lyae.vy-verkko.fi

- Valtion tieto- ja viestintätekniikkakeskus Valtori -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0f:20:ca:c9:49:f4:f2:3d:19:ba:d3:1f:02:dd:97:e3 was issued on by Entrust, Inc..

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintätekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintätekniikkakeskus Valtori
Locality: Jyväskylä
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:20:ca:c9:49:f4:f2:3d:19:ba:d3:1f:02:dd:97:e3
Serial Number (int): 20108686430735983138966004246557595619
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 31:a3:77:84:ac:3f:98:22:02:db:8d:58:81:89:3b:99:95:c4:38:23
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): cb:7b:de:e2:71:7e:b1:9a:d9:ed:36:8d:58:e7:89:5b:52:b8:54:3d
Fingerprint (sha256): 32:d5:6b:e6:02:a4:c3:e8:4a:33:23:8f:d8:6b:f4:af:58:e0:e1:21:f2:a2:bf:d4:f9:69:68:ed:a5:5e:64:83

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate lyae.vy-verkko.fi

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyae.vy-verkko.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyae.vy-verkko.fi
sip.aka.fi
sip.ambetsverket.fi
sip.ara.fi
sip.arkisto.fi
sip.avi.fi
sip.celia.fi
sip.defmin.fi
sip.digijavaestotietovirasto.fi
sip.dvv.fi
sip.energiavirasto.fi
sip.fimea.fi
sip.fmi.fi
sip.formin.fi
sip.gov.fi
sip.karvi.fi
sip.kkv.fi
sip.lvm.fi
sip.maanmittauslaitos.fi
sip.maistraatti.fi
sip.meriturva.fi
sip.minedu.fi
sip.mmm.fi
sip.niuva.fi
sip.nrl.fi
sip.oikeus.fi
sip.okv.fi
sip.om.fi
sip.palkeet.fi
sip.prh.fi
sip.rahoitusvakausvirasto.fi
sip.ruokavirasto.fi
sip.samu.fi
sip.stm.fi
sip.stuk.fi
sip.syke.fi
sip.tem.fi
sip.thl.fi
sip.tpk.fi
sip.valtiokonttori.fi
sip.valtori.fi
sip.valtorisuoja.fi
sip.valvira.fi
sip.vatt.fi
sip.vayla.fi
sip.ver.fi
sip.vm.fi
sip.vnk.fi
sip.vrk.fi
sip.vth.fi
sip.vy-verkko.fi
sip.vvs.fi
sip.ym.fi
lyce.vy-verkko.fi
sip.ext.senaatti.fi
sip.gtk.fi
sip.pk.senaatti.fi
sip.senaatti.fi

Other certificates including the domain name vy-verkko.fi

(limited to 100 certificates)
mail-136.vy-verkko.fi
lyae.vy-verkko.fi
VALTTMLCS01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
webfarm.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
mail-137.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-vkokous.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
VYVI-POSTI.VY-VERKKO.FI
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
turvaviesti.vy-verkko.fi
sip.vy-verkko.fi
perusviesti-posti.vyv.fi
turvaviesti.vy-verkko.fi
vyvi-posti.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
mail-out.vy-verkko.fi
vyvi-turva.vy-verkko.fi
vyvi-turva.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-some.vy-verkko.fi
vahva-pub.vnk.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-turva.vy-verkko.fi
smtp-in.vy-verkko.fi
vahva-pub-qa.vnk.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
vyvi-turva.vy-verkko.fi
lyae.vy-verkko.fi
mail.vyv.fi
*.vy-verkko.fi
vyvi-kokous.vy-verkko.fi
ucc.vy-verkko.fi
vyvi-turva.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
vyvi-posti.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
vyvi-posti.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
*.vy-verkko.fi
extlyncfarm01.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
ucc.vy-verkko.fi
mail-in.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
sip.vy-verkko.fi

