viacomcbs.com

- Viacom Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:0d:11:0e:f3:95:9d:8a:23:40:30:3e:44:74:16:cc was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Viacom Inc.

Organization: Viacom Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:0d:11:0e:f3:95:9d:8a:23:40:30:3e:44:74:16:cc
Serial Number (int): 6713985823628800695225872553769965260
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bb:aa:69:5c:0a:5b:2b:49:a5:10:86:71:54:99:bc:41:3d:65:f7:68
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 86:b0:85:8d:2e:81:7e:18:c4:c5:ae:c0:ab:d9:61:2e:25:e0:98:58
Fingerprint (sha256): 3f:79:c4:52:2a:46:1d:e5:57:49:ca:e3:a9:be:a5:82:37:30:0b:73:c0:dc:a1:99:05:1c:8d:8f:04:be:c5:d7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate viacomcbs.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for viacomcbs.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

viacomcbs.com
ads-dev-dr.viacbsops.com
ads-dr.viacbsops.com
ads-staging-dr.viacbsops.com
ads-staging.viacbsops.com
ads.viacbsops.com
api.theupload-dev.viacomcbs.com
api.theupload-qa.viacomcbs.com
api.theupload-stg.viacomcbs.com
api.theupload.viacomcbs.com
auth.mtvnservices-q.mtvi.com
auth.mtvnservices-stg.mtvi.com
awsq.vimn.com
awsvncpservices.nick.com
clicks.vidcon.com
comcast.bet.plus
content-dev.pgemsbbubbleblast.paramount.com
content-prod.pgemsbbubbleblast.paramount.com
content-stage.pgemsbbubbleblast.paramount.com
cox.bet.plus
curator.sho.com
dev-curator.sho.com
dev.aboutme.viacomcbs.com
dev.globaloverview.viacomcbs.com
dev.sportsgraphics.viacomcbs.com
epg.vimn.com
epgs.vimn.com
eyes.nickelodeon.tv
idp.nickplus.asia
images.nickplus.asia
imagesstaging.nickplus.asia
jira.cbsi.com
jira.cbslocal.com
lateshow.mam-production.paramount.com
legacy.nickanimation.com
media.nickplus.asia
mediastaging.nickplus.asia
nick101.nick-d.mtvi.com
nuestrosheroes.mitelefe.com
opentext-teamsiteuat.viacomcbs.com
opslink-euw1.sureview.paramount.com
opslink-use1.sureview.paramount.com
opslink-usw2.sureview.paramount.com
origin.qw.ts.mtvnservices.com
paramount.tech
productionhub.paramount.uk.vimn.com
productionhub.uk.paramount.com
props.viacomcbs.com
qas.sportsgraphics.viacomcbs.com
qas.sportstrack.viacomcbs.com
resources.nickplus.asia
resourcesstaging.nickplus.asia
showtimeSports.mam-production.paramount.com
sports.mam-production.paramount.com
sportsgraphics.viacomcbs.com
stg-idp.nickplus.asia
stg.sportsgraphics.viacomcbs.com
viacbs.tech
wp-avatar.southpark.cc.com
www.alonetogether.com
www.delusionsandsolutions.com
www.firsttimecomposers-d.mtvi.com
www.firsttimecomposers-q.mtvi.com
www.firsttimecomposers.com
www.firsttimedirectorshandbook-d.mtvi.com
www.firsttimedirectorshandbook-q.mtvi.com
www.firsttimeinitiatives-d.mtvi.com
www.firsttimeinitiatives-q.mtvi.com
www.firsttimescreenwriters-d.mtvi.com
www.firsttimescreenwriters-q.mtvi.com
www.keepparamount-q.mtvi.com
www.keepviacomcbs.com
www.lawmenbassreeves.com
www.mobituaries-d.mtvi.com
www.mobituaries-q.mtvi.com
www.newnownext.com
www.nick.tv
www.nickatnite.com
www.nickelodeon.es
www.nickelodeon.fr
www.nickelodeon.pt
www.nickelodeon.se
www.nickelodeonafrica.com
www.nickjr.co.uk
www.nickjr.it
www.nicktv.it
www.paramountnetwork.com.br
www.paramountnetwork.nl
www.paramountnetwork.pl
www.poptv.com
www.smithsonianchannel.co.uk
www.smithsonianchannellatam.com
www.vmaj.jp

