www.ikanobank.de

- Ikano Bank, filial af Ikano Bank AB (publ), Sverige -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:fa:8a:17:d1:7f:38:3a:ae:24:f9:2a:73:d5:dc:71:1a was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank, filial af Ikano Bank AB (publ), Sverige

Organization: Ikano Bank, filial af Ikano Bank AB (publ), Sverige
Organization unit: IT
State / Province: Glostrup
Locality: Glostrup
Country: DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:fa:8a:17:d1:7f:38:3a:ae:24:f9:2a:73:d5:dc:71:1a
Serial Number (int): 1492471202967321348484008871795262870024474
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 3b:14:29:9a:e1:6a:8b:0b:71:05:03:2e:c9:6b:59:b9:f6:aa:d6:b1
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 1c:64:05:50:77:fa:f2:d2:74:d5:26:4b:b6:9c:77:d3:93:3b:61:46
Fingerprint (sha256): 46:70:c8:5a:f2:62:8d:55:ea:f1:0e:3a:7f:ad:56:01:a8:50:74:43:9c:15:af:ac:54:46:a6:8f:6a:5f:e4:1a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate www.ikanobank.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikanobank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ikanobank.de
www.ikano-shoppingcard.de
ikanobank.de

Other certificates including the domain name ikanobank.de

(limited to 100 certificates)
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
etracker.ikanobank.de
etracker.ikanobank.de
www.ikano.dk
ssl508615.cloudflaressl.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508616.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikanobank.de
www.ikano.dk
www.ikano.dk
ssl4788.cloudflare.com
www.ikano.dk
ssl323815.cloudflaressl.com
www.ikanobank.de
www.ikano.dk
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
etracker.ikanobank.de
ssl4788.cloudflare.com
sslgw.ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
antrag.ikanobank.de
ssl323815.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
ikanobank.de
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
antrag.ikanobank.de
antrag.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508617.cloudflaressl.com
antrag.ikanobank.de
www.ikano.dk
www.ikanobank.de
ssl4788.cloudflare.com
www.ikano.dk
ssl4788.cloudflare.com
ssl4788.cloudflare.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
antrag.ikanobank.de
www.ikano.dk
ssl4788.cloudflare.com
ssl323814.cloudflaressl.com
ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
zahlung.ikanobank.de

Certificate

The complete raw certificate details for www.ikanobank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFrepurTwLIZa8LSmdf5
JHClQCrzt0EhBgGH/5FSBmV/Fn5XloUv102JsjnhBQXDWLGMa9eIcEco/rmpgg6J
gATYhQF0fpyhztYJkbsOAt6/YCyF1CDxxladTii+64eXQ5/q/a0+OleusPv3Cp0F
ezTLSU35YLatWoAxbQj5rFK8DaJloq92o/QEIoFSVaOSTknuRgrA9sQ70rCqZgIF
2JNm7iew9eft6EwEXcH7c2NJ/T9VytjnZ8dY+VH0M8HkkiCorfYE6XEp5JbGToNI
mu2QVyq4jg3KPi094O8T3ZHoV2nx3mEV0fTrEP+9EZB5tkGPO2gpJPJJBWk2MPp8
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492471202967321348484008871795262870024474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-11 14:03:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-06 14:21:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glostrup'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glostrup'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank, filial af Ikano Bank AB (publ), Sverige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikanobank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23272657649889211242341988956191622562502941303014340125594023959100263571277643809934241054686840067721347258787677104000162638560440846157057147817614543698448823990997873943403436574618804071630025718361983722479642225501903195483771682696530021426269271845183322523118721134311023155286188644841373657602437389392833090436230971915158786079421300101208647774263067908597000696323593097784264617911211122787797114283415874933985115816519171794175917081914814217843114104667178265925836778378130820147269442467257756575292063381448616029940586361624432853975538953838054646207717865638335108799026800275742992792811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano-shoppingcard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b14299ae16a8b0b7105032ec96b59b9f6aad6b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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