www.hel.fi

- City of Helsinki -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:76:75:25:4a:52:d1:1f:1d:0d:30:34:a4:46:7b was issued on by TeliaSonera.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Helsinki

Organization: City of Helsinki
Locality: HELSINKI
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:76:75:25:4a:52:d1:1f:1d:0d:30:34:a4:46:7b
Serial Number (int): 7594902427576859370374224765273723
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 09:65:35:17:ab:37:e0:6e:68:5f:83:a4:f2:dd:87:0f:1b:34:89:80
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 75:62:4e:d4:ab:d4:f3:05:7e:70:fb:42:1b:d9:2b:b8:47:5f:af:5f
Fingerprint (sha256): 12:ad:db:82:0c:d2:fe:d6:5c:ce:30:ca:f1:76:e4:b7:6a:27:77:23:e0:a9:6b:16:b2:0a:0f:c4:e1:e2:d1:0c

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate www.hel.fi

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hel.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kartta.hel.fi
content-api.hel.fi
edu.hel.fi
www.helsinkiregion.fi
helsinkirekry.fi
koronarokotus.hel.fi
www.espanlava.fi
asunnonhaku.hel.fi
vuotalo.fi
kanneltalo.fi
helsingforsregionen.fi
integration.asti.hel.fi
hel.fi
neuvonta.hel.fi
kerrokartalla.hel.fi
malmitalo.fi
kulkeilmo.hel.fi
kartta.helsinginseutu.fi
www.karttakori.fi
www.harakansaari.fi
search.hel.fi
www.helsingforsregionen.fi
www.vuotalo.fi
hrdt.hel.fi
www.savoyteatteri.fi
stoa.fi
ltj.hel.fi
harakansaari.fi
erikoiskirjastot.hel.fi
api.asti.hel.fi
helsinginseutu.fi
espanlava.fi
oivakoulutus.hel.fi
helsinkiregion.fi
meri.hel.fi
ptp.hel.fi
coronavaccination.hel.fi
www.helsinginseutu.fi
coronavaccination-en.hel.fi
auth.asti.hel.fi
www.kanneltalo.fi
asti.hel.fi
karttakori.fi
www.hel.fi
www.helsinkirekry.fi
savoyteatteri.fi
annantalo.fi
www.stoa.fi
www.annantalo.fi
soili.hel.fi
mvj.hel.fi
caisa.fi
www.caisa.fi
www.malmitalo.fi

Other certificates including the domain name hel.fi

(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
huonevaraus.hel.ninja
omastadi.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com
dev.hel.fi
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi
api.hel.fi
securemail.hel.fi
aromi.hel.fi
numerot.helmi.hel.fi

Certificate

The complete raw certificate details for www.hel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KR/sjQOX81J2vVf7cHS
ECX6bO9fiMlhz+KCvt3w6wTNrQnkWCl+XIXMW6sbZ7ahOXLlYxkGd69qPCppsbwM
kJshUCzNJ59bHRouIsaeNM5rfsSRcHaA/azdg/zM3Iih8oYytgvSEn0zTFNLn6Aw
odCEHJDsHWSsHF6s94WfJz7f5zUSlczdGnuIB+7mat95dgCOERUJJdTKi4TMePCr
oTGx8Q3bddwM/IAtq1c+FSZ1CDeEdhXSwQUU1Qou1qDcGsvVgDwtIMPLwyo618YG
Sx/EDzqzTllueT+2rWRv35UOn2uvmwxNWrwgclQotFcDej2N3IiWcJEXijo+JNpk
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7594902427576859370374224765273723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-18 09:19:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-18 09:19:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HELSINKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'City of Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.hel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29368404140061543120142169161935037813474096277630211656231716964803570926654954520768776938108924235795928679163208657792870335597125001480082533884547219683817771717433364555005827790477293309743194843121722460680291623396125888128124531769009776980128709536374917148522534913865762256469342478884814483616320080351974447062618588069784252059894524947137824192458721583171577912834215142182512097731444927040466810644315167672222654622322246734143717922839465347183909137322666328678179864319708446032116484154556782289026221185575661310771833087809808001634066706436792869212452775122576568822835918929464143799361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09653517ab37e06e685f83a4f2dd870f1b348980
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (953 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartta.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-api.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkiregion.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkirekry.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koronarokotus.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espanlava.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asunnonhaku.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuotalo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanneltalo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsingforsregionen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.asti.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuvonta.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerrokartalla.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malmitalo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulkeilmo.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartta.helsinginseutu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karttakori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harakansaari.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsingforsregionen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vuotalo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrdt.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savoyteatteri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltj.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harakansaari.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erikoiskirjastot.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.asti.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinginseutu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanlava.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oivakoulutus.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkiregion.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meri.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptp.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavaccination.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinginseutu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavaccination-en.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.asti.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanneltalo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asti.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karttakori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkirekry.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savoyteatteri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annantalo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annantalo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soili.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvj.hel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caisa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caisa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malmitalo.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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