se.cocreate.ingka.com

Issued by R3

About this certificate

This digital certificate with serial number 03:48:83:e1:f6:ec:b3:ef:dd:1e:f3:f3:20:6c:d0:66:56:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=se.cocreate.ingka.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:83:e1:f6:ec:b3:ef:dd:1e:f3:f3:20:6c:d0:66:56:6c
Serial Number (int): 286012490356055600270721678421855937386092
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:3a:35:72:9b:e7:fb:94:77:01:c7:36:1b:db:c1:15:b8:4e:de:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:be:2b:4b:22:61:3c:6b:fb:47:13:af:2c:9d:0d:66:bb:df:67:65
Fingerprint (sha256): 07:18:1e:96:b9:c9:38:72:cd:97:fd:f6:99:6f:a1:84:a1:23:69:36:4b:89:0b:33:69:a1:aa:1d:32:af:8d:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate se.cocreate.ingka.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for se.cocreate.ingka.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

se.cocreate.ingka.com

Other certificates including the domain name ingka.com

(limited to 100 certificates)
dep-react-17-x.buyback.dev.circular-ventures.ingka.com
push.prometheus.monitoring.ilo.ingka.com
ingkaincludes.ingka.com
ziplookup-server.cwtools.dev.csc.ingka.com
ingka.com
notification.irecover.stage.ilo.ingka.com
be-fr.cocreate.ingka.com
prod.returns.ingka.com
soim.ru-prod.ingka.com
cybersec.ingka.com
monitoring.irecover.dev.ilo.ingka.com
dev.cloud.ingka.com
le-26875723.34.77.165.130.nip.io
rest-api.stage.foundation.ingka.com
aol-synq-service.aol.dev.ilo.ingka.com
portal-test.rtsales.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
*.pmt.ingka.com
auth.workflows.dev.ingka.com
stage-prepaidcard-adapter-zz-prepaidcard.gke.ingka.com
ctf.manager.api.ingka.com
irecover.ilo.ingka.com
hd-dtc.com
qa.csc-input.ingka.com
kr.cocreate.ingka.com
ingka.com
api.irecover.dev.ilo.ingka.com
canteenapp.food.ingka.com
prod-hub-zz-loyalty-service.gke.ingka.com
test.translate.ingka.com
www.test.translate.ingka.com
api.data.dev.ilo.ingka.com
cir-1399.buyback.dev.circular-ventures.ingka.com
test-kiosk.rtsales.ingka.com
ingkadt.com
www.kerenku.com
partner.ingka.com
api-lb-cssom-dev.ingka.com
api-fix-monitoring-cate.buyback.dev.cir.ingka.com
origin.stage.flytta.ingka.com
dev-slm-zz-slm.gke.ingka.com
dev.10jobstool.ingka.com
nl.cocreate.ingka.com
origin.stage.case.ingka.com
mfs.ingka.com
playground.servicemesh.ingka.com
logs-pr-725.dev.context.ingka.com
stag.v1.simulator.uk.ap.fs.ingka.com
ingka.com
kilobytetechnology.com
recovery.ingka.com
stag.v1.order-status.eu.fs.ingka.com
greymatter-ms.aol.sandbox.ilo.ingka.com
cld.prod.serviceoffers.ingka.com
login.gogogarden.com
web3.aleph-labs.com
collector.monitoring.ingka.com
ctf.manager.api.ingka.com
camptv-dev.ingka.com
api.prod.irecover.ilo.ingka.com
dev-slm-zz-slm.gke.ingka.com
cwtools.dev.csc.ingka.com
origin-gcp.ctf.api.ingka.com
backoffice-add-user-menu.buyback.dev.cir.ingka.com
origin.dev.sa.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
zap.sklabs.app
docs.dev.case.ingka.com
www.6join.com
cmdelete.prod.favs.ingka.com
cybersecinc.ingka.com
analytics.ikea.developyn.com
auth.workflows.dev.ingka.com
peopleplanning.ingka.com
item-ms.aol.dev.ilo.ingka.com
www.ikea.se
feed-nl-staging.stage-insp-feed.ingka.com
ui-origin.slm.ingka.com
auth.prod.foundation.ingka.com
aol-iws-service.aol.dev.ilo.ingka.com
origin.publicera.ingka.com
staging.kaskad.ingka.com
stage-checkout-location-us-locationservices.gke.ingka.com
prod.spe.ingka.com
stage.api.iobserve.ingka.com
rst-preprod.ingka.com
www.alaswaq.co
redirect.data.dev.ilo.ingka.com
proxy-to-vm-for-dev.insight-hub.ingka.com
lb.coworker.test.store-events.ingka.com
unitdata.copos.ingka.com
top-items-api-test.rtsales.ingka.com
origin.test.salja.ingka.com
notification.irecover.ilo.ingka.com
ingka.com
api-cir-2406.buyback.dev.cir.ingka.com
prod-nowit-wrapper-ops-intel-aiops.gke.ingka.com
hackathon.test.returns.ingka.com
es.cocreate.ingka.com
nl-feed-service.stage-insp-feed.ingka.com