Certificate

The complete raw certificate details for lyae.vy-verkko.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILQjCCCiqgAwIBAgIQDyDKyUn08j0ZutMfAt2X4zANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MTA2MTExMTE0MTRaFw0yMTEwMDExMTE0MTNaMH0xCzAJBgNVBAYTAkZJMRQwEgYD
VQQHDAtKeXbDpHNreWzDpDE8MDoGA1UECgwzVmFsdGlvbiB0aWV0by0gamEgdmll
c3RpbnTDpHRla25paWtrYWtlc2t1cyBWYWx0b3JpMRowGAYDVQQDExFseWFlLnZ5
LXZlcmtrby5maTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOa0qddL
9OsFgGqRUnj6PrTKp9v7gyNIK8P0lPOu+/KGKMrgtzw1kRrJnSks/yA10ds11dsj
b3dS5mCj1P+eWd0F3/LlAw/aUTWhQ+21utfoqye68/FjBk5aWUfAj92olbBOpBJg
Zb+OVGJRWeKhl1Frf+qW6krIah8LtxxDhCGvRfubE/nP+DvrbQ0mzLZMIu0xH5Il
nflCYJXRLGmv4mPCZiqc0sXcKLG4Q3VqV2vokGY9haYQPWj7FUQV4xglZtLqp4a5
YdfFnVAv6KrYIV0+cllbC5TKhxsE8U/FHGY/U4PcgvCcIiF5e2XX7UZQVsfldI7I
dkN+8DDz9zIag09v/rslQGovMJY4Zh8w0nqWCD/d5s0AfZ3ImICi1wq97sUXG2s6
gRg9R89+28gN9cxJ/i+cyUpwHdCvKW/DQx7fdW+yQgcX2lCHBSrlGeVWuvxW3Z2s
20uk2PTgT5lockdj7oAN0PVQOxBDEYfkZd3PHisJJiR+Xz5PBwoMO/B/KIOIzG95
7VDfP+SbPJTeKPjdt/7p0s/u4KLxgBLVFy3IqVN+rIi+kDgEIdS57bhHTAYKuiFG
tOgOmj5/o///MpFCIuTVSthgu/uFzmiaczAhMaehyEqRy2+/X/6pOA6WT9ofQMH0
3WpBI2YuZj3FiKCV+LNaIc5WYeAtlpaRApKDAgMBAAGjggZ+MIIGejAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQxo3eErD+YIgLbjViBiTuZlcQ4IzAfBgNVHSMEGDAW
gBSConB03bxTP8971PfNf6dgxgpMvzBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8v
YWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCag
JIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDCCA4oGA1UdEQSC
A4EwggN9ghFseWFlLnZ5LXZlcmtrby5maYIKc2lwLmFrYS5maYITc2lwLmFtYmV0
c3ZlcmtldC5maYIKc2lwLmFyYS5maYIOc2lwLmFya2lzdG8uZmmCCnNpcC5hdmku
ZmmCDHNpcC5jZWxpYS5maYINc2lwLmRlZm1pbi5maYIfc2lwLmRpZ2lqYXZhZXN0
b3RpZXRvdmlyYXN0by5maYIKc2lwLmR2di5maYIVc2lwLmVuZXJnaWF2aXJhc3Rv
LmZpggxzaXAuZmltZWEuZmmCCnNpcC5mbWkuZmmCDXNpcC5mb3JtaW4uZmmCCnNp
cC5nb3YuZmmCDHNpcC5rYXJ2aS5maYIKc2lwLmtrdi5maYIKc2lwLmx2bS5maYIY
c2lwLm1hYW5taXR0YXVzbGFpdG9zLmZpghJzaXAubWFpc3RyYWF0dGkuZmmCEHNp
cC5tZXJpdHVydmEuZmmCDXNpcC5taW5lZHUuZmmCCnNpcC5tbW0uZmmCDHNpcC5u
aXV2YS5maYIKc2lwLm5ybC5maYINc2lwLm9pa2V1cy5maYIKc2lwLm9rdi5maYIJ
c2lwLm9tLmZpgg5zaXAucGFsa2VldC5maYIKc2lwLnByaC5maYIcc2lwLnJhaG9p
dHVzdmFrYXVzdmlyYXN0by5maYITc2lwLnJ1b2thdmlyYXN0by5maYILc2lwLnNh
bXUuZmmCCnNpcC5zdG0uZmmCC3NpcC5zdHVrLmZpggtzaXAuc3lrZS5maYIKc2lw
LnRlbS5maYIKc2lwLnRobC5maYIKc2lwLnRway5maYIVc2lwLnZhbHRpb2tvbnR0
b3JpLmZpgg5zaXAudmFsdG9yaS5maYITc2lwLnZhbHRvcmlzdW9qYS5maYIOc2lw
LnZhbHZpcmEuZmmCC3NpcC52YXR0LmZpggxzaXAudmF5bGEuZmmCCnNpcC52ZXIu
ZmmCCXNpcC52bS5maYIKc2lwLnZuay5maYIKc2lwLnZyay5maYIKc2lwLnZ0aC5m
aYIQc2lwLnZ5LXZlcmtrby5maYIKc2lwLnZ2cy5maYIJc2lwLnltLmZpghFseWNl
LnZ5LXZlcmtrby5maYITc2lwLmV4dC5zZW5hYXR0aS5maYIKc2lwLmd0ay5maYIS
c2lwLnBrLnNlbmFhdHRpLmZpgg9zaXAuc2VuYWF0dGkuZmkwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBMBgNVHSAERTBDMDcG
CmCGSAGG+mwKAQUwKTAnBggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5u
ZXQvcnBhMAgGBmeBDAECAjCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUAVhQG
mi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAF5+seZNwAABAMARjBEAiAp
xEDPIWwKD3fuIDzM5zZiUb9xodRNUXoJNxLcP11p1wIgLpmu8R80uy8rdRh/gGMj
nZn/0/b+IVzRztUGZqd/mnEAdgDuwJXujXJkD5Ljw7kbxxKjaWoJe0tqGhQ45key
y+3F+QAAAXn6x5lNAAAEAwBHMEUCIHKhucMQ3HjIZARfK9tNoiCrPLZFz53aNGKi
N6A46CETAiEA2+S4fBA2AwPiRPhno2WG9/w6TTZ2GsE7zq7y666chbEAdwB9PvL4
j/+IVWgkwsDKnlKJeSvFDngJfy5ql2iZfiLw1wAAAXn6x5kbAAAEAwBIMEYCIQCo
