tira.vrk.vyv.fi

- Valtion tieto- ja viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:64:ad:38:86:5e:03:6d:29:42:5b:69:c1:3b:b9 was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintatekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintatekniikkakeskus Valtori
Organization unit: Palvelutuotanto
Locality: Jyvaskyla
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:64:ad:38:86:5e:03:6d:29:42:5b:69:c1:3b:b9
Serial Number (int): 7234261784615537880526214901349305
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: ed:50:b0:a9:24:6b:ba:af:b0:cd:b3:eb:79:c6:06:41:1b:e6:41:c3
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): 57:79:93:6d:d3:1e:80:e0:64:27:65:cc:32:7f:4e:45:db:49:fc:f4
Fingerprint (sha256): 26:00:22:cd:96:ce:6a:d1:2e:d4:3b:4a:c4:16:c2:a5:17:b4:eb:14:40:01:87:c3:ab:28:70:44:fc:86:1a:6b

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate tira.vrk.vyv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tira.vrk.vyv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tira.vrk.vyv.fi

Other certificates including the domain name vyv.fi

(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi

Certificate

The complete raw certificate details for tira.vrk.vyv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHMDCCBRigAwIBAgIPAWStOIZeA20pQltpwTu5MA0GCSqGSIb3DQEBCwUAMEYx
CzAJBgNVBAYTAkZJMRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEhMB8GA1UEAwwYVGVs
aWFTb25lcmEgU2VydmVyIENBIHYyMB4XDTE4MDcxODExNDgzN1oXDTIwMDcxNzEx
NDgzN1owgZIxCzAJBgNVBAYTAkZJMRIwEAYDVQQHDAlKeXZhc2t5bGExOzA5BgNV
BAoMMlZhbHRpb24gdGlldG8tIGphIHZpZXN0aW50YXRla25paWtrYWtlc2t1cyBW
YWx0b3JpMRgwFgYDVQQLDA9QYWx2ZWx1dHVvdGFudG8xGDAWBgNVBAMMD3RpcmEu
dnJrLnZ5di5maTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAP3JAvDr
n4d5XoUKVe0zoL2v8DdItzPnGv4M3aon3F6Wl45bFFIqCoql6ruze5kn9EE+YdzZ
8r+y1B3tAWEZwFlV/RuURJ8TCRLYAcS3StraLYGftiDk1DlL1bNuCYZciiNV11jB
KsnHkuvQ+pVdrZJpoEnOY7zpZ/lR9j8y0uwhyiadCIkzKM/MvUhhMb1XDCFtGCP8
VkiLbQ8G+P8nZoanNXPk1nCMdKn7bLHExK8DPasxCeK4o8h6DbRT48Tr23cO8Oom
sh6j7yQHXU6ejFPrugiXxbRGf2mTj1epCLr03zzRmAsFDwD3AzHn/0Y8mNmMUvxB
pXY6kJBdEi8Oa7SIaIpPophwYFnLkqyemic8YFM18s//01XmuBSqCPJBbHA/14Ib
9EpUh4nBspxjfJAFbMskkwGK87+VLXPXjGEPk6dNro8rSHMtk16t3Z6EGPDHaePF
bhnlshZSsnyILc591Lzo/qUQKQqcmkELHHLyo06+VIKlUMym7P90T9RluqOW302t
CmZTOIcfmWN0bg29kcTijXL0XSMEsKW8SEplu2at6HrVfbmk8MEyCXv6ABp14zeC
ziq14koBKd04qhcDE0HZycoWHiKJC41sjAljdFwtzhWbn9PS8T/1XjkHfHmExlxw
jcXEJ8n6KGA3G3Z/vL+1lTtqNJY2AG1KUZT/AgMBAAGjggHMMIIByDAfBgNVHSME
GDAWgBQvSTwpT9cHJfnGjNVk9WY9EoMilTAdBgNVHQ4EFgQU7VCwqSRruq+wzbPr
ecYGQRvmQcMwDgYDVR0PAQH/BAQDAgSwME4GA1UdIARHMEUwQwYGZ4EMAQICMDkw
NwYIKwYBBQUHAgEWK2h0dHA6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJh
LmNvbS9DUFMwGgYDVR0RBBMwEYIPdGlyYS52cmsudnl2LmZpME0GA1UdHwRGMEQw
QqBAoD6GPGh0dHA6Ly9jcmwtMy50cnVzdC50ZWxpYXNvbmVyYS5jb20vdGVsaWFz
b25lcmFzZXJ2ZXJjYXYyLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwgYYGCCsGAQUFBwEBBHoweDAnBggrBgEFBQcwAYYbaHR0cDovL29jc3AudHJ1
c3QudGVsaWEuY29tME0GCCsGAQUFBzAChkFodHRwOi8vcmVwb3NpdG9yeS50cnVz
dC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFzZXJ2ZXJjYXYyLmNlcjATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEABGz3BzZwKxJdlJAn
rnkj5DVCBIlD2CiEiRPylgrpJiErvVQj4pOCPvh9bswPU4Ixp7diKs4fDQzymCxm
0wVVpatcPq+eLxOEwRiTX0TRIziWUipHnyiAwZH+XkOMkjslp1yLXW3ORitLqT/c
