selfservice.ikano.dk

- Ikano Bank, filial af Ikano Bank SE, Sverige -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:98:a5:55:26:5c:ab:c8:dd:e9:3d:c0:e4:6d:b0:84:52 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank, filial af Ikano Bank SE, Sverige

Organization: Ikano Bank, filial af Ikano Bank SE, Sverige
Organization unit: IT
State / Province: Copenhagen
Locality: Glostrup
Country: DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:98:a5:55:26:5c:ab:c8:dd:e9:3d:c0:e4:6d:b0:84:52
Serial Number (int): 1492341080059700294527857322321033720530002
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 34:03:17:58:69:21:20:43:98:02:d7:2e:09:60:c3:9e:95:be:d8:9a
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 7a:9a:b7:d7:4c:6e:c4:df:ec:81:5a:44:82:9c:22:9f:3a:03:fb:09
Fingerprint (sha256): 0c:d3:43:fe:36:34:95:3d:95:58:27:7a:92:85:0f:44:cf:28:c1:62:16:ac:42:1b:83:6c:fd:39:2a:f6:b8:f2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate selfservice.ikano.dk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selfservice.ikano.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

selfservice.ikano.dk
selfservice.ikano.fi
selfservice.ikano.no
selfservice.ikanobank.nl
selfservice.ikano.nl

Other certificates including the domain name ikano.dk

(limited to 100 certificates)
selfservice.ikano.dk
mail.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
irw.ikano.dk
www.ikano.dk
selfservice.ikano.dk
citrix.ikano.dk
www.ikano.dk
mail.ikano.nu
citrix.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
sip.ikano.nu
test.ikano.dk
www.ikano.dk
www.pengeautomaten.dk
access.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
citrix.ikano.dk
sip.ikano.nu
irw.ikano.dk
access.ikano.nu
selfservice.ikano.dk
selfservicetest.ikano.dk
sts.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservicetest.ikano.dk
www.ikano.dk
citrix.ikano.dk
www.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
mail.ikano.nu
mail.ikano.nu
www.ikano.dk
sip.ikano.nu
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
sip.ikano.nu
www.ikano.dk
capgemini.ikano.dk
test.ikano.dk

Certificate

The complete raw certificate details for selfservice.ikano.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7/BovBsFmRKhZ6n7I//
O99L1eMbTcC3Ikf81f6NHMu294b1r8PhASgHTwD3RhRkvMAvmIyxq7YeidrVp1BG
b+ZriuoZRCT0EmSwTLwEfHIgbnKEMBpEoSAkE+DoXy31XZ3vrOcD4lHb4qDSkmOR
C1UnnYjV6PR907/VQM7K3i8t3p2uHadjNMdXj+sREYbj4KosBAyuHtJyVQvByhyD
+iYnYPtQVm4IJ1zISlaYEtZeQ0LCNV9BtXnjyCT/cCbmlIOwT2IZwxKixNnkDz0V
OG48bGaf55RMhZvJkLFuqTc4JMEy5MDGjZ1boWvzchm/owxLuDpphTz5BLOZ0LSV
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492341080059700294527857322321033720530002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-01 09:20:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-06 13:47:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Copenhagen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glostrup'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank, filial af Ikano Bank SE, Sverige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selfservice.ikano.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24206074849908309910698872408911047552354992391670368302749692196897186659970319068406689460857164863601844377947001048269331580124785938977644448727586456533405878807321499161133814588564024818108648338188323555950968832627028844139732545128125697644624272276432888275786757035865003100261215116410485469771419052564304375739037918805512049448065530633307663076504255525014002789453691748138930693909132755102652005134660280846811293343688334522443613747998641966316027119514601990509028178460464159494354670953211842261656771664648486816931551653113640572342524297768103420030949571663069353755158382203202518160711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikanobank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34031758692120439802d72e0960c39e95bed89a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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