ingka.com

- Ingka Holding B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:d1:ba:52:05:6f:96:b4:36:3f:f3:90:b0:fe:50:dd was issued on by DigiCert Inc.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Ingka Holding B.V.

Organization: Ingka Holding B.V.
State / Province: Zuid-Holland
Locality: Leiden
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:d1:ba:52:05:6f:96:b4:36:3f:f3:90:b0:fe:50:dd
Serial Number (int): 14381249027860870578154904895822385373
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 34:94:62:44:9f:32:cb:a6:65:52:12:ab:a5:38:6f:dd:d4:b3:a4:f2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d1:94:5f:07:ae:f2:89:cd:f7:93:93:9b:61:10:69:cc:70:c5:84:33
Fingerprint (sha256): 37:fc:5a:03:78:32:e6:45:b1:97:8c:13:4d:c0:e4:97:33:fd:37:e3:d3:6a:70:c1:3a:b6:19:cb:34:f2:c4:24

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ingka.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingka.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingka.com
*.accounts.ingka.com
*.api.ingka.com
*.cdn.ingka.com
*.dev.customeradmin.customer.ingka.com
*.flytta.ingka.com
*.htapps.inside.ingka.com
*.ingka.com
*.iquote.ingka.com
*.prod.customeradmin.customer.ingka.com
*.spapps.inside.ingka.com
*.test.customeradmin.customer.ingka.com
*.ukapps.ingka.com
*.wms.fms.ingka.com
admin.pip.ingka.com
admin.range-categorisation.ingka.com
admin.range-management.ingka.com
admin.retail-pim.ingka.com
akacdn.ingka.com
api-gw.customer.ingka.com
api.buyback.cir.ingka.com
api.buyback.prod.cir.ingka.com
api.fixa.ingka.com
api.prod.apo.ingka.com
api.retail-pim.ingka.com
api.serviceoffers.ingka.com
backoffice.buyback.cir.ingka.com
backoffice.buyback.prod.cir.ingka.com
cart.beta.oneweb.ingka.com
cart.oneweb.ingka.com
cat-mfe.dev-lotta.ingka.com
cat-mfe.lotta.ingka.com
cms.ingka.com
config.salja.ingka.com
console.upptacka.ingka.com
coworker.buyback.cir.ingka.com
coworker.buyback.prod.cir.ingka.com
coworker.prod.store-events.ingka.com
customer.prod.store-events.ingka.com
customeradmin.customer.ingka.com
dashboard.admin.retail-pim.ingka.com
data.ingka.com
dor.food.ingka.com
ebv.prod.oc.ingka.com
edit.ico-worker.ingka.com
favs.oneweb.ingka.com
flytta.ingka.com
foodbox.food.ingka.com
framework.customer.ingka.com
igift.test.ingkadt.com
images-historical.asisonline.cir.ingka.com
inside.ext.ingka.com
inside.ingka.com
iquote.ingka.com
jira.digital.ingka.com
kategorisera.ingka.com
lb.prod.customeradmin.customer.ingka.com
main.buyback.prod.cir.ingka.com
metal-model.cybersec.ingka.com
one.dev-ugc.ingka.com
one.ugc.ingka.com
oos.inside.ingka.com
ordercapture.oneweb.ingka.com
preview.buyback.cir.ingka.com
pro.salja.ingka.com
prod.loyalty-service.ingka.com
prod.soim.ingka.com
prototype.data.ingka.com
rrm.api.ingka.com
shared.ext.ingka.com
shop.asisonline.cir.ingka.com
slm.ingka.com
storage.asisonline.cir.ingka.com
translations.customeradmin.customer.ingka.com
www.hej.ingka.com
www.ingka.com

