gateway.iggroup.net
- IG Group Limited -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number fc:af:6e:ca:95:8f:38:1a:a3:33:c9:52:80:f1:d2:10 was issued on by Sectigo Limited.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
IG Group Limited
Organization:
IG Group Limited
State / Province:
London, City of
Country: GB
Country: GB
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): fc:af:6e:ca:95:8f:38:1a:a3:33:c9:52:80:f1:d2:10Serial Number (int): 335876354003474032171378702378517778960
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: cf:3f:9c:95:7b:7f:44:e1:9c:a7:6a:16:ce:3b:30:b4:1d:36:f5:91
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): fe:bb:13:7e:40:ea:64:e7:f1:59:e5:c5:71:23:d2:f3:eb:45:56:f5
Fingerprint (sha256): c7:42:22:a3:77:17:08:b1:9c:72:c7:b0:31:78:8d:87:ff:b5:1d:fd:f5:e2:72:7d:11:cb:84:31:58:c4:24:80
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate gateway.iggroup.net
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gateway.iggroup.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gateway.iggroup.net
*.iggroup.net
broker.iggroup.net
prod1.iggroup.net
prod2.iggroup.net
rdweb.iggroup.net
*.iggroup.net
broker.iggroup.net
prod1.iggroup.net
prod2.iggroup.net
rdweb.iggroup.net
Other certificates including the domain name iggroup.net
(limited to 100 certificates)
edge.dtu.iggroup.net
autodiscover.ig.com
autodiscover.ig.com
sts.iggroup.net
autodiscover.ig.com
artifacts.aws.iggroup.net
*.istio.aws.iggroup.net
autodiscover.ig.com
edge.dtu.iggroup.net
edge.dtu.iggroup.net
sts.iggroup.net
sts.iggroup.net
*.aws.iggroup.net
autodiscover.ig.com
sts.iggroup.net
*.igdgsuat.aws.iggroup.net
sts.iggroup.net
*.artifacts.aws.iggroup.net
rds.iggroup.net
*.breakit.aws.iggroup.net
*.igdgsuat.aws.iggroup.net
*.dtu.play.aws.iggroup.net
*.igcatest.aws.iggroup.net
autodiscover.ig.com
jamf.iggroup.net
remotesupport.iggroup.net
edge.dtu.iggroup.net
remotesupport.iggroup.net
autodiscover.ig.com
nadexdtu.aws.iggroup.net
sts.iggroup.net
sts.iggroup.net
*.igwtpprd.aws.iggroup.net
*.igdgsuat.aws.iggroup.net
rds.iggroup.net
*.istio.aws.iggroup.net
artifacts.aws.iggroup.net
autodiscover.ig.com
*.istio.igcobdtu.aws.iggroup.net
sts.iggroup.net
*.aws.iggroup.net
*.igcobdtu.aws.iggroup.net
*.igcaaprd.aws.iggroup.net
*.aws.iggroup.net
sts.iggroup.net
remotesupport.iggroup.net
autodiscover.ig.com
sts.iggroup.net
autodiscover.ig.com
external.igmwptest.aws.iggroup.net
*.igdgsdtu.aws.iggroup.net
autodiscover.ig.com
autodiscover.ig.com
autodiscover.ig.com
sts.iggroup.net
sts.iggroup.net
edge.dtu.iggroup.net
*.igdgsdtu.aws.iggroup.net
sts.iggroup.net
*.istio.breakit.aws.iggroup.net
iggroup.net
autodiscover.ig.com
gateway.iggroup.net
*.dtu.play.aws.iggroup.net
igmwptest.aws.iggroup.net
sts.iggroup.net
sts.iggroup.net
edge.dtu.iggroup.net
sts.iggroup.net
remotesupport.iggroup.net
edge.dtu.iggroup.net
autodiscover.ig.com
wm.iggroup.com
jamf.iggroup.net
wm.iggroup.com
edge.dtu.iggroup.net
sts.iggroup.net
sts.iggroup.net
sts.iggroup.net
iggroup.net
incapsula.com
