test.api.intra.s-pankki.fi
- S-Pankki Oy -
Issued by VRK CA for Service Providers - G3
About this certificate
This digital certificate with serial number 07:00:00:01:7b:f2:2b:c3:93:0a:b4:8e:f2:7c:aa:b4:dc:bb was issued on by Vaestorekisterikeskus CA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
S-Pankki Oy
Organization:
S-Pankki Oy
State / Province:
Finland
Locality: Helsinki
Country: FI
Locality: Helsinki
Country: FI
Vaestorekisterikeskus CA
Organization:
Vaestorekisterikeskus CA
Organization unit: Palveluvarmenteet
Organization unit: Palveluvarmenteet
Country:
FI
This certificate has expire since
Certificate Details
Serial Number (hex): 07:00:00:01:7b:f2:2b:c3:93:0a:b4:8e:f2:7c:aa:b4:dc:bbSerial Number (int): 609786009228541725929144850607584457317563
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7d:0d:9d:44:cb:fa:da:57:63:5f:ea:59:36:35:d2:d7:d8:e5:8d:4f
AuthorityKeyId: 65:04:e8:2d:92:e7:cb:2a:ab:57:15:a8:65:2a:aa:fa:b7:16:74:f6
Fingerprint (sha1): c6:51:72:16:70:cc:ab:60:f4:ad:df:c3:c0:51:9b:9f:5c:74:c3:cf
Fingerprint (sha256): 46:09:e0:a8:ca:44:a5:d4:69:8b:9d:e9:e2:79:be:4c:72:de:c9:1a:4d:3f:6a:eb:94:94:77:65:cf:6c:c7:2c
Issuing Certificate URL: http://proxy.fineid.fi/ca/vrksp3.crt
Revocation information
OCSP Server: http://ocsp.fineid.fi/vrksp3CRL Distribution Point: http://proxy.fineid.fi/crl/vrksp3c.crl
Check the revocation status for certificate test.api.intra.s-pankki.fi
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.api.intra.s-pankki.fi
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test.api.intra.s-pankki.fi
Other certificates including the domain name s-pankki.fi
(limited to 100 certificates)
bi-test.intra.s-pankki.fi
test.partner.api.s-pankki.fi
hakemukset.s-pankki.fi
dokumentit.s-pankki.fi
mapvi-test2.intra.s-pankki.fi
mobile.s-pankki.fi
*.stage.inet.s-pankki.fi
asko-em.test.intra.s-pankki.fi
view.email.s-pankki.fi
chat.inet.s-pankki.fi
aml.intra.s-pankki.fi
tunnistus.s-pankki.fi
openbanking.s-pankki.fi
chat-stg1.stage.inet.s-pankki.fi
asko2-em-int.intra.s-pankki.fi
ajanvaraus-test.intra.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
api.s-pankki.fi
asko2-em.test.intra.s-pankki.fi
www.s-pankki.fi
cloud.email.s-pankki.fi
ajanvaraus.s-pankki.fi
chat.inet.s-pankki.fi
isku.intra.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
stageonline.s-pankki.fi
view.email.s-pankki.fi
test.public.api.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
smobiiliwns.s-pankki.fi
isku-test.intra.s-pankki.fi
dps.intra.s-pankki.fi
test2.dokumentit.intra.s-pankki.fi
frontend.intra.s-pankki.fi
prod.api.intra.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
click.email.s-pankki.fi
sokrhg1001.sed.intra.s-pankki.fi
pft.s-pankki.fi
cloud.email.s-pankki.fi
asko-em.intra.s-pankki.fi
jira.intra.s-pankki.fi
