identityiq.ikano.nu
- Ikano Bank AB (Publ) -
Issued by GlobalSign Extended Validation CA - SHA256 - G3
About this certificate
This digital certificate with serial number 22:d0:bb:e3:96:f6:01:e2:33:7a:1f:b3 was issued on by GlobalSign nv-sa.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Ikano Bank AB (Publ)
Company registration number:
516406-0922
Organization: Ikano Bank AB (Publ)
Organization: Ikano Bank AB (Publ)
Address:
Hyllie Boulevard 27
State / Province: Skåne
Locality: Malmö
Country: SE
State / Province: Skåne
Locality: Malmö
Country: SE
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 22:d0:bb:e3:96:f6:01:e2:33:7a:1f:b3Serial Number (int): 10774834185226660581702508467
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: c7:5f:bf:33:1f:74:a1:02:33:3a:21:1d:d8:45:c3:da:1f:90:b7:75
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d
Fingerprint (sha1): a4:8d:72:ae:d2:3e:6b:7b:33:46:61:6c:dc:e9:15:a5:13:d3:c3:9c
Fingerprint (sha256): 06:4e:b3:43:76:dc:35:fc:16:7d:39:bd:9f:6c:85:b1:e6:65:06:ba:7d:3a:4a:88:6a:22:1e:32:1f:fa:17:06
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl
Check the revocation status for certificate identityiq.ikano.nu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for identityiq.ikano.nu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
identityiq.ikano.nu
Other certificates including the domain name ikano.nu
(limited to 100 certificates)
apianalytics.ikano.nu
selfservice.ikano.dk
mail.ikano.nu
Identitynow.ikano.nu
identityiq.ikano.nu
citrix.ikano.nu
view.ikano.nu
api.ikano.nu
esb.ikano.nu
citrix.ikano.nu
selfservice.ikano.dk
view.ikano.nu
maileuq.ikano.nu
uat.newlook.ikano.nu
apipte.ikano.nu
citrix.ikano.nu
ecore.ikano.nu
ecore.ikano.nu
mail1.ikano.nu
Identitynow.ikano.nu
pte.ikano.merchantportal.ikano.nu
mailguard1.ikano.nu
esb.ikano.nu
pvmdc1linise002.ikano.nu
UAT.SVN.Ikano.Nu
esb.ikano.nu
hopex.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
citrix.ikano.nu
crm.ikano.nu
apiuat.ikano.nu
dev01.apitest.ikano.nu
Identitynow-sso.ikano.nu
ikano.merchantportal.ikano.nu
hopex.ikano.nu
mail.ikano.nu
mail1.ikano.nu
adfs.ikano.nu
CHAT.IKANO.NU
view.ikano.nu
crm.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
crm.ikano.nu
api.ikano.nu
uat.hopex.ikano.nu
maileuq.ikano.nu
mail.ikano.nu
sip.ikano.nu
kampanj.ikano.nu
access.ikano.nu
adfs.ikano.nu
view.ikano.nu
maileuq.ikano.nu
api.ikano.nu
mail.ikano.nu
esb.ikano.nu
tm.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
sbm.ikano.nu
adfs.ikano.nu
adfs.ikano.nu
uat.crm.ikano.nu
citrix.ikano.nu
pte.onlineshop.ikano.nu
vdi.ikano.nu
mail.ikano.nu
LyncWebDC.ikano.nu
maconomy.ikano.nu
citrix.ikano.nu
maileuq.ikano.nu
identitynow.ikano.nu
uat.identityiq.ikano.nu
sip.ikano.nu
apipte.ikano.nu
uat.newlook.ikano.nu
adfs.ikano.nu
access.ikano.nu
sbm.ikano.nu
apiuat.ikano.nu
api.ikano.nu
pte.onlineshop.ikano.nu
mail1.ikano.nu
snowexternal.ikano.nu
vcse.ikano.nu
vdi.ikano.nu
uat.crm.ikano.nu
dev01.apitest.ikano.nu
mail.ikano.nu
oobdc1.ikano.nu
maileuq.ikano.nu
sts.ikano.nu
ise.ikano.nu
apipte.ikano.nu
sbm.ikano.nu
LyncWebDC.ikano.nu
nlease2.ikano.nu
maileuq.ikano.nu
selfservice.ikano.dk
mail.ikano.nu
Identitynow.ikano.nu
identityiq.ikano.nu
citrix.ikano.nu
view.ikano.nu
api.ikano.nu
esb.ikano.nu
citrix.ikano.nu
selfservice.ikano.dk
view.ikano.nu
maileuq.ikano.nu
