DV SSL/TLS Certificate for *.cwgmarkets.co.uk

Certificate is witin its validity period

Issued by SSL2BUY EMEA LLC (SSL2BUY EMEA RSA Domain Validation Secure Server CA)

About the *.cwgmarkets.co.uk DV SSL/TLS Certificate

This certificate with serial number a9:8f:4e:43:20:9a:b9:7e:d3:8f:37:b3:04:a3:f3:f3 for *.cwgmarkets.co.uk was issued on by SSL2BUY EMEA LLC.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.cwgmarkets.co.uk provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSL2BUY EMEA LLC

Organization: SSL2BUY EMEA LLC
Country: AE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): a9:8f:4e:43:20:9a:b9:7e:d3:8f:37:b3:04:a3:f3:f3
Serial Number (int): 225383617084747807025464184585056416755
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: f1:f9:cd:c6:41:ab:ce:e9:7d:44:48:3a:b6:f5:46:b4:76:f4:c6:35
Authority Key Identifier: 81:59:48:c9:ba:e5:00:6f:df:b7:ff:50:c5:ab:ef:dd:e6:e4:ae:90

Fingerprint (SHA-1): 6b:95:49:12:7c:96:28:a9:73:6f:23:d8:8a:22:99:dd:3f:f9:01:ff
Fingerprint (SHA-256): 12:b8:58:67:50:6f:b5:06:35:6a:71:75:dc:3d:05:b9:f6:50:f6:d1:8a:6b:98:5b:d8:43:d5:0c:62:1e:52:69

Issuing Certificate URL: http://crt.sectigo.com/SSL2BUYEMEARSADomainValidationSecureServerCA.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.cwgmarkets.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.cwgmarkets.co.uk

