sancert3-gns.pearson.com

- Pearson PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number cd:72:48:78:20:58:1d:73:88:5a:bc:89:1f:63:ac:14 was issued on by Sectigo Limited.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Pearson PLC

Organization: Pearson PLC
State / Province: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): cd:72:48:78:20:58:1d:73:88:5a:bc:89:1f:63:ac:14
Serial Number (int): 273085130828661733793162033463430458388
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9d:d8:47:65:12:f4:92:31:a5:f8:d3:c5:0f:8a:58:89:8f:a4:b5:97
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 24:ef:b0:89:49:a0:b0:09:c6:ca:12:81:ca:b8:6b:41:26:bf:c4:43
Fingerprint (sha256): 56:e5:ed:38:46:08:dd:f8:20:43:8e:5f:0d:ee:9e:d4:6d:42:ef:3d:c0:8f:e7:97:91:7f:c9:bc:10:60:cf:e2

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sancert3-gns.pearson.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sancert3-gns.pearson.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sancert3-gns.pearson.com
ccndweb.pearsoncmg.com
cdn-sbx.pearsonplaces.com.au
cert-ccndweb.pearsoncmg.com
images.pearsonclinical.com.au
images.pearsoned-ema.com
login.cert.pearsoncmg.com
login.pearsoncmg.com
loginppe.pearsoncmg.com
media-longmanplus.pearson.com.hk
media-stg-longmanplus.pearson.com.hk
mediaplayer-cert.pearsoncmg.com
mediaplayer-dev.pearsoncmg.com
mediaplayer-test.pearsoncmg.com
mediaplayer.pearsoncmg.com
new.pearson.com.au
new.staging.pearson.com.au
ppe-ccndweb.pearsoncmg.com
register.cert.pearsoncmg.com
registerppe.pearsoncmg.com
registration.mypearson.com
ris.cert.pearsoncmg.com
ris.pearsoncmg.com
risppe.pearsoncmg.com
sbx.use.cdn.pulse.pearson-intl.com
spider.mathxl.com
vig-fp.pearsoned.co.uk
vig-fp.pearsoned.com
www-fp-stg.pearsonhighered.com
www-fp.ablongman.com
www-fp.pearsonhighered.com
www.pearson.de
www.pearsoncanadaschool.com
www.pearsonelt.com.ar
www.pearsononline.de