Other certificates including the domain name viacomcbs.com

(limited to 100 certificates)
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
ir.viacomcbs.com
image.serviciokia.com.ec
cloud.email.viacomcbs.com
MTVI.com
image.serviciokia.com.ec
www.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
view.email.viacomcbs.com
image.serviciokia.com.ec
eai-prd.viacomcbs.com
viacomcbs.com
www.viacomcbs.com
www.viacom.tech
www.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
image.serviciokia.com.ec
san-5-s11.tlsprovisioning.exacttarget.com
MTVI.com
stillsarchive.viacomcbs.com
image.serviciokia.com.ec
inview.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
stillsarchive.viacomcbs.com
xdam-nonprod.viacomcbs.com
image.serviciokia.com.ec
MTVI.com
insights.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
mtvi.com
click.email.viacomcbs.com
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
san-5-s11.tlsprovisioning.exacttarget.com
image.serviciokia.com.ec
creativeandstrategy.viacomcbs.com
paramount.com
image.serviciokia.com.ec
image.serviciokia.com.ec
halloweencontest.viacomcbs.com
viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
mtvi.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
stillsarchiveuat.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdsiportal.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
eai-prd.viacomcbs.com
creativelibrary.viacomcbs.com
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
mtvi.com
www.viacomcbs.com
www.viacom.tech
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
origin.prod-acquia.viacomcbs.com
MTVI.com
www.viacomcbs.com
inview.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdi.paramount.com
www.viacomcbs.com

