ikeadt.com

- Inter IKEA Systems B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:d1:0c:45:cd:f9:04:36:98:d3:eb:19:17:fb:df:a1 was issued on by DigiCert Inc.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Inter IKEA Systems B.V.

Organization: Inter IKEA Systems B.V.
State / Province: Zuid-Holland
Locality: Delft
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d1:0c:45:cd:f9:04:36:98:d3:eb:19:17:fb:df:a1
Serial Number (int): 11719262929117032700940008755436445601
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5c:65:38:f0:67:ca:11:f0:cc:bb:87:f2:2b:24:8f:08:65:8b:44:24
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 70:a0:3b:68:8a:e4:3c:59:3c:1f:83:c0:05:44:ba:69:a1:54:72:dd
Fingerprint (sha256): 0e:e1:48:cf:04:10:33:9b:37:5d:2a:77:2d:d6:8c:5b:92:96:ba:15:60:52:fd:10:6b:4f:2c:4a:58:91:b5:0c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ikeadt.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ikeadt.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ikeadt.com
adv.ikeadt.com
api.adv.ikeadt.com
api.commerce.ikeadt.com
api.dev-ipexdesignsearch.ikeadt.com
api.qa-ipexdesignsearch.ikeadt.com
appointmentbooking.ppe.ikeadt.com
barcode.ingka.ikeadt.com
biz.cte.ikeadt.com
biz.ppe.ikeadt.com
cdver.api.commerce.ikeadt.com
checkout.ae.staging.ikea.com
checkout.demo.ikea.com
checkout.dev.ikea.com
checkout.eg.staging.ikea.com
checkout.jo.staging.ikea.com
checkout.ma.staging.ikea.com
checkout.my.staging.ikea.com
checkout.om.staging.ikea.com
checkout.qa.staging.ikea.com
checkout.sg.cte.ikeadt.com
checkout.sg.staging.ikea.com
checkout.staging.ikea.com
checkout.test.ikea.com
commerce.ikeadt.com
cu-inter.commerce.ikeadt.com
dev-biz.cte.ikeadt.com
dev-cwtcadmin.ikeadt.net
dev-ipexdesignsearch.ikeadt.com
dev.arassetimages.ikea.com
dev.salja.ikea.net
dev.smaland.ikea.com
dev.visual-intelligence.ikea.net
ed-inter.commerce.ikeadt.com
foodmobile.cte.ikeadt.com
icsp.ppe.ingka.ikea.com
icsp.pte.ingka.ikea.com
ikea.com
imd.ikeadt.com
jira-test.build.ingka.ikea.com
kiosk.kitchen.planner.ikeadt.com
kiosk.kitchendev.planner.ikeadt.com
kitchen.planner.ikeadt.com
kitchendev.planner.ikeadt.com
labs.visa.ikeadt.net
lifeathome.ikeadt.com
order.cte.ikeadt.com
order.ppe.ikeadt.com
ptetest.plus.ikeadt.com
purchmanual.inter.ikeadt.com
q1-inter.commerce.ikeadt.com
qa-inter.commerce.ikeadt.com
qa-ipexdesignsearch.ikeadt.com
qa.api.commerce.ikeadt.com
salessimulator.kitchen.planner.ikeadt.com
securema.ppe.ikeadt.com
securema2.cte.ikeadt.com
securema2.dev.ikeadt.com
securema2.ppe.ikeadt.com
secureplanner.ppe.ikeadt.com
si-inter.commerce.ikeadt.com
smaland-api.ikeadt.net
stage.appointmentbooking.ppe.ikea.com
staging.visa.ikea.net
store-capacity.ikeadt.net
test-asset-idam.inter.ikeadt.net
test.partner.ikea.com
test.salja.ikea.net
test.visual-intelligence.ikea.net
testppe10.plus.ikeadt.com
testppe2.plus.ikeadt.com
web-api.cte.ikeadt.com
webviews.dev.salja.ikea.net
webviews.test.salja.ikea.net
ww8.cte.ikeadt.com
ww8.ppe.ikeadt.com
www.cte.ikeadt.com
www.ppe.ikeadt.com

