ingkadt.com

- Ingka Holding B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:0d:03:a2:f9:54:0c:b1:5b:9b:a5:6f:40:3b:d4:20 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Ingka Holding B.V.

Organization: Ingka Holding B.V.
State / Province: Zuid-Holland
Locality: Leiden
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:0d:03:a2:f9:54:0c:b1:5b:9b:a5:6f:40:3b:d4:20
Serial Number (int): 4055257605870215798151377650552919072
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c3:f2:e3:86:01:39:23:45:f3:f1:ec:75:b2:fc:1d:22:09:a7:e9:a1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 22:d0:f6:b3:5c:1e:31:21:86:e8:28:1a:88:5c:3e:7e:1b:d5:5a:e8
Fingerprint (sha256): 39:c2:ff:1c:87:23:c6:64:e8:a3:6f:17:22:e0:05:d6:da:00:f4:67:7c:5d:23:66:80:d0:34:fd:df:24:ee:87

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ingkadt.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingkadt.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingkadt.com
*.admin.range-categorisation.ingkadt.com
*.admin.retail-pim.ingkadt.com
*.api.retail-pim.ingkadt.com
*.dev.flytta.ingka.com
*.dev.wms.fms.ingka.com
*.salja.ingka.com
*.stage.flytta.ingka.com
*.test.flytta.ingka.com
*.vetlanda.ingkadt.com
api-gw.dev.customer.ingka.com
api-gw.test.customer.ingka.com
api.test.apo.ingka.com
cart.oneweb.ingkadt.com
cat-mfe.stage-lotta.ingka.com
cms.ingkadt.com
cocreate.ingkadt.com
console.upptacka.ingkadt.com
coworker.test.store-events.ingka.com
cssom-dev.ingka.com
cssom-stage.ingka.com
cte.salesassistant.ingka.com
customer.test.store-events.ingka.com
customeradmin.dev.customer.ingka.com
customeradmin.test.customer.ingka.com
delta.dev.ingkadt.com
dev-cusmasps.ingka.com
dev-datacatalog.ingka.com
dev-handraiser-admin.ingka.com
dev.atkomst.ingka.com
dev.b2bda.ingkadt.com
dev.console.upptacka.ingkadt.com
dev.favs.oneweb.ingkadt.com
dev.flytta.ingka.com
dev.kappla.ingka.com
dev.oc.ingka.com
dev.prepaidcard.ingkadt.com
dev.sa.ingka.com
dev.salesassistant.ingka.com
dev.slm.ingka.com
dev.upptacka.ingkadt.com
display.upptacka.ingkadt.com
dor.food-stage.ingka.com
expresscheckoutdev.ingkadt.com
fixademo.ingka.com
fixademoadmin.ingka.com
foodbox.food-stage.ingka.com
foodbox.food-test.ingka.com
go.mystorevisit.ingkadt.com
hej-gateway-staging.ingka.com
hej-staging.ingka.com
i18n.food-dev.ingka.com
i18n.food-stage.ingka.com
icccache.ingkadt.com
ifst.ingkadt.com
igift-bo.test.ingkadt.com
igift.test.ingkadt.com
kategorisera.ingkadt.com
metal-model.dev.cybersec.ingka.com
metal-model.staging.cybersec.ingka.com
mystorevisit.ingkadt.com
mywork-ppe.ingka.com
nfw.cte.ingkadt.com
ordercapture.ingkadt.com
ordercapture.stage.oneweb.ingkadt.com
pmp-metrics.ingkadt.com
pocca.dev.cybersec.ingka.com
ppe.boka.ingka.com
prepaidcard.ingkadt.com
publicera.cte.ingka.com
rrm.api.ppe.ingkadt.com
stage-cusmasps.ingka.com
stage-datacatalog.ingka.com
stage.atkomst.ingka.com
stage.flytta.ingka.com
stage.loyalty-service.ingka.com
stage.salja.ingka.com
stage.slm.ingka.com
stage.soim.ingkadt.com
stagicow.accounts.ingka.com
staging.admin.range-categorisation.ingkadt.com
staging.admin.range-management.ingkadt.com
staging.api.serviceoffers.ingka.com
staging.iloff.ingka.com
test-cusmasps.ingka.com
test-datacatalog.ingka.com
test.b2bda.ingkadt.com
test.bcw.ingka.com
test.flytta.ingka.com
test.kappla.ingka.com
test.oc.ingka.com
test.salja.ingka.com
testicow.accounts.ingka.com
