www.cbs.com

- CBS Broadcasting Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 71:62:a3:4d:71:37:97:6c:dc:c9:20:7d:87:7c:8d:c6 was issued on by GeoTrust Inc..

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CBS Broadcasting Inc.

Organization: CBS Broadcasting Inc.
Organization unit: Akamai SAN SSL OV
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:62:a3:4d:71:37:97:6c:dc:c9:20:7d:87:7c:8d:c6
Serial Number (int): 150714920784204827681746638086533320134
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): e5:de:ba:f8:06:d0:65:a1:3b:fb:b7:7a:aa:8b:e2:09:37:a5:49:c9
Fingerprint (sha256): 88:4b:2c:81:cc:dc:e9:7a:ec:2f:0a:49:4b:e2:6c:59:56:48:70:ec:2c:93:18:a4:75:17:4a:c0:fb:41:e0:30

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.cbs.com

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.chowhound.com
www.chowstatic.com
dw.cbsimg.net
www.chowmagazine.com
secure.tv.com
test.techrepublic.com
www.techrepublic.com
amp.insideedition.com
pm2.fonts.cbsnews.com
cc.cnetcontent.com
cdn.cnetcontent.com
rev.cbsi.com
fonts.cbsi.com
static-1.tvgcdn.net
static-5.tvgcdn.net
static-3.tvgcdn.net
static.tvgcdn.net
static-2.tvgcdn.net
cimg.tvgcdn.net
hdvod.tvgcdn.net
static-4.tvgcdn.net
pmd.tvgcdn.net
cnet4.cbsistatic.com
cnet2.cbsistatic.com
cnet1.cbsistatic.com
cnet3.cbsistatic.com
sportsline-sdg.cbsistatic.com
wwwimage-secure2.cbsstatic.com
wwwimage-secure5.cbsstatic.com
wwwimage-secure.cbsstatic.com
wwwimage-secure1.cbsstatic.com
wwwimage.cbsstatic.com
wwwimage-secure3.cbsstatic.com
wwwimage-secure4.cbsstatic.com
cdn4.cnet.com
pm2.fonts.cnet.com
www.cnet.com
test.cnet.com
cdn1.cnet.com
cdn3.cnet.com
cdn2.cnet.com
uat.cnet.com
feed.cnet.com
podcast-files.cnet.com
chowhound.chow.com
www.chow.com
search.chow.com
secure.metacritic.com
api.metacritic.com
amp.etonline.com
vidtech.cbsinteractive.com
movies.tvguide.com
www.tvguide.com
video.tvguide.com
mobilelistings.tvguide.com
rss.tvguide.com
mapi.tvguide.com
cbs.com
flv.sales.cbs.com
videoplayer.cbs.com
canstatic.cbs.com
www.cbs.com

Other certificates including the domain name cbs.com

(limited to 100 certificates)
dev-broker.mediapo.cbs.com
*.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
concur.cbs.com
box.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
viacomcbs-live.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
ny-asperafaspex.cwd.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
*.lb.cbs.com
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
airspace.cbsivideo.com
prospective.shared.global.fastly.net
*.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
adfs.cbs.com
audienceservices.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacomcbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
*.airspace-g.cbsivideo.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
cbsaavideo.com
shoogle.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
uccaas-expc.cbs.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
*.cbs.com
fluuid-dev.cbs.com
b3.shared.global.fastly.net
b3.shared.global.fastly.net
*.airspace-g.cbsivideo.com
www.viacomcbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
www.viacom.tech
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
www.cbs.com
b3.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
ehs.cbs.com
prospective.shared.global.fastly.net
www.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
*.cbs.com
www.cbs.com
cbsco-cucm01-bv1.cbs.com
prospective.shared.global.fastly.net
b3.shared.global.fastly.net
b3.shared.global.fastly.net
uat-eai.cbs.com
prospective.shared.global.fastly.net

Certificate

The complete raw certificate details for www.cbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMkd7ahMmOProFMte5+A
wP/5fw4u61VJ2mYrnieK+xhVe9NgnJXusS1UnUBalIO8oMh6Ri40qnYBtSOboJh4
F415tz99xR20Ymn4hWn3U6+hZ4aaPBmq6DbTM0a+gb0VEzpsg53Y7E50s/hPhHGO
SX9ZLVQsGKQNcYA6QSwgG05U+vIQe3kOyZwv/XgtuoMJE6oc+O65VX/weRPkz4DO
uhELr4YHI2Vsm09yYbfMByTmwTAabTduxb2jKCcIy6stVaDXsm8JC626YBFHND2b
BE/PdmOShJ2zUKRHpFeHhEubOOOlrkJYCo9YREwTMUwaPywz48jcYfvlCirjJRs/
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150714920784204827681746638086533320134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CBS Broadcasting Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.cbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24841882216774287159430028221060536455429167304985805327056297153947433319876302534245794517154981932274585166927106484851951533624964417487582153848949539942498527028900225435079191535525538700626034348758523376651673192273919532752037043015909169067996653728373248117838811583579313445757251382608641783453061510131040952721239732954890711238126184292624168493111798569350351906426657512219967583500478396955539155935706435831748965532382972634790001946203117107948485436624797249206167173660647040193759726541114901289005797417667351023691072228401778844814597248652887693368790780031734527278545607137705070378891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowhound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dw.cbsimg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chowmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.insideedition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cbsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cnetcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rev.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.cbsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-1.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-5.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-3.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-2.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimg.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdvod.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-4.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmd.tvgcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet4.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet2.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet1.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnet3.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsline-sdg.cbsistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure2.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure5.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure1.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure3.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwimage-secure4.cbsstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm2.fonts.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast-files.cnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chowhound.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.chow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.metacritic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.etonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidtech.cbsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilelistings.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapi.tvguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flv.sales.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoplayer.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canstatic.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009da7038097168a9775cbc2333707462e60112dfc336dbc078d38f14949aeddb084deed7d38829c77243a0efda835152d8582347c8fdec49f35ec250b765aa0e7d179f19534fc9128326a16316a5c1345729df91afc3ca6b6d87a3b786d71c006d5f2cc637af89c5d945978eca7115585651dbf0c75f2c6818a00ee9b36f2ebbf6aeca81398028e8c9cd29992e6cd053b35cb7b14c1e10445acb08752ab46d7f96e7201b6bf970003b8dcf07e205e83480c95877c724df60193a31f323efcfd7e7f31d78b7831a2e31ef3b7263178dabdd9d741da97988c3d06ac10635676c66e693265ff433caafd6539fcc3f89a77a75b728e3044b7f5fa2c08e5ad5ab9c0df