varma.vyv.fi

- Valtion tieto- ja viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:70:a4:5f:4b:de:5b:ab:06:62:40:9f:a5:ce:ac was issued on by TeliaSonera.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion tieto- ja viestintatekniikkakeskus Valtori

Organization: Valtion tieto- ja viestintatekniikkakeskus Valtori
Organization unit: Palvelutuotanto
Locality: Helsinki
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:a4:5f:4b:de:5b:ab:06:62:40:9f:a5:ce:ac
Serial Number (int): 7476949645591579902809875486723756
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: f5:b6:05:ba:ad:c9:98:74:cd:21:b0:29:05:c7:f6:20:75:cb:ea:24
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): b7:9b:a7:44:cf:dc:1d:3d:56:36:c7:fc:01:77:c2:de:01:8e:89:b5
Fingerprint (sha256): 6a:58:99:71:b1:5b:0a:8b:38:e7:a0:a9:e4:0b:cb:e7:64:09:18:c7:de:c6:70:df:54:27:ae:f7:8d:bb:aa:cf

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate varma.vyv.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for varma.vyv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

varma.vyv.fi

Other certificates including the domain name vyv.fi

(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi

Certificate

The complete raw certificate details for varma.vyv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHKTCCBRGgAwIBAgIPAXCkX0veW6sGYkCfpc6sMA0GCSqGSIb3DQEBCwUAMEYx
CzAJBgNVBAYTAkZJMRQwEgYDVQQKDAtUZWxpYVNvbmVyYTEhMB8GA1UEAwwYVGVs
aWFTb25lcmEgU2VydmVyIENBIHYyMB4XDTIwMDMwNDA3MDc1M1oXDTIyMDMwNDA3
MDc1M1owgY4xCzAJBgNVBAYTAkZJMREwDwYDVQQHDAhIZWxzaW5raTE7MDkGA1UE
CgwyVmFsdGlvbiB0aWV0by0gamEgdmllc3RpbnRhdGVrbmlpa2tha2Vza3VzIFZh
bHRvcmkxGDAWBgNVBAsMD1BhbHZlbHV0dW90YW50bzEVMBMGA1UEAwwMdmFybWEu
dnl2LmZpMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3Ya2s7jRuK55
fepTi1p3D2RNtSXW8cs3nnmKlRbV3LjCQjmTlLp0BmNlvfU1n9guTd0GwEAGc2vA
Hj6jzhfemHjbckvFY/wkbN7nR+t/DWaRRhkQ5gCQkHz9FeuvYNznkbfEIfQTJTFU
85st/ZQN7cXSzNbrkB9VTID/EkmUpOAqxcNP5POyQRztDZiuQETxT6jO5GE4iLEb
6UiOHxURW2jCeFxuUvoDMVUhN1cBrODvC8O8Qr+fOcILNVyezPhVdmW+lR680Cp3
b5pdq++ygcKbynHfNyVjnmxptRpbCkUe4/QQYohgbn/pjEr8RyATYInLTPGjtpUz
84495Gvj4YqBNoC3ItvFXIHiYSLUYgKGqVWjkqswPpwMFrF+sUK1IvfoPFLY4b2a
iWschBClsCJmED37ADc3vq1Dsf8GAomMTdQjvEJdKsrO4UDvAID1YJXqoEky+53b
UdUdf9LHc/yF7RPxV9N26dEMJk+FzQPgZpZ5flgZ3ic4+jY/Y0Wic4d8dA5g0WeX
pa4weWKqug4XLaImrjYaYlq0LPaC+5LDS37qNkibSfzy1WAWWVqTTsZQn+8qy/4/
rrIQH8V9vgfSjno1aQo9ZuXuKhR+ir7xXPwEGPN2+eQLswAyXAVlBajJ5eqdhhdg
xtJ9vttavlO9qfD1GiadFlSVMURug+8CAwEAAaOCAckwggHFMB8GA1UdIwQYMBaA
FC9JPClP1wcl+caM1WT1Zj0SgyKVMB0GA1UdDgQWBBT1tgW6rcmYdM0hsCkFx/Yg
dcvqJDAOBgNVHQ8BAf8EBAMCBLAwTgYDVR0gBEcwRTBDBgZngQwBAgIwOTA3Bggr
BgEFBQcCARYraHR0cDovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29t
L0NQUzAXBgNVHREEEDAOggx2YXJtYS52eXYuZmkwTQYDVR0fBEYwRDBCoECgPoY8
aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYXNl
cnZlcmNhdjIuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATCBhgYI
KwYBBQUHAQEEejB4MCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcC50cnVzdC50ZWxp
YS5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlh
c29uZXJhLmNvbS90ZWxpYXNvbmVyYXNlcnZlcmNhdjIuY2VyMBMGCisGAQQB1nkC
BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQBXmRlSeE1Z1xxUM0vEAM6eefcZ
rIcOGPsj0eaJvvKNqJKdfn78WpKj6psxr9MAk1dxRLIGxHxm1EG4L0e0Px66jb41
W10YSxj4aTXbwG12BSk0jaiPvapxFxe2Kk7yl+rS77zvw951T0oTIoMyuh0kGOO5
vLLQa29tyqxgu5oLNPw0YD9DDYLuhR4J5hMlHQDqzKr2f26w9al9UpLTwGwDu3B7