Other certificates including the domain name pearson.com

(limited to 100 certificates)
staging.lomt.pearson.com
www.pteacademicactive.pearson.com
isu-per01.bizsys.pearson.com
myinsights.in.pearson.com
dplogt2.pearson.com
b3vhprod01.pearsoncmg.com
pdms-ppe.cms.pearson.com
go1.pearson.com
myinsights.in.pearson.com
*.jiveon.com
resources.prg.pearson.com
5674976526991360-fe4.pantheonsite.io
*.assessment.pearson.com
quad.pearson.com
5674976526991360-fe4.pantheonsite.io
topaz.productops.pearson.com
vdoe.pearson.com
hepq.pearson.com
ukedg.webmail.pearson.com
5674976526991360-fe4.pantheonsite.io
staging.api.pearson.com
global-redir.pearson.com
asc.bizsys.pearson.com
integration-eu.soa.pearson.com
staging.lomt.pearson.com
www.pearsoned.com
hepq.pearson.com
k12tech.pearson.com
5674976526991360-fe4.pantheonsite.io
sancert4-gns.pearson.com
iml.pearson.com
site-directory.ptns.pearson.com
eu.pearson.com
asc-dev01.bizsys.pearson.com
integrations.pearson.com
san-11-s7.tlsprovisioning.exacttarget.com
dev.estyle.pearson.com
uxframework.pearson.com
elibrary.in.pearson.com
pimsextranet.pearson.com
act-dashboard-smk.assessment.pearson.com
assessment-builder-bff-xl-dev.pearson.com
obi.bizsys.pearson.com
myapps-us.pearson.com
structuredauthoring.pearson.com
learninganalytics.pearson.com
ipma-crp01.bizsys.pearson.com
pobl-idamservice-int.pearson.com
peopledata.pearson.com
isu-uat01.bizsys.pearson.com
*.jiveon.com
test.teseisr.es.pearson.com
obi-dev01.bizsys.pearson.com
sancert1-pmc.pearson.com
obi-pch01.bizsys.pearson.com
sancert1.prd-prsn.com
oam-per01.bizsys.pearson.com
5754818358411264-fe2.pantheonsite.io
www.bilarabi.pearson.com
sancert1-ma-lt.pearson.com
store.comptia.org
myvirtualchild-ppe.pearson.com
san-pmc.pearson.com
cert-tds.pearson.com
www.connectionsacademy.com
asc-pch01.bizsys.pearson.com
*.eportfolio.pearson.com
ipay2.bizsys.pearson.com
ccg-uat01.bizsys.pearson.com
shingo.pearson.com
lo3ref-mystack.pearson.com
bronte-io-dev.pearson.com
hyp-uat01.bizsys.pearson.com
us-iowac-vsa5550-03.pearson.com
www.cosmo.pearson.com
sancert4-gns.pearson.com
identity-internal.pearson.com
dplogt2.pearson.com
asc-sit01.bizsys.pearson.com
partner-courses-staging.pearson.com
test.data.pearson.com
pace.pearson.com
ftp.successmaker.com
pqg.pearson.com
sandbox.use.data-ingestion-api.pulse.pearson.com
go1.pearson.com
dcatdev.pearson.com
staging-structuredauthoring.pearson.com
nj2-con-mystack.pearson.com
fed-oam-per01.bizsys.pearson.com
aimsweb2.pearson.com
de.pearson.com
jobs.pearson.com
telemetry-stg.pearson.com
sancertgcs.pearson.com
5706803308396544-fe3.pantheonsite.io
myvirtualchild-qa.pearson.com
acg-sup01.bizsys.pearson.com
iam-dev.pearson.com
ipm.bizsys.pearson.com

Certificate

The complete raw certificate details for sancert3-gns.pearson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv8rjwg4LnEYbiJAbXhw
+Awk7q7ip+qiF07VE2jg17xA6PmR2RSv62txrUpwSjTve3yiOkFiGTJ82JFOBk6G
y4YAOD6pMCGZbewoGyjkDdDO4Sr1lFQ16NwJ7owIBg1s/DGGirB+++l3zhvrRWCO
HdYj1xabtF8lILRByQ8kQiviHA4bvN+zSFKZkxK0gkv/4FeKaCYA7NMNx4TjSM3N
T/03OGGUKNkJ8TXthFcQUruZyUpWkB3kuJBuENG2RYrpZ5V+ZXjxR+FqznyZ8VSU
1xj43Tz28iQaEgvI9PrasgKIqUnUBdXDrxc0V3hKvhbhc1aW3Lm3KuyXoWGEM9PK
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273085130828661733793162033463430458388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pearson PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sancert3-gns.pearson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19061574836203023872781246277102679745752344625679159052450794100084766592013882282250188726006690982383415239379060164329141021422433062393708689875956260428297955734821499667236735061707600408861897485870218078583262795070413072676982265413401302629425083400756522515413770493512700800686156717941623128960036087598586611913570540646697610972517007219954925243374696534652433066031711159387347952065065417072089952846494558244294505219440423505528759551804556597307679171936606089591824352482263549861757667387075376684903056733654615706692069486533090709343687952665998066065590231448154720586840285423086632946227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dd8476512f49231a5f8d3c50f8a58898fa4b597
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (945 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sancert3-gns.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-sbx.pearsonplaces.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert-ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pearsonclinical.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pearsoned-ema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-longmanplus.pearson.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-stg-longmanplus.pearson.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-dev.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer-test.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaplayer.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.pearson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.staging.pearson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe-ccndweb.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registerppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.mypearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ris.cert.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ris.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risppe.pearsoncmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbx.use.cdn.pulse.pearson-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spider.mathxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vig-fp.pearsoned.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vig-fp.pearsoned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp-stg.pearsonhighered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp.ablongman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fp.pearsonhighered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearson.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsoncanadaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsonelt.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearsononline.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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