visapi.sim5.pegasus.pearsoncmg.com

- Pearson PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 5a:67:d0:b7:a5:58:88:af:9d:5b:a3:7f:ce:7e:1f:bf was issued on by Sectigo Limited.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pearson PLC

Organization: Pearson PLC
State / Province: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:67:d0:b7:a5:58:88:af:9d:5b:a3:7f:ce:7e:1f:bf
Serial Number (int): 120169559488194873038911980327990599615
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cc:c5:6f:06:d1:7e:e3:43:c1:1a:5c:98:7a:3d:6b:91:6b:c0:14:7b
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 3c:e5:98:9e:8f:1a:6f:2d:4e:77:e1:3d:c7:bc:94:12:86:0b:5d:19
Fingerprint (sha256): 11:b9:c2:80:27:32:2d:a1:2a:66:c7:9a:41:b0:55:26:62:ef:7a:92:5f:99:04:51:bd:21:f7:2b:9d:0c:e3:0f

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate visapi.sim5.pegasus.pearsoncmg.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for visapi.sim5.pegasus.pearsoncmg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

visapi.sim5.pegasus.pearsoncmg.com
api.pearsoned.com
demo.pearsonellis.com
hed.ws.mylabs.px.pearsoned.com
hed.ws.mylabs.smoketest.pegasus.pearsoncmg.com
intlmylabs.px.pearsoned.com
mylabs.px.nextgen.pearsoned.com
mylabs.px.pearsoned.com
mylabs.smoketest.pegasus.pearsoncmg.com
pearsonellis.com
plt.pearsoned.com
register.pearsonellis.com
reports.pearsoned.com
sim5.pegasus.pearsoncmg.com

Other certificates including the domain name pearsoncmg.com

(limited to 100 certificates)
b3vhprod01.pearsoncmg.com
rumba.int.pearsoncmg.com
global-redir.pearson.com
www.pearsoned.com
www.pearsoncmg.com
www.psnet-ftest1.pearsoncmg.com
b3vhprod01.pearsoncmg.com
sancert1.prd-prsn.com
kitchenmanager.pearsoncmg.com
sancert1-ma-lt.pearson.com
myvirtualchild-ppe.pearson.com
ccngcert.pearsoncmg.com
sancert1.dev-prsn.com
portaltest.pearsoncmg.com
ebookplus.pearsoncmg.com
www.pearsoncmg.com
myvirtualchild-qa.pearson.com
*.mgmt.mastering.pearsoncmg.com
b3vhprod01.pearsoncmg.com
www.pearsoncmg.com
www.pearsoncmg.com
*.test.mastering.pearsoncmg.com
pegasus.pearsoncmg.com
sancert1-gns.pearson.com
pearsoncmg.com
global-redir.pearson.com
sanapigee.pearsoned.com
isb.lift.pearsoncmg.com
www.pearsoned.com
school.pearsoned.com
mx-dev.pearsondev.tech
*.mgmt.mastering.pearsoncmg.com
sancert1-ma-lt.pearson.com
sancert1.dev-prsn.com
www.pearsoncmg.com
visapi.sim5.pegasus.pearsoncmg.com
*.rumba.ppe.pearsoncmg.com
sancert1.stg-prsn.com
bo3upautmcap01.pearsoncmg.com
pearsoncmg.com
sancert1.stg-prsn.com
sancert1.dev-prsn.com
www.pearsoncmg.com
www.pearsonsuccessnet.com
reports.cert.k12rs.pearsoncmg.com
pearsoncmg.com
mx-prod.mastering.pearsoncmg.com
registerppe.pearsoncmg.com
sancert3-gns.pearson.com
interop-tpi-qa.pearsondev.tech
sanapigee.pearsoned.com
sancert1.dev-prsn.com
sancert1-co-lt.pearson.com
pmark.pearsoncmg.com
sancert1-gns.pearson.com
cert.hepsvc.pearsoncmg.com
*.ole.pearsoncmg.com
login.cert.pearsoncmg.com
b3vhprod01.pearsoncmg.com
stg-pacechart.pearsoncmg.com
*.rumba.pearsoncmg.com
sancert1-ma-lt.pearson.com
sancert3-gns.pearson.com
tools.mx.pearsonprd.tech
pegasus.pearsoncmg.com
www.psnet-ftest1.pearsoncmg.com
*.staging.mastering.pearsoncmg.com
pearsoncmg.com
media.dev.pearsoncmg.com
media-stg.pearsondev.tech
feedbug-rest.pearsoncmg.com
portal.pearsoncmg.com
*.rumba.pearsoncmg.com
ccngcert.pearsoncmg.com
rumba.int.pearsoncmg.com
sgintegrator.pls.pearsoncmg.com
portalppe.pearsoncmg.com
sancert1.dev-prsn.com
b3vhprod01.pearsoncmg.com
mx-prod.mastering.pearsoncmg.com
sancert1.prd-prsn.com
sancert1.prd-prsn.com
pearsoncmg.com
www.psnet-ftest1.pearsoncmg.com
sancert1-gns.pearson.com
plsapps.pearsoncmg.com
mathxl.com
isb.lift.pearsoncmg.com
global-redir.pearson.com
sancert1.stg-prsn.com
*.ole.pearsoncmg.com
cert.hepsvc.pearsoncmg.com
masteringsupport.com
placesweb.pearsoncmg.com
global-redir.pearson.com
pearsoncmg.com
gradeit.pearsoncmg.com
sancert1.prd-prsn.com
pegasus.pearsoncmg.com
global-redir.pearson.com

Certificate

The complete raw certificate details for visapi.sim5.pegasus.pearsoncmg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYkykCe/PHZWPcp+biwX
MKuzpJYNUV2l+3ObofzXX1puREyu14JfNRzLU6nixFrEP2eNPeeNuKjpbHBLHTEk
ki7oSEpj/Zw1z/KHWt9++5EisLd2SlhVo/bcMDwJNZ9Nja8mV+yLoylvLVAl8nFV
SkNDUkgjTe9Dh2N6M1ZBwGeRFo2BOuKxMhUmR5BB/NyEYENjA7KG7HVPVyHxqh+d
RCklBq73mMb7GN1COr1j5UL02tgwAmjUNmigjwgF171ADD8VqjTpF4J5globVsCG
BDaFTrM+a4fxVv1YAOHYYrGIe81mPKI/Cv4K6cGwbs512/5IBZTqTz9e0vdF7AFU
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120169559488194873038911980327990599615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pearson PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visapi.sim5.pegasus.pearsoncmg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16857349175241456137186959856929274120917627535642461496525834169032497299999986637118562308600779245572345384407358315214561120581506947580138687611938130525896829824598967108078754629412288360241851329984345193924936787044508660782363622298546740541448252284710198150313354342372240358594457623390146106092502386541930856346778464445480545743020868767430997165704352707072171386923774437609048468800853198966271880536817813423395520074975881254793116726313890740877945868164174773106793939789043836794882921205372947719550524179807236268227755755183596168913448033630443829145663283833608249374398406512416525472939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccc56f06d17ee343c11a5c987a3d6b916bc0147b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visapi.sim5.pegasus.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.pearsonellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hed.ws.mylabs.px.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hed.ws.mylabs.smoketest.pegasus.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intlmylabs.px.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylabs.px.nextgen.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylabs.px.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylabs.smoketest.pegasus.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearsonellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plt.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.pearsonellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sim5.pegasus.pearsoncmg.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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