Certificate

The complete raw certificate details for viacomcbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPvDCCDqSgAwIBAgIQBQ0RDvOVnYojQDA+RHQWzDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yNDA2MTcwMDAwMDBa
Fw0yNTA0MjMyMzU5NTlaMGExCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y
azERMA8GA1UEBxMITmV3IFlvcmsxFDASBgNVBAoTC1ZpYWNvbSBJbmMuMRYwFAYD
VQQDEw12aWFjb21jYnMuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAExlHd
SAr9PKz0yGj/KzNziNpm5ZS+HRMHZ6sp+kfZD5PiBQp4IJ+nG3vohFRAzqxEAyWd
enMGj0YRDcFejWqS46OCDUswgg1HMB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+Y
ssWVdrn0MB0GA1UdDgQWBBS7qmlcClsrSaUQhnFUmbxBPWX3aDCCCfEGA1UdEQSC
Cegwggnkgg12aWFjb21jYnMuY29tghhhZHMtZGV2LWRyLnZpYWNic29wcy5jb22C
FGFkcy1kci52aWFjYnNvcHMuY29tghxhZHMtc3RhZ2luZy1kci52aWFjYnNvcHMu
Y29tghlhZHMtc3RhZ2luZy52aWFjYnNvcHMuY29tghFhZHMudmlhY2Jzb3BzLmNv
bYIfYXBpLnRoZXVwbG9hZC1kZXYudmlhY29tY2JzLmNvbYIeYXBpLnRoZXVwbG9h
ZC1xYS52aWFjb21jYnMuY29tgh9hcGkudGhldXBsb2FkLXN0Zy52aWFjb21jYnMu
Y29tghthcGkudGhldXBsb2FkLnZpYWNvbWNicy5jb22CHGF1dGgubXR2bnNlcnZp
Y2VzLXEubXR2aS5jb22CHmF1dGgubXR2bnNlcnZpY2VzLXN0Zy5tdHZpLmNvbYIN
YXdzcS52aW1uLmNvbYIYYXdzdm5jcHNlcnZpY2VzLm5pY2suY29tghFjbGlja3Mu
dmlkY29uLmNvbYIQY29tY2FzdC5iZXQucGx1c4IrY29udGVudC1kZXYucGdlbXNi
YnViYmxlYmxhc3QucGFyYW1vdW50LmNvbYIsY29udGVudC1wcm9kLnBnZW1zYmJ1
YmJsZWJsYXN0LnBhcmFtb3VudC5jb22CLWNvbnRlbnQtc3RhZ2UucGdlbXNiYnVi
YmxlYmxhc3QucGFyYW1vdW50LmNvbYIMY294LmJldC5wbHVzgg9jdXJhdG9yLnNo
by5jb22CE2Rldi1jdXJhdG9yLnNoby5jb22CGWRldi5hYm91dG1lLnZpYWNvbWNi
cy5jb22CIGRldi5nbG9iYWxvdmVydmlldy52aWFjb21jYnMuY29tgiBkZXYuc3Bv
cnRzZ3JhcGhpY3MudmlhY29tY2JzLmNvbYIMZXBnLnZpbW4uY29tgg1lcGdzLnZp
bW4uY29tghNleWVzLm5pY2tlbG9kZW9uLnR2ghFpZHAubmlja3BsdXMuYXNpYYIU
aW1hZ2VzLm5pY2twbHVzLmFzaWGCG2ltYWdlc3N0YWdpbmcubmlja3BsdXMuYXNp
YYINamlyYS5jYnNpLmNvbYIRamlyYS5jYnNsb2NhbC5jb22CJWxhdGVzaG93Lm1h
bS1wcm9kdWN0aW9uLnBhcmFtb3VudC5jb22CGGxlZ2FjeS5uaWNrYW5pbWF0aW9u
LmNvbYITbWVkaWEubmlja3BsdXMuYXNpYYIabWVkaWFzdGFnaW5nLm5pY2twbHVz
LmFzaWGCF25pY2sxMDEubmljay1kLm10dmkuY29tghtudWVzdHJvc2hlcm9lcy5t
aXRlbGVmZS5jb22CIm9wZW50ZXh0LXRlYW1zaXRldWF0LnZpYWNvbWNicy5jb22C
I29wc2xpbmstZXV3MS5zdXJldmlldy5wYXJhbW91bnQuY29tgiNvcHNsaW5rLXVz
ZTEuc3VyZXZpZXcucGFyYW1vdW50LmNvbYIjb3BzbGluay11c3cyLnN1cmV2aWV3
LnBhcmFtb3VudC5jb22CHW9yaWdpbi5xdy50cy5tdHZuc2VydmljZXMuY29tgg5w
YXJhbW91bnQudGVjaIIjcHJvZHVjdGlvbmh1Yi5wYXJhbW91bnQudWsudmltbi5j
b22CHnByb2R1Y3Rpb25odWIudWsucGFyYW1vdW50LmNvbYITcHJvcHMudmlhY29t
Y2JzLmNvbYIgcWFzLnNwb3J0c2dyYXBoaWNzLnZpYWNvbWNicy5jb22CHXFhcy5z
cG9ydHN0cmFjay52aWFjb21jYnMuY29tghdyZXNvdXJjZXMubmlja3BsdXMuYXNp
YYIecmVzb3VyY2Vzc3RhZ2luZy5uaWNrcGx1cy5hc2lhgitzaG93dGltZVNwb3J0
cy5tYW0tcHJvZHVjdGlvbi5wYXJhbW91bnQuY29tgiNzcG9ydHMubWFtLXByb2R1
Y3Rpb24ucGFyYW1vdW50LmNvbYIcc3BvcnRzZ3JhcGhpY3MudmlhY29tY2JzLmNv
bYIVc3RnLWlkcC5uaWNrcGx1cy5hc2lhgiBzdGcuc3BvcnRzZ3JhcGhpY3Mudmlh
Y29tY2JzLmNvbYILdmlhY2JzLnRlY2iCGndwLWF2YXRhci5zb3V0aHBhcmsuY2Mu
Y29tghV3d3cuYWxvbmV0b2dldGhlci5jb22CHXd3dy5kZWx1c2lvbnNhbmRzb2x1
dGlvbnMuY29tgiF3d3cuZmlyc3R0aW1lY29tcG9zZXJzLWQubXR2aS5jb22CIXd3
dy5maXJzdHRpbWVjb21wb3NlcnMtcS5tdHZpLmNvbYIad3d3LmZpcnN0dGltZWNv
bXBvc2Vycy5jb22CKXd3dy5maXJzdHRpbWVkaXJlY3RvcnNoYW5kYm9vay1kLm10
dmkuY29tgil3d3cuZmlyc3R0aW1lZGlyZWN0b3JzaGFuZGJvb2stcS5tdHZpLmNv
bYIjd3d3LmZpcnN0dGltZWluaXRpYXRpdmVzLWQubXR2aS5jb22CI3d3dy5maXJz
dHRpbWVpbml0aWF0aXZlcy1xLm10dmkuY29tgiV3d3cuZmlyc3R0aW1lc2NyZWVu
d3JpdGVycy1kLm10dmkuY29tgiV3d3cuZmlyc3R0aW1lc2NyZWVud3JpdGVycy1x
Lm10dmkuY29tghx3d3cua2VlcHBhcmFtb3VudC1xLm10dmkuY29tghV3d3cua2Vl
cHZpYWNvbWNicy5jb22CGHd3dy5sYXdtZW5iYXNzcmVldmVzLmNvbYIad3d3Lm1v
Yml0dWFyaWVzLWQubXR2aS5jb22CGnd3dy5tb2JpdHVhcmllcy1xLm10dmkuY29t
ghJ3d3cubmV3bm93bmV4dC5jb22CC3d3dy5uaWNrLnR2ghJ3d3cubmlja2F0bml0
ZS5jb22CEnd3dy5uaWNrZWxvZGVvbi5lc4ISd3d3Lm5pY2tlbG9kZW9uLmZyghJ3
d3cubmlja2Vsb2Rlb24ucHSCEnd3dy5uaWNrZWxvZGVvbi5zZYIZd3d3Lm5pY2tl
bG9kZW9uYWZyaWNhLmNvbYIQd3d3Lm5pY2tqci5jby51a4INd3d3Lm5pY2tqci5p
dIINd3d3Lm5pY2t0di5pdIIbd3d3LnBhcmFtb3VudG5ldHdvcmsuY29tLmJyghd3
d3cucGFyYW1vdW50bmV0d29yay5ubIIXd3d3LnBhcmFtb3VudG5ldHdvcmsucGyC
DXd3dy5wb3B0di5jb22CHHd3dy5zbWl0aHNvbmlhbmNoYW5uZWwuY28udWuCH3d3
dy5zbWl0aHNvbmlhbmNoYW5uZWxsYXRhbS5jb22CC3d3dy52bWFqLmpwMD4GA1Ud
IAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl
cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCA4gwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyG
Omh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIw
MjBDQTEtNC5jcmwwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8v
b2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRp
