wm.iggroup.com

- IG Group Limited -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 3a:69:ec:8b:32:eb:0a:c4:eb:12:02:ff:78:77:43:19 was issued on by COMODO CA Limited.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IG Group Limited

Organization: IG Group Limited
Organization unit: Microsoft Services
Organization unit: Unified Communications
Address: 25 Dowgate Hill
Address: Cannon Bridge House
Postal code: EC4R 2YA
State / Province: UK
Locality: London
Country: GB

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:69:ec:8b:32:eb:0a:c4:eb:12:02:ff:78:77:43:19
Serial Number (int): 77645212602810727721221451545314804505
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9d:06:fe:e7:21:5d:83:52:03:da:a1:bc:92:30:42:de:79:e9:ba:4b
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 7d:12:d1:4f:77:0b:31:7e:26:5a:8f:02:bb:36:f9:74:f5:ae:c4:88
Fingerprint (sha256): d5:44:02:80:f2:48:0f:f0:f6:a5:f5:6e:a6:8a:9e:13:8f:89:c7:57:04:27:29:69:1d:88:e6:04:e1:1e:92:fc

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate wm.iggroup.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wm.iggroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wm.iggroup.com
autodiscover.dailyfx.com
autodiscover.ig.com
autodiscover.igbank.ch
autodiscover.iggroup.com
autodiscover.iggroup.net
autodiscover.nadex.com
enterpriseregistration.dailyfx.com
enterpriseregistration.ig.com
enterpriseregistration.igbank.ch
enterpriseregistration.iggroup.com
enterpriseregistration.iggroup.net
enterpriseregistration.nadex.com
federation.iggroup.com
sts.iggroup.net

Other certificates including the domain name iggroup.com

(limited to 100 certificates)
incapsula.com
*.iggroup.com
*.iggroup.com
san-4-s1.tlsprovisioning.exacttarget.com
sfbaccessuk1.ig.com
edge.dtu.iggroup.net
sut.iggroup.com
iggroup.com
autodiscover.ig.com
autodiscover.ig.com
mail.iggroup.com
sts.iggroup.net
imperva.com
transfer.iggroup.com
sut.iggroup.com
access.ig.com
sfbaccessuk1.ig.com
saml.iggroup.com
incapsula.com
annualreport.iggroup.com
autodiscover.ig.com
pres.iggroup.com
mdm.iggroup.com
*.iggroup.com
mail0.iggroup.com
lyncdiscover.ig.com
www.iggroup.com
mdm.iggroup.com
mft.iggroup.com
mft.iggroup.com
incapsula.com
pres.iggroup.com
*.iggroup.com
autodiscover.ig.com
mdm2.iggroup.com
edge.dtu.iggroup.net
www.iggroup.com
cloud.email.iggroup.com
sfbaccessuk1.ig.com
mft.iggroup.com
pres.iggroup.com
sts.iggroup.net
net-saml.iggroup.com
san-4-s1.tlsprovisioning.exacttarget.com
lyncdiscover.ig.com
mft.test.iggroup.com
sts.iggroup.net
incapsula.com
sfbaccessuk1.ig.com
lyncdiscover.ig.com
autodiscover.ig.com
san-4-s1.tlsprovisioning.exacttarget.com
mft.iggroup.com
san-4-s1.tlsprovisioning.exacttarget.com
mft.test.iggroup.com
sts.iggroup.net
sut.iggroup.com
sfbaccessuk2.ig.com
annualreport.iggroup.com
sts.iggroup.net
www.iggroup.com
transfer.iggroup.com
iggroup.com
sut.iggroup.com
www.iggroup.com
annualreport.iggroup.com
annualreport.iggroup.com
www.iggroup.com
sfbaccesstest.ig.com
www.iggroup.com
sip.ig.com
www.iggroup.com
autodiscover.ig.com
sfbaccessuk2.ig.com
sfbaccessuk1.ig.com
www.iggroup.com
san-4-s1.tlsprovisioning.exacttarget.com
mft.iggroup.com
mdm3.iggroup.com
annualreport.iggroup.com
*.iggroup.com
www.iggroup.com
annualreport.iggroup.com
sfbaccesstest.ig.com
edge.dtu.iggroup.net
view.email.iggroup.com
mft.iggroup.com
autodiscover.ig.com
www.iggroup.com
sut.iggroup.com
www.iggroup.com
chat.iggroup.com
view.email.iggroup.com
sts.iggroup.net
lyncdiscover.ig.com
mail0.iggroup.com
web-saml.iggroup.com
annualreport.iggroup.com
sts.iggroup.net
mdm2.iggroup.com

Certificate

The complete raw certificate details for wm.iggroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuQ7nlT4hkdRObuCztA
bdZMugaafm5nICAKVAKX1FYioP5fOeY5+DnOQJQxSH1ga+sMaHbbl1ZAe5FNgPLK
GJ6MpyHoe3uluVhd6pasv24tossZ5BoN/iMYurEYkNyT1aUwZqaf/saEFI8kMJvB
zjkc/6+K2zMFLWbXzSPYWNwF93VezZXLa80S4qL+dDC79oR/oxm0Flf3FkkiP+Nx
RdzqgacWohRiU/xuPQyc3GKYpvr3qWEj61S4U9rChzUZBGH5wHwMGXHGpdeIp3hr
z4r4Ndljpd+kaHKUtM5McxIav1g4PW0CNXytbVM5jVFvhPbaxUr6LRKooMdJASlM
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 77645212602810727721221451545314804505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC4R 2YA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '25 Dowgate Hill'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cannon Bridge House'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IG Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wm.iggroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20874473265326876284185426060775819756661703536618513031207026505969341698588067670677208137797164381662712058467104376271940993191195584211051094999750595189691237421976194057744929646493499254425707821156468581693711674591910171015558702544986652409887780731650386789623898834191479754305043480017814326834111983042160758812103947986863499548869251425018785255198507891248759925791901704858272591722061625953063806075626340511627503304600666777439377219305530177095064731652214390490185588672401574294389065774450326121183126391544545442342547090854097838055475055202231151391411226420899735569163142556770531626169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d06fee7215d835203daa1bc923042de79e9ba4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dailyfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.igbank.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iggroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.dailyfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.igbank.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.iggroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.nadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federation.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.iggroup.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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