Certificate

The complete raw certificate details for se.cocreate.ingka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISA0iD4fbss+/dHvPzIGzQZlZsMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEwMDUxMzI2NTNaFw0yMjAxMDMxMzI2NTJaMCAxHjAcBgNVBAMT
FXNlLmNvY3JlYXRlLmluZ2thLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAKrVC90xFy4RqH6JZj8rxv0VP/djI2KKK34EvHvXxY6Pvj0l3eQWNUVk
I/ZSBbyJkUdXX3NOaiX83YNecq2rtCaO/IYmUUNnhwctiPesBQtGUdGb49QBwlsz
84PhskllkZLBnhpjvTUH8rS4++q+0DThEYOhAGyNJW13dvI7zcnxr/IpS2iqD4O6
XVQY7hFpgTw5ANG6tTAyiIowL+vG+rHi03I2tj4fOGBAaLGaNMqckv9OynOIfguh
TobsxJDheqyToFomsZfL16wmV5WlP/7L7NyyufPHRV111NljcqpNSN7bHkD897wZ
CdsVpZTu6lMqvTXl3/M9Xp1xvuKaMOHUJ09VGCZ8uP6zQytQ2ks4prsc2T4zVR3N
pj5cIP5ezniZTCpCQEKghtFKkbIrb6H2gccSE9uWpnbQKmfwhths20tg4++l6rMD
LbB9C/+dboJtiiOkQnRzORUJsgaB0tvt4z5/FQQBOkWKQXm3D0G0ScX5rEOMLASK
SLA9bpBUO0NiGbOWFMr232E5GbitvvUdS52EUiUBXtDK4mHDN/ZKCAkhI//kL1w9
0L1gEHieFGaaj4gBzcVK4YJfamh+eyfBEykwRLZ8r+c5cI423G+zD6BHSe/+LQxv
8zZV22gBfBX+i6omzg0SaW+9BDj7uiWpU5EVGfxFpCfTNSCV2p0tAgMBAAGjggFd
MIIBWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPE6NXKb5/uUdwHHNhvbwRW4Tt4D
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFXNlLmNvY3JlYXRl
LmluZ2thLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEE
AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgjgA8zRImvyTl4MW+Eo
di4sVUxPwCiWNUr0G+pgE3yw9EibTIqwVsArNdHFmwiYJfdSLvn/jJF8Ca5up15u
J9w7h5q4OswkbDCIzyzK3yVEv1TYoCjxTUeAXvqbRuJUWJ9aR6ONmR3hC5jmV1/Y
nvljh6w1DBxQb1vOKwIeCLqxvv9LA0EIpZAFjQc5FhNh6Wcmh5Dx2aZi9wJ4KmmD
74Dvj+OLX1q8riemk3duGdhQjAak29dSEoGKS9eHZhLsmrRYvRYDh/tftNgFkCFN
CW2DQ8ROZjLYr+U6+Zyy0DvL4qcuiQehLHhlitF5JzyqhzKI0kEgOSkHITsad1p7
Nw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286012490356055600270721678421855937386092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-05 13:26:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-03 13:26:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'se.cocreate.ingka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696934621457859572589748730663427939967492658269405184883650985873384717236443419560657433159637469648955412185956354641246117378029036981285559292007847759974685789198954600517029681628833390638862412589771645312038580676125801314047116830536641972918475723917295648776945910192059345443998070522315855712544392148536673512813401489601907742654686816240082335185292651455795019856799701710406936330224301745037969805752021956090518776335100288804518523516556930472627476672193154081158684227502887222677784720604006258316205950558367457465493317409421406032874331992479197721358240982606263001700046368949527753111456834820741868783103269021082509853789721052073369714469045671071167429366666981424309423721895266228893644806688042401337457227668849579398141415486283060968427904339664505657685598833652271517369641161896456387671647033373371975195893639341451712855973434124194541701977398328553907958707651371541059661099655253315128835730808104144099677513272581349074987605817282317934868981204459725642210485579391358476880208632347884730397051155265661138710219972403313549796362327896799980993118076685873819838574000800955059341456126150283647500174891631658509097778790911649408771093389414089542679043573193176638406958381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f13a35729be7fb947701c7361bdbc115b84ede03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.cocreate.ingka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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