uat.newlook.ikano.nu
apipte.ikano.nu
citrix.ikano.nu
ecore.ikano.nu
ecore.ikano.nu
mail1.ikano.nu
Identitynow.ikano.nu
pte.ikano.merchantportal.ikano.nu
mailguard1.ikano.nu
esb.ikano.nu
pvmdc1linise002.ikano.nu
UAT.SVN.Ikano.Nu
esb.ikano.nu
hopex.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
citrix.ikano.nu
crm.ikano.nu
apiuat.ikano.nu
dev01.apitest.ikano.nu
Identitynow-sso.ikano.nu
ikano.merchantportal.ikano.nu
hopex.ikano.nu
mail.ikano.nu
mail1.ikano.nu
adfs.ikano.nu
CHAT.IKANO.NU
view.ikano.nu
crm.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
crm.ikano.nu
api.ikano.nu
uat.hopex.ikano.nu
maileuq.ikano.nu
mail.ikano.nu
sip.ikano.nu
kampanj.ikano.nu
access.ikano.nu
adfs.ikano.nu
view.ikano.nu
maileuq.ikano.nu
api.ikano.nu
mail.ikano.nu
esb.ikano.nu
tm.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
sbm.ikano.nu
adfs.ikano.nu
adfs.ikano.nu
uat.crm.ikano.nu
citrix.ikano.nu
pte.onlineshop.ikano.nu
vdi.ikano.nu
mail.ikano.nu
LyncWebDC.ikano.nu
maconomy.ikano.nu
citrix.ikano.nu
maileuq.ikano.nu
identitynow.ikano.nu
uat.identityiq.ikano.nu
sip.ikano.nu
apipte.ikano.nu
uat.newlook.ikano.nu
adfs.ikano.nu
access.ikano.nu
sbm.ikano.nu
apiuat.ikano.nu
api.ikano.nu
pte.onlineshop.ikano.nu
mail1.ikano.nu
snowexternal.ikano.nu
vcse.ikano.nu
vdi.ikano.nu
uat.crm.ikano.nu
dev01.apitest.ikano.nu
mail.ikano.nu
oobdc1.ikano.nu
maileuq.ikano.nu
sts.ikano.nu
ise.ikano.nu
apipte.ikano.nu
sbm.ikano.nu
LyncWebDC.ikano.nu
nlease2.ikano.nu
maileuq.ikano.nu
Certificate
The complete raw certificate details for identityiq.ikano.nu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgIMItC745b2AeIzeh+zMA0GCSqGSIb3DQEBCwUAMGIxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMzAe Fw0yNDA1MjQxMDM2MDVaFw0yNTA2MjUxMDM2MDRaMIHUMR0wGwYDVQQPDBRQcml2 YXRlIE9yZ2FuaXphdGlvbjEUMBIGA1UEBRMLNTE2NDA2LTA5MjIxEzARBgsrBgEE AYI3PAIBAxMCU0UxCzAJBgNVBAYTAlNFMQ8wDQYDVQQIDAZTa8OlbmUxDzANBgNV BAcMBk1hbG3DtjEcMBoGA1UECRMTSHlsbGllIEJvdWxldmFyZCAyNzEdMBsGA1UE ChMUSWthbm8gQmFuayBBQiAoUHVibCkxHDAaBgNVBAMTE2lkZW50aXR5aXEuaWth bm8ubnUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDHB3OhIS87EJSB ym+ZuJKT3Qjkqw3Er+8X0Qb98MpOIBG0B/mV2xEaHKC60l8drKf5cbsGna4Q8SCY 5P/YZD/LHfHcA6rKwpltj7QMwxlOEfzvpuapG72avHS36xdP76V+WPiBdpzkSRZ4 1odkg5DvIseg7dYkRTL8g6XU8QXGc0vRvoO6EuXYq+rtBPwHWsP7li1nXxfHk1tS d5HO6guacdp+7FMHSkAJs/6K+L4iNAKk6eFiaNFpeU4pSpTHugwdnatIrIv+R+8c x5qGt+XqiUbYDVpIsFE1iCEKSKllvdVRYCMa/eLOu2tgQNBGebeN+lDfrJ6RNfqQ 5tUV3GuZS55cXwdbozQrEbT8TT4TE2ogApujrz6hLnsg/MuZAaRQpbeEvfFLYHYQ 9uWVCUH+dvBK7DbqRYqxMhUSZE1lCwEDJmckEyVpybX0ie7mPsu1Ex9AIR+ly5Et xbsohTMJTfBt0PNNzXoKif7n5lSu4SXrdZ5Qh4mvMJ/SkCWpZPDKWwrYUIKLk8z8 D3aTJyKT+B6/9jeBhnr0Xd9McIBj2sCFRpn895/g4WalzFzLhwlKEVQkSdlg5tXL n4QZ6jOqJvnwM9Q0CeXwg64qfLOEo5v8/c/CZEBzBFJnJsyDG2IieXewHEz7YvJ4 HPMNkrfFpaszewWiYuz7NG+5YbbTHwIDAQABo4IB7TCCAekwDgYDVR0PAQH/BAQD AgWgMAwGA1UdEwEB/wQCMAAwgZYGCCsGAQUFBwEBBIGJMIGGMEcGCCsGAQUFBzAC hjtodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2V4dGVuZHZh bHNoYTJnM3IzLmNydDA7BggrBgEFBQcwAYYvaHR0cDovL29jc3AyLmdsb2JhbHNp Z24uY29tL2dzZXh0ZW5kdmFsc2hhMmczcjMwVQYDVR0gBE4wTDBBBgkrBgEEAaAy AQEwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVw b3NpdG9yeS8wBwYFZ4EMAQEwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybC5n bG9iYWxzaWduLmNvbS9ncy9nc2V4dGVuZHZhbHNoYTJnM3IzLmNybDAeBgNVHREE