fira.fi

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 9f:bc:de:4c:e9:d3:30:46:ae:36:e8:b5:66:29:b7:2a was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fira.fi

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 9f:bc:de:4c:e9:d3:30:46:ae:36:e8:b5:66:29:b7:2a
Serial Number (