z5VEQZQYF4q26hnN9M3sUaqkCj/qKxqwdZtpKZdHGgIhAJbL5OvkyE4zHBxzH9uR
cHshYftVdgI2Xd5zv7daeOP/MA0GCSqGSIb3DQEBCwUAA4IBAQA5J/++hKsQLa0i
l9JC/ag2lFdrSky/THZWHfiKjMFOwr6HOLahLHp8fp9Z9B4FMzTY6xdjaSOZ8Ty3
gTSfCpWii25SG5Ff2OvKc9yuq57itsvPCRV7YRNnwhveeHGXk5WVf64pMz50A7f8
ybbIfF/hSCSZYt3jJyWxzdl80hgTFAUSqbWXEA+r3MQUDCKCTYQZjQORVKXBhrDm
p0LjIUeTERgvQcbuXuM0Ibhv1lLVk6MQne72jbdUcxMiFOZZ+NEJJeWISPcCRwUB
eZ9H1H/oF/Fwikz7tw/KbtoUR32rR/ap45pYRhscbUtPtHnHBFrX7B+XYg/Iniuw
eYu7DDvS
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5rSp10v06wWAapFSePo+
tMqn2/uDI0grw/SU86778oYoyuC3PDWRGsmdKSz/IDXR2zXV2yNvd1LmYKPU/55Z
3QXf8uUDD9pRNaFD7bW61+irJ7rz8WMGTlpZR8CP3aiVsE6kEmBlv45UYlFZ4qGX
UWt/6pbqSshqHwu3HEOEIa9F+5sT+c/4O+ttDSbMtkwi7TEfkiWd+UJgldEsaa/i
Y8JmKpzSxdwosbhDdWpXa+iQZj2FphA9aPsVRBXjGCVm0uqnhrlh18WdUC/oqtgh
XT5yWVsLlMqHGwTxT8UcZj9Tg9yC8JwiIXl7ZdftRlBWx+V0jsh2Q37wMPP3MhqD
T2/+uyVAai8wljhmHzDSepYIP93mzQB9nciYgKLXCr3uxRcbazqBGD1Hz37byA31
zEn+L5zJSnAd0K8pb8NDHt91b7JCBxfaUIcFKuUZ5Va6/FbdnazbS6TY9OBPmWhy
R2PugA3Q9VA7EEMRh+Rl3c8eKwkmJH5fPk8HCgw78H8og4jMb3ntUN8/5Js8lN4o
+N23/unSz+7govGAEtUXLcipU36siL6QOAQh1LntuEdMBgq6IUa06A6aPn+j//8y
kUIi5NVK2GC7+4XOaJpzMCExp6HISpHLb79f/qk4DpZP2h9AwfTdakEjZi5mPcWI
oJX4s1ohzlZh4C2WlpECkoMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20108686430735983138966004246557595619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-11 11:14:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 11:14:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyväskylä'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintätekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyae.vy-verkko.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 941197208055117691004494677388802743139695753077605423097462245654152301857579529511800482511308761743514637713511132850406472312013406414487499429557298681218955401550314775969141642922548686364742737951769513008315918516544982566576041475004566179245286913949291340654005696234913203195808521259926317158767996827009994887399750801948333305459432563116476385430884733443943333294503625947643271124382342876470481249589799176391616166755299467959321200366744851190937250296480503524787389881876920093713398063796539119554067104093205383702660765470411564599903992819048316579475376683206571400044440021873613787913432098930996073668498841112432779625567761325304295532123944059086067601052874458213126217806541267200192375368454814904893412501054388770451310583694314629271167630164718226463531243071820669310222814220109796001430239064416462650222372162271476472496250551160434608123191291559507907047772704031094022965042829677478562714972263422249896796979598142582760116811131841076857519620495906102180189650463054607049928929596091849260759569118702651846955028118879179576614699674240078071209189841423201085495448260772415470907552335963907734202018337567276823337521255910176986483222675649410958756453093893395870963110531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a37784ac3f982202db8d5881893b9995c43823
