbYIPc2VhcmNoLmNob3cuY29tghVzZWN1
cmUubWV0YWNyaXRpYy5jb22CEmFwaS5tZXRhY3JpdGljLmNvbYIQYW1wLmV0b25s
aW5lLmNvbYIadmlkdGVjaC5jYnNpbnRlcmFjdGl2ZS5jb22CEm1vdmllcy50dmd1
aWRlLmNvbYIPd3d3LnR2Z3VpZGUuY29tghF2aWRlby50dmd1aWRlLmNvbYIabW9i
aWxlbGlzdGluZ3MudHZndWlkZS5jb22CD3Jzcy50dmd1aWRlLmNvbYIQbWFwaS50
dmd1aWRlLmNvbYIHY2JzLmNvbYIRZmx2LnNhbGVzLmNicy5jb22CE3ZpZGVvcGxh
eWVyLmNicy5jb22CEWNhbnN0YXRpYy5jYnMuY29tggt3d3cuY2JzLmNvbTAJBgNV
HRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8v
Z24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgIwgYQw
PwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMv
cmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90
cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9I9qFeJuj
fFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2duLnN5bWNk
LmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcnQwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdQDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09
EcTNtuy+zAAAAVj4Mmt1AAAEAwBGMEQCIH3scM/O4tef/7VwtkfzdMs2WGvKLbX9
op+SPrH1j9POAiA2j5L8FT5uvyKRPxvS4QayS0/X4A6Afc9V3kwus8mDKQB3AO5L
vbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABWPgya7kAAAQDAEgwRgIh
AOPghcozOA9Or6kL/hutBHqsil3P2AdUsgYP4WdBHvLyAiEAx97E5WZQiYA1z8wl
zS96NQu6XVWqz1cZV9DtCdhQeU4wDQYJKoZIhvcNAQELBQADggEBAJX77myq/zhz
TdMHjJhyWNR8IfJq9bgXGJERBmmYi/7XaarnbuWtRYeBR8TMl5HWZ6FWXz/8iVN6
WMx1MXvzhwcvCPT/iYyZQHeDjzCR58s5slSpihWbuobc/+hNG7cSS3Ql9SRwnTae
IboSnDmoxqqLrT8I1rY4kwdDTygiPMgFZnLyWCThGTDIHv1KRucqJqcHv01idPfe
Wx2U0nTHVGFbEAoSgBpLkS26vMW1qtYP2tALZpnwkLMnWcffbzYcoMiaeOLXwJrR
C+vjyzTlCFJJBc4Gcgbc11ezj4p/gfxLMlFMHsiUmUF/f6mXVEDkMvUnt1nAaTyn
z8490YpcgoU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMkd7ahMmOProFMte5+A
wP/5fw4u61VJ2mYrnieK+xhVe9NgnJXusS1UnUBalIO8oMh6Ri40qnYBtSOboJh4
F415tz99xR20Ymn4hWn3U6+hZ4aaPBmq6DbTM0a+gb0VEzpsg53Y7E50s/hPhHGO
SX9ZLVQsGKQNcYA6QSwgG05U+vIQe3kOyZwv/XgtuoMJE6oc+O65VX/weRPkz4DO
uhELr4YHI2Vsm09yYbfMByTmwTAabTduxb2jKCcIy6stVaDXsm8JC626YBFHND2b
BE/PdmOShJ2zUKRHpFeHhEubOOOlrkJYCo9YREwTMUwaPywz48jcYfvlCirjJRs/
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150714920784204827681746638086533320134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CBS Broadcasting Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.cbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24841882216774287159430028221060536455429167304985805327056297153947433319876302534245794517154981932274585166927106484851951533624964417487582153848949539942498527028900225435079191535525538700626034348758523376651673192273919532752037043015909169067996653728373248117838811583579313445757251382608641783453061510131040952721239732954890711238126184292624168493111798569350351906426657512219967583500478396955539155935706435831748965532382972634790001946203117107948485436624797249206167173660647040193759726541114901289005797417667351023691072228401778844814597248652887693368790780031734527278545607137705070378891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowhound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dw.cbsimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.insideedition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cbsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rev.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-1.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-5.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-3.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-2.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimg.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdvod.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-4.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmd.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet4.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet2.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet1.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet3.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsline-sdg.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure2.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure5.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure1.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure3.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure4.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast-files.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chowhound.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.etonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidtech.cbsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilelistings.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapi.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flv.sales.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoplayer.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canstatic.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000158f8326b75000004030046304402207dec70cfcee2d79fffb570b647f374cb36586bca2db5fda29f923eb1f58fd3ce0220368f92fc153e6ebf22913f1bd2e106b24b4fd7e00e807dcf55de4c2eb3c98329007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000158f8326bb90000040300483046022100e3e085ca33380f4eafa90bfe1bad047aac8a5dcfd80754b2060fe167411ef2f2022100c7dec4e56650898035cfcc25cd2f7a350bba5d55aacf571957d0ed09d850794e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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