viacomcbs.com

- Viacom Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:cf:0e:a0:7b:e7:86:ed:ea:5c:61:07:25:09:c9:10 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom Inc

Organization: Viacom Inc
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:cf:0e:a0:7b:e7:86:ed:ea:5c:61:07:25:09:c9:10
Serial Number (int): 7721242097228297347535750450274486544
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 85:89:1c:0c:10:92:f5:2f:99:72:48:c6:d8:88:0b:48:bb:4d:d2:d9
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c8:75:83:4b:94:9b:cb:cf:3e:3b:46:f5:fc:71:d3:97:ff:cd:3a:a4
Fingerprint (sha256): 42:3b:22:eb:f3:a3:5f:37:02:69:82:1d:a5:47:04:01:3c:b3:4a:ee:c6:88:be:0f:69:f7:73:38:19:db:6b:78

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate viacomcbs.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for viacomcbs.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

viacomcbs.com
admin.theupload-dev.viacomcbs.com
admin.theupload-qa.viacomcbs.com
admin.theupload-stg.viacomcbs.com
admin.theupload.viacomcbs.com
ads-dev-dr.viacbsops.com
ads-dev.viacbsops.com
ads-dr.viacbsops.com
ads-staging-dr.viacbsops.com
ads-staging.viacbsops.com
ads.viacbsops.com
api.theupload-dev.viacomcbs.com
api.theupload-qa.viacomcbs.com
api.theupload-stg.viacomcbs.com
api.theupload.viacomcbs.com
auth.mtvnservices-q.mtvi.com
auth.mtvnservices-stg.mtvi.com
awsvncpservices.nick.com
azure.ams.cbs.com
clicks.vidcon.com
comcast.bet.plus
curator.sho.com
dev-curator.sho.com
dev.aboutme.viacomcbs.com
dev.globaloverview.viacomcbs.com
dev.sportsgraphics.viacomcbs.com
employeestreaming.viacomcbs.com
epg.vimn.com
epgs.vimn.com
eventos.mitelefe.com
eyes.nickelodeon.tv
flyawaywithnick.vmn.io
idp.nickplus.asia
idpstaging.nickplus.asia
images.nickplus.asia
imagesstaging.nickplus.asia
jira.cbsi.com
jira.cbslocal.com
legacy.nickanimation.com
media.nickplus.asia
mediastaging.nickplus.asia
opentext-teamsiteuat.viacomcbs.com
origin.ll.ts.mtvnservices.com
paramount.tech
props.viacomcbs.com
q.vimn.com
qas.sportsgraphics.viacomcbs.com
qas.sportstrack.viacomcbs.com
resources.nickplus.asia
resourcesstaging.nickplus.asia
sportsgraphics.viacomcbs.com
stg-idp.nickplus.asia
stg.sportsgraphics.viacomcbs.com
stillsarchiveuat.viacomcbs.com
testrail.viacomcbs.com
uat.firsttimecomposers.com
uat.firsttimedirectors.com
uat.firsttimeinitiatives.com
viacbs.tech
wp-avatar.southpark.cc.com
www.alonetogether.com
www.firsttimecomposers-d.mtvi.com
www.firsttimecomposers-q.mtvi.com
www.firsttimecomposers.com
www.firsttimedirectors.com
www.firsttimedirectorshandbook-d.mtvi.com
www.firsttimedirectorshandbook-q.mtvi.com
www.firsttimedirectorshandbook.com
www.firsttimeinitiatives-d.mtvi.com
www.firsttimeinitiatives-q.mtvi.com
www.firsttimeinitiatives.com
www.firsttimescreenwriters-d.mtvi.com
www.firsttimescreenwriters-q.mtvi.com
www.firsttimescreenwriters.com
www.flyawaywithnick.com
www.keepcbs.com
www.keepmyparamount.com
www.keepparamount-q.mtvi.com
www.keepviacomcbs.com
www.mentalhealthmediaguide.com
www.newnownext.com
www.nick.tv
www.nickatnite.com
www.nickelodeon.es
www.nickelodeon.fr
www.nickelodeon.pt
www.nickelodeon.se
www.nickelodeonafrica.com
www.nickjr.co.uk
www.nickjr.it
www.nicktv.it
www.paramountnetwork.nl
www.paramountnetwork.pl
www.poptv.com
www.smithsonianchannel.co.uk
www.smithsonianchannellatam.com
www.vmaj.jp

Other certificates including the domain name viacomcbs.com

(limited to 100 certificates)
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
ir.viacomcbs.com
image.serviciokia.com.ec
cloud.email.viacomcbs.com
MTVI.com
image.serviciokia.com.ec
www.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
www.viacom.tech
www.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
stillsarchive.viacomcbs.com
image.serviciokia.com.ec
inview.viacomcbs.com
www.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
stillsarchive.viacomcbs.com
xdam-nonprod.viacomcbs.com
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
mtvi.com
MTVI.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
san-5-s11.tlsprovisioning.exacttarget.com
image.serviciokia.com.ec
creativeandstrategy.viacomcbs.com
paramount.com
image.serviciokia.com.ec
image.serviciokia.com.ec
halloweencontest.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
mtvi.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
stillsarchiveuat.viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdsiportal.viacomcbs.com
leapfrog-ssl-23.gcs-web.com
image.serviciokia.com.ec
eai-prd.viacomcbs.com
creativelibrary.viacomcbs.com
viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec
image.serviciokia.com.ec
image.serviciokia.com.ec
viacomcbs.com
www.viacomcbs.com
mtvi.com
www.viacomcbs.com
www.viacom.tech
image.serviciokia.com.ec
image.serviciokia.com.ec
MTVI.com
image.serviciokia.com.ec
origin.prod-acquia.viacomcbs.com
www.viacomcbs.com
inview.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
vdi.paramount.com
www.viacomcbs.com
image.serviciokia.com.ec
viacomcbs.com
viacomcbs.com
mtvi.com
MTVI.com
devplus.phxdocstore.viacomcbs.com
viacomcbs.com
image.serviciokia.com.ec

Certificate

The complete raw certificate details for viacomcbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/+NGcjlFvPf4YJGJeajcWxnKK2qS
i1Y1K3fuZJVKg5g3CmM731xcgo4G8f4skdO0pK2uPUC4GGH7YNHxIQKsvQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7721242097228297347535750450274486544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'viacomcbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004ffe346723945bcf7f860918979a8dc5b19ca2b6a928b56352b77ee64954a8398370a633bdf5c5c828e06f1fe2c91d3b4a4adae3d40b81861fb60d1f12102acbd
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85891c0c1092f52f997248c6d8880b48bb4dd2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2533 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theupload-dev.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theupload-qa.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theupload-stg.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theupload.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dev-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dev.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging-dr.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-staging.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.viacbsops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-dev.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-qa.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload-stg.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theupload.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mtvnservices-stg.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsvncpservices.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure.ams.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcast.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-curator.sho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aboutme.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globaloverview.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeestreaming.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epg.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epgs.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.mitelefe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyes.nickelodeon.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyawaywithnick.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idpstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nickanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentext-teamsiteuat.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.ll.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'props.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qas.sportstrack.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcesstaging.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-idp.nickplus.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sportsgraphics.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillsarchiveuat.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testrail.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.firsttimecomposers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.firsttimedirectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.firsttimeinitiatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-avatar.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alonetogether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimecomposers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimedirectorshandbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimeinitiatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttimescreenwriters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyawaywithnick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepmyparamount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepparamount-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mentalhealthmediaguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnownext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickatnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickjr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithsonianchannellatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vmaj.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:24|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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