FzAVghNpZGVudGl0eWlxLmlrYW5vLm51MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAfBgNVHSMEGDAWgBTds+dtqC7oxU5uz3TmdTyUFc7oHTAdBgNVHQ4E FgQUx1+/Mx90oQIzOiEd2EXD2h+Qt3UwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQELBQADggEBAIijjBCsh/FkAvnofUNTrPQ0/HR+e515PWyVk+obZVKd G4UokUwwbes1ZLgtcCvf1JW18O/V8qTXVriXwGQHyuANyVbOExahV7LktP0lckJt KDLHWX3w8cU0SFR02tNmuOdm+0fgViytDSyly/6Pz+TsWxuVKfvcMrx0Piu6SG+7 Yv2Ke/TLJAmr/3qudP5oPJBGmKaq6wkdLkEkDGBx0NqC51nVW2IZhFMOmx5mV/uN 8HRynEWIm7ufSF+m518RgG6tTrnryDq5Kzqo1V1PTEpu8/vaj/Z4vkQ0VqL41kHW tzId1BhF0hQ68hE7SmwI6oaKMQzfG6IuIsATTuOiPP4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxwdzoSEvOxCUgcpvmbiS k90I5KsNxK/vF9EG/fDKTiARtAf5ldsRGhygutJfHayn+XG7Bp2uEPEgmOT/2GQ/ yx3x3AOqysKZbY+0DMMZThH876bmqRu9mrx0t+sXT++lflj4gXac5EkWeNaHZIOQ 7yLHoO3WJEUy/IOl1PEFxnNL0b6DuhLl2Kvq7QT8B1rD+5YtZ18Xx5NbUneRzuoL mnHafuxTB0pACbP+ivi+IjQCpOnhYmjRaXlOKUqUx7oMHZ2rSKyL/kfvHMeahrfl 6olG2A1aSLBRNYghCkipZb3VUWAjGv3izrtrYEDQRnm3jfpQ36yekTX6kObVFdxr mUueXF8HW6M0KxG0/E0+ExNqIAKbo68+oS57IPzLmQGkUKW3hL3xS2B2EPbllQlB /nbwSuw26kWKsTIVEmRNZQsBAyZnJBMlacm19Inu5j7LtRMfQCEfpcuRLcW7KIUz CU3wbdDzTc16Con+5+ZUruEl63WeUIeJrzCf0pAlqWTwylsK2FCCi5PM/A92kyci k/gev/Y3gYZ69F3fTHCAY9rAhUaZ/Pef4OFmpcxcy4cJShFUJEnZYObVy5+EGeoz qib58DPUNAnl8IOuKnyzhKOb/P3PwmRAcwRSZybMgxtiInl3sBxM+2LyeBzzDZK3 xaWrM3sFomLs+zRvuWG20x8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10774834185226660581702508467 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 10:36:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-25 10:36:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Skåne' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Malmö' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyllie Boulevard 27' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'identityiq.ikano.nu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811967920283947095686324671533190381173460575835694600062992159802040176813137026717754160297584369536726324635929939759846343453203045337623658695014575762757566476194150376632569031237590036014734720870012925459751278851626354322774819141361367710848335280618609767391940014321941867945941478865543987292037094270125940016690505597606106456987348814550069058897312607690590481034777974209796209927282388270065150547369707837816277923670522283596460345882791547586742510155405088626047766473048249703971451754051732234304219823053247828063823756393300337273671371921864383647639479689906719703280838573100979505873877456282242586168772991951307578923853168797410857138559470724800285002492265591832138552413319793212647956132707065220937069905023336592579206399527821951384811331856923226093244823643856393128349656962525683092012804648216012763703025838372288972726498062221166849737319216202667489880897449730458842276557909061022570148252219810934993223453528481754996110225793459946633521295271466365073888078461477666224159131677155300285793996620771733205650882286699477520936580132037381234831407467015842198324250093939792458711244643306456778664287125778485774170014552295470632491556759528228489601163441837270795147465503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identityiq.ikano.nu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c75fbf331f74a102333a211dd845c3da1f90b775 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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