ikea.se
Issued by R3
About this certificate
This digital certificate with serial number 04:08:1c:3b:eb:a0:49:76:48:85:b6:ab:9c:51:af:97:b8:6f was issued on by Let's Encrypt.
With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ikea.se
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:08:1c:3b:eb:a0:49:76:48:85:b6:ab:9c:51:af:97:b8:6fSerial Number (int): 351208932170870623755339467640015074867311
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a5:4e:52:8a:86:28:4c:d8:58:aa:0d:38:dd:df:f4:11:f4:2c:ad:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6a:46:03:98:93:e7:bc:fb:be:d7:d0:84:4c:c7:f2:52:7b:fd:84:48
Fingerprint (sha256): 94:d5:64:eb:88:5d:59:a6:73:37:10:60:6b:29:6f:d7:7c:49:98:07:74:6d:b6:33:a7:d2:76:80:50:3e:fc:00
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ikea.se
56
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ikea.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ikea-usa.com
ikea.ae
ikea.at
ikea.au
ikea.be
ikea.bh
ikea.ca
ikea.ch
ikea.cl
ikea.co
ikea.co.jp
ikea.co.nz
ikea.co.th
ikea.co.uk
ikea.com.au
ikea.com.co
ikea.com.eg
ikea.com.my
ikea.com.ro
ikea.com.sg
ikea.cz
ikea.de
ikea.dk
ikea.eg
ikea.es
ikea.fi
ikea.fr
ikea.hr
ikea.hu
ikea.ie
ikea.in
ikea.it
ikea.jo
ikea.jp
ikea.kr
ikea.ma
ikea.mx
ikea.my
ikea.nl
ikea.no
ikea.nz
ikea.om
ikea.ph
ikea.pl
ikea.pt
ikea.qa
ikea.ro
ikea.rs
ikea.sa
ikea.se
ikea.sg
ikea.si
ikea.sk
ikea.ua
ikea.us
insurance.ikea.sg
ikea.ae
ikea.at
ikea.au
ikea.be
ikea.bh
ikea.ca
ikea.ch
ikea.cl
ikea.co
ikea.co.jp
ikea.co.nz
ikea.co.th
ikea.co.uk
ikea.com.au
ikea.com.co
ikea.com.eg
ikea.com.my
ikea.com.ro
ikea.com.sg
ikea.cz
ikea.de
ikea.dk
ikea.eg
ikea.es
ikea.fi
ikea.fr
ikea.hr
ikea.hu
ikea.ie
ikea.in
ikea.it
ikea.jo
ikea.jp
ikea.kr
ikea.ma
ikea.mx
ikea.my
ikea.nl
ikea.no
ikea.nz
ikea.om
ikea.ph
ikea.pl
ikea.pt
ikea.qa
ikea.ro
ikea.rs
ikea.sa
ikea.se
ikea.sg
ikea.si
ikea.sk
ikea.ua
ikea.us
insurance.ikea.sg
Other certificates including the domain name ikea.se
(limited to 100 certificates)
akamai-san50.exacttarget.com
www.ikea.se
ikea.se
hej.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
click.news.email.ikea.se
www.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
akamai-san50.exacttarget.com
press.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
livethemma.ikea.se
view.news.email.ikea.se
ikea-se.kampanj.ikea.se
livethemma.ikea.se
ikea.se
www.ikea.se
www.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
www.ikea.se
ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
ikea.se
akamai-san50.exacttarget.com
livethemma.ikea.se
click.news.email.ikea.se
press.ikea.se
ikea.se
sommarbuffe.kampanj.ikea.se
Inter IKEA Systems B.V.
press.ikea.se
press.ikea.se
press.ikea.se
ikea.se
www.ikea.se
re-like.kampanj.ikea.se
livethemma.ikea.se
livethemma.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
cloud.news.email.ikea.se
www.ikea.se
www.ikea.se
click.news.email.ikea.se
akamai-san50.exacttarget.com
www.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
cloud.news.email.ikea.se
press.ikea.se
mta-sts.meeting.email.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
www.ikea.se
livethemma.ikea.se
click.news.email.ikea.se
sovsomettbarn.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
bedbath.kampanj.ikea.se
www.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
ikea.se
press.ikea.se
www.ikea.se
click.news.email.ikea.se
jagharaldrig.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
cloud.news.email.ikea.us
jagharaldrig.kampanj.ikea.se
livethemma.ikea.se
www.ikea.se
ikea.se
hej.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
click.news.email.ikea.se
www.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
akamai-san50.exacttarget.com
press.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
www.ikea.se
livethemma.ikea.se
view.news.email.ikea.se
ikea-se.kampanj.ikea.se
livethemma.ikea.se
ikea.se
www.ikea.se
www.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
www.ikea.se
ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
www2.blocket.ikea.se
ikea.se
akamai-san50.exacttarget.com
livethemma.ikea.se
click.news.email.ikea.se
press.ikea.se
ikea.se
sommarbuffe.kampanj.ikea.se
Inter IKEA Systems B.V.
