www.ikano.dk

- Ikano Bank AB (Publ) -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 33:9f:08:83:2d:d7:85:36:6f:71:e9:26 was issued on by GlobalSign nv-sa.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Company registration number: 516406-0922
Organization: Ikano Bank AB (Publ)
Organization unit: IT
Address: Scheelevagen 15
State / Province: Lund
Locality: Lund
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 33:9f:08:83:2d:d7:85:36:6f:71:e9:26
Serial Number (int): 15975994904965916477399099686
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ea:48:b2:b7:0c:dd:08:82:7f:a5:f3:a0:d5:b9:5d:2a:7c:8d:94:de
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): 5d:08:e8:e1:73:7b:07:c3:49:3f:d1:ca:94:81:74:d1:3c:b2:d4:99
Fingerprint (sha256): 4a:d5:65:79:30:67:6e:15:50:b8:2c:8a:58:13:12:cc:4d:e8:b7:2f:77:9b:81:0f:88:98:36:0d:fa:17:64:a8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate www.ikano.dk

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikano.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ikano.dk
ikanobank.dk
www.ikanobank.dk
ikano.co.uk
www.ikano.co.uk
ikanobank.no
www.ikanobank.no
ikanovisa.no
www.ikanovisa.no
ikeakort.no
www.ikeakort.no
shellmastercard.no
www.shellmastercard.no
ikano.fi
www.ikano.fi
loans.ikano.co.uk
legacy.ikanobank.dk
ikano.se
ikanobank.com
www.ikano.se
www.ikanobank.com
ikanobank.fi
ww2.ikano.dk
ikanobank.de
ikanobank.pl
ikanoinsight.com
ikanoinsight.dk
ikanoinsight.no
ikanoinsight.se
ikanobank.at
st1visa.fi
heirahoitus.fi
ikano.net
Ikanobankbedrift.no
www.Ikanobankbedrift.no
Ikea-finanzprodukte.de
www.Ikea-finanzprodukte.de
myaccount.ikano.co.uk
www.st1visa.fi
ikano.dk

Other certificates including the domain name ikano.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ikano.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15975994904965916477399099686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-14 07:06:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-23 14:19:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scheelevagen 15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikano.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871806448427416447309847786514564868787701830938342765495988155988512951831470145061108268599990372526717670636975235443855107798429908811663695724993662782987748622236939574648217375964815730310179987617213867621806710872647429874880855116785240881359141162971259529757170641977156138689611719186898640656849369827455464231630708257599711986463922660720324015301302718383147671894752526196470270621642539594268752872794244928279812726236377455846181903299073506749582238192236957797693011500612476357466570429867428391571529306012039989791092835488100917245089165542033214616595744030795503450085573008510655587769156104323998787295727792083785439119055205063900484446365361902160170415861074756264478279280246681644411815942321973222880823163207526309828101647386684125693572968362166371425152375163059186930383550661689919515845646978696104842630451338309928722470618883505171202654386339343825768066637849603716028394731668859821624892842319513859589050674348174030915378831453162790951728385937244369388885281448015222113841466899217971714211374197807772684599827819297125575241309273459883763335503598344578130449788962728394597282245957309434510590558437829294081328460427077005002929231558484676528918906469225291648053670939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (665 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanovisa.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanovisa.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikeakort.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikeakort.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shellmastercard.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shellmastercard.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.ikano.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ikanobank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanoinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanoinsight.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanoinsight.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanoinsight.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st1visa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heirahoitus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Ikanobankbedrift.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Ikanobankbedrift.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Ikea-finanzprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Ikea-finanzprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.ikano.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st1visa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea48b2b70cdd08827fa5f3a0d5b95d2a7c8d94de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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