www.ikano.dk

- Ikano Bank AB (Publ) -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 28:90:68:b7:6f:a9:e1:ce:cf:b7:7e:49 was issued on by GlobalSign nv-sa.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Company registration number: 516406-0922
Organization: Ikano Bank AB (Publ)
Organization unit: IT
Address: Hyllie Boulevard 27
State / Province: Skane
Locality: Malmo
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 28:90:68:b7:6f:a9:e1:ce:cf:b7:7e:49
Serial Number (int): 12553980220792903769737625161
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 29:ad:05:89:91:fc:9c:cd:23:20:aa:71:6e:0e:29:05:8a:35:de:45
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 90:13:b2:c0:81:c4:c5:9e:3a:ad:25:a0:da:f8:8f:42:18:58:8a:65
Fingerprint (sha256): 4c:a9:f8:bd:aa:c4:16:49:7c:31:60:e2:af:53:26:c7:ba:de:52:e6:9b:93:7d:44:0f:3d:89:6f:cd:5c:c6:a7

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate www.ikano.dk

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikano.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ikano.dk
ikanobank.dk
www.ikanobank.dk
ikano.co.uk
www.ikano.co.uk
ikanobank.no
www.ikanobank.no
ikanovisa.no
www.ikanovisa.no
ikeakort.no
www.ikeakort.no
shellmastercard.no
www.shellmastercard.no
ikano.fi
www.ikano.fi
loans.ikano.co.uk
legacy.ikanobank.dk
ikano.se
ikanobank.com
www.ikano.se
www.ikanobank.com
ikanobank.fi
ikanobank.de
ikanobank.pl
ikanoinsight.com
ikanoinsight.dk
ikanoinsight.no
ikanoinsight.se
ikanobank.at
st1visa.fi
heirahoitus.fi
ikano.net
ikanobankbedrift.no
www.ikanobankbedrift.no
ikea-finanzprodukte.de
www.ikea-finanzprodukte.de
ikano.at
www.heirahoitus.fi
www.ikanobank.at
www.ikanobank.fi
www.ikanobank.pl
www.ikano.net
www.ikanoinsight.com
www.ikanoinsight.dk
www.ikanoinsight.no
www.ikanoinsight.se
www.ikano.at
www.st1visa.fi
www.ikanobank.de
ikanobank.se
www.ikanobank.se
myaccount.ikano.co.uk
xn--das-hrgerteabo-eib7z.de
www.xn--das-hrgerteabo-eib7z.de
das-brillenabo.de
www.das-brillenabo.de
ww2.ikano.dk
ikano.dk

Other certificates including the domain name ikano.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ikano.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzcnm5AD98Kp4bDN/vD1X
6w3MRyKPhMrrcMUC+gHeqN9wMlDEAVXN0SpVGrD4nF8R4m5S7IQuk73JYb+aiwtx
HEEHKGFbKr+Uz95lWik1k7nMFKFTWOPn1yueD+6EsJ2p3b0KXhtxBrFe8Jq7NpvR
U5lfrQk5RKEIBcetNsUsdoNOc82mph0dU2Jkva11z3CdsP3KKr6mQroyi+oYGHfC
Xk2tEubtLOVcyhVK9ULSim8eg1s32UncKjZCFossDUygTPnQHhFdawodAIIZBYQu
hBZjZzPOPSSj1cOmNyYq/t77i6SCqSFJvDeRWzE6xLKLT0mwODZ+wujCMYLFm6GT
0vnp/Rc2oBgamwYO1GwUj+4LUuV2MrRE6vGBtQ/++/Tr9g7QPwy0ODvqwJ3LtFp8
NZlIE8737QNn7vLMwrLOK/i8Tuf3PalcPQUBONDPrCScPcBBMnkgy/pB/RsOOSZt
p5fdPV4QFTpisr+xLANL14wMyia6rASuJhtKphg+eqZxiQFlZlNH9g2c+cfb4Hru
pgBIFaaq1ToWEp85xgf6BFjfe5oa/uRqeN2dvrFX4Ht/41ehTUv1QewcmSlmcB1Q
sgoxF37PUdUDIzaWKeQfFPFT28N0vm5xxpSBxF62BXZPWlpXaC6XGFsfCIOXr9dH
bAbTMGnn7bHzSqVJwJTaajMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12553980220792903769737625161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 11:26:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-25 11:26:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Skane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Malmo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyllie Boulevard 27'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikano.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839544565023142691743919131870785269920427419756077636074345046823193654855974226802397973264643127159688236687063584909749724070797245271224364593416005989445891025681839971986117440104723300802616725641802800698625816819064058610092273665235852354111478623763508081009985475474544798613847333222161198181854268000053661334930344716297127248504770494627739594073100243974800038027189542854921538410478039702811272966889829873285954705568916618716785322721880623402897607715002422847499397616904101485175047804996197391800660970504518550429470145772126161850946058909431008630657965533177093587566357821312745825459555140583865524091586950465163791539918541051347188198004534116768214490218675441716808697960185848557133407993157889830045680973767283322225418348238299563541316497214461687053692066785033773572738040752468233063356731578891797811210533228661996566380615186625612553459128632432835820253989585715640144545513796148515632105494980927933951880468046404394784028983728898051562320554434495621243354441378761408951485051847284221507369355652351805291716927359370156622832804042189023790961586928626571867393333070853081713702572925425250401396576378003789232772684771323462009308765026746040010990811224782603248895420979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1017 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanovisa.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanovisa.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikeakort.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikeakort.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shellmastercard.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shellmastercard.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.ikano.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ikanobank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanoinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanoinsight.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanoinsight.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanoinsight.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st1visa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heirahoitus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobankbedrift.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobankbedrift.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea-finanzprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikea-finanzprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heirahoitus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanoinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanoinsight.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanoinsight.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanoinsight.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st1visa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.ikano.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--das-hrgerteabo-eib7z.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--das-hrgerteabo-eib7z.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'das-brillenabo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.das-brillenabo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikano.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29ad058991fc9ccd2320aa716e0e29058a35de45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006674d62f1a6d0f1083fe04ccfb1b7a74ca920e8f82f9731e91441aef83bb1d5a2ad6e0ebcad6577986644dda7c11b345b70bf7c026c964532b767c736a8cecde660bde66cd3c377b7015048f2c7853ca82b32bfa9dc05bc001b7c8d9940fdfe1f1f69e2b83dc41cd16dab2b2f5c2306e2b5e08f7e0b43c9fbc2097ff95f1be59a8ac11aeb82e30e5358cc23a45ad2338750e8f947fb33e198e28de90f5f6f9f2b07bdf7e5e136077ae450fa3334a0762261f25fd0e587340e1bd82efb00e93f12ac22c618ee4714ad3f727ba4ca4dd27f44664c0bea13fca438fbc5a7da177b8ccac8017bd285af473586a59ea3350bbd278b091b97d6cc07041d20ae5087fcd