Other certificates including the domain name ingka.com

(limited to 100 certificates)
dep-react-17-x.buyback.dev.circular-ventures.ingka.com
push.prometheus.monitoring.ilo.ingka.com
ingkaincludes.ingka.com
ziplookup-server.cwtools.dev.csc.ingka.com
ingka.com
notification.irecover.stage.ilo.ingka.com
be-fr.cocreate.ingka.com
prod.returns.ingka.com
soim.ru-prod.ingka.com
cybersec.ingka.com
monitoring.irecover.dev.ilo.ingka.com
dev.cloud.ingka.com
le-26875723.34.77.165.130.nip.io
rest-api.stage.foundation.ingka.com
aol-synq-service.aol.dev.ilo.ingka.com
portal-test.rtsales.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
*.pmt.ingka.com
auth.workflows.dev.ingka.com
stage-prepaidcard-adapter-zz-prepaidcard.gke.ingka.com
ctf.manager.api.ingka.com
irecover.ilo.ingka.com
hd-dtc.com
qa.csc-input.ingka.com
kr.cocreate.ingka.com
ingka.com
api.irecover.dev.ilo.ingka.com
canteenapp.food.ingka.com
prod-hub-zz-loyalty-service.gke.ingka.com
test.translate.ingka.com
www.test.translate.ingka.com
api.data.dev.ilo.ingka.com
cir-1399.buyback.dev.circular-ventures.ingka.com
test-kiosk.rtsales.ingka.com
ingkadt.com
www.kerenku.com
partner.ingka.com
api-lb-cssom-dev.ingka.com
api-fix-monitoring-cate.buyback.dev.cir.ingka.com
origin.stage.flytta.ingka.com
dev-slm-zz-slm.gke.ingka.com
dev.10jobstool.ingka.com
nl.cocreate.ingka.com
origin.stage.case.ingka.com
mfs.ingka.com
playground.servicemesh.ingka.com
logs-pr-725.dev.context.ingka.com
stag.v1.simulator.uk.ap.fs.ingka.com
ingka.com
kilobytetechnology.com
recovery.ingka.com
stag.v1.order-status.eu.fs.ingka.com
greymatter-ms.aol.sandbox.ilo.ingka.com
cld.prod.serviceoffers.ingka.com
login.gogogarden.com
web3.aleph-labs.com
collector.monitoring.ingka.com
ctf.manager.api.ingka.com
camptv-dev.ingka.com
api.prod.irecover.ilo.ingka.com
dev-slm-zz-slm.gke.ingka.com
cwtools.dev.csc.ingka.com
origin-gcp.ctf.api.ingka.com
backoffice-add-user-menu.buyback.dev.cir.ingka.com
origin.dev.sa.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
zap.sklabs.app
docs.dev.case.ingka.com
www.6join.com
cmdelete.prod.favs.ingka.com
cybersecinc.ingka.com
analytics.ikea.developyn.com
auth.workflows.dev.ingka.com
peopleplanning.ingka.com
item-ms.aol.dev.ilo.ingka.com
www.ikea.se
feed-nl-staging.stage-insp-feed.ingka.com
ui-origin.slm.ingka.com
auth.prod.foundation.ingka.com
aol-iws-service.aol.dev.ilo.ingka.com
origin.publicera.ingka.com
staging.kaskad.ingka.com
stage-checkout-location-us-locationservices.gke.ingka.com
prod.spe.ingka.com
stage.api.iobserve.ingka.com
rst-preprod.ingka.com
www.alaswaq.co
redirect.data.dev.ilo.ingka.com
proxy-to-vm-for-dev.insight-hub.ingka.com
lb.coworker.test.store-events.ingka.com
unitdata.copos.ingka.com
top-items-api-test.rtsales.ingka.com
origin.test.salja.ingka.com
notification.irecover.ilo.ingka.com
ingka.com
api-cir-2406.buyback.dev.cir.ingka.com
prod-nowit-wrapper-ops-intel-aiops.gke.ingka.com
hackathon.test.returns.ingka.com
es.cocreate.ingka.com
nl-feed-service.stage-insp-feed.ingka.com

Certificate

The complete raw certificate details for ingka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEKwT+IJXoi+hmTLy3t+FQyY2l6Gzc
pHKfewZJERU6C31NggeTUJoxEKPXR5UBxZjH1BUaVzSGcmH85CKbbSuNJA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14381249027860870578154904895822385373
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ingka Holding B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00042b04fe2095e88be8664cbcb7b7e150c98da5e86cdca4729f7b064911153a0b7d4d820793509a3110a3d7479501c598c7d4151a5734867261fce4229b6d2b8d24
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							349462449f32cba6655212aba5386fddd4b3a4f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2017 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accounts.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htapps.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iquote.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spapps.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukapps.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wms.fms.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pip.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.range-categorisation.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.range-management.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akacdn.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gw.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.fixa.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.prod.apo.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.serviceoffers.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.beta.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-mfe.dev-lotta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-mfe.lotta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.upptacka.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.prod.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.prod.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.admin.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dor.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebv.prod.oc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.ico-worker.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'favs.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbox.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igift.test.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-historical.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ext.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iquote.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.digital.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kategorisera.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb.prod.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metal-model.cybersec.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.dev-ugc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.ugc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordercapture.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.loyalty-service.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.soim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype.data.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrm.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.ext.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slm.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translations.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hej.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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