www.ikanobank.de

- Ikano Bank AB (Publ) -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 6e:7d:30:89:0e:77:5a:d4:b3:3c:c8:f7 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Company registration number: 516406-0922
Organization: Ikano Bank AB (Publ)
Organization unit: IT
Address: Scheelevagen 15
State / Province: Lund
Locality: Lund
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:7d:30:89:0e:77:5a:d4:b3:3c:c8:f7
Serial Number (int): 34194696009637303756089247991
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 3d:04:fa:95:94:b4:f9:ce:81:34:ac:26:92:f9:03:f7:30:fb:70:e9
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): 99:78:8f:2f:60:93:e4:47:9f:24:79:b2:5d:af:d2:35:a4:9e:86:10
Fingerprint (sha256): cc:15:5b:ac:0b:22:cd:a1:34:52:c3:25:f7:9e:29:4d:66:1b:de:b6:f6:6c:64:41:da:f7:b6:05:19:36:d3:20

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate www.ikanobank.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikanobank.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ikanobank.de
www.ikano-shoppingcard.de
ikanobank.de

Other certificates including the domain name ikanobank.de

(limited to 100 certificates)
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
etracker.ikanobank.de
etracker.ikanobank.de
www.ikano.dk
ssl508615.cloudflaressl.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508616.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikanobank.de
www.ikano.dk
www.ikano.dk
ssl4788.cloudflare.com
www.ikano.dk
ssl323815.cloudflaressl.com
www.ikanobank.de
www.ikano.dk
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
etracker.ikanobank.de
ssl4788.cloudflare.com
sslgw.ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
antrag.ikanobank.de
ssl323815.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
ikanobank.de
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
antrag.ikanobank.de
antrag.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508617.cloudflaressl.com
antrag.ikanobank.de
www.ikano.dk
www.ikanobank.de
ssl4788.cloudflare.com
www.ikano.dk
ssl4788.cloudflare.com
ssl4788.cloudflare.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
antrag.ikanobank.de
www.ikano.dk
ssl4788.cloudflare.com
ssl323814.cloudflaressl.com
ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
zahlung.ikanobank.de

Certificate

The complete raw certificate details for www.ikanobank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34194696009637303756089247991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-18 13:16:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 13:16:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scheelevagen 15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikanobank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926351936506410799521499691319003511712279092980364210835248902933286298570621076619345121562082110936921260669996617622844943189977609127030290629657672482160586939464958657400481274234680425159016710391981090803946662666747501022807279037251589518641305629798033377555973517619769944419900916509747020788599065049598349721960696837700722450579702294191312681795552621021116445213234140405884839244549022170859536584023034415319392504725686946897382673351198974155661999240079551030754686997331093441985697763703984536438273236234236256600563921189318340720176249815767388907083953409451220776708646087967795994026779246500678707439177369287065693809098174034999589465829081360585471371489325458176495488823551003264448846994754108093630485311281049962567716666808410877787356597314761608554428078077701407408898266976328436173902162705474030033150421335703816451510708261219826093281263447742118927425601658841283396489661127000616533383022109582688403275665226285266613667017262807021139494869750848265824208245963167587656924165255049584083258828084040075673102411141325661130209535039263298030906195076791969953866314481939459433086985091977712525794972926363910478544290126338133240191060360083296542471399138152674914505769289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano-shoppingcard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d04fa9594b4f9ce8134ac2692f903f730fb70e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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