upptacka.ingkadt.com
uth-dev.ingka.com
vetlanda.ingkadt.com
videomeeting.ingkadt.com
videomeeting.stage.ingkadt.com
www-test.ingka.com

Other certificates including the domain name ingkadt.com

(limited to 100 certificates)
ingka.com
ingkadt.com
ingka.com
ingka.com
ingka.com
www.ikea.se
api.statuspage.sp.ingkadt.com
ikeadt.com
ingkadt.com
www.ikea.se
ingka.com
ingka.com
ikeadt.com
ingka.com
samla.ingkadt.com
ingka.com
ingka.com
ingka.com
www.ikea.se
ingka.com
ingka.com
ingka.com
www.ikea.se
ingka.com
ingka.com
ingka.com
ingkadt.com
www.ikea.se
ingka.com
ingka.com
www.ikea.se
www.ikea.se
ingka.com
www.ikea.se
ikeadt.com
ingkadt.com
ingka.com
ingka.com
ingka.com
ingkadt.com
ingka.com
ingka.com
ingka.com
ingka.com
ingkadt.com
ingka.com
ingka.com
ingka.com
ingka.com
ingka.com
ingkadt.com
ingka.com
ingka.com
ingka.com
ingka.com
ingkadt.com
le-25855655.35.195.198.151.nip.io
www.ikea.se
ingka.com
ingkadt.com
ingka.com
ingka.com
authapp-origin.ingkadt.com
ingka.com
ingkadt.com
ingka.com
www.ikea.se
planta-stage.ingkadt.com
ingka.com
ingkadt.com
www.ikea.se
miadev.ingkadt.com
www.ikea.se
www.ikea.se
www.ikea.se
ingka.com
akacdn-test.ingka.com
ingkadt.com
ingkadt.com
ingka.com
ingka.com
ingka.com
ingka.com
ingka.com
ingka.com
ingka.com
ingka.com
ingka.com
www.ikea.se
ingkadt.com
ingka.com
www.ikea.se
ingkadt.com
ingka.com
ingka.com
ingka.com
ingka.com
ingkadt.com
ingka.com
ingka.com

Certificate

The complete raw certificate details for ingkadt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQMTCCDxmgAwIBAgIQAw0DovlUDLFbm6VvQDvUIDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yNDA1MjcwMDAwMDBa
Fw0yNTA1MjcyMzU5NTlaMGgxCzAJBgNVBAYTAk5MMRUwEwYDVQQIEwxadWlkLUhv
bGxhbmQxDzANBgNVBAcTBkxlaWRlbjEbMBkGA1UEChMSSW5na2EgSG9sZGluZyBC
LlYuMRQwEgYDVQQDEwtpbmdrYWR0LmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEH
A0IABFigXjPaFndzuhR19lIZpIbDKisZRstaKxUuolninZwyhpk2EGSBSHfIJ39Q
7XAKU36WWJoC3sI0JVurkydf63Ojgg25MIINtTAfBgNVHSMEGDAWgBS3a6LqqKqE
jHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUw/LjhgE5I0Xz8ex1svwdIgmn6aEwggph
BgNVHREEggpYMIIKVIILaW5na2FkdC5jb22CKCouYWRtaW4ucmFuZ2UtY2F0ZWdv
cmlzYXRpb24uaW5na2FkdC5jb22CHiouYWRtaW4ucmV0YWlsLXBpbS5pbmdrYWR0
LmNvbYIcKi5hcGkucmV0YWlsLXBpbS5pbmdrYWR0LmNvbYIWKi5kZXYuZmx5dHRh
LmluZ2thLmNvbYIXKi5kZXYud21zLmZtcy5pbmdrYS5jb22CESouc2FsamEuaW5n
a2EuY29tghgqLnN0YWdlLmZseXR0YS5pbmdrYS5jb22CFyoudGVzdC5mbHl0dGEu
aW5na2EuY29tghYqLnZldGxhbmRhLmluZ2thZHQuY29tgh1hcGktZ3cuZGV2LmN1
c3RvbWVyLmluZ2thLmNvbYIeYXBpLWd3LnRlc3QuY3VzdG9tZXIuaW5na2EuY29t
ghZhcGkudGVzdC5hcG8uaW5na2EuY29tghdjYXJ0Lm9uZXdlYi5pbmdrYWR0LmNv
bYIdY2F0LW1mZS5zdGFnZS1sb3R0YS5pbmdrYS5jb22CD2Ntcy5pbmdrYWR0LmNv
bYIUY29jcmVhdGUuaW5na2FkdC5jb22CHGNvbnNvbGUudXBwdGFja2EuaW5na2Fk
dC5jb22CJGNvd29ya2VyLnRlc3Quc3RvcmUtZXZlbnRzLmluZ2thLmNvbYITY3Nz
b20tZGV2LmluZ2thLmNvbYIVY3Nzb20tc3RhZ2UuaW5na2EuY29tghxjdGUuc2Fs
ZXNhc3Npc3RhbnQuaW5na2EuY29tgiRjdXN0b21lci50ZXN0LnN0b3JlLWV2ZW50
cy5pbmdrYS5jb22CJGN1c3RvbWVyYWRtaW4uZGV2LmN1c3RvbWVyLmluZ2thLmNv
bYIlY3VzdG9tZXJhZG1pbi50ZXN0LmN1c3RvbWVyLmluZ2thLmNvbYIVZGVsdGEu
ZGV2LmluZ2thZHQuY29tghZkZXYtY3VzbWFzcHMuaW5na2EuY29tghlkZXYtZGF0
YWNhdGFsb2cuaW5na2EuY29tgh5kZXYtaGFuZHJhaXNlci1hZG1pbi5pbmdrYS5j
b22CFWRldi5hdGtvbXN0LmluZ2thLmNvbYIVZGV2LmIyYmRhLmluZ2thZHQuY29t
giBkZXYuY29uc29sZS51cHB0YWNrYS5pbmdrYWR0LmNvbYIbZGV2LmZhdnMub25l
d2ViLmluZ2thZHQuY29tghRkZXYuZmx5dHRhLmluZ2thLmNvbYIUZGV2LmthcHBs
YS5pbmdrYS5jb22CEGRldi5vYy5pbmdrYS5jb22CG2Rldi5wcmVwYWlkY2FyZC5p
