selfservice.ikano.dk

- Ikano Bank AB (Publ) -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 6e:1e:aa:26:9a:79:dc:15:2a:44:23:e7 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Company registration number: 516406-0922
Organization: Ikano Bank AB (Publ)
Organization unit: IT
Address: Scheelevagen 15
State / Province: Lund
Locality: Lund
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:1e:aa:26:9a:79:dc:15:2a:44:23:e7
Serial Number (int): 34080422369345929013100815335
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: f9:64:68:6e:24:ee:b9:23:32:b7:72:40:84:02:76:8d:0c:d6:6f:76
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): 3b:50:f7:7c:2e:92:06:22:f3:f5:6f:11:ea:0e:75:83:66:52:32:bf
Fingerprint (sha256): 20:e5:80:84:a6:71:46:0d:95:56:90:9f:72:c5:43:8c:cb:c7:28:ed:9b:22:7e:37:9d:58:e4:19:ad:42:c0:dd

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate selfservice.ikano.dk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selfservice.ikano.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

selfservice.ikano.dk
selfservice.ikano.fi
selfservice.ikano.no
selfservice.ikano.nu

Other certificates including the domain name ikano.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for selfservice.ikano.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34080422369345929013100815335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-18 11:56:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 11:56:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scheelevagen 15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selfservice.ikano.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673775289701855176753939390717038989140874670213602879651800944439193478398114304828582921562173746991099486895320308668563103569684973972630351100029054264153600948872189083787199075696413789708042538647200841147904364774985515845302733348940887395948589672534028184388963909291849100755696610074886375120795446215389852423975684022434239096790450445695746349912637833850412950446950324456354022978929474381606433180825534115819629863331755408083890525140500745723527337305809782693844790243798028019879056561527748255145845049207845657247594582932493393344546487042290077989137876031016297876462635601777274845928918635182899745896072930691063119009701816310868019668746062117596493400904033022021060395142758731049783691391933596040566135692752008197636835137165965187809060648561938972080579244715704706957632936395137297181901539603885659084503772744398917819324175314650673752229113412372379489285774009398408278991783340209572625826396038484863916461454280770595036118918234883847642526907965512147073709966542030364805420210763968052316859083176778344271045080106552764957013143937427729985840279308277351944560729302080063828579034121717944850278122440230085028671527877184892295842295997755525886824869609345311891871488081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f964686e24eeb92332b772408402768d0cd66f76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0093b3a54de9546c28534a738c74956664c30c38cef6a378b23b3870e494c10c2374dccc408c1eac078737c6e8f3bbd747575cc80bab0790d28ff33e985e5f44f157b3ccbd8eb6d62a8cf25054eb5bdb44e91fd4e25652b44f6a4c289582780f29613323f129fda64ea0a8e486ec08a807ff3a7bdb97e7f656df7ab3b13b301aba588251d6f0156f53517a62f1703ffa92f429021b3b868177a45ceb2ff46d2e2991ebd94165785c702eaee165800e81d71cceb590da0f6a2fead7fc5434f3799b01ed886a3be2c2f2d1cde9c923568cab6360cb2947fb3f8e4e729760a549d30f6763f404c52705ac36f06c07423be43dbcc66abcc71a193bb22fa0418eedf432