trade.ig.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:0e:e3:a9:e5:7d:d4:b8:88:13:86:b0:da:3e:b6:d0 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trade.ig.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:0e:e3:a9:e5:7d:d4:b8:88:13:86:b0:da:3e:b6:d0
Serial Number (int): 17357273668787075296648664287228638928
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:8e:f2:14:44:e8:b1:a4:9e:15:2f:74:52:34:76:c8:42:e8:62:60
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c6:ed:13:7f:ae:90:02:38:dd:e5:b3:a8:8b:a0:37:c0:d8:b7:cc:94
Fingerprint (sha256): 02:06:f9:68:54:7e:31:06:7d:09:60:38:4c:95:1f:9a:ff:9b:b6:f9:7b:63:00:b3:5c:a3:a2:67:3a:61:66:a8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate trade.ig.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trade.ig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trade.ig.com
*.trade.ig.com

Other certificates including the domain name ig.com

(limited to 100 certificates)
pages.chartsdtu.ig.com
statuspage.io
private-cloud.status.ovhcloud.dev
affiliates.ig.com
incapsula.com
affiliates.ig.com
statuspage.io
statuspage.io
status-media.bucketeer.jp
status-media.bucketeer.jp
etfscreener.ig.com
statuspage.io
router-ext-covg.ig.com
affiliates.ig.com
investments.ig.com
trade.ig.com
*.raf.ig.com
secure05.stage.lithium.com
community.ig.com
*.test.client-onboarding.ig.com
statuspage.io
mybranch.staging.tradedtu.ig.com
sbc2.ig.com
secure05.stage.lithium.com
sfbaccessuk1.ig.com
sepsbe.status.symantec.com
sepsbe.status.symantec.com
test-staging-branch-hoist.webshell.tradedtu.ig.com
edge.dtu.iggroup.net
statuspage.io
statuspage.io
autodiscover.ig.com
statuspage.io
autodiscover.ig.com
statuspage.io
payments.ig.com
status-media.bucketeer.jp
community.ig.com
statuspage.io
statuspage.io
chartsprd.ig.com
igamerica.ig.com
statuspage.io
web.ig.com
sitca.ig.com
status-media.bucketeer.jp
status-media.bucketeer.jp
affiliates.ig.com
test.chartsdtu.ig.com
statuspage.io
academy-api.ig.com
statuspage.io
statuspage.io
web.ig.com
statuspage.io
statuspage.io
web.ig.com
pages.chartsdtu.ig.com
*.dtu-dealing.mobile.ig.com
net-cpm.marketdatasystems.com
statuspage.io
dgs.ig.com
uat.webshell.tradedtu.ig.com
sts.iggroup.net
academy-api.ig.com
imperva.com
web.ig.com
statuspage.io
igamerica.ig.com
labgroup.ig.com
private-cloud.status.ovhcloud.dev
statuspage.io
secure05.stage.lithium.com
*.ig.com
statuspage.io
statuspage.io
statuspage.io
services.ig.com
investments-api.ig.com
igamerica.ig.com
statuspage.io
staging-branch-hoist.staging.tradedtu.ig.com
access.ig.com
statuspage.io
sepsbe.status.symantec.com
sfbaccessuk1.ig.com
status-media.bucketeer.jp
web-ca.ig.com
localhost.ig.com
affiliates.ig.com
incapsula.com
sepsbe.status.symantec.com
uat.screener.ig.com
academy-api.ig.com
uat.webshell.tradedtu.ig.com
affiliates.ig.com
investments.ig.com
secure05.stage.lithium.com
private-cloud.status.ovhcloud.dev
web.ig.com

