ingka.com

- Ingka Holding B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:75:a8:9e:26:2c:c5:d6:fc:c1:0c:98:14:b9:57:f3 was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Ingka Holding B.V.

Organization: Ingka Holding B.V.
State / Province: Zuid-Holland
Locality: Leiden
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:75:a8:9e:26:2c:c5:d6:fc:c1:0c:98:14:b9:57:f3
Serial Number (int): 1940146702911138821125803653524445171
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c4:76:c6:ea:d6:1a:af:66:ae:47:86:c2:6f:24:ed:11:5c:93:de:45
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 2b:78:93:7a:4a:d8:4c:44:2d:a8:8d:ae:5d:5c:1f:d1:0c:7c:02:bb
Fingerprint (sha256): 6b:b3:35:4d:4b:ac:0f:dc:90:1c:e3:57:55:0e:12:64:fa:d2:86:0e:26:4c:6c:4e:6f:7d:16:eb:27:1b:7d:d7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ingka.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingka.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingka.com
*.accounts.ingka.com
*.api.ingka.com
*.cdn.ingka.com
*.dev.customeradmin.customer.ingka.com
*.flytta.ingka.com
*.htapps.inside.ingka.com
*.ingka.com
*.iquote.ingka.com
*.prod.customeradmin.customer.ingka.com
*.spapps.inside.ingka.com
*.test.customeradmin.customer.ingka.com
*.ukapps.ingka.com
*.wms.fms.ingka.com
admin.pip.ingka.com
admin.range-categorisation.ingka.com
admin.range-management.ingka.com
admin.retail-pim.ingka.com
api-gw.customer.ingka.com
api.buyback.cir.ingka.com
api.buyback.prod.cir.ingka.com
api.fixa.ingka.com
api.prod.apo.ingka.com
api.retail-pim.ingka.com
api.serviceoffers.ingka.com
backoffice.buyback.cir.ingka.com
backoffice.buyback.prod.cir.ingka.com
cart.beta.oneweb.ingka.com
cart.oneweb.ingka.com
cat-mfe.dev-lotta.ingka.com
cat-mfe.lotta.ingka.com
cms.ingka.com
config.salja.ingka.com
configurator.prod.gbs.ingka.com
confluence.build.ingka.ikea.com
console.upptacka.ingka.com
coworker.buyback.cir.ingka.com
coworker.buyback.prod.cir.ingka.com
coworker.prod.store-events.ingka.com
customer.prod.store-events.ingka.com
customeradmin.customer.ingka.com
dashboard.admin.retail-pim.ingka.com
data.ingka.com
demo.kappla.ingka.com
dor.food.ingka.com
ebv.prod.oc.ingka.com
edit.ico-worker.ingka.com
favs.oneweb.ingka.com
flytta.ingka.com
foodbox.food.ingka.com
framework.customer.ingka.com
gap.food.ingka.com
i18n.food.ingka.com
igift.test.ingkadt.com
images-historical.asisonline.cir.ingka.com
inside.ext.ingka.com
inside.ingka.com
ipm-backend.ingka.com
iquote.ingka.com
jira.digital.ingka.com
kategorisera.ingka.com
lb.prod.customeradmin.customer.ingka.com
main.buyback.prod.cir.ingka.com
metal-model.cybersec.ingka.com
one.dev-ugc.ingka.com
one.ugc.ingka.com
oos.inside.ingka.com
ordercapture.oneweb.ingka.com
preview.buyback.cir.ingka.com
prod.loyalty-service.ingka.com
prod.soim.ingka.com
prototype.data.ingka.com
rrm.api.ingka.com
shared.ext.ingka.com
shop.asisonline.cir.ingka.com
slm.ingka.com
stops.ingka.com
storage.asisonline.cir.ingka.com
tools.opoa.ingka.com
translations.customeradmin.customer.ingka.com
www.hej.ingka.com
www.ingka.com

