ikeadt.com

- Inter IKEA Systems B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:38:40:19:a4:03:ce:26:e8:44:93:e0:ac:63:fd:07 was issued on by DigiCert Inc.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Inter IKEA Systems B.V.

Organization: Inter IKEA Systems B.V.
State / Province: Zuid-Holland
Locality: Delft
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:38:40:19:a4:03:ce:26:e8:44:93:e0:ac:63:fd:07
Serial Number (int): 9596664700251199934407775493734792455
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 30:99:32:4d:18:91:f7:d3:94:06:4c:93:4d:91:e3:e5:9c:ea:e4:a6
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 9a:b9:3b:81:0d:90:f3:82:9d:96:b8:5f:f9:47:a9:a2:ca:1b:bf:fa
Fingerprint (sha256): 10:84:d5:7f:f6:8e:2f:b7:5f:8e:3a:63:bc:db:4b:e0:ab:b9:07:60:ca:96:16:5c:57:29:19:29:0b:51:9b:c7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ikeadt.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ikeadt.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ikeadt.com
*.apps.ikeadt.com
*.ocp.ingka.ikeadt.com
api.dev.content.ikea.net
api.stage.content.ikea.net
apps.dev.content.ikea.net
apps.stage.content.ikea.net
beta.ai.ingka.ikea.net
businessdev.accounts.ikea.com
cte.accounts.ikea.com
dev.accounts.ikea.com
dev.accounts.ikeadt.com
dev.ai.ingka.ikea.net
dev.content.ikea.net
dev.instore.ingkadt.com
dev.knowledge.ikea.net
dev1.accounts.ikea.com
dev10.accounts.ikea.com
dev2.accounts.ikea.com
dev3.accounts.ikea.com
dev4.accounts.ikea.com
dev5.accounts.ikea.com
dev6.accounts.ikea.com
dev7.accounts.ikea.com
dev8.accounts.ikea.com
dev9.accounts.ikea.com
devcz.accounts.ikea.com
devdk.accounts.ikea.com
deves.accounts.ikea.com
devfr.accounts.ikea.com
devhr.accounts.ikea.com
devhu.accounts.ikea.com
devin.accounts.ikea.com
devit.accounts.ikea.com
devjp.accounts.ikea.com
devkr.accounts.ikea.com
devnl.accounts.ikea.com
devpl.accounts.ikea.com
devpt.accounts.ikea.com
devro.accounts.ikea.com
devrs.accounts.ikea.com
devru.accounts.ikea.com
devru2.accounts.ikea.com
devsi.accounts.ikea.com
devsk.accounts.ikea.com
devus.accounts.ikea.com
global.ikeadt.net
go.instore.ikeadt.com
hub.stage.knowledge.ikea.net
ifb.ikeadt.com
instore.ikeadt.com
metaphactory.stage.knowledge.ikea.net
metro.ikeadt.net
oplogin.ppe.ikeadt.com
opsip.ppe.ikeadt.com
planner.cte.ikeadt.com
ppe.accounts.ikea.com
sandbox.accounts.ikea.com
stage.content.ikea.net
stage.knowledge.ikea.net
staging.ai.ingka.ikea.net
testppe10.pingfederate.ikeadt.com
testppe10.plusnavigate.ikeadt.com
testppe2.plusnavigate.ikeadt.com
trana.ai.ingka.ikea.net
vantar.ikeadt.net

