www.viacom.tech

- Viacom International Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:4a:08:8d:f5:37:2c:b6:26:aa:f6:56:4d:e7:0f:86 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:4a:08:8d:f5:37:2c:b6:26:aa:f6:56:4d:e7:0f:86
Serial Number (int): 11018227440149177422904029770037006214
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a1:c4:24:18:2b:03:46:b7:c3:12:08:3a:4a:bd:2d:4a:35:6e:cb:fe
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ec:cb:bc:c5:49:bc:f4:a2:57:dd:3f:7c:3f:9f:25:44:3c:86:04:4d
Fingerprint (sha256): 66:ca:9e:00:47:7a:61:74:f4:91:70:35:90:be:3f:f4:46:bd:5f:42:fa:fb:ae:ca:53:d9:72:88:82:57:fa:2e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.viacom.tech

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.tech

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacom.tech
apps.spongebobmobileapp.com
archive.garfield.com
avatar.southpark.cc.com
avatar.southpark.de
avatar.southpark.lat
avatar.southparkstudios.co.uk
avatar.southparkstudios.com
avatar.southparkstudios.com.br
avatar.southparkstudios.nu
bps.viacomcbs-q.mtvi.com
catalogue.awesomenesstv.com
clicks.bet.plus
clicks.southparkstudios.com
cms.vimn.com
dev-slack.eai.vmn.io
dev.tvcsurvey.viacomcbs.com
events.nick.com.au
forums.southparkstudios.com.br
images.viacbs.tech
intl.ams.cbs.com
kca.mundonick.com
kca.mundonick.com.br
kca.nick-asia.com
kca.nick.co.uk
kca.nick.com.au
kca.nick.com.pl
kca.nick.de
kca.nick.tv
kca.nickelodeon-kz.com
kca.nickelodeon.be
kca.nickelodeon.dk
kca.nickelodeon.es
kca.nickelodeon.fr
kca.nickelodeon.gr
kca.nickelodeon.hu
kca.nickelodeon.nl
kca.nickelodeon.no
kca.nickelodeon.pt
kca.nickelodeon.ro
kca.nickelodeon.se
kca.nickelodeon.tv
kca.nickelodeonafrica.com
kca.nickelodeonarabia.com
kca.nicktv.it
migration.paramountuspartners.com
neutron-api.viacbs.tech
origin.ll.ts.mtvnservices.com
playplex-bff.prod.viacom.tech
playplex-bff.qa.viacom.tech
pr.contentplatform.viacom.com
prod-slack.eai.vmn.io
qa-neutron-api.viacbs.tech
qa-slack.eai.vmn.io
qa.keepmyviacomcbs.com
slack.eai.vmn.io
stage-slack.eai.vmn.io
staging-neutron-api.viacbs.tech
stg2.bridge.viacom.com
stg2.gateway.bridge.viacom.com
testing.api.playplex.viacom.vmn.io
viacom.tech
www.betafrica.tv
www.betchannel.fr
www.bikinibottomexperience.com
www.comedycentral.be
www.comedycentral.co.uk
www.comedycentral.nl
www.favetv.com
www.gameone.net
www.garfield.com
www.halfofus.com
www.j-one.com
www.kcamexico.com
www.meuspremiosnick.com.br
www.mtvla.com
www.mtvshuga.com
www.nazdrowie.nick.com.pl
www.nick.com.pl
www.nick.de
www.nickelodeon.com.br
www.nickelodeon.la
www.nickelodeon.nl
www.nickelodeonparents-q.mtvi.com
www.nickhelps.com
www.nickslimefest-d.mtvi.com
www.nickslimefest-q.mtvi.com
www.paramountuspartners.com
www.sitemaps.webplex.viacom.com
www.southpark.lat
www.southparkstudios.com
www.southparkstudios.com.br
www.supertv.it
www.thecolorofcare.org
www.viacomcbs.cz
www.viacomcbsaffiliate.com
www.viacomcbspartners.com
www.viacomprivacy.com
www.voteforyourlife.com

