toefl.ereg.ets.org
- Educational Testing Service -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number f2:0b:09:6a:4c:3e:53:5b:b4:39:a9:39:a8:fc:ac:20 was issued on by Sectigo Limited.
With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Educational Testing Service
Organization:
Educational Testing Service
State / Province:
New Jersey
Country: US
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): f2:0b:09:6a:4c:3e:53:5b:b4:39:a9:39:a8:fc:ac:20Serial Number (int): 321730481208861391518985462674035092512
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: bc:d4:fa:91:40:3d:b9:c1:1f:55:7d:3d:a6:50:f4:bd:d5:fd:a2:20
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 75:36:4a:ca:05:06:c6:c5:3b:b4:51:88:20:40:f9:a5:b8:1a:2a:51
Fingerprint (sha256): 07:07:b0:50:92:25:85:27:79:72:4f:59:71:5c:8f:68:70:8b:b4:84:6c:bf:c3:cd:9d:b3:27:fe:9d:dc:e0:a0
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate toefl.ereg.ets.org
37
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for toefl.ereg.ets.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
toefl.ereg.ets.org
admin.ereg.ets.org
csr-int.ereg.ets.org
ereg3-rest-api.ets.org
ereg4-rest-api.ets.org
m-v2-appointment.ereg.ets.org
m-v2-commerce.ereg.ets.org
m-v2-profile.ereg.ets.org
m-v2-reference.ereg.ets.org
m-v2-scheduling.ereg.ets.org
origin-ereg3-rest-api.ets.org
origin-ereg4-rest-api.ets.org
origin-v2-csrext.ereg.ets.org
origin-v2-csrint.ereg.ets.org
origin-v2-ecommerce-ext.ets.org
origin-v2.ereg.ets.org
solr.ereg.ets.org
solrcloud.ereg.ets.org
toeflcsr-ext.ereg.ets.org
toeflcsr-int.ereg.ets.org
v2-appointment.ereg.ets.org
v2-appointmentext.ereg.ets.org
v2-appointmentint.ereg.ets.org
v2-commerce.ereg.ets.org
v2-csrext.ereg.ets.org
v2-csrint.ereg.ets.org
v2-cybsop.ereg.ets.org
v2-ecommerce-ext.ets.org
v2-ecommerceext.ereg.ets.org
v2-ecommerceint.ereg.ets.org
v2-neea.ereg.ets.org
v2-profile.ereg.ets.org
v2-profileext.ereg.ets.org
v2-profileint.ereg.ets.org
v2-schedulingext.ereg.ets.org
v2-scoreload.ereg.ets.org
v2.ereg.ets.org
admin.ereg.ets.org
csr-int.ereg.ets.org
ereg3-rest-api.ets.org
ereg4-rest-api.ets.org
m-v2-appointment.ereg.ets.org
m-v2-commerce.ereg.ets.org
m-v2-profile.ereg.ets.org
m-v2-reference.ereg.ets.org
m-v2-scheduling.ereg.ets.org
origin-ereg3-rest-api.ets.org
origin-ereg4-rest-api.ets.org
origin-v2-csrext.ereg.ets.org
origin-v2-csrint.ereg.ets.org
origin-v2-ecommerce-ext.ets.org
origin-v2.ereg.ets.org
solr.ereg.ets.org
solrcloud.ereg.ets.org
toeflcsr-ext.ereg.ets.org
toeflcsr-int.ereg.ets.org
v2-appointment.ereg.ets.org
v2-appointmentext.ereg.ets.org
v2-appointmentint.ereg.ets.org
v2-commerce.ereg.ets.org
v2-csrext.ereg.ets.org
v2-csrint.ereg.ets.org
v2-cybsop.ereg.ets.org
v2-ecommerce-ext.ets.org
v2-ecommerceext.ereg.ets.org
v2-ecommerceint.ereg.ets.org
v2-neea.ereg.ets.org
v2-profile.ereg.ets.org
v2-profileext.ereg.ets.org
v2-profileint.ereg.ets.org
v2-schedulingext.ereg.ets.org
v2-scoreload.ereg.ets.org
v2.ereg.ets.org
Other certificates including the domain name ets.org
(limited to 100 certificates)
ibt2-cloud-util-test-prod.ets.org
isbd-cdn-test.ets.org
nlp-pilot.ets.org
elpac-help-preview.ets.org
ibt2tc-ts.ets.org
elpac-help-qc.ets.org