bmdrYWR0LmNvbYIQZGV2LnNhLmluZ2thLmNvbYIcZGV2LnNhbGVzYXNzaXN0YW50
LmluZ2thLmNvbYIRZGV2LnNsbS5pbmdrYS5jb22CGGRldi51cHB0YWNrYS5pbmdr
YWR0LmNvbYIcZGlzcGxheS51cHB0YWNrYS5pbmdrYWR0LmNvbYIYZG9yLmZvb2Qt
c3RhZ2UuaW5na2EuY29tgh5leHByZXNzY2hlY2tvdXRkZXYuaW5na2FkdC5jb22C
EmZpeGFkZW1vLmluZ2thLmNvbYIXZml4YWRlbW9hZG1pbi5pbmdrYS5jb22CHGZv
b2Rib3guZm9vZC1zdGFnZS5pbmdrYS5jb22CG2Zvb2Rib3guZm9vZC10ZXN0Lmlu
Z2thLmNvbYIbZ28ubXlzdG9yZXZpc2l0LmluZ2thZHQuY29tgh1oZWotZ2F0ZXdh
eS1zdGFnaW5nLmluZ2thLmNvbYIVaGVqLXN0YWdpbmcuaW5na2EuY29tghdpMThu
LmZvb2QtZGV2LmluZ2thLmNvbYIZaTE4bi5mb29kLXN0YWdlLmluZ2thLmNvbYIU
aWNjY2FjaGUuaW5na2FkdC5jb22CEGlmc3QuaW5na2FkdC5jb22CGWlnaWZ0LWJv
LnRlc3QuaW5na2FkdC5jb22CFmlnaWZ0LnRlc3QuaW5na2FkdC5jb22CGGthdGVn
b3Jpc2VyYS5pbmdrYWR0LmNvbYIibWV0YWwtbW9kZWwuZGV2LmN5YmVyc2VjLmlu
Z2thLmNvbYImbWV0YWwtbW9kZWwuc3RhZ2luZy5jeWJlcnNlYy5pbmdrYS5jb22C
GG15c3RvcmV2aXNpdC5pbmdrYWR0LmNvbYIUbXl3b3JrLXBwZS5pbmdrYS5jb22C
E25mdy5jdGUuaW5na2FkdC5jb22CGG9yZGVyY2FwdHVyZS5pbmdrYWR0LmNvbYIl
b3JkZXJjYXB0dXJlLnN0YWdlLm9uZXdlYi5pbmdrYWR0LmNvbYIXcG1wLW1ldHJp
Y3MuaW5na2FkdC5jb22CHHBvY2NhLmRldi5jeWJlcnNlYy5pbmdrYS5jb22CEnBw
ZS5ib2thLmluZ2thLmNvbYIXcHJlcGFpZGNhcmQuaW5na2FkdC5jb22CF3B1Ymxp
Y2VyYS5jdGUuaW5na2EuY29tghdycm0uYXBpLnBwZS5pbmdrYWR0LmNvbYIYc3Rh
Z2UtY3VzbWFzcHMuaW5na2EuY29tghtzdGFnZS1kYXRhY2F0YWxvZy5pbmdrYS5j
b22CF3N0YWdlLmF0a29tc3QuaW5na2EuY29tghZzdGFnZS5mbHl0dGEuaW5na2Eu
Y29tgh9zdGFnZS5sb3lhbHR5LXNlcnZpY2UuaW5na2EuY29tghVzdGFnZS5zYWxq
YS5pbmdrYS5jb22CE3N0YWdlLnNsbS5pbmdrYS5jb22CFnN0YWdlLnNvaW0uaW5n
a2FkdC5jb22CG3N0YWdpY293LmFjY291bnRzLmluZ2thLmNvbYIuc3RhZ2luZy5h
ZG1pbi5yYW5nZS1jYXRlZ29yaXNhdGlvbi5pbmdrYWR0LmNvbYIqc3RhZ2luZy5h
ZG1pbi5yYW5nZS1tYW5hZ2VtZW50LmluZ2thZHQuY29tgiNzdGFnaW5nLmFwaS5z
ZXJ2aWNlb2ZmZXJzLmluZ2thLmNvbYIXc3RhZ2luZy5pbG9mZi5pbmdrYS5jb22C
F3Rlc3QtY3VzbWFzcHMuaW5na2EuY29tghp0ZXN0LWRhdGFjYXRhbG9nLmluZ2th
LmNvbYIWdGVzdC5iMmJkYS5pbmdrYWR0LmNvbYISdGVzdC5iY3cuaW5na2EuY29t
ghV0ZXN0LmZseXR0YS5pbmdrYS5jb22CFXRlc3Qua2FwcGxhLmluZ2thLmNvbYIR
dGVzdC5vYy5pbmdrYS5jb22CFHRlc3Quc2FsamEuaW5na2EuY29tght0ZXN0aWNv
dy5hY2NvdW50cy5pbmdrYS5jb22CFHVwcHRhY2thLmluZ2thZHQuY29tghF1dGgt
ZGV2LmluZ2thLmNvbYIUdmV0bGFuZGEuaW5na2FkdC5jb22CGHZpZGVvbWVldGlu
Zy5pbmdrYWR0LmNvbYIedmlkZW9tZWV0aW5nLnN0YWdlLmluZ2thZHQuY29tghJ3
d3ctdGVzdC5pbmdrYS5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEF
BQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwID
iDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBA
oD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hB
MjU2MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDB/BggrBgEFBQcBAQRz
MHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEF
BQcwAoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNB
U0hBMjU2MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIE
AgSCAWwEggFoAWYAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAA
AY+5f191AAAEAwBHMEUCIQDqGP52DGIYd5Sj6uydUsOu+w19KonoefGsRZ9HiimJ
dgIgRcGbxNsKr8+A7Jog6Q+J0gL8iJjfEBTd58cC6at44poAdgB9WR4S4Xgqexxh
Z3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAY+5f195AAAEAwBHMEUCIQCy5H/p7kTA
51ZS58WDweR6NSiVKo+E8eE/95XoO6WEsgIgMm3vOvopFo7uECZElAyOzKXYrhBS
jaEzLzXhQzu29bgAdADm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAA
AY+5f1+fAAAEAwBFMEMCICqlK1evuAwNxKwcuEpocMcMPtyRviaU1zGmghvjBmrx
Ah8l+wBn4z/fTEiyGCzX3K+QXQlb6wbHKh+K1gJgLMQ3MA0GCSqGSIb3DQEBCwUA
A4IBAQCTR7e7GqX20yFtvahM2ebOpBF4N3SmUJOeAIVT76AE4/ZbCamdW9G+BUPL
