snow.ork.vyv.fi

- Valtion Tieto- ja Viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:6a:29:da:84:2d:95:41:ed:a8:02:66:11:09:e0 was issued on by TeliaSonera.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion Tieto- ja Viestintatekniikkakeskus Valtori

Organization: Valtion Tieto- ja Viestintatekniikkakeskus Valtori
Organization unit: Kapasiteettipalvelut - Kumppanin Tuottama
Locality: Jyvaskyla
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:6a:29:da:84:2d:95:41:ed:a8:02:66:11:09:e0
Serial Number (int): 7345548258710598580900300290329056
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 24:98:e1:d2:82:f6:5b:4f:2c:1a:0b:69:23:74:3c:d5:9b:ec:4b:99
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): c3:17:12:65:e4:ec:41:06:1c:62:43:23:34:95:05:58:d2:cd:bc:d5
Fingerprint (sha256): 33:9e:18:59:8f:c9:a5:11:2c:cb:d3:4c:b5:14:8e:bf:29:a6:64:08:14:5c:5d:ed:79:9f:0c:7f:62:06:55:8a

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate snow.ork.vyv.fi

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for snow.ork.vyv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

snow.ork.vyv.fi
workers.snow.ork.vyv.fi
whtp.snow.ork.vyv.fi
maintenance.snow.ork.vyv.fi
integration.snow.ork.vyv.fi
avp.snow.ork.vyv.fi

