ingka.com

- Ingka Holding B.V. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:32:49:c9:c1:20:47:2f:6d:95:52:aa:57:62:70:56 was issued on by DigiCert Inc.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ingka Holding B.V.

Organization: Ingka Holding B.V.
State / Province: Zuid-Holland
Locality: Leiden
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:32:49:c9:c1:20:47:2f:6d:95:52:aa:57:62:70:56
Serial Number (int): 18870303384446924225813458131924185174
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1a:eb:c3:54:81:cd:4c:c0:ce:01:b3:7c:75:db:d9:17:f6:85:37:a1
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): fc:02:2c:de:04:af:95:e3:17:77:c2:ac:ea:92:bf:c0:ae:52:b9:b7
Fingerprint (sha256): 22:28:44:9d:33:2b:b7:b1:29:47:50:05:c9:4d:3a:ea:94:d8:44:3e:11:bf:aa:37:ec:75:dd:c1:90:5e:fe:25

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6-1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6-1.crl

Check the revocation status for certificate ingka.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingka.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accounts.ingka.com
*.api.ingka.com
*.htapps.inside.ingka.com
*.spapps.inside.ingka.com
admin-api.ingka.com
admin.range-categorisation.ingka.com
admin.range-management.ingka.com
admin.retail-pim.ingka.com
akacdn.ingka.com
api.fixa.ingka.com
api.ingka.com
api.retail-pim.ingka.com
boka.ingka.com
boka.ingkadt.com
c4.oneweb.ingka.com
cart-fe.ingka.com
cart.beta.oneweb.ingka.com
cart.oneweb.ingka.com
cocreate.ingka.com
components.retail-pim.ingka.com
coworker.prod.store-events.ingka.com
cusmasps.ingka.com
customer.prod.store-events.ingka.com
dashboard.admin.retail-pim.ingka.com
datacatalog.ingka.com
dev.developer.ingka.com
developer.ingka.com
ebv.prod.oc.ingka.com
edit.ico-worker.ingka.com
expresscheckout.ingka.com
favs.oneweb.ingka.com
fixa.ingka.com
fixaadmin.ingka.com
go.mystorevisit.ingka.com
hej-gateway.ingka.com
hej.ingka.com
icccache.ingka.com
ico-worker.ingka.com
igift-bo.ingka.com
igift.ingka.com
igift.test.ingkadt.com
ikea-value-quiz.ingka.com
imd.ingka.com
ingka.com
inside.ext.ingka.com
inside.ingka.com
jira.digital.ingka.com
join.ingka.com
jserroringest.ingka.com
jshealthcheck.ingka.com
manager-api.ingka.com
mystorevisit.ingka.com
mywork.ingka.com
omstart.ingka.com
oos.inside.ingka.com
ordercapture.ingka.com
ordercapture.oneweb.ingka.com
prepaidcard.ingka.com
prod.loyalty-service.ingka.com
prod.soim.ingka.com
publicera.ingka.com
rec.ingka.com
rrm.api.ingka.com
s2s.api.ingka.com
salja.ingka.com
shared.ext.ingka.com
stage-cusmasps.ingka.com
static-contents.iquote.ingka.com
static-dev.iquote.ingka.com
status.hej-staging.ingka.com
status.hej.ingka.com
upptacka.ingka.com
uth.ingka.com
variera.ingka.com
videomeeting.ingka.com
www.hej.ingka.com
www.ingka.com

