ikea.com

- Inter IKEA Systems B.V. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:3b:af:d4:80:d7:79:45:8c:41:30:af:c8:c1:95:ba was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Inter IKEA Systems B.V.

Organization: Inter IKEA Systems B.V.
Organization unit: IT Production
State / Province: Zuid-Holland
Locality: Delft
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:3b:af:d4:80:d7:79:45:8c:41:30:af:c8:c1:95:ba
Serial Number (int): 17589875717783126241822046620066354618
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e6:f8:75:ca:ee:b1:85:92:91:5a:3b:51:a0:09:ac:fa:b5:f1:de:c9
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3d:69:a3:87:b1:1b:6c:41:f7:11:f8:aa:64:23:c7:5e:40:ea:fc:9d
Fingerprint (sha256): 00:6d:8b:db:4e:ed:d4:a8:45:21:91:71:10:61:b2:2f:46:cd:b1:7a:90:9b:c0:14:c9:39:08:eb:14:8b:23:e5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ikea.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ikea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ikea.com
secure.cf03.ikeadt.com
m.cte.ikeadt.com
checkout.th.staging.ikea.com
kitchenplanner4.ppe.ikea.net
secure.ctem.ikeadt.com
www.ppe2.ikeadt.com
kitchenplanner2.ppe.ikea.net
secureplanner.ppe.ikeadt.com
jira-test.build.ingka.ikea.com
ppe.des.ikeadt.com
checkout.ae.staging.ikea.com
checkout.tw.cte.ikeadt.com
order.ppe.ikeadt.com
www.ciptestf2.ikeadt.com
purchmanual.inter.ikeadt.com
secure2.cte.ikeadt.com
kitchen.planner.ikeadt.com
m.cte2.ikeadt.com
testppe10.plus.ikeadt.com
bathroomplanner.dev.ikeadt.com
order.cte.ikeadt.com
bathroomplanner.ppe.ikeadt.com
checkout.sg.cte.ikeadt.com
securema2.ppe.ikeadt.com
mmapi.ppe.ikeadt.com
bathroomplanner.cte.ikeadt.com
m.ppe.ikeadt.com
checkout.kw.staging.ikea.com
barcode.ingka.ikeadt.com
kiosk.kitchen.planner.ikeadt.com
securem.cte.ikeadt.com
checkout.staging.ikea.com
checkout.my.staging.ikea.com
ww8.cte.ikeadt.com
kitchenplanner.ppe.ikeadt.com
www2.cte.ikeadt.com
securem.ctem.ikeadt.com
m2.ppe.ikeadt.com
checkout.qa.staging.ikea.com
securema.ppe.ikeadt.com
securem.cte2.ikeadt.com
kitchenplanner3.ppe.ikea.net
secure.ppe2.ikeadt.com
secure.ppe.ikeadt.com
checkout.dev.ikea.com
secure.pte15.ikeadt.com
appointmentbooking.ppe.ikeadt.com
kpcms.ikeadt.com
testctef2.plus.ikeadt.com
secure.ppe4.ikeadt.com
checkout.eg.cte.ikeadt.com
securem.ppe2.ikeadt.com
www.cte.ikeadt.com
checkout.demo.ikea.com
www.ppe4.ikeadt.com
securem.ppe.ikeadt.com
kitchenplanner1.ppe.ikea.net
checkout.id.cte.ikeadt.com
www.ciptest.ikea.com
www.pte7.ikeadt.com
secure.cte2.ikeadt.com
www.cf03.ikeadt.com
securema2.dev.ikeadt.com
m.ctem.ikeadt.com
dev.arassetimages.ikea.com
salessimulator.kitchen.planner.ikeadt.com
profile.ppe.ikeadt.com
www.pte15.ikeadt.com
www.ctem.ikeadt.com
securem.cf03.ikeadt.com
www.ppe.ikeadt.com
m.cf03.ikeadt.com
m.ppe2.ikeadt.com
checkout.sg.staging.ikea.com
www.cte2.ikeadt.com
www2.ppe.ikeadt.com
secure.cte.ikeadt.com
ww8.ppe.ikeadt.com
www2.ctef2.ikeadt.com
secure2.ppe.ikeadt.com
m2.cte.ikeadt.com
ptetest.plus.ikeadt.com
testcte10.plus.ikeadt.com
secure2.ctef2.ikeadt.com
checkout.test.ikea.com
poc-kitchen.planner.ikeadt.com
secure.pte7.ikeadt.com

