bafnet.ikano.nu

- Ikano Bank AB (Publ) -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:62:9b:cc:10:68:50:5a:d9:0a:80:56:04:64:cc:ae:59 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Organization: Ikano Bank AB (Publ)
Organization unit: IT
State / Province: Lund
Locality: Lund
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:62:9b:cc:10:68:50:5a:d9:0a:80:56:04:64:cc:ae:59
Serial Number (int): 1492269252236826650269997317472936740564569
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: f2:5e:1e:54:64:c5:d3:bc:87:fc:ad:12:13:5f:4e:62:db:01:5a:3a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): cd:00:23:39:f7:3b:90:36:ec:df:3c:af:19:ff:2b:d0:13:dc:b4:69
Fingerprint (sha256): a4:64:df:2b:5e:af:09:16:cd:c2:16:62:9e:cb:a8:da:58:a3:20:de:15:8a:c3:8a:fa:53:c3:c7:da:ad:4e:78

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate bafnet.ikano.nu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bafnet.ikano.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bafnet.ikano.nu

Other certificates including the domain name ikano.nu

(limited to 100 certificates)
apianalytics.ikano.nu
selfservice.ikano.dk
mail.ikano.nu
Identitynow.ikano.nu
identityiq.ikano.nu
citrix.ikano.nu
view.ikano.nu
api.ikano.nu
esb.ikano.nu
citrix.ikano.nu
selfservice.ikano.dk
view.ikano.nu
maileuq.ikano.nu
uat.newlook.ikano.nu
apipte.ikano.nu
citrix.ikano.nu
ecore.ikano.nu
ecore.ikano.nu
mail1.ikano.nu
Identitynow.ikano.nu
pte.ikano.merchantportal.ikano.nu
mailguard1.ikano.nu
esb.ikano.nu
pvmdc1linise002.ikano.nu
UAT.SVN.Ikano.Nu
esb.ikano.nu
hopex.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
citrix.ikano.nu
apiuat.ikano.nu
dev01.apitest.ikano.nu
Identitynow-sso.ikano.nu
ikano.merchantportal.ikano.nu
hopex.ikano.nu
mail.ikano.nu
mail1.ikano.nu
adfs.ikano.nu
CHAT.IKANO.NU
view.ikano.nu
crm.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
crm.ikano.nu
api.ikano.nu
uat.hopex.ikano.nu
maileuq.ikano.nu
mail.ikano.nu
sip.ikano.nu
kampanj.ikano.nu
access.ikano.nu
adfs.ikano.nu
view.ikano.nu
maileuq.ikano.nu
api.ikano.nu
mail.ikano.nu
esb.ikano.nu
tm.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
sbm.ikano.nu
adfs.ikano.nu
adfs.ikano.nu
uat.crm.ikano.nu
citrix.ikano.nu
pte.onlineshop.ikano.nu
vdi.ikano.nu
mail.ikano.nu
LyncWebDC.ikano.nu
maconomy.ikano.nu
citrix.ikano.nu
maileuq.ikano.nu
identitynow.ikano.nu
uat.identityiq.ikano.nu
sip.ikano.nu
apipte.ikano.nu
uat.newlook.ikano.nu
adfs.ikano.nu
access.ikano.nu
sbm.ikano.nu
apiuat.ikano.nu
api.ikano.nu
pte.onlineshop.ikano.nu
mail1.ikano.nu
snowexternal.ikano.nu
vcse.ikano.nu
vdi.ikano.nu
uat.crm.ikano.nu
dev01.apitest.ikano.nu
mail.ikano.nu
oobdc1.ikano.nu
maileuq.ikano.nu
sts.ikano.nu
ise.ikano.nu
apipte.ikano.nu
sbm.ikano.nu
LyncWebDC.ikano.nu
nlease2.ikano.nu
maileuq.ikano.nu
apimanagement.ikano.nu

Certificate

The complete raw certificate details for bafnet.ikano.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492269252236826650269997317472936740564569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-21 09:36:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-21 09:36:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bafnet.ikano.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800342270996382394208649569003750113294022427801431047282114299554413893088726038968088711034990888470543669387088787374338797403763067156775751428222355879262387395753304463529169863505857130004485996857716694124894900090624147638883290673019286847060417953272094944860413017408409857807731346970273731182249612878617236453895245380352310663840314082375003729904192968645831952072966342117718741854518011655658332721123391401911905003943209845910847415679899082557807517610098172586527108090900716742042105064693290364563126555589170257369432583437675639747510658954211622117824980337118338298631610701434666932691955492184691103263573398250635470265362884498078178706023906259049839832234750696268139776816253356717075342222571843551946320208777993044779755735100280622050092882145739393759542369585560037062866757160884350443695122124384455024378200061928946007301955786747535193192946799266172552476246821784572643756953374204254699932455610243385904445820612591380240465279806399746812816836246717196175634190413737177308646000431559990410212786435122516123353453386924611247887713318499824100058042393522959578278409897747185490858661287509482418204874028551013532447784057948485320013910375993839402879561055366350768552144003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bafnet.ikano.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f25e1e5464c5d3bc87fcad12135f4e62db015a3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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