ikea.com

- Inter IKEA Systems B.V. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:bf:ce:13:6e:1e:f8:08:6e:32:3f:45:ef:2c:df:0e was issued on by DigiCert Inc.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Inter IKEA Systems B.V.

Organization: Inter IKEA Systems B.V.
State / Province: Zuid-Holland
Locality: Delft
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:bf:ce:13:6e:1e:f8:08:6e:32:3f:45:ef:2c:df:0e
Serial Number (int): 12958960377838625105651915111766220558
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:45:59:bb:85:0c:72:aa:e0:8b:7a:e8:ca:5f:4e:b7:c0:f1:f6:f2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 44:c6:bf:ab:1d:e0:14:b3:9a:60:73:fb:da:55:98:fc:75:85:b0:50
Fingerprint (sha256): 09:57:30:79:33:71:b6:f0:8b:9c:da:44:a5:0d:b2:6d:e1:d3:b8:07:fc:05:ff:f5:39:c0:75:e9:d8:2c:46:46

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ikea.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ikea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ikea.com
kitchenplanner3.ikea.net
secureik.ikea.net
jira.build.ingka.ikea.com
checkout.my.ikea.com
secure.eu.ikea.com
info.ikea-usa.com
retail.api.ikea.com
checkout.ikea.com
www.des.ikea.com
www.cip.ikea.com
om.ingka.ikea.com
kitchenplanner4.ikea.net
secure.ar.ikea.com
checkout.sa.ikea.com
blog.ikea.com.au
ca.ikea.com
imcc.inter.ikea.com
securem.ikea.com
checkout.ua.ikea.com
m2.ikea.com
barcode.ingka.ikea.com
content.dexf.ikea.com
iows.ikea.com
ca-m.ikea.com
eu.ikea.com
vossurprises.ikea.fr
m.fr.ikea.com
checkout.ma.ikea.com
secureplanner.ikea.com
salja.ikea.net
api.ingka.ikea.com
giftcards.au.ikea.com
checkout.qa.ikea.com
securem.ar.ikea.com
api.dexf.ikea.com
kitchenplanner2.ikea.net
cwtcadmin.ikea.net
visual-intelligence.ikea.net
eu-securem.ikea.com
ww8.ikea.com
atp.salja.ikea.net
ca-securem.ikea.com
fr.ikea.com
checkout.ae.ikea.com
icsp.ingka.ikea.com
eu-m.ikea.com
psathome.ikea.com
secure.iows.ikea.com
checkout.sg.ikea.com
content.dexf.qa.ikeadt.com
checkout.jo.ikea.com
securema.ikea.com
news-inter.ikea.com
secure.ikea.com
plus.app.ikea.com
checkout.kw.ikea.com
www.dexf.ikea.com
kitchenplanner1.ikea.net
iows2.ikea.com
checkout.th.ikea.com
analytics.dexf.ikea.com
ar.ikea.com
online.ikea.com.au
news.ikea.com
content.dexf.dev.ikeadt.com
rats.om.ingka.ikea.com
m.ar.ikea.com
kitchenplanner.ikea.com
checkout.eg.ikea.com
secure.ca.ikea.com

