wm.iggroup.com

- IG Group Limited -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 3a:69:ec:8b:32:eb:0a:c4:eb:12:02:ff:78:77:43:19 was issued on by COMODO CA Limited.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IG Group Limited

Organization: IG Group Limited
Organization unit: Microsoft Services
Organization unit: Unified Communications
Address: 25 Dowgate Hill
Address: Cannon Bridge House
Postal code: EC4R 2YA
State / Province: UK
Locality: London
Country: GB

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:69:ec:8b:32:eb:0a:c4:eb:12:02:ff:78:77:43:19
Serial Number (int): 77645212602810727721221451545314804505
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9d:06:fe:e7:21:5d:83:52:03:da:a1:bc:92:30:42:de:79:e9:ba:4b
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): e2:28:8c:ba:14:ab:53:f3:09:bb:33:7d:e4:45:86:ba:04:99:fd:7d
Fingerprint (sha256): d8:3f:84:eb:3d:c6:ff:84:bf:18:af:b6:d3:e0:07:53:40:cb:1c:4b:59:3d:51:95:d6:6b:ba:e3:fb:c9:3c:ea

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate wm.iggroup.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wm.iggroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wm.iggroup.com
autodiscover.dailyfx.com
autodiscover.ig.com
autodiscover.igbank.ch
autodiscover.iggroup.com
autodiscover.iggroup.net
autodiscover.nadex.com
enterpriseregistration.dailyfx.com
enterpriseregistration.ig.com
enterpriseregistration.igbank.ch
enterpriseregistration.iggroup.com
enterpriseregistration.iggroup.net
enterpriseregistration.nadex.com
federation.iggroup.com
sts.iggroup.net

Other certificates including the domain name iggroup.com

(limited to 100 certificates)
incapsula.com
*.iggroup.com
*.iggroup.com
san-4-s1.tlsprovisioning.exacttarget.com
sfbaccessuk1.ig.com
edge.dtu.iggroup.net
sut.iggroup.com
iggroup.com
autodiscover.ig.com
autodiscover.ig.com
mail.iggroup.com
sts.iggroup.net
imperva.com
transfer.iggroup.com
sut.iggroup.com
access.ig.com
sfbaccessuk1.ig.com
saml.iggroup.com
incapsula.com
annualreport.iggroup.com
autodiscover.ig.com
pres.iggroup.com
mdm.iggroup.com
*.iggroup.com
mail0.iggroup.com
lyncdiscover.ig.com
www.iggroup.com
mdm.iggroup.com
mft.iggroup.com
mft.iggroup.com
incapsula.com
pres.iggroup.com
*.iggroup.com
autodiscover.ig.com
mdm2.iggroup.com
edge.dtu.iggroup.net
www.iggroup.com
cloud.email.iggroup.com
sfbaccessuk1.ig.com
mft.iggroup.com
pres.iggroup.com
sts.iggroup.net
net-saml.iggroup.com
san-4-s1.tlsprovisioning.exacttarget.com
lyncdiscover.ig.com
mft.test.iggroup.com
sts.iggroup.net
incapsula.com
sfbaccessuk1.ig.com
lyncdiscover.ig.com
autodiscover.ig.com
san-4-s1.tlsprovisioning.exacttarget.com
mft.iggroup.com
san-4-s1.tlsprovisioning.exacttarget.com
mft.test.iggroup.com
sts.iggroup.net
sut.iggroup.com
sfbaccessuk2.ig.com
annualreport.iggroup.com
sts.iggroup.net
www.iggroup.com
transfer.iggroup.com
iggroup.com
sut.iggroup.com
www.iggroup.com
annualreport.iggroup.com
annualreport.iggroup.com
www.iggroup.com
sfbaccesstest.ig.com
www.iggroup.com
sip.ig.com
www.iggroup.com
autodiscover.ig.com
sfbaccessuk2.ig.com
sfbaccessuk1.ig.com
www.iggroup.com
san-4-s1.tlsprovisioning.exacttarget.com
mft.iggroup.com
mdm3.iggroup.com
annualreport.iggroup.com
*.iggroup.com
www.iggroup.com
annualreport.iggroup.com
sfbaccesstest.ig.com
edge.dtu.iggroup.net
view.email.iggroup.com
mft.iggroup.com
autodiscover.ig.com
www.iggroup.com
sut.iggroup.com
www.iggroup.com
chat.iggroup.com
view.email.iggroup.com
sts.iggroup.net
lyncdiscover.ig.com
mail0.iggroup.com
web-saml.iggroup.com
annualreport.iggroup.com
sts.iggroup.net
mdm2.iggroup.com

Certificate

The complete raw certificate details for wm.iggroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuQ7nlT4hkdRObuCztA
bdZMugaafm5nICAKVAKX1FYioP5fOeY5+DnOQJQxSH1ga+sMaHbbl1ZAe5FNgPLK
GJ6MpyHoe3uluVhd6pasv24tossZ5BoN/iMYurEYkNyT1aUwZqaf/saEFI8kMJvB
zjkc/6+K2zMFLWbXzSPYWNwF93VezZXLa80S4qL+dDC79oR/oxm0Flf3FkkiP+Nx
RdzqgacWohRiU/xuPQyc3GKYpvr3qWEj61S4U9rChzUZBGH5wHwMGXHGpdeIp3hr
z4r4Ndljpd+kaHKUtM5McxIav1g4PW0CNXytbVM5jVFvhPbaxUr6LRKooMdJASlM
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 77645212602810727721221451545314804505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC4R 2YA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '25 Dowgate Hill'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cannon Bridge House'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IG Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wm.iggroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20874473265326876284185426060775819756661703536618513031207026505969341698588067670677208137797164381662712058467104376271940993191195584211051094999750595189691237421976194057744929646493499254425707821156468581693711674591910171015558702544986652409887780731650386789623898834191479754305043480017814326834111983042160758812103947986863499548869251425018785255198507891248759925791901704858272591722061625953063806075626340511627503304600666777439377219305530177095064731652214390490185588672401574294389065774450326121183126391544545442342547090854097838055475055202231151391411226420899735569163142556770531626169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d06fee7215d835203daa1bc923042de79e9ba4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dailyfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.igbank.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iggroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.dailyfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.ig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.igbank.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.iggroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.nadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federation.iggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.iggroup.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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