viacomcbs.com

- Viacom Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:e3:e9:ce:d7:22:5c:de:bd:a3:15:d1:2c:67:c4:df was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Viacom Inc

Organization: Viacom Inc
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:e3:e9:ce:d7:22:5c:de:bd:a3:15:d1:2c:67:c4:df
Serial Number (int): 21121813512681091898910337771699160287
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ec:b8:44:30:8a:65:32:ea:8a:4c:91:20:28:c7:8a:34:06:73:7c:07
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b3:c2:5e:b0:bb:78:d1:5a:88:22:1c:30:99:30:f3:36:0a:41:84:9f
Fingerprint (sha256): 3a:fb:59:65:74:3a:77:de:54:43:25:fa:91:26:69:6f:0b:d2:61:57:f2:82:ba:b9:c9:1a:75:ba:7f:d8:e6:ae

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate viacomcbs.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for viacomcbs.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

viacomcbs.com
ads-dev-dr.viacbsops.com
ads-dr.viacbsops.com
ads-staging-dr.viacbsops.com
ads-staging.viacbsops.com
ads.viacbsops.com
api.theupload-dev.viacomcbs.com
api.theupload-qa.viacomcbs.com
api.theupload-stg.viacomcbs.com
api.theupload.viacomcbs.com
auth.mtvnservices-q.mtvi.com
auth.mtvnservices-stg.mtvi.com
awsq.vimn.com
awsvncpservices.nick.com
clicks.vidcon.com
comcast.bet.plus
cox.bet.plus
curator.sho.com
dev-curator.sho.com
dev.aboutme.viacomcbs.com
dev.globaloverview.viacomcbs.com
dev.sportsgraphics.viacomcbs.com
epg.vimn.com
epgs.vimn.com
eyes.nickelodeon.tv
idp.nickplus.asia
images.nickplus.asia
imagesstaging.nickplus.asia
jira.cbsi.com
jira.cbslocal.com
legacy.nickanimation.com
media.nickplus.asia
mediastaging.nickplus.asia
nick101.nick-d.mtvi.com
nuestrosheroes.mitelefe.com
opentext-teamsiteuat.viacomcbs.com
origin.qw.ts.mtvnservices.com
paramount.tech
productionhub.paramount.uk.vimn.com
productionhub.uk.paramount.com
props.viacomcbs.com
qas.sportsgraphics.viacomcbs.com
qas.sportstrack.viacomcbs.com
resources.nickplus.asia
resourcesstaging.nickplus.asia
sportsgraphics.viacomcbs.com
stg-idp.nickplus.asia
stg.sportsgraphics.viacomcbs.com
viacbs.tech
wp-avatar.southpark.cc.com
www.alonetogether.com
www.delusionsandsolutions.com
www.firsttimecomposers-d.mtvi.com
www.firsttimecomposers-q.mtvi.com
www.firsttimecomposers.com
www.firsttimedirectorshandbook-d.mtvi.com
www.firsttimedirectorshandbook-q.mtvi.com
www.firsttimeinitiatives-d.mtvi.com
www.firsttimeinitiatives-q.mtvi.com
www.firsttimescreenwriters-d.mtvi.com
www.firsttimescreenwriters-q.mtvi.com
www.keepparamount-q.mtvi.com
www.keepviacomcbs.com
www.lawmenbassreeves.com
www.mobituaries-d.mtvi.com
www.mobituaries-q.mtvi.com
www.newnownext.com
www.nick.tv
www.nickatnite.com
www.nickelodeon.es
www.nickelodeon.fr
www.nickelodeon.pt
www.nickelodeon.se
www.nickelodeonafrica.com
www.nickjr.co.uk
www.nickjr.it
www.nicktv.it
www.paramountnetwork.com.br
www.paramountnetwork.nl
www.paramountnetwork.pl
www.poptv.com
www.smithsonianchannel.co.uk
www.smithsonianchannellatam.com
www.vmaj.jp

Other certificates including the domain name viacomcbs.com

(limited to 100 certificates)
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
ir.viacomcbs.com
image.serviciokia.com.ec
cloud.email.viacomcbs.com
MTVI.com
image.serviciokia.com.ec
www.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
www.viacom.tech
www.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
stillsarchive.viacomcbs.com
image.serviciokia.com.ec
inview.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
stillsarchive.viacomcbs.com
xdam-nonprod.viacomcbs.com
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
mtvi.com
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
san-5-s11.tlsprovisioning.exacttarget.com
image.serviciokia.com.ec
creativeandstrategy.viacomcbs.com
paramount.com
image.serviciokia.com.ec
image.serviciokia.com.ec
halloweencontest.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
mtvi.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
stillsarchiveuat.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdsiportal.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
eai-prd.viacomcbs.com
creativelibrary.viacomcbs.com
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
mtvi.com
www.viacomcbs.com
www.viacom.tech
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
origin.prod-acquia.viacomcbs.com
www.viacomcbs.com
inview.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdi.paramount.com
www.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
mtvi.com
MTVI.com
devplus.phxdocstore.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec

Certificate

The complete raw certificate details for viacomcbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECZF5qJ8cDolZIC+vzytzvxi5C1VZ
lZBqb27qWq7wx0vdeLn8/09PkZASRyvONPiOcqnslaArCwnL0QymIO1GXg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21121813512681091898910337771699160287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'viacomcbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004099179a89f1c0e8959202fafcf2b73bf18b90b555995906a6f6eea5aaef0c74bdd78b9fcff4f4f919012472bce34f88e72a9ec95a02b0b09cbd10ca620ed465e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecb844308a6532ea8a4c912028c78a3406737c07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dev-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-dev.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-qa.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-stg.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-stg.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsq.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsvncpservices.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcast.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aboutme.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globaloverview.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epg.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epgs.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyes.nickelodeon.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nickanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nick101.nick-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuestrosheroes.mitelefe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentext-teamsiteuat.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.qw.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionhub.paramount.uk.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionhub.uk.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'props.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportstrack.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-avatar.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alonetogether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delusionsandsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepparamount-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawmenbassreeves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnownext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickatnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannellatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vmaj.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf7d11dda00000403004630440220699527d15a47e55221b85932e48eeae5a0810b089dc4aa5a8e08a64897b4ea6602207b6f6d9c86511dc468129294849cab846db8556b1f034dff3cb80d0545d5eae900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf7d11dfc0000040300473045022040d808ff02ee1eea00b5b8b245ec30d6579cf9423d2964ed18312a74dc3bb430022100d2b870b4d023f9a8c61935434884126264c94f09eb37357ddb8415b262c2afb5007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018cf7d11dd100000403004730450220684258baac95d4f855fc13165cac60a813ef697da55de5b5d0f06a979001448d022100b8fbb624afca5b70cbf669515442dbc04cd5016c9f97c215d61333389ddfec6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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