recovery.ingka.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 81:2e:69:15:93:99:5e:8f:10:00:a6:a1:4f:8f:74:11 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recovery.ingka.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 81:2e:69:15:93:99:5e:8f:10:00:a6:a1:4f:8f:74:11
Serial Number (int): 171711388474226254536074777902866986001
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 47:3a:20:50:d2:8d:f8:9d:6e:93:ba:e7:13:28:d0:f9:0d:74:78:6a
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 80:f1:b9:a1:3d:e9:65:91:99:27:c5:d0:0c:15:be:ef:30:5b:25:4f
Fingerprint (sha256): 03:6e:c4:a6:9d:7e:f4:d0:98:01:99:53:4b:d9:0e:4c:0b:64:f4:dc:85:41:16:3c:56:10:1c:00:7d:a9:d8:fe

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/AvJdixezWrI
CRL Distribution Point: http://crls.pki.goog/gts1d4/FAATSdS0y1Y.crl

Check the revocation status for certificate recovery.ingka.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recovery.ingka.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recovery.ingka.com

Other certificates including the domain name ingka.com

(limited to 100 certificates)
dep-react-17-x.buyback.dev.circular-ventures.ingka.com
push.prometheus.monitoring.ilo.ingka.com
ingkaincludes.ingka.com
ziplookup-server.cwtools.dev.csc.ingka.com
ingka.com
notification.irecover.stage.ilo.ingka.com
be-fr.cocreate.ingka.com
prod.returns.ingka.com
soim.ru-prod.ingka.com
cybersec.ingka.com
monitoring.irecover.dev.ilo.ingka.com
dev.cloud.ingka.com
le-26875723.34.77.165.130.nip.io
rest-api.stage.foundation.ingka.com
portal-test.rtsales.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
*.pmt.ingka.com
auth.workflows.dev.ingka.com
ctf.manager.api.ingka.com
irecover.ilo.ingka.com
hd-dtc.com
qa.csc-input.ingka.com
kr.cocreate.ingka.com
ingka.com
canteenapp.food.ingka.com
prod-hub-zz-loyalty-service.gke.ingka.com
test.translate.ingka.com
www.test.translate.ingka.com
api.data.dev.ilo.ingka.com
cir-1399.buyback.dev.circular-ventures.ingka.com
test-kiosk.rtsales.ingka.com
ingkadt.com
www.kerenku.com
partner.ingka.com
api-fix-monitoring-cate.buyback.dev.cir.ingka.com
origin.stage.flytta.ingka.com
dev-slm-zz-slm.gke.ingka.com
dev.10jobstool.ingka.com
nl.cocreate.ingka.com
origin.stage.case.ingka.com
mfs.ingka.com
playground.servicemesh.ingka.com
logs-pr-725.dev.context.ingka.com
stag.v1.simulator.uk.ap.fs.ingka.com
ingka.com
kilobytetechnology.com
recovery.ingka.com
stag.v1.order-status.eu.fs.ingka.com
greymatter-ms.aol.sandbox.ilo.ingka.com
cld.prod.serviceoffers.ingka.com
login.gogogarden.com
web3.aleph-labs.com
collector.monitoring.ingka.com
ctf.manager.api.ingka.com
api.prod.irecover.ilo.ingka.com
dev-slm-zz-slm.gke.ingka.com
cwtools.dev.csc.ingka.com
origin-gcp.ctf.api.ingka.com
backoffice-add-user-menu.buyback.dev.cir.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
docs.dev.case.ingka.com
www.6join.com
analytics.ikea.developyn.com
auth.workflows.dev.ingka.com
peopleplanning.ingka.com
item-ms.aol.dev.ilo.ingka.com
www.ikea.se
feed-nl-staging.stage-insp-feed.ingka.com
ui-origin.slm.ingka.com
auth.prod.foundation.ingka.com
aol-iws-service.aol.dev.ilo.ingka.com
origin.publicera.ingka.com
staging.kaskad.ingka.com
stage-checkout-location-us-locationservices.gke.ingka.com
prod.spe.ingka.com
rst-preprod.ingka.com
www.alaswaq.co
redirect.data.dev.ilo.ingka.com
proxy-to-vm-for-dev.insight-hub.ingka.com
unitdata.copos.ingka.com
top-items-api-test.rtsales.ingka.com
origin.test.salja.ingka.com
notification.irecover.ilo.ingka.com
ingka.com
api-cir-2406.buyback.dev.cir.ingka.com
prod-nowit-wrapper-ops-intel-aiops.gke.ingka.com
hackathon.test.returns.ingka.com
nl-feed-service.stage-insp-feed.ingka.com
*.dev.ingka.com
mfs.ingka.com
se.cocreate.ingka.com
dep-apps-buyback-client.buyback.dev.cir.ingka.com
ocpubsub.prd.igift.ingka.com
rest-alpha.splunk.ingka.com
mfs.ingka.com
aol-gm-service.aol.stage.ilo.ingka.com
stage-frontend-us-ms-waitwhile-analytics.gke.ingka.com
origin-gcp.ctf.api.ingka.com
dev.iquote.ingka.com
stage-prepaidcard-adapter-zz-prepaidcard.gke.ingka.com

Certificate

The complete raw certificate details for recovery.ingka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprZ4MC8IGkmHGnGWFH+1
AMEh6UQ34UwJoqf37ezVxBq/qGRqgSDEEbTF93qpeJ4ejo5RU+Sy0gDrbbBQAcq+
DZ1zT5oivk7gduSDqkHyGH+bbH+YjSeonW4E3jlpIGagexR61ksrWmOODKVHUzSw
eGvaEbYTtW3kHJ8HAGIGDLJEYenyugigZCOgkLl/5UzehJ2eigbb65ae4QF0F/X7
j/GjpnwpCP44HYFd1UCkI9ikd3UOP2CkvfkF+IjU9YWU4AztFhmjA2t78T4izaLA
1WfrRkPuQ7PdHWZ2N0JOvJ2RfPwKvRd0jNg3Gw7xtx3Lo8XV3jqd/Vh0MpiyGpl8
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 171711388474226254536074777902866986001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-20 12:59:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-18 12:59:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recovery.ingka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21045537681095637479490428954121605437060889272564078004606546395365444659847174713580108047626573372007491128008267512538883221659936042220963293542825691320896982323692042961170670890405228592440099946755882980837862396974422613357226747051037071941533912073042012164907629391934216442962383077567250149863458443521499913130808256633231982865579661144979675398811377992306340468213757073511270278724553089679923270710717041684811510844512615777291599570662093961097786596956321577088664018932904124144655736036384994588139101313179066065042831091174657698017028592229520091587088318425675914732216844887839605357779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							473a2050d28df89d6e93bae71328d0f90d74786a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/AvJdixezWrI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery.ingka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/FAATSdS0y1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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