www.nick.com

- Viacom International Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:07:11:aa:c4:3d:bd:92:04:f3:4f:6d:73:45:23:b5 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:11:aa:c4:3d:bd:92:04:f3:4f:6d:73:45:23:b5
Serial Number (int): 4024388395849082536272471762139423669
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e9:8c:4b:51:31:d2:b8:15:d7:9b:da:fc:40:c1:83:0a:84:5b:9b:58
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a2:f1:ba:1e:d9:44:a9:ff:81:6a:fb:4d:02:b1:17:1e:8d:32:55:fb
Fingerprint (sha256): 65:38:3a:74:e6:4f:8e:2f:da:89:5b:35:81:4b:25:6c:1b:78:03:9f:5e:9e:00:84:2a:ef:97:bd:c7:37:a2:24

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.nick.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nick.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nick.com
nick.com
www.paramountchannel.it
secure.mtv.vmn.io
www.mtv.co.za
www.primacomedycentral.cz
www.viacom-q.mtvi.com
stg.gateway.contentplatform.viacom.com
dev.gateway.globalentry.viacom.com
www.southpark.de
southpark.nu.vmn.io
neutron-api.viacom.tech-s.mtvi.com
www.comedycentral.fr
relaunch.comedycentral.la
api.nick-q.mtvi.com
dev.contentplatform.viacom.com
forgot.noggin.com
forgot.noggin-q.mtvi.com
www.comedycentral.it
qa.gateway.globalentry.viacom.com
uat.contentplatform.viacom.com
www.comedycentral.hu
www.nickslimecity.com
api.theloudhousegame.com
www.paramountchannel.hu
www.comedycentral.com.br
api.viacom-q.mtvi.com
www.paramountchannel.ro
www.comedycentral.es
forums.southpark.de
www.paramountchannel.pl
wiki.southpark.de
www.mtvbase.com
www.xbox.vh1.com
www.comedycentralasia.com
www.comedycentralafrica.com
stg.contentplatform.viacom.com
meuspremiosnick.uol.com.br
dev.gateway.contentplatform.viacom.com
profile.nick-q.mtvi.com
premieres.viacom.com
www.mtv.it
staging.nickslimecity.com
forums.southparkstudios.nu
www.comedycentral.pl
www.mtv.de
testing.southpark.lat.vmn.io
www.nickelodeonadventure.es
www.mtv.fr
qa.contentplatform.viacom.com
www.mtv.es
www.nickelodeonadventure.com
api.nick.com
www.rooftoprunnergame.com
qa.gateway.contentplatform.viacom.com
wpadmin.viacom-q.mtvi.com
onboarding.noggin.com
testing.repo.cc.vmn.io
www.comedycentral.la
wiki.southpark.cc.com
wiki.southparkstudios.nu
www.nick-d.mtvi.com
forums.southpark.cc.com
testing.southpark.vmn.io
www.mtvjapan.com
images.mtvnn.com
www.xbox.mtv.com
www.southparkstudios.co.uk
southpark.uk.vmn.io
www.southparkstudios.nu
testing.southpark.uk.vmn.io
wiki.southparkstudios.co.uk
www.paramountchannel.fr
gateway.globalentry.viacom.com
miaw.mtvla.com
www.comedycentral.com.ro
uat.gateway.globalentry.viacom.com
testing.southpark.nu.vmn.io
uat.gateway.contentplatform.viacom.com
testing.trl.mtv.vmn.io
stg.gateway.globalentry.viacom.com
www.tvland.com
www.mtv.be
forums.southparkstudios.co.uk
docs.webplex.io
testing.southpark.de.vmn.io
southpark.de.vmn.io
gateway.contentplatform.viacom.com
www.paramountpictures.com.br
www.comedycentralarabia.com
www.noggin.com.br
www.nick-q.mtvi.com
testing.southpark.br.vmn.io
www.mtvema.com
api.playplex.viacom.com
www.mtv.pt
www.xbox.comedycentral.com
www.comedycentral.tv
miaw.mtv.com.br

