toefl.ereg.ets.org

- Educational Testing Service -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number f2:0b:09:6a:4c:3e:53:5b:b4:39:a9:39:a8:fc:ac:20 was issued on by Sectigo Limited.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Educational Testing Service

Organization: Educational Testing Service
State / Province: New Jersey
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): f2:0b:09:6a:4c:3e:53:5b:b4:39:a9:39:a8:fc:ac:20
Serial Number (int): 321730481208861391518985462674035092512
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bc:d4:fa:91:40:3d:b9:c1:1f:55:7d:3d:a6:50:f4:bd:d5:fd:a2:20
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 75:36:4a:ca:05:06:c6:c5:3b:b4:51:88:20:40:f9:a5:b8:1a:2a:51
Fingerprint (sha256): 07:07:b0:50:92:25:85:27:79:72:4f:59:71:5c:8f:68:70:8b:b4:84:6c:bf:c3:cd:9d:b3:27:fe:9d:dc:e0:a0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate toefl.ereg.ets.org

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for toefl.ereg.ets.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

toefl.ereg.ets.org
admin.ereg.ets.org
csr-int.ereg.ets.org
ereg3-rest-api.ets.org
ereg4-rest-api.ets.org
m-v2-appointment.ereg.ets.org
m-v2-commerce.ereg.ets.org
m-v2-profile.ereg.ets.org
m-v2-reference.ereg.ets.org
m-v2-scheduling.ereg.ets.org
origin-ereg3-rest-api.ets.org
origin-ereg4-rest-api.ets.org
origin-v2-csrext.ereg.ets.org
origin-v2-csrint.ereg.ets.org
origin-v2-ecommerce-ext.ets.org
origin-v2.ereg.ets.org
solr.ereg.ets.org
solrcloud.ereg.ets.org
toeflcsr-ext.ereg.ets.org
toeflcsr-int.ereg.ets.org
v2-appointment.ereg.ets.org
v2-appointmentext.ereg.ets.org
v2-appointmentint.ereg.ets.org
v2-commerce.ereg.ets.org
v2-csrext.ereg.ets.org
v2-csrint.ereg.ets.org
v2-cybsop.ereg.ets.org
v2-ecommerce-ext.ets.org
v2-ecommerceext.ereg.ets.org
v2-ecommerceint.ereg.ets.org
v2-neea.ereg.ets.org
v2-profile.ereg.ets.org
v2-profileext.ereg.ets.org
v2-profileint.ereg.ets.org
v2-schedulingext.ereg.ets.org
v2-scoreload.ereg.ets.org
v2.ereg.ets.org

