MTVI.com

- Viacom International Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:52:cf:0e:a4:8c:66:73:b9:8f:40:49:9c:06:10:71 was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:52:cf:0e:a4:8c:66:73:b9:8f:40:49:9c:06:10:71
Serial Number (int): 16380703910726352477438105852305608817
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:44:f9:52:ca:74:37:aa:16:5c:09:6c:40:03:ff:67:fb:d3:7d:4a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): a3:74:f4:8f:6b:41:65:01:b6:e0:5f:0a:dc:63:ed:df:2c:81:b0:6d
Fingerprint (sha256): 6f:32:34:55:3a:65:9e:a4:b5:05:ae:e2:32:f2:8c:fd:2a:d9:fe:f3:08:05:e4:ba:9a:bc:ed:f0:69:e8:19:fd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate MTVI.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for MTVI.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

MTVI.com
*.bellator.com
*.dai.viacomcbs.digital
*.dev.viacomcbs.digital
*.mtvi.com
*.mtvnimages.com
*.mtvnservices-q.mtvi.com
*.mtvnservices.com
*.orchestrator.uat-viacomcbs-tech.com
*.orchestrator.viacomcbs-tech.com
*.paramount-streaming.com
*.paramount.tech
*.plutotv.net
*.staging.viacomcbs.digital
*.ts.mtvnservices.com
*.uat-paramount-streaming.com
*.uat.viacomcbs.digital
*.viacom.com
*.viacom.tech
*.viacomcbs.com
*.viacomcbs.digital
*.viacomcbs.tech
adtrafficguidelines.paramount.com
aka-tls.tsq.mtvnservices.com
auth.id.viacom.com
bcs.paramount.com
contentforchange.paramount.com
cp105701.adp.paramount.tech
cp112360.adp.paramount.tech
cp112366.adp.paramount.tech
cp450888.adp.paramount.tech
cp477481.adp.paramount.tech
cp477482.adp.paramount.tech
cp479184.adp.paramount.tech
cp541865.adp.paramount.tech
cp541867.adp.paramount.tech
cp541868.adp.paramount.tech
drlinearsales.paramount.com
enduser-prod.paramount.com
enduser-uat.paramount.com
enduser.adtrafficguidelines-uat.paramount.com
enduser.bcs-prod.paramount.com
enduser.bcs-uat.paramount.com
enduser.betterknowaballot-prod.paramount.com
enduser.betterknowaballot-uat.paramount.com
enduser.cbsbroadcastcenter-prod.paramount.com
enduser.cfc-prod.paramount.com
enduser.cfc-uat.paramount.com
enduser.dr-prod.paramount.com
enduser.dr-uat.paramount.com
enduser.drlinearsales-uat.paramount.com
enduser.fyc-prod.paramount.com
enduser.fyc-uat.paramount.com
enduser.nppoguidelines-prod.paramount.com
enduser.paramountlot-prod.paramount.com
enduser.paramountlot-uat.paramount.com
enduser.viacomcbs-prod.paramount.com
enduser.viacomcbs-uat.paramount.com
images.pluto.tv
mimhdi.adp.paramount.tech
mtvplus.adp.paramount.tech
ns-stream-dev.paramount.tech
ns-stream-qa.paramount.tech
ns-stream-uat.paramount.tech
ns-stream.paramount.tech
ns1.tsq.mtvnservices.com
pluto.tv
plutopreprod.tv
pmtprodops-staging.adp.paramount.tech
pmtprodops.adp.paramount.tech
prodops-staging.adp.paramount.tech
prodops.adp.paramount.tech
siloh-aka.plutotv.net
telefe.adp.paramount.tech
testing.cmt.vmn.io
topaz.dai.uat.viacomcbs.digital
www.betterknowaballot.com
www.cbsbroadcastcenter.com
www.paramount.com
www.paramountfyc.com
www.pluto.tv
www.plutopreprod.tv

Other certificates including the domain name MTVI.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for MTVI.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEoqFHfHtqobxXMmJbGu1xMVEOLyMr
kPLREJcVbgEVJpfu+zvtBljIcjRFbQl45QaU3hUVuA36GIaXHFof4keCyA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16380703910726352477438105852305608817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MTVI.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a2a1477c7b6aa1bc5732625b1aed7131510e2f232b90f2d11097156e01152697eefb3bed0658c87234456d0978e50694de1515b80dfa1886971c5a1fe24782c8
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c644f952ca7437aa165c096c4003ff67fbd37d4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2277 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MTVI.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dai.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.uat-viacomcbs-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.viacomcbs-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plutotv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat-paramount-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtrafficguidelines.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka-tls.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcs.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentforchange.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp105701.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp112360.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp112366.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp450888.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477481.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477482.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp479184.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541865.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541867.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541868.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drlinearsales.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.adtrafficguidelines-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.bcs-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.bcs-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.betterknowaballot-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.betterknowaballot-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cbsbroadcastcenter-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cfc-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cfc-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.dr-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.dr-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.drlinearsales-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.fyc-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.fyc-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.nppoguidelines-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.paramountlot-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.paramountlot-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.viacomcbs-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.viacomcbs-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimhdi.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvplus.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-dev.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-qa.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-uat.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns1.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plutopreprod.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtprodops-staging.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtprodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodops-staging.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siloh-aka.plutotv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefe.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.cmt.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topaz.dai.uat.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterknowaballot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbsbroadcastcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountfyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plutopreprod.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b4935d6f3f8c4c1fabbb0d54af79723974af3a8b81378b6d01375f798659f2722c3520c0466f46d82c95c66e3761dda7614b1b6bc4787adfa1f8af4d1f7bac6a2fb867058f4740fd433134e40db409504cbe5e13462266e6f068315fab35a9a9a6f9ab0ba16d93071125bfd10d5f8a0f8864f6d43cb3e5abfd85eaf7133c63438010eb013dab8ea769786dbb53831a457f6a63408f4aa7dd7b998bd040dee7d9846c606e5fab0e3e63679c46527290b2b34882e1684bb860e37372e7a585ce26857c229667dbaa490e005b38b7adb29cf208de10a0961ae4e548d85d44f9d4080e1187bf64b73a587f8e9fe27a438b918fb94a8870fb88f4c8cbf6c4f2fc9b0c