Other certificates including the domain name nick.com

(limited to 100 certificates)
www.viacom.com
www.nick.com
www.events.nick.com
www.nick.com
www.nick.com
mtvnservices.com
www.viacom.com
at.nick.com
viacomcbs.com
www.viacom.com
www.nick.com
www.viacom.com
www.viacom.com
www.viacom.com
image.e.outdoors.org
www.nick.com
profile.nick.com
image.e.outdoors.org
mtvnservices.com
mtvnservices.com
www.nick.com
www.nick.com
www.viacom.com
sfb-ae-west.viacom.com
www.viacom.com
secure.arcade.nick.com
communickation.nick.com
yestocrazy.nick.com
mtvnservices.com
www.nick.com
www.nick.com
www.viacom.com
at.nick.com
www.viacom.com
shotgun-test.nick.com
www.viacomcbs.com
origin.www.nick.com
www.viacom.com
www.nick.com
mtvnservices.com
mtvnservices.com
thekidwhowouldbeking.nick.com
mtvnservices.com
www.nick.com
nick.com
www.viacom.com
ssc.nick.com
www.nick.com
nicktoons.nick.com
www.viacom.com
viacomcbs.com
www.nick.com
www.sbsmartypants.nick.com
www.viacom.com
www.viacomcbs.com
pc.nick.com
www.viacom.com
www.nick.com
recs.nick.com
mtvnservices.com
origin.www.nick.com
yestocrazy.nick.com
foxstudios.nick.com
www.viacom.com
sfb-webext-ams.viacom.com
www.nick.com
www.viacom.com
www.viacom.com
www.viacom.com
www.nick.com
www.viacom.com
shotgun-test.nick.com
www.nick.com
www.nick.com
at.nick.com
samandcat.nick.com
image.e.outdoors.org
www.nick.com
viacomcbs.com
www.nick.com
www.viacom.com
www.viacom.com
at.nick.com
www.viacom.com
www.nick.com
at.nick.com
sfb-webext-east.viacom.com
mtvnservices.com
sfb-ae-east.viacom.com
esmailrelay.nick.com
www.viacom.com
secure.arcade.nick.com
mtvnservices.com
www.viacom.com
tn.nick.com
www.viacom.com
www.viacomcbs.com
www.nick.com
mtvnservices.com
www.nick.com

Certificate

The complete raw certificate details for www.nick.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe93R2dsJghMyvM4XkmR
5G4AeA3lGfw+Pwq3IabQ7MvKF/WoJD7KPXcKg6/ug24vK3l07Vn8QpzqmXGNPIIY
belgWFS6X6bCRPOJt8Wut1aY3bExo5APmsNyLFtFTVpKwMVFJ8cfJoUb9+PJCIcU
kmn2Vd7IbOB3/UQHJ0efM2WCqgMk4gV+hWUt2TxIeDUIz8FDHMPskIT1jkb+0JAJ
8zvA4UZPduA3YMezhrQ4g5V5zQowNejlyAKdNYcaAeZjobF9rxOB20fpC0DiZAuZ
PXQDa+jleDRo+3QdEwj8FbBc7LesAzIVzl2Phx+ddlmTtITWCzdxnC2b64KKhIvn
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4024388395849082536272471762139423669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nick.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20947405372194411966624336482146357139100128523511951657737874657226974560666620804590523311316595599752109947918976734636462800150242836220270399039730855217468960959397001056466777671444786756353932517740564218001931242005588257907678118679264068603207847550519953028043542675714709310465446463265802364110200749145746035446235228430451112734892566809008766391400322729388414532194699410640315303920641796399171832563612413910110284148248897381835403701376464244203638650704805764279816974242789453817014905808871288751120306324056256015090033674935197998459622666913034336160590704730358187933473780151166874412919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e98c4b5131d2b815d79bdafc40c1830a845b9b58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2421 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primacomedycentral.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southpark.nu.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.viacom.tech-s.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch.comedycentral.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nick-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgot.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgot.noggin-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickslimecity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.theloudhousegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox.vh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentralasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentralafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuspremiosnick.uol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.nick-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premieres.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nickslimecity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southparkstudios.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.lat.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonadventure.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rooftoprunnergame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.viacom-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.repo.cc.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southparkstudios.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvjapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.mtvnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox.mtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southpark.uk.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.uk.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miaw.mtvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.com.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.nu.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.trl.mtv.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.gateway.globalentry.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.webplex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southpark.de.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountpictures.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentralarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noggin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.southpark.br.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbox.comedycentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miaw.mtv.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0081b167b3390d98ab60e7823ed0288ce22d5d3311449fe8bab4983a1ccccdc848ab8875c390dcaaa53033878355d4514246dbbc30e56a75b5007c96f4099cb101bd95dbfcf1a83bd9c45a5c673090bebd76f6e9e8250997cb03314055e278e9fdf7c5f471bc1bbf3b0b64745b7dc4876a89dd27117b8ad54545bd57eaf00b4a20dfbc599641d53bb496bf6cdda93b8ef096bb59a63f5668970358e312f46f5043280e0eab54a13f935f9e2a4f1e46f2210a12b80c340824865a0b6abaef7dca89c6b8c1e0f56eaee56dc749434d34138e9a9f59f63f7562d48980e1bc6e4cf64358034341e1544dff13dd05a911763b67b03cc650d3b33b26fb4d0ae329b678a5