p8MosZx8k4MHGHsTIgzlG06AyH26kqpbi+0HXBY1ydBrs3/wNvQTIbmdZvY2vjNj
G6u/iqLYicjSGAO065C0SodIUp2lg+DhkUW++ZZKKK87GbHteRVGDssbwjLVO4ev
I8x9jAWW+YMukuEOqYOqR6EAmhwQwknfb69nWXI/7G1in7lDPASfMfFrVpnIDUNw
/yvgT4oI+2w7JTSMCmR2AB796Zl/yTqd2+6qRVmqXC3uTYakSceOjiBFcLBbxU0C
2pz0ZVF9RnoFageqB3vK7FUb1LyEC5UN4Eh8HBi5LVFkOwx1J3LVukL7JnE6f89M
VGMBMtYkbynRm7wwPPOm6qxf7o1SAnhuiGWwVyFccOGpKpeo6aCTyKlL/+sPUs3P
aZ3tQJZhCe0DXqKKm7Oy6k9wJP30RVj4TITCMrYg4UhX4ueqhm4e5t+T5DTLFMKC
UFjMXIiQ6et1o2Abag==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7476949645591579902809875486723756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 07:07:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-04 07:07:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion tieto- ja viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Palvelutuotanto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'varma.vyv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903748151004470212848893052691438328200660368000805799404269529978195029458776347281902783531181443022589390547735691496742220326317549429066581551905777162057580620009761301322406134231278132086446526405839516199424329237488016780171113638864588919349998421186250503799405324811855873745736118538082357160884913826376924745551849251251642908780478026576949384726203170736877459376108022843847120317253535972849591493115301410407801988267797955980324059854098091408846312543312193135694666993182668044951719029616065915608199372152071095425747777149639366143293334609207810226448868542437629109750453597579893155383424350978730595635967061526497440080241636318234115132177401417690526452331172646519849614850364450166896827291411560657577960890127218182479970408066701507712796562879751849217102918671916987000481074610551558520577587479509226437466411095909983668129950693369771526104649165099695254176868281404263912984530860764739941038141545291380018045626642296150475849248173462023793982081571809535759142996828624252705057112062196356643998584989993192651335639042031901194849243558370334259775646215575688108129635211297844477120109966416890267564288053585386172962685693265841534378437096744714388538127595582048329930802159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5b605baadc99874cd21b02905c7f62075cbea24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varma.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0057991952784d59d71c54334bc400ce9e79f719ac870e18fb23d1e689bef28da8929d7e7efc5a92a3ea9b31afd30093577144b206c47c66d441b82f47b43f1eba8dbe355b5d184b18f86935dbc06d760529348da88fbdaa711717b62a4ef297ead2efbcefc3de754f4a13228332ba1d2418e3b9bcb2d06b6f6dcaac60bb9a0b34fc34603f430d82ee851e09e613251d00eaccaaf67f6eb0f5a97d5292d3c06c03bb707ba7c328b19c7c938307187b13220ce51b4e80c87dba92aa5b8bed075c1635c9d06bb37ff036f41321b99d66f636be33631babbf8aa2d889c8d21803b4eb90b44a8748529da583e0e19145bef9964a28af3b19b1ed7915460ecb1bc232d53b87af23cc7d8c0596f9832e92e10ea983aa47a1009a1c10c249df6faf6759723fec6d629fb9433c049f31f16b5699c80d4370ff2be04f8a08fb6c3b25348c0a6476001efde9997fc93a9ddbeeaa4559aa5c2dee4d86a449c78e8e204570b05bc54d02da9cf465517d467a056a07aa077bcaec551bd4bc840b950de0487c1c18b92d51643b0c752772d5ba42fb26713a7fcf4c54630132d6246f29d19bbc303cf3a6eaac5fee8d5202786e8865b057215c70e1a92a97a8e9a093c8a94bffeb0f52cdcf699ded40966109ed035ea28a9bb3b2ea4f7024fdf44558f84c84c232b620e14857e2e7aa866e1ee6df93e434cb14c2825058cc5c8890e9eb75a3601b6a