Other certificates including the domain name viacom.tech

(limited to 100 certificates)
www.viacom.tech
www.viacom.com
mtvnservices.com
www.viacom.com
viacom.tech
www.viacom.tech
eden-kafka-connect-ui.i.viacom.tech
reko.i.viacom.tech
www.viacom.com
www.viacom.com
www.viacom.tech
viacom.tech
viacom.tech
eden-kafka-connect-dev.i.viacom.tech
viacom.tech
mtvnservices.com
www.viacom.tech
mtvnservices.com
www.viacom.tech
www.viacom.com
neutron-arc-sync.i.viacom.tech
www.viacom.tech
origin.onboarding.noggin.com
MTVI.com
www.viacom.tech
www.viacom.tech
www.viacom.tech
mtvnservices.com
www.viacom.com
www.viacom.com
www.viacom.tech
mtvnservices.com
www.viacom.tech
www.viacom.tech
mtvnservices.com
mtvnservices.com
www.viacom.tech
viacom.tech
eden-kafka-connect-prod.i.viacom.tech
origin.admin.officeapp.viacom.tech
origin.connect.viacom.tech
origin.neutron-api.viacom.tech
eden-kafka-topics-ui.i.viacom.tech
www.viacom.tech
mtvnservices.com
www.viacom.tech
qa-etl-feeds-partnerplatform.viacom.tech
www.viacom.com
voice-assistant-debug-helper.viacom.tech
www.viacom.com
eden-kafka-connect-qa.i.viacom.tech
blog.viacom.tech
www.viacom.tech
viacom.tech
www.viacom.tech
origin.as.viacom.tech
origin.neutron-api-config.viacom.tech
www.viacom.com
www.viacom.com
qa-officetv.i.viacom.tech
www.viacom.com
qa-voice-assistant-google-action-comedy-central.viacom.tech
www.viacom.tech
pai.viacom.tech
viacom.tech
www.viacom.tech
mtvnservices.com
recs.viacom.tech
MTVI.com
www.viacom.tech
origin.interview-helper.viacom.tech
www.viacom.tech
www.viacom.com
origin.connect.viacom.tech
blog.viacom.tech
blog.viacom.tech
www.viacom.tech
as.viacom.tech
www.viacom.com
officeapp.viacom.tech-d.mtvi.com
www.viacom.tech
www.viacom.tech
paramount.tech
www.viacom.com
www.viacom.tech
qa-recs.viacom.tech
www.viacom.tech
eden-kafka-schema-registry-qa.i.viacom.tech
www.viacom.com
staging-neutron-api.viacom.tech
www.viacom.com
mtvnservices.com
www.viacom.tech
www.viacom.tech
mtvnservices.com
mtvnservices.com
viacom.tech
www.viacom.com
officetv-api.i.viacom.tech
MTVI.com

Certificate

The complete raw certificate details for www.viacom.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1NxIyLCRoMDdKs6kRm4LN7mUhn9B
UK6zq6K/uXdWTyX7KINeREQcAWtXzXFqkOvSqS/OoC2Tft0rw37eAf/qVA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11018227440149177422904029770037006214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d4dc48c8b091a0c0dd2acea4466e0b37b994867f4150aeb3aba2bfb977564f25fb28835e44441c016b57cd716a90ebd2a92fcea02d937edd2bc37ede01ffea54
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1c424182b0346b7c312083a4abd2d4a356ecbfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2277 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.spongebobmobileapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.garfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps.viacomcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvcsurvey.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.nick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.ams.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.mundonick.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeonarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migration.paramountuspartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutron-api.viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.ll.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playplex-bff.prod.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playplex-bff.qa.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-neutron-api.viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.keepmyviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-neutron-api.viacbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.gateway.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.api.playplex.viacom.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betafrica.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betchannel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikinibottomexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.favetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halfofus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.j-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcamexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meuspremiosnick.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvshuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nazdrowie.nick.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickhelps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickslimefest-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickslimefest-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountuspartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitemaps.webplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southpark.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supertv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecolorofcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbs.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbsaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbspartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomprivacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voteforyourlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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