Other certificates including the domain name ingka.com

(limited to 100 certificates)
dep-react-17-x.buyback.dev.circular-ventures.ingka.com
push.prometheus.monitoring.ilo.ingka.com
ingkaincludes.ingka.com
ziplookup-server.cwtools.dev.csc.ingka.com
ingka.com
notification.irecover.stage.ilo.ingka.com
be-fr.cocreate.ingka.com
prod.returns.ingka.com
soim.ru-prod.ingka.com
cybersec.ingka.com
monitoring.irecover.dev.ilo.ingka.com
dev.cloud.ingka.com
le-26875723.34.77.165.130.nip.io
rest-api.stage.foundation.ingka.com
aol-synq-service.aol.dev.ilo.ingka.com
portal-test.rtsales.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
*.pmt.ingka.com
auth.workflows.dev.ingka.com
stage-prepaidcard-adapter-zz-prepaidcard.gke.ingka.com
ctf.manager.api.ingka.com
irecover.ilo.ingka.com
hd-dtc.com
qa.csc-input.ingka.com
kr.cocreate.ingka.com
ingka.com
api.irecover.dev.ilo.ingka.com
canteenapp.food.ingka.com
prod-hub-zz-loyalty-service.gke.ingka.com
test.translate.ingka.com
www.test.translate.ingka.com
api.data.dev.ilo.ingka.com
cir-1399.buyback.dev.circular-ventures.ingka.com
test-kiosk.rtsales.ingka.com
ingkadt.com
www.kerenku.com
partner.ingka.com
api-lb-cssom-dev.ingka.com
api-fix-monitoring-cate.buyback.dev.cir.ingka.com
origin.stage.flytta.ingka.com
dev-slm-zz-slm.gke.ingka.com
dev.10jobstool.ingka.com
nl.cocreate.ingka.com
origin.stage.case.ingka.com
mfs.ingka.com
playground.servicemesh.ingka.com
logs-pr-725.dev.context.ingka.com
stag.v1.simulator.uk.ap.fs.ingka.com
ingka.com
kilobytetechnology.com
recovery.ingka.com
stag.v1.order-status.eu.fs.ingka.com
greymatter-ms.aol.sandbox.ilo.ingka.com
cld.prod.serviceoffers.ingka.com
login.gogogarden.com
web3.aleph-labs.com
collector.monitoring.ingka.com
ctf.manager.api.ingka.com
camptv-dev.ingka.com
api.prod.irecover.ilo.ingka.com
dev-slm-zz-slm.gke.ingka.com
cwtools.dev.csc.ingka.com
origin-gcp.ctf.api.ingka.com
backoffice-add-user-menu.buyback.dev.cir.ingka.com
origin.dev.sa.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
zap.sklabs.app
docs.dev.case.ingka.com
www.6join.com
cmdelete.prod.favs.ingka.com
cybersecinc.ingka.com
analytics.ikea.developyn.com
auth.workflows.dev.ingka.com
peopleplanning.ingka.com
item-ms.aol.dev.ilo.ingka.com
www.ikea.se
feed-nl-staging.stage-insp-feed.ingka.com
ui-origin.slm.ingka.com
auth.prod.foundation.ingka.com
aol-iws-service.aol.dev.ilo.ingka.com
origin.publicera.ingka.com
staging.kaskad.ingka.com
stage-checkout-location-us-locationservices.gke.ingka.com
prod.spe.ingka.com
stage.api.iobserve.ingka.com
rst-preprod.ingka.com
www.alaswaq.co
redirect.data.dev.ilo.ingka.com
proxy-to-vm-for-dev.insight-hub.ingka.com
lb.coworker.test.store-events.ingka.com
unitdata.copos.ingka.com
top-items-api-test.rtsales.ingka.com
origin.test.salja.ingka.com
notification.irecover.ilo.ingka.com
ingka.com
api-cir-2406.buyback.dev.cir.ingka.com
prod-nowit-wrapper-ops-intel-aiops.gke.ingka.com
hackathon.test.returns.ingka.com
es.cocreate.ingka.com
nl-feed-service.stage-insp-feed.ingka.com