press.ikea.se
press.ikea.se
press.ikea.se
ikea.se
www.ikea.se
re-like.kampanj.ikea.se
livethemma.ikea.se
livethemma.ikea.se
www.ikea.se
www.ikea.se
www.ikea.se
cloud.news.email.ikea.se
www.ikea.se
www.ikea.se
click.news.email.ikea.se
akamai-san50.exacttarget.com
www.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
cloud.news.email.ikea.se
press.ikea.se
mta-sts.meeting.email.ikea.se
www.ikea.se
Inter IKEA Systems B.V.
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
www.ikea.se
livethemma.ikea.se
click.news.email.ikea.se
sovsomettbarn.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
bedbath.kampanj.ikea.se
www.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
www2.blocket.ikea.se
press.ikea.se
www.ikea.se
figurineyourself.kampanj.ikea.se
press.ikea.se
jagharaldrig.kampanj.ikea.se
ikea.se
ikea.se
press.ikea.se
www.ikea.se
click.news.email.ikea.se
jagharaldrig.kampanj.ikea.se
jagharaldrig.kampanj.ikea.se
www.ikea.se
cloud.news.email.ikea.us
jagharaldrig.kampanj.ikea.se
livethemma.ikea.se
Certificate
The complete raw certificate details for ikea.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgISBAgcO+ugSXZIhbarnFGvl7hvMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDkxNzI2NDVaFw0yNDA1MDkxNzI2NDRaMBIxEDAOBgNVBAMT B2lrZWEuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sfRcHG5N Lcb1g95MNdrUHcFNmWBtl6ibmkGEl9XXowAYp9vP5YWOfmzF/ErY+TJQmIE+cG7l gMshMK4CF1+IFO00Wb/PH8aPB0zVojc2lrC1RBXM6HmcD0tQnzQ0kogIS546YUFf 7nLRFvYyXO3QkiXp38A3rWxI865qx6ZleL/nQj6t2SmAVkOa+Ceo106aLhbwIYnw JQe1WoS++FieFA0r8W+ibRcfVyPB1i/jTCB1au+kg6rqbfnchasVBWfHCeQKCKs0 eu5QhfBJqGnPEjlv4cgz3YGis4fJRase1Q0peIm2bxLOChEFjJU6fl49uQ2ZUh07 3Kan63F+pyNpAgMBAAGjggQwMIIELDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKVO UoqGKEzYWKoNON3f9BH0LK09MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIICOAYD VR0RBIICLzCCAiuCDGlrZWEtdXNhLmNvbYIHaWtlYS5hZYIHaWtlYS5hdIIHaWtl YS5hdYIHaWtlYS5iZYIHaWtlYS5iaIIHaWtlYS5jYYIHaWtlYS5jaIIHaWtlYS5j bIIHaWtlYS5jb4IKaWtlYS5jby5qcIIKaWtlYS5jby5ueoIKaWtlYS5jby50aIIK aWtlYS5jby51a4ILaWtlYS5jb20uYXWCC2lrZWEuY29tLmNvggtpa2VhLmNvbS5l Z4ILaWtlYS5jb20ubXmCC2lrZWEuY29tLnJvggtpa2VhLmNvbS5zZ4IHaWtlYS5j eoIHaWtlYS5kZYIHaWtlYS5ka4IHaWtlYS5lZ4IHaWtlYS5lc4IHaWtlYS5maYIH aWtlYS5mcoIHaWtlYS5ocoIHaWtlYS5odYIHaWtlYS5pZYIHaWtlYS5pboIHaWtl YS5pdIIHaWtlYS5qb4IHaWtlYS5qcIIHaWtlYS5rcoIHaWtlYS5tYYIHaWtlYS5t eIIHaWtlYS5teYIHaWtlYS5ubIIHaWtlYS5ub4IHaWtlYS5ueoIHaWtlYS5vbYIH aWtlYS5waIIHaWtlYS5wbIIHaWtlYS5wdIIHaWtlYS5xYYIHaWtlYS5yb4IHaWtl YS5yc4IHaWtlYS5zYYIHaWtlYS5zZYIHaWtlYS5zZ4IHaWtlYS5zaYIHaWtlYS5z a4IHaWtlYS51YYIHaWtlYS51c4IRaW5zdXJhbmNlLmlrZWEuc2cwEwYDVR0gBAww CjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY2PHz5YAAAEAwBGMEQCIDEg+7DK+zdX C8NPTdE117b/YuZYQ+ipWrIoWLC+DsgGAiA5exq0DEqR5UdCmHSLiMktJFDIi1oM bsYW4EniFlYAQAB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAAB jY8fPl0AAAQDAEcwRQIhAOC7AOdcI4C4EHh3sLizu0ytSz+eXakW/YqDA495dkmt AiBKrh7bmB8l4C0NnG+e0ASloMyAWYmirD8MnpXJdrItpjANBgkqhkiG9w0BAQsF AAOCAQEAhvWmj3qgmF+ib/An2wk8Ej0K4MBLLLTJjQdD/zmE57SlvAU3IZ1wCN9K bsfH5zVYjr4hRsxuzvSLdfcsOSuPEh8eIBNEeMhppAME6ip1gLsjB/GnWwmTzsIO