cahsee1.ets.org
ibtint-prod.ets.org
one-uat-batchservices-a.ets.org
v2.ereg.ets.org
ibis-ess-perf.ets.org
ereg.ets.org
stnmanager-uat.ets.org
isbd-matchmakerphp-dev.ets.org
ndecore.ets.org
cdd-dev-cft.ets.org
erater-new-test.ets.org
sparkle-0-8-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
www.ets.org
ereg-ext.ets.org
rm.ets.org
eregweb-uat-ext.ets.org
cdd-test.ets.org
criterion28.ets.org
isr-stage.ets.org
eiassoaresponse-dvi.ets.org
erater-new-stage.ets.org
ibtprod-central.ets.org
facets-test.ets.org
fed11g-stg.ets.org
portal-stage.ets.org
cars-dev.ets.org
esc-dev-rest.ets.org
etslnbz28.ets.org
skw.ets.org
toeicrts.ets.org
conda.nlplab-dev.c.ets.org
isr.ets.org
TOEFL-REGISTRATION.ETS.ORG
one-web-a.ets.org
toefl-registration-dev.ets.org
osnlbpi4.ets.org
hostedzone-demo.etstest-innovate001.c-test.ets.org
isbd-cdn-stage.ets.org
api.parcore-dev.ets.org
api.ibis-test.ets.org
rpm-ot.ets.org
store.ets.org
origin-cinnamon.m.ets-plalab-ghe-nonprod.c.ets.org
san.ets.org
etsvln160.etslan.org
ensr-web.ets.org
gatewaycps-stg.ets.org
www.ets.org
nlpservices-stage.ets.org
ensr-ssrs-web-60.ets.org
one-uat-web-a.ets.org
usndcssl3.ets.org
*.ets.org
v2-scoreload.ereg.ets.org
*.ets.org
texasassessment.ets.org
toefl.ereg.ets.org
gace-qc.ets.org
cert-1201-1.etstest-innovate001.c-test.ets.org
rptasys-stg.ets.org
*.ets.org
title2.ets.org
sparkle-0-5-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
sparklite.jr.ets-plalab-ghe-nonprod.c.ets.org
fed11g-stg.ets.org
cbmtd.ets.org
ibt2-speedtest.ets.org
san.ets.org
eias11g-stg.ets.org
authnsvcps3-tst.ets.org
isbd-portal-stage.ets.org
ssrs.ets.org
san.ets.org
vpn.ets.org
tcmservices-dev.ets.org
ibt2-cloud-util.ets.org
san.ets.org
api.parcore-test.ets.org
practice-new.ets.org
gace.more.ets.org
www.ets.org
stnres-int.ets.org
ibtsb.ets.org
conda.nlplab-dev.c.ets.org
origin-criterionng-stage.ets.org
mmai-nvf-mmai-tst-272250.ets-mmai-nonprod.c.ets.org
osn-wspx1.ets.org
acres-dev.ets-acres-nonprod.c.ets.org
ca-toms-help-qc.ets.org
ibt2-dashboard-uat.ets.org
stnfinancial.ets.org
tartine-asr.jbtest.ets-plalab-ghe-nonprod.c.ets.org
mds-services-int.ets.org
origin.parcore-test.ets.org
isbd-cdn-test.ets.org
nlp-pilot.ets.org
elpac-help-preview.ets.org
ibt2tc-ts.ets.org
elpac-help-qc.ets.org
cahsee1.ets.org
ibtint-prod.ets.org
one-uat-batchservices-a.ets.org
v2.ereg.ets.org
ibis-ess-perf.ets.org
ereg.ets.org
stnmanager-uat.ets.org
isbd-matchmakerphp-dev.ets.org
ndecore.ets.org
cdd-dev-cft.ets.org
erater-new-test.ets.org
sparkle-0-8-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
www.ets.org
ereg-ext.ets.org
rm.ets.org
eregweb-uat-ext.ets.org
cdd-test.ets.org
criterion28.ets.org
isr-stage.ets.org
eiassoaresponse-dvi.ets.org
erater-new-stage.ets.org
ibtprod-central.ets.org
facets-test.ets.org
fed11g-stg.ets.org
portal-stage.ets.org
cars-dev.ets.org
esc-dev-rest.ets.org
etslnbz28.ets.org
skw.ets.org
toeicrts.ets.org
conda.nlplab-dev.c.ets.org
isr.ets.org
TOEFL-REGISTRATION.ETS.ORG
one-web-a.ets.org
toefl-registration-dev.ets.org
osnlbpi4.ets.org
hostedzone-demo.etstest-innovate001.c-test.ets.org
isbd-cdn-stage.ets.org
api.parcore-dev.ets.org
api.ibis-test.ets.org
rpm-ot.ets.org
