test.api.intra.s-pankki.fi

- S-Pankki Oy -

Issued by VRK CA for Service Providers - G3

About this certificate

This digital certificate with serial number 07:00:00:01:7b:f2:2b:c3:93:0a:b4:8e:f2:7c:aa:b4:dc:bb was issued on by Vaestorekisterikeskus CA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

S-Pankki Oy

Organization: S-Pankki Oy
State / Province: Finland
Locality: Helsinki
Country: FI

Vaestorekisterikeskus CA

Organization: Vaestorekisterikeskus CA
Organization unit: Palveluvarmenteet
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 07:00:00:01:7b:f2:2b:c3:93:0a:b4:8e:f2:7c:aa:b4:dc:bb
Serial Number (int): 609786009228541725929144850607584457317563
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:0d:9d:44:cb:fa:da:57:63:5f:ea:59:36:35:d2:d7:d8:e5:8d:4f
AuthorityKeyId: 65:04:e8:2d:92:e7:cb:2a:ab:57:15:a8:65:2a:aa:fa:b7:16:74:f6

Fingerprint (sha1): c6:51:72:16:70:cc:ab:60:f4:ad:df:c3:c0:51:9b:9f:5c:74:c3:cf
Fingerprint (sha256): 46:09:e0:a8:ca:44:a5:d4:69:8b:9d:e9:e2:79:be:4c:72:de:c9:1a:4d:3f:6a:eb:94:94:77:65:cf:6c:c7:2c

Issuing Certificate URL: http://proxy.fineid.fi/ca/vrksp3.crt

Revocation information

OCSP Server: http://ocsp.fineid.fi/vrksp3
CRL Distribution Point: http://proxy.fineid.fi/crl/vrksp3c.crl

Check the revocation status for certificate test.api.intra.s-pankki.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.api.intra.s-pankki.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.api.intra.s-pankki.fi

Other certificates including the domain name s-pankki.fi

(limited to 100 certificates)
bi-test.intra.s-pankki.fi
test.partner.api.s-pankki.fi
hakemukset.s-pankki.fi
dokumentit.s-pankki.fi
mapvi-test2.intra.s-pankki.fi
mobile.s-pankki.fi
*.stage.inet.s-pankki.fi
asko-em.test.intra.s-pankki.fi
view.email.s-pankki.fi
chat.inet.s-pankki.fi
aml.intra.s-pankki.fi
tunnistus.s-pankki.fi
openbanking.s-pankki.fi
chat-stg1.stage.inet.s-pankki.fi
asko2-em-int.intra.s-pankki.fi
ajanvaraus-test.intra.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
api.s-pankki.fi
asko2-em.test.intra.s-pankki.fi
www.s-pankki.fi
cloud.email.s-pankki.fi
ajanvaraus.s-pankki.fi
chat.inet.s-pankki.fi
isku.intra.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
stageonline.s-pankki.fi
view.email.s-pankki.fi
test.public.api.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
smobiiliwns.s-pankki.fi
isku-test.intra.s-pankki.fi
dps.intra.s-pankki.fi
test2.dokumentit.intra.s-pankki.fi
frontend.intra.s-pankki.fi
prod.api.intra.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
click.email.s-pankki.fi
sokrhg1001.sed.intra.s-pankki.fi
pft.s-pankki.fi
cloud.email.s-pankki.fi
asko-em.intra.s-pankki.fi
jira.intra.s-pankki.fi
online.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
test.azure-pompeli.intra.s-pankki.fi
partner.api.s-pankki.fi
sokrhg1002.sed.intra.s-pankki.fi
hakemukset.s-pankki.fi
test.partner.api.s-pankki.fi
online.s-pankki.fi
online.s-pankki.fi
bi.intra.s-pankki.fi
cassiopae.intra.s-pankki.fi
dokumentit.s-pankki.fi
mobile.s-pankki.fi
ajanvaraus2.intra.s-pankki.fi
www.s-pankki.fi
stageonline.s-pankki.fi
taviq.intra.s-pankki.fi
stagepft.s-pankki.fi
api.s-pankki.fi
analytics.s-pankki.fi
splunk.intra.s-pankki.fi
dokumentit.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
asko-em.intra.s-pankki.fi
palvelut-test.s-pankki.fi
tunnistus.s-pankki.fi
holvi.intra.s-pankki.fi
test.api.intra.s-pankki.fi
mobile.s-pankki.fi
splunk.intra.s-pankki.fi
dps.intra.s-pankki.fi
test.partner.api.s-pankki.fi
gitlab.intra.s-pankki.fi
asko2-em-cf.intra.s-pankki.fi
sokrhg1001.sed.intra.s-pankki.fi
nexus-test.intra.s-pankki.fi
click.email.s-pankki.fi
dokumentit2.s-pankki.fi
pft.s-pankki.fi
extranet.s-pankki.fi
mapvi2.intra.s-pankki.fi
jenkins-test.intra.s-pankki.fi
pft.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
gitlab-test.intra.s-pankki.fi
analytics.s-pankki.fi
asko-em.test.intra.s-pankki.fi
verkkopankki-admin.intra.s-pankki.fi
jenkins-test.intra.s-pankki.fi
*.inet.s-pankki.fi
partner.api.s-pankki.fi
testrail-test.intra.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
bi-tuotanto.intra.s-pankki.fi
cloud.email.s-pankki.fi
gitlab.intra.s-pankki.fi
online.s-pankki.fi
ajanvaraustest.s-pankki.fi

