tcsopcloud.tuot.op-palvelut.fi

- OP Osuuskunta -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 25:fb:96:14:23:25:6e:30:d6:10:b8:1d:b9:82:a5:a0 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OP Osuuskunta

Organization: OP Osuuskunta
Locality: Helsinki
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:fb:96:14:23:25:6e:30:d6:10:b8:1d:b9:82:a5:a0
Serial Number (int): 50487746312415153028307040812992210336
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 50:a4:f0:9b:4e:bb:9e:1d:d1:96:cd:5a:11:b9:41:74:2f:80:4c:a5
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 09:38:3f:d9:38:7f:65:1e:37:39:ed:70:f0:b6:14:bf:c7:ee:27:55
Fingerprint (sha256): 0e:e0:fd:cf:b4:fd:3b:00:46:e1:96:02:fe:6d:7b:c1:a9:e9:08:47:28:fa:6c:ff:ee:93:14:b3:27:c8:80:fc

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tcsopcloud.tuot.op-palvelut.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tcsopcloud.tuot.op-palvelut.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tcsopcloud.tuot.op-palvelut.fi
www.tcsopcloud.tuot.op-palvelut.fi

Other certificates including the domain name op-palvelut.fi

(limited to 100 certificates)
opbstpsdlv.op-palvelut.fi
palhavr.aws.op-palvelut.fi
remote.op-palvelut.fi
opla.tuot.op-palvelut.fi
scl.internal.aws.op-palvelut.fi
*.bravo.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
opabacsr4.op-palvelut.fi
palhavr.internal.aws.op-palvelut.fi
*.vhahpral.internal.aws.op-palvelut.fi
verkkomaksu.op.fi
*.devops-coe.aws.op-palvelut.fi
opftp906.op-palvelut.fi
voroa1.op-palvelut.fi
*.aws.tuot.op-palvelut.fi
extlyncfarm.lync.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
splunk.tuot.op-palvelut.fi
ldap-isam.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
*.markets-analytics.internal.aws.op-palvelut.fi
subscriptionmanagement.op-palvelut.fi
opvaasrtcmsr2.op-palvelut.fi
portlet.viu.internal.aws.op-palvelut.fi
intraidp.op-palvelut.fi
*.vhahmyty.internal.aws.op-palvelut.fi
*.prod-qa.ccc.internal.aws.op-palvelut.fi
*.devops-coe.aws.op-palvelut.fi
*.markets-quants.aws.op-palvelut.fi
*.markets-quants.aws.op-palvelut.fi
m-request.op-palvelut.fi
vhplvsmjci.hec.tuot.op-palvelut.fi
verkkomaksu.op.fi
aviatrixctrl.internal.aws.op-palvelut.fi
resys.nl-pint.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
nolio-test.op-palvelut.fi
*.nl-aa-claims.internal.aws.op-palvelut.fi
*.cdc.internal.aws.op-palvelut.fi
*.acs-preprod.internal.aws.op-palvelut.fi
opmh.op-palvelut.fi
m-request.op-palvelut.fi
ext-ydin.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
*.global.kubelb.op-palvelut.fi
opla.tuot.op-palvelut.fi
nolio.op-palvelut.fi
*.ccc.internal.aws.op-palvelut.fi
view21rds.tuot.op-palvelut.fi
psd2-sandbox.aws.op-palvelut.fi
tcsopcloud.tuot.op-palvelut.fi
voroa1.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
nolio-test.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
opsccmcmg.op-palvelut.fi
op8021xnac2.op-palvelut.fi
vhplvws5wd01.hec.tuot.op-palvelut.fi
subscriptionmanagement.op-palvelut.fi
*.sya.internal.aws.op-palvelut.fi
*.markets-quants.internal.aws.op-palvelut.fi
vhplvow2wd01.hec.tuot.op-palvelut.fi
arekps.op-palvelut.fi
geotrust-admin.dk-common.aws.op-palvelut.fi
*.prod.creditengine.internal.aws.op-palvelut.fi
hallinta.op-kulku.fi
*.finanssialy-services.internal.aws.op-palvelut.fi
baw-common.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
www.kontaktiarchive.internal.aws.op-palvelut.fi
ldap-isam.op-palvelut.fi
mapi.internal.aws.op-palvelut.fi
opvirtdesk.op-palvelut.fi
cmg.prod.op-palvelut.fi
*.nl-aa-claims-pre.internal.aws.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
opmb.aws.op-palvelut.fi
*.nl-web-cc-person.internal.aws.op-palvelut.fi
*.prod.nl-web-event-stream.internal.aws.op-palvelut.fi
*.vhahpral.internal.aws.op-palvelut.fi
api-nc.op-kassa.fi
7OGBLPIAMAP.op-palvelut.fi
api.kortteli.aws.op-palvelut.fi
pa-commpool.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
*.sanelmapreprod.internal.aws.op-palvelut.fi
*.sya.internal.aws.op-palvelut.fi
sapfin.hec.tuot.op-palvelut.fi
*.aviatrixctrl.internal.aws.op-palvelut.fi
*.digiaspa.tuot.op-palvelut.fi
*.viu.aws.op-palvelut.fi
*.nl-aa-claims.internal.aws.op-palvelut.fi
ucc.lync.op-palvelut.fi
opsctinsthgsr1.op-palvelut.fi
mobilepilot.op-palvelut.fi
vhplvws2wd01.hec.tuot.op-palvelut.fi
korttelisovellus.op-palvelut.fi

