ikeadt.com

- Inter IKEA Systems B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:76:36:64:e4:18:fa:c3:aa:0d:c6:d6:54:da:03:51 was issued on by DigiCert Inc.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Inter IKEA Systems B.V.

Organization: Inter IKEA Systems B.V.
State / Province: Zuid-Holland
Locality: Delft
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:76:36:64:e4:18:fa:c3:aa:0d:c6:d6:54:da:03:51
Serial Number (int): 12576846234898981792864421954438431569
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f0:d8:a4:55:9c:c4:ab:5b:f2:57:17:fc:bc:d1:b4:ea:fa:07:0c:a4
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e6:3c:80:9a:48:dd:be:0a:d8:ae:73:95:bc:70:eb:a6:c4:ee:08:02
Fingerprint (sha256): 1f:9d:ca:f5:03:1b:7e:c0:61:d5:93:f8:69:31:36:f7:13:e8:f3:93:99:d4:81:cd:72:84:18:f2:61:97:cd:27

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ikeadt.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ikeadt.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ikeadt.com
*.apps.ikeadt.com
*.dev.vetlanda.ikeadt.net
*.ocp.ingka.ikeadt.com
*.staging.vetlanda.ikeadt.net
api.dev.content.ikea.net
api.stage.content.ikea.net
apps.dev.content.ikea.net
apps.stage.content.ikea.net
beta.ai.ingka.ikea.net
businessdev.accounts.ikea.com
cte.accounts.ikea.com
dev.accounts.ikea.com
dev.accounts.ikeadt.com
dev.ai.ingka.ikea.net
dev.content.ikea.net
dev.instore.ingkadt.com
dev.knowledge.ikea.net
dev.vetlanda.ikeadt.net
dev1.accounts.ikea.com
dev10.accounts.ikea.com
dev2.accounts.ikea.com
dev3.accounts.ikea.com
dev4.accounts.ikea.com
dev5.accounts.ikea.com
dev6.accounts.ikea.com
dev7.accounts.ikea.com
dev8.accounts.ikea.com
dev9.accounts.ikea.com
devat.accounts.ikea.com
devau.accounts.ikea.com
devbe.accounts.ikea.com
devca.accounts.ikea.com
devch.accounts.ikea.com
devcz.accounts.ikea.com
devde.accounts.ikea.com
devdk.accounts.ikea.com
deves.accounts.ikea.com
devfi.accounts.ikea.com
devfr.accounts.ikea.com
devgb.accounts.ikea.com
devhr.accounts.ikea.com
devhu.accounts.ikea.com
devie.accounts.ikea.com
devin.accounts.ikea.com
devit.accounts.ikea.com
devjp.accounts.ikea.com
devkr.accounts.ikea.com
devkw.accounts.ikea.com
devnl.accounts.ikea.com
devno.accounts.ikea.com
devpl.accounts.ikea.com
devpt.accounts.ikea.com
devro.accounts.ikea.com
devrs.accounts.ikea.com
devru.accounts.ikea.com
devru2.accounts.ikea.com
devse.accounts.ikea.com
devsi.accounts.ikea.com
devsk.accounts.ikea.com
devus.accounts.ikea.com
global.ikeadt.net
go.instore.ikeadt.com
hub.stage.knowledge.ikea.net
ifb.ikeadt.com
instore.ikeadt.com
metaphactory.stage.knowledge.ikea.net
metro.ikeadt.net
oplogin.ppe.ikeadt.com
opsip.ppe.ikeadt.com
planner-stage.ikea.com
planner-test.ikea.com
planner.cte.ikeadt.com
planner.ikea.com
ppe.accounts.ikea.com
sandbox.accounts.ikea.com
stage.content.ikea.net
stage.knowledge.ikea.net
staging.ai.ingka.ikea.net
stkw.accounts.ikea.com
testppe10.pingfederate.ikeadt.com
testppe10.plusnavigate.ikeadt.com
testppe2.plusnavigate.ikeadt.com
trana.ai.ingka.ikea.net
vantar.ikeadt.net
vetlanda.ikeadt.net

