ingka.com

- Ingka Holding B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:50:9f:28:c4:55:4b:a4:27:6f:12:1b:b7:27:fc:28 was issued on by DigiCert Inc.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Ingka Holding B.V.

Organization: Ingka Holding B.V.
State / Province: Zuid-Holland
Locality: Leiden
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:50:9f:28:c4:55:4b:a4:27:6f:12:1b:b7:27:fc:28
Serial Number (int): 13710891839547603950736051725658487848
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1b:d6:86:64:49:3a:94:21:d7:05:b2:b1:41:43:0b:26:f0:e3:c0:79
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 50:62:c9:b8:22:c2:e5:d5:c0:64:6f:e1:64:b1:f5:4b:74:b8:bd:d5
Fingerprint (sha256): 5c:ea:27:37:ba:15:93:51:54:94:fb:35:06:d8:f1:8b:aa:7a:97:df:44:db:67:d8:78:3a:fa:96:8a:d8:29:4f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ingka.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingka.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingka.com
*.accounts.ingka.com
*.api.ingka.com
*.cdn.ingka.com
*.dev.customeradmin.customer.ingka.com
*.flytta.ingka.com
*.htapps.inside.ingka.com
*.ingka.com
*.iquote.ingka.com
*.prod.customeradmin.customer.ingka.com
*.spapps.inside.ingka.com
*.test.customeradmin.customer.ingka.com
*.ukapps.ingka.com
*.wms.fms.ingka.com
admin.pip.ingka.com
admin.range-categorisation.ingka.com
admin.range-management.ingka.com
admin.retail-pim.ingka.com
akacdn.ingka.com
api-gw.customer.ingka.com
api.buyback.cir.ingka.com
api.buyback.prod.cir.ingka.com
api.fixa.ingka.com
api.prod.apo.ingka.com
api.retail-pim.ingka.com
api.serviceoffers.ingka.com
backoffice.buyback.cir.ingka.com
backoffice.buyback.prod.cir.ingka.com
cart.beta.oneweb.ingka.com
cart.oneweb.ingka.com
cat-mfe.dev-lotta.ingka.com
cat-mfe.lotta.ingka.com
cms.ingka.com
config.salja.ingka.com
confluence.build.ingka.ikea.com
console.upptacka.ingka.com
coworker.buyback.cir.ingka.com
coworker.buyback.prod.cir.ingka.com
coworker.prod.store-events.ingka.com
customer.prod.store-events.ingka.com
customeradmin.customer.ingka.com
dashboard.admin.retail-pim.ingka.com
data.ingka.com
dor.food.ingka.com
dr.kappla.ingka.com
ebv.prod.oc.ingka.com
edit.ico-worker.ingka.com
favs.oneweb.ingka.com
flytta.ingka.com
foodbox.food.ingka.com
framework.customer.ingka.com
gap.food.ingka.com
igift.test.ingkadt.com
images-historical.asisonline.cir.ingka.com
inside.ext.ingka.com
inside.ingka.com
ipm-backend.ingka.com
iquote.ingka.com
jira.digital.ingka.com
kategorisera.ingka.com
lb.prod.customeradmin.customer.ingka.com
main.buyback.prod.cir.ingka.com
metal-model.cybersec.ingka.com
one.dev-ugc.ingka.com
one.ugc.ingka.com
oos.inside.ingka.com
ordercapture.oneweb.ingka.com
preview.buyback.cir.ingka.com
pro.salja.ingka.com
prod.loyalty-service.ingka.com
prod.soim.ingka.com
prototype.data.ingka.com
rrm.api.ingka.com
shared.ext.ingka.com
shop.asisonline.cir.ingka.com
slm.ingka.com
stops.ingka.com
storage.asisonline.cir.ingka.com
translations.customeradmin.customer.ingka.com
www.hej.ingka.com
www.ingka.com

