marin-api.etext-prd.pearsonprd.tech

- Pearson PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number d9:d3:61:13:ca:89:b0:0c:52:dd:5b:92:82:31:84:34 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pearson PLC

Organization: Pearson PLC
State / Province: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): d9:d3:61:13:ca:89:b0:0c:52:dd:5b:92:82:31:84:34
Serial Number (int): 289540018684226661217831455354193544244
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4d:9e:1b:a4:4e:ec:e7:29:af:cf:6b:c1:74:14:8f:17:01:15:9e:e4
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): ce:dc:97:d1:18:9f:6d:3f:8b:64:6c:1c:ca:3a:e8:04:48:9a:f0:fd
Fingerprint (sha256): b2:9c:22:fd:12:bd:cd:4a:37:ee:6d:a5:78:27:28:1d:3f:12:6b:53:e5:05:37:c3:0e:0c:4e:70:a6:91:fb:e4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate marin-api.etext-prd.pearsonprd.tech

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marin-api.etext-prd.pearsonprd.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marin-api.etext-prd.pearsonprd.tech
marin-api.prd-prsn.com

Other certificates including the domain name pearsonprd.tech

(limited to 100 certificates)
api.pgi.pearsonprd.tech
idc-web-us1-stg.bite.pearsonprd.tech
leap.pearsonprd.tech
*.int.pearsonprd.tech
review360.pearsonprd.tech
identity-internal.pearson.com
*.pmc.pearsonprd.tech
api-soa.pgi.pearsonprd.tech
api-glp1-prd.glp.pearsonprd.tech
vocabgamesauthor.pearsonprd.tech
*.pmc.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.priv.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
mylabschool.pearson.com
identity-internal.pearson.com
san-wsol-us1-prd.bite.pearsonprd.tech
deidaus-prod.sofa.pearsonprd.tech
*.launchpad.pearsonprd.tech
san-pearson-prep-us1-prd.bite.pearsonprd.tech
api-oculus-us1-prd-green.bite.pearsonprd.tech
pv.pearsonprd.tech
id.iam.pearsonprd.tech
www.studychannel-stg.pearsonprd.tech
loginui-glp1-uat.glp.pearsonprd.tech
pool-app-d-use-01.pearsonprd.tech
r2d.ift.pearsonprd.tech
learnerui-glp1-uat.glp.pearsonprd.tech
alb-admin-webui.pasau.pearsonprd.tech
*.pcs.pearsonprd.tech
*.pmc.pearsonprd.tech
polarbear-lcng-us1-prd.bite.pearsonprd.tech
mx-prod.mastering.pearsoncmg.com
*.pqs.pearsonprd.tech
san-pearson-prep-us1-prd.bite.pearsonprd.tech
tools.mx.pearsonprd.tech
*.assessment.pearson.com
web-oculus-us1-prd.bite.pearsonprd.tech
mx-prod.mastering.pearsoncmg.com
lwa.api.pqs.pearsonprd.tech
*.pmc.pearsonprd.tech
api.pgi.pearsonprd.tech
eg4-alb-assessment.pasau.pearsonprd.tech
san-pearson-prep-us1-prd.bite.pearsonprd.tech
*.sofa.pearsonprd.tech
turbo-prd.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
verification.pqs.pearsonprd.tech
api-oculus-us1-prd-blue.bite.pearsonprd.tech
www.studychannel-stg.pearsonprd.tech
api-oculus-us1-prd-green.bite.pearsonprd.tech
mx-prod.mastering.pearsoncmg.com
launchpad-uat.pearson.com
*.pmc.pearsonprd.tech
apis.wsol-prd.pearsonprd.tech
social.pearsonprd.tech
nexus.pmc.pearsonprd.tech
*.acs.pearsonprd.tech
web-oculus-us1-prd-blue.bite.pearsonprd.tech
mds-prd.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.pla.pearsonprd.tech
*.acs.pearsonprd.tech
sms.pearsoncmg.com
launchui-glp1-prd.glp.pearsonprd.tech
api-oculus-us1-prd.bite.pearsonprd.tech
*.studychannel-prd.pearsonprd.tech
apis.wsol-prd.pearsonprd.tech
*.pmc.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.sofa.pearsonprd.tech
opendj.prod.iam.pearsonprd.tech
*.pmc.pearsonprd.tech
*.pmc.pearsonprd.tech
*.priv.pearsonprd.tech
esb-us.pgi.pearsonprd.tech
*.pmc.pearsonprd.tech
deidaus.sofa.pearsonprd.tech
etext-prd.pearsonprd.tech
web-oculus-us1-prd-blue.bite.pearsonprd.tech
nexus.pmc.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.pla.pearsonprd.tech
*.iam.pearsonprd.tech
learnerui-glp1-uat.glp.pearsonprd.tech
uk1-alb-assessment.pasuk.pearsonprd.tech
etext-prd.pearsonprd.tech
*.api.pqs.pearsonprd.tech
verification.api.pqs.pearsonprd.tech
loginui-glp1-uat.glp.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
*.pla.pearsonprd.tech
idc-web-us1-stg.bite.pearsonprd.tech
studychannel.pearsonprd.tech
sancertv1-1.pla.pearsonprd.tech
api-glp1-uat.glp.pearsonprd.tech
ui.heportal.pearsonprd.tech
instructorui-glp1-uat.glp.pearsonprd.tech
mylab.pearson.com

Certificate

The complete raw certificate details for marin-api.etext-prd.pearsonprd.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8lZfNtmIFqgMMdaUqm2
8/MoSEqkCxhr1TIxzOxwxqZXLAsWJr0ueo0M/VVb6cNpBYMWaFzxBfAsFiIMSnRw
XbVloCiJDasL3t4/i/qvWpZXybRNPvOwKeJ4gaGGiZkqbNXE3uY77htDJ+5qHVR2
D/TBYjDMWMWq2TVx4kqOjYik8ozESVPA3RRCt0+CGSsUUM7QTQFyMl8fs6DcxyXG
wGEMjOqDutTfz7CCTpEHPlJcOWXX5QTHN8v1z57wcx0aPyHgezj2mHF0XIKedR87
sl9fObj0IFAOw9IGP3t2pC30SBwlfPHlA7b0jt4yPOXV+LrnIDRMUQI8wz0IMIme
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289540018684226661217831455354193544244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pearson PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marin-api.etext-prd.pearsonprd.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25220711857538424946646330431334604937635229607404521395874523642529199492639678237198644953406834021383064536188037600382534638584894762838018081140616256148118103735428410035427025531471688119906491349244768452081620064371788164526926587540905610603230847373002459792249588867303940231807359631739705352167856711510025829278137365042800049421981219410440845676762808431918537932457524596984827139033789283010777227811817335930964375720290920670805034691689092788125332955051062729539935940651373639702752677914128706032851064026663271295002305452956930646821803616750508079129978113693560889620744633007646158986789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d9e1ba44eece729afcf6bc174148f1701159ee4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marin-api.etext-prd.pearsonprd.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marin-api.prd-prsn.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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