online.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
test.azure-pompeli.intra.s-pankki.fi
partner.api.s-pankki.fi
sokrhg1002.sed.intra.s-pankki.fi
hakemukset.s-pankki.fi
test.partner.api.s-pankki.fi
online.s-pankki.fi
online.s-pankki.fi
bi.intra.s-pankki.fi
cassiopae.intra.s-pankki.fi
dokumentit.s-pankki.fi
mobile.s-pankki.fi
ajanvaraus2.intra.s-pankki.fi
www.s-pankki.fi
stageonline.s-pankki.fi
taviq.intra.s-pankki.fi
stagepft.s-pankki.fi
api.s-pankki.fi
analytics.s-pankki.fi
splunk.intra.s-pankki.fi
dokumentit.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
asko-em.intra.s-pankki.fi
palvelut-test.s-pankki.fi
tunnistus.s-pankki.fi
holvi.intra.s-pankki.fi
test.api.intra.s-pankki.fi
mobile.s-pankki.fi
splunk.intra.s-pankki.fi
dps.intra.s-pankki.fi
test.partner.api.s-pankki.fi
gitlab.intra.s-pankki.fi
asko2-em-cf.intra.s-pankki.fi
sokrhg1001.sed.intra.s-pankki.fi
nexus-test.intra.s-pankki.fi
click.email.s-pankki.fi
dokumentit2.s-pankki.fi
pft.s-pankki.fi
extranet.s-pankki.fi
mapvi2.intra.s-pankki.fi
jenkins-test.intra.s-pankki.fi
pft.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
gitlab-test.intra.s-pankki.fi
analytics.s-pankki.fi
asko-em.test.intra.s-pankki.fi
verkkopankki-admin.intra.s-pankki.fi
jenkins-test.intra.s-pankki.fi
*.inet.s-pankki.fi
partner.api.s-pankki.fi
testrail-test.intra.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
bi-tuotanto.intra.s-pankki.fi
cloud.email.s-pankki.fi
gitlab.intra.s-pankki.fi
online.s-pankki.fi
ajanvaraustest.s-pankki.fi
test.partner.api.s-pankki.fi
hakemukset.s-pankki.fi
dokumentit.s-pankki.fi
mapvi-test2.intra.s-pankki.fi
mobile.s-pankki.fi
*.stage.inet.s-pankki.fi
asko-em.test.intra.s-pankki.fi
view.email.s-pankki.fi
chat.inet.s-pankki.fi
aml.intra.s-pankki.fi
tunnistus.s-pankki.fi
openbanking.s-pankki.fi
chat-stg1.stage.inet.s-pankki.fi
asko2-em-int.intra.s-pankki.fi
ajanvaraus-test.intra.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
api.s-pankki.fi
asko2-em.test.intra.s-pankki.fi
www.s-pankki.fi
cloud.email.s-pankki.fi
ajanvaraus.s-pankki.fi
chat.inet.s-pankki.fi
isku.intra.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
stageonline.s-pankki.fi
view.email.s-pankki.fi
test.public.api.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
smobiiliwns.s-pankki.fi
isku-test.intra.s-pankki.fi
dps.intra.s-pankki.fi
test2.dokumentit.intra.s-pankki.fi
frontend.intra.s-pankki.fi
prod.api.intra.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
click.email.s-pankki.fi
sokrhg1001.sed.intra.s-pankki.fi
pft.s-pankki.fi
cloud.email.s-pankki.fi
asko-em.intra.s-pankki.fi
jira.intra.s-pankki.fi
online.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
test.azure-pompeli.intra.s-pankki.fi
partner.api.s-pankki.fi
sokrhg1002.sed.intra.s-pankki.fi
