lyae.vy-verkko.fi

- Valtion tieto- ja viestintätekniikkakeskus Valtori -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 47:94:8d:92:6a:4a:a5:8f:32:05:d6:a3:c7:a0:7d:e8 was issued on by Entrust, Inc..

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintätekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintätekniikkakeskus Valtori
Locality: Jyväskylä
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 47:94:8d:92:6a:4a:a5:8f:32:05:d6:a3:c7:a0:7d:e8
Serial Number (int): 95146519055753676816988538907855453672
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d4:61:5b:68:99:22:d9:f1:d5:e2:d4:36:e2:9c:2c:fc:c4:7e:05:04
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 03:e4:bb:28:be:e3:e5:c4:27:ba:60:bd:30:63:1a:69:e6:c6:57:66
Fingerprint (sha256): 1c:22:20:b1:eb:00:42:72:f7:47:32:18:f1:ec:48:1a:ba:39:7f:43:32:4b:b3:72:16:df:93:87:df:77:5d:e7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate lyae.vy-verkko.fi

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyae.vy-verkko.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyae.vy-verkko.fi
sip.aka.fi
sip.ambetsverket.fi
sip.ara.fi
sip.arkisto.fi
sip.avi.fi
sip.celia.fi
sip.defmin.fi
sip.digijavaestotietovirasto.fi
sip.dvv.fi
sip.energiavirasto.fi
sip.fimea.fi
sip.fmi.fi
sip.gov.fi
sip.karvi.fi
sip.kkv.fi
sip.luke.fi
sip.lvm.fi
sip.maanmittauslaitos.fi
sip.maistraatti.fi
sip.meriturva.fi
sip.minedu.fi
sip.mmm.fi
sip.niuva.fi
sip.nrl.fi
sip.oikeus.fi
sip.okv.fi
sip.om.fi
sip.palkeet.fi
sip.prh.fi
sip.rahoitusvakausvirasto.fi
sip.ruokavirasto.fi
sip.samu.fi
sip.stm.fi
sip.stuk.fi
sip.syke.fi
sip.tem.fi
sip.thl.fi
sip.tpk.fi
sip.valtiokonttori.fi
sip.valtionkoulukodit.fi
sip.valtori.fi
sip.valtorisuoja.fi
sip.valvira.fi
sip.vatt.fi
sip.vayla.fi
sip.ver.fi
sip.vm.fi
sip.vnk.fi
sip.vrk.fi
sip.vth.fi
sip.vy-verkko.fi
sip.vvs.fi
sip.ym.fi
lyce.vy-verkko.fi
sip.ext.senaatti.fi
sip.gtk.fi
sip.pk.senaatti.fi
sip.senaatti.fi

Other certificates including the domain name vy-verkko.fi

(limited to 100 certificates)
mail-136.vy-verkko.fi
mail.vyv.fi
lyae.vy-verkko.fi
VALTTMLCS01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
webfarm.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
mail-137.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-vkokous.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
VYVI-POSTI.VY-VERKKO.FI
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
turvaviesti.vy-verkko.fi
sip.vy-verkko.fi
perusviesti-posti.vyv.fi
turvaviesti.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
mail-out.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-some.vy-verkko.fi
vahva-pub.vnk.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
smtp-in.vy-verkko.fi
vahva-pub-qa.vnk.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
*.vy-verkko.fi
vyvi-kokous.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-turva.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
vyvi-posti.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
*.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
ucc.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi

Certificate

The complete raw certificate details for lyae.vy-verkko.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95146519055753676816988538907855453672
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-19 13:38:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 13:38:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyväskylä'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintätekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyae.vy-verkko.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856748270200171893004696093701478482433318835746582123628635505673677241803669394723020921203440162247090998636212164230611245517253627430493964240093872550675981304368525211824608575417184729338024969478802852307852704902372289033214225713034488462254877032952122459915037222949103830517516324694505798753030356668497128821783312670308619810893560847123951959681796747765587864775651245145891819423440671649938124148887402586177273776900912850005551095191286109005051978060346951882214029861682557314604895680065398209869782826150006005717593844271154672898927198786296424841718862042319431042732848982557010770410415808594119184916622725316886259403986455122486701235133534551128661774589948885300673133675200578813187483971945448546900500582471282064910393579067657644693394295299749187950395021790004595558364992983293194749891431979206747792831914144077221349422899744019244596568007437271152229043397155501746429891776153859202208279990693925428848193969955149492612201625065038413428542723162698877715454226557956667724248417488547011026239455518433030000026865950082642980973199853116772670557905181815729941355270904804490464175837549897752151915254779769722857951826231733858340740947612621310239232331153576896185022669107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4615b689922d9f1d5e2d436e29c2cfcc47e0504
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (921 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyae.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ambetsverket.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ara.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.arkisto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.celia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.defmin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.digijavaestotietovirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.dvv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.energiavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fimea.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fmi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gov.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.karvi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.luke.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lvm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.maanmittauslaitos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.maistraatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.meriturva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.minedu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mmm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.niuva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.nrl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.oikeus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.om.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.palkeet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.prh.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.rahoitusvakausvirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ruokavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.samu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.stm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.stuk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.syke.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tem.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.thl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tpk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtiokonttori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtionkoulukodit.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtorisuoja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valvira.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vatt.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vayla.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ver.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vnk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vrk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vth.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vvs.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ym.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyce.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ext.senaatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gtk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pk.senaatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.senaatti.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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