www.viacom.tech

- Viacom International Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:42:a3:e1:be:9f:f9:a5:38:ba:c1:da:c3:e2:1b:f0 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
Organization unit: MTS
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:42:a3:e1:be:9f:f9:a5:38:ba:c1:da:c3:e2:1b:f0
Serial Number (int): 10979839477040136526897619746666191856
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4b:04:f6:fc:98:da:af:04:32:00:f1:8f:c3:a3:9e:94:31:be:f4:50
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 40:08:ca:e7:cc:4f:fb:e9:1b:05:49:88:49:a3:af:1d:1f:da:3b:11
Fingerprint (sha256): 6b:ef:00:c0:c4:40:0e:74:c3:f6:43:2a:0d:d4:9c:41:d3:a4:af:62:5d:9d:80:7e:71:ff:5d:50:1f:34:bf:32

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.viacom.tech

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacom.tech
viacom.tech
kca.nickelodeon.ro
kca.nickelodeon.fr
clicks.southparkstudios.com
kca.nickelodeonarabia.com
catalogue.awesomenesstv.com
stg2.bridge.viacom.com
www.keepmyviacomcbs.com
cms.vimn.com
api.viacom-aemstage.mtvi.com
www.paramountnetwork.it
www.nickelodeon.nl
www.paramountchannel.hu
pr.contentplatform.viacom.com
kca.nickelodeon.no
slack.eai.vmn.io
kca.nickelodeon.pt
stage-slack.eai.vmn.io
www.nickelodeon.la
forums.southparkstudios.com.br
www.mtvshuga.com
www.nickslimefest-d.mtvi.com
archive.garfield.com
www.nick.com.pl
kca.mundonick.com
www.j-one.com
kca.mundonick.com.br
kca.nick.tv
kca.nickelodeon.es
www.paramountchannel.la
www.garfield.com
www.bikinibottomexperience.com
www.southparkstudios.com.br
kca.nickelodeon.nl
www.kcamexico.com
avatar.southparkstudios.co.uk
www.sitemaps.webplex.viacom.com
avatar.southpark.lat
avatar.southparkstudios.com
dev-slack.eai.vmn.io
playplex-bff.prod.viacom.tech
www.viacomcbsaffiliate.com
www.mtvla.com
www.southparkstudios.com
avatar.southparkstudios.com.br
www.nickelodeon.com.br
www.halfofus.com
kca.nick-asia.com
kca.nickelodeon.hu
www.southpark.lat
www.meuspremiosnick.com.br
kca.nick.com.pl
kca.nick.co.uk
apps.spongebobmobileapp.com
www.comedycentral.be
www.rtlspike.hu
www.nickelodeonparents-q.mtvi.com
www.nickslimefest-q.mtvi.com
kca.nickelodeon.tv
playplex-bff.qa.viacom.tech
kca.nick.com.au
kca.nickelodeon.be
www.supertv.it
avatar.southparkstudios.nu
www.paramountnetwork.se
clicks.bet.plus
kca.nick.de
avatar.southpark.de
kca.nickelodeon.se
www.paramountchannel.com.br
events.nick.com.au
www.viacomprivacy.com
clicks.noggin.com
dba-notification.viacomcbs.tech
stg2.gateway.bridge.viacom.com
www.paramountnetwork.dk
kca.nickelodeon.ru
www.nick.de
www.balconystories.tv
kca.nickelodeon.gr
www.comedycentral.nl
kca.nickelodeonafrica.com
avatar.southpark.cc.com
www.gameone.net
www.viacompitchbox.com
wiki.southpark.cc.com
www.betintl.co.uk
www.betchannel.fr
qa.keepmyviacomcbs.com
bps.viacomcbs-q.mtvi.com
www.betafrica.tv
testing.api.playplex.viacom.vmn.io
kca.nicktv.it
qa-slack.eai.vmn.io
www.comedycentral.co.uk
prod-slack.eai.vmn.io
kca.nickelodeon.dk
dba-notification-dev.viacomcbs.tech

