mail.ikano.nu

- Ikano Bank AB (Publ) -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 7f:cb:3f:1e:64:a0:9d:04:97:72:1b:36 was issued on by GlobalSign nv-sa.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Organization: Ikano Bank AB (Publ)
Organization unit: IT
State / Province: Skane
Locality: Malmo
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:cb:3f:1e:64:a0:9d:04:97:72:1b:36
Serial Number (int): 39550306258434304492560325430
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e7:00:04:2e:fc:e2:9b:6e:e1:c9:c9:bf:68:e7:e7:9c:50:4e:c0:22
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 2f:0f:be:a7:98:cf:7d:79:da:e3:16:19:30:19:5d:99:58:29:9c:05
Fingerprint (sha256): 43:f8:30:86:76:d6:be:2b:14:c7:04:15:68:91:28:ea:04:b6:42:c2:53:35:6c:d4:fe:ba:2e:c7:70:0f:93:5c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate mail.ikano.nu

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.ikano.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.ikano.nu
autodiscover.ikano.de
autodiscover.ikano.dk
autodiscover.ikano.fi
autodiscover.ikano.net
autodiscover.ikano.no
autodiscover.ikano.pl
autodiscover.ikano.se
cas.ikano.nu
legacy.ikano.nu
autodiscover.ikano.nu

Other certificates including the domain name ikano.nu

(limited to 100 certificates)
apianalytics.ikano.nu
selfservice.ikano.dk
mail.ikano.nu
Identitynow.ikano.nu
citrix.ikano.nu
view.ikano.nu
api.ikano.nu
esb.ikano.nu
citrix.ikano.nu
selfservice.ikano.dk
view.ikano.nu
uat.newlook.ikano.nu
apipte.ikano.nu
citrix.ikano.nu
ecore.ikano.nu
ecore.ikano.nu
mail1.ikano.nu
Identitynow.ikano.nu
pte.ikano.merchantportal.ikano.nu
mailguard1.ikano.nu
esb.ikano.nu
pvmdc1linise002.ikano.nu
UAT.SVN.Ikano.Nu
esb.ikano.nu
hopex.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
citrix.ikano.nu
apiuat.ikano.nu
dev01.apitest.ikano.nu
Identitynow-sso.ikano.nu
ikano.merchantportal.ikano.nu
hopex.ikano.nu
mail.ikano.nu
mail1.ikano.nu
CHAT.IKANO.NU
view.ikano.nu
crm.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
crm.ikano.nu
uat.hopex.ikano.nu
maileuq.ikano.nu
mail.ikano.nu
sip.ikano.nu
kampanj.ikano.nu
access.ikano.nu
adfs.ikano.nu
view.ikano.nu
maileuq.ikano.nu
api.ikano.nu
mail.ikano.nu
esb.ikano.nu
tm.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
sbm.ikano.nu
adfs.ikano.nu
adfs.ikano.nu
uat.crm.ikano.nu
citrix.ikano.nu
pte.onlineshop.ikano.nu
vdi.ikano.nu
mail.ikano.nu
LyncWebDC.ikano.nu
maconomy.ikano.nu
citrix.ikano.nu
identitynow.ikano.nu
uat.identityiq.ikano.nu
sip.ikano.nu
apipte.ikano.nu
uat.newlook.ikano.nu
adfs.ikano.nu
access.ikano.nu
sbm.ikano.nu
apiuat.ikano.nu
api.ikano.nu
pte.onlineshop.ikano.nu
snowexternal.ikano.nu
vcse.ikano.nu
vdi.ikano.nu
uat.crm.ikano.nu
dev01.apitest.ikano.nu
oobdc1.ikano.nu
maileuq.ikano.nu
sts.ikano.nu
ise.ikano.nu
apipte.ikano.nu
sbm.ikano.nu
LyncWebDC.ikano.nu
nlease2.ikano.nu
maileuq.ikano.nu
apimanagement.ikano.nu
apiuat.ikano.nu
apimanagement.ikano.nu
identityiq.ikano.nu
citrix.ikano.nu
bafnet.ikano.nu
pte.ikea.customerportal.ikano.nu
invoice.edit.ikano.nu