kTxeXkSl8oXKQd1cl4UHFggG5Q4YeVibuzq2Xnx/aP7H4Yw/YVfAWvEIPNn3F/gm AmPBh52a1vbpFeFsavyknfUhmQUg7al7kwJQM6+ONoxvuE7JQYoBOIoecodDqtbA s/agnE4iF5EjXvxm7zObeIjaU8Uw4UBy0+HFgCykBZnTvuaNEBX8RkSmg0bsZdiX i2VFTKTIGe2JjtQJOBrJ1/lx3FWEOg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7H0XBxuTS3G9YPeTDXa 1B3BTZlgbZeom5pBhJfV16MAGKfbz+WFjn5sxfxK2PkyUJiBPnBu5YDLITCuAhdf iBTtNFm/zx/GjwdM1aI3NpawtUQVzOh5nA9LUJ80NJKICEueOmFBX+5y0Rb2Mlzt 0JIl6d/AN61sSPOuasemZXi/50I+rdkpgFZDmvgnqNdOmi4W8CGJ8CUHtVqEvvhY nhQNK/Fvom0XH1cjwdYv40wgdWrvpIOq6m353IWrFQVnxwnkCgirNHruUIXwSahp zxI5b+HIM92BorOHyUWrHtUNKXiJtm8SzgoRBYyVOn5ePbkNmVIdO9ymp+txfqcj aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 351208932170870623755339467640015074867311 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 17:26:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 17:26:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikea.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23694315678230131976750422517012515675940965152722288537839994878461105845588598776287926053127971767106149997058311713963257105254651345337690538109728344955198470057752329606988502054301996789304775689422225366647292449316106144141503594633714082382902247392496969544468531232868125789092216747365276892184814644682356048094227161189864516395034794730369767253811031680810710470935733858354686671621273526805175396106561967107313923024894751146000161147476543456904552552390680506558201382947543723416960997992542320489753098818433967434839432965801876532002711772866395100867684423976558609637222230162296722105193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a54e528a86284cd858aa0d38dddff411f42cad3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (559 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea-usa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.ae' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.bh' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.co.th' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com.eg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.eg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.jo' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.ma' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.om' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.qa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.rs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.sa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikea.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurance.ikea.sg' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d8f1f3e58000004030046304402203120fbb0cafb37570bc34f4dd135d7b6ff62e65843e8a95ab22858b0be0ec8060220397b1ab40c4a91e5474298748b88c92d2450c88b5a0c6ec616e049e216560040007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d8f1f3e5d0000040300473045022100e0bb00e75c2380b8107877b0b8b3bb4cad4b3f9e5da916fd8a83038f797649ad02204aae1edb981f25e02d0d9c6f9ed004a5a0cc805989a2ac3f0c9e95c976b22da6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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