*.test.mastering.pearsoncmg.com

- Pearson Education, Inc. -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number bb:7b:e7:ce:e4:74:8e:43:ba:6b:e4:c0:75:96:4b:0a was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pearson Education, Inc.

Organization: Pearson Education, Inc.
Organization unit: Enterprise SSL Wildcard
Address: 200 Old Tappan Rd
Postal code: 07675
State / Province: NJ
Locality: Old Tappan
Country: US

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bb:7b:e7:ce:e4:74:8e:43:ba:6b:e4:c0:75:96:4b:0a
Serial Number (int): 249208989353702462965390122316515920650
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 81:1e:ca:97:f4:3d:93:4e:ba:1f:36:f9:20:8f:f4:13:ed:69:f9:1b
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): b6:65:28:f9:d0:71:c0:65:07:0a:15:c2:ac:04:52:96:5e:54:98:74
Fingerprint (sha256): 0b:23:b4:bf:4c:f2:df:6f:3c:9c:15:61:7b:98:be:84:ab:dc:97:99:57:37:9d:be:b0:ef:62:26:f2:cf:58:44

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate *.test.mastering.pearsoncmg.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.mastering.pearsoncmg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.mastering.pearsoncmg.com
test.mastering.pearsoncmg.com

Other certificates including the domain name pearsoncmg.com

(limited to 100 certificates)
b3vhprod01.pearsoncmg.com
rumba.int.pearsoncmg.com
global-redir.pearson.com
www.pearsoned.com
www.pearsoncmg.com
www.psnet-ftest1.pearsoncmg.com
b3vhprod01.pearsoncmg.com
sancert1.prd-prsn.com
kitchenmanager.pearsoncmg.com
sancert1-ma-lt.pearson.com
myvirtualchild-ppe.pearson.com
ccngcert.pearsoncmg.com
sancert1.dev-prsn.com
portaltest.pearsoncmg.com
ebookplus.pearsoncmg.com
www.pearsoncmg.com
myvirtualchild-qa.pearson.com
*.mgmt.mastering.pearsoncmg.com
b3vhprod01.pearsoncmg.com
www.pearsoncmg.com
www.pearsoncmg.com
*.test.mastering.pearsoncmg.com
pegasus.pearsoncmg.com
sancert1-gns.pearson.com
pearsoncmg.com
global-redir.pearson.com
sanapigee.pearsoned.com
isb.lift.pearsoncmg.com
www.pearsoned.com
school.pearsoned.com
mx-dev.pearsondev.tech
*.mgmt.mastering.pearsoncmg.com
sancert1-ma-lt.pearson.com
sancert1.dev-prsn.com
www.pearsoncmg.com
visapi.sim5.pegasus.pearsoncmg.com
*.rumba.ppe.pearsoncmg.com
sancert1.stg-prsn.com
bo3upautmcap01.pearsoncmg.com
pearsoncmg.com
sancert1.stg-prsn.com
sancert1.dev-prsn.com
www.pearsoncmg.com
www.pearsonsuccessnet.com
reports.cert.k12rs.pearsoncmg.com
pearsoncmg.com
mx-prod.mastering.pearsoncmg.com
registerppe.pearsoncmg.com
sancert3-gns.pearson.com
interop-tpi-qa.pearsondev.tech
sanapigee.pearsoned.com
sancert1.dev-prsn.com
sancert1-co-lt.pearson.com
pmark.pearsoncmg.com
sancert1-gns.pearson.com
cert.hepsvc.pearsoncmg.com
*.ole.pearsoncmg.com
login.cert.pearsoncmg.com
b3vhprod01.pearsoncmg.com
stg-pacechart.pearsoncmg.com
*.rumba.pearsoncmg.com
sancert1-ma-lt.pearson.com
sancert3-gns.pearson.com
tools.mx.pearsonprd.tech
pegasus.pearsoncmg.com
www.psnet-ftest1.pearsoncmg.com
*.staging.mastering.pearsoncmg.com
pearsoncmg.com
media.dev.pearsoncmg.com
feedbug-rest.pearsoncmg.com
portal.pearsoncmg.com
*.rumba.pearsoncmg.com
ccngcert.pearsoncmg.com
rumba.int.pearsoncmg.com
sgintegrator.pls.pearsoncmg.com
portalppe.pearsoncmg.com
sancert1.dev-prsn.com
b3vhprod01.pearsoncmg.com
mx-prod.mastering.pearsoncmg.com
sancert1.prd-prsn.com
sancert1.prd-prsn.com
pearsoncmg.com
www.psnet-ftest1.pearsoncmg.com
sancert1-gns.pearson.com
plsapps.pearsoncmg.com
mathxl.com
isb.lift.pearsoncmg.com
global-redir.pearson.com
sancert1.stg-prsn.com
*.ole.pearsoncmg.com
cert.hepsvc.pearsoncmg.com
masteringsupport.com
placesweb.pearsoncmg.com
global-redir.pearson.com
pearsoncmg.com
gradeit.pearsoncmg.com
sancert1.prd-prsn.com
pegasus.pearsoncmg.com
global-redir.pearson.com
www.pearsoncmg.com

Certificate

The complete raw certificate details for *.test.mastering.pearsoncmg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz9VQdHsGCN0LAk6FVpO
/A2uVL6vObpcJ/AUCA57DcFGSwfyEkLVZQZYdRt9SqN8Vfe9ScOjbgHEucCPOVbg
XheHfU60J0Vig9hhLEQ77YBsbh1sj5PH6s2q2mpwSeammJf6VHXdRlrcEL5ruNOF
TILfPq7jY7EBK6DbckK6LDXfQ5VoI//83Rtmb5/z+yk41Q0o6TJnGAzDdLk1/W7y
LTItWpPfJtXGViNaTU57sEehkvVXkJZ4SBNWlrCZZiRfX/vmhjVRBGFI8jBsHp3o
7Rh2zO2DNErtAZvY2NvuWEBnF50gGSEHIMueXdRuQun6rD5TbR66eczxjCgUIqlU
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 249208989353702462965390122316515920650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '07675'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NJ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Old Tappan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200 Old Tappan Rd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pearson Education, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.test.mastering.pearsoncmg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22122934052890073357948717133468010242313488351365471539410874362484585479214078578111071522391317499411377648625206217986209653164625768763669128680489196582361175781239496107097633786573255841782830266744022339625820915993581846980071520467540695758278871861192326480011101841415745939139509670059087057310988515409434396074625858295476352323073657582634448410726468496470511674403616432461176962155309257029009461367814225306399248715407504688935151088376740697793185590948380778871218607938152998546010071621538502726805067852506883835676651058872475304750212538420849757743798914642210959649028662131535114753083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							811eca97f43d934eba1f36f9208ff413ed69f91b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.mastering.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mastering.pearsoncmg.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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