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.cwgmarkets.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBMygAwIBAgIRAKmPTkMgmrl+0483swSj8/MwDQYJKoZIhvcNAQELBQAw
ZjELMAkGA1UEBhMCQUUxGTAXBgNVBAoTEFNTTDJCVVkgRU1FQSBMTEMxPDA6BgNV
BAMTM1NTTDJCVVkgRU1FQSBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yNTA2MjUwMDAwMDBaFw0yNjA3MjUyMzU5NTlaMB0xGzAZBgNV
BAMMEiouY3dnbWFya2V0cy5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBANlDkHtrchUBTStMigyKEHMiKv4UmaWse5V/GkttufM6L+UfGYsDPd+7
Ftb1x33viBfCac24lNLZv1eAhl3POGNoISZvL7epydRLE3e0eUkt4pUJV1nls9tq
ApD+newMdpyiUGEr6+4AvAhFtMvmXgAJYSV9Xh0RyJ+b1tB420pGvSxwaeGHyuwW
o5vPZ04sLSTGTOKKXA/W4qmqjEs++ikx/XRKWaob6/JVhmZbVnkhzothYZflmShB
qkZ82qOxMIDzeY8s0bHmoSlEKYIIOyxYp+qD+yzckQGn5nAUibW9eOWlDkUt61gZ
+U5vcEdxgKazZSnYSbZdQIvKjLlhDIsCAwEAAaOCAtQwggLQMB8GA1UdIwQYMBaA
FIFZSMm65QBv37f/UMWr793m5K6QMB0GA1UdDgQWBBTx+c3GQavO6X1ESDq29Ua0
dvTGNTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gBAwwCjAIBgZngQwBAgEwgYgGCCsGAQUF
BwEBBHwwejBTBggrBgEFBQcwAoZHaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TU0wy
QlVZRU1FQVJTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYI
KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMC8GA1UdEQQoMCaCEiou
Y3dnbWFya2V0cy5jby51a4IQY3dnbWFya2V0cy5jby51azCCAX4GCisGAQQB1nkC
BAIEggFuBIIBagFoAHYA2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYPFdEucrtFSxQA
AAGXpdQNOgAABAMARzBFAiAuhVJGsrHXN6COY2KIWNWi+vQBwe/kKsj5nrUytCt4
uQIhAMoYkkFAQGb/o1eNZO5f/kK9r9lDvc4X4p6PAh0tRwlmAHYArKswcGzr7IQx
9BPS9JFfER5CJEOx8qaMTzwrO6ceAsMAAAGXpdQNMgAABAMARzBFAiAR/ItmIvKM
lqcgV58w5XkTxhZKqldvrMWgU+/H1nHBWwIhAJvLDxjOacJcDZvTz5jaijOHas9y
zk4G0U6hzwyrIhz/AHYA1219ENGn9XfCx+lf1wC/+YLJM1pl4dCzAXMXwMjFaXcA
AAGXpdQM0QAABAMARzBFAiB33W3500jxnrTtEAMyrnzTvm0Z34KRwsVFDkSAfLVn
bAIhAO8Uq6pteHqJ1wXVWa4MmyveYoqWmLCQwipNK2quqEO4MA0GCSqGSIb3DQEB
CwUAA4IBgQB0cQqVnoyLRSAcTgQcqOF0VLueuvHD59+cXfjNdvEXljSG28MstJz7
YYBFYAygQyy4nPgwqKOTrn0Do3RZElD+gD1cwaK0Z0s1BiRFkNL6u/kQqK94waZY
0wUwjtsjc15nJIeqFZbbqwES+gsRN4QQ4ykleq5kMNhMffGT7jJa6Hc1zWTesiVR
2VFNoE7AgxMcdqM0Ck1gO40OjgQq0XiWF5/Ejg4AJbz9qaS8AIgAUYn+6/eQc1wi
88zfBblvHm57WEXHBkqnyNfjjyd3nmi2U0QIjABRDJnHekbs5c9HtVvAxBDnPebT
19L6QipGfROfEJ2srdAR47unjUFi6HmQXK1oK0eR8eHz2mqrT9Re8CMRNAqHRKex
TMB8LwFsNl8ie2mIz11Dt/bTNzHOrm09divc9DV21ciIgfDc3b/CYdFytMhos4AG
ttH2Q9UUVsOFSxY0CetP3zOJ9qsI80uPVleH9V/8uqIAXwZe7X/fWrCiiPFxZDQ+
PSZA0I028XE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UOQe2tyFQFNK0yKDIoQ
cyIq/hSZpax7lX8aS2258zov5R8ZiwM937sW1vXHfe+IF8JpzbiU0tm/V4CGXc84
Y2ghJm8vt6nJ1EsTd7R5SS3ilQlXWeWz22oCkP6d7Ax2nKJQYSvr7gC8CEW0y+Ze
AAlhJX1eHRHIn5vW0HjbSka9LHBp4YfK7Bajm89nTiwtJMZM4opcD9biqaqMSz76
KTH9dEpZqhvr8lWGZltWeSHOi2Fhl+WZKEGqRnzao7EwgPN5jyzRseahKUQpggg7
LFin6oP7LNyRAafmcBSJtb145aUORS3rWBn5Tm9wR3GAprNlKdhJtl1Ai8qMuWEM
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 225383617084747807025464184585056416755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL2BUY EMEA LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL2BUY EMEA RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cwgmarkets.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27427029416758561505227430932330664406615009844689751706404687466937565345088006988358021385993959063196286476700063886878508240780819132874217407721785497806811471781074372181055755627483417080892076269498323575342269059971319428583470516517519113171658042517004606855647623899732929417576028585556706442466014603673905996666646552811524572901628271771235072972068033094456277019641836914481976373791418865753378649582119752278902357366616710163905079619128878286572517418405884046756814193711688670831971563040727723650024667786229863442712369367372556266988620510241007406705826794156546800784213437676785684778123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 815948c9bae5006fdfb7ff50c5abefdde6e4ae90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1f9cdc641abcee97d44483ab6f546b476f4c635
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SSL2BUYEMEARSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwgmarkets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwgmarkets.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b1400000197a5d40d3a000004030047304502202e855246b2b1d737a08e63628858d5a2faf401c1efe42ac8f99eb532b42b78b9022100ca189241404066ffa3578d64ee5ffe42bdafd943bdce17e29e8f021d2d470966007600acab30706cebec8431f413d2f4915f111e422443b1f2a68c4f3c2b3ba71e02c300000197a5d40d320000040300473045022011fc8b6622f28c96a720579f30e57913c6164aaa576facc5a053efc7d671c15b0221009bcb0f18ce69c25c0d9bd3cf98da8a33876acf72ce4e06d14ea1cf0cab221cff007600d76d7d10d1a7f577c2c7e95fd700bff982c9335a65e1d0b3017317c0c8c5697700000197a5d40cd10000040300473045022077dd6df9d348f19eb4ed100332ae7cd3be6d19df8291c2c5450e44807cb5676c022100ef14abaa6d787a89d705d559ae0c9b2bde628a9698b090c22a4d2b6aaea843b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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