lyae.vy-verkko.fi

- Valtion tieto- ja viestintätekniikkakeskus Valtori -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1b:bf:3e:fd:2e:f3:c2:20:c7:7c:92:c0:27:a6:18:46 was issued on by Entrust, Inc..

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintätekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintätekniikkakeskus Valtori
Locality: Jyväskylä
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:bf:3e:fd:2e:f3:c2:20:c7:7c:92:c0:27:a6:18:46
Serial Number (int): 36882162154824419327612051907976501318
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: d0:99:cb:42:26:6e:af:c9:fd:0a:5b:fc:ce:3b:e5:ae:79:be:96:ed
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 55:7a:de:4b:2a:20:03:29:e6:e5:e9:d2:16:5a:06:e5:67:96:2e:c3
Fingerprint (sha256): 06:f6:0c:ae:42:78:38:d3:9a:d3:a6:5d:7f:e1:80:08:8a:f9:e5:eb:73:a3:31:dd:9a:73:92:d0:67:82:0e:01

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate lyae.vy-verkko.fi

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyae.vy-verkko.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyae.vy-verkko.fi
lyce.vy-verkko.fi
sip.aka.fi
sip.ambetsverket.fi
sip.ams-aland.fi
sip.ara.fi
sip.arkisto.fi
sip.avi.fi
sip.celia.fi
sip.defmin.fi
sip.digijavaestotietovirasto.fi
sip.dvv.fi
sip.ely-keskus.fi
sip.energiavirasto.fi
sip.ext.senaatti.fi
sip.fimea.fi
sip.finas.fi
sip.fmi.fi
sip.gtk.fi
sip.karvi.fi
sip.kkv.fi
sip.kotus.fi
sip.luke.fi
sip.lvm.fi
sip.maanmittauslaitos.fi
sip.maistraatti.fi
sip.meriturva.fi
sip.minedu.fi
sip.mmm.fi
sip.niuva.fi
sip.nrl.fi
sip.oikeus.fi
sip.okv.fi
sip.om.fi
sip.palkeet.fi
sip.pk.senaatti.fi
sip.phrakl.fi
sip.prh.fi
sip.rahoitusvakausvirasto.fi
sip.ruokavirasto.fi
sip.samu.fi
sip.senaatti.fi
sip.sprakinstitutet.fi
sip.stm.fi
sip.stuk.fi
sip.suomenlinna.fi
sip.taike.fi
sip.tem.fi
sip.te-toimisto.fi
sip.thl.fi
sip.tmfg.fi
sip.tpk.fi
sip.tukes.fi
sip.valtiokonttori.fi
sip.valtionkoulukodit.fi
sip.valtori.fi
sip.valtorisuoja.fi
sip.valvira.fi
sip.vatt.fi
sip.vayla.fi
sip.ver.fi
sip.vm.fi
sip.vnk.fi
sip.vrk.fi
sip.vth.fi
sip.vy-verkko.fi
sip.ym.fi
sip.ymparisto.fi

Other certificates including the domain name vy-verkko.fi

(limited to 100 certificates)
mail-136.vy-verkko.fi
lyae.vy-verkko.fi
VALTTMLCS01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
webfarm.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
mail-137.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-vkokous.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
VYVI-POSTI.VY-VERKKO.FI
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
turvaviesti.vy-verkko.fi
sip.vy-verkko.fi
perusviesti-posti.vyv.fi
turvaviesti.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
mail-out.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-some.vy-verkko.fi
vahva-pub.vnk.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
smtp-in.vy-verkko.fi
vahva-pub-qa.vnk.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
*.vy-verkko.fi
vyvi-kokous.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-turva.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
vyvi-posti.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
*.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
ucc.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi

Certificate

The complete raw certificate details for lyae.vy-verkko.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36882162154824419327612051907976501318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 13:13:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-29 13:13:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyväskylä'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintätekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyae.vy-verkko.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702318942139243610716084602594283735038539919228473314914391189459663152031362087574296608257136069118802207767158786508249368515628511327677747719815650819093309175226447977172238718918295700648841014717957542536442313889033055419568503647818447549940871168606838021705238635163188762190151283835929746130770909024639845901424138587267557474003566301300043420785520589375723843436639982791787897436341235807890896485062904552577719587165767200781279375780737696110598764471182877679553809973961988732056963296501530811738340665389484226837404557893283743364017416237072532838802576789220989946307652552210651438045958469325820797193258194155828263300417945434871522483766705082837869558008493126376567258064636767214310630531029285674960258960618030279613919320928508436458662257689994064728418237166371889113915174309560697909913670030979949249026663714095214511107752244102924449975141210166913981070547104467398530503840333382367601861922225186552185382054560456923590995211199856667672435035682614764322243701929081755103748402991357896037225138117329738861119434797366664138255571745818099483649944626982003599591615912385137026350642783929938249166245951093791695225817140841503804492717768537235232316832178101229142105584889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d099cb42266eafc9fd0a5bfcce3be5ae79be96ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1087 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyae.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyce.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ambetsverket.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ams-aland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ara.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.arkisto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.celia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.defmin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.digijavaestotietovirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.dvv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ely-keskus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.energiavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ext.senaatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fimea.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.finas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fmi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gtk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.karvi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.kotus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.luke.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lvm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.maanmittauslaitos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.maistraatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.meriturva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.minedu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mmm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.niuva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.nrl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.oikeus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.om.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.palkeet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pk.senaatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.phrakl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.prh.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.rahoitusvakausvirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ruokavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.samu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.senaatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sprakinstitutet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.stm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.stuk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.suomenlinna.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.taike.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tem.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.te-toimisto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.thl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tmfg.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tpk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tukes.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtiokonttori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtionkoulukodit.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtorisuoja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valvira.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vatt.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vayla.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ver.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vnk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vrk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vth.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ym.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ymparisto.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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