sancert3-gns.pearson.com

- Pearson PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number a1:cd:06:6c:01:d7:fe:ec:c0:c8:6c:20:52:19:8d:35 was issued on by Sectigo Limited.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Pearson PLC

Organization: Pearson PLC
State / Province: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): a1:cd:06:6c:01:d7:fe:ec:c0:c8:6c:20:52:19:8d:35
Serial Number (int): 215070258429040876561380904802201472309
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f2:e4:85:2d:df:d2:c9:6f:88:4d:b8:aa:ef:14:4d:b0:84:1e:13:ce
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 9f:85:c4:de:a2:93:d2:22:ec:db:11:d2:40:e7:21:cc:17:68:ec:d7
Fingerprint (sha256): 19:b8:34:e0:a0:e3:08:65:cc:6d:87:0d:53:87:78:97:fc:29:78:af:c2:4d:c8:bd:e9:d9:c2:e7:19:40:8f:a0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sancert3-gns.pearson.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sancert3-gns.pearson.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sancert3-gns.pearson.com
ccndweb.pearsoncmg.com
cdn-sbx.pearsonplaces.com.au
cert-ccndweb.pearsoncmg.com
images.pearsonclinical.com.au
images.pearsoned-ema.com
login.cert.pearsoncmg.com
login.pearsoncmg.com
loginppe.pearsoncmg.com
media-longmanplus.pearson.com.hk
media-stg-longmanplus.pearson.com.hk
mediaplayer-cert.pearsoncmg.com
mediaplayer-dev.pearsoncmg.com
mediaplayer-ppe.pearsoncmg.com
mediaplayer-stg.pearsoncmg.com
mediaplayer-test.pearsoncmg.com
mediaplayer.pearsoncmg.com
new.pearson.com.au
new.staging.pearson.com.au
ppe-ccndweb.pearsoncmg.com
register.cert.pearsoncmg.com
registerppe.pearsoncmg.com
registration.mypearson.com
ris.cert.pearsoncmg.com
ris.pearsoncmg.com
risppe.pearsoncmg.com
sbx.use.cdn.pulse.pearson-intl.com
spider.mathxl.com
vig-fp.pearsoned.co.uk
vig-fp.pearsoned.com
www-fp-stg.pearsonhighered.com
www-fp.ablongman.com
www-fp.pearsonhighered.com
www.pearson.de
www.pearsoncanadaschool.com
www.pearsonelt.com.ar
www.pearsononline.de