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (897 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyae.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ambetsverket.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ara.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.arkisto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.celia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.defmin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.digijavaestotietovirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.dvv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.energiavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fimea.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fmi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.formin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gov.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.karvi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lvm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.maanmittauslaitos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.maistraatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.meriturva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.minedu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mmm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.niuva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.nrl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.oikeus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.om.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.palkeet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.prh.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.rahoitusvakausvirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ruokavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.samu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.stm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.stuk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.syke.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tem.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.thl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tpk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtiokonttori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valtorisuoja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.valvira.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vatt.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vayla.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ver.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vnk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vrk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vth.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vvs.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ym.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyce.vy-verkko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ext.senaatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gtk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pk.senaatti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.senaatti.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003927ffbe84ab102dad2297d242fda83694576b4a4cbf4c76561df88a8cc14ec2be8738b6a12c7a7c7e9f59f41e053334d8eb1763692399f13cb781349f0a95a28b6e521b915fd8ebca73dcaeab9ee2b6cbcf09157b611367c21bde7871979395957fae29333e7403b7fcc9b6c87c5fe148249962dde32725b1cdd97cd21813140512a9b597100fabdcc4140c22824d84198d039154a5c186b0e6a742e321479311182f41c6ee5ee33421b86fd652d593a3109deef68db75473132214e659f8d10925e58848f702470501799f47d47fe817f1708a4cfbb70fca6eda14477dab47f6a9e39a58461b1c6d4b4fb479c7045ad7ec1f97620fc89e2bb0798bbb0c3bd2