ikeadt.com

- Inter IKEA Systems B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:28:9c:34:8c:7f:47:b4:50:53:f8:b2:2f:52:25:1e was issued on by DigiCert Inc.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Inter IKEA Systems B.V.

Organization: Inter IKEA Systems B.V.
State / Province: Zuid-Holland
Locality: Delft
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:28:9c:34:8c:7f:47:b4:50:53:f8:b2:2f:52:25:1e
Serial Number (int): 17490824038789693423524230201768813854
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:61:0c:a4:06:ff:ab:ae:2b:fa:3c:ca:8d:39:08:e6:d5:50:20:29
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 3f:04:1f:b5:e9:ed:59:b8:3a:4c:d5:ef:30:62:1f:9c:eb:ab:a2:8e
Fingerprint (sha256): 0e:7b:44:cf:f7:7e:2f:97:26:bf:3e:15:88:1b:56:26:e7:4b:97:b1:77:b8:6f:43:19:fc:25:6d:14:ad:7e:02

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ikeadt.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ikeadt.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ikeadt.com
*.apps.ikeadt.com
*.ocp.ingka.ikeadt.com
api.dev.content.ikea.net
api.stage.content.ikea.net
apps.dev.content.ikea.net
apps.stage.content.ikea.net
beta.ai.ingka.ikea.net
businessdev.accounts.ikea.com
cte.accounts.ikea.com
dev.accounts.ikea.com
dev.accounts.ikeadt.com
dev.ai.ingka.ikea.net
dev.content.ikea.net
dev.instore.ingkadt.com
dev.knowledge.ikea.net
dev1.accounts.ikea.com
dev10.accounts.ikea.com
dev2.accounts.ikea.com
dev3.accounts.ikea.com
dev4.accounts.ikea.com
dev5.accounts.ikea.com
dev6.accounts.ikea.com
dev7.accounts.ikea.com
dev8.accounts.ikea.com
dev9.accounts.ikea.com
devcz.accounts.ikea.com
devdk.accounts.ikea.com
deves.accounts.ikea.com
devfr.accounts.ikea.com
devhr.accounts.ikea.com
devhu.accounts.ikea.com
devin.accounts.ikea.com
devit.accounts.ikea.com
devjp.accounts.ikea.com
devkr.accounts.ikea.com
devkw.accounts.ikea.com
devnl.accounts.ikea.com
devpl.accounts.ikea.com
devpt.accounts.ikea.com
devro.accounts.ikea.com
devrs.accounts.ikea.com
devru.accounts.ikea.com
devru2.accounts.ikea.com
devsi.accounts.ikea.com
devsk.accounts.ikea.com
devus.accounts.ikea.com
global.ikeadt.net
go.instore.ikeadt.com
hub.stage.knowledge.ikea.net
ifb.ikeadt.com
instore.ikeadt.com
metaphactory.stage.knowledge.ikea.net
metro.ikeadt.net
oplogin.ppe.ikeadt.com
opsip.ppe.ikeadt.com
planner-stage.ikea.com
planner-test.ikea.com
planner.cte.ikeadt.com
planner.ikea.com
ppe.accounts.ikea.com
sandbox.accounts.ikea.com
stage.content.ikea.net
stage.knowledge.ikea.net
staging.ai.ingka.ikea.net
stkw.accounts.ikea.com
testppe10.pingfederate.ikeadt.com
testppe10.plusnavigate.ikeadt.com
testppe2.plusnavigate.ikeadt.com
trana.ai.ingka.ikea.net
vantar.ikeadt.net