Certificate

The complete raw certificate details for mail.ikano.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIImDCCB4CgAwIBAgIMf8s/HmSgnQSXchs2MA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTgxMTAxMTE0NjA3WhcNMjAxMTAxMTE0NjA3WjBxMQswCQYDVQQGEwJT
RTEOMAwGA1UECBMFU2thbmUxDjAMBgNVBAcTBU1hbG1vMQswCQYDVQQLEwJJVDEd
MBsGA1UEChMUSWthbm8gQmFuayBBQiAoUHVibCkxFjAUBgNVBAMTDW1haWwuaWth
bm8ubnUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDWMsW84JoyVbt4
VJCllxeic/TaVK0ygUzk+qBSWhHz/GlB0mq3/DXdi0qdRhovSBP6R9VIwygvLy7M
AneMTaIMYd1GEVivgZBi8fN5m4Zrsy5FSu8bD1YXlpnivP6ppWmXdOuV5OtUaNvv
gHEfKQVgM9FXodZcZaIf9gOS1ezKvpHynZIPnotru1z1m6ups1//gaK/4dl6jpNg
eTniWHMrvUfNyhdskpIb2XQ3Xe0ySGfj54vhAqKWQggeAOymIxcPcnYXb+5VAh+R
jKsnmWGyZByct8rk+3+/pAEOemmBIMvJXpfeTgYKB7jS+/dZG7R2gj72AE5gRWvk
F85wNAfb0ImEoi/fTQYDUO6g0kASf35+58eDk7cwC/x6HjGrJ2/ddvqP+bs68KSG
TyxzI/S4N6dxI2U00UlKdxYeT1euurqGsp7JNxvFheXwi86MJY/D+MLhpm7KwTMn
r8MmJP0Iig1zrQcKvHsx8IVXyjmAYZB+1XPumfKdoy+B7YKJ7N1jE6d4MAsS4Zkm
DepcinkhpFSVTIl6SNbPAfJAwriKV4CI3EGdfp42W4aI5Cqnj/YqMhGLOMDI4NIE
weoI51llL3YiTfXuryNITR8BkHyBWlptjubJ4lEBf2bbAyKX0X4JlG+Y1AbRKrBR
feX3WKn1liaLmfeuDfN63swIvzpEGwIDAQABo4IEOTCCBDUwDgYDVR0PAQH/BAQD
AgWgMIGgBggrBgEFBQcBAQSBkzCBkDBNBggrBgEFBQcwAoZBaHR0cDovL3NlY3Vy
ZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzJy
MS5jcnQwPwYIKwYBBQUHMAGGM2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9n
c29yZ2FuaXphdGlvbnZhbHNoYTJnMjBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0
MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0
b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADBJBgNVHR8EQjBAMD6gPKA6hjhodHRw
Oi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzL2dzb3JnYW5pemF0aW9udmFsc2hhMmcy
LmNybDCB8gYDVR0RBIHqMIHngg1tYWlsLmlrYW5vLm51ghVhdXRvZGlzY292ZXIu
aWthbm8uZGWCFWF1dG9kaXNjb3Zlci5pa2Fuby5ka4IVYXV0b2Rpc2NvdmVyLmlr
YW5vLmZpghZhdXRvZGlzY292ZXIuaWthbm8ubmV0ghVhdXRvZGlzY292ZXIuaWth
bm8ubm+CFWF1dG9kaXNjb3Zlci5pa2Fuby5wbIIVYXV0b2Rpc2NvdmVyLmlrYW5v
LnNlggxjYXMuaWthbm8ubnWCD2xlZ2FjeS5pa2Fuby5udYIVYXV0b2Rpc2NvdmVy
LmlrYW5vLm51MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4E
FgQU5wAELvzim27hycm/aOfnnFBOwCIwHwYDVR0jBBgwFoAUlt5h8b0cFilTHMDM
fTuDAEDmGnwwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AFWB1MIWkDYBSuoL
m1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZs8YU3cAAAQDAEYwRAIgbjmBdt+mb5i6
Y1UapQim87Vr+y97vIVHeQr1V2pTwnYCIFNuZ4h350lG0mBa62d7GsM55FY388YL
52Pu4+xKNChMAHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFm
zxhT4QAABAMARjBEAiA8j/FwRhrqiEfScVV28fW8xb3j9KskVlsATx2YhtlGZwIg
J8RFqBru1BiEd2ns3sFShB94ZCIB7Zt9/R2JuUNLNhMAdgCkuQmQtBhYFIe7E6LM
Z3AKPDWYBPkb37jjd80OyA3cEAAAAWbPGFUuAAAEAwBHMEUCIEdtPMxfnI/1Jqaq
p5cJhfRCmn6UoIHvAHVSNwBYnKy/AiEApto5tCYO2S/9F8nkJF4gOrxDQs9yOlsJ
B9ewhcIwkLwwDQYJKoZIhvcNAQELBQADggEBAJ8F76x1dRr+fVdtpNJy6i1KJ2Qx
