*.kkv.fi

- Kilpailu- ja kuluttajavirasto -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 7c:31:83:f4:9a:3e:5d:d9:00:00:00:00:50:de:d0:f3 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kilpailu- ja kuluttajavirasto

Organization: Kilpailu- ja kuluttajavirasto
Locality: Helsinki
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:31:83:f4:9a:3e:5d:d9:00:00:00:00:50:de:d0:f3
Serial Number (int): 165081370398463594739523598175319281907
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 91:85:c0:6f:9c:85:c0:18:c1:42:be:c3:c6:08:14:70:4c:ed:48:d8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6e:92:68:9b:6a:3c:da:17:dc:25:86:8e:60:26:50:2c:d4:e9:45:ce
Fingerprint (sha256): 42:86:6b:c4:4b:ea:88:85:39:c1:4c:00:e6:78:48:e6:b2:c1:f4:6e:fd:2e:77:11:74:b2:14:39:49:52:03:84

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.kkv.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kkv.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kkv.fi
kkv.fi

Other certificates including the domain name kkv.fi

(limited to 100 certificates)
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
tls.automattic.com
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
securemail.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
asiointi.kkv.fi
asiointi.kkv.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.kkv.fi
matkapakettiapuri.fi
asiointi.kkv.fi
www.kkv.fi
www.kkv.fi
tls.automattic.com
securemail.kkv.fi
lyae.vy-verkko.fi
tls.automattic.com
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv.fi
securemail.kkv.fi
lyae.vy-verkko.fi
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
kkv.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
www.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
turvaviesti.kkv.fi
securemail.kkv.fi
api.asiointi.kkv.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
valma.kkv.fi
securemail.kkv.fi
arkisto.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv.fi
asiointi.kkv.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
tls.automattic.com
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
kkv-vk2017.focusflow.net
ucc.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv-vk2017.focusflow.net
sip.vy-verkko.fi
ucc.vy-verkko.fi
kkv-vk2017.focusflow.net
turvaviesti.kkv.fi
matkapakettiapuri.fi

Certificate

The complete raw certificate details for *.kkv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIQfDGD9Jo+XdkAAAAAUN7Q8zANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
NzExMDMxMTIwNDVaFw0yMDExMDMxMTUwNDRaMFsxCzAJBgNVBAYTAkZJMREwDwYD
VQQHEwhIZWxzaW5raTEmMCQGA1UEChMdS2lscGFpbHUtIGphIGt1bHV0dGFqYXZp
cmFzdG8xETAPBgNVBAMMCCoua2t2LmZpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsG/TTMXpWdPuOTHQUCv4TwvxTMMjMJaYxzxk2jIbSTv0pUxA2ita
I6OePLKpNdJ5sZs6mhPEio3pssBxdYzjVw5jWDAROTmCYQ7xyZ11C5uCcAWzZqCf
PJ9UP9T8PCV9SR9iRrCGU3xA6iioxS9kenzwzzw8fxoDPLQ0JfmrW1JDGPxRywbF
4UK4boZ/Mk8Vz8vKlMoIvIUb6mSUP2SXP6Twiz+bR7OdJ7USxTWbOCsjgL6qNJvK
QXabtfaAD5cxVoorm913t3rZYFdPHUiypfDPK6az8rwxmxbWpheQnN0JZreY5PFP
uPmvzhVQXsE3J3chLk4hkF7cIXzPhNmUWQIDAQABo4IBhzCCAYMwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAq
MCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1Ud
IAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVu
dHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUF
BzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDov
L2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMBsGA1UdEQQUMBKCCCou
a2t2LmZpggZra3YuZmkwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8w
HQYDVR0OBBYEFJGFwG+chcAYwUK+w8YIFHBM7UjYMAkGA1UdEwQCMAAwDQYJKoZI
hvcNAQELBQADggEBAGbyVXhk6+5eDwolcdEPK3YTliaYa1YYD7gu9mdDheILMwrR
n7w1dgYK/s/EQ4c2X3N4CA846SuA6CXxQxU2twOsjteh44LSQpEW9CPep/HcO8sv
BlbfcKCoyvcqmzUgNGui8slWi44lpwX5FTt6N7EodqQ5vXT93Cz1h6lU8pWH5ARt
22xIDBs9ycDLOBMEmyNCctC9qK2dT2MLwq7WOpFN8M0WvsFv4rWmoWd4cdG+KY/i
ewn6uKrb0/qKu0V/q38cux2Owx8R/1m+9yPt1/NMcQFklLsycHw/eZgL2y/KO/+r
qgCc6MjPw/Om+AKMRlQZBqd5aPRXqcVtlwR65tk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG/TTMXpWdPuOTHQUCv4
TwvxTMMjMJaYxzxk2jIbSTv0pUxA2itaI6OePLKpNdJ5sZs6mhPEio3pssBxdYzj
Vw5jWDAROTmCYQ7xyZ11C5uCcAWzZqCfPJ9UP9T8PCV9SR9iRrCGU3xA6iioxS9k
enzwzzw8fxoDPLQ0JfmrW1JDGPxRywbF4UK4boZ/Mk8Vz8vKlMoIvIUb6mSUP2SX
P6Twiz+bR7OdJ7USxTWbOCsjgL6qNJvKQXabtfaAD5cxVoorm913t3rZYFdPHUiy
pfDPK6az8rwxmxbWpheQnN0JZreY5PFPuPmvzhVQXsE3J3chLk4hkF7cIXzPhNmU
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165081370398463594739523598175319281907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 11:20:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-03 11:50:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kilpailu- ja kuluttajavirasto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kkv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22273084829154582478042728561889468591741194817245803786017896933008824119508875389601362807113448936634780743381006674746645995994145225187638798676824508458766730303113572756171509320147822295331431049325884348381648238465545293624941404499036940848110763792960212691967823301404823258823465835943473094504486418559115006757081579559929455104087198905322106130053605685228973812342938821775489672157014310108950807569001816638140784969386478123912353889550366725111966254325453251413773488699144034754456080653905816751642170108750725371497182487414912282245869940734241556730731785992173576783372310183943983436889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9185c06f9c85c018c142bec3c60814704ced48d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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