sts.iggroup.net

- IG Group Limited -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 40:9a:49:fe:98:16:fc:29:1b:f7:b0:66:7d:f6:29:8b was issued on by Sectigo Limited.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IG Group Limited

Organization: IG Group Limited
Locality: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 40:9a:49:fe:98:16:fc:29:1b:f7:b0:66:7d:f6:29:8b
Serial Number (int): 85871706233372833171281480975362959755
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 66:b2:b8:94:d4:03:8d:f0:35:3f:a1:c8:49:b6:b3:90:86:bd:06:5f
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): b1:4b:73:4e:14:f4:e9:39:45:a6:ad:44:48:1e:e6:e2:4a:b2:65:eb
Fingerprint (sha256): 2a:7f:64:03:db:4a:a2:0f:24:15:71:ba:ae:04:c6:30:72:5d:89:62:f2:cd:70:0b:54:63:54:f9:c5:3c:3b:c0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sts.iggroup.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.iggroup.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.iggroup.net
certauth.sts.iggroup.net
enterpriseregistration.brightpool-markets.com
enterpriseregistration.dailyfx.com
enterpriseregistration.ig.com
enterpriseregistration.igbank.ch
enterpriseregistration.iggroup.com
enterpriseregistration.iggroup.net
enterpriseregistration.nadex.com
enterpriseregistration.spectrum-markets.com

Other certificates including the domain name iggroup.net

(limited to 100 certificates)
edge.dtu.iggroup.net
autodiscover.ig.com
autodiscover.ig.com
sts.iggroup.net
autodiscover.ig.com
artifacts.aws.iggroup.net
*.istio.aws.iggroup.net
autodiscover.ig.com
edge.dtu.iggroup.net
edge.dtu.iggroup.net
sts.iggroup.net
sts.iggroup.net
*.aws.iggroup.net
autodiscover.ig.com
sts.iggroup.net
*.igdgsuat.aws.iggroup.net
sts.iggroup.net
*.artifacts.aws.iggroup.net
rds.iggroup.net
*.breakit.aws.iggroup.net
*.igdgsuat.aws.iggroup.net
*.dtu.play.aws.iggroup.net
*.igcatest.aws.iggroup.net
autodiscover.ig.com
jamf.iggroup.net
remotesupport.iggroup.net
edge.dtu.iggroup.net
remotesupport.iggroup.net
autodiscover.ig.com
nadexdtu.aws.iggroup.net
sts.iggroup.net
sts.iggroup.net
*.igwtpprd.aws.iggroup.net
*.igdgsuat.aws.iggroup.net
rds.iggroup.net
*.istio.aws.iggroup.net
artifacts.aws.iggroup.net
autodiscover.ig.com
*.istio.igcobdtu.aws.iggroup.net
sts.iggroup.net
*.aws.iggroup.net
*.igcobdtu.aws.iggroup.net
*.igcaaprd.aws.iggroup.net
*.aws.iggroup.net
sts.iggroup.net
remotesupport.iggroup.net
autodiscover.ig.com
sts.iggroup.net
autodiscover.ig.com
external.igmwptest.aws.iggroup.net
*.igdgsdtu.aws.iggroup.net
autodiscover.ig.com
autodiscover.ig.com
autodiscover.ig.com
sts.iggroup.net
sts.iggroup.net
edge.dtu.iggroup.net
*.igdgsdtu.aws.iggroup.net
sts.iggroup.net
*.istio.breakit.aws.iggroup.net
iggroup.net
autodiscover.ig.com
gateway.iggroup.net
*.dtu.play.aws.iggroup.net
igmwptest.aws.iggroup.net
sts.iggroup.net
sts.iggroup.net
edge.dtu.iggroup.net
sts.iggroup.net
remotesupport.iggroup.net
edge.dtu.iggroup.net
autodiscover.ig.com
wm.iggroup.com
jamf.iggroup.net
wm.iggroup.com
edge.dtu.iggroup.net
sts.iggroup.net
sts.iggroup.net
sts.iggroup.net
iggroup.net
incapsula.com
sts.iggroup.net
autodiscover.ig.com
sts.iggroup.net

