pointti-virtu.palkeet.vyv.fi
- Valtion Tieto- ja Viestintatekniikkakeskus Valtori -
Issued by VRK CA for Service Providers - G3
About this certificate
This digital certificate with serial number 07:00:00:01:6c:99:44:1a:c9:00:ae:83:a3:45:be:dd:2a:48 was issued on by Vaestorekisterikeskus CA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
Valtion Tieto- ja Viestintatekniikkakeskus Valtori
Organization:
Valtion Tieto- ja Viestintatekniikkakeskus Valtori
Organization unit: Kapasiteettipalvelut - Kumppanin Tuottama
Organization unit: Kapasiteettipalvelut - Kumppanin Tuottama
State / Province:
Finland
Locality: Jyvaskyla
Country: FI
Locality: Jyvaskyla
Country: FI
Vaestorekisterikeskus CA
Organization:
Vaestorekisterikeskus CA
Organization unit: Palveluvarmenteet
Organization unit: Palveluvarmenteet
Country:
FI
This certificate has expire since
Certificate Details
Serial Number (hex): 07:00:00:01:6c:99:44:1a:c9:00:ae:83:a3:45:be:dd:2a:48Serial Number (int): 609786008917261808482205174062275341658696
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 75:ed:b3:2b:fb:e8:90:8a:31:dc:87:d6:3a:a1:c2:9c:ff:e2:8c:02
AuthorityKeyId: 65:04:e8:2d:92:e7:cb:2a:ab:57:15:a8:65:2a:aa:fa:b7:16:74:f6
Fingerprint (sha1): 7c:a0:50:6f:31:8e:29:bd:5b:12:71:61:5e:d4:4d:7d:ab:63:9d:a1
Fingerprint (sha256): 0a:0b:b0:cb:70:29:d7:b3:b2:f2:d2:2e:c0:7c:7b:7b:1d:ac:6c:b4:97:93:69:d4:b6:4d:43:b6:1f:85:b7:80
Issuing Certificate URL: http://proxy.fineid.fi/ca/vrksp3.crt
Revocation information
OCSP Server: http://ocsp.fineid.fi/vrksp3CRL Distribution Point: http://proxy.fineid.fi/crl/vrksp3c.crl
Check the revocation status for certificate pointti-virtu.palkeet.vyv.fi
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pointti-virtu.palkeet.vyv.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pointti-virtu.palkeet.vyv.fi
Other certificates including the domain name vyv.fi
(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi
Certificate
The complete raw certificate details for pointti-virtu.palkeet.vyv.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHQjCCBSqgAwIBAgISBwAAAWyZRBrJAK6Do0W+3SpIMA0GCSqGSIb3DQEBCwUA MHgxCzAJBgNVBAYTAkZJMSEwHwYDVQQKExhWYWVzdG9yZWtpc3RlcmlrZXNrdXMg Q0ExGjAYBgNVBAsTEVBhbHZlbHV2YXJtZW50ZWV0MSowKAYDVQQDEyFWUksgQ0Eg Zm9yIFNlcnZpY2UgUHJvdmlkZXJzIC0gRzMwHhcNMTkwODE2MDcxNTAwWhcNMjEw ODE2MjA1OTU5WjCByzELMAkGA1UEBhMCRkkxEDAOBgNVBAgTB0ZpbmxhbmQxEjAQ BgNVBAcTCUp5dmFza3lsYTE7MDkGA1UEChMyVmFsdGlvbiBUaWV0by0gamEgVmll c3RpbnRhdGVrbmlpa2tha2Vza3VzIFZhbHRvcmkxMjAwBgNVBAsTKUthcGFzaXRl ZXR0aXBhbHZlbHV0IC0gS3VtcHBhbmluIFR1b3R0YW1hMSUwIwYDVQQDExxwb2lu dHRpLXZpcnR1LnBhbGtlZXQudnl2LmZpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA7TdZxilM02Pdq0jk89v/HCOIdQnmYyxnldX9OZrAGb+7fbphucxC wmkVyb6paZbeRPLRu36mboV9bSjnkTSNEEvFCpubmnB4j+0VyG1Rf/LQmtrM2KI2 456sURGDxLamakS6dve2vpV48INxexq3COkaTn8M5LM71343Zaikw9hYy7QpPIMa 9M5WdPpkivEQeMqFo7Z0x2XlPaOaDQSPZtiRQxa9UegQmxxghr21yQqja5tiDbXj egfI8cyd0DLeEmzr1sCpL7u85YICM7NFb95WBDo1tTj3qzb4ek1Xd2L8xhzHfvKL tVpgS3f/84O2ujdmuAQEwmhjevIqU/QdwQIDAQABo4ICcDCCAmwwHwYDVR0jBBgw FoAUZQToLZLnyyqrVxWoZSqq+rcWdPYwHQYDVR0OBBYEFHXtsyv76JCKMdyH1jqh wpz/4owCMA4GA1UdDwEB/wQEAwIEsDCB1wYDVR0gBIHPMIHMMAgGBgQAj3oBBzCB vwYJKoF2hAUBCiIBMIGxMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmZpbmVpZC5m aS9jcHMzMy8wgYUGCCsGAQUFBwICMHkad1Zhcm1lbm5lcG9saXRpaWtrYSBvbiBz YWF0YXZpbGxhIC0gQ2VydGlmaWthdCBwb2xpY3kgZmlubnMgLSBDZXJ0aWZpY2F0 ZSBwb2xpY3kgaXMgYXZhaWxhYmxlIGh0dHA6Ly93d3cuZmluZWlkLmZpL2NwczMz MCcGA1UdEQQgMB6CHHBvaW50dGktdmlydHUucGFsa2VldC52eXYuZmkwDwYDVR0T AQH/BAUwAwEBADA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vcHJveHkuZmluZWlk LmZpL2NybC92cmtzcDNjLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwEwagYIKwYBBQUHAQEEXjBcMDAGCCsGAQUFBzAChiRodHRwOi8vcHJveHkuZmlu ZWlkLmZpL2NhL3Zya3NwMy5jcnQwKAYIKwYBBQUHMAGGHGh0dHA6Ly9vY3NwLmZp bmVpZC5maS92cmtzcDMwLQYIKwYBBQUHAQMEITAfMAgGBgQAjkYBATATBgYEAI5G AQYwCQYHBACORgEGAzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF AAOCAgEAY/CnAUD5KSAxg5mxf29ak6oWTS02/FBg4gvcvnx6ds44xz7qMS+ejjko wRWoH65RlQqLUwQm/XjJRYAZuez1jL9VMCQTwipH+prIWahMIha97hU7PXpd7Yxp b4D6dSxJ2tcF3YfEy93WsOXrEle/BllHFqB98OhkKb12SXXnGB6kZG7VSVJVENe7 8E0XljEMo6lko428T8dKTjIRk6C9pRrUo6x65kVD2TdQmcmRdMPeTOClolLTT9j/ j1842mTSU6Yt0pSKhjgBuUjrZqwa5irF79IUhpBHZAEeHC8YkLFOjZS7n258NJAy mJgLQYEG039E01iy3/qjq0dqeSVrzhHw36h+4EiPSj8h9pUdYjJDHDrSbcT/dZ/L y6CbXNhdnfMNyECAgw8Fv7H4bOncVDLByV6d76FucRak+25NN8LcjWKnhZ9Pj+UU noP6uIh7CJgRFn2ALGgCqn2AecGJdP70qSoBlKnUVFyx657lfvnmYrWEgiY2D1qR 5rCh8ZiKTc85XisdJTawGD7SOpeXP1CAV8nznNTH2S2AZwS6gdcHdDZ+r5E8EvfQ /3ozn62QnOCAVh89b5B4ZLIZl5TbmYiVlYup38Btp5cnmyH39c2I/BlF21N+/Yjk d4qCkzGaXTTAeO6gkb42+OimC2BagvPX2nBCg3YOp5iGMo1UAPs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TdZxilM02Pdq0jk89v/ HCOIdQnmYyxnldX9OZrAGb+7fbphucxCwmkVyb6paZbeRPLRu36mboV9bSjnkTSN EEvFCpubmnB4j+0VyG1Rf/LQmtrM2KI2456sURGDxLamakS6dve2vpV48INxexq3 COkaTn8M5LM71343Zaikw9hYy7QpPIMa9M5WdPpkivEQeMqFo7Z0x2XlPaOaDQSP ZtiRQxa9UegQmxxghr21yQqja5tiDbXjegfI8cyd0DLeEmzr1sCpL7u85YICM7NF b95WBDo1tTj3qzb4ek1Xd2L8xhzHfvKLtVpgS3f/84O2ujdmuAQEwmhjevIqU/Qd wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 609786008917261808482205174062275341658696 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaestorekisterikeskus CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palveluvarmenteet' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VRK CA for Service Providers - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 07:15:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-16 20:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Finland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jyvaskyla' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valtion Tieto- ja Viestintatekniikkakeskus Valtori' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kapasiteettipalvelut - Kumppanin Tuottama' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pointti-virtu.palkeet.vyv.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29945772714517800505091387386975879428664254201780824934654880542870344044898089879795242555560683409102610704008658017569631126250699317251813595586897288351441935888107810049906584137506832991520888784221838918720755120219933086943995831612760519592304444188102174941873301419763918002883851635774862542806881729278155793199800341482832502322513335974360073714457102529052802390300494951895034761197562511502085123398531936303823673632945977926407845705162270687383171702605819225284320723194640698395834585020977738845078858806583383455048031720715899077891833260774448708503842816254150393480679929955666200108481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6504e82d92e7cb2aab5715a8652aaafab71674f6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 75edb32bfbe8908a31dc87d63aa1c29cffe28c02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.246.517.1.10.34.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.fineid.fi/cps33/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [86 97 114 109 101 110 110 101 112 111 108 105 116 105 105 107 107 97 32 111 110 32 115 97 97 116 97 118 105 108 108 97 32 45 32 67 101 114 116 105 102 105 107 97 116 32 112 111 108 105 99 121 32 102 105 110 110 115 32 45 32 67 101 114 116 105 102 105 99 97 116 101 32 112 111 108 105 99 121 32 105 115 32 97 118 97 105 108 97 98 108 101 32 104 116 116 112 58 47 47 119 119 119 46 102 105 110 101 105 100 46 102 105 47 99 112 115 51 51] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointti-virtu.palkeet.vyv.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/crl/vrksp3c.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/ca/vrksp3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.fineid.fi/vrksp3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.3 (qcStatements) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.1 (etsiQcsCompliance) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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