sancert1-gns.pearson.com

- Pearson PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number a0:b6:0c:97:69:a0:e7:bb:7c:f1:bb:e2:bb:17:fe:13 was issued on by Sectigo Limited.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pearson PLC

Organization: Pearson PLC
State / Province: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a0:b6:0c:97:69:a0:e7:bb:7c:f1:bb:e2:bb:17:fe:13
Serial Number (int): 213621732738898110254543185237276884499
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 69:43:be:6d:a9:42:e1:98:96:6a:3d:72:5e:a3:f8:fd:e0:f4:0c:7c
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 19:06:06:d5:eb:ac:29:24:b2:54:d6:0e:cd:ea:c4:9e:04:57:78:9f
Fingerprint (sha256): 0c:3d:4b:69:d8:24:d1:43:9b:6a:dc:a3:c5:62:5b:f6:a5:50:c7:2e:87:be:96:1e:63:a8:3d:4e:82:0e:ff:b1

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sancert1-gns.pearson.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sancert1-gns.pearson.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sancert1-gns.pearson.com
cdn-download-stg.pearsonhighered.com
cdn-download.pearsonhighered.com
demo-570fb43.credly.com
dev.themathsfactor.com
fle.pearson.es
lamusicade.pearson.es
oasis-b2b-stg.pearsoncanada.ca
oasis-b2b.pearsoncanada.ca
prod.glb.ugc.pulse.pearson-intl.com
staging.clutchprep.com
staging.themathsfactor.com
stg.glb.ugc.pulse.pearson-intl.com
streams-stg.activelearnprimary.co.uk
www.clutchprep.com
www.myhelpinglab.com
www.mysocialworklab.com
www.netname.com.br
www.pearson-anaya.com
www.pearson.com.hk
www.pearsonclinical.ca
www.studentsupporthub.com
www.themathsfactor.com
xlitemcert.pearsoncmg.com
xlitemppe.pearsoncmg.com
xlitemprod.pearsoncmg.com

Other certificates including the domain name pearson.com

(limited to 100 certificates)
staging.lomt.pearson.com
www.pteacademicactive.pearson.com
isu-per01.bizsys.pearson.com
myinsights.in.pearson.com
dplogt2.pearson.com
b3vhprod01.pearsoncmg.com
pdms-ppe.cms.pearson.com
go1.pearson.com
myinsights.in.pearson.com
*.jiveon.com
resources.prg.pearson.com
5674976526991360-fe4.pantheonsite.io
*.assessment.pearson.com
quad.pearson.com
5674976526991360-fe4.pantheonsite.io
topaz.productops.pearson.com
vdoe.pearson.com
hepq.pearson.com
ukedg.webmail.pearson.com
5674976526991360-fe4.pantheonsite.io
staging.api.pearson.com
global-redir.pearson.com
asc.bizsys.pearson.com
integration-eu.soa.pearson.com
staging.lomt.pearson.com
www.pearsoned.com
hepq.pearson.com
k12tech.pearson.com
5674976526991360-fe4.pantheonsite.io
sancert4-gns.pearson.com
iml.pearson.com
site-directory.ptns.pearson.com
eu.pearson.com
asc-dev01.bizsys.pearson.com
integrations.pearson.com
san-11-s7.tlsprovisioning.exacttarget.com
dev.estyle.pearson.com
uxframework.pearson.com
elibrary.in.pearson.com
pimsextranet.pearson.com
act-dashboard-smk.assessment.pearson.com
assessment-builder-bff-xl-dev.pearson.com
obi.bizsys.pearson.com
myapps-us.pearson.com
structuredauthoring.pearson.com
learninganalytics.pearson.com
ipma-crp01.bizsys.pearson.com
pobl-idamservice-int.pearson.com
peopledata.pearson.com
isu-uat01.bizsys.pearson.com
*.jiveon.com
test.teseisr.es.pearson.com
obi-dev01.bizsys.pearson.com
sancert1-pmc.pearson.com
obi-pch01.bizsys.pearson.com
sancert1.prd-prsn.com
oam-per01.bizsys.pearson.com
5754818358411264-fe2.pantheonsite.io
www.bilarabi.pearson.com
sancert1-ma-lt.pearson.com
store.comptia.org
myvirtualchild-ppe.pearson.com
san-pmc.pearson.com
cert-tds.pearson.com
www.connectionsacademy.com
asc-pch01.bizsys.pearson.com
*.eportfolio.pearson.com
ipay2.bizsys.pearson.com
ccg-uat01.bizsys.pearson.com
shingo.pearson.com
lo3ref-mystack.pearson.com
bronte-io-dev.pearson.com
hyp-uat01.bizsys.pearson.com
us-iowac-vsa5550-03.pearson.com
www.cosmo.pearson.com
sancert4-gns.pearson.com
identity-internal.pearson.com
dplogt2.pearson.com
asc-sit01.bizsys.pearson.com
partner-courses-staging.pearson.com
test.data.pearson.com
pace.pearson.com
ftp.successmaker.com
pqg.pearson.com
sandbox.use.data-ingestion-api.pulse.pearson.com
go1.pearson.com
dcatdev.pearson.com
staging-structuredauthoring.pearson.com
nj2-con-mystack.pearson.com
fed-oam-per01.bizsys.pearson.com
aimsweb2.pearson.com
de.pearson.com
jobs.pearson.com
telemetry-stg.pearson.com
sancertgcs.pearson.com
5706803308396544-fe3.pantheonsite.io
myvirtualchild-qa.pearson.com
acg-sup01.bizsys.pearson.com
iam-dev.pearson.com
ipm.bizsys.pearson.com