Certificate

The complete raw certificate details for ingka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILLzCCChegAwIBAgIQDjJJycEgRy9tlVKqV2JwVjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjIwMTE5MDAwMDAwWhcN
MjMwMTE5MjM1OTU5WjBmMQswCQYDVQQGEwJOTDEVMBMGA1UECBMMWnVpZC1Ib2xs
YW5kMQ8wDQYDVQQHEwZMZWlkZW4xGzAZBgNVBAoTEkluZ2thIEhvbGRpbmcgQi5W
LjESMBAGA1UEAxMJaW5na2EuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE
W8Qoe2zF8Fq6Kz6sRHx4As9uDbRayw2KutqNYdAQTvYr6Lt1N1Vvbkqs2k8ayoru
KN/gjxl/ZsYxbjAXYrwWhaOCCLswggi3MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjn
jUY4tCzhxtniMB0GA1UdDgQWBBQa68NUgc1MwM4Bs3x129kX9oU3oTCCBvIGA1Ud
EQSCBukwggblghQqLmFjY291bnRzLmluZ2thLmNvbYIPKi5hcGkuaW5na2EuY29t
ghkqLmh0YXBwcy5pbnNpZGUuaW5na2EuY29tghkqLnNwYXBwcy5pbnNpZGUuaW5n
a2EuY29tghNhZG1pbi1hcGkuaW5na2EuY29tgiRhZG1pbi5yYW5nZS1jYXRlZ29y
aXNhdGlvbi5pbmdrYS5jb22CIGFkbWluLnJhbmdlLW1hbmFnZW1lbnQuaW5na2Eu
Y29tghphZG1pbi5yZXRhaWwtcGltLmluZ2thLmNvbYIQYWthY2RuLmluZ2thLmNv
bYISYXBpLmZpeGEuaW5na2EuY29tgg1hcGkuaW5na2EuY29tghhhcGkucmV0YWls
LXBpbS5pbmdrYS5jb22CDmJva2EuaW5na2EuY29tghBib2thLmluZ2thZHQuY29t
ghNjNC5vbmV3ZWIuaW5na2EuY29tghFjYXJ0LWZlLmluZ2thLmNvbYIaY2FydC5i
ZXRhLm9uZXdlYi5pbmdrYS5jb22CFWNhcnQub25ld2ViLmluZ2thLmNvbYISY29j
cmVhdGUuaW5na2EuY29tgh9jb21wb25lbnRzLnJldGFpbC1waW0uaW5na2EuY29t
giRjb3dvcmtlci5wcm9kLnN0b3JlLWV2ZW50cy5pbmdrYS5jb22CEmN1c21hc3Bz
LmluZ2thLmNvbYIkY3VzdG9tZXIucHJvZC5zdG9yZS1ldmVudHMuaW5na2EuY29t
giRkYXNoYm9hcmQuYWRtaW4ucmV0YWlsLXBpbS5pbmdrYS5jb22CFWRhdGFjYXRh
bG9nLmluZ2thLmNvbYIXZGV2LmRldmVsb3Blci5pbmdrYS5jb22CE2RldmVsb3Bl
ci5pbmdrYS5jb22CFWVidi5wcm9kLm9jLmluZ2thLmNvbYIZZWRpdC5pY28td29y
a2VyLmluZ2thLmNvbYIZZXhwcmVzc2NoZWNrb3V0LmluZ2thLmNvbYIVZmF2cy5v
bmV3ZWIuaW5na2EuY29tgg5maXhhLmluZ2thLmNvbYITZml4YWFkbWluLmluZ2th
LmNvbYIZZ28ubXlzdG9yZXZpc2l0LmluZ2thLmNvbYIVaGVqLWdhdGV3YXkuaW5n
a2EuY29tgg1oZWouaW5na2EuY29tghJpY2NjYWNoZS5pbmdrYS5jb22CFGljby13
b3JrZXIuaW5na2EuY29tghJpZ2lmdC1iby5pbmdrYS5jb22CD2lnaWZ0LmluZ2th
LmNvbYIWaWdpZnQudGVzdC5pbmdrYWR0LmNvbYIZaWtlYS12YWx1ZS1xdWl6Lmlu
Z2thLmNvbYINaW1kLmluZ2thLmNvbYIJaW5na2EuY29tghRpbnNpZGUuZXh0Lmlu
Z2thLmNvbYIQaW5zaWRlLmluZ2thLmNvbYIWamlyYS5kaWdpdGFsLmluZ2thLmNv
bYIOam9pbi5pbmdrYS5jb22CF2pzZXJyb3Jpbmdlc3QuaW5na2EuY29tghdqc2hl
YWx0aGNoZWNrLmluZ2thLmNvbYIVbWFuYWdlci1hcGkuaW5na2EuY29tghZteXN0
b3JldmlzaXQuaW5na2EuY29tghBteXdvcmsuaW5na2EuY29tghFvbXN0YXJ0Lmlu
Z2thLmNvbYIUb29zLmluc2lkZS5pbmdrYS5jb22CFm9yZGVyY2FwdHVyZS5pbmdr
YS5jb22CHW9yZGVyY2FwdHVyZS5vbmV3ZWIuaW5na2EuY29tghVwcmVwYWlkY2Fy
ZC5pbmdrYS5jb22CHnByb2QubG95YWx0eS1zZXJ2aWNlLmluZ2thLmNvbYITcHJv
ZC5zb2ltLmluZ2thLmNvbYITcHVibGljZXJhLmluZ2thLmNvbYINcmVjLmluZ2th
LmNvbYIRcnJtLmFwaS5pbmdrYS5jb22CEXMycy5hcGkuaW5na2EuY29tgg9zYWxq
YS5pbmdrYS5jb22CFHNoYXJlZC5leHQuaW5na2EuY29tghhzdGFnZS1jdXNtYXNw
cy5pbmdrYS5jb22CIHN0YXRpYy1jb250ZW50cy5pcXVvdGUuaW5na2EuY29tghtz
dGF0aWMtZGV2LmlxdW90ZS5pbmdrYS5jb22CHHN0YXR1cy5oZWotc3RhZ2luZy5p
bmdrYS5jb22CFHN0YXR1cy5oZWouaW5na2EuY29tghJ1cHB0YWNrYS5pbmdrYS5j
b22CDXV0aC5pbmdrYS5jb22CEXZhcmllcmEuaW5na2EuY29tghZ2aWRlb21lZXRp
bmcuaW5na2EuY29tghF3d3cuaGVqLmluZ2thLmNvbYINd3d3LmluZ2thLmNvbTAO
BgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMG8G
A1UdHwRoMGYwMaAvoC2GK2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNo
YTItZzYtMS5jcmwwMaAvoC2GK2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2Nh
LXNoYTItZzYtMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcC
ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHwGCCsGAQUFBwEBBHAwbjAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAC
hjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJl
U2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw
DQYJKoZIhvcNAQELBQADggEBAKyTgwVBNLbtbl2Zmy4o5AWqPjfMgga6/7WUUCTJ
O2II006JqsPWOrAstVDfhpXPE4eoeIWYvgXZbu0retReYDwaZQybusr51hBEJhTs
vNtXqE0DORbG/g60ARzAofDVYw8HX3u2CY1wDZVNoBvUCpfTTgzHiRx9/eDAFyL/
rJLdOnnK6sroBj05K32RGz6coYt5G436BkvGBrtZsOM2tleEKmIgl7DSDsOCHYgA
SVUrL66GxJYjrYu6Xew2xj268BaRJS7nqhBp6Ue/s08lQbnN0jcS1T+u0R4tIlxK
D71rTk8LyM5T6jfdp+YrAbuDHEd8ayCCSyuFWEaQbW8Id1M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEW8Qoe2zF8Fq6Kz6sRHx4As9uDbRa