p99+JnVXwrhfnYmAdSfOc78swnMTNXh7twWrVq08YU9gdQQrLSmVzuB/+Yk0Xlud
DBzKV3Et9U+foyBKeweXaHdFr9S7fnqLouDNycRIh8lH+IZsh9bAJTlvp2qrRkA9
v2GxxyaZnVg342nXK9r0a1SNhm1vMPWROtC8NYbCZfMN0q53GJ3bh/A2DaArjJ2B
J2ojny/1P9mrJznMLYiCpyiT4g+F81vIUPzyGOYk2scRfrgeEkrWJdSvzszaeWsE
RI/XO4MtwemyTLnH9g5uxi30TFF26UBDzL+pWqTZ+V2YNxPGyVM2J09AOek=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39550306258434304492560325430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 11:46:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-01 11:46:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Skane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Malmo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ikano.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873852945301214725334497190422369087615982009164414381204515382739626575206760158750929492300217104339337671739553611411843232558919737640818941180134746975229522407095167924569809498717305459707487363798293429685641545751965311987774547325541598375405221492811251658513475353812057879655345868024693536651719318982820382261294348721335343912009553292489807930990871502577583162006373883933016282789531054152791111661331753661700690894082293794993804324353785616360502494151776372132721200099966758858769030994742665900066827555113866490402870812190253180840183025720566812021991283671745836565710569322434366605245343207932552138987024455946146564239967066868414371075486821523866002377038839929379710063924686776790162875731398780880513092755634758634679957562303202661538795996198660322089176277606327451922584004581253504657967360316944634227952261377780149123931838443893756799473476829734495533894182848624981991479947909053365222234080728500690857341155838738465642891168355619966329799644735957060508465234971775988295079161016193705791658870256723129285528137922423194515404384693387328835640247672708220407680838294584886465366413109290891505603086739204162467002829855157265398167754052034169085523876830827214897568957467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ikano.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.ikano.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ikano.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e700042efce29b6ee1c9c9bf68e7e79c504ec022
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f05efac75751afe7d576da4d272ea2d4a276431a7df7e267557c2b85f9d89807527ce73bf2cc2731335787bb705ab56ad3c614f6075042b2d2995cee07ff989345e5b9d0c1cca57712df54f9fa3204a7b0797687745afd4bb7e7a8ba2e0cdc9c44887c947f8866c87d6c025396fa76aab46403dbf61b1c726999d5837e369d72bdaf46b548d866d6f30f5913ad0bc3586c265f30dd2ae77189ddb87f0360da02b8c9d81276a239f2ff53fd9ab2739cc2d8882a72893e20f85f35bc850fcf218e624dac7117eb81e124ad625d4afceccda796b04448fd73b832dc1e9b24cb9c7f60e6ec62df44c5176e94043ccbfa95aa4d9f95d983713c6c95336274f4039e9