Other certificates including the domain name ets.org

(limited to 100 certificates)
ibt2-cloud-util-test-prod.ets.org
isbd-cdn-test.ets.org
nlp-pilot.ets.org
elpac-help-preview.ets.org
ibt2tc-ts.ets.org
elpac-help-qc.ets.org
cahsee1.ets.org
ibtint-prod.ets.org
one-uat-batchservices-a.ets.org
v2.ereg.ets.org
ibis-ess-perf.ets.org
ereg.ets.org
stnmanager-uat.ets.org
isbd-matchmakerphp-dev.ets.org
ndecore.ets.org
cdd-dev-cft.ets.org
erater-new-test.ets.org
sparkle-0-8-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
www.ets.org
ereg-ext.ets.org
rm.ets.org
eregweb-uat-ext.ets.org
cdd-test.ets.org
criterion28.ets.org
isr-stage.ets.org
eiassoaresponse-dvi.ets.org
erater-new-stage.ets.org
ibtprod-central.ets.org
facets-test.ets.org
fed11g-stg.ets.org
portal-stage.ets.org
cars-dev.ets.org
esc-dev-rest.ets.org
etslnbz28.ets.org
skw.ets.org
toeicrts.ets.org
conda.nlplab-dev.c.ets.org
isr.ets.org
TOEFL-REGISTRATION.ETS.ORG
one-web-a.ets.org
toefl-registration-dev.ets.org
osnlbpi4.ets.org
hostedzone-demo.etstest-innovate001.c-test.ets.org
isbd-cdn-stage.ets.org
api.parcore-dev.ets.org
api.ibis-test.ets.org
rpm-ot.ets.org
store.ets.org
origin-cinnamon.m.ets-plalab-ghe-nonprod.c.ets.org
san.ets.org
etsvln160.etslan.org
ensr-web.ets.org
gatewaycps-stg.ets.org
www.ets.org
nlpservices-stage.ets.org
ensr-ssrs-web-60.ets.org
one-uat-web-a.ets.org
usndcssl3.ets.org
*.ets.org
v2-scoreload.ereg.ets.org
*.ets.org
texasassessment.ets.org
toefl.ereg.ets.org
gace-qc.ets.org
cert-1201-1.etstest-innovate001.c-test.ets.org
rptasys-stg.ets.org
*.ets.org
title2.ets.org
sparkle-0-5-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
sparklite.jr.ets-plalab-ghe-nonprod.c.ets.org
fed11g-stg.ets.org
cbmtd.ets.org
ibt2-speedtest.ets.org
san.ets.org
eias11g-stg.ets.org
authnsvcps3-tst.ets.org
isbd-portal-stage.ets.org
ssrs.ets.org
san.ets.org
vpn.ets.org
tcmservices-dev.ets.org
ibt2-cloud-util.ets.org
san.ets.org
api.parcore-test.ets.org
practice-new.ets.org
gace.more.ets.org
www.ets.org
stnres-int.ets.org
ibtsb.ets.org
conda.nlplab-dev.c.ets.org
origin-criterionng-stage.ets.org
mmai-nvf-mmai-tst-272250.ets-mmai-nonprod.c.ets.org
osn-wspx1.ets.org
acres-dev.ets-acres-nonprod.c.ets.org
ca-toms-help-qc.ets.org
ibt2-dashboard-uat.ets.org
stnfinancial.ets.org
tartine-asr.jbtest.ets-plalab-ghe-nonprod.c.ets.org
mds-services-int.ets.org
origin.parcore-test.ets.org

Certificate

The complete raw certificate details for toefl.ereg.ets.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqr0JhbivsUCj6/57n6h
TG/Ma0zRFKZEUZCuJNR1nWk0UGtXPkuDNkAY0BJn+RLHNnhh9AkpwUUZmdPHyd8L
aP6T1jBgxR8ramoicSBPWJp6BXtItnHr1wxIosF8S4JOck2OZ9Gdipv1WIAPl96I
X2RBX7Xsxd2h+qhbw6OThz3ZLjUdF0dB+q7KMh7SHz9BBiFTOkNdM4iezvLIPEmU
V8i4Szxr1ACYbNQ8sgXemSH9pwiAbnTOcijP+ridXz59+vlY2APjgHhjWwO1Lxb1
whVo+l6ap/QZ21QmIMx+xC0wjb1CN6EFU/zBEac8Ej0jpz4L48GobVkRrXozDt0a
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321730481208861391518985462674035092512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Educational Testing Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'toefl.ereg.ets.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24574531577861119526935130848179526759082554421074745745873420361846035093220103875315640614966620402390872344422588996675722594771748891579401844519200263203888255439918245810210799979618594314264215356989961181163890741649427020243109499434561029796997089346918372750216222588105341458421908804946219419592004128295308734719572790345000183135110006939847740376471248445823027930485062033706702481899412819622718659396340295018856692803309193867000095399914197634584084943022939772396325980658624302619429542413815451683739503040810930263173875484750308039104054928226646976638617984165096566519761651806761916373533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcd4fa91403db9c11f557d3da650f4bdd5fda220
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (992 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toefl.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr-int.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereg3-rest-api.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereg4-rest-api.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-appointment.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-commerce.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-profile.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-reference.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-v2-scheduling.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-ereg3-rest-api.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-ereg4-rest-api.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-v2-csrext.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-v2-csrint.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-v2-ecommerce-ext.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-v2.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solr.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solrcloud.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toeflcsr-ext.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toeflcsr-int.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-appointment.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-appointmentext.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-appointmentint.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-commerce.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-csrext.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-csrint.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-cybsop.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-ecommerce-ext.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-ecommerceext.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-ecommerceint.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-neea.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-profile.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-profileext.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-profileint.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-schedulingext.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-scoreload.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.ereg.ets.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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