aromi.hel.fi
- Helsingin kaupunki -
Issued by Telia Server CA v3
About this certificate
This digital certificate with serial number 01:88:51:8f:46:d7:91:ec:30:c1:67:c4:d1:0c:d7 was issued on by Telia Finland Oyj.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Helsingin kaupunki
Organization:
Helsingin kaupunki
Locality:
HELSINKI
Country: FI
Country: FI
Telia Finland Oyj
Organization:
Telia Finland Oyj
Country:
FI
This certificate will expire on
Certificate Details
Serial Number (hex): 01:88:51:8f:46:d7:91:ec:30:c1:67:c4:d1:0c:d7Serial Number (int): 7957166387794322633924574304079063
Serial Number lenght: 113 bits, 15 octets
SubjectKeyId: 3a:6e:36:27:a9:f9:06:d4:4b:55:c6:ed:a7:0b:12:b5:5d:03:57:b9
AuthorityKeyId: 46:66:8d:0e:07:23:16:b0:ea:4f:05:eb:96:5a:de:a5:ee:c9:7e:a4
Fingerprint (sha1): 21:f6:39:fd:a3:b8:25:d1:47:e6:0b:f9:f9:58:ff:c3:d5:ba:6f:ff
Fingerprint (sha256): 1f:4e:21:c0:ba:6b:54:79:13:2e:20:10:88:41:59:9b:9b:75:bb:92:26:22:7b:34:cd:59:ab:15:41:ec:23:11
Issuing Certificate URL: http://cps.trust.telia.com/teliaservercav3.cer
Revocation information
OCSP Server: http://ocsp.trust.telia.comCRL Distribution Point: http://httpcrl.trust.telia.com/teliaservercav3.crl
Check the revocation status for certificate aromi.hel.fi
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aromi.hel.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aromi.hel.fi
Other certificates including the domain name hel.fi
(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
aineistopankki.hel.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
tcm.hel.fi
huonevaraus.hel.ninja
omastadi.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
tunnistus.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com
dev.hel.fi
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi
api.hel.fi
digi.hel.fi
shared2.anders.fi
aineistopankki.hel.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
tcm.hel.fi
huonevaraus.hel.ninja
omastadi.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
tunnistus.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com
dev.hel.fi
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi
api.hel.fi
Certificate
The complete raw certificate details for aromi.hel.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHKzCCBROgAwIBAgIPAYhRj0bXkewwwWfE0QzXMA0GCSqGSIb3DQEBCwUAMEYx CzAJBgNVBAYTAkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEbMBkGA1UE AwwSVGVsaWEgU2VydmVyIENBIHYzMB4XDTIzMDUyNTA2MTg0NFoXDTI0MDUyNDA2 MTg0NFowVDELMAkGA1UEBhMCRkkxETAPBgNVBAcMCEhFTFNJTktJMRswGQYDVQQK DBJIZWxzaW5naW4ga2F1cHVua2kxFTATBgNVBAMMDGFyb21pLmhlbC5maTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALGCyvrvT1xHdOshCm6dDXYuV70P TlVdgTuigN3VttG/7mYrzZSP7sWshod5wUzZBbpk8mu53zVUznm7OYIXuGHRhRpJ FMQ5TfgiiK+lHkwWjfljMEFKwnsHy/BzB9DLEgNX+zR3yptD8ygcCmnWWn3WP3gL lBIS6w7DbGyjHH17RfD7EFVWNlGFqMqFK3BSkbJlJwAzBL1skEXeZb0HpWYBmdm0 D1PC2tQZ2mTMyehQGAzD9cRnvpiTT5DfSY+wbELJG+d0UcW5rU32xGO9A3IaZR60 XQa4Fr4KBERVXMqlMWFFWVMYjhBh29OgH73GG+2NfiE8E7DgDtlxSzpefH0CAwEA AaOCAwYwggMCMB8GA1UdIwQYMBaAFEZmjQ4HIxaw6k8F65Za3qXuyX6kMB0GA1Ud DgQWBBQ6bjYnqfkG1EtVxu2nCxK1XQNXuTAOBgNVHQ8BAf8EBAMCBaAwPQYDVR0g BDYwNDAyBgZngQwBAgIwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy50cnVzdC50 ZWxpYS5jb20wFwYDVR0RBBAwDoIMYXJvbWkuaGVsLmZpMEMGA1UdHwQ8MDowOKA2 oDSGMmh0dHA6Ly9odHRwY3JsLnRydXN0LnRlbGlhLmNvbS90ZWxpYXNlcnZlcmNh djMuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBzBggrBgEFBQcB AQRnMGUwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnRydXN0LnRlbGlhLmNvbTA6 BggrBgEFBQcwAoYuaHR0cDovL2Nwcy50cnVzdC50ZWxpYS5jb20vdGVsaWFzZXJ2 ZXJjYXYzLmNlcjCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUAdv+IPwq2+5VR wmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGIUY9HsgAABAMARjBEAiAgG0ze56vG bp4DtVRIISfiIM5jzUivkjeaERae2wAKqgIgBn4hvZb6u/CQrNii1c/opnG7nh8v z7h/fggJ0lbAxhwAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA AYhRj0g6AAAEAwBGMEQCIGARPvMHyW4g3n3qBqcld3sje4aQ3LKgNHnud+4YciSg AiBHChmmD6sNEtZxWvpOFvhFrEnRcuyUMGdVWgmADQ1k5QB3AO7N0GTV2xrOxVy3 nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiFGPSh0AAAQDAEgwRgIhAJI+LAvpeOO8 Coucw3I3vpQOaHyxvTqT6IKoxjapUbOyAiEA6XU1wyG4gHW+Wr+n3q7eX3EMpGCz rHl0wk7DhYp4jGkwDQYJKoZIhvcNAQELBQADggIBACL4Z7PwsFl0+aDm0wFAKcva NkkGhQ9ddyw0rB1sOxkpCtduZDGje8CeT/h0bDP6DSfl/FcLBAUtaR6eElmxV+pj BTxAL34CWMIyzk7kCJCN9EwGFE7uAF+kdpgVsjRhtNAvkUMKx7yXTMaiPIVZZ+1u mQpJuNAvvsRHJYpsqUx3V1zWPAIyZj69prXXInBKu1WY3fHXzM3B1Ci0RArqnVva kAb4xxyJLQTMCZZgb8gyaxUcA1QTLUduJRcXHAzvk/3eoPsY0kPiQjeTguSs5Y+e mCWkWfs00tL4cCziWinneGHx7u1NDb/5IgwBSBgJIDmFB6FvenQml1mbViL7scH8 3fBSlYQshgzykouLbqBS2x0sX5u2M+heUQ3awzjiPfYhmXd9DImvHsKjQeoZPI2e sk7O7kjPo0gUIE2NTneErxZCaefdDw7a1AJ3LBraT7Fl5FRVL6dOIpf0WNqBE2f6 UFrh9XEsc5h/WWG+cMxGNwcJV9YS7klyn+cy0h2+fNriUzs4wwjLezxh3//7m7VL 0cTwNv9VYBxv1e+G+CTONX8Zxio/C07pL2cH+1GMM+TINgFwcATOViInA+lc8F1v c8XHkZhDpnVWnMY28xOtMtTFEDxyH8DLWrWp40DNbtiQ5YY1Zu6B/65o07wZA29h bcE8Lq2Onv5IMOBxjRab -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYLK+u9PXEd06yEKbp0N di5XvQ9OVV2BO6KA3dW20b/uZivNlI/uxayGh3nBTNkFumTya7nfNVTOebs5ghe4 YdGFGkkUxDlN+CKIr6UeTBaN+WMwQUrCewfL8HMH0MsSA1f7NHfKm0PzKBwKadZa fdY/eAuUEhLrDsNsbKMcfXtF8PsQVVY2UYWoyoUrcFKRsmUnADMEvWyQRd5lvQel ZgGZ2bQPU8La1BnaZMzJ6FAYDMP1xGe+mJNPkN9Jj7BsQskb53RRxbmtTfbEY70D chplHrRdBrgWvgoERFVcyqUxYUVZUxiOEGHb06AfvcYb7Y1+ITwTsOAO2XFLOl58 fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7957166387794322633924574304079063 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Finland Oyj' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telia Server CA v3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 06:18:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 06:18:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HELSINKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsingin kaupunki' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aromi.hel.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22408676357584869483777650460504378740006238620315103047948704052078607422900536227871293547201617177867460063857877178818090019381795655657468569873583251507639633598143776638995415249763672216445725849539783774746341388315257557623644862679643471513188826867628393480371321228995912445759090076147363224909166567774509710906906618113839610963736480246474427995480496591556055960775193605082991680434700752326140961708022805806295286032653354702638588601893458470425988135793911472571227661635832134825179485484664650494458495909584220098894367750220948970585940912812150775736134495877958943493365078117708464028797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 46668d0e072316b0ea4f05eb965adea5eec97ea4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3a6e3627a9f906d44b55c6eda70b12b55d0357b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.trust.telia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aromi.hel.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://httpcrl.trust.telia.com/teliaservercav3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cps.trust.telia.com/teliaservercav3.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000188518f47b200000403004630440220201b4cdee7abc66e9e03b554482127e220ce63cd48af92379a11169edb000aaa0220067e21bd96fabbf090acd8a2d5cfe8a671bb9e1f2fcfb87f7e0809d256c0c61c007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188518f483a0000040300463044022060113ef307c96e20de7dea06a725777b237b8690dcb2a03479ee77ee187224a00220470a19a60fab0d12d6715afa4e16f845ac49d172ec943067555a09800d0d64e5007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188518f4a1d0000040300483046022100923e2c0be978e3bc0a8b9cc37237be940e687cb1bd3a93e882a8c636a951b3b2022100e97535c321b88075be5abfa7deaede5f710ca460b3ac7974c24ec3858a788c69 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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