www.ikano.dk

- Ikano Bank, filial af Ikano Bank SE, Sverige -

Issued by GlobalSign Extended Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:1b:1d:be:71:3a:63:35:13:f0:cc:32:0d:e7:fe:db:07 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Ikano Bank, filial af Ikano Bank SE, Sverige

Company registration number: 28148321
Organization: Ikano Bank, filial af Ikano Bank SE, Sverige
Organization unit: IT
Address: Stationsparken 24
State / Province: Copenhagen
Locality: Glostrup
Country: DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:1b:1d:be:71:3a:63:35:13:f0:cc:32:0d:e7:fe:db:07
Serial Number (int): 1492174222543438929648275577351638605552391
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: d5:ca:27:fa:64:02:44:32:4c:d7:2e:39:61:63:8b:61:b2:c9:2a:39
AuthorityKeyId: b0:b0:4a:fd:1c:75:28:f8:1c:61:aa:13:f6:fa:c1:90:3d:6b:16:a3

Fingerprint (sha1): e8:1b:65:2c:4d:ff:5d:57:f4:68:30:03:16:7c:76:e9:05:26:d2:8b
Fingerprint (sha256): 34:81:4e:a8:4c:cc:71:25:49:d8:1d:47:19:42:04:99:3a:06:ed:6b:ff:1e:d9:49:29:7d:7e:79:51:ac:9b:48

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalg2.crl

Check the revocation status for certificate www.ikano.dk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikano.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ikano.dk
ikanobank.dk
www.ikanobank.dk
ikano.dk

Other certificates including the domain name ikano.dk

(limited to 100 certificates)
selfservice.ikano.dk
mail.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
irw.ikano.dk
www.ikano.dk
selfservice.ikano.dk
citrix.ikano.dk
www.ikano.dk
mail.ikano.nu
citrix.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
sip.ikano.nu
test.ikano.dk
www.ikano.dk
www.pengeautomaten.dk
access.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
citrix.ikano.dk
sip.ikano.nu
irw.ikano.dk
access.ikano.nu
selfservice.ikano.dk
selfservicetest.ikano.dk
sts.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservicetest.ikano.dk
www.ikano.dk
citrix.ikano.dk
www.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
mail.ikano.nu
mail.ikano.nu
www.ikano.dk
sip.ikano.nu
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
sip.ikano.nu
www.ikano.dk
capgemini.ikano.dk
test.ikano.dk

Certificate

The complete raw certificate details for www.ikano.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKJwcjReroihySSPZdOc
ts46oQZwWqgXXFJji8sG28V5fnp8DXZcMOHOBprZzKvUX731Edze93697qJ4Ilbj
ZLkLRhbf3fvo911fKjW/laA/Qd4srSO5UfRtW0iL2JPls594KFDE5Td4q4IS8ni6
vb/tylHAeeHYjrGmyPjJ16/WeCQCvqWdje5F6yyQc5H89o5EJ4gZkuA/dhr3tgM4
rS2s8eqFlNCEChsIvthTRPWC00++Lq24o/aRF7yKRKW/I/Vp31taWmiI0sCy0b2U
1WEFlwktFHOCG1QZWYZVB0aQ5VGxItcZ1jnsdsEhJ72ilvVkYkjE83uddckOHWbd
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492174222543438929648275577351638605552391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-19 13:48:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-21 14:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '28148321'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Copenhagen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Glostrup'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stationsparken 24'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ikano Bank, filial af Ikano Bank SE, Sverige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ikano.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20278230570541072299027795757660017300334342135110546792768600620127471399673071845141674437899362733868078250074129069185800713064238145489103469136235274728646042652223657784057830240892297148441524651229607925704628850846094602982326678846154112224648171211390595570649586902976248605149819266156295319750073314088014652470602135659901631413880463745041862970432343294054024190525874631131501220416787271950146316625743549944657906540715684525926280109201490750885022351802917241582489453265123926749777658188877963497625228377699552936668805837967645328881005114839643568239868639917776134961236753720547951959533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5ca27fa640244324cd72e3961638b61b2c92a39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b0b04afd1c7528f81c61aa13f6fac1903d6b16a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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