hakemukset.s-pankki.fi
test.partner.api.s-pankki.fi
online.s-pankki.fi
online.s-pankki.fi
bi.intra.s-pankki.fi
cassiopae.intra.s-pankki.fi
dokumentit.s-pankki.fi
mobile.s-pankki.fi
ajanvaraus2.intra.s-pankki.fi
www.s-pankki.fi
stageonline.s-pankki.fi
taviq.intra.s-pankki.fi
stagepft.s-pankki.fi
api.s-pankki.fi
analytics.s-pankki.fi
splunk.intra.s-pankki.fi
dokumentit.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
asko-em.intra.s-pankki.fi
palvelut-test.s-pankki.fi
tunnistus.s-pankki.fi
holvi.intra.s-pankki.fi
test.api.intra.s-pankki.fi
mobile.s-pankki.fi
splunk.intra.s-pankki.fi
dps.intra.s-pankki.fi
test.partner.api.s-pankki.fi
gitlab.intra.s-pankki.fi
asko2-em-cf.intra.s-pankki.fi
sokrhg1001.sed.intra.s-pankki.fi
nexus-test.intra.s-pankki.fi
click.email.s-pankki.fi
dokumentit2.s-pankki.fi
pft.s-pankki.fi
extranet.s-pankki.fi
mapvi2.intra.s-pankki.fi
jenkins-test.intra.s-pankki.fi
pft.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
gitlab-test.intra.s-pankki.fi
analytics.s-pankki.fi
asko-em.test.intra.s-pankki.fi
verkkopankki-admin.intra.s-pankki.fi
jenkins-test.intra.s-pankki.fi
*.inet.s-pankki.fi
partner.api.s-pankki.fi
testrail-test.intra.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
bi-tuotanto.intra.s-pankki.fi
cloud.email.s-pankki.fi
gitlab.intra.s-pankki.fi
online.s-pankki.fi
ajanvaraustest.s-pankki.fi
Certificate
The complete raw certificate details for test.api.intra.s-pankki.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH6zCCBdOgAwIBAgISBwAAAXvyK8OTCrSO8nyqtNy7MA0GCSqGSIb3DQEBCwUA MHgxCzAJBgNVBAYTAkZJMSEwHwYDVQQKExhWYWVzdG9yZWtpc3RlcmlrZXNrdXMg Q0ExGjAYBgNVBAsTEVBhbHZlbHV2YXJtZW50ZWV0MSowKAYDVQQDEyFWUksgQ0Eg Zm9yIFNlcnZpY2UgUHJvdmlkZXJzIC0gRzMwHhcNMjEwOTE3MDYwMDAwWhcNMjIw OTE2MjA1OTU5WjBtMQswCQYDVQQGEwJGSTEQMA4GA1UECAwHRmlubGFuZDERMA8G A1UEBwwISGVsc2lua2kxFDASBgNVBAoMC1MtUGFua2tpIE95MSMwIQYDVQQDDBp0 ZXN0LmFwaS5pbnRyYS5zLXBhbmtraS5maTCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBANMT4jiUvn9t55SrHL9Ya1JyvMoLl8H464oVg+6MGdcqc9I0t7WX D+8kuSg5DigXDkiqvXpJSP6I/3SobHZC37QGM5mfhdQ/JeAdEJIapYjBFlhrYR2A vkhcCd4hc4HT5R3ovEdozdqMJCRx8Kju9VlaVmFA8TeRob79eTYwuFM6qBUQ1p8Z 3cjTNKuvKSXd66GJi7hCPBbDkudkLf1j2KTJBq4BKaN/wfNNiGdOXPNir+m+mfXo 9AQLz2R4ji5b90XJMbnhaspjgDBOJXK1z8Yw9sV0YH1UBa0BkgjyVzMX+Pgg1rEd TMviAarQGhjorYq+7gfhYwlUcAJLMXcWY/M+7iYr8NENKY2AjmqdehGJ+uZkfyna X/zB/JNEhG5bsbFBh3Ip7xnL8vSD5J1dhT7jF7tLFjVaqQlwOqxu/D2Z2cSe5o2i VmxW2Lojn3ZI8l2tsJiBgVJj66GECCSjjXU+O9TO6N9xX1lfYK3k6HfWb/Fn0bus xrEL/ZHJb0ErDuSXNIAaI2qGBfuv8DN6cI6SfbZl4C0TNmLiIBHJc6JLGuDXVPBO AMF0w00CjWKZhhXdZW8fh/eRr8u5ekwTj4LqQ81Bpp6wwSgdDkaGCFyc9OlXO5bM 5DhGSpM8jt4PiJgzfO2+uqm7NTMhe11wsqnOfVxlkZroRjwitNBRvFjHAgMBAAGj ggJ4MIICdDAfBgNVHSMEGDAWgBRlBOgtkufLKqtXFahlKqr6txZ09jAdBgNVHQ4E FgQUfQ2dRMv62ldjX+pZNjXS19jljU8wDgYDVR0PAQH/BAQDAgSwMIHhBgNVHSAE