www.stg.adtalem.com

- Adtalem Global Education Inc -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 78:6d:9f:3a:98:92:a4:f9:88:8a:b5:68:d9:b8:32:09 was issued on by Sectigo Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Adtalem Global Education Inc

Organization: Adtalem Global Education Inc
Organization unit: IT
Organization unit: Multi-Domain SSL
Address: 3005 Highland Parkway
Postal code: 60515
State / Province: IL
Locality: Downers Grove
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 78:6d:9f:3a:98:92:a4:f9:88:8a:b5:68:d9:b8:32:09
Serial Number (int): 160076549397349611136585186451075379721
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2e:d2:03:0b:ba:61:f9:94:93:1f:18:0b:2d:d4:43:ad:fe:6f:97:af
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): d7:61:43:96:c8:7c:c2:60:e5:76:9c:da:3e:8a:94:32:47:48:ff:e4
Fingerprint (sha256): 16:41:0b:bc:0c:85:35:b5:c9:98:03:40:8c:3e:f0:a6:e7:6c:01:ce:91:76:4c:57:61:2a:77:4c:de:26:22:8d

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.stg.adtalem.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stg.adtalem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stg.adtalem.com
medical.stg.rossu.edu
merp.stg.medschoolprep.com
veterinary.stg.rossu.edu
www.stg.aucmed.edu
www.stg.chamberlain.edu
www.stg.medschoolprep.com
www.stg.rossu.edu

Other certificates including the domain name adtalem.com

(limited to 100 certificates)
secured2.san1.raxcdn.com
www.int.devry.edu
cyberark.adtalem.com
api.dev.adtalem.com
sso.adtalem.com
internalservices.adtalem.com
secured2.san1.raxcdn.com
patho.games.adtalem.com
savinglives.games.adtalem.com
*.adtalem.com
myross.adtalem.com
secure12.san1.raxcdn.com
caw-cbrp00wa01.dvuadmin.net
adtalem.com
dev.adtalem.com
icc.games-dev.adtalem.com
sso.adtalem.com
adtalem.com
edge-exe104.vmce.adtalem.com
dev.adtalem.com
services.adtalem.com
jenkinssand.dev.adtalem.com
bi.qa.adtalem.com
www.adtalem.com
atge.idm.qa.adtalem.com
adtalem.com
aos.dev.adtalem.com
stumerp2.qa.adtalem.com
dev5195-exc102.vmce.adtalem.com
icc.games-dev.adtalem.com
adtalem.com
jira-ies.adtalem.com
venafitest.adtalem.com
edge-exe106.vmce.adtalem.com
edge-exe202.vmce.adtalem.com
savinglives.games.adtalem.com
connect.adtalem.com
cdn-myvrscope-elt-dev.adtalem.com
wsr.dev.adtalem.com
por.games-qa.adtalem.com
as.adtalem.com
venafitesting123.adtalem.com
sl.adtalem.com
qa.adtalem.com
int.adtalem.com
confluence-ies.adtalem.com
5195dev3-cuc11-ms.vmce.adtalem.com
adtalem.com
lms-analytics-dev.adtalem.com
bamboo-ies.adtalem.com
games.adtalem.com
dss.adtalem.com
sl-dev.adtalem.com
qa.adtalem.com
budget.qa.adtalem.com
cal-epcd00wa01.dev.adtalem.com
bi.adtalem.com
aem.adtalem.com
adtalem.com
dss.qa2.adtalem.com
int.adtalem.com
jenkinssand.dev.adtalem.com
patho.games-dev.adtalem.com
secure4.san1.raxcdn.com
secure12.san1.raxcdn.com
por.games-dev.adtalem.com
bios242.games.adtalem.com
games-qa.adtalem.com
secure12.san1.raxcdn.com
release-notes-ies.adtalem.com
secure12.san1.raxcdn.com
secure12.san1.raxcdn.com
afe.games-dev.adtalem.com
blog.qa.devry.edu
wso2aui.adtalem.com
aem.qa.adtalem.com
afe.games-qa.adtalem.com
wso2aui.adtalem.com
afe.games.adtalem.com
mobile.adtalem.com
www.stg.adtalem.com
sia-qa.adtalem.com
nexus-ies.adtalem.com
dev5195-exc208.vmce.adtalem.com
www.adtalem.com
release-notes-ies.adtalem.com
secure12.san1.raxcdn.com
*.qa.adtalem.com
adtalem.com
blog.qa.devry.edu
edge-exe106.vmce.adtalem.com
aemecomm.dev.adtalem.com
remote.adtalem.com
dss.dev2.adtalem.com
*.mobile.dev.adtalem.com
games-qa.adtalem.com
bios242.games-qa.adtalem.com
sl-qa.adtalem.com
services.int.adtalem.com
m.stg.rossu.edu

Certificate

The complete raw certificate details for www.stg.adtalem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJoGy6g+DqXdUDQ040qd
e28M2xbEV0n3XaCUakGmYLCXb0HoEctyVSBsyRWUicSVz2wlCEk19GMN74kPYoR2
Rts9l8ndLt1rZW69lelp8ZIUtf0WnOdlj8JxD2+3KZqwi2DrJuK7Uz+IgWrEdaWk
JnxziBL5RjB4zisxL5tUiqsAWyvdGW8RYSaL/sGNTf7wYYORsUk30rgLtgADZArc
Euln9e+NrJIcpYS1FbzHY1MtaPcofUSiUXjn5fqAHPxGX/Svni3NDg2gfs/DRrQh
81mgQQqRiXU1V4x2udiZqREScZLjYLoqvxHog7XV10ziSwuner9GLN91TQCtXTW0
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160076549397349611136585186451075379721
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '60515'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Downers Grove'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3005 Highland Parkway'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adtalem Global Education Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stg.adtalem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19769128894894330579124236731931462543843277379268037606833314227562427667159969706950205601657608635036691974925079894720914062810633780969089518661364315413568038649454974592458465765785106721369332342188131381102179063868298572208254292435392013726116940051211552246370384453286621290450315197564532959011874679094090941838442134665940943583045753230986626835641452207884645981663398868925392453017376257053014486740827869032985451058024507697782100796019363573489059810331026471182745959844512822552167854571768338748760696125627709247934899187968466020096176747668713628535431654189615604643868943717037124203599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ed2030bba61f994931f180b2dd443adfe6f97af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.adtalem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.stg.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merp.stg.medschoolprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterinary.stg.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.aucmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.chamberlain.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.medschoolprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.rossu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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