store.ets.org
origin-cinnamon.m.ets-plalab-ghe-nonprod.c.ets.org
san.ets.org
etsvln160.etslan.org
ensr-web.ets.org
gatewaycps-stg.ets.org
www.ets.org
nlpservices-stage.ets.org
ensr-ssrs-web-60.ets.org
one-uat-web-a.ets.org
usndcssl3.ets.org
*.ets.org
v2-scoreload.ereg.ets.org
*.ets.org
texasassessment.ets.org
toefl.ereg.ets.org
gace-qc.ets.org
cert-1201-1.etstest-innovate001.c-test.ets.org
rptasys-stg.ets.org
*.ets.org
title2.ets.org
sparkle-0-5-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
sparklite.jr.ets-plalab-ghe-nonprod.c.ets.org
fed11g-stg.ets.org
cbmtd.ets.org
ibt2-speedtest.ets.org
san.ets.org
eias11g-stg.ets.org
authnsvcps3-tst.ets.org
isbd-portal-stage.ets.org
ssrs.ets.org
san.ets.org
vpn.ets.org
tcmservices-dev.ets.org
ibt2-cloud-util.ets.org
san.ets.org
api.parcore-test.ets.org
practice-new.ets.org
gace.more.ets.org
www.ets.org
stnres-int.ets.org
ibtsb.ets.org
conda.nlplab-dev.c.ets.org
origin-criterionng-stage.ets.org
mmai-nvf-mmai-tst-272250.ets-mmai-nonprod.c.ets.org
osn-wspx1.ets.org
acres-dev.ets-acres-nonprod.c.ets.org
ca-toms-help-qc.ets.org
ibt2-dashboard-uat.ets.org
stnfinancial.ets.org
tartine-asr.jbtest.ets-plalab-ghe-nonprod.c.ets.org
mds-services-int.ets.org
origin.parcore-test.ets.org
Certificate
The complete raw certificate details for toefl.ereg.ets.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKqjCCCZKgAwIBAgIRAPILCWpMPlNbtDmpOaj8rCAwDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yMzEwMzEwMDAwMDBaFw0yNDEwMzAyMzU5NTlaMGUxCzAJBgNV BAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MSQwIgYDVQQKExtFZHVjYXRpb25h bCBUZXN0aW5nIFNlcnZpY2UxGzAZBgNVBAMTEnRvZWZsLmVyZWcuZXRzLm9yZzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMKq9CYW4r7FAo+v+e5+oUxv zGtM0RSmRFGQriTUdZ1pNFBrVz5LgzZAGNASZ/kSxzZ4YfQJKcFFGZnTx8nfC2j+ k9YwYMUfK2pqInEgT1iaegV7SLZx69cMSKLBfEuCTnJNjmfRnYqb9ViAD5feiF9k QV+17MXdofqoW8Ojk4c92S41HRdHQfquyjIe0h8/QQYhUzpDXTOIns7yyDxJlFfI uEs8a9QAmGzUPLIF3pkh/acIgG50znIoz/q4nV8+ffr5WNgD44B4Y1sDtS8W9cIV aPpemqf0GdtUJiDMfsQtMI29QjehBVP8wRGnPBI9I6c+C+PBqG1ZEa16Mw7dGh0C AwEAAaOCByIwggceMB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0G A1UdDgQWBBS81PqRQD25wR9VfT2mUPS91f2iIDAOBgNVHQ8BAf8EBAMCBaAwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0g BEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0 aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9j cmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25T ZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJ aHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFs aWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29j c3Auc2VjdGlnby5jb20wggF7BgorBgEEAdZ5AgQCBIIBawSCAWcBZQB1AHb/iD8K tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi4Y59gEAAAQDAEYwRAIgB294 LWBy6DKE/k6Z/k4+s1XZVG0+42TFflgwDYn/6k0CIG/fy7p3P+7BjDe3ImYr3Jy3 5fHJsFZO9H3S6pbaylbKAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX +6sAAAGLhjn2ZAAABAMARjBEAiB2v2vNrn37yS6NvpNGGrVNiTTZY3mpwbCJdCDK FN/pQwIgRKJxA0U4ZEqSqi/q0RnD3h3h9aNgaHvBtYpBV82iVlIAdQDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYuGOfYtAAAEAwBGMEQCIFlwZ5vB MKdpCgE8ftJMCbLFH3BHL+pFUsLxKKdeozB9AiAemWjO3WKQbJE5hW/fo9UDvlBt oa66d3ivrSRxFYgX3zCCA+kGA1UdEQSCA+AwggPcghJ0b2VmbC5lcmVnLmV0cy5v