www.nick.com

- Viacom International Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:3d:95:cb:d6:3b:ad:d3:09:cd:fd:51:51:2c:23:7a was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:3d:95:cb:d6:3b:ad:d3:09:cd:fd:51:51:2c:23:7a
Serial Number (int): 14941276290654573169332080641040982906
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b0:01:76:8d:88:6b:20:d5:83:46:55:16:c0:7c:0d:20:1d:62:89:c9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): b0:76:99:1a:7c:0a:1c:78:7e:10:d6:f5:a0:f4:5c:e6:7f:06:ba:d0
Fingerprint (sha256): 2d:c7:ed:34:02:e3:e7:7f:1d:71:40:65:c4:40:8e:2b:af:4d:43:5d:c7:12:c7:01:39:b6:ee:3e:ac:7f:40:fa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.nick.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nick.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nick.com
nick.com
qa.gateway.globalentry.viacom.com
wiki.southpark.de
stg.gateway.globalentry.viacom.com
api.nick.com
api.viacom-q.mtvi.com
docs.webplex.io
www.comedycentral.es
wiki.southpark.cc.com
testing.southpark.br.vmn.io
www.southpark.de
premieres.viacom.com
www.viacom-q.mtvi.com
www.mtvema.com
miaw.mtv.com.br
www.comedycentralarabia.com
www.comedycentral.pl
www.paramountchannel.ro
gateway.globalentry.viacom.com
forums.southpark.cc.com
testing.trl.mtv.vmn.io
dev.gateway.globalentry.viacom.com
www.nickelodeonadventure.com
testing.repo.cc.vmn.io
www.nick-q.mtvi.com
forums.southpark.de
www.comedycentral.hu
forums.southparkstudios.nu
dev.gateway.contentplatform.viacom.com
www.nick-d.mtvi.com
testing.southpark.vmn.io
www.comedycentralasia.com
www.nickelodeonadventure.es
forgot.noggin-q.mtvi.com
www.comedycentral.tv
uat.gateway.globalentry.viacom.com
gateway.contentplatform.viacom.com
forgot.noggin.com
www.paramountpictures.com.br
uat.contentplatform.viacom.com
testing.southpark.nu.vmn.io
api.nick-q.mtvi.com
www.mtvbase.com
neutron-api.viacom.tech-s.mtvi.com
www.mtvjapan.com
www.xbox.comedycentral.com
www.tvland.com
www.paramountchannel.it
www.comedycentral.com.br
uat.gateway.contentplatform.viacom.com
api.playplex.viacom.com
profile.nick-q.mtvi.com
www.comedycentral.la
www.mtv.de
images.mtvnn.com
southpark.uk.vmn.io
wpadmin.viacom-q.mtvi.com
qa.gateway.contentplatform.viacom.com
wiki.southparkstudios.co.uk
forums.southparkstudios.co.uk
www.primacomedycentral.cz
dev.contentplatform.viacom.com
www.mtv.fr
www.noggin.com.br
www.paramountchannel.hu
www.comedycentral.com.ro
www.southparkstudios.co.uk
stg.contentplatform.viacom.com
www.mtv.co.za
www.comedycentralafrica.com
api.theloudhousegame.com
www.mtv.it
www.paramountchannel.fr
www.mtv.es
www.xbox.vh1.com
testing.southpark.lat.vmn.io
testing.southpark.uk.vmn.io
www.comedycentral.fr
testing.southpark.de.vmn.io
relaunch.comedycentral.la
www.mtv.pt
www.mtv.be
miaw.mtvla.com
meuspremiosnick.uol.com.br
stg.gateway.contentplatform.viacom.com
www.paramountchannel.pl
qa.contentplatform.viacom.com
www.comedycentral.it
wiki.southparkstudios.nu
southpark.nu.vmn.io
www.rooftoprunnergame.com
secure.mtv.vmn.io
www.xbox.mtv.com
southpark.de.vmn.io
www.southparkstudios.nu