gdkwgdYwCAYGBACPegEHMAgGBmeBDAECAjCBvwYJKoF2hAUBCiIBMIGxMCcGCCsG AQUFBwIBFhtodHRwOi8vd3d3LmZpbmVpZC5maS9jcHMzMy8wgYUGCCsGAQUFBwIC MHkad1Zhcm1lbm5lcG9saXRpaWtrYSBvbiBzYWF0YXZpbGxhIC0gQ2VydGlmaWth dCBwb2xpY3kgZmlubnMgLSBDZXJ0aWZpY2F0ZSBwb2xpY3kgaXMgYXZhaWxhYmxl IGh0dHA6Ly93d3cuZmluZWlkLmZpL2NwczMzMCUGA1UdEQQeMByCGnRlc3QuYXBp LmludHJhLnMtcGFua2tpLmZpMA8GA1UdEwEB/wQFMAMBAQAwNwYDVR0fBDAwLjAs oCqgKIYmaHR0cDovL3Byb3h5LmZpbmVpZC5maS9jcmwvdnJrc3AzYy5jcmwwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMGoGCCsGAQUFBwEBBF4wXDAwBggr BgEFBQcwAoYkaHR0cDovL3Byb3h5LmZpbmVpZC5maS9jYS92cmtzcDMuY3J0MCgG CCsGAQUFBzABhhxodHRwOi8vb2NzcC5maW5laWQuZmkvdnJrc3AzMC0GCCsGAQUF BwEDBCEwHzAIBgYEAI5GAQEwEwYGBACORgEGMAkGBwQAjkYBBgMwEwYKKwYBBAHW eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBABpLM6tMvo5F2QwabnV8wiD+ 6aMU3uPjlH4NqC2Ih8GyYFdohQiY+o5rKm/P0IrGENqmn2aszxIuO00TZK5E4agH iCTuT8HLdJK54uaAh7qdbSSihqUKUPn/n440npOA+XIbDd+ud5kOt4tl57Gsdnhf xRWhgruHhxUCOLTUaKZcOrtdIL1Faiqn+Pa2m7HMGU/30PN0xmxT8PYaGNDlY4yo YmSIV6StxrM4DdU3epiuh/c96TPqTC9nz/RGEiUv4//gIqIOvFxg9Ir1ZRXIa0Ei ghwQxD6yyA6UfK4by+JBEZBTmmpsgAf7wNKIkE5vT1DCdR1E19jizgdZBE86DptR 6T88PkB45sNoov2yE1ac3eBUfixGRSwgHv6s1corLIy0lOv1eVo57zrC/oVafliq cCYkKh4YSAaaPuvq/yTLs8dHrQ4HQcsFKa3/we6S6Jk29Mcu+13GIf/TjVlPyWRn KmMgpU/Qo5KdqdJcrNF9y9e4Q7L/qxVGMr9kbTX5LxfMLJAejC/Owr4UY9g1dkS9 5daiN2e+yY4ww6B5OLPi2x46Pw95810/iMDHpYnFkXgkcWxJQYgXMSFcor/JRxDF 8L2YX3ioaJtamGgeFnvbcQnzfekCMnkFzvpaBjyuIm6UF1+DPgRJF2P6jn44o4OM KnN15vCKQl+CZxtyHV9W -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0xPiOJS+f23nlKscv1hr UnK8yguXwfjrihWD7owZ1ypz0jS3tZcP7yS5KDkOKBcOSKq9eklI/oj/dKhsdkLf tAYzmZ+F1D8l4B0QkhqliMEWWGthHYC+SFwJ3iFzgdPlHei8R2jN2owkJHHwqO71 WVpWYUDxN5Ghvv15NjC4UzqoFRDWnxndyNM0q68pJd3roYmLuEI8FsOS52Qt/WPY pMkGrgEpo3/B802IZ05c82Kv6b6Z9ej0BAvPZHiOLlv3RckxueFqymOAME4lcrXP xjD2xXRgfVQFrQGSCPJXMxf4+CDWsR1My+IBqtAaGOitir7uB+FjCVRwAksxdxZj 8z7uJivw0Q0pjYCOap16EYn65mR/Kdpf/MH8k0SEbluxsUGHcinvGcvy9IPknV2F PuMXu0sWNVqpCXA6rG78PZnZxJ7mjaJWbFbYuiOfdkjyXa2wmIGBUmProYQIJKON dT471M7o33FfWV9greTod9Zv8WfRu6zGsQv9kclvQSsO5Jc0gBojaoYF+6/wM3pw jpJ9tmXgLRM2YuIgEclzoksa4NdU8E4AwXTDTQKNYpmGFd1lbx+H95Gvy7l6TBOP gupDzUGmnrDBKB0ORoYIXJz06Vc7lszkOEZKkzyO3g+ImDN87b66qbs1MyF7XXCy qc59XGWRmuhGPCK00FG8WMcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 609786009228541725929144850607584457317563 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaestorekisterikeskus CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palveluvarmenteet' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VRK CA for Service Providers - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-17 06:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-16 20:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Finland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'S-Pankki Oy' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test.api.intra.s-pankki.