*.orchestrator.viacomcbs-tech.com

- Paramount Global -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ec:e0:aa:e7:9f:7e:f3:1a:4f:36:bb:c2:ae:58:d8:11 was issued on by Sectigo Limited.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Paramount Global

Organization: Paramount Global
State / Province: New York
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): ec:e0:aa:e7:9f:7e:f3:1a:4f:36:bb:c2:ae:58:d8:11
Serial Number (int): 314864347862251698208367301011327997969
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 59:ab:a3:91:db:ce:b2:10:08:9d:8d:b7:69:1e:02:93:e5:d0:65:79
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 74:b6:00:43:e1:76:dd:98:92:43:45:89:99:e0:d5:cd:47:10:bf:7b
Fingerprint (sha256): 85:bb:66:a0:bc:01:f7:ba:be:e0:d0:c9:16:b9:ed:0a:03:9a:99:9b:5f:3f:12:b4:20:dd:70:c4:7f:2d:f6:79

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate *.orchestrator.viacomcbs-tech.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.orchestrator.viacomcbs-tech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.orchestrator.viacomcbs-tech.com
*.orchestrator.uat-viacomcbs-tech.com
*.paramount-streaming.com
*.plutotv.net
*.ts.mtvnservices.com
l3.tsq.mtvnservices.com
plutotv.net
ts.mtvnservices.com
www.l3.tsq.mtvnservices.com

Other certificates including the domain name viacomcbs-tech.com

(limited to 100 certificates)
MTVI.com
*.orchestrator.viacomcbs-tech.com
MTVI.com
*.orchestrator.viacomcbs-tech.com
MTVI.com
*.orchestrator.viacomcbs-tech.com
MTVI.com
mtvi.com
*.orchestrator.viacomcbs-tech.com
MTVI.com
MTVI.com
*.orchestrator.viacomcbs-tech.com
*.orchestrator.viacomcbs-tech.com
MTVI.com
MTVI.com
*.orchestrator.viacomcbs-tech.com
MTVI.com
*.orchestrator.viacomcbs-tech.com
MTVI.com
MTVI.com
*.orchestrator.viacomcbs-tech.com
MTVI.com
MTVI.com
MTVI.com
MTVI.com
MTVI.com
MTVI.com
*.orchestrator.viacomcbs-tech.com

Certificate

The complete raw certificate details for *.orchestrator.viacomcbs-tech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ifwXpijKTCTECniaq8
nmpKViD717DNSm6u5u8gUpN4DnjNkav2+xOo9dJg5hlMfsl/Z3ka7m+ynLN4y+SR
E7lJ6WyjbEHo3vDuBct6GQZf0MDHypskYIvPPEeJwFJUL7WohYcWOJuIDO7gl+0/
8I38ieSfNPEFaER3asZCd1D3FiFD9sdTOo26TuUOACVXefoPDfQ8Z6JlPJnOz9+Z
qMMQOaUZLa999uF0JRC251FGWtJiGNzlEQ3MOvG/uT84Pvm9R1na8oY55KtIHvhx
hyUSlFkW/JNkYAB39Lmdldy3be+p+JSgPhl+CQW2vrmLOz0DikBHGisu6nGGtj3T
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314864347862251698208367301011327997969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paramount Global'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.orchestrator.viacomcbs-tech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23713384327015436967016262363056919500820992391140884339494917168092933655985715627297542689373674404617499162616426009892418836278917802730620556736892106634018227553529540881303492852149675367162677550762895039355096125602459105171225940505009449295869805655250876118065784661533294788892446697737523552355316663164199440777552921267104229411392162196725436622659627221245361927791163465085668445114775040227426547280383560253327974392476196122265188707959390979531417425145887919250878528207938900802811107616810331350002418516119670038880277690335725616743509445810222721314087815785112220545973542529842538206133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59aba391dbceb210089d8db7691e0293e5d06579
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.viacomcbs-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.uat-viacomcbs-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plutotv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l3.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plutotv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.l3.tsq.mtvnservices.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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