selfservice.ikano.dk

- Ikano Bank AB (Publ) -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 05:0e:9c:e5:f3:e2:2d:c0:7f:e1:6e:5a was issued on by GlobalSign nv-sa.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Company registration number: 516406-0922
Organization: Ikano Bank AB (Publ)
Organization unit: IT
Address: Hyllie Boulevard 27
State / Province: Skane
Locality: Malmo
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 05:0e:9c:e5:f3:e2:2d:c0:7f:e1:6e:5a
Serial Number (int): 1565090941630709696965996122
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 75:06:70:ba:a7:0e:28:0a:4c:ec:44:66:30:0c:ea:d7:fe:78:1f:4e
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): e9:6f:50:1b:b2:c0:c7:89:cb:80:a7:c9:ae:44:5e:fa:9b:dc:08:52
Fingerprint (sha256): 56:ed:22:a3:30:ad:7c:cb:8f:77:dc:4c:33:79:9c:af:dc:95:f3:f3:6c:fb:a3:61:18:e7:40:f9:13:69:1b:46

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate selfservice.ikano.dk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selfservice.ikano.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

selfservice.ikano.dk
selfservice.ikano.fi
selfservice.ikano.no
selfservice.ikano.nl
selfservice.ikanobank.nl
selfservice.ikano.nu

Other certificates including the domain name ikano.dk

(limited to 100 certificates)
selfservice.ikano.dk
mail.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
irw.ikano.dk
www.ikano.dk
selfservice.ikano.dk
citrix.ikano.dk
www.ikano.dk
mail.ikano.nu
citrix.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
sip.ikano.nu
test.ikano.dk
www.ikano.dk
www.pengeautomaten.dk
access.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
citrix.ikano.dk
sip.ikano.nu
irw.ikano.dk
access.ikano.nu
selfservice.ikano.dk
selfservicetest.ikano.dk
sts.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservicetest.ikano.dk
www.ikano.dk
citrix.ikano.dk
www.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
mail.ikano.nu
mail.ikano.nu
www.ikano.dk
sip.ikano.nu
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
sip.ikano.nu
www.ikano.dk
capgemini.ikano.dk
test.ikano.dk

