dev-slm-zz-slm.gke.ingka.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a9:34:ab:26:08:26:08:ba:10:4c:21:14:a4:70:26:8f was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev-slm-zz-slm.gke.ingka.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a9:34:ab:26:08:26:08:ba:10:4c:21:14:a4:70:26:8f
Serial Number (int): 224913002029528854006031029632091825807
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d5:bf:9a:99:6e:a8:84:ac:09:bf:8e:51:95:43:f5:d2:e5:11:5e:2f
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 06:a6:b2:15:8e:b3:0d:ff:d3:c0:e4:c2:59:c2:d1:45:42:67:69:59
Fingerprint (sha256): 04:02:f8:37:0b:07:d6:0d:e8:83:47:59:e5:92:c8:8e:4d:50:c9:9e:9b:90:e4:4c:e6:e8:bf:42:23:27:19:6f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/WSnpZTV4HmM
CRL Distribution Point: http://crls.pki.goog/gts1d4/OYfpKaWafnA.crl

Check the revocation status for certificate dev-slm-zz-slm.gke.ingka.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-slm-zz-slm.gke.ingka.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-slm-zz-slm.gke.ingka.com
dev.slm.ikea.net

Other certificates including the domain name ingka.com

(limited to 100 certificates)
dep-react-17-x.buyback.dev.circular-ventures.ingka.com
push.prometheus.monitoring.ilo.ingka.com
ingkaincludes.ingka.com
ziplookup-server.cwtools.dev.csc.ingka.com
ingka.com
notification.irecover.stage.ilo.ingka.com
be-fr.cocreate.ingka.com
prod.returns.ingka.com
soim.ru-prod.ingka.com
cybersec.ingka.com
monitoring.irecover.dev.ilo.ingka.com
dev.cloud.ingka.com
le-26875723.34.77.165.130.nip.io
rest-api.stage.foundation.ingka.com
portal-test.rtsales.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
*.pmt.ingka.com
auth.workflows.dev.ingka.com
ctf.manager.api.ingka.com
irecover.ilo.ingka.com
hd-dtc.com
qa.csc-input.ingka.com
kr.cocreate.ingka.com
ingka.com
canteenapp.food.ingka.com
prod-hub-zz-loyalty-service.gke.ingka.com
test.translate.ingka.com
www.test.translate.ingka.com
api.data.dev.ilo.ingka.com
cir-1399.buyback.dev.circular-ventures.ingka.com
test-kiosk.rtsales.ingka.com
ingkadt.com
www.kerenku.com
partner.ingka.com
api-fix-monitoring-cate.buyback.dev.cir.ingka.com
origin.stage.flytta.ingka.com
dev-slm-zz-slm.gke.ingka.com
dev.10jobstool.ingka.com
nl.cocreate.ingka.com
origin.stage.case.ingka.com
mfs.ingka.com
playground.servicemesh.ingka.com
logs-pr-725.dev.context.ingka.com
stag.v1.simulator.uk.ap.fs.ingka.com
ingka.com
kilobytetechnology.com
recovery.ingka.com
stag.v1.order-status.eu.fs.ingka.com
greymatter-ms.aol.sandbox.ilo.ingka.com
cld.prod.serviceoffers.ingka.com
login.gogogarden.com
web3.aleph-labs.com
collector.monitoring.ingka.com
ctf.manager.api.ingka.com
api.prod.irecover.ilo.ingka.com
dev-slm-zz-slm.gke.ingka.com
cwtools.dev.csc.ingka.com
origin-gcp.ctf.api.ingka.com
backoffice-add-user-menu.buyback.dev.cir.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
docs.dev.case.ingka.com
www.6join.com
analytics.ikea.developyn.com
auth.workflows.dev.ingka.com
peopleplanning.ingka.com
item-ms.aol.dev.ilo.ingka.com
www.ikea.se
feed-nl-staging.stage-insp-feed.ingka.com
ui-origin.slm.ingka.com
auth.prod.foundation.ingka.com
aol-iws-service.aol.dev.ilo.ingka.com
origin.publicera.ingka.com
staging.kaskad.ingka.com
stage-checkout-location-us-locationservices.gke.ingka.com
prod.spe.ingka.com
rst-preprod.ingka.com
www.alaswaq.co
redirect.data.dev.ilo.ingka.com
proxy-to-vm-for-dev.insight-hub.ingka.com
unitdata.copos.ingka.com
top-items-api-test.rtsales.ingka.com
origin.test.salja.ingka.com
notification.irecover.ilo.ingka.com
ingka.com
api-cir-2406.buyback.dev.cir.ingka.com
prod-nowit-wrapper-ops-intel-aiops.gke.ingka.com
hackathon.test.returns.ingka.com
nl-feed-service.stage-insp-feed.ingka.com
*.dev.ingka.com
mfs.ingka.com
se.cocreate.ingka.com
dep-apps-buyback-client.buyback.dev.cir.ingka.com
ocpubsub.prd.igift.ingka.com
rest-alpha.splunk.ingka.com
mfs.ingka.com
aol-gm-service.aol.stage.ilo.ingka.com
stage-frontend-us-ms-waitwhile-analytics.gke.ingka.com
origin-gcp.ctf.api.ingka.com
dev.iquote.ingka.com
stage-prepaidcard-adapter-zz-prepaidcard.gke.ingka.com

Certificate

The complete raw certificate details for dev-slm-zz-slm.gke.ingka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscvGf81HoQ8VdO9dKOcl
kumJ+DubjHHsjO1iPw+49lpkIApoSW9AKjVph5cstdGKlM0xd2Wgw+UrapYS73wm
MVyW+I/KwnIL/2Y3ukpyGwvMSVyDHZ8vlwcOdDSdfqP9V26+/upXRgIkcsTxB5Px
uW9C86BfxsKVhD6ft55AiP6SnZTBUa8t4K8P/3zidBtGLA6wqrZNQNugVs9q5OW6
bAVoxYroC8AiwQ8oN7NUbpio3AjzANIWv9dDSOYDEd3us3m/wEVrWSGuCj6lu5vQ
onLIDHfXkVQ6HIlJ7sXqQAf6rpQhVyvWM2jH9GOhdq6KkaHbiyITfyYH+2CLAg2I
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 224913002029528854006031029632091825807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 15:44:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 15:44:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-slm-zz-slm.gke.ingka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22444665367760571264901387483942892122686431069597570618835881869491907639595173065647250891137277575217705989634904395739521425176323258994668450365671376695947301041188127349143154925962452520533599647028630661922810514501565064457173737522219439832184275891459590473173606024744259969794982485825299359624632927518003919758595770706221251064601306844877413925903301569418974244532201880363008289010043203630932506064914895141673351141606032810132763012383261265226005606589135166818172101773631528737670538136667498748108252089880124215281895634343869686555027334779740647991201698285083872856425396832854069839891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5bf9a996ea884ac09bf8e519543f5d2e5115e2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/WSnpZTV4HmM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-slm-zz-slm.gke.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.slm.ikea.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/OYfpKaWafnA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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