MTVI.com

- Viacom International Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:36:95:6a:af:48:48:d9:5d:11:43:44:43:00:44:b4 was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:36:95:6a:af:48:48:d9:5d:11:43:44:43:00:44:b4
Serial Number (int): 1612642557609230573541493135594505396
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2c:bf:47:35:96:97:7e:5a:ff:83:7d:51:2b:3c:29:34:13:38:78:e8
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 99:57:ca:c6:4c:8a:f7:1b:0c:de:00:83:55:c8:3b:3a:09:4c:ad:75
Fingerprint (sha256): b0:76:a6:2c:58:c9:c8:f5:a4:4e:12:cc:a4:3f:49:bd:8a:23:38:55:f4:92:31:09:e8:f9:d6:44:b2:1a:56:b4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate MTVI.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for MTVI.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

MTVI.com
*.bellator.com
*.dai.viacomcbs.digital
*.dev.viacomcbs.digital
*.mtvi.com
*.mtvnimages.com
*.mtvnservices-q.mtvi.com
*.mtvnservices.com
*.orchestrator.uat-viacomcbs-tech.com
*.orchestrator.viacomcbs-tech.com
*.paramount-streaming.com
*.paramount.tech
*.plutotv.net
*.staging.viacomcbs.digital
*.ts.mtvnservices.com
*.uat-paramount-streaming.com
*.uat.viacomcbs.digital
*.viacom.com
*.viacom.tech
*.viacomcbs.com
*.viacomcbs.digital
*.viacomcbs.tech
adtrafficguidelines.paramount.com
aka-tls.tsq.mtvnservices.com
auth.id.viacom.com
contentforchange.paramount.com
cp105701.adp.paramount.tech
cp112360.adp.paramount.tech
cp112366.adp.paramount.tech
cp450888.adp.paramount.tech
cp477481.adp.paramount.tech
cp477482.adp.paramount.tech
cp479184.adp.paramount.tech
cp541865.adp.paramount.tech
cp541867.adp.paramount.tech
cp541868.adp.paramount.tech
drlinearsales.paramount.com
enduser-prod.paramount.com
enduser-uat.paramount.com
enduser.adtrafficguidelines-uat.paramount.com
enduser.bcs-prod.paramount.com
enduser.bcs-uat.paramount.com
enduser.betterknowaballot-prod.paramount.com
enduser.betterknowaballot-uat.paramount.com
enduser.cbsbroadcastcenter-prod.paramount.com
enduser.cfc-prod.paramount.com
enduser.cfc-uat.paramount.com
enduser.dr-prod.paramount.com
enduser.dr-uat.paramount.com
enduser.drlinearsales-uat.paramount.com
enduser.fyc-prod.paramount.com
enduser.fyc-uat.paramount.com
enduser.nppoguidelines-prod.paramount.com
enduser.paramountlot-prod.paramount.com
enduser.paramountlot-uat.paramount.com
enduser.viacomcbs-prod.paramount.com
enduser.viacomcbs-uat.paramount.com
images.pluto.tv
mimhdi.adp.paramount.tech
mtvplus.adp.paramount.tech
ns-stream-dev.paramount.tech
ns-stream-qa.paramount.tech
ns-stream-uat.paramount.tech
ns-stream.paramount.tech
ns1.tsq.mtvnservices.com
pluto.tv
plutopreprod.tv
pmtprodops-staging.adp.paramount.tech
pmtprodops.adp.paramount.tech
prodops-staging.adp.paramount.tech
prodops.adp.paramount.tech
siloh-aka.plutotv.net
telefe.adp.paramount.tech
testing.cmt.vmn.io
topaz.dai.uat.viacomcbs.digital
www.betterknowaballot.com
www.paramount.com
www.paramountfyc.com
www.pluto.tv
www.plutopreprod.tv

Other certificates including the domain name MTVI.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for MTVI.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEabOkh4hCj1S+SYC2jvhf2Vumq/IC
N8Er+sEUulyGBdZ05w5YKYcXuawHsek0yq4bm03maNhFJQuKPEWBW9sKkA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1612642557609230573541493135594505396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MTVI.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000469b3a48788428f54be4980b68ef85fd95ba6abf20237c12bfac114ba5c8605d674e70e58298717b9ac07b1e934caae1b9b4de668d845250b8a3c45815bdb0a90
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cbf473596977e5aff837d512b3c2934133878e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MTVI.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dai.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.uat-viacomcbs-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.viacomcbs-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plutotv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat-paramount-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtrafficguidelines.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka-tls.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentforchange.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp105701.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp112360.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp112366.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp450888.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477481.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477482.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp479184.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541865.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541867.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541868.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drlinearsales.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.adtrafficguidelines-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.bcs-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.bcs-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.betterknowaballot-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.betterknowaballot-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cbsbroadcastcenter-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cfc-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cfc-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.dr-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.dr-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.drlinearsales-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.fyc-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.fyc-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.nppoguidelines-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.paramountlot-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.paramountlot-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.viacomcbs-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.viacomcbs-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimhdi.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvplus.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-dev.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-qa.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-uat.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns1.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plutopreprod.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtprodops-staging.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtprodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodops-staging.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siloh-aka.plutotv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefe.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.cmt.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topaz.dai.uat.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterknowaballot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountfyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plutopreprod.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b61cae4cc552d64d3a5ec3f18bd1d9f5c7764c550e8405bd5d46b2324f50c60d8929c3e2c035022e43a8a493c5500fdad67bb5ace849bcf3df8bf4fa50b93f88b683ea9282991fc647e52e7b9269592b5faad42255fed88d9387a0ea21eb7653485933e4bdd8f504c88f4fbf4ace3505c7abcb6e05a236d8055a40c92b8e17b574142bb79895c80314cc2809ed7dfa0b740d432c76c400fa31ae6f49e9707d2651f8f57ad7cd525d2ee0230d003d51d3edc59a0b1d299a1d056255db0d20018ce52fa57e7bb5f1b57c3e767c6b83eb696c385b367016e0da1d90940fd5cdc221bc3875ed619e6884e8a60b882b640bc3e311ffa204225286098ccd2392a110a