Other certificates including the domain name ikeadt.com

(limited to 100 certificates)
mail402.ikeadt.com
ikea.com
ikea.com
webhook.ghec-actions-runners.dh2-1.cnp.ikeadt.com
*.nonprd-retops.api.inter.ikeadt.com
ikea.com
csp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
api.support.planner.qa.ikeadt.com
pte-insideworkspaces.ikeadt.com
ifb.ikeadt.com
dex.dev.cnp.ikeadt.com
ikea.com
s3-website.dev.cnp.ikeadt.com
ikea.com
*.s3.dev.cnp.ikeadt.com
testapp.dc-9.cnp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
*.demo.dh2-1.cnp.ikeadt.com
*.ccoe-cn-prod.dc9-1.cnp.ikeadt.com
officeplanner.ppe.ikeadt.com
ikea.com
ikea.com
*.te-perf-lab.dh2-1.cnp.ikeadt.com
ikea.com
ikeadt.com
ss.cmp.analytics.ikeadt.com
*.testapp.dev.cnp.ikeadt.com
ikea.com
*.spapps.inside-pte.ikeadt.com
docave-admin.ikeadt.com
*.glinux.dh2-1.cnp.ikeadt.com
mta-sts.ikeadt.com
ikea.com
ikea.com
gateway.mimir.observability.dh2-1.cnp.ikeadt.com
ikeadt.com
argocd.dev.cnp.ikeadt.com
ikea.com
api.support.planner.dev.ikeadt.com
*.s3.dev.cnp.ikeadt.com
*.htapps.intranet-inter-cte-m.ikeadt.com
ikeadt.com
ikeadt.com
auth.cnp.ikeadt.com
*.hub01.api.ikeadt.com
sts.ikeadt.com
support.planner.dev.ikeadt.com
webhook.gh-actions-runners.dh2-1.cnp.ikeadt.com
dashboard.tekton-pipelines.cnp.ikeadt.com
news-pte.ikeadt.com
ikea.com
lg.te-perf-lab.dh2-1.cnp.ikeadt.com
s3.dc9-1.cnp.ikeadt.com
ikeadt.com
ikea.com
ikeadt.com
ikea.com
webhook.gh-actions-runners.dc9-1.cnp.ikeadt.com
*.ikeaautomationframework.dh2-1.cnp.ikeadt.com
ikeadt.com
*.s3.dc9-1.cnp.ikeadt.com
mihogar.ikeadt.com
ikea.com
cgi-cds-websvc-test.ikeadt.com
ikea.com
s3.dev.cnp.ikeadt.com
ikea.com
*.testapp.dc9-1.cnp.ikeadt.com
api.support.planner.dev.ikeadt.com
gateway.loki.dev.cnp.ikeadt.com
ikeadt.com
ikeadt.com
ikea.com
spitzer.dev.cnp.ikeadt.com
dashboard.ceph.lab.cnp.ikeadt.com
dex.dev.cnp.ikeadt.com
*.rmps.ikeadt.com
ikeadt.com
otlp-grpc-gateway.traces.dev.cnp.ikeadt.com
mihogar.ikeadt.com
*.example.dh3-1.cnp.ikeadt.com
test-jira.ikeadt.com
ikea.com
ikeadt.com
*.s3.lab.cnp.ikeadt.com
api.support.planner.qa.ikeadt.com
ikeadt.com
*.ikeaautomationframeworkstage.dh2-1.cnp.ikeadt.com
ikea.com
ikea.com
ikeadt.com
ikea.com
*.htapps.intranet-inter-ppe.ikeadt.com

Certificate

The complete raw certificate details for ikeadt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEjpUJTIOrBQrogZ13tOg3b7DOqVTm
U6l86FMz15mPwZQEfnV6eV/jJ5Nu8joF5lwdpYtvjC2Chxpu06FhQeX6aw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17490824038789693423524230201768813854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inter IKEA Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikeadt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00048e95094c83ab050ae8819d77b4e8376fb0cea954e653a97ce85333d7998fc194047e757a795fe327936ef23a05e65c1da58b6f8c2d82871a6ed3a16141e5fa6b
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7610ca406ffabae2bfa3cca8d3908e6d5502029
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1755 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocp.ingka.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdev.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.accounts.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.instore.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev10.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev6.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev7.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev8.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev9.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcz.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdk.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deves.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devhr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devhu.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devin.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devit.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devjp.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devkr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devkw.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devnl.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devpl.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devpt.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devro.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devrs.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devru.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devru2.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsi.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsk.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devus.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.instore.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifb.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaphactory.stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oplogin.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsip.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner-stage.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner-test.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stkw.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.pingfederate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.plusnavigate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe2.plusnavigate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trana.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantar.ikeadt.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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