sfbaccessuk1.ig.com

- IG Index Limited -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 74:05:45:ae:a3:34:a8:22:b4:b6:c6:79:4c:d0:f3:af was issued on by Sectigo Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IG Index Limited

Organization: IG Index Limited
Organization unit: Microsoft Services
Address: 25 Dowgate Hill
Address: Cannon Bridge House
Postal code: EC4R 2YA
State / Province: London
Locality: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 74:05:45:ae:a3:34:a8:22:b4:b6:c6:79:4c:d0:f3:af
Serial Number (int): 154217822317815559583517706233767326639
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e5:c4:bb:b7:a3:84:35:48:17:e1:77:87:e2:c4:2e:e5:64:c8:a9:e8
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 0a:a5:c4:3b:22:84:6e:f9:3b:ce:d7:53:e1:72:8b:d1:46:b2:e1:2e
Fingerprint (sha256): 0b:db:f3:2e:de:1e:1e:42:a7:36:83:36:cf:f8:cd:3b:78:fd:ca:cd:d8:4c:68:c5:39:6a:a1:78:a4:6b:3e:8c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sfbaccessuk1.ig.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfbaccessuk1.ig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sfbaccessuk1.ig.com
sfbwebconuk1.ig.com
sip.brightpool-markets.com
sip.ig.com
sip.igbank.ch
sip.iggroup.com
sip.nadex.com
sip.spectrum-markets.com

Other certificates including the domain name ig.com

(limited to 100 certificates)
pages.chartsdtu.ig.com
statuspage.io
private-cloud.status.ovhcloud.dev
affiliates.ig.com
incapsula.com
affiliates.ig.com
statuspage.io
statuspage.io
status-media.bucketeer.jp
status-media.bucketeer.jp
etfscreener.ig.com
statuspage.io
router-ext-covg.ig.com
affiliates.ig.com
investments.ig.com
trade.ig.com
*.raf.ig.com
secure05.stage.lithium.com
community.ig.com
*.test.client-onboarding.ig.com
statuspage.io
mybranch.staging.tradedtu.ig.com
sbc2.ig.com
secure05.stage.lithium.com
sfbaccessuk1.ig.com
sepsbe.status.symantec.com
sepsbe.status.symantec.com
test-staging-branch-hoist.webshell.tradedtu.ig.com
edge.dtu.iggroup.net
statuspage.io
statuspage.io
autodiscover.ig.com
statuspage.io
autodiscover.ig.com
statuspage.io
payments.ig.com
status-media.bucketeer.jp
community.ig.com
statuspage.io
statuspage.io
chartsprd.ig.com
igamerica.ig.com
statuspage.io
web.ig.com
sitca.ig.com
status-media.bucketeer.jp
status-media.bucketeer.jp
affiliates.ig.com
test.chartsdtu.ig.com
statuspage.io
academy-api.ig.com
statuspage.io
statuspage.io
web.ig.com
statuspage.io
statuspage.io
web.ig.com
pages.chartsdtu.ig.com
*.dtu-dealing.mobile.ig.com
net-cpm.marketdatasystems.com
statuspage.io
dgs.ig.com
uat.webshell.tradedtu.ig.com
sts.iggroup.net
academy-api.ig.com
imperva.com
web.ig.com
statuspage.io
igamerica.ig.com
labgroup.ig.com
private-cloud.status.ovhcloud.dev
statuspage.io
secure05.stage.lithium.com
*.ig.com
statuspage.io
statuspage.io
statuspage.io
services.ig.com
investments-api.ig.com
igamerica.ig.com
statuspage.io
staging-branch-hoist.staging.tradedtu.ig.com
access.ig.com
statuspage.io
sepsbe.status.symantec.com
sfbaccessuk1.ig.com
status-media.bucketeer.jp
web-ca.ig.com
localhost.ig.com
affiliates.ig.com
incapsula.com
sepsbe.status.symantec.com
uat.screener.ig.com
academy-api.ig.com
uat.webshell.tradedtu.ig.com
affiliates.ig.com
investments.ig.com
secure05.stage.lithium.com
private-cloud.status.ovhcloud.dev
web.ig.com

Certificate

The complete raw certificate details for sfbaccessuk1.ig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4HDknnFuQQx3//zlQzK
YbSwVMHZVKjcBQD+1FGq97DTSQh+Zxw3EfOI7XrUNW6acx7VZdd2eNbxUoCW2mUo
bnfA+IuE3eWnq6VsTAYTlIDGlgFqI0nFm1zNtjbzVckcM4DsIvRz56nq0OfyoZq3
RMlsoJq393ODksY46VhXJm7nl9vk4eQxQ1Xf9hknf0AgoUXT3rDTviJ+HPiinAR5
JEl55tFq7m06phWyEjAl2jJY6HhS7B8okSxsb07Dt/DUOceVwswR0YuIFZ4iiRrT
2GJumRs8LLfcoZ+B9i76dGOI+PpW3CB+gT+Zoa1v652IqPMN1FBWCkW4bR9UWDLj
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154217822317815559583517706233767326639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC4R 2YA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '25 Dowgate Hill'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cannon Bridge House'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IG Index Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sfbaccessuk1.ig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21650739139712901067616386480304871534261598818629696730247188489590090586887078053492051910428600070231414414155977818056593132536051612177472421465201599119712463499414343465398169544839381364279194604501411049089879313325825527074766410599900838831298334355133800736474207631855479596395130609595071416891008236375210151466583204150456645548038777738478485251561376855762497812818137681162413534956152961659795022037356234680732789285005832941773559047922882254768596542900516438925972532022696912788092117704295267761276683564157391466431916514727842095676612117485413991208035017569963878833247927053810022933431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5c4bbb7a384354817e17787e2c42ee564c8a9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001758e74fa6f0000040300473045022100a16330c83040c2c9efa3fc3e9af4519aded7cde63bf5146cddfe5b0540ae691b022070e6cd0c70be67a5de33b73955b81d7cb298d2794d72dc905e7604cfd540e7350076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001758e74fa93000004030047304502200ea7b18d0033ff12b4946b80e207cfdc1cbc379af37716670116c6bf5630f1e1022100fd6bdbafeee2ebdb1f2386d710b2fb2e0a84ba6b8c448e6cd9ea49b143c02b2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbaccessuk1.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbwebconuk1.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.brightpool-markets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.igbank.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.nadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.spectrum-markets.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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