MTVI.com

- Viacom International Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:10:62:c0:2a:b3:7d:34:5d:ce:84:95:84:c3:26:12 was issued on by DigiCert Inc.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Viacom International Inc.

Organization: Viacom International Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:10:62:c0:2a:b3:7d:34:5d:ce:84:95:84:c3:26:12
Serial Number (int): 18694271591889099461172199491960514066
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e9:10:ce:a0:d7:34:91:48:1b:e5:72:76:eb:b2:d3:84:97:48:0c:a5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): fb:1b:31:ec:42:55:23:07:27:0f:6c:f9:56:32:1d:44:f3:29:f2:d3
Fingerprint (sha256): bc:bc:51:c8:8c:47:e4:6f:89:8b:08:be:29:fc:c9:9c:72:87:2d:8d:52:b8:94:9f:fe:8b:92:1a:f4:76:11:14

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate MTVI.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for MTVI.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

MTVI.com
*.bellator.com
*.dai.viacomcbs.digital
*.dev.viacomcbs.digital
*.mtvi.com
*.mtvnimages.com
*.mtvnservices-q.mtvi.com
*.mtvnservices.com
*.orchestrator.uat-viacomcbs-tech.com
*.orchestrator.viacomcbs-tech.com
*.paramount-streaming.com
*.paramount.tech
*.plutotv.net
*.staging.viacomcbs.digital
*.ts.mtvnservices.com
*.uat-paramount-streaming.com
*.uat.viacomcbs.digital
*.viacom.com
*.viacom.tech
*.viacomcbs.com
*.viacomcbs.digital
*.viacomcbs.tech
adtrafficguidelines.paramount.com
aka-tls.tsq.mtvnservices.com
auth.id.viacom.com
bcs.paramount.com
contentforchange.paramount.com
cp105701.adp.paramount.tech
cp112360.adp.paramount.tech
cp112366.adp.paramount.tech
cp450888.adp.paramount.tech
cp477481.adp.paramount.tech
cp477482.adp.paramount.tech
cp479184.adp.paramount.tech
cp541865.adp.paramount.tech
cp541867.adp.paramount.tech
cp541868.adp.paramount.tech
drlinearsales.paramount.com
enduser-prod.paramount.com
enduser-uat.paramount.com
enduser.adtrafficguidelines-uat.paramount.com
enduser.bcs-prod.paramount.com
enduser.bcs-uat.paramount.com
enduser.betterknowaballot-prod.paramount.com
enduser.betterknowaballot-uat.paramount.com
enduser.cbsbroadcastcenter-prod.paramount.com
enduser.cfc-prod.paramount.com
enduser.cfc-uat.paramount.com
enduser.dr-prod.paramount.com
enduser.dr-uat.paramount.com
enduser.drlinearsales-uat.paramount.com
enduser.fyc-prod.paramount.com
enduser.fyc-uat.paramount.com
enduser.nppoguidelines-prod.paramount.com
enduser.paramountlot-prod.paramount.com
enduser.paramountlot-uat.paramount.com
enduser.viacomcbs-prod.paramount.com
enduser.viacomcbs-uat.paramount.com
images.pluto.tv
mimhdi.adp.paramount.tech
mtvplus.adp.paramount.tech
ns-stream-dev.paramount.tech
ns-stream-qa.paramount.tech
ns-stream-uat.paramount.tech
ns-stream.paramount.tech
ns1.tsq.mtvnservices.com
pluto.tv
plutopreprod.tv
pmtprodops-staging.adp.paramount.tech
pmtprodops.adp.paramount.tech
prodops-staging.adp.paramount.tech
prodops.adp.paramount.tech
siloh-aka.plutotv.net
telefe.adp.paramount.tech
testing.cmt.vmn.io
topaz.dai.uat.viacomcbs.digital
www.betterknowaballot.com
www.paramount.com
www.paramountfyc.com
www.pluto.tv
www.plutopreprod.tv

Other certificates including the domain name MTVI.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for MTVI.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWd7owyN3Cc+3fWjPO43XQl77IUS/
LTtp82HK0itne4d09ptWr0v/iAsgoXYiOYhOSnJQtTqWT50uHOsVG9UqSg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18694271591889099461172199491960514066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MTVI.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000459dee8c3237709cfb77d68cf3b8dd7425efb2144bf2d3b69f361cad22b677b8774f69b56af4bff880b20a1762239884e4a7250b53a964f9d2e1ceb151bd52a4a
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e910cea0d73491481be57276ebb2d38497480ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MTVI.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dai.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnservices-q.mtvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.uat-viacomcbs-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.viacomcbs-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plutotv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ts.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat-paramount-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtrafficguidelines.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka-tls.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcs.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentforchange.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp105701.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp112360.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp112366.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp450888.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477481.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp477482.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp479184.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541865.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541867.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp541868.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drlinearsales.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.adtrafficguidelines-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.bcs-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.bcs-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.betterknowaballot-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.betterknowaballot-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cbsbroadcastcenter-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cfc-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.cfc-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.dr-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.dr-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.drlinearsales-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.fyc-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.fyc-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.nppoguidelines-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.paramountlot-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.paramountlot-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.viacomcbs-prod.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enduser.viacomcbs-uat.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimhdi.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvplus.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-dev.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-qa.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream-uat.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-stream.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns1.tsq.mtvnservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plutopreprod.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtprodops-staging.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtprodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodops-staging.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodops.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siloh-aka.plutotv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefe.adp.paramount.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.cmt.vmn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topaz.dai.uat.viacomcbs.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterknowaballot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountfyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pluto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plutopreprod.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018f1198216b000004030048304602210092e03d5c59ad450b93e343d9ae1b5b418eb15cafbedbba2d6145ccf5d92f47fd02210084d6e25f94cf288feb25716dcef09044a83c6c83368480581d685044826e73f20075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018f1198212900000403004630440220489aac1bfd29f2dc7ed247a765eff6f530f634524b2e02090490ad60215111ad0220715c2d389dca859308edf4fd141b5b1a1086b5e5ea556d9247a85fffd9bc1823007500a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018f119821c70000040300463044022100d0af803710b625493f5a56ae71db58dfb71e809985ea1a274537b18a575f0c0e021f560e8d45b7371bf6d456cc105eb6f7473f8f649a1f7b2d4b6d566dbd0761cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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