vhplvow2wd01.hec.tuot.op-palvelut.fi

- OP Osuuskunta -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 21:a9:e7:a2:00:2e:e2:2a:b5:b6:b5:fe:de:29:4f:6b was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OP Osuuskunta

Organization: OP Osuuskunta
Locality: Helsinki
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 21:a9:e7:a2:00:2e:e2:2a:b5:b6:b5:fe:de:29:4f:6b
Serial Number (int): 44746720101632059152122414488592404331
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 30:c6:5c:84:e4:2b:ba:36:92:a5:aa:4c:0c:ed:7b:8b:66:eb:c1:7e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 7f:27:d3:26:2d:74:8d:40:60:1f:22:54:ac:26:dc:23:95:bb:12:11
Fingerprint (sha256): 11:53:f0:8d:76:d3:d5:f7:f3:83:93:f4:9d:83:e7:15:ed:cc:77:dd:30:b1:48:e3:9f:8d:38:2f:10:90:c2:b5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate vhplvow2wd01.hec.tuot.op-palvelut.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vhplvow2wd01.hec.tuot.op-palvelut.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vhplvow2wd01.hec.tuot.op-palvelut.fi
www.vhplvow2wd01.hec.tuot.op-palvelut.fi

Other certificates including the domain name op-palvelut.fi

(limited to 100 certificates)
opbstpsdlv.op-palvelut.fi
palhavr.aws.op-palvelut.fi
remote.op-palvelut.fi
opla.tuot.op-palvelut.fi
scl.internal.aws.op-palvelut.fi
*.bravo.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
opabacsr4.op-palvelut.fi
palhavr.internal.aws.op-palvelut.fi
*.vhahpral.internal.aws.op-palvelut.fi
verkkomaksu.op.fi
*.devops-coe.aws.op-palvelut.fi
opftp906.op-palvelut.fi
voroa1.op-palvelut.fi
*.aws.tuot.op-palvelut.fi
extlyncfarm.lync.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
splunk.tuot.op-palvelut.fi
ldap-isam.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
*.markets-analytics.internal.aws.op-palvelut.fi
subscriptionmanagement.op-palvelut.fi
opvaasrtcmsr2.op-palvelut.fi
portlet.viu.internal.aws.op-palvelut.fi
intraidp.op-palvelut.fi
*.vhahmyty.internal.aws.op-palvelut.fi
*.prod-qa.ccc.internal.aws.op-palvelut.fi
*.devops-coe.aws.op-palvelut.fi
*.markets-quants.aws.op-palvelut.fi
*.markets-quants.aws.op-palvelut.fi
m-request.op-palvelut.fi
vhplvsmjci.hec.tuot.op-palvelut.fi
verkkomaksu.op.fi
aviatrixctrl.internal.aws.op-palvelut.fi
resys.nl-pint.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
nolio-test.op-palvelut.fi
*.nl-aa-claims.internal.aws.op-palvelut.fi
*.cdc.internal.aws.op-palvelut.fi
*.acs-preprod.internal.aws.op-palvelut.fi
opmh.op-palvelut.fi
m-request.op-palvelut.fi
ext-ydin.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
*.global.kubelb.op-palvelut.fi
opla.tuot.op-palvelut.fi
nolio.op-palvelut.fi
*.ccc.internal.aws.op-palvelut.fi
view21rds.tuot.op-palvelut.fi
psd2-sandbox.aws.op-palvelut.fi
tcsopcloud.tuot.op-palvelut.fi
voroa1.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
nolio-test.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
opsccmcmg.op-palvelut.fi
op8021xnac2.op-palvelut.fi
vhplvws5wd01.hec.tuot.op-palvelut.fi
subscriptionmanagement.op-palvelut.fi
*.sya.internal.aws.op-palvelut.fi
*.markets-quants.internal.aws.op-palvelut.fi
vhplvow2wd01.hec.tuot.op-palvelut.fi
arekps.op-palvelut.fi
geotrust-admin.dk-common.aws.op-palvelut.fi
*.prod.creditengine.internal.aws.op-palvelut.fi
hallinta.op-kulku.fi
*.finanssialy-services.internal.aws.op-palvelut.fi
baw-common.op-palvelut.fi
aviatrixctrl.internal.aws.op-palvelut.fi
www.kontaktiarchive.internal.aws.op-palvelut.fi
ldap-isam.op-palvelut.fi
mapi.internal.aws.op-palvelut.fi
opvirtdesk.op-palvelut.fi
cmg.prod.op-palvelut.fi
*.nl-aa-claims-pre.internal.aws.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
opmb.aws.op-palvelut.fi
*.nl-web-cc-person.internal.aws.op-palvelut.fi
*.prod.nl-web-event-stream.internal.aws.op-palvelut.fi
*.vhahpral.internal.aws.op-palvelut.fi
api-nc.op-kassa.fi
7OGBLPIAMAP.op-palvelut.fi
api.kortteli.aws.op-palvelut.fi
pa-commpool.op-palvelut.fi
*.datahub.internal.aws.op-palvelut.fi
*.sanelmapreprod.internal.aws.op-palvelut.fi
*.sya.internal.aws.op-palvelut.fi
sapfin.hec.tuot.op-palvelut.fi
*.aviatrixctrl.internal.aws.op-palvelut.fi
*.digiaspa.tuot.op-palvelut.fi
*.viu.aws.op-palvelut.fi
*.nl-aa-claims.internal.aws.op-palvelut.fi
ucc.lync.op-palvelut.fi
opsctinsthgsr1.op-palvelut.fi
mobilepilot.op-palvelut.fi
vhplvws2wd01.hec.tuot.op-palvelut.fi
korttelisovellus.op-palvelut.fi