Other certificates including the domain name viacom.tech

(limited to 100 certificates)
www.viacom.tech
www.viacom.com
mtvnservices.com
www.viacom.com
viacom.tech
www.viacom.tech
eden-kafka-connect-ui.i.viacom.tech
reko.i.viacom.tech
www.viacom.com
www.viacom.com
www.viacom.tech
viacom.tech
viacom.tech
eden-kafka-connect-dev.i.viacom.tech
viacom.tech
mtvnservices.com
www.viacom.tech
mtvnservices.com
www.viacom.tech
www.viacom.com
neutron-arc-sync.i.viacom.tech
www.viacom.tech
origin.onboarding.noggin.com
MTVI.com
www.viacom.tech
www.viacom.tech
www.viacom.tech
mtvnservices.com
www.viacom.com
www.viacom.com
www.viacom.tech
mtvnservices.com
www.viacom.tech
www.viacom.tech
mtvnservices.com
mtvnservices.com
www.viacom.tech
viacom.tech
eden-kafka-connect-prod.i.viacom.tech
origin.admin.officeapp.viacom.tech
origin.connect.viacom.tech
origin.neutron-api.viacom.tech
eden-kafka-topics-ui.i.viacom.tech
www.viacom.tech
mtvnservices.com
www.viacom.tech
qa-etl-feeds-partnerplatform.viacom.tech
www.viacom.com
voice-assistant-debug-helper.viacom.tech
www.viacom.com
eden-kafka-connect-qa.i.viacom.tech
blog.viacom.tech
www.viacom.tech
viacom.tech
www.viacom.tech
origin.as.viacom.tech
origin.neutron-api-config.viacom.tech
www.viacom.com
www.viacom.com
qa-officetv.i.viacom.tech
www.viacom.com
qa-voice-assistant-google-action-comedy-central.viacom.tech
www.viacom.tech
pai.viacom.tech
viacom.tech
www.viacom.tech
mtvnservices.com
recs.viacom.tech
MTVI.com
www.viacom.tech
origin.interview-helper.viacom.tech
www.viacom.tech
www.viacom.com
origin.connect.viacom.tech
blog.viacom.tech
blog.viacom.tech
www.viacom.tech
as.viacom.tech
www.viacom.com
officeapp.viacom.tech-d.mtvi.com
www.viacom.tech
www.viacom.tech
paramount.tech
www.viacom.com
www.viacom.tech
qa-recs.viacom.tech
www.viacom.tech
eden-kafka-schema-registry-qa.i.viacom.tech
www.viacom.com
staging-neutron-api.viacom.tech
www.viacom.com
mtvnservices.com
www.viacom.tech
www.viacom.tech
mtvnservices.com
mtvnservices.com
viacom.tech
www.viacom.com
officetv-api.i.viacom.tech
MTVI.com

Certificate

The complete raw certificate details for www.viacom.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4gAOzSHzEyCfHhJUrhT
+uCmhGfDSreBRIPyNuGn8E30UyMZK5GbvYbHIN6kx/mdDIV4e9lRC+xEG7lK+djR
ruTm+uOJNKMBaLwsVTbaYJtw3MvCMYAaUQH9UbTsXJk2baZh34YcM+pZ6n1GQAW2
VEriKyXsoywqHVXQ4S+ugEuRQ+L235tsiTafwXqASdv3HBDjseVZmxU9IZC8csNW
/t6V54y3tEXuwEsC97edNo0mcdcRPIbQblnRVqr2rCQSQcifHSaSDHQCyJkrY4UR
rOQtxfuH6NbbzjdEXKmeeADwdNTkzwsJnVURkqjDWImM+eXDEbA8Ts+MYbPtczNt
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10979839477040136526897619746666191856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MTS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24683534013377603105471496487002595100120401969324147877085282046677568222045786945057553613762005756556914660727601313748917098625803332558498425957120863112843233269453005638589704647938843169136588069579603543874461884434760238042890807570499502406557127350771363208955055460038445535025832709742614545377734883229853599970572987164196343705638904406109994062148094029954197591543903627939949779414137735928843130608847808858992339782550400156547699313737211618347346078908995798229669818347216325865094815991288950663646582773326762906076532001769475782067924758791222542894003496595208039700077369130399829290431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b04f6fc98daaf043200f18fc3a39e9431bef450
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2273 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeonarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepmyviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.vimn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.viacom-aemstage.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.contentplatform.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvshuga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickslimefest-d.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.garfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.j-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.mundonick.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikinibottomexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcamexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitemaps.webplex.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playplex-bff.prod.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbsaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtvla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southparkstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halfofus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southpark.lat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meuspremiosnick.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.spongebobmobileapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rtlspike.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickelodeonparents-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickslimefest-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playplex-bff.qa.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supertv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southparkstudios.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.bet.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountchannel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.nick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomprivacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.noggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dba-notification.viacomcbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.gateway.bridge.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountnetwork.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balconystories.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatar.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacompitchbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.southpark.cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betintl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betchannel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.keepmyviacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps.viacomcbs-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betafrica.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.api.playplex.viacom.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comedycentral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-slack.eai.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dba-notification-dev.viacomcbs.tech'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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