sancert3-gns.pearson.com

- Pearson PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number de:5c:51:5d:ed:80:85:a2:39:fd:e4:e2:75:a7:80:80 was issued on by Sectigo Limited.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pearson PLC

Organization: Pearson PLC
State / Province: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): de:5c:51:5d:ed:80:85:a2:39:fd:e4:e2:75:a7:80:80
Serial Number (int): 295567956692136858438220672087919919232
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ab:c3:dd:83:ef:9c:1a:6e:66:87:55:26:97:7e:83:98:0a:ab:0b:68
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): be:e2:be:9c:32:2f:d5:da:02:9f:76:f9:67:45:6e:e1:fc:41:d4:a2
Fingerprint (sha256): 16:c9:46:26:87:be:f9:a8:5e:e8:fa:34:73:38:f5:36:be:cf:68:c8:a6:70:98:82:f8:2d:4e:03:71:6d:95:85

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sancert3-gns.pearson.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sancert3-gns.pearson.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sancert3-gns.pearson.com
ccndweb.pearsoncmg.com
cdn-sbx.pearsonplaces.com.au
cert-ccndweb.pearsoncmg.com
images.pearsonclinical.com.au
images.pearsoned-ema.com
login.cert.pearsoncmg.com
login.pearsoncmg.com
loginppe.pearsoncmg.com
media-longmanplus.pearson.com.hk
media-stg-longmanplus.pearson.com.hk
mediaplayer-cert.pearsoncmg.com
mediaplayer-dev.pearsoncmg.com
mediaplayer-test.pearsoncmg.com
mediaplayer.pearsoncmg.com
new.pearson.com.au
new.staging.pearson.com.au
ppe-ccndweb.pearsoncmg.com
register.cert.pearsoncmg.com
registerppe.pearsoncmg.com
registration.mypearson.com
ris.cert.pearsoncmg.com
ris.pearsoncmg.com
risppe.pearsoncmg.com
sbx.use.cdn.pulse.pearson-intl.com
spider.mathxl.com
vig-fp.pearsoned.co.uk
vig-fp.pearsoned.com
www-fp-stg.pearsonhighered.com
www-fp.ablongman.com
www-fp.pearsonhighered.com
www.pearson.de
www.pearsoncanadaschool.com
www.pearsonelt.com.ar
www.pearsononline.de

Other certificates including the domain name pearson.com

(limited to 100 certificates)
staging.lomt.pearson.com
www.pteacademicactive.pearson.com
isu-per01.bizsys.pearson.com
myinsights.in.pearson.com
dplogt2.pearson.com
b3vhprod01.pearsoncmg.com
pdms-ppe.cms.pearson.com
go1.pearson.com
myinsights.in.pearson.com
*.jiveon.com
resources.prg.pearson.com
5674976526991360-fe4.pantheonsite.io
*.assessment.pearson.com
quad.pearson.com
5674976526991360-fe4.pantheonsite.io
topaz.productops.pearson.com
vdoe.pearson.com
hepq.pearson.com
ukedg.webmail.pearson.com
5674976526991360-fe4.pantheonsite.io
staging.api.pearson.com
global-redir.pearson.com
asc.bizsys.pearson.com
integration-eu.soa.pearson.com
staging.lomt.pearson.com
www.pearsoned.com
hepq.pearson.com
k12tech.pearson.com
5674976526991360-fe4.pantheonsite.io
sancert4-gns.pearson.com
iml.pearson.com
site-directory.ptns.pearson.com
eu.pearson.com
asc-dev01.bizsys.pearson.com
integrations.pearson.com
san-11-s7.tlsprovisioning.exacttarget.com
dev.estyle.pearson.com
uxframework.pearson.com
elibrary.in.pearson.com
pimsextranet.pearson.com
act-dashboard-smk.assessment.pearson.com
assessment-builder-bff-xl-dev.pearson.com
obi.bizsys.pearson.com
myapps-us.pearson.com
structuredauthoring.pearson.com
learninganalytics.pearson.com
ipma-crp01.bizsys.pearson.com
pobl-idamservice-int.pearson.com
peopledata.pearson.com
isu-uat01.bizsys.pearson.com
*.jiveon.com
test.teseisr.es.pearson.com
obi-dev01.bizsys.pearson.com
sancert1-pmc.pearson.com
obi-pch01.bizsys.pearson.com
sancert1.prd-prsn.com
oam-per01.bizsys.pearson.com
5754818358411264-fe2.pantheonsite.io
www.bilarabi.pearson.com
sancert1-ma-lt.pearson.com
store.comptia.org
myvirtualchild-ppe.pearson.com
san-pmc.pearson.com
cert-tds.pearson.com
www.connectionsacademy.com
asc-pch01.bizsys.pearson.com
*.eportfolio.pearson.com
ipay2.bizsys.pearson.com
ccg-uat01.bizsys.pearson.com
shingo.pearson.com
lo3ref-mystack.pearson.com
bronte-io-dev.pearson.com
hyp-uat01.bizsys.pearson.com
us-iowac-vsa5550-03.pearson.com
www.cosmo.pearson.com
sancert4-gns.pearson.com
identity-internal.pearson.com
dplogt2.pearson.com
asc-sit01.bizsys.pearson.com
partner-courses-staging.pearson.com
test.data.pearson.com
pace.pearson.com
ftp.successmaker.com
pqg.pearson.com
sandbox.use.data-ingestion-api.pulse.pearson.com
go1.pearson.com
dcatdev.pearson.com
staging-structuredauthoring.pearson.com
nj2-con-mystack.pearson.com
fed-oam-per01.bizsys.pearson.com
aimsweb2.pearson.com
de.pearson.com
jobs.pearson.com
telemetry-stg.pearson.com
sancertgcs.pearson.com
5706803308396544-fe3.pantheonsite.io
myvirtualchild-qa.pearson.com
acg-sup01.bizsys.pearson.com
iam-dev.pearson.com
ipm.bizsys.pearson.com