Certificate

The complete raw certificate details for vhplvow2wd01.hec.tuot.op-palvelut.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIQIannogAu4iq1trX+3ilPazANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjA5MTIwNjU3MDFaFw0yMzEwMTEwNjU3MDFaMGcxCzAJBgNVBAYTAkZJMREwDwYD
VQQHEwhIZWxzaW5raTEWMBQGA1UEChMNT1AgT3N1dXNrdW50YTEtMCsGA1UEAxMk
dmhwbHZvdzJ3ZDAxLmhlYy50dW90Lm9wLXBhbHZlbHV0LmZpMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj5Iw0ldAeJIN6cAOfsDLpotGdxQrycOHmvq
teoVH3E4Soq6r03uTY7nI14jFd2UaQGqf22UnVL4hOTz6X+UGM8tE3DoXrlx9SbI
/Sd2ho9TxwAmBAa7y787w2UBZOH8B9a29uPFG6HYAXlc2VsqIqAsKtyAqXs1kpDh
lcit2ebCnlc+qu9dOrsiTno5c+0+QyLmeUGGOg0a5MpboepS/HX3xcmn+oL4wAH5
H7CdrxAQha7W3XnmaPEZli1lvrE17+hYwMO2Xjv4YTVCD1mjN3SLrDTK9WfZTz2F
eipvJ2gyHIPif45YXZ7Fe4KuPS6LjH3xGO4RdQKmREDvAo7poQIDAQABo4IB3jCC
AdowDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUMMZchOQrujaSpapMDO17i2brwX4w
HwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBa
MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcw
AoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1Ud
HwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmww
WQYDVR0RBFIwUIIkdmhwbHZvdzJ3ZDAxLmhlYy50dW90Lm9wLXBhbHZlbHV0LmZp
gih3d3cudmhwbHZvdzJ3ZDAxLmhlYy50dW90Lm9wLXBhbHZlbHV0LmZpMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTAYDVR0g
BEUwQzA3BgpghkgBhvpsCgEFMCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3LmVu
dHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBAFlIN2kscfN98QFFVP9gAjMaJJJpCW9st4kIPBtbzlTt
A8jgfAfXhxyG5PxlNELGfkIz0QCzuL9ylWTQnnqp7qeY81oCuur6N5Z7rgjQSt5C
jyZR1NJKHnQv10FzPyOs2aaFaUznPk62F35PNqBd6KxKpG8Z3AR48pLN/U6Ty1nh
es2REW01gBdB3zHQXHjHB8YTBsrjZvN3o+3PErgcyBCZwQN3OM4Os43gjAduqWqG
PjK46CcnY/6iYyu4EBODoGtBQXr2gQRAWVmQ6nEyQSwjexKqTRgnfG4HPrh+JYc4
LHP3Z6BBHsNr2cVAE6xGFIO46lOSa3Yyd8g/QK1qhH4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj5Iw0ldAeJIN6cAOfsD
LpotGdxQrycOHmvqteoVH3E4Soq6r03uTY7nI14jFd2UaQGqf22UnVL4hOTz6X+U
GM8tE3DoXrlx9SbI/Sd2ho9TxwAmBAa7y787w2UBZOH8B9a29uPFG6HYAXlc2Vsq
IqAsKtyAqXs1kpDhlcit2ebCnlc+qu9dOrsiTno5c+0+QyLmeUGGOg0a5MpboepS
/HX3xcmn+oL4wAH5H7CdrxAQha7W3XnmaPEZli1lvrE17+hYwMO2Xjv4YTVCD1mj
N3SLrDTK9WfZTz2FeipvJ2gyHIPif45YXZ7Fe4KuPS6LjH3xGO4RdQKmREDvAo7p
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44746720101632059152122414488592404331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-12 06:57:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 06:57:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OP Osuuskunta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vhplvow2wd01.hec.tuot.op-palvelut.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23006085002262890059966598142667042003838311610987966635654410259905525030156038936714596530597830525692084982277597806914626560745901021550573408859948913652701893916675901125269843074965226802894784535984985495455717856859752386398815075134391266271834664510162503348900082762926142527844721750587949297419777865596651329287457641441314002211024311544295293692009604353622236293192758753593813140314343629144209196027377002154468328786821432070934379066843461853151742318587729425699058228563445836798809096282765910962652288106185262642630269049588318713366719841387429787152929354642598885833108650086451664316833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30c65c84e42bba3692a5aa4c0ced7b8b66ebc17e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhplvow2wd01.hec.tuot.op-palvelut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vhplvow2wd01.hec.tuot.op-palvelut.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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