Certificate

The complete raw certificate details for test.api.intra.s-pankki.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH6zCCBdOgAwIBAgISBwAAAXvyK8OTCrSO8nyqtNy7MA0GCSqGSIb3DQEBCwUA
MHgxCzAJBgNVBAYTAkZJMSEwHwYDVQQKExhWYWVzdG9yZWtpc3RlcmlrZXNrdXMg
Q0ExGjAYBgNVBAsTEVBhbHZlbHV2YXJtZW50ZWV0MSowKAYDVQQDEyFWUksgQ0Eg
Zm9yIFNlcnZpY2UgUHJvdmlkZXJzIC0gRzMwHhcNMjEwOTE3MDYwMDAwWhcNMjIw
OTE2MjA1OTU5WjBtMQswCQYDVQQGEwJGSTEQMA4GA1UECAwHRmlubGFuZDERMA8G
A1UEBwwISGVsc2lua2kxFDASBgNVBAoMC1MtUGFua2tpIE95MSMwIQYDVQQDDBp0
ZXN0LmFwaS5pbnRyYS5zLXBhbmtraS5maTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBANMT4jiUvn9t55SrHL9Ya1JyvMoLl8H464oVg+6MGdcqc9I0t7WX
D+8kuSg5DigXDkiqvXpJSP6I/3SobHZC37QGM5mfhdQ/JeAdEJIapYjBFlhrYR2A
vkhcCd4hc4HT5R3ovEdozdqMJCRx8Kju9VlaVmFA8TeRob79eTYwuFM6qBUQ1p8Z
3cjTNKuvKSXd66GJi7hCPBbDkudkLf1j2KTJBq4BKaN/wfNNiGdOXPNir+m+mfXo
9AQLz2R4ji5b90XJMbnhaspjgDBOJXK1z8Yw9sV0YH1UBa0BkgjyVzMX+Pgg1rEd
TMviAarQGhjorYq+7gfhYwlUcAJLMXcWY/M+7iYr8NENKY2AjmqdehGJ+uZkfyna
X/zB/JNEhG5bsbFBh3Ip7xnL8vSD5J1dhT7jF7tLFjVaqQlwOqxu/D2Z2cSe5o2i
VmxW2Lojn3ZI8l2tsJiBgVJj66GECCSjjXU+O9TO6N9xX1lfYK3k6HfWb/Fn0bus
xrEL/ZHJb0ErDuSXNIAaI2qGBfuv8DN6cI6SfbZl4C0TNmLiIBHJc6JLGuDXVPBO
AMF0w00CjWKZhhXdZW8fh/eRr8u5ekwTj4LqQ81Bpp6wwSgdDkaGCFyc9OlXO5bM
5DhGSpM8jt4PiJgzfO2+uqm7NTMhe11wsqnOfVxlkZroRjwitNBRvFjHAgMBAAGj
ggJ4MIICdDAfBgNVHSMEGDAWgBRlBOgtkufLKqtXFahlKqr6txZ09jAdBgNVHQ4E
FgQUfQ2dRMv62ldjX+pZNjXS19jljU8wDgYDVR0PAQH/BAQDAgSwMIHhBgNVHSAE
gdkwgdYwCAYGBACPegEHMAgGBmeBDAECAjCBvwYJKoF2hAUBCiIBMIGxMCcGCCsG
AQUFBwIBFhtodHRwOi8vd3d3LmZpbmVpZC5maS9jcHMzMy8wgYUGCCsGAQUFBwIC
MHkad1Zhcm1lbm5lcG9saXRpaWtrYSBvbiBzYWF0YXZpbGxhIC0gQ2VydGlmaWth
dCBwb2xpY3kgZmlubnMgLSBDZXJ0aWZpY2F0ZSBwb2xpY3kgaXMgYXZhaWxhYmxl
IGh0dHA6Ly93d3cuZmluZWlkLmZpL2NwczMzMCUGA1UdEQQeMByCGnRlc3QuYXBp
LmludHJhLnMtcGFua2tpLmZpMA8GA1UdEwEB/wQFMAMBAQAwNwYDVR0fBDAwLjAs
oCqgKIYmaHR0cDovL3Byb3h5LmZpbmVpZC5maS9jcmwvdnJrc3AzYy5jcmwwHQYD
VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMGoGCCsGAQUFBwEBBF4wXDAwBggr
BgEFBQcwAoYkaHR0cDovL3Byb3h5LmZpbmVpZC5maS9jYS92cmtzcDMuY3J0MCgG
CCsGAQUFBzABhhxodHRwOi8vb2NzcC5maW5laWQuZmkvdnJrc3AzMC0GCCsGAQUF
BwEDBCEwHzAIBgYEAI5GAQEwEwYGBACORgEGMAkGBwQAjkYBBgMwEwYKKwYBBAHW
eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBABpLM6tMvo5F2QwabnV8wiD+
6aMU3uPjlH4NqC2Ih8GyYFdohQiY+o5rKm/P0IrGENqmn2aszxIuO00TZK5E4agH
iCTuT8HLdJK54uaAh7qdbSSihqUKUPn/n440npOA+XIbDd+ud5kOt4tl57Gsdnhf
xRWhgruHhxUCOLTUaKZcOrtdIL1Faiqn+Pa2m7HMGU/30PN0xmxT8PYaGNDlY4yo
YmSIV6StxrM4DdU3epiuh/c96TPqTC9nz/RGEiUv4//gIqIOvFxg9Ir1ZRXIa0Ei
ghwQxD6yyA6UfK4by+JBEZBTmmpsgAf7wNKIkE5vT1DCdR1E19jizgdZBE86DptR
6T88PkB45sNoov2yE1ac3eBUfixGRSwgHv6s1corLIy0lOv1eVo57zrC/oVafliq
cCYkKh4YSAaaPuvq/yTLs8dHrQ4HQcsFKa3/we6S6Jk29Mcu+13GIf/TjVlPyWRn
KmMgpU/Qo5KdqdJcrNF9y9e4Q7L/qxVGMr9kbTX5LxfMLJAejC/Owr4UY9g1dkS9
5daiN2e+yY4ww6B5OLPi2x46Pw95810/iMDHpYnFkXgkcWxJQYgXMSFcor/JRxDF
8L2YX3ioaJtamGgeFnvbcQnzfekCMnkFzvpaBjyuIm6UF1+DPgRJF2P6jn44o4OM
KnN15vCKQl+CZxtyHV9W
