valtorilipa041.valt.vyv.fi

- Valtion tieto- ja viestintätekniikkakeskus Valtori -

Issued by DVV Service Certificates - G5R

About this certificate

This digital certificate with serial number 01:8f:cd:1d:34:8e:54:10:70:da:06:0a:ca:04:e0 was issued on by Digi- ja vaestotietovirasto CA.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Policy Qualifiers other than id-qt-cps MUST NOT be present for certificates issued on or after September 15, 2023 (BRs: 7.1.2.7.9)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Valtion tieto- ja viestintätekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintätekniikkakeskus Valtori
State / Province: Uusimaa
Locality: Helsinki
Country: FI

Digi- ja vaestotietovirasto CA

Organization: Digi- ja vaestotietovirasto CA
Organization unit: Palveluvarmenteet
Country: FI

This certificate will expire on

Certificate Details

Serial Number (hex): 01:8f:cd:1d:34:8e:54:10:70:da:06:0a:ca:04:e0
Serial Number (int): 8108932243773994879085442583102688
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: ec:00:94:89:97:ba:3f:6b:18:65:d0:87:fb:f8:61:9f:db:5a:82:29
AuthorityKeyId: e4:90:b0:a8:17:83:a3:9e:9a:d5:fd:3d:c9:59:6b:1f:20:b2:e2:be

Fingerprint (sha1): 85:04:c5:1b:3e:a8:68:b7:2f:db:63:ec:dc:00:67:29:9e:52:c3:ed
Fingerprint (sha256): 24:c4:b9:eb:3a:36:57:35:5f:44:92:59:49:32:58:c5:2e:d1:1c:3f:8c:a2:c3:2c:e2:e3:c9:81:3f:55:4f:ac

Issuing Certificate URL: http://proxy.fineid.fi/ca/dvvsp5rc.crt

Revocation information

OCSP Server: http://ocsp.fineid.fi/dvvsp5rc
CRL Distribution Point: http://proxy.fineid.fi/crl/dvvsp5rc.crl

Check the revocation status for certificate valtorilipa041.valt.vyv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for valtorilipa041.valt.vyv.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

valtorilipa041.valt.vyv.fi

Other certificates including the domain name vyv.fi

(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
diaarit.om.vyv.fi
tulkkausapu.migri.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
rpcc07.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
yta.tem.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
toj.test.vrk.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
valtorilipa041.valt.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
stg.soteri.cloud.valvira.vyv.fi
servicebus.saha.vrk.vyv.fi
qa.fimea.vyv.fi
dokumenttienhallinta.test.vrk.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
siilo.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
prd.int.cloud.valvira.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
palvelut.om.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
kerma-test.stuk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi

Certificate

The complete raw certificate details for valtorilipa041.valt.vyv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTktdukoQPzo1m6CIw/+
dNBMJhEWW1dE1gW+KAwNbvA2r/xViRix2206+Q4MPsOiCEVdBFzQzxJboIQF/Scv
H9ah4LCFV5h+Nn8uARW8Fb+Mykq2LYa6fCwTeVk5I3GzHqQwGAP/YdYS7EyQvNPz
TTfvpZ1YdiU3CWLjVZo5pHT5hFraYbVkPgQtzuNvshFG1OeGWHg1OMAbRZ3GvJh1
o4M8nlV8zqbjKq8yjldN6/iTl8p3fwXQU/wAEGMJGccGla58qwO/kwYIfCyZQ+Sj
C/Wm7501PrxrnvA8P0bRYyp33KxK8biVm8PJZZXSh1HS1D/WqvlyY/RTg8MIWgt2
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8108932243773994879085442583102688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Digi- ja vaestotietovirasto CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Palveluvarmenteet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DVV Service Certificates - G5R'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 21:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-01 20:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Uusimaa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintätekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'valtorilipa041.valt.vyv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25402094621463832811748127122071158086971974211215118767003040106707988279801689767284142716818173967282988858056865613511508749903344100391545794460647788133925719094010679622463539968559068190693673185464317401326446143957255726195308834549740173736733003464783170375077266076130408080041095794227076333047998459722612661961903869624078422079209506138017429937494539947141803943862808378564203413424773813907467017867903702563785883495062627125989044444651315040506718611786781976224037467715283873721847364266008673203368859638083285603327006684484120378513337337887212112270855413247129078451414912528932626200251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e490b0a81783a39e9ad5fd3dc9596b1f20b2e2be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec00948997ba3f6b1865d087fbf8619fdb5a8229
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (217 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.246.517.1.10.305.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.fineid.fi/cps54/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [86 97 114 109 101 110 110 101 112 111 108 105 116 105 105 107 107 97 32 111 110 32 115 97 97 116 97 118 105 108 108 97 32 45 32 67 101 114 116 105 102 105 107 97 116 112 111 108 105 99 121 32 102 105 110 110 115 32 45 32 67 101 114 116 105 102 105 99 97 116 101 32 112 111 108 105 99 121 32 105 115 32 97 118 97 105 108 97 98 108 101 32 104 116 116 112 58 47 47 119 119 119 46 102 105 110 101 105 100 46 102 105 47 99 112 115 53 52]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valtorilipa041.valt.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/crl/dvvsp5rc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/ca/dvvsp5rc.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.fineid.fi/dvvsp5rc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.3 (qcStatements)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.1 (etsiQcsCompliance)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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