Certificate

The complete raw certificate details for sancert3-gns.pearson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bd7Vx/BDULez5rXZJLO
QvoIfxqGeqp09j7bi+zmRHacCcuMXdGgvILBV1JQljNfIZHlBVHsS0gWR1ebfqGi
jwBJMSSe4v/1M4SdcbO/pLKoITLWDahrf7Xf4YYKLIJBC4raGViiuxpWkfLu4C4+
VOdJ4Fr3DPt1EmIVD+0deNL9lqJoYH6mbYER7d3E5JkOqNf0njlf1h7hIXaEq2yI
CRnNmWek1QMCp53WNCFFbWtT4GSDo0yunK5JLx2od4TF1Ugx01sn6ob6nvsEa65z
d8ecY+3ENCzGIU93UyfYbIGKjL5md2L1OcVNa8mGcl/cf5Rn+zU6Zep+nf8ZELBX
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295567956692136858438220672087919919232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pearson PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sancert3-gns.pearson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27784006398770935263953400664843052289890405622030956417036562369209735423627787651384271910017445873406804399251297921763253311580481975882092628790179997759821385658137243137943449848246799440267137794667955527659009708044118885193296037714399061108746974191874654490314176269426632914381166334895218269221190648079438417806197898632688181620112836355582084686462105563663659277649399200878564293716197954565750482789121806909794006569869024445774939487861818381530772849280034005855292858973971248485411966264330148573117716099123538079761052295549002185345984246505517986414007243983797494625097585564010266253177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abc3dd83ef9c1a6e66875526977e83980aab0b68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000188e2a5bde2000004030047304502201ac8bc2af84c8ae7bed991a59a84eacf9e752cf78ace88ed3100c9e2ed256c66022100f9d25b98cbf8b567c984379fd57053ebdb59b6ea60f47aa3073810cd483dfb4d0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188e2a5bec50000040300483046022100a39720e4953e926d0829242d65094d5f289877efbd58d0223f3373dc1329d5e2022100ad968d8e289d9a3cd5c7d3e9ceb4bff781c6ed8c52b257678aa04fdd4aa067f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (945 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sancert3-gns.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-sbx.pearsonplaces.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert-ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pearsonclinical.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pearsoned-ema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-longmanplus.pearson.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-stg-longmanplus.pearson.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-dev.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-test.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.pearson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.staging.pearson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe-ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registerppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.mypearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ris.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ris.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbx.use.cdn.pulse.pearson-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spider.mathxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vig-fp.pearsoned.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vig-fp.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp-stg.pearsonhighered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp.ablongman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp.pearsonhighered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearson.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsoncanadaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsonelt.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsononline.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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