cmeCEmFkbWluLmVyZWcuZXRzLm9yZ4IUY3NyLWludC5lcmVnLmV0cy5vcmeCFmVy ZWczLXJlc3QtYXBpLmV0cy5vcmeCFmVyZWc0LXJlc3QtYXBpLmV0cy5vcmeCHW0t djItYXBwb2ludG1lbnQuZXJlZy5ldHMub3JnghptLXYyLWNvbW1lcmNlLmVyZWcu ZXRzLm9yZ4IZbS12Mi1wcm9maWxlLmVyZWcuZXRzLm9yZ4IbbS12Mi1yZWZlcmVu Y2UuZXJlZy5ldHMub3JnghxtLXYyLXNjaGVkdWxpbmcuZXJlZy5ldHMub3Jngh1v cmlnaW4tZXJlZzMtcmVzdC1hcGkuZXRzLm9yZ4Idb3JpZ2luLWVyZWc0LXJlc3Qt YXBpLmV0cy5vcmeCHW9yaWdpbi12Mi1jc3JleHQuZXJlZy5ldHMub3Jngh1vcmln aW4tdjItY3NyaW50LmVyZWcuZXRzLm9yZ4Ifb3JpZ2luLXYyLWVjb21tZXJjZS1l eHQuZXRzLm9yZ4IWb3JpZ2luLXYyLmVyZWcuZXRzLm9yZ4IRc29sci5lcmVnLmV0 cy5vcmeCFnNvbHJjbG91ZC5lcmVnLmV0cy5vcmeCGXRvZWZsY3NyLWV4dC5lcmVn LmV0cy5vcmeCGXRvZWZsY3NyLWludC5lcmVnLmV0cy5vcmeCG3YyLWFwcG9pbnRt ZW50LmVyZWcuZXRzLm9yZ4IedjItYXBwb2ludG1lbnRleHQuZXJlZy5ldHMub3Jn gh52Mi1hcHBvaW50bWVudGludC5lcmVnLmV0cy5vcmeCGHYyLWNvbW1lcmNlLmVy ZWcuZXRzLm9yZ4IWdjItY3NyZXh0LmVyZWcuZXRzLm9yZ4IWdjItY3NyaW50LmVy ZWcuZXRzLm9yZ4IWdjItY3lic29wLmVyZWcuZXRzLm9yZ4IYdjItZWNvbW1lcmNl LWV4dC5ldHMub3Jnghx2Mi1lY29tbWVyY2VleHQuZXJlZy5ldHMub3Jnghx2Mi1l Y29tbWVyY2VpbnQuZXJlZy5ldHMub3JnghR2Mi1uZWVhLmVyZWcuZXRzLm9yZ4IX djItcHJvZmlsZS5lcmVnLmV0cy5vcmeCGnYyLXByb2ZpbGVleHQuZXJlZy5ldHMu b3Jnghp2Mi1wcm9maWxlaW50LmVyZWcuZXRzLm9yZ4IddjItc2NoZWR1bGluZ2V4 dC5lcmVnLmV0cy5vcmeCGXYyLXNjb3JlbG9hZC5lcmVnLmV0cy5vcmeCD3YyLmVy ZWcuZXRzLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAfC5mteH1BUDJVQ0OQIUQeC5P /ZJ2XL73sbC5LZ/nLD0eY1q40Gl2aCdMZCKaBZaxVyUO899M6i7Offm12K4Rm8Ew dDv/tuLlRYnLYJQanFXrXID4h2Ov7seHh9UmX/b2ND8JXpGIZ7MbPXWxho46FeI8 YoEH1jbmKFH9etxbB44iBKkMKPH6HtSdVntOTjYs5yOVTfz/JT+ARR9gADc7LoiV aHLInMDHjZBTcKXL26f5+Q29rv5bFd72io0alLRL+bGp3hBI04szkwU5VDEi/GAs aL2hCQvGDna7sdnn8ymRJU6OD17npfR1cCx4DHJGzXihTZteSrAS+OgFvz3Hdg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqr0JhbivsUCj6/57n6h TG/Ma0zRFKZEUZCuJNR1nWk0UGtXPkuDNkAY0BJn+RLHNnhh9AkpwUUZmdPHyd8L aP6T1jBgxR8ramoicSBPWJp6BXtItnHr1wxIosF8S4JOck2OZ9Gdipv1WIAPl96I X2RBX7Xsxd2h+qhbw6OThz3ZLjUdF0dB+q7KMh7SHz9BBiFTOkNdM4iezvLIPEmU V8i4Szxr1ACYbNQ8sgXemSH9pwiAbnTOcijP+ridXz59+vlY2APjgHhjWwO1Lxb1 whVo+l6ap/QZ21QmIMx+xC0wjb1CN6EFU/zBEac8Ej0jpz4L48GobVkRrXozDt0a HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321730481208861391518985462674035092512 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Educational Testing Service' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'toefl.ereg.ets.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24574531577861119526935130848179526759082554421074745745873420361846035093220103875315640614966620402390872344422588996675722594771748891579401844519200263203888255439918245810210799979618594314264215356989961181163890741649427020243109499434561029796997089346918372750216222588105341458421908804946219419592004128295308734719572790345000183135110006939847740376471248445823027930485062033706702481899412819622718659396340295018856692803309193867000095399914197634584084943022939772396325980658624302619429542413815451683739503040810930263173875484750308039104054928226646976638617984165096566519761651806761916373533 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bcd4fa91403db9c11f557d3da650f4bdd5fda220 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes) 