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861121766790780548763367191924338409117212920327733479330823206871554833625084906342470158007440167043005189640025595485854433098481710655841096109653568946718311265007171229585196418731540839568188788977589885733094617289889256246240299896831857722730126600052532176741129714953473553378164592725672698139024204856678938192546938021498036507668237731767686397029459656417685242402915194137536555508625946740241756999060538372147118657745008976977418328828511265877718080646654594502097102771934135163956632389573958860103398615258521536029156849430138492424894629412435970296164666675030260747836977050111473794890015529415520008537950640867650199031835174288078654114236292083874747208366369252261420666508252276129488097095945675882053101003153756151474071372628382082975112041752182639988729677180417927748995813597403609875497180714051019091507369881828661475292083871236818504863272336577113994974588898964214062525061316224682767354389737248691957756230381351310118807480232519848562813169418784845398052553849132906892512575091686853449413310673307380240626775271729047268915206127393225034889601546947154624032986447170862714429080479241996021422831101986150954788178518943502877569603751617658489492465997242498461841774791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6504e82d92e7cb2aab5715a8652aaafab71674f6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7d0d9d44cbfada57635fea593635d2d7d8e58d4f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (217 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.246.517.1.10.34.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.fineid.fi/cps33/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [86 97 114 109 101 110 110 101 112 111 108 105 116 105 105 107 107 97 32 111 110 32 115 97 97 116 97 118 105 108 108 97 32 45 32 67 101 114 116 105 102 105 107 97 116 32 112 111 108 105 99 121 32 102 105 110 110 115 32 45 32 67 101 114 116 105 102 105 99 97 116 101 32 112 111 108 105 99 121 32 105 115 32 97 118 97 105 108 97 98 108 101 32 104 116 116 112 58 47 47 119 119 119 46 102 105 110 101 105 100 46 102 105 47 99 112 115 51 51] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.intra.s-pankki.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/crl/vrksp3c.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/ca/vrksp3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.fineid.fi/vrksp3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.3 (qcStatements) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.1 (etsiQcsCompliance) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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