Other certificates including the domain name pearson.com

(limited to 100 certificates)
staging.lomt.pearson.com
www.pteacademicactive.pearson.com
isu-per01.bizsys.pearson.com
myinsights.in.pearson.com
dplogt2.pearson.com
b3vhprod01.pearsoncmg.com
pdms-ppe.cms.pearson.com
go1.pearson.com
myinsights.in.pearson.com
*.jiveon.com
resources.prg.pearson.com
5674976526991360-fe4.pantheonsite.io
*.assessment.pearson.com
quad.pearson.com
5674976526991360-fe4.pantheonsite.io
topaz.productops.pearson.com
vdoe.pearson.com
hepq.pearson.com
ukedg.webmail.pearson.com
5674976526991360-fe4.pantheonsite.io
staging.api.pearson.com
global-redir.pearson.com
asc.bizsys.pearson.com
integration-eu.soa.pearson.com
staging.lomt.pearson.com
www.pearsoned.com
hepq.pearson.com
k12tech.pearson.com
5674976526991360-fe4.pantheonsite.io
sancert4-gns.pearson.com
iml.pearson.com
site-directory.ptns.pearson.com
eu.pearson.com
asc-dev01.bizsys.pearson.com
integrations.pearson.com
san-11-s7.tlsprovisioning.exacttarget.com
dev.estyle.pearson.com
uxframework.pearson.com
elibrary.in.pearson.com
pimsextranet.pearson.com
act-dashboard-smk.assessment.pearson.com
assessment-builder-bff-xl-dev.pearson.com
obi.bizsys.pearson.com
myapps-us.pearson.com
structuredauthoring.pearson.com
learninganalytics.pearson.com
ipma-crp01.bizsys.pearson.com
pobl-idamservice-int.pearson.com
peopledata.pearson.com
isu-uat01.bizsys.pearson.com
*.jiveon.com
test.teseisr.es.pearson.com
obi-dev01.bizsys.pearson.com
sancert1-pmc.pearson.com
obi-pch01.bizsys.pearson.com
sancert1.prd-prsn.com
oam-per01.bizsys.pearson.com
5754818358411264-fe2.pantheonsite.io
www.bilarabi.pearson.com
sancert1-ma-lt.pearson.com
store.comptia.org
myvirtualchild-ppe.pearson.com
san-pmc.pearson.com
cert-tds.pearson.com
www.connectionsacademy.com
asc-pch01.bizsys.pearson.com
*.eportfolio.pearson.com
ipay2.bizsys.pearson.com
ccg-uat01.bizsys.pearson.com
shingo.pearson.com
lo3ref-mystack.pearson.com
bronte-io-dev.pearson.com
hyp-uat01.bizsys.pearson.com
us-iowac-vsa5550-03.pearson.com
www.cosmo.pearson.com
sancert4-gns.pearson.com
identity-internal.pearson.com
dplogt2.pearson.com
asc-sit01.bizsys.pearson.com
partner-courses-staging.pearson.com
test.data.pearson.com
pace.pearson.com
ftp.successmaker.com
pqg.pearson.com
sandbox.use.data-ingestion-api.pulse.pearson.com
go1.pearson.com
dcatdev.pearson.com
staging-structuredauthoring.pearson.com
nj2-con-mystack.pearson.com
fed-oam-per01.bizsys.pearson.com
aimsweb2.pearson.com
de.pearson.com
jobs.pearson.com
telemetry-stg.pearson.com
sancertgcs.pearson.com
5706803308396544-fe3.pantheonsite.io
myvirtualchild-qa.pearson.com
acg-sup01.bizsys.pearson.com
iam-dev.pearson.com
ipm.bizsys.pearson.com

Certificate

The complete raw certificate details for sancert3-gns.pearson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcOZSnJf6KWTthQz4TTL
vlWSXs6gzZgtNu1Q21RLntx2FM1QX3tjGRIwKWcTRDsavZ5Y+xI9Ss1nqMVQCt3T
WywelBjdQ8exBXss3zc2U5jzT2PrioDjPJT+Q6/jP1hsz54erqUl1SZDbudAe0aH
FGhNbMy73G+5mtWCHPKNe34E3dsob360rNCLRuFKhMPCU0Z8ITlFJ91kj734VbYI
dcOyvWBFuARB+KK2HUH4nY/a4TTy+0BN4JGjbRYuNe6yK/f7BGnrt679u3ZGgm0i
cHST0K75pYHBGCTa8MftapWUDfC/0rfrV816aL9Vme0yFrXfOyFYsVNn3hHLT2bH
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 215070258429040876561380904802201472309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pearson PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sancert3-gns.pearson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22945586558165065764645396289260290839330564505566097507317951812917526303094635799961836720472239046598404264956261331960611892586289738993852579787929468319695423387784554937897306817141042777151982058161808981106740780584838077674624660205124541199287724312283714851903183564654767136998821893640435688518150834840829708255349023108740913875477174802907205463630121217461409210653480930046206007435475844536673578612808552702029641546082442741637194845467296975985616520004884513755796486769463967685202453488678303180360222109695756250829794233071379662018602682978080263172357747456522424106989719671367583319823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2e4852ddfd2c96f884db8aaef144db0841e13ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sancert3-gns.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-sbx.pearsonplaces.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert-ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pearsonclinical.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pearsoned-ema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-longmanplus.pearson.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-stg-longmanplus.pearson.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-dev.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-ppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-stg.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-test.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.pearson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.staging.pearson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe-ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registerppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.mypearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ris.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ris.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbx.use.cdn.pulse.pearson-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spider.mathxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vig-fp.pearsoned.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vig-fp.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp-stg.pearsonhighered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp.ablongman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp.pearsonhighered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearson.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsoncanadaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsonelt.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsononline.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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