www.ikea.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:a9:a1:ef:fe:c8:aa:33:17:e5:24:ab:86:e0:46:68:bb was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ikea.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:a9:a1:ef:fe:c8:aa:33:17:e5:24:ab:86:e0:46:68:bb
Serial Number (int): 288104362773877766291791308514007015909563
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:08:10:3e:d0:20:61:67:dd:27:c3:8d:d8:00:be:30:3d:b6:a3:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:4d:94:fe:ac:24:cc:4a:06:54:39:6e:45:81:12:1a:4a:73:02:4c
Fingerprint (sha256): 0e:ad:40:1b:d7:70:35:c9:0f:4a:f4:f5:7e:a0:0d:4d:42:5b:8e:ce:1b:ce:d9:c2:94:e0:c7:43:c3:1d:d8:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ikea.se

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikea.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cart.oneweb.ingka.com
cart.oneweb.ingkadt.com
en.ikea.ch
fr.ikea.ca
fr.ikea.ch
it.ikea.ch
planner.ikea.com.hk
planner.ikea.lt
storecoworkerapp.ingka.com
www.fr.ikea.ca
www.fr.ikea.ch
www.ikea-usa.com
www.ikea.ae
www.ikea.at
www.ikea.be
www.ikea.bh
www.ikea.ca
www.ikea.ch
www.ikea.co.jp
www.ikea.co.th
www.ikea.co.uk
www.ikea.com.au
www.ikea.com.bh
www.ikea.com.eg
www.ikea.com.kw
www.ikea.com.my
www.ikea.com.pl
www.ikea.com.ro
www.ikea.com.sa
www.ikea.com.sg
www.ikea.cz
www.ikea.de
www.ikea.dk
www.ikea.eg
www.ikea.es
www.ikea.fi
www.ikea.fr
www.ikea.hr
www.ikea.hu
www.ikea.ie
www.ikea.it
www.ikea.jo
www.ikea.jp
www.ikea.kr
www.ikea.ma
www.ikea.my
www.ikea.nl
www.ikea.no
www.ikea.ph
www.ikea.pl
www.ikea.pt
www.ikea.qa
www.ikea.ro
www.ikea.rs
www.ikea.ru
www.ikea.sa
www.ikea.se
www.ikea.sg
www.ikea.si
www.ikea.sk
www.ikea.ua
www.it.ikea.ch

Other certificates including the domain name ikea.se

(limited to 100 certificates)
akamai-san50.exacttarget.com
www.ikea.se
ikea.se
hej.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
click.news.email.ikea.se
www.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
akamai-san50.exacttarget.com
press.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
livethemma.ikea.se
view.news.email.ikea.se
ikea-se.kampanj.ikea.se
livethemma.ikea.se
ikea.se
www.ikea.se
www.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
www.ikea.se
ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
ikea.se
akamai-san50.exacttarget.com
livethemma.ikea.se
click.news.email.ikea.se
press.ikea.se
ikea.se
sommarbuffe.kampanj.ikea.se
Inter IKEA Systems B.V.
press.ikea.se
press.ikea.se
press.ikea.se
ikea.se
www.ikea.se
re-like.kampanj.ikea.se
livethemma.ikea.se
livethemma.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
cloud.news.email.ikea.se
www.ikea.se
www.ikea.se
click.news.email.ikea.se
akamai-san50.exacttarget.com
www.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
cloud.news.email.ikea.se
press.ikea.se
mta-sts.meeting.email.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
www.ikea.se
livethemma.ikea.se
click.news.email.ikea.se
sovsomettbarn.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
bedbath.kampanj.ikea.se
www.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
ikea.se
press.ikea.se
www.ikea.se
click.news.email.ikea.se
jagharaldrig.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
cloud.news.email.ikea.us
jagharaldrig.kampanj.ikea.se
livethemma.ikea.se

Certificate

The complete raw certificate details for www.ikea.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVr7kFSdsp8NlteYSyoP
xOj4IeybjCTL3c1ahVUCPwCIzOReqJWAbMAX+jOgj0/K7JLEqmIbeDYPY/IZEbj0
3kA2wQeNYCvM6MbaJqbqEyROJFSvXpMIBTYFaQ8umNZ/Wh9vMMU2thQQXBSJB9nc
MRG202jTQn+cY3inz7TjZ6KwXtmw5ZnT6WOkWZvXGZYhyLpyQNCBNuhQWuo3ZbH7
8Errt3ogjSy/EwcHKA6o2ARtljgophPTP/YNSmSrIk0kF1NUhusnO/XIwWiBxVzo
wH2xnDjTl4YulD6K7hoCIYjJlqSlRHXvnp74k/yFK5CBLdFqM/+Mv5Yod/qsZPi7
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288104362773877766291791308514007015909563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 16:07:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 16:07:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikea.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23903904865834256580191128411176571084708462797537497787288231236735016230212419183968479356613617456930558021075720642704134166972842659923548476618775973914143908739453895249139101105400594693865803070217970753534735505368113530550031513828688877769919185310874250911443127086098679310988579940992768029432175673321114250592369473113952254019831943200629462301599117943722800136793101409625777248508276221084598031362115204584027416731060586610524098949391567139686452927049778596023156589519368092537795983536516311030004768373907858256131113978870930843051943426645318045208384629665805393459326512423799803657039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7008103ed0206167dd27c38dd800be303db6a320
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.oneweb.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.ikea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.ikea.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.ikea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.ikea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner.ikea.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner.ikea.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storecoworkerapp.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.ikea.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.ikea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.ikea.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a684358e000004030047304502204ad816f3500f85b3adebc13614e7257598c492006d2a3b02cbc5efb4bbca6461022100b284c0187174fd6c118a02edc7f97052f9c8104bc03f9c03e24cd15f86ed4e5f0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a68435b70000040300473045022100d4fe07350889ae603b2916339870315750929eaad700e8d5399169090fbf107102200f623c5d274f1bba0b8fe9c8d85b8f201d641575edd64f7d25c28764579353ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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