CwdLBNPDOIOjGlBELY3Y2UVfc1LxWqLVQfnZRkMEmJh53kBkjyD3BjDEtXHlk5/x
icUAY+u1G30SEKHXOBMgdpRLoNMplC6TY2lJ+c/9V4DogIARRS4/dVaYOuIFH6gL
MegPEFh6fI+2X7npJ9iUve6Egh92WTmHC4FrBVdL/I7GyQXAygrcP2hLYsWC+C6k
74Ai+3rtIGVJShr/OXIaxgkdMsK3IbOxPmHC1VCJkwtx1scFHFTQWesR9de1AGNm
dYecwBgNt4j3h72uPGsBScL3hMKT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWKBeM9oWd3O6FHX2UhmkhsMqKxlG
y1orFS6iWeKdnDKGmTYQZIFId8gnf1DtcApTfpZYmgLewjQlW6uTJ1/rcw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4055257605870215798151377650552919072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ingka Holding B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingkadt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000458a05e33da167773ba1475f65219a486c32a2b1946cb5a2b152ea259e29d9c328699361064814877c8277f50ed700a537e96589a02dec234255bab93275feb73
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3f2e38601392345f3f1ec75b2fc1d2209a7e9a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admin.range-categorisation.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admin.retail-pim.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.retail-pim.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.wms.fms.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetlanda.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gw.dev.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gw.test.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.test.apo.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.oneweb.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-mfe.stage-lotta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocreate.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.upptacka.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.test.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cssom-dev.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cssom-stage.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.salesassistant.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.test.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customeradmin.dev.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customeradmin.test.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.dev.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cusmasps.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-datacatalog.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-handraiser-admin.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.atkomst.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.b2bda.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.console.upptacka.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.favs.oneweb.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kappla.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.oc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.prepaidcard.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sa.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.salesassistant.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.slm.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.upptacka.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'display.upptacka.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dor.food-stage.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresscheckoutdev.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixademo.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixademoadmin.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbox.food-stage.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbox.food-test.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.mystorevisit.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hej-gateway-staging.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hej-staging.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i18n.food-dev.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i18n.food-stage.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icccache.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifst.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igift-bo.test.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igift.test.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kategorisera.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metal-model.dev.cybersec.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metal-model.staging.cybersec.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystorevisit.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork-ppe.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfw.cte.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordercapture.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordercapture.stage.oneweb.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmp-metrics.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pocca.dev.cybersec.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppe.boka.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidcard.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicera.cte.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrm.api.ppe.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-cusmasps.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-datacatalog.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.atkomst.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.loyalty-service.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.slm.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.soim.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagicow.accounts.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.admin.range-categorisation.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.admin.range-management.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.serviceoffers.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.iloff.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cusmasps.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-datacatalog.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.b2bda.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.bcw.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.kappla.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.oc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testicow.accounts.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upptacka.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uth-dev.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetlanda.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videomeeting.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videomeeting.stage.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.ingka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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