Other certificates including the domain name nick.com

(limited to 100 certificates)
www.viacom.com
www.nick.com
www.events.nick.com
www.nick.com
www.nick.com
mtvnservices.com
www.viacom.com
at.nick.com
viacomcbs.com
www.viacom.com
www.nick.com
www.viacom.com
www.viacom.com
www.viacom.com
image.e.outdoors.org
www.nick.com
profile.nick.com
image.e.outdoors.org
mtvnservices.com
mtvnservices.com
www.nick.com
www.nick.com
www.viacom.com
sfb-ae-west.viacom.com
www.viacom.com
secure.arcade.nick.com
communickation.nick.com
yestocrazy.nick.com
mtvnservices.com
www.nick.com
www.nick.com
www.viacom.com
at.nick.com
www.viacom.com
shotgun-test.nick.com
www.viacomcbs.com
origin.www.nick.com
www.viacom.com
www.nick.com
mtvnservices.com
mtvnservices.com
thekidwhowouldbeking.nick.com
mtvnservices.com
www.nick.com
nick.com
www.viacom.com
ssc.nick.com
www.nick.com
nicktoons.nick.com
www.viacom.com
viacomcbs.com
www.nick.com
www.sbsmartypants.nick.com
www.viacom.com
www.viacomcbs.com
pc.nick.com
www.viacom.com
www.nick.com
recs.nick.com
mtvnservices.com
origin.www.nick.com
yestocrazy.nick.com
foxstudios.nick.com
www.viacom.com
sfb-webext-ams.viacom.com
www.nick.com
www.viacom.com
www.viacom.com
www.viacom.com
www.nick.com
www.viacom.com
shotgun-test.nick.com
www.nick.com
www.nick.com
at.nick.com
samandcat.nick.com
image.e.outdoors.org
www.nick.com
viacomcbs.com
www.nick.com
www.viacom.com
www.viacom.com
at.nick.com
www.viacom.com
www.nick.com
at.nick.com
sfb-webext-east.viacom.com
mtvnservices.com
sfb-ae-east.viacom.com
esmailrelay.nick.com
www.viacom.com
secure.arcade.nick.com
mtvnservices.com
www.viacom.com
tn.nick.com
www.viacom.com
www.viacomcbs.com
www.nick.com
mtvnservices.com
www.nick.com

Certificate

The complete raw certificate details for www.nick.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbW3boDp/oRtrXHoCA58
nuhUhlL4usGoexEWbqe39PhFi10Y1GcZRaxdjx8mr29eeFYjjcaStTgEig0HySpa
/lYlu4YLO1xtbeZcrP5UxPiACCjVW/Tlt0HHWyWsnZgV6eDCFLn2jBpRO2qZYlZz
5Yr+NxcHMcFDmqmULRQ5snNuLk4TVcVvcZUF0JCSEX33yQVH2N35GfTdQzSDIWBp
8ItyBZ1GvA8aMl7aAVu/wqYGqlLPQeRRqhtDFXAZJt3fT3IBGmE/4C4QKu8s1VYm
TJ5vqonRJDyjVOlWMji+6aHo7VVGuHtfSndbnFS44UcKvuKYQeNwDFi/Cq1ZYf5l
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14941276290654573169332080641040982906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nick.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23948647399206075688162351223819319071840872276962945155837554707325171967951838827665002853866339425833176270761456784059292209924188378682530964706606687133918851827945232369645272465603059635886278915565952662808407511915590535577320912646747504583981034178905822913315706310885966708728751023456294478708781466094575017095230378205994420396253044921220025597890583618637229447784850474188614279255126506486644122020525154189240136751576258355312261882501953073399976578694897885550125392302998479505366546866239318761165499561701272578949400815228073993962505476848062254343360687016854618575541256996493511779819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b001768d886b20d583465516c07c0d201d6289c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2348 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.webplex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.br.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premieres.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miaw.mtv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentralarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.trl.mtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.repo.cc.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southparkstudios.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentralasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonadventure.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgot.noggin-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgot.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountpictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.nu.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nick-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.viacom.tech-s.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvjapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox.comedycentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.nick-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southpark.uk.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primacomedycentral.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noggin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.com.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentralafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theloudhousegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.lat.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.uk.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch.comedycentral.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miaw.mtvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuspremiosnick.uol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southparkstudios.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southpark.nu.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rooftoprunnergame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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