Certificate

The complete raw certificate details for sts.iggroup.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpzCCBY+gAwIBAgIQQJpJ/pgW/Ckb97BmffYpizANBgkqhkiG9w0BAQsFADCB
lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD
EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy
dmVyIENBMB4XDTIxMTAxMTAwMDAwMFoXDTIyMTAxMTIzNTk1OVowUzELMAkGA1UE
BhMCR0IxDzANBgNVBAcTBkxvbmRvbjEZMBcGA1UEChMQSUcgR3JvdXAgTGltaXRl
ZDEYMBYGA1UEAxMPc3RzLmlnZ3JvdXAubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxPY+GzwcTbU0gd5Yt3+/kbSWMikMIxaCFfej/c+ZTdk7d0mR
JY7xJiVD3ZosbbkuttRRI7g637CO3a8j6IDRXR76aqvwatbjc3Sg0EdoH3jornCR
f9p7kosA5aq9yukEAyzCRmap0kOM2RyQ22QugFYILlJbK6gdQhkR0xp9ivN2lHJe
wzeroglMXRddbyAbLUJ8oVniSA02s91LnBMlcMDc0uTPlux6/2YG5UhoxESU4ufw
Xy7jWFgtct+JpPkWK2d+oPHpP8T9YGTCy1Dnr0GFGt83K0vsHhBvPf1db8cilSEc
+zDYVcdEJs21291L0AeSxYwk2eFFdZPkU4FftwIDAQABo4IDMjCCAy4wHwYDVR0j
BBgwFoAUF9nWJSdn+THCSUPZMDZEjGypT+swHQYDVR0OBBYEFGayuJTUA43wNT+h
yEm2s5CGvQZfMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBKBgNVHSAEQzBBMDUGDCsGAQQBsjEBAgED
BDAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwB
AgIwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0
aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCB
igYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LnNlY3RpZ28u
Y29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVy
Q0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTATBgor
BgEEAdZ5AgQDAQH/BAIFADCCAWMGA1UdEQSCAVowggFWgg9zdHMuaWdncm91cC5u
ZXSCGGNlcnRhdXRoLnN0cy5pZ2dyb3VwLm5ldIItZW50ZXJwcmlzZXJlZ2lzdHJh
dGlvbi5icmlnaHRwb29sLW1hcmtldHMuY29tgiJlbnRlcnByaXNlcmVnaXN0cmF0
aW9uLmRhaWx5ZnguY29tgh1lbnRlcnByaXNlcmVnaXN0cmF0aW9uLmlnLmNvbYIg
ZW50ZXJwcmlzZXJlZ2lzdHJhdGlvbi5pZ2JhbmsuY2iCImVudGVycHJpc2VyZWdp
c3RyYXRpb24uaWdncm91cC5jb22CImVudGVycHJpc2VyZWdpc3RyYXRpb24uaWdn
cm91cC5uZXSCIGVudGVycHJpc2VyZWdpc3RyYXRpb24ubmFkZXguY29tgitlbnRl
cnByaXNlcmVnaXN0cmF0aW9uLnNwZWN0cnVtLW1hcmtldHMuY29tMA0GCSqGSIb3
DQEBCwUAA4IBAQAYIX/tyJzGIzRViFcL0XL1vchTRXG8RrJLDYaYcnDLWRVV1WnI
8SxY6NKdX5b45Gg75hknbRi6PIWqKdpIPynD1TETqHz7bMDsG5adC6ijYicY/4Eq
NB3/m37BilAdW5QkCrl5rmvdbeBUiW70KvO7r1r9MJt53ZQItkEXXD+PYJFKhB7t
HQjXG1pE0IlJC5n8/Cg5HosBiVZ81gkTTP2Gk0v1gLuyEbqn7rbm9Jbf7UfwP+8D
IAfOlBxSqqwaG0t7Mkr/c7/6+ueRC0ir/QINxLqRVKw79L6yUSr/Kn3P2ZQpZNfW
ZG+mEOtY8s1lu5+LkaqkdcjPX8cfvvn8Bmyp
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPY+GzwcTbU0gd5Yt3+/
kbSWMikMIxaCFfej/c+ZTdk7d0mRJY7xJiVD3ZosbbkuttRRI7g637CO3a8j6IDR
XR76aqvwatbjc3Sg0EdoH3jornCRf9p7kosA5aq9yukEAyzCRmap0kOM2RyQ22Qu
gFYILlJbK6gdQhkR0xp9ivN2lHJewzeroglMXRddbyAbLUJ8oVniSA02s91LnBMl
cMDc0uTPlux6/2YG5UhoxESU4ufwXy7jWFgtct+JpPkWK2d+oPHpP8T9YGTCy1Dn
r0GFGt83K0vsHhBvPf1db8cilSEc+zDYVcdEJs21291L0AeSxYwk2eFFdZPkU4Ff
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85871706233372833171281480975362959755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IG Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts.iggroup.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24864134526558461297093627464920430385869107974724521965398505154591746627639472952219982565348830583008379542690057496599296039779469665352331304500859581339866045609424055612990615556012718417557174432499638791157542381049625263298383810692158367740471021419654492955732245715447598812487519158632846590271096914052611553562809805892576540723382170363910528858755147521141389994764851761194081886526945312276126507479277608947318633723585944133556409902711822390014401397525184489499573627275312485242144780762987158446940569578001418832632944334574179862807529751824869286512827506559527356089835727367983251677111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66b2b894d4038df0353fa1c849b6b39086bd065f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (346 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.iggroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certauth.sts.iggroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.brightpool-markets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.dailyfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.igbank.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.iggroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.nadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.spectrum-markets.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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