marin-api.etext-prd.pearsonprd.tech

- Pearson PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 60:f0:96:08:30:eb:62:e4:8d:99:85:9c:d3:9b:54:5b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Pearson PLC

Organization: Pearson PLC
State / Province: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 60:f0:96:08:30:eb:62:e4:8d:99:85:9c:d3:9b:54:5b
Serial Number (int): 128855081851805975341301394267220694107
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1c:1b:66:20:51:f7:8b:c3:03:e4:d8:c6:5e:49:d5:b2:1c:bd:6c:24
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 7e:40:c8:83:21:f9:a3:be:80:16:19:31:03:00:58:55:3c:8c:85:05
Fingerprint (sha256): 94:d0:0c:36:d5:7a:9f:68:58:49:36:9a:e3:c8:af:06:6d:05:f2:fd:6e:3c:d8:19:68:dd:8a:cf:57:d0:5d:db

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate marin-api.etext-prd.pearsonprd.tech

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marin-api.etext-prd.pearsonprd.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marin-api.etext-prd.pearsonprd.tech
marin-api.prd-prsn.com

Other certificates including the domain name pearsonprd.tech

(limited to 100 certificates)
api.pgi.pearsonprd.tech
idc-web-us1-stg.bite.pearsonprd.tech
leap.pearsonprd.tech
*.int.pearsonprd.tech
review360.pearsonprd.tech
identity-internal.pearson.com
*.pmc.pearsonprd.tech
api-soa.pgi.pearsonprd.tech
api-glp1-prd.glp.pearsonprd.tech
vocabgamesauthor.pearsonprd.tech
*.pmc.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.priv.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
mylabschool.pearson.com
identity-internal.pearson.com
san-wsol-us1-prd.bite.pearsonprd.tech
deidaus-prod.sofa.pearsonprd.tech
*.launchpad.pearsonprd.tech
san-pearson-prep-us1-prd.bite.pearsonprd.tech
api-oculus-us1-prd-green.bite.pearsonprd.tech
pv.pearsonprd.tech
id.iam.pearsonprd.tech
www.studychannel-stg.pearsonprd.tech
loginui-glp1-uat.glp.pearsonprd.tech
pool-app-d-use-01.pearsonprd.tech
r2d.ift.pearsonprd.tech
learnerui-glp1-uat.glp.pearsonprd.tech
alb-admin-webui.pasau.pearsonprd.tech
*.pcs.pearsonprd.tech
*.pmc.pearsonprd.tech
polarbear-lcng-us1-prd.bite.pearsonprd.tech
mx-prod.mastering.pearsoncmg.com
*.pqs.pearsonprd.tech
san-pearson-prep-us1-prd.bite.pearsonprd.tech
tools.mx.pearsonprd.tech
*.assessment.pearson.com
web-oculus-us1-prd.bite.pearsonprd.tech
mx-prod.mastering.pearsoncmg.com
lwa.api.pqs.pearsonprd.tech
*.pmc.pearsonprd.tech
api.pgi.pearsonprd.tech
eg4-alb-assessment.pasau.pearsonprd.tech
san-pearson-prep-us1-prd.bite.pearsonprd.tech
*.sofa.pearsonprd.tech
turbo-prd.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
verification.pqs.pearsonprd.tech
api-oculus-us1-prd-blue.bite.pearsonprd.tech
www.studychannel-stg.pearsonprd.tech
api-oculus-us1-prd-green.bite.pearsonprd.tech
mx-prod.mastering.pearsoncmg.com
launchpad-uat.pearson.com
*.pmc.pearsonprd.tech
apis.wsol-prd.pearsonprd.tech
social.pearsonprd.tech
nexus.pmc.pearsonprd.tech
*.acs.pearsonprd.tech
web-oculus-us1-prd-blue.bite.pearsonprd.tech
mds-prd.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.pla.pearsonprd.tech
*.acs.pearsonprd.tech
sms.pearsoncmg.com
launchui-glp1-prd.glp.pearsonprd.tech
api-oculus-us1-prd.bite.pearsonprd.tech
*.studychannel-prd.pearsonprd.tech
apis.wsol-prd.pearsonprd.tech
*.pmc.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.sofa.pearsonprd.tech
opendj.prod.iam.pearsonprd.tech
*.pmc.pearsonprd.tech
*.pmc.pearsonprd.tech
*.priv.pearsonprd.tech
esb-us.pgi.pearsonprd.tech
*.pmc.pearsonprd.tech
deidaus.sofa.pearsonprd.tech
etext-prd.pearsonprd.tech
web-oculus-us1-prd-blue.bite.pearsonprd.tech
nexus.pmc.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.pla.pearsonprd.tech
*.iam.pearsonprd.tech
learnerui-glp1-uat.glp.pearsonprd.tech
uk1-alb-assessment.pasuk.pearsonprd.tech
etext-prd.pearsonprd.tech
*.api.pqs.pearsonprd.tech
verification.api.pqs.pearsonprd.tech
loginui-glp1-uat.glp.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.pla.pearsonprd.tech
idc-web-us1-stg.bite.pearsonprd.tech
studychannel.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
api-glp1-uat.glp.pearsonprd.tech
ui.heportal.pearsonprd.tech
instructorui-glp1-uat.glp.pearsonprd.tech
mylab.pearson.com