Certificate

The complete raw certificate details for selfservice.ikano.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJDzCCB/egAwIBAgIMBQ6c5fPiLcB/4W5aMA0GCSqGSIb3DQEBCwUAMGIxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H
bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMzAe
Fw0xODAxMTExMDIxMDNaFw0yMDAxMTIxMDIxMDNaMIHgMR0wGwYDVQQPDBRQcml2
YXRlIE9yZ2FuaXphdGlvbjEUMBIGA1UEBRMLNTE2NDA2LTA5MjIxEzARBgsrBgEE
AYI3PAIBAxMCU0UxCzAJBgNVBAYTAlNFMQ4wDAYDVQQIEwVTa2FuZTEOMAwGA1UE
BxMFTWFsbW8xHDAaBgNVBAkTE0h5bGxpZSBCb3VsZXZhcmQgMjcxCzAJBgNVBAsT
AklUMR0wGwYDVQQKExRJa2FubyBCYW5rIEFCIChQdWJsKTEdMBsGA1UEAxMUc2Vs
ZnNlcnZpY2UuaWthbm8uZGswggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDL1GjpcsFFkKWeE9rWkyBOSxwWiA1jv6rvKEY6SOMKqu1Yzduyi59MmERvcWRp
qV6FISN007R4i36WJFqXaGc0NuJ4BUei3xS66lNi/JwPm9kjNSP9O4t6UlOoQMpy
BjWdccKqIyqX1B6gSzppxvL6kH4uzyPKfdxvOA4j+f/W9TnO23VMAir2n6nktL06
HqE6iKNqjnmx8KsPiPqtHiTBIZjp0XunFp+8oVGBesdSjgbSh+QD5pRxDC5uyhTx
dfMchqTb2WVX1kFF8/DQ4FYKoVOjWnKXH2osmm/546/zqwURmZ1jT/XWrqloxmDJ
uOhgvnBcmoQPiIpvWLkaXs9ulvbkdK3mXQFcYQoNlcUrc15nfEsUqqilp8tSR4BR
PG8VN01A6EtpfuXTLbYBgfzXkMsqGmyrtuSSJ5Gq7XbjqS5C0fxukEtXaVU6zRoC
S4LEFfOAMaxckCSFyM3DqcWPpumpsF5dt6ln849mSubClq4DXFiHWzwY0DV6UZ0O
+ltMnefmnBe3Yh0vKzLmwwnw9exyrl5T2mezoA0BYdrlweSbovtp27vWg3VnQEWo
jXLDcDPlWdRRxuD1XiCgiHBK4R4gPHZUHAxlkJhcykM12u1hHjCxyF9rmA7qAX9u
W/sZaovZCYsoh99GXp1sQcZDxRP+DWfPxRJtI3aD9M2FawIDAQABo4IERDCCBEAw
DgYDVR0PAQH/BAQDAgWgMIGWBggrBgEFBQcBAQSBiTCBhjBHBggrBgEFBQcwAoY7
aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NleHRlbmR2YWxz
aGEyZzNyMy5jcnQwOwYIKwYBBQUHMAGGL2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWdu
LmNvbS9nc2V4dGVuZHZhbHNoYTJnM3IzMFUGA1UdIAROMEwwQQYJKwYBBAGgMgEB
MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z
aXRvcnkvMAcGBWeBDAEBMAkGA1UdEwQCMAAwRQYDVR0fBD4wPDA6oDigNoY0aHR0
cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc2V4dGVuZHZhbHNoYTJnM3IzLmNy
bDCBkwYDVR0RBIGLMIGIghRzZWxmc2VydmljZS5pa2Fuby5ka4IUc2VsZnNlcnZp
Y2UuaWthbm8uZmmCFHNlbGZzZXJ2aWNlLmlrYW5vLm5vghRzZWxmc2VydmljZS5p
a2Fuby5ubIIYc2VsZnNlcnZpY2UuaWthbm9iYW5rLm5sghRzZWxmc2VydmljZS5p
a2Fuby5udTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYE
FHUGcLqnDigKTOxEZjAM6tf+eB9OMB8GA1UdIwQYMBaAFN2z522oLujFTm7PdOZ1
PJQVzugdMIIB9QYKKwYBBAHWeQIEAgSCAeUEggHhAd8AdgDd6x0reg1PpiCLga2B
aHB+Lo6dAdVciI09EcTNtuy+zAAAAWDkvMW2AAAEAwBHMEUCIGi9F9mLOefJ5DRd
AEhy2dgAKlRsJvcIqDhpxDIvTA8gAiEAonJkcovX+SNg2/Uvg61xLpdEMf/ejMwd
OUa0E/huPfQAdQBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAWDk
vMYrAAAEAwBGMEQCIGPUbbR0MSJWZMfQuD9L9hFpNmua3glmI2vTVOTJypfCAiAv
3WMByQrLD5MNUx4JuBJgRqWrL2YS3hJngRPN+XgpWwB3AKS5CZC0GFgUh7sTosxn
cAo8NZgE+RvfuON3zQ7IDdwQAAABYOS8yIEAAAQDAEgwRgIhAJ/K4ynx4Y6T6oST
8OrVKBGNzrRrjtI9pENFhh2LIDdlAiEA+KzGyvV02fEklqrPA+P90cHgPHKc9W6M
qHZF/0E43lIAdQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWDk
vMuGAAAEAwBGMEQCIBzQlLM46nLit1yaGapDbI/dbqWZWG39dzZ2rSUfurH2AiA3
VX3ERknkCq+vLsw2xUcRFaWil4eFM5pOkiGL0uZ+MTANBgkqhkiG9w0BAQsFAAOC
AQEAD3RD3fpyg4WgxuRkLHTH4dAcVcJIDzWV+dzfHg+wx4RfmPKzt24xAjhDsCFD
dedRAZIU46CLCawHpC6zyg9y8UmrNmAMUqzHBOymEN/jsLDARH3gZtoqfcfYoXGP
ilGh77M7XaACdUvIZQs+0U7SQh9sWlc73GOacn5zYmMBK50+OXAnIfWFMt724ZuA
mPrWbQ2q92q9QHCxUncJeXjIECH6eeTYfXGD+SbsMwowMK6aPNurAh1fc2haOe2g
sHvTGNiqSfVQgOfS8mLiRWu3tDuTbs5FhLjGkFv56PW0/ZbpsnDcCI++sgu0gL8u
kolRuD1nHypr1XEQV8Mp9urK1g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1565090941630709696965996122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-11 10:21:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 10:21:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Skane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Malmo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyllie Boulevard 27'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selfservice.ikano.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831552731863074708024815253464401330446235235473261765068094791680076723474755925530113764029474100775244087664267593902017118791319097770924656147839323171292481827833013142516897195925421738231815847168984547517679472402722738274437726052888467465771248369379952024514234742458730114010570958245724372820942502048933678905026887681336722596389465272058657210523219252826030008134144863854923792228521330421357775120623821313974868442933281332755592295835885120798357268002520757230534266694274321200323892784925501273017169018459652379832599491504417315029224084079281061491763967805115643005504107037067662772983812602649011006867331903954912789854088559449374444003902495879305186666290145284315347318300775995546418411366104396686406698353651962561429528010017628669349270928519252731264802387900803692014033748024194316620509387309227265167739987059611535315685252152249987842045577650497152432107770436645598443512915753825934735030381164905315170820161390298148527575633429774569778019579255745218876146019626050038697508673852224280098820898965268047215969626315996002310507031590727374379887365882178167256858526974537098817704657717942450619773529053577346293425183405804543182025880476967589020375154702676757665268204907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikanobank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.ikano.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							750670baa70e280a4cec4466300cead7fe781f4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f7443ddfa728385a0c6e4642c74c7e1d01c55c2480f3595f9dcdf1e0fb0c7845f98f2b3b76e31023843b0214375e751019214e3a08b09ac07a42eb3ca0f72f149ab36600c52acc704eca610dfe3b0b0c0447de066da2a7dc7d8a1718f8a51a1efb33b5da002754bc8650b3ed14ed2421f6c5a573bdc639a727e736263012b9d3e39702721f58532def6e19b8098fad66d0daaf76abd4070b15277097978c81021fa79e4d87d7183f926ec330a3030ae9a3cdbab021d5f73685a39eda0b07bd318d8aa49f55080e7d2f262e2456bb7b43b936ece4584b8c6905bf9e8f5b4fd96e9b270dc088fbeb20bb480bf2e928951b83d671f2a6bd5711057c329f6eacad6