Certificate

The complete raw certificate details for trade.ig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgIQDQ7jqeV91LiIE4aw2j620DANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDYwNDAwMDAwMFoXDTI0MDcwMjIzNTk1OVowFzEV
MBMGA1UEAxMMdHJhZGUuaWcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwh+ZnFAVEvyqIPXplfEM5a/LDOAjoIPhKJwLM7WLFKFc2OVHyGdEjI6v
fhBt9nHxrtmKxWaymQTgILp0tR8sYE1drCM0ixjUd0aPNie2ScA4gBP7TzJIWY24
Nmq/qrwTCQ+bY53DSA/DFiKwrMznrZUYMI2uexJZgo2RLWZMXiJfpQt25Q+ppZUc
gXGpQw9H8m+vQeZJqWeO2JpclXMSEb+PVQJBJ4pi2VYXEbLKEtS6monR4fDdHYHL
EWZbXmrYMKA1PWijY7XQH4LukTzyk5G2CxL/V1TuEl5ffWoqpVSlpvUYhtxpuZms
CHwqqHGWW+e4aIaBDp2D91NMSM1/5QIDAQABo4IC9jCCAvIwHwYDVR0jBBgwFoAU
wDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFFCO8hRE6LGknhUvdFI0dshC
6GJgMCcGA1UdEQQgMB6CDHRyYWRlLmlnLmNvbYIOKi50cmFkZS5pZy5jb20wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV
HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G
CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYI
KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy
LmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgB2
/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYiEfNvxAAAEAwBHMEUC
ID+OHKK6tj5xwhLM9uepyWP8hv0aiRZ2bJJxPnAv2VL5AiEAqDhYjwgLHJ+OiOIO
ZEt1oD1HUGvhKKDKOhXzOBukR+8AdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ
u7+rOdiEcwAAAYiEfNu8AAAEAwBIMEYCIQD319n9iPVraxnMjA9VHleYxAJZTKey
gobzdGhgAyaAUAIhAP61YsgmyQPGhNKWDJIomTTzopT5yq/orc1WObRo4mY5AHYA
2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGIhHzbiAAABAMARzBF
AiBi6/cAzkgyIxAI07gC2tkzExKn6zFIdgTgdmSvnGQsmAIhAJlo87BYUi19WbcJ
s5LhN4pj45MCxyROqXzhWUUROi6vMA0GCSqGSIb3DQEBCwUAA4IBAQBi3kxMql0r
K3/PnMJsAru1Ru88xShl2pa3nalx5JcWluDkGUpJqJW1VAtJRJoGJ92YxOOx4zsz
DvmHidn7VqXpAa1WYghORgx4J+OMgOtAlqoVUXUZuTWTAFS6FW22fnHiEp1qPKbh
kBdLwAEA6Up/WQayJhOdG43pKKRo88m6ytgHWF2AG3UNXCjw8jCUupXUCs81CXXa
7r00PpROndL8zFI1baU8Pl/CNJZFYY37cTtmUqiK1A2mjdm3wO6RDjr24Nevgi0I
VpvKuKyl0rdrpjdi2TAtbAmoK8QBlX08XCv+dQisc+wpigDu6yCIMa2I02PxTO/K
DM/LGqihi0Ha
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh+ZnFAVEvyqIPXplfEM
5a/LDOAjoIPhKJwLM7WLFKFc2OVHyGdEjI6vfhBt9nHxrtmKxWaymQTgILp0tR8s
YE1drCM0ixjUd0aPNie2ScA4gBP7TzJIWY24Nmq/qrwTCQ+bY53DSA/DFiKwrMzn
rZUYMI2uexJZgo2RLWZMXiJfpQt25Q+ppZUcgXGpQw9H8m+vQeZJqWeO2JpclXMS
Eb+PVQJBJ4pi2VYXEbLKEtS6monR4fDdHYHLEWZbXmrYMKA1PWijY7XQH4LukTzy
k5G2CxL/V1TuEl5ffWoqpVSlpvUYhtxpuZmsCHwqqHGWW+e4aIaBDp2D91NMSM1/
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17357273668787075296648664287228638928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trade.ig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24505813724596946213998578285686506080021082895321386372407643201714988661219730534609198037311070727275134311114307977411545880508153150517912593792791206557374554864732859914143654196803846986268046596757270614834266434453412270152485841401183074509607331337838810873354529633133585976284166773848798042422492827935120514301838275639253716357743737492720981353443179946858766858502864561373188313096758216503169547328829327435459037645453352908078026718033711580703928440165870006559147051073458476913635349200956501529527664705785488094120603649710524563846890736431238729700639037601538882626183978681891501735909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							508ef21444e8b1a49e152f74523476c842e86260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trade.ig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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