vCs06GK5ettSCtu0pMNMUSXBDFFOo4PMMTAokUykiwaqxnQllz1hbkFYPP+77ASf
WBXy0zsqeY/SDzxpjuM9eJ9xYokI0P3bXgiwVdWS1wxhmXk+ovNu78qHyLWDgP4E
8DWYCjBvgZ38WZyUqyDSasvPh0AD9HloPCQkDsAToBkfbHYvLsqrMitCR5opKLYr
rK3FuekCNc/+ZEaiSTNVbzrV+mpgA63H5tl47mwDz9TOUyWibcKYwSclelzb+P7q
I6VBesnmvlu+ajzp6lnr5Zn8PPeg/8wAE+m5fvSxmE0US+amerbcx556s08ci34Y
gt8W6uxHtO29IVHFIu3Tk+dMdHg3KWBhRnXa3plswbzcnoXBJWmoAbtAeKKe4xub
dK8mVVY0v8nQiUNE9SpzhLlQEliFAIpEaCvA0NCAOadqxB+HsIobYtEtjc82UM3j
3oNt3LXUZ317BHpOA749yGwlKKNUllhrvsvHLPHCQfabcPdPZqDOxl/aEIDTn2Sl
oP2qoYueia8XgfDrWk5EJy7V5qc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA/ckC8Oufh3lehQpV7TOg
va/wN0i3M+ca/gzdqifcXpaXjlsUUioKiqXqu7N7mSf0QT5h3Nnyv7LUHe0BYRnA
WVX9G5REnxMJEtgBxLdK2totgZ+2IOTUOUvVs24JhlyKI1XXWMEqyceS69D6lV2t
kmmgSc5jvOln+VH2PzLS7CHKJp0IiTMoz8y9SGExvVcMIW0YI/xWSIttDwb4/ydm
hqc1c+TWcIx0qftsscTErwM9qzEJ4rijyHoNtFPjxOvbdw7w6iayHqPvJAddTp6M
U+u6CJfFtEZ/aZOPV6kIuvTfPNGYCwUPAPcDMef/RjyY2YxS/EGldjqQkF0SLw5r
tIhoik+imHBgWcuSrJ6aJzxgUzXyz//TVea4FKoI8kFscD/Xghv0SlSHicGynGN8
kAVsyySTAYrzv5Utc9eMYQ+Tp02ujytIcy2TXq3dnoQY8Mdp48VuGeWyFlKyfIgt
zn3UvOj+pRApCpyaQQsccvKjTr5UgqVQzKbs/3RP1GW6o5bfTa0KZlM4hx+ZY3Ru
Db2RxOKNcvRdIwSwpbxISmW7Zq3oetV9uaTwwTIJe/oAGnXjN4LOKrXiSgEp3Tiq
FwMTQdnJyhYeIokLjWyMCWN0XC3OFZuf09LxP/VeOQd8eYTGXHCNxcQnyfooYDcb
dn+8v7WVO2o0ljYAbUpRlP8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7234261784615537880526214901349305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 11:48:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 11:48:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyvaskyla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Palvelutuotanto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tira.vrk.vyv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1035353290331317103535798594884245687403075312076506840409551429832906805972287398220048433168642078644805025683292025567154510645731800491714458937655530631147117445181780577691216880872494817392720291527758306404407777631667730866224301689103107654122936943900292008097149444798981599636014184257867039363014745122649582811353888853310080526746530087515073828190181849222513710639596122849125588400100499542375063575319106674949268476333933702448586473235599698942210592171485732372661781388437230782184433747577254357576406658920994513336174076890884487923768156208728619420036326993598090530545677898580051513255300857151253721774160874326442669498660371908616078726494663164625952788355255972333985160595016567354428542457789741450232586175869731649280410065783893641234678730514913138012309461496690708784691651728436958566780669183122296344702341360970157614473445958286439917801859253339542464723647204940585489456566973251894864095418262913522413015234127452470933387878350348396261324289561645904132024576796327940826570113116502939743799678465454086114693895797521269601818080170660511805404729339254862002297811668186757971532861328285562912295144299511590505648190355052842572703375607136685448519239557442458780230063359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed50b0a9246bbaafb0cdb3eb79c606411be641c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tira.vrk.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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