Certificate

The complete raw certificate details for tcsopcloud.tuot.op-palvelut.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIQJfuWFCMlbjDWELgduYKloDANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjEyMTYwNzA3MzRaFw0yNDAxMTUwNzA3MzRaMGExCzAJBgNVBAYTAkZJMREwDwYD
VQQHEwhIZWxzaW5raTEWMBQGA1UEChMNT1AgT3N1dXNrdW50YTEnMCUGA1UEAxMe
dGNzb3BjbG91ZC50dW90Lm9wLXBhbHZlbHV0LmZpMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwYizA7FiD7hEPFJPQRX0iEYIbkTeBD1P9jxc4yNaJwuK
C73jYQTTHURVUMUzGUNxicNtjFJg1wX6ckMNZXw0V3XmZM6u09bvdM06r1g61xgT
4ve1tlrMGXdfit/on3wCsRqliLhL2qKkfeSZFX7jScjdURd5cNeElmhaGtDVmVOm
PgQx8HoDuqSDIBKCDcTnaqYcJdr942b7DloeR6vaWjMgNBz+fowdzF8HSqpRq0rx
NvOd7ERATTwuoNafiQni2qxN15nHNTOsJTBNwXomRi/Tne8hBtFT2xv6RRCRDnxk
lscBU7yghXhK6lEJlwGgIJDreJnZBkv7kgBaxDj9mwIDAQABo4IB0jCCAc4wDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUUKTwm067nh3Rls1aEblBdC+ATKUwHwYDVR0j
BBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsG
AQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0
cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCow
KKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwTQYDVR0R
BEYwRIIedGNzb3BjbG91ZC50dW90Lm9wLXBhbHZlbHV0LmZpgiJ3d3cudGNzb3Bj
bG91ZC50dW90Lm9wLXBhbHZlbHV0LmZpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTAYDVR0gBEUwQzA3BgpghkgBhvpsCgEF
MCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZn
gQwBAgIwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAH8A
r5Argin7rz1RJgbNLJmbaYvdC5QRG21KkGnzGMGDu5TmljElGJP5SEBGBOY9pB1E
XQz7tWScmzBbUVuJcng4R8935e6nablLcBHUTgSZWhaPxj26VMe5lzu/pgabwXQz
uqJ3L/ZyQR/FiYsLW/cShoLg8dqjuGBpNeRYtFVsqdI5FbNfAMAzbuMJOYmIUE3r
Q1g7aQI9z/tIHIj6+PSuG1tOZdaeTFiQGqKyJXPxzr4Xux8xCUi+dlp1AqQr28yH
za1wwQjc6PvPhGX97nwz3MCTNo/NKclIj5bcMyM3TxuS/krGu3UHMYen5FsGIs0Y
GWkWf0TU63ozxEcfo2w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYizA7FiD7hEPFJPQRX0
iEYIbkTeBD1P9jxc4yNaJwuKC73jYQTTHURVUMUzGUNxicNtjFJg1wX6ckMNZXw0
V3XmZM6u09bvdM06r1g61xgT4ve1tlrMGXdfit/on3wCsRqliLhL2qKkfeSZFX7j
ScjdURd5cNeElmhaGtDVmVOmPgQx8HoDuqSDIBKCDcTnaqYcJdr942b7DloeR6va
WjMgNBz+fowdzF8HSqpRq0rxNvOd7ERATTwuoNafiQni2qxN15nHNTOsJTBNwXom
Ri/Tne8hBtFT2xv6RRCRDnxklscBU7yghXhK6lEJlwGgIJDreJnZBkv7kgBaxDj9
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50487746312415153028307040812992210336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 07:07:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 07:07:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OP Osuuskunta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tcsopcloud.tuot.op-palvelut.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24431401783365777401537845465260720374303973189535403736282344224394379929386260676284523555424816423954528698383277423929549076565528788241145600653008452630234825753825000467966883000628442986057578359346497876776821741900572007924093806685014698021354992347941831201401807200751192138131032513189122908149994010283716216520981913632884978880160784241808023871807615402165989790648547430466011592776575760187081553101541666628127047669708531194043063140333311354756697447561497406169629544693694476235458750942961032850301293755160022431484833990026819245680378837298237335835332695096913986844933454949926561185179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50a4f09b4ebb9e1dd196cd5a11b941742f804ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcsopcloud.tuot.op-palvelut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcsopcloud.tuot.op-palvelut.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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