www.kkv.fi

- Kilpailu- ja kuluttajavirasto -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 40:35:13:7a:8b:18:24:60:8a:ff:3c:74:20:c8:d9:ef was issued on by Entrust, Inc..

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kilpailu- ja kuluttajavirasto

Organization: Kilpailu- ja kuluttajavirasto
Locality: Helsinki
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 40:35:13:7a:8b:18:24:60:8a:ff:3c:74:20:c8:d9:ef
Serial Number (int): 85346178538402860223077330175568435695
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f9:8b:a9:c9:d9:52:5f:1d:8f:b8:cf:b9:5d:15:41:41:be:a1:df:e2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e6:da:06:27:33:af:b5:b9:00:ed:ff:ec:5f:d0:67:82:9d:33:6b:c9
Fingerprint (sha256): 20:61:17:82:b4:60:13:2a:57:b2:f7:1e:ce:e7:c1:e7:8b:c7:3d:e5:86:95:1e:8d:8c:a3:eb:6c:6f:78:20:03

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.kkv.fi

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kkv.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kkv.fi
kkv.fi
static.kkv.fi
valmismatka.kkv.fi
kulma.kkv.fi
arkisto.kkv.fi
ecc.fi
www.ecc.fi
arkisto.ecc.fi
kilpailuvirasto.fi
www.kilpailuvirasto.fi
kuluttajavirasto.fi
www.kuluttajavirasto.fi
kuluttaja-asiamies.fi
www.kuluttaja-asiamies.fi
fcca.fi
www.fcca.fi
kuluttajaneuvonta.fi
www.kuluttajaneuvonta.fi
konsumentradgivning.fi
www.konsumentradgivning.fi
xn--konsumentrdgivning-eub.fi
www.xn--konsumentrdgivning-eub.fi
kuluttajaoikeus.fi
www.kuluttajaoikeus.fi
reklamaatioapuri.fi
www.reklamaatioapuri.fi
reklamaatio-apuri.fi
www.reklamaatio-apuri.fi
kuluttajansuoja-apuri.fi
www.kuluttajansuoja-apuri.fi
matkapakettiapuri.fi
www.matkapakettiapuri.fi
ajankohtaistakilpailusta.fi
www.ajankohtaistakilpailusta.fi
matkapaketti.fi
www.matkapaketti.fi
matkapakettivalvonta.fi
www.matkapakettivalvonta.fi
vakuusrekisteri.fi
www.vakuusrekisteri.fi
valmismatka.fi
www.valmismatka.fi

Other certificates including the domain name kkv.fi

(limited to 100 certificates)
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
tls.automattic.com
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
securemail.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
asiointi.kkv.fi
asiointi.kkv.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.kkv.fi
matkapakettiapuri.fi
turvaviesti.kkv.fi
asiointi.kkv.fi
www.kkv.fi
www.kkv.fi
tls.automattic.com
securemail.kkv.fi
lyae.vy-verkko.fi
tls.automattic.com
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv.fi
securemail.kkv.fi
lyae.vy-verkko.fi
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
kkv.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
www.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
turvaviesti.kkv.fi
securemail.kkv.fi
api.asiointi.kkv.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
valma.kkv.fi
securemail.kkv.fi
arkisto.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv.fi
asiointi.kkv.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
tls.automattic.com
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
kkv-vk2017.focusflow.net
ucc.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv.fi
testi-tweb.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv-vk2017.focusflow.net
sip.vy-verkko.fi
ucc.vy-verkko.fi
kkv-vk2017.focusflow.net

Certificate

The complete raw certificate details for www.kkv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuSeh+ytQ9WaXIB+y2zz
ESLBcDRAmokVZ+bWa3n+qUWVAfz77aQzkkpCScuq35/IDYGuodKfeIpLILDaYTxZ
cg3fRp07OA/I0+PZwTiV54pb/6RF9EtxZBkk/JChZEBdVcOTAZrJWxkCRTwdaBFU
++NSNBBW7iX8k6qTIYV4bXwBsSTNTNXQQvJCkkNHBsh1kpedOwSXcdQDg82aPeIU
5LVDR5pn6NneXi3hgbBggfbkqYMyaUGJaLNUL/OV29Ffy0Bzf7aA6C5DSGjnvoSU
isQl8Qxr3E0zds+Yno95jivgtp78A7xE01t3JCyClk8WmXd2e985Mia2hOnYGere
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85346178538402860223077330175568435695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 06:38:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 06:38:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kilpailu- ja kuluttajavirasto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kkv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19553435324381821468788814695016570758331657673981661517432231378497387804153920360833390800137358515206866189447915962415157522783031250832182135846945355045967388052341493775465796128794208992600001607271481295636014665941449782784873483773379520649497076851235032697504407705768360498687981002785943939525746521825118846405606710052846145627744756944493272414961036199088335429708886626395869507804972499016793411120916887816127210700277795932212878376988722674137374709717504938044282035735304108146043180745972102927956059704475018823393632368407122255158496398107697904731893710511095330020781208068005540060707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f98ba9c9d9525f1d8fb8cfb95d154141bea1dfe2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (929 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valmismatka.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulma.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkisto.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecc.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkisto.ecc.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kilpailuvirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kilpailuvirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttajavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttajavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttaja-asiamies.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttaja-asiamies.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcca.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcca.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttajaneuvonta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttajaneuvonta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konsumentradgivning.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konsumentradgivning.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--konsumentrdgivning-eub.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--konsumentrdgivning-eub.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttajaoikeus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttajaoikeus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reklamaatioapuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reklamaatioapuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reklamaatio-apuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reklamaatio-apuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttajansuoja-apuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttajansuoja-apuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matkapakettiapuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matkapakettiapuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajankohtaistakilpailusta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajankohtaistakilpailusta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matkapaketti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matkapaketti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matkapakettivalvonta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matkapakettivalvonta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakuusrekisteri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vakuusrekisteri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valmismatka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valmismatka.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a5eea4bcc000004030047304502204a9fe2f2fef4699550bb9ab09d83c45961cbc0077c8815aa295494747c2fd3e4022100dff8817be1cc9830d909f98a2b3b6e8b1b79e0af4a947cec7947162639e9335c0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018a5eea4c1300000403004730450221008b3c56fd56ff7dbaf08883867068c856529d474bdaaea53e49f4b85349375e1b022004900518b678c5aa2cc2c346567c217314c27869adb87388ea2bfe5a60ee8d7b007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a5eea4c16000004030047304502204a1eea5f56aece842fbd1e8406d2fc079fda25d8594b15cee705ea7305178efd0221009b7fe9f67f059313399176407def4e224f5ea945090487f8cfec0a45fdd9ceda
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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