Z2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYD
VR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUATnWjJ1yaEMM4
W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGQJ8292QAABAMARjBEAiBLVh/ONA9+
R/DPd+/nrkDuS/I8C7dvn58XcNo5hC6CJAIgdoD2iWu4Pm93BXdeQqAWDy/v6xhz
Uc4hDuOo4eXrq7oAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAA
AZAnzb2UAAAEAwBHMEUCIQDwXzbZ3Mkj9U65n8Tn/JotEsKxi+TeQmoBpOkYz4nr
BgIgL9gTaZzQpaKIEcCR8nQK4FUezM26D0A71st7qARQhKcAdwDm0jFjQHeMwRBB
Btdxuc7B0kD2loSG+7qHMh39HjeOUAAAAZAnzb2sAAAEAwBIMEYCIQDXXqcOA6Iu
K6ImBB2uxPQTD2mpnnvz7cOB/3RTGHkMTgIhAO30rp5RAIq4qYHewWckJCX8au00
VaKcByc1z7+BI05wMA0GCSqGSIb3DQEBCwUAA4IBAQBSqAkLFbNW0hc+7fXrgbkD
Gg5Alsol5peQ4Ygh6qR2JHq+CZOQzoho9EK5njZS/bZxJDqX5YuvnyFRGtmMLa/P
g3eivy8bZ2jd0Iz8oNNWRZXX67uVwH0U8cm7fkdKDXrJmYIDR7XmDsEuEEaBBc52
bjYL3SfZQxkVxAAAokyKDePpUWt3pjQVCacSScj0/KEFBk92AmT4LKWskG0qOI/9
cl7ucQh7z09pVmV0MtdW7VOGjQ1ew9wD4GavehgKAZOIQPDXp4rDx4JKDgC8/owe
qhafe8mO80OhnpUcARlSYK9vbr1PnyIYvRGDCWiF3TaKiZXTfRm6BvzpkhLBz6G7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAExlHdSAr9PKz0yGj/KzNziNpm5ZS+
HRMHZ6sp+kfZD5PiBQp4IJ+nG3vohFRAzqxEAyWdenMGj0YRDcFejWqS4w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6713985823628800695225872553769965260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'viacomcbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c651dd480afd3cacf4c868ff2b337388da66e594be1d130767ab29fa47d90f93e2050a78209fa71b7be8845440ceac4403259d7a73068f46110dc15e8d6a92e3
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbaa695c0a5b2b49a51086715499bc413d65f768
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2536 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dev-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-dev.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-qa.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-stg.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-stg.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsq.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsvncpservices.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcast.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-dev.pgemsbbubbleblast.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-prod.pgemsbbubbleblast.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-stage.pgemsbbubbleblast.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aboutme.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globaloverview.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epg.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epgs.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyes.nickelodeon.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lateshow.mam-production.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nickanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nick101.nick-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuestrosheroes.mitelefe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentext-teamsiteuat.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opslink-euw1.sureview.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opslink-use1.sureview.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opslink-usw2.sureview.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.qw.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionhub.paramount.uk.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionhub.uk.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'props.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportstrack.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showtimeSports.mam-production.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sports.mam-production.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-avatar.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alonetogether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delusionsandsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepparamount-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawmenbassreeves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobituaries-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnownext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickatnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannellatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vmaj.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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