Other certificates including the domain name ingka.com

(limited to 100 certificates)
dep-react-17-x.buyback.dev.circular-ventures.ingka.com
push.prometheus.monitoring.ilo.ingka.com
ingkaincludes.ingka.com
ziplookup-server.cwtools.dev.csc.ingka.com
ingka.com
notification.irecover.stage.ilo.ingka.com
be-fr.cocreate.ingka.com
prod.returns.ingka.com
soim.ru-prod.ingka.com
cybersec.ingka.com
monitoring.irecover.dev.ilo.ingka.com
dev.cloud.ingka.com
le-26875723.34.77.165.130.nip.io
rest-api.stage.foundation.ingka.com
aol-synq-service.aol.dev.ilo.ingka.com
portal-test.rtsales.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
*.pmt.ingka.com
auth.workflows.dev.ingka.com
stage-prepaidcard-adapter-zz-prepaidcard.gke.ingka.com
ctf.manager.api.ingka.com
irecover.ilo.ingka.com
hd-dtc.com
qa.csc-input.ingka.com
kr.cocreate.ingka.com
ingka.com
api.irecover.dev.ilo.ingka.com
canteenapp.food.ingka.com
prod-hub-zz-loyalty-service.gke.ingka.com
test.translate.ingka.com
www.test.translate.ingka.com
api.data.dev.ilo.ingka.com
cir-1399.buyback.dev.circular-ventures.ingka.com
test-kiosk.rtsales.ingka.com
ingkadt.com
www.kerenku.com
partner.ingka.com
api-lb-cssom-dev.ingka.com
api-fix-monitoring-cate.buyback.dev.cir.ingka.com
origin.stage.flytta.ingka.com
dev-slm-zz-slm.gke.ingka.com
dev.10jobstool.ingka.com
nl.cocreate.ingka.com
origin.stage.case.ingka.com
mfs.ingka.com
playground.servicemesh.ingka.com
logs-pr-725.dev.context.ingka.com
stag.v1.simulator.uk.ap.fs.ingka.com
ingka.com
kilobytetechnology.com
recovery.ingka.com
stag.v1.order-status.eu.fs.ingka.com
greymatter-ms.aol.sandbox.ilo.ingka.com
cld.prod.serviceoffers.ingka.com
login.gogogarden.com
web3.aleph-labs.com
collector.monitoring.ingka.com
ctf.manager.api.ingka.com
camptv-dev.ingka.com
api.prod.irecover.ilo.ingka.com
dev-slm-zz-slm.gke.ingka.com
cwtools.dev.csc.ingka.com
origin-gcp.ctf.api.ingka.com
backoffice-add-user-menu.buyback.dev.cir.ingka.com
origin.dev.sa.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
zap.sklabs.app
docs.dev.case.ingka.com
www.6join.com
cmdelete.prod.favs.ingka.com
cybersecinc.ingka.com
analytics.ikea.developyn.com
auth.workflows.dev.ingka.com
peopleplanning.ingka.com
item-ms.aol.dev.ilo.ingka.com
www.ikea.se
feed-nl-staging.stage-insp-feed.ingka.com
ui-origin.slm.ingka.com
auth.prod.foundation.ingka.com
aol-iws-service.aol.dev.ilo.ingka.com
origin.publicera.ingka.com
staging.kaskad.ingka.com
stage-checkout-location-us-locationservices.gke.ingka.com
prod.spe.ingka.com
stage.api.iobserve.ingka.com
rst-preprod.ingka.com
www.alaswaq.co
redirect.data.dev.ilo.ingka.com
proxy-to-vm-for-dev.insight-hub.ingka.com
lb.coworker.test.store-events.ingka.com
unitdata.copos.ingka.com
top-items-api-test.rtsales.ingka.com
origin.test.salja.ingka.com
notification.irecover.ilo.ingka.com
ingka.com
api-cir-2406.buyback.dev.cir.ingka.com
prod-nowit-wrapper-ops-intel-aiops.gke.ingka.com
hackathon.test.returns.ingka.com
es.cocreate.ingka.com
nl-feed-service.stage-insp-feed.ingka.com

Certificate

The complete raw certificate details for ingka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAErFu0ZVYIhTvhj0p0MD72l5hDOK5z
LynRj3euS3VaDtlXUskhft865EV+qWb+8XF7RqhQhzH4aojr7nWksdl4Fw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13710891839547603950736051725658487848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ingka Holding B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004ac5bb4655608853be18f4a74303ef697984338ae732f29d18f77ae4b755a0ed95752c9217edf3ae4457ea966fef1717b46a8508731f86a88ebee75a4b1d97817
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bd68664493a9421d705b2b141430b26f0e3c079
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accounts.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htapps.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iquote.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spapps.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukapps.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wms.fms.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pip.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.range-categorisation.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.range-management.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akacdn.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gw.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.fixa.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.prod.apo.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.serviceoffers.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.beta.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-mfe.dev-lotta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-mfe.lotta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.build.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.upptacka.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.prod.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.prod.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.admin.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dor.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.kappla.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebv.prod.oc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.ico-worker.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'favs.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbox.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gap.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igift.test.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-historical.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ext.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipm-backend.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iquote.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.digital.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kategorisera.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb.prod.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metal-model.cybersec.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.dev-ugc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.ugc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordercapture.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.loyalty-service.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.soim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype.data.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrm.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.ext.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slm.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stops.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translations.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hej.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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