ikea.com

- Inter IKEA Systems B.V. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:5c:b0:c2:54:25:2b:b7:53:2f:db:00:8a:62:25:3c was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Inter IKEA Systems B.V.

Organization: Inter IKEA Systems B.V.
Organization unit: IT Production
State / Province: Zuid-Holland
Locality: Delft
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:5c:b0:c2:54:25:2b:b7:53:2f:db:00:8a:62:25:3c
Serial Number (int): 20419696348154390220483925790605583676
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d5:d1:6b:3c:e3:f8:aa:ea:31:0c:d0:68:ec:99:d0:ed:b1:4c:29:9f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): e6:5b:48:69:06:d2:a6:dc:7c:02:85:a6:30:97:c8:30:71:14:49:8e
Fingerprint (sha256): 04:f2:a5:5d:93:0a:33:7b:96:1d:ef:6f:b3:db:0e:f6:12:22:30:31:9a:e4:22:8d:19:9d:c3:65:9f:90:97:d3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ikea.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ikea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ikea.com
testcte10.plus.ikeadt.com
secure2.cte.ikeadt.com
m.ppe2.ikeadt.com
securem.ctem.ikeadt.com
www.ppe2.ikeadt.com
securema2.dev.ikeadt.com
www.ppe4.ikeadt.com
kitchenplanner2.ppe.ikea.net
securem.cte2.ikeadt.com
www.pte7.ikeadt.com
kitchenplanner.ppe.ikeadt.com
checkout.sg.cte.ikeadt.com
www.pte15.ikeadt.com
www.ciptestf2.ikeadt.com
kitchenplanner3.ppe.ikea.net
checkout.id.cte.ikeadt.com
profile.ppe.ikeadt.com
checkout.demo.ikea.com
retail.api.ppe.ikeadt.com
bathroomplanner.cte.ikeadt.com
m.ctem.ikeadt.com
secure.ppe2.ikeadt.com
www2.ppe.ikeadt.com
ptetest.plus.ikeadt.com
kitchenplanner1.ppe.ikea.net
checkout.dev.ikea.com
secure.pte8.ikeadt.com
m2.ppe.ikeadt.com
ppe.des.ikeadt.com
www.cf03.ikeadt.com
checkout.tw.cte.ikeadt.com
m2.cte.ikeadt.com
secureplanner.ppe.ikeadt.com
secure.ctem.ikeadt.com
securema.ppe.ikeadt.com
secure.cf03.ikeadt.com
secure.ppe4.ikeadt.com
secure.pte7.ikeadt.com
secure.pte15.ikeadt.com
secure.ctef3.ikeadt.com
www2.cte.ikeadt.com
securem.cf03.ikeadt.com
secure.ppe.ikeadt.com
ww8.ppe.ikeadt.com
checkout.my.staging.ikea.com
securem.cte.ikeadt.com
dev.arassetimages.ikea.com
www.ppe.ikeadt.com
www.cte.ikeadt.com
secure2.ppe.ikeadt.com
secure.cte.ikeadt.com
testctef2.plus.ikeadt.com
checkout.eg.cte.ikeadt.com
bathroomplanner.dev.ikeadt.com
www.ciptest.ikea.com
retail.api.ppe2.ikeadt.com
www.pte8.ikeadt.com
bathroomplanner.ppe.ikeadt.com
checkout.test.ikea.com
securem.ppe.ikeadt.com
secure.ppe5.ikeadt.com
testppe10.plus.ikeadt.com
www2.ctef2.ikeadt.com
m.cte2.ikeadt.com
checkout.staging.ikea.com
ww8.cte.ikeadt.com
m.cte.ikeadt.com
secure.cte2.ikeadt.com
www.cte2.ikeadt.com
secure2.ctef2.ikeadt.com
mmapi.ppe.ikeadt.com
kitchenplanner4.ppe.ikea.net
m.cf03.ikeadt.com
order.ppe.ikeadt.com
www.ctem.ikeadt.com
securema2.ppe.ikeadt.com
www.ctef3.ikeadt.com
securem.ppe2.ikeadt.com
checkout.sg.staging.ikea.com
m.ppe.ikeadt.com
www.ppe5.ikeadt.com