Certificate

The complete raw certificate details for marin-api.etext-prd.pearsonprd.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09T4ZHDsgiic3/iuRoCt
rpzuAT7XZpisOrPebyndpjFAfeOxHfISQvL7iuVvRcGROz+oLdJFaD55Hc8gLxB4
ImwPwtbwQGLY/tDHNPwxwal8UqO9HBV714qlBkYt4Ff9xMFMNETDBA8ALcYg72U1
JKWr09giNpyoIWoSro+KS3DzU5kBWstGRC7JwAqtnIZydCprAkHOXaSvexfQZGU1
1Z6DlHQOWRaMQCOmnOCKg+Td0kSTml+uWuhkuqkJfL32zkPaF+1yRJRRgWyzH7aX
0XbF014pahlp4/zpzmst9gOBQFD8mpGgsI2UgVZtjnISoc7IWsbJmvmAjKyq2y+J
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128855081851805975341301394267220694107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pearson PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marin-api.etext-prd.pearsonprd.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26741301908325830628113467530917372926560233301976934225987884222140825662412608092854901972124533430760125704271605165029840389713865079983189636734105165279417603848438930840403799656573239168156648556368993399451033693016411957545563399659043274378694765469127974158723684341750999963128563837381806710382157712013579410708094689592236774084656536578919010139701005694661079411091642801380339609227280621781441413637186732178067701165321302937238570688747815273390132205407217344816450264413742692407244790082724061709512417564333185739165936885552473068548406184242206354993289484664762008100290718712365568723443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c1b662051f78bc303e4d8c65e49d5b21cbd6c24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c7ad5542600000403004730450221008c9e26c420767b101c642748940a0851ade8a521cc62b6e4f2b8c499379dd0a002207aab3b541b1b7d61334048795bfac4e7d8599c1b2b00311ec6fe6bfa3c3a98540076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c7ad554c90000040300473045022100b65cdc95cba98af80fa404933f338882824e4b29ac2a7be08a877dfe93eba1510220466d9144ad0aafa2539c2a22228acd63a1e91bb217b8ca694e0b080484b051d6007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c7ad554550000040300463044022019ebdcc92e5634789658d3e54954088c60bdad6cd5d9b31d08b84abb7020577d02204987db47fa7e6f6ccf5533543bfbff2b7a268a76ba40b280f5484436e826b89d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marin-api.etext-prd.pearsonprd.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marin-api.prd-prsn.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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