Other certificates including the domain name ikea.com

(limited to 100 certificates)
ikea.com
optiva.food.inter.ikea.com
support.home-design.ikea.com
ja-int-jobs.about.ikea.com
ikea.com
sso.qa.journeys.ikea.com
*.credential-provider.dh3-2.nebula.ikea.com
sv-int-jobs.about.ikea.com
ikea.com
fr-jobs.about.ikea.com
prod.6.slot.cdn.salesforce-communities.com
secure06.stage.lithium.com
ikea.com
franchisor.ikea.com
en-int-jobs.about.ikea.com
gfutils.com
ikea.com
*.glinux.dh3-1.nebula.ikea.com
ikea.com
everyday.ikea.com
es-int-jobs.about.ikea.com
*.om-performancetest-lab1.dh2-2.nebula.ikea.com
franchisor.ikea.com
ikea.com
ikea.com
sso.journeys.ikea.com
hub01.api.ikea.com
no-jobs.about.ikea.com
ikea.com
remote.ap-northeast-2.api.homesmart.ikea.com
ikea.com
*.s3.eun.nebula.ikea.com
hubble.lab.nebula.ikea.com
lt-int-jobs.about.ikea.com
sl-jobs.about.ikea.com
review.symfonisk.ikea.com
publications-ca-fr.ikea.com
sts.ikea.com
ikea.com
eu-west-3.iot.homesmart.ikea.com
sr-jobs.about.ikea.com
isfabdp.ikea.com
*.servicemesh.dh3-1.nebula.ikea.com
filewave.ikea.com
ms-jobs.about.ikea.com
de-ch-jobs.about.ikea.com
ikea.com
www.highlights.ikea.com
filewave.ikea.com
checkout.ua.staging.ikea.com
prod.6.slot.cdn.salesforce-communities.com
ikea.com
dev.t.qr.ikea.com
ikea.com
formularios.ikea.com
sustainableliving.ikea.com
ikea.com
ikea.com
en-global-jobs.about.ikea.com
goto.ikea.com
en-jobs.about.ikea.com
ae.accounts.ikea.com
da-jobs.about.ikea.com
*.credential-provider.dc8-1.nebula.ikea.com
*.ikea.com
*.demo-table1.dc7-1.nebula.ikea.com
secure.services.ikea.com
no-int-jobs.about.ikea.com
api.analytics.homesmart.ikea.com
qr.ikea.com
sr-int-jobs.about.ikea.com
eu-central-1.iot.homesmart.ikea.com
hr-int-jobs.about.ikea.com
dnstrd.ikea.com
api.nebulademo.spitzer.dev.nebula.ikea.com
ru-int-jobs.about.ikea.com
publications-jo-ar.ikea.com
publications-ext.ikea.com
pam-iig.ikea.com
idam.inter.ikea.com
oos.insideworkspaces.ikea.com
ikea.com
ikea.com
ikea.com
ikea.com
ikeadt.com
ikea.com
akamai-san41.exacttarget.com
usinincontact.ikea.com
secure.services.ikea.com
ikea.com
publications-ua-uk.ikea.com
everyday.ikea.com
ar-jobs.about.ikea.com
goto.ikea.com
Mail15.ikea.com
rana03.ikea.com
franchisor.ikea.com
ikea.com
ikea.com

Certificate

The complete raw certificate details for ikea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGrtokIoohKZYauozzt8
Ezl1Cy804MG1GQJcYDCAxRd65caoPsa1k0RpbuivEq0SAEoIFFaAz/gj9tOd9DDb
uTMmjINcZ05GaHNo+hPcQEJHOC3T55kQgmRhkVbm7xDxbEahnKAca8uHpHfUSAXy
XH7a4yDj9jHhfu0xMjgU28/kYgsGBxRykmRiShvHL2Anpq7LS0y23GYlKuu+7PZq
6DPJnt800WAK5TZtdteI+gfEMGC/UvqUMEF9k0Bt14N9oY13dumKJnqs8RFJnJMw
Wn/1+qEmdNMYRGJVyQWPQRbTofsXA+nJrPZIVqiexFr2BXUf7fVmMuMyrrKkSkIG
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12958960377838625105651915111766220558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inter IKEA Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24795436062142215081567495225794508588614951359940305026977836407164099254120750805714112894242095236928371702647130512005138097258201231928781701047033373731346777406672363054910229639923654960284511015690601825054241138277988443351895487206289236545085407146127427171366261372118182857844566429243169792040003039832391204231689507355011007156921657137125145413074884491074713617304220212438124260496695214286321098230555094936111712805250917278858780148347226779370217293751182016914178057333478288315922376988005999809325906793365365576599724393261965201370870206707625004724278199255594720105451254829245316335349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac4559bb850c72aae08b7ae8ca5f4eb7c0f1f6f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1434 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner3.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureik.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.build.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.my.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eu.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.ikea-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.api.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.des.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cip.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner4.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ar.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sa.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ikea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imcc.inter.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ua.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barcode.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dexf.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iows.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-m.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vossurprises.ikea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fr.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ma.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureplanner.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salja.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.au.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.qa.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securem.ar.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dexf.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner2.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtcadmin.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visual-intelligence.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-securem.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww8.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atp.salja.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-securem.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ae.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icsp.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-m.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psathome.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.iows.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sg.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dexf.qa.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.jo.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-inter.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.app.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.kw.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dexf.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner1.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iows2.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.th.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.dexf.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ikea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dexf.dev.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rats.om.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ar.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenplanner.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.eg.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ca.ikea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175080ad1500000040300483046022100f20e434f391bb7802aed8884dcd800c2b8ab54c89a8d6a5a0c5f4b21e0bd2c0c022100c12053e0a31d8425428b6932e1f79dfb79e3ff2ef98af7529aaff0e27060394b0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000175080ad1a600000403004630440220442b4b259bfcf4b17e1d0802a2371b458c52ef903cc5452d13e1418199ee5fcc02201c684228fc71da9477b48e32a3d057ad58f861fb353a715a66fac667d790cc56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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