Other certificates including the domain name ikeadt.com

(limited to 100 certificates)
mail402.ikeadt.com
ikea.com
ikea.com
webhook.ghec-actions-runners.dh2-1.cnp.ikeadt.com
*.nonprd-retops.api.inter.ikeadt.com
ikea.com
csp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
api.support.planner.qa.ikeadt.com
pte-insideworkspaces.ikeadt.com
ifb.ikeadt.com
dex.dev.cnp.ikeadt.com
ikea.com
s3-website.dev.cnp.ikeadt.com
ikea.com
*.s3.dev.cnp.ikeadt.com
testapp.dc-9.cnp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
*.demo.dh2-1.cnp.ikeadt.com
*.ccoe-cn-prod.dc9-1.cnp.ikeadt.com
officeplanner.ppe.ikeadt.com
ikea.com
ikea.com
*.te-perf-lab.dh2-1.cnp.ikeadt.com
ikea.com
ikeadt.com
ss.cmp.analytics.ikeadt.com
*.testapp.dev.cnp.ikeadt.com
ikea.com
*.spapps.inside-pte.ikeadt.com
docave-admin.ikeadt.com
*.glinux.dh2-1.cnp.ikeadt.com
mta-sts.ikeadt.com
ikea.com
ikea.com
gateway.mimir.observability.dh2-1.cnp.ikeadt.com
ikeadt.com
argocd.dev.cnp.ikeadt.com
ikea.com
api.support.planner.dev.ikeadt.com
*.s3.dev.cnp.ikeadt.com
*.htapps.intranet-inter-cte-m.ikeadt.com
ikeadt.com
ikeadt.com
auth.cnp.ikeadt.com
*.hub01.api.ikeadt.com
sts.ikeadt.com
support.planner.dev.ikeadt.com
webhook.gh-actions-runners.dh2-1.cnp.ikeadt.com
dashboard.tekton-pipelines.cnp.ikeadt.com
news-pte.ikeadt.com
ikea.com
lg.te-perf-lab.dh2-1.cnp.ikeadt.com
s3.dc9-1.cnp.ikeadt.com
ikeadt.com
ikea.com
ikeadt.com
ikea.com
webhook.gh-actions-runners.dc9-1.cnp.ikeadt.com
*.ikeaautomationframework.dh2-1.cnp.ikeadt.com
ikeadt.com
*.s3.dc9-1.cnp.ikeadt.com
mihogar.ikeadt.com
ikea.com
cgi-cds-websvc-test.ikeadt.com
ikea.com
s3.dev.cnp.ikeadt.com
ikea.com
*.testapp.dc9-1.cnp.ikeadt.com
api.support.planner.dev.ikeadt.com
gateway.loki.dev.cnp.ikeadt.com
ikeadt.com
ikeadt.com
ikea.com
spitzer.dev.cnp.ikeadt.com
dashboard.ceph.lab.cnp.ikeadt.com
dex.dev.cnp.ikeadt.com
*.rmps.ikeadt.com
ikeadt.com
otlp-grpc-gateway.traces.dev.cnp.ikeadt.com
mihogar.ikeadt.com
*.example.dh3-1.cnp.ikeadt.com
test-jira.ikeadt.com
ikea.com
ikeadt.com
*.s3.lab.cnp.ikeadt.com
api.support.planner.qa.ikeadt.com
ikeadt.com
*.ikeaautomationframeworkstage.dh2-1.cnp.ikeadt.com
ikea.com
ikea.com
ikeadt.com
ikea.com
*.htapps.intranet-inter-ppe.ikeadt.com

Certificate

The complete raw certificate details for ikeadt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEnmpPqzHHvIFTpRUuP6t/iksreLDQ
JoH9bTmR8otv8OQSyubCt8hJTUlAMOwv0W4twbrMcQzj70r500xYevwR0A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12576846234898981792864421954438431569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inter IKEA Systems B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikeadt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00049e6a4fab31c7bc8153a5152e3fab7f8a4b2b78b0d02681fd6d3991f28b6ff0e412cae6c2b7c8494d494030ec2fd16e2dc1bacc710ce3ef4af9d34c587afc11d0
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0d8a4559cc4ab5bf25717fcbcd1b4eafa070ca4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.vetlanda.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocp.ingka.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.vetlanda.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdev.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.accounts.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.instore.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.vetlanda.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev10.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev6.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev7.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev8.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev9.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devat.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devau.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devbe.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devca.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devch.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcz.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devde.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdk.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deves.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfi.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devgb.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devhr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devhu.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devie.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devin.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devit.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devjp.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devkr.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devkw.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devnl.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devno.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devpl.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devpt.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devro.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devrs.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devru.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devru2.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devse.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsi.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsk.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devus.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.instore.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifb.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaphactory.stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oplogin.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsip.ppe.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner-stage.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner-test.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner.cte.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.content.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.knowledge.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stkw.accounts.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.pingfederate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe10.plusnavigate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testppe2.plusnavigate.ikeadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trana.ai.ingka.ikea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantar.ikeadt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetlanda.ikeadt.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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