Other certificates including the domain name ikea.com

(limited to 100 certificates)
ikea.com
optiva.food.inter.ikea.com
support.home-design.ikea.com
ja-int-jobs.about.ikea.com
ikea.com
sso.qa.journeys.ikea.com
*.credential-provider.dh3-2.nebula.ikea.com
sv-int-jobs.about.ikea.com
ikea.com
fr-jobs.about.ikea.com
prod.6.slot.cdn.salesforce-communities.com
secure06.stage.lithium.com
ikea.com
franchisor.ikea.com
en-int-jobs.about.ikea.com
gfutils.com
ikea.com
*.glinux.dh3-1.nebula.ikea.com
ikea.com
everyday.ikea.com
es-int-jobs.about.ikea.com
*.om-performancetest-lab1.dh2-2.nebula.ikea.com
franchisor.ikea.com
ikea.com
ikea.com
sso.journeys.ikea.com
hub01.api.ikea.com
no-jobs.about.ikea.com
ikea.com
remote.ap-northeast-2.api.homesmart.ikea.com
ikea.com
*.s3.eun.nebula.ikea.com
hubble.lab.nebula.ikea.com
lt-int-jobs.about.ikea.com
sl-jobs.about.ikea.com
review.symfonisk.ikea.com
publications-ca-fr.ikea.com
sts.ikea.com
ikea.com
eu-west-3.iot.homesmart.ikea.com
sr-jobs.about.ikea.com
isfabdp.ikea.com
*.servicemesh.dh3-1.nebula.ikea.com
filewave.ikea.com
ms-jobs.about.ikea.com
de-ch-jobs.about.ikea.com
ikea.com
www.highlights.ikea.com
filewave.ikea.com
checkout.ua.staging.ikea.com
prod.6.slot.cdn.salesforce-communities.com
ikea.com
dev.t.qr.ikea.com
ikea.com
formularios.ikea.com
sustainableliving.ikea.com
ikea.com
ikea.com
en-global-jobs.about.ikea.com
goto.ikea.com
en-jobs.about.ikea.com
ae.accounts.ikea.com
da-jobs.about.ikea.com
*.credential-provider.dc8-1.nebula.ikea.com
*.ikea.com
*.demo-table1.dc7-1.nebula.ikea.com
secure.services.ikea.com
no-int-jobs.about.ikea.com
api.analytics.homesmart.ikea.com
qr.ikea.com
sr-int-jobs.about.ikea.com
eu-central-1.iot.homesmart.ikea.com
hr-int-jobs.about.ikea.com
dnstrd.ikea.com
api.nebulademo.spitzer.dev.nebula.ikea.com
ru-int-jobs.about.ikea.com
publications-jo-ar.ikea.com
publications-ext.ikea.com
pam-iig.ikea.com
idam.inter.ikea.com
oos.insideworkspaces.ikea.com
ikea.com
ikea.com
ikea.com
ikea.com
ikeadt.com
ikea.com
akamai-san41.exacttarget.com
usinincontact.ikea.com
secure.services.ikea.com
ikea.com
publications-ua-uk.ikea.com
everyday.ikea.com
ar-jobs.about.ikea.com
goto.ikea.com
Mail15.ikea.com
rana03.ikea.com
franchisor.ikea.com
ikea.com
ikea.com

Certificate

The complete raw certificate details for ikea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7YyTJ8z1M70YUd8Lks3
y6fs3942whGojfVAEQbLZI48ytkHE6EGOSv5M0q6a7gRX4LNv4qrVpEF5IaoElqj
+RuULs1C8Rj3tEJtIDuHq5021t3PjE/SamZyBQh4Zq3MhBAWTBs9KAv1f4+s5cP0
OeLaflAf4ZKLdo/uv5sPrYqvGIDMyBdRwCI6xFnzHRvzDvUpWnjB1u1wqtGkztof
5MYDdXtBP4dBV09FdBi/qTCLOpPPlmyoed5uW5T5w/VOhgNXj1UwUTMRn2UAotPa
8fbODMqs1rg371L03EJoVof2s0VoediZD0kFfE5KuJfeh7MmKNdblZ9dgylcn2h+
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20419696348154390220483925790605583676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inter IKEA Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Production'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19151828483527904252516839211256548893424530894186192505382780025974398234082490147797920865137030842595617700881809300870526959622418153991544815959186873635683921366344627915693805855126960775294628101247127359888813193944469313786389363227918754578120204681596064029958457383571006150845636690020644236021492954913604610324330081226411353501955577957769780201437072450872347648478865877613626234332485054401288756973161769114353727440154892669144496563408320849350801634437173105892074439281821497486036167076313384044817982558689521096150669586185267268310260888681956394287721010856913011993132607508273938595543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5d16b3ce3f8aaea310cd068ec99d0edb14c299f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1980 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcte10.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.ctem.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema2.dev.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppe4.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner2.ppe.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.cte2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pte7.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sg.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pte15.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciptestf2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner3.ppe.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.id.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.demo.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.api.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroomplanner.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ctem.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptetest.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner1.ppe.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.dev.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pte8.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.des.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cf03.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.tw.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureplanner.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ctem.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cf03.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ppe4.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pte7.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pte15.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ctef3.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.cf03.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww8.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.my.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.arassetimages.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testctef2.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.eg.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroomplanner.dev.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciptest.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.api.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pte8.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroomplanner.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.test.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ppe5.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ctef2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cte2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww8.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cte2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cte2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.ctef2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmapi.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner4.ppe.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cf03.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctem.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctef3.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.ppe2.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sg.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppe5.ikeadt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000162dd780a560000040300473045022037fd6bdff721fd648f82cfcf9f9efafc586d2c5f93158f3589813b4a20837307022100dab75e73246cf903267d420bdcd92532ab4dd36967b36b50bb2e4e29d89faa240075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162dd780bc30000040300463044022069f84b57ebb74679368d52c2cea6c8648d283794dcc80e1b91f9bfa916ab3ed1022040f3c50189f20e401142e513acf5176890a970da6f3b32d9025b21b61eead744
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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