Certificate

The complete raw certificate details for sancert1-gns.pearson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/mouT6djf1GCnP2NDU8
iJz6ZfTDfuYGcqbKch6PELZsvp1q/vkit1zKfKB+0bVECnpvclBXHT54/H/vqRAp
ay8JvT8wlO4SCiz8jpQfGaJNL8UaQD7+fUkivOd3ywS785BnE6M9E0qsaCg5dvLK
iZxPhv/YUs7xqcmq2LQlZTMrfHP4ZfA9dr+bbYSj2hW7mFMQpHpMEnvRLoiAB6Fw
cZJ+ipIEvOsA9YTcYxnTEeB7za+Qx8FRKQQNzt5H9wqB8QG0TgFPWr9YZs8PEGAj
LMD6cdTkP+oouHPj+GuaMpGnsOhE+HWGD3Un69b99NnhWkAqr0Ka5lHWcB3vA3es
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213621732738898110254543185237276884499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pearson PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sancert1-gns.pearson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24739580947484571931477132531958497643331237491120993252918981045942703467534889789055886091111625184746411331640286078133362691971609498862559422035833118144720604775006313002043374627703032011055907912770164583225794656135725957091023642995404575144658365388979210182376828830527413166856412429512312493588258335068098066861233088784870395523600507144273854221764211943941737583504957681102305068573453956596550700609362212883607044167864455020658052992216974802040428576672824029691989640897139781839636984727620440484244416512245344561092454001340808375535577599956801646034283965074350200975536395778187683408967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6943be6da942e198966a3d725ea3f8fde0f40c7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (698 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sancert1-gns.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-download-stg.pearsonhighered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-download.pearsonhighered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-570fb43.credly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.themathsfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fle.pearson.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamusicade.pearson.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasis-b2b-stg.pearsoncanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasis-b2b.pearsoncanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.glb.ugc.pulse.pearson-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.clutchprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.themathsfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.glb.ugc.pulse.pearson-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streams-stg.activelearnprimary.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clutchprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhelpinglab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysocialworklab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netname.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearson-anaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearson.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsonclinical.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentsupporthub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themathsfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlitemcert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlitemppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlitemprod.pearsoncmg.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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