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 609786009228541725929144850607584457317563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaestorekisterikeskus CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palveluvarmenteet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VRK CA for Service Providers - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-17 06:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-16 20:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Finland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'S-Pankki Oy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test.api.intra.s-pankki.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861121766790780548763367191924338409117212920327733479330823206871554833625084906342470158007440167043005189640025595485854433098481710655841096109653568946718311265007171229585196418731540839568188788977589885733094617289889256246240299896831857722730126600052532176741129714953473553378164592725672698139024204856678938192546938021498036507668237731767686397029459656417685242402915194137536555508625946740241756999060538372147118657745008976977418328828511265877718080646654594502097102771934135163956632389573958860103398615258521536029156849430138492424894629412435970296164666675030260747836977050111473794890015529415520008537950640867650199031835174288078654114236292083874747208366369252261420666508252276129488097095945675882053101003153756151474071372628382082975112041752182639988729677180417927748995813597403609875497180714051019091507369881828661475292083871236818504863272336577113994974588898964214062525061316224682767354389737248691957756230381351310118807480232519848562813169418784845398052553849132906892512575091686853449413310673307380240626775271729047268915206127393225034889601546947154624032986447170862714429080479241996021422831101986150954788178518943502877569603751617658489492465997242498461841774791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6504e82d92e7cb2aab5715a8652aaafab71674f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d0d9d44cbfada57635fea593635d2d7d8e58d4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (217 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.246.517.1.10.34.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.fineid.fi/cps33/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [86 97 114 109 101 110 110 101 112 111 108 105 116 105 105 107 107 97 32 111 110 32 115 97 97 116 97 118 105 108 108 97 32 45 32 67 101 114 116 105 102 105 107 97 116 32 112 111 108 105 99 121 32 102 105 110 110 115 32 45 32 67 101 114 116 105 102 105 99 97 116 101 32 112 111 108 105 99 121 32 105 115 32 97 118 97 105 108 97 98 108 101 32 104 116 116 112 58 47 47 119 119 119 46 102 105 110 101 105 100 46 102 105 47 99 112 115 51 51]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.intra.s-pankki.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/crl/vrksp3c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://proxy.fineid.fi/ca/vrksp3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.fineid.fi/vrksp3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.3 (qcStatements)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.1 (etsiQcsCompliance)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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