016500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b8639f60100000403004630440220076f782d6072e83284fe4e99fe4e3eb355d9546d3ee364c57e58300d89ffea4d02206fdfcbba773feec18c37b722662bdc9cb7e5f1c9b0564ef47dd2ea96daca56ca007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8639f6640000040300463044022076bf6bcdae7dfbc92e8dbe93461ab54d8934d96379a9c1b0897420ca14dfe943022044a271034538644a92aa2fead119c3de1de1f5a360687bc1b58a4157cda25652007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b8639f62d000004030046304402205970679bc130a7690a013c7ed24c09b2c51f70472fea4552c2f128a75ea3307d02201e9968cedd62906c9139856fdfa3d503be506da1aeba7778afad2471158817df . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (992 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toefl.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr-int.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereg3-rest-api.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereg4-rest-api.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-appointment.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-commerce.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-profile.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-reference.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-scheduling.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-ereg3-rest-api.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-ereg4-rest-api.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-v2-csrext.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-v2-csrint.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-v2-ecommerce-ext.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-v2.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solr.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solrcloud.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toeflcsr-ext.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toeflcsr-int.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-appointment.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-appointmentext.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-appointmentint.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-commerce.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-csrext.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-csrint.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-cybsop.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-ecommerce-ext.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-ecommerceext.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-ecommerceint.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-neea.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-profile.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-profileext.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-profileint.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-schedulingext.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-scoreload.ereg.ets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.ereg.ets.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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