sts.iggroup.net
autodiscover.ig.com
sts.iggroup.net
autodiscover.ig.com
autodiscover.ig.com
sts.iggroup.net
autodiscover.ig.com
artifacts.aws.iggroup.net
*.istio.aws.iggroup.net
autodiscover.ig.com
edge.dtu.iggroup.net
edge.dtu.iggroup.net
sts.iggroup.net
sts.iggroup.net
*.aws.iggroup.net
autodiscover.ig.com
sts.iggroup.net
*.igdgsuat.aws.iggroup.net
sts.iggroup.net
*.artifacts.aws.iggroup.net
rds.iggroup.net
*.breakit.aws.iggroup.net
*.igdgsuat.aws.iggroup.net
*.dtu.play.aws.iggroup.net
*.igcatest.aws.iggroup.net
autodiscover.ig.com
jamf.iggroup.net
remotesupport.iggroup.net
edge.dtu.iggroup.net
remotesupport.iggroup.net
autodiscover.ig.com
nadexdtu.aws.iggroup.net
sts.iggroup.net
sts.iggroup.net
*.igwtpprd.aws.iggroup.net
*.igdgsuat.aws.iggroup.net
rds.iggroup.net
*.istio.aws.iggroup.net
artifacts.aws.iggroup.net
autodiscover.ig.com
*.istio.igcobdtu.aws.iggroup.net
sts.iggroup.net
*.aws.iggroup.net
*.igcobdtu.aws.iggroup.net
*.igcaaprd.aws.iggroup.net
*.aws.iggroup.net
sts.iggroup.net
remotesupport.iggroup.net
autodiscover.ig.com
sts.iggroup.net
autodiscover.ig.com
external.igmwptest.aws.iggroup.net
*.igdgsdtu.aws.iggroup.net
autodiscover.ig.com
autodiscover.ig.com
autodiscover.ig.com
sts.iggroup.net
sts.iggroup.net
edge.dtu.iggroup.net
*.igdgsdtu.aws.iggroup.net
sts.iggroup.net
*.istio.breakit.aws.iggroup.net
iggroup.net
autodiscover.ig.com
gateway.iggroup.net
*.dtu.play.aws.iggroup.net
igmwptest.aws.iggroup.net
sts.iggroup.net
sts.iggroup.net
edge.dtu.iggroup.net
sts.iggroup.net
remotesupport.iggroup.net
edge.dtu.iggroup.net
autodiscover.ig.com
wm.iggroup.com
jamf.iggroup.net
wm.iggroup.com
edge.dtu.iggroup.net
sts.iggroup.net
sts.iggroup.net
sts.iggroup.net
iggroup.net
incapsula.com
sts.iggroup.net
autodiscover.ig.com
sts.iggroup.net
Certificate
The complete raw certificate details for gateway.iggroup.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIRAPyvbsqVjzgaozPJUoDx0hAwDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yMzA5MzAwMDAwMDBaFw0yNDA5MjkyMzU5NTlaMGAxCzAJBgNV BAYTAkdCMRgwFgYDVQQIEw9Mb25kb24sIENpdHkgb2YxGTAXBgNVBAoTEElHIEdy b3VwIExpbWl0ZWQxHDAaBgNVBAMTE2dhdGV3YXkuaWdncm91cC5uZXQwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoFX9Oncx51tgY/oZEVwWh43H8mAbF Wx4bwgcNkePqO6/Zk1vy8nAZmlH9cgElBSOP4nCkzGpgEsNFgjSGZsdxJnNqED+L M8Ed9Nhr/Av/7yXoUkQ/cFKUlqU14LgP1WSpTwcXbuEJjzEy7+lrTlpriS+xSIdt uPFwA0SfFhd7MQvmQ6lxg/8ybyg6mPBwS92i0bKjvRCh3zoGzbcN0MGSwAuU0mbu RyGCBZoS9sYYVBlwxpTOZCVBXfYR8A5ksjN1mmfmKlJN45NLxivWsP+LPg936ABu 6uyLRvwDqDriNclUNw8Af+c+gw3MS6cLINKjVD2PVlhd9oDlP/b4MJnfAgMBAAGj ggO0MIIDsDAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4E FgQUzz+clXt/ROGcp2oWzjswtB029ZEwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB /wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEw NQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5j b20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLnNl Y3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJl U2VydmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6 Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRp b25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNl Y3RpZ28uY29tMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYrlhUBVAAAEAwBHMEUCIQC0K5rEy2Pv BB6R4p/HKu6cl/O1QsHw7rVOszYtVLiodQIgObmDQrKYwuyQgpKxrLUV03SQMy0f VqwCEoWShWj7zbkAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA AYrlhUCvAAAEAwBHMEUCIAvbeyu+RdLOTBm9rjqrJrN3X5//tDGrx3Dhr0TyOATl AiEA8kzD5bvm71kSmNNcgfu/N7XKBTp6BNoSW3jj9QtqRCoAdgDuzdBk1dsazsVc t520zROiModGfLzs3sNRSFlGcR+1mwAAAYrlhUB8AAAEAwBHMEUCIQDvDWVcx+mW AT1XzJfGP5Zjp3lXj0/3HW+0Bg8nI2ywiAIgLWiqQrZK5dPigo5L9d+Ub7jFQOlO eMwU546XCaT0gtcwegYDVR0RBHMwcYITZ2F0ZXdheS5pZ2dyb3VwLm5ldIINKi5p Z2dyb3VwLm5ldIISYnJva2VyLmlnZ3JvdXAubmV0ghFwcm9kMS5pZ2dyb3VwLm5l dIIRcHJvZDIuaWdncm91cC5uZXSCEXJkd2ViLmlnZ3JvdXAubmV0MA0GCSqGSIb3 DQEBCwUAA4IBAQALwObr6Pfp5wTREqEMqY5D4MIdQ2zGOFz7s9xlZDdJRfrZsTA/ scbvLxQhWYjXLuaL654u9IvUxAYDcDQCAEeKK2orLYSwC9Z+KZ/Vp2KDkI7mDJdl JwRUD8ycGPQqI4uzMWjlZw2KxX2ZSh1CQU18UK+ur3+OnN7NwKHcksHMhv6v0wfa USRPjeeFSa5yru2N1268Av/yh1Lpq8oSVrTp3Xb+zHie/OFb+aTZdNedMbg1XZAa sDx0FNbPT/P3VHLjv3DUAplN4+3vR0U95ryY4fi0j3JMKGENRcoE4NTYFY69nOIR 2zFYOnrfydSeqWl38yRHWMXERNbUL9s8ZL0K -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBV/Tp3MedbYGP6GRFcF oeNx/JgGxVseG8IHDZHj6juv2ZNb8vJwGZpR/XIBJQUjj+JwpMxqYBLDRYI0hmbH cSZzahA/izPBHfTYa/wL/+8l6FJEP3BSlJalNeC4D9VkqU8HF27hCY8xMu/pa05a a4kvsUiHbbjxcANEnxYXezEL5kOpcYP/Mm8oOpjwcEvdotGyo70Qod86Bs23DdDB ksALlNJm7kchggWaEvbGGFQZcMaUzmQlQV32EfAOZLIzdZpn5ipSTeOTS8Yr1rD/ iz4Pd+gAbursi0b8A6g64jXJVDcPAH/nPoMNzEunCyDSo1Q9j1ZYXfaA5T/2+DCZ 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335876354003474032171378702378517778960 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IG Group Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gateway.iggroup.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21218635944738226001045632755357223611987361409470368252009019275624572418242916033330176519640585305470297021636539141452782485070034223892081921896222367084931169540045326214043297399976093164830215228962102231645527162350452149817173794565634649131593097595711660016322169744092360690591088418035866910678275343224014445835400538382202458559546979236364057984175170309412092628971836139323273278286299120683629059999018908540298847639148848777969016630785163510405763197551415711108605598730878380250917206973230498099494652847877219585737075179602534040064727808912027031466161551259742674912862999838017490819551 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf3f9c957b7f44e19ca76a16ce3b30b41d36f591 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.iggroup.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iggroup.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broker.iggroup.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1.iggroup.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod2.iggroup.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdweb.iggroup.net' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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