yw2KutqNYdAQTvYr6Lt1N1Vvbkqs2k8ayoruKN/gjxl/ZsYxbjAXYrwWhQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18870303384446924225813458131924185174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ingka Holding B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00045bc4287b6cc5f05aba2b3eac447c7802cf6e0db45acb0d8abada8d61d0104ef62be8bb7537556f6e4aacda4f1aca8aee28dfe08f197f66c6316e301762bc1685
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1aebc35481cd4cc0ce01b37c75dbd917f68537a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1769 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accounts.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htapps.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spapps.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.range-categorisation.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.range-management.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akacdn.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.fixa.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boka.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boka.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart-fe.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.beta.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocreate.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'components.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.prod.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusmasps.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.prod.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.admin.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacatalog.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.developer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebv.prod.oc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.ico-worker.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresscheckout.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'favs.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixa.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixaadmin.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.mystorevisit.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hej-gateway.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hej.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icccache.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ico-worker.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igift-bo.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igift.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igift.test.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea-value-quiz.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imd.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ext.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.digital.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jserroringest.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jshealthcheck.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manager-api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystorevisit.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omstart.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordercapture.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordercapture.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidcard.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.loyalty-service.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.soim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicera.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrm.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2s.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.ext.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-cusmasps.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-contents.iquote.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-dev.iquote.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hej-staging.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hej.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upptacka.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uth.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'variera.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videomeeting.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hej.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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