Other certificates including the domain name ingka.com

(limited to 100 certificates)
dep-react-17-x.buyback.dev.circular-ventures.ingka.com
push.prometheus.monitoring.ilo.ingka.com
ingkaincludes.ingka.com
ziplookup-server.cwtools.dev.csc.ingka.com
ingka.com
notification.irecover.stage.ilo.ingka.com
be-fr.cocreate.ingka.com
prod.returns.ingka.com
soim.ru-prod.ingka.com
cybersec.ingka.com
monitoring.irecover.dev.ilo.ingka.com
dev.cloud.ingka.com
le-26875723.34.77.165.130.nip.io
rest-api.stage.foundation.ingka.com
portal-test.rtsales.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
*.pmt.ingka.com
auth.workflows.dev.ingka.com
ctf.manager.api.ingka.com
irecover.ilo.ingka.com
hd-dtc.com
qa.csc-input.ingka.com
kr.cocreate.ingka.com
ingka.com
canteenapp.food.ingka.com
prod-hub-zz-loyalty-service.gke.ingka.com
test.translate.ingka.com
www.test.translate.ingka.com
api.data.dev.ilo.ingka.com
cir-1399.buyback.dev.circular-ventures.ingka.com
test-kiosk.rtsales.ingka.com
ingkadt.com
www.kerenku.com
partner.ingka.com
api-fix-monitoring-cate.buyback.dev.cir.ingka.com
origin.stage.flytta.ingka.com
dev-slm-zz-slm.gke.ingka.com
dev.10jobstool.ingka.com
nl.cocreate.ingka.com
origin.stage.case.ingka.com
mfs.ingka.com
playground.servicemesh.ingka.com
logs-pr-725.dev.context.ingka.com
stag.v1.simulator.uk.ap.fs.ingka.com
ingka.com
kilobytetechnology.com
recovery.ingka.com
stag.v1.order-status.eu.fs.ingka.com
greymatter-ms.aol.sandbox.ilo.ingka.com
cld.prod.serviceoffers.ingka.com
login.gogogarden.com
web3.aleph-labs.com
collector.monitoring.ingka.com
ctf.manager.api.ingka.com
api.prod.irecover.ilo.ingka.com
dev-slm-zz-slm.gke.ingka.com
cwtools.dev.csc.ingka.com
origin-gcp.ctf.api.ingka.com
backoffice-add-user-menu.buyback.dev.cir.ingka.com
aol-invata-service.aol.dev.ilo.ingka.com
docs.dev.case.ingka.com
www.6join.com
analytics.ikea.developyn.com
auth.workflows.dev.ingka.com
peopleplanning.ingka.com
item-ms.aol.dev.ilo.ingka.com
www.ikea.se
feed-nl-staging.stage-insp-feed.ingka.com
ui-origin.slm.ingka.com
auth.prod.foundation.ingka.com
aol-iws-service.aol.dev.ilo.ingka.com
origin.publicera.ingka.com
staging.kaskad.ingka.com
stage-checkout-location-us-locationservices.gke.ingka.com
prod.spe.ingka.com
rst-preprod.ingka.com
www.alaswaq.co
redirect.data.dev.ilo.ingka.com
proxy-to-vm-for-dev.insight-hub.ingka.com
unitdata.copos.ingka.com
top-items-api-test.rtsales.ingka.com
origin.test.salja.ingka.com
notification.irecover.ilo.ingka.com
ingka.com
api-cir-2406.buyback.dev.cir.ingka.com
prod-nowit-wrapper-ops-intel-aiops.gke.ingka.com
hackathon.test.returns.ingka.com
nl-feed-service.stage-insp-feed.ingka.com
*.dev.ingka.com
mfs.ingka.com
se.cocreate.ingka.com
dep-apps-buyback-client.buyback.dev.cir.ingka.com
ocpubsub.prd.igift.ingka.com
rest-alpha.splunk.ingka.com
mfs.ingka.com
aol-gm-service.aol.stage.ilo.ingka.com
stage-frontend-us-ms-waitwhile-analytics.gke.ingka.com
origin-gcp.ctf.api.ingka.com
dev.iquote.ingka.com
stage-prepaidcard-adapter-zz-prepaidcard.gke.ingka.com

Certificate

The complete raw certificate details for ingka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbrn6z6an+AN6Xsi+3Yg+I1/tLP4c
xfHPHOskThfLiGy5HWaI43aBtsJOH0In1Y+XTdjWkTA+KHLBWFkCbOR9HQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1940146702911138821125803653524445171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ingka Holding B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046eb9facfa6a7f8037a5ec8bedd883e235fed2cfe1cc5f1cf1ceb244e17cb886cb91d6688e37681b6c24e1f4227d58f974dd8d691303e2872c15859026ce47d1d
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c476c6ead61aaf66ae4786c26f24ed115c93de45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accounts.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htapps.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iquote.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spapps.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukapps.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wms.fms.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pip.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.range-categorisation.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.range-management.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gw.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.fixa.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.prod.apo.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.serviceoffers.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.beta.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-mfe.dev-lotta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat-mfe.lotta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.salja.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator.prod.gbs.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.build.ingka.ikea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.upptacka.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworker.prod.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.prod.store-events.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.admin.retail-pim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.kappla.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dor.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebv.prod.oc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.ico-worker.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'favs.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flytta.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbox.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gap.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i18n.food.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igift.test.ingkadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-historical.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ext.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipm-backend.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iquote.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.digital.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kategorisera.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb.prod.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.buyback.prod.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metal-model.cybersec.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.dev-ugc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.ugc.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.inside.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordercapture.oneweb.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.buyback.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.loyalty-service.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.soim.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype.data.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrm.api.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.ext.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slm.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stops.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.asisonline.cir.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.opoa.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translations.customeradmin.customer.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hej.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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