Other certificates including the domain name ikea.com

(limited to 100 certificates)
ikea.com
optiva.food.inter.ikea.com
support.home-design.ikea.com
ja-int-jobs.about.ikea.com
ikea.com
sso.qa.journeys.ikea.com
*.credential-provider.dh3-2.nebula.ikea.com
sv-int-jobs.about.ikea.com
ikea.com
fr-jobs.about.ikea.com
prod.6.slot.cdn.salesforce-communities.com
secure06.stage.lithium.com
ikea.com
franchisor.ikea.com
en-int-jobs.about.ikea.com
gfutils.com
ikea.com
*.glinux.dh3-1.nebula.ikea.com
ikea.com
everyday.ikea.com
es-int-jobs.about.ikea.com
*.om-performancetest-lab1.dh2-2.nebula.ikea.com
franchisor.ikea.com
ikea.com
ikea.com
sso.journeys.ikea.com
hub01.api.ikea.com
no-jobs.about.ikea.com
ikea.com
remote.ap-northeast-2.api.homesmart.ikea.com
ikea.com
*.s3.eun.nebula.ikea.com
hubble.lab.nebula.ikea.com
lt-int-jobs.about.ikea.com
sl-jobs.about.ikea.com
review.symfonisk.ikea.com
publications-ca-fr.ikea.com
sts.ikea.com
ikea.com
eu-west-3.iot.homesmart.ikea.com
sr-jobs.about.ikea.com
isfabdp.ikea.com
*.servicemesh.dh3-1.nebula.ikea.com
filewave.ikea.com
ms-jobs.about.ikea.com
de-ch-jobs.about.ikea.com
ikea.com
www.highlights.ikea.com
filewave.ikea.com
checkout.ua.staging.ikea.com
prod.6.slot.cdn.salesforce-communities.com
ikea.com
dev.t.qr.ikea.com
ikea.com
formularios.ikea.com
sustainableliving.ikea.com
ikea.com
ikea.com
en-global-jobs.about.ikea.com
goto.ikea.com
en-jobs.about.ikea.com
ae.accounts.ikea.com
da-jobs.about.ikea.com
*.credential-provider.dc8-1.nebula.ikea.com
*.ikea.com
*.demo-table1.dc7-1.nebula.ikea.com
secure.services.ikea.com
no-int-jobs.about.ikea.com
api.analytics.homesmart.ikea.com
qr.ikea.com
sr-int-jobs.about.ikea.com
eu-central-1.iot.homesmart.ikea.com
hr-int-jobs.about.ikea.com
dnstrd.ikea.com
api.nebulademo.spitzer.dev.nebula.ikea.com
ru-int-jobs.about.ikea.com
publications-jo-ar.ikea.com
publications-ext.ikea.com
pam-iig.ikea.com
idam.inter.ikea.com
oos.insideworkspaces.ikea.com
ikea.com
ikea.com
ikea.com
ikea.com
ikeadt.com
ikea.com
akamai-san41.exacttarget.com
usinincontact.ikea.com
secure.services.ikea.com
ikea.com
publications-ua-uk.ikea.com
everyday.ikea.com
ar-jobs.about.ikea.com
goto.ikea.com
Mail15.ikea.com
rana03.ikea.com
franchisor.ikea.com
ikea.com
ikea.com

Certificate

The complete raw certificate details for ikea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Ajnr52xq9v9gstbf+l
Ou1LByBkQfhQpHPo1nsaoLmjG8xeAyPLu0S4Cc67IA5G9e98TwgWEP03HFgn/s2g
SO5QKW7eXku3wkHGxtgzlBVsLxK4R95ZN+8I3onEpt1lf9v9KscILM5K7RjHAu3j
jcfYIfCTS5zmyq575a5LzA37QFmslBBvXGbl+r695VCE3rq5KQF0OgOcHPBeFAXc
EYjmgcTsQnL6QW4nM8TCapp6ebiweI4P0Pz10m//r4VsUc2ftEWbEbdKu++t0qjT
hSSg2T79PsMorPYGIBBiF79rSliYwE/6XiDzxnmsmr5St+C78kWQCBKoQLlkEBJ4
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17589875717783126241822046620066354618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inter IKEA Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Production'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24206263590221746813084766629558957434981568607789086656260904833360077013775289496616168330530602720842664425983832120855854245822515719247837593616075409983111015575557985888081961298016846953378120062608549562104265195395097205518708376885200193708824116299746708626740822670229162456847762658251447327036183357286976627070356556367651924176492068865150294515363582364058406409240285722393354494287830480045748347135944622576000107771673085596303144650526546716761289015007321880933105122358139356529843519240329299624826004783940901189737888327946189779912202793301934379644789806697698741937102565637278783404207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6f875caeeb18592915a3b51a009acfab5f1dec9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cf03.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.th.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner4.ppe.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ctem.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner2.ppe.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureplanner.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira-test.build.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.des.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ae.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.tw.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciptestf2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchmanual.inter.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cte2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroomplanner.dev.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroomplanner.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sg.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmapi.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroomplanner.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.kw.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barcode.ingka.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kitchen.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.my.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww8.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.ctem.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.qa.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.cte2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner3.ppe.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.dev.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pte15.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appointmentbooking.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpcms.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testctef2.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ppe4.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.eg.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.demo.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppe4.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner1.ppe.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.id.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciptest.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pte7.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cte2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cf03.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema2.dev.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ctem.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.arassetimages.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salessimulator.kitchen.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pte15.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctem.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.cf03.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cf03.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sg.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cte2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww8.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ctef2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptetest.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcte10.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.ctef2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.test.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poc-kitchen.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pte7.ikeadt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a0c2ad2f90000040300473045022100a57dda60aba8b3bfe9126d6a7ca506e527daf0091cce0717dbbb60fc268c430602204ab9a5f257e6cb7768ebb0e3892e7cf328d4f173e089e3ad1e20102ba11828510076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a0c2acf680000040300473045022055ae7523f01204de664c6c1a1eaabb3b5a40c9c6c27f2a963788d65e9cb95f9f022100863c7eee2d8a179e932733d50c124de3dc280ac809f06cc3a934d3aa60cdf293
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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