Other certificates including the domain name vyv.fi

(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi

Certificate

The complete raw certificate details for snow.ork.vyv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHyzCCBbOgAwIBAgIPAWop2oQtlUHtqAJmEQngMA0GCSqGSIb3DQEBCwUAMEYx
CzAJBgNVBAYTAkZJMRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEhMB8GA1UEAwwYVGVs
aWFTb25lcmEgU2VydmVyIENBIHYyMB4XDTE5MDQxNzA1NTIyN1oXDTIxMDQxNjA1
NTIyN1owgawxCzAJBgNVBAYTAkZJMRIwEAYDVQQHDAlKeXZhc2t5bGExOzA5BgNV
BAoMMlZhbHRpb24gVGlldG8tIGphIFZpZXN0aW50YXRla25paWtrYWtlc2t1cyBW
YWx0b3JpMTIwMAYDVQQLDClLYXBhc2l0ZWV0dGlwYWx2ZWx1dCAtIEt1bXBwYW5p
biBUdW90dGFtYTEYMBYGA1UEAwwPc25vdy5vcmsudnl2LmZpMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEA48T62V3Be21OBoV69pGjiOTNm8MPBUD0W9VX
kM9+Z7UApvs6hc9a4b2kCg5BsRraWJtm/jjir7pyKfpxCBLRMc+Ddy3JDLF4HTdx
eu+/dxnTds2FGGJQ4xNr7h+CWgI9ycnD1DFh0dR8h+02FJiNsgg6nJW52ok0CiHN
+AfRqYdP6FZ4u5CtNI+z0nEZQ8O/bhOw1v7F3q/5pALDZwjRX9RmuQTLNwPWqZfE
Y3JLHyEjEX2TZw2C3a92Vk7wMH8BzYPcSDcg+8gh0+wKrirNO0fGqze07FwkxNL4
9+NUMbzxifgGR0vSwVARbs/3goeNKP/cvlYtjiAVYIUpn5f6vSti0rPs3PcT9+KJ
H/Abiek9JMVB3WjUZjB3iUESKKPuqqq+wNboK61zVq6JzQVhlPUenEOF9HL+yp+/
NJiPisHn8up++NF1mvFjr+X5BGPVDBLi55E0zPcTnbN7sCuIdExQNKvX8rDIVF5e
oug7rn8lPZ1iKMDvX0+OR46KwyW2M/laiJRNscV7Y4b6A4LCYgfuVP8wm9qCuvgA
dG0wYVw4FCwYQYxZcTtRxh1fRDH4wg6nAo8sGiZuAUXYIUAWvx4xKZHSnTt8OOfe
f03iL+ikLSpwKrPBkX2SJ5OIKa9pNadipAawyLsPUq8JkQuBGvwySwSXKxkcLY5m
lHaPmGMCAwEAAaOCAk0wggJJMB8GA1UdIwQYMBaAFC9JPClP1wcl+caM1WT1Zj0S
gyKVMB0GA1UdDgQWBBQkmOHSgvZbTywaC2kjdDzVm+xLmTAOBgNVHQ8BAf8EBAMC
BLAwTgYDVR0gBEcwRTBDBgZngQwBAgIwOTA3BggrBgEFBQcCARYraHR0cDovL3Jl
cG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzCBmgYDVR0RBIGSMIGP
gg9zbm93Lm9yay52eXYuZmmCF3dvcmtlcnMuc25vdy5vcmsudnl2LmZpghR3aHRw
LnNub3cub3JrLnZ5di5maYIbbWFpbnRlbmFuY2Uuc25vdy5vcmsudnl2LmZpghtp
bnRlZ3JhdGlvbi5zbm93Lm9yay52eXYuZmmCE2F2cC5zbm93Lm9yay52eXYuZmkw
TQYDVR0fBEYwRDBCoECgPoY8aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJh
LmNvbS90ZWxpYXNvbmVyYXNlcnZlcmNhdjIuY3JsMB0GA1UdJQQWMBQGCCsGAQUF
BwMCBggrBgEFBQcDATCBhgYIKwYBBQUHAQEEejB4MCcGCCsGAQUFBzABhhtodHRw
Oi8vb2NzcC50cnVzdC50ZWxpYS5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9yZXBv
c2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYXNlcnZlcmNh
djIuY2VyMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQBv
rsetJpWJBFcbArVzuDyXwDZhXexqOXSXKPGEgWN0uTlJQdhplFBIBzPmklUHhyUV
010Wv8+lGd6RKCN94de3YCEIPI+cVXZHuRsQh5vKgLawIJKrL8y50QMdNrf3m53q
X0SfOHqx9s3IkdnDLrRUcJW4bleDrHZgKq+5W31r8Npxhfmr25AsMXrz0tUa6AH5
RSqGnFt6Vsxd639naBnfHujwm4ts5i6SyiV0YoR5HSQL5hZFL8HtTXw4RGHh6Yd2
+d6yWxcpeQ/1O9wi4rAQPKWOVsq6VKgixYgjcfjGLSjAQWzFcDzkfRtLLwWZ2C2V
0TJyu4WfvzCuXT1ILUtKIE+Jj/jpj8WAHwUnJrQHrceoaLZh6iQVDt1l1KacFUmn
FdTa2Iavk4Q8lN55wTLYBt2A3K7uh/eLcvWyFif02tFW6Z5iTyDGbZWpXnqk20Ew
sNSTqjOYvQn0F5xcIbOilsr4FeLXXfLxNFrz7ObZW4z/Hk5ao+Wr8qDh19AR52nS
CHcaZnxgiph7q6tdPKjCjzlW54W//yvuPIeHVLMj86wtst9eQe4hX7rPw5lhYkqc
RhTGq1wywUZH1MW8FN/6z1n/4aiflrLAMkY0NWFCOI6aeMViqGrBlFfEKSdgmihK
a5l7VDL0MkMiznkc0knA6yJ5ILOXUQR29bKRq1tF0w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7345548258710598580900300290329056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 05:52:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 05:52:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyvaskyla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion Tieto- ja Viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kapasiteettipalvelut - Kumppanin Tuottama'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'snow.ork.vyv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929218296393237785050608737858484029114304240896720527037941162758859912430812288783673987222775648544642573734467706119633338396618670373040778054789924911476772059340291182094094788426540226880171589384238304328763589659567724364542512022304322169777017432693820921564109596844609205534607184309365767049399383008232487582172007331852424348758518909136007182209932469892067655939758894334860665776693931168036480897667773126392415204609960399552502637990785830104860029808252472450300206377279595231873219259166123078617386015528489295691054054305158987500284448972730154687627465828280006247724058411363339867748976651229590593081000319563873459367480439356033155681591736141953036703094199705844423947016869541068652324586092572470952367092320906217757880243420948988898351846138969513415159394457118648461432630244743653774867774252619620086581115061049373201990813036699228486424993001137305477220246972568709745947629365640707544958317139817317430282916746158491908230774849027899015543021153355651483204937811091666929872846913333067221280698313304496156028370395947674911343542292945296921912325179063847745617927706749398835588644754743475223332771582669122465143638518956527084023647976557681249568164001291594044493764707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2498e1d282f65b4f2c1a0b6923743cd59bec4b99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow.ork.vyv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workers.snow.ork.vyv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtp.snow.ork.vyv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.snow.ork.vyv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.snow.ork.vyv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avp.snow.ork.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006faec7ad26958904571b02b573b83c97c036615dec6a39749728f184816374b9394941d8699450480733e6925507872515d35d16bfcfa519de9128237de1d7b76021083c8f9c557647b91b10879bca80b6b02092ab2fccb9d1031d36b7f79b9dea5f449f387ab1f6cdc891d9c32eb4547095b86e5783ac76602aafb95b7d6bf0da7185f9abdb902c317af3d2d51ae801f9452a869c5b7a56cc5deb7f676819df1ee8f09b8b6ce62e92ca25746284791d240be616452fc1ed4d7c384461e1e98776f9deb25b1729790ff53bdc22e2b0103ca58e56caba54a822c5882371f8c62d28c0416cc5703ce47d1b4b2f0599d82d95d13272bb859fbf30ae5d3d482d4b4a204f898ff8e98fc5801f052726b407adc7a868b661ea24150edd65d4a69c1549a715d4dad886af93843c94de79c132d806dd80dcaeee87f78b72f5b21627f4dad156e99e624f20c66d95a95e7aa4db4130b0d493aa3398bd09f4179c5c21b3a296caf815e2d75df2f1345af3ece6d95b8cff1e4e5aa3e5abf2a0e1d7d011e769d208771a667c608a987babab5d3ca8c28f3956e785bfff2bee3c878754b323f3ac2db2df5e41ee215fbacfc39961624a9c4614c6ab5c32c14647d4c5bc14dffacf59ffe1a89f96b2c0324634356142388e9a78c562a86ac19457c42927609a284a6b997b5432f4324322ce791cd249c0eb227920b397510476f5b291ab5b45d3