Other certificates including the domain name ikeadt.com

(limited to 100 certificates)
mail402.ikeadt.com
ikea.com
ikea.com
webhook.ghec-actions-runners.dh2-1.cnp.ikeadt.com
*.nonprd-retops.api.inter.ikeadt.com
ikea.com
csp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
api.support.planner.qa.ikeadt.com
pte-insideworkspaces.ikeadt.com
ifb.ikeadt.com
dex.dev.cnp.ikeadt.com
ikea.com
s3-website.dev.cnp.ikeadt.com
ikea.com
*.s3.dev.cnp.ikeadt.com
testapp.dc-9.cnp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
*.demo.dh2-1.cnp.ikeadt.com
*.ccoe-cn-prod.dc9-1.cnp.ikeadt.com
officeplanner.ppe.ikeadt.com
ikea.com
ikea.com
*.te-perf-lab.dh2-1.cnp.ikeadt.com
ikea.com
ikeadt.com
ss.cmp.analytics.ikeadt.com
*.testapp.dev.cnp.ikeadt.com
ikea.com
*.spapps.inside-pte.ikeadt.com
docave-admin.ikeadt.com
*.glinux.dh2-1.cnp.ikeadt.com
mta-sts.ikeadt.com
ikea.com
ikea.com
gateway.mimir.observability.dh2-1.cnp.ikeadt.com
ikeadt.com
argocd.dev.cnp.ikeadt.com
ikea.com
api.support.planner.dev.ikeadt.com
*.s3.dev.cnp.ikeadt.com
*.htapps.intranet-inter-cte-m.ikeadt.com
ikeadt.com
ikeadt.com
auth.cnp.ikeadt.com
*.hub01.api.ikeadt.com
sts.ikeadt.com
support.planner.dev.ikeadt.com
webhook.gh-actions-runners.dh2-1.cnp.ikeadt.com
dashboard.tekton-pipelines.cnp.ikeadt.com
news-pte.ikeadt.com
ikea.com
lg.te-perf-lab.dh2-1.cnp.ikeadt.com
s3.dc9-1.cnp.ikeadt.com
ikeadt.com
ikea.com
ikeadt.com
ikea.com
webhook.gh-actions-runners.dc9-1.cnp.ikeadt.com
*.ikeaautomationframework.dh2-1.cnp.ikeadt.com
ikeadt.com
*.s3.dc9-1.cnp.ikeadt.com
mihogar.ikeadt.com
ikea.com
cgi-cds-websvc-test.ikeadt.com
ikea.com
s3.dev.cnp.ikeadt.com
ikea.com
*.testapp.dc9-1.cnp.ikeadt.com
api.support.planner.dev.ikeadt.com
gateway.loki.dev.cnp.ikeadt.com
ikeadt.com
ikeadt.com
ikea.com
spitzer.dev.cnp.ikeadt.com
dashboard.ceph.lab.cnp.ikeadt.com
dex.dev.cnp.ikeadt.com
*.rmps.ikeadt.com
ikeadt.com
otlp-grpc-gateway.traces.dev.cnp.ikeadt.com
mihogar.ikeadt.com
*.example.dh3-1.cnp.ikeadt.com
test-jira.ikeadt.com
ikea.com
ikeadt.com
*.s3.lab.cnp.ikeadt.com
api.support.planner.qa.ikeadt.com
ikeadt.com
*.ikeaautomationframeworkstage.dh2-1.cnp.ikeadt.com
ikea.com
ikea.com
ikeadt.com
ikea.com
*.htapps.intranet-inter-ppe.ikeadt.com

Certificate

The complete raw certificate details for ikeadt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsZ/aH813IUZqhrokSn9+GXhZp/ma
tiP/3aU82BH2hsRuuVD4rZHvugBefny8ouPxMBH4/5I6VwVAgyKXKxXfXA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11719262929117032700940008755436445601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inter IKEA Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikeadt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b19fda1fcd7721466a86ba244a7f7e197859a7f99ab623ffdda53cd811f686c46eb950f8ad91efba005e7e7cbca2e3f13011f8ff923a5705408322972b15df5c
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c6538f067ca11f0ccbb87f22b248f08658b4424
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2093 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.adv.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev-ipexdesignsearch.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa-ipexdesignsearch.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appointmentbooking.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barcode.ingka.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdver.api.commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ae.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.demo.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.dev.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.eg.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.jo.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.ma.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.my.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.om.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.qa.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sg.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sg.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.staging.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.test.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cu-inter.commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-biz.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cwtcadmin.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ipexdesignsearch.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.arassetimages.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.salja.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.smaland.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.visual-intelligence.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ed-inter.commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodmobile.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icsp.ppe.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icsp.pte.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imd.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira-test.build.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kitchen.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kitchendev.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchendev.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.visa.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeathome.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptetest.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchmanual.inter.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q1-inter.commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-inter.commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-ipexdesignsearch.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salessimulator.kitchen.planner.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema2.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema2.dev.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securema2.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureplanner.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si-inter.commerce.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smaland-api.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.appointmentbooking.ppe.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.visa.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-capacity.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-asset-idam.inter.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.partner.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.salja.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.visual-intelligence.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe2.plus.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-api.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webviews.dev.salja.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webviews.test.salja.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww8.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww8.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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