Other certificates including the domain name ikeadt.com

(limited to 100 certificates)
mail402.ikeadt.com
ikea.com
ikea.com
webhook.ghec-actions-runners.dh2-1.cnp.ikeadt.com
*.nonprd-retops.api.inter.ikeadt.com
ikea.com
csp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
api.support.planner.qa.ikeadt.com
pte-insideworkspaces.ikeadt.com
ifb.ikeadt.com
dex.dev.cnp.ikeadt.com
ikea.com
s3-website.dev.cnp.ikeadt.com
ikea.com
*.s3.dev.cnp.ikeadt.com
testapp.dc-9.cnp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
*.demo.dh2-1.cnp.ikeadt.com
*.ccoe-cn-prod.dc9-1.cnp.ikeadt.com
officeplanner.ppe.ikeadt.com
ikea.com
ikea.com
*.te-perf-lab.dh2-1.cnp.ikeadt.com
ikea.com
ikeadt.com
ss.cmp.analytics.ikeadt.com
*.testapp.dev.cnp.ikeadt.com
ikea.com
*.spapps.inside-pte.ikeadt.com
docave-admin.ikeadt.com
*.glinux.dh2-1.cnp.ikeadt.com
mta-sts.ikeadt.com
ikea.com
ikea.com
gateway.mimir.observability.dh2-1.cnp.ikeadt.com
ikeadt.com
argocd.dev.cnp.ikeadt.com
ikea.com
api.support.planner.dev.ikeadt.com
*.s3.dev.cnp.ikeadt.com
*.htapps.intranet-inter-cte-m.ikeadt.com
ikeadt.com
ikeadt.com
auth.cnp.ikeadt.com
*.hub01.api.ikeadt.com
sts.ikeadt.com
support.planner.dev.ikeadt.com
webhook.gh-actions-runners.dh2-1.cnp.ikeadt.com
dashboard.tekton-pipelines.cnp.ikeadt.com
news-pte.ikeadt.com
ikea.com
lg.te-perf-lab.dh2-1.cnp.ikeadt.com
s3.dc9-1.cnp.ikeadt.com
ikeadt.com
ikea.com
ikeadt.com
ikea.com
webhook.gh-actions-runners.dc9-1.cnp.ikeadt.com
*.ikeaautomationframework.dh2-1.cnp.ikeadt.com
ikeadt.com
*.s3.dc9-1.cnp.ikeadt.com
mihogar.ikeadt.com
ikea.com
cgi-cds-websvc-test.ikeadt.com
ikea.com
s3.dev.cnp.ikeadt.com
ikea.com
*.testapp.dc9-1.cnp.ikeadt.com
api.support.planner.dev.ikeadt.com
gateway.loki.dev.cnp.ikeadt.com
ikeadt.com
ikeadt.com
ikea.com
spitzer.dev.cnp.ikeadt.com
dashboard.ceph.lab.cnp.ikeadt.com
dex.dev.cnp.ikeadt.com
*.rmps.ikeadt.com
ikeadt.com
otlp-grpc-gateway.traces.dev.cnp.ikeadt.com
mihogar.ikeadt.com
*.example.dh3-1.cnp.ikeadt.com
test-jira.ikeadt.com
ikea.com
ikeadt.com
*.s3.lab.cnp.ikeadt.com
api.support.planner.qa.ikeadt.com
ikeadt.com
*.ikeaautomationframeworkstage.dh2-1.cnp.ikeadt.com
ikea.com
ikea.com
ikeadt.com
ikea.com
*.htapps.intranet-inter-ppe.ikeadt.com

Certificate

The complete raw certificate details for ikeadt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEplwT0gSnbrnYUvanpYqDITLfnY/f
2fL1QpTNOIidw9+0BCRT6O9CTCJ2lHtm0wwQ7Dvlx+YScaDpoOy3w8YrAw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9596664700251199934407775493734792455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inter IKEA Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikeadt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a65c13d204a76eb9d852f6a7a58a832132df9d8fdfd9f2f54294cd38889dc3dfb4042453e8ef424c2276947b66d30c10ec3be5c7e61271a0e9a0ecb7c3c62b03
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3099324d1891f7d394064c934d91e3e59ceae4a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1641 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocp.ingka.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdev.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.accounts.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.instore.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev10.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev6.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev7.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev8.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev9.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcz.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdk.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deves.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devhr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devhu.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devin.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devit.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devjp.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devkr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devnl.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devpl.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devpt.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devro.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devrs.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devru.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devru2.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsi.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsk.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devus.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.instore.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifb.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaphactory.stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oplogin.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsip.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.pingfederate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.plusnavigate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe2.plusnavigate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trana.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantar.ikeadt.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d44eb3a1800000403004730450220414b86e0bddf2cf504c500e351d31f2dd7f86618f8fc2fa522d63b835d2da7ca022100ed75ad3299b8c46a2c0bdadac9aeff45896c24d76b3edc209dac6ce02852eb690076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d44eb3a430000040300473045022100c28b41edc3ffa2ff1837508279dc2835633ba71714ae7e56a9be7e2bd51a1f1a022025505188bf32bb2b97e591d89b475c42888823be0a5e820244c22c69137e309d007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d44eb3a8f0000040300473045022100ba486088a1f2b3ddd5738a8b7538100497426e2a207500f8e43996f10ebaac05022070c3f0507b409d4857bb0390c3f41f301a4e432acad00e1848b187422f74a4ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a6627655a06f39d66aad331202cd043c2aaaf940c486ba71881c996aa6608f97991b609ea77102cd31a1ce400a30a52c7b53b8048bfe369a667736824d25bd544c38b20e8adba0974b462eeefb9b456503bc280a574a31647bec339a1aa8e991433e7daa9c9d9d2c737c149ae2af4f3c5b15ebc506ec09e28fb275b204827c7ca2db42f4fadda81d9faed518b3277707a663070a2639e1fc0976add5095e360b7d864ccdd84daa35d967f0b83389e4e8ba9a8e4cae5ffc6b061b7650a98140aaa847bd1ef77e50eb096d20f4d02efe5ac01749b1f9ef31f8de715dc9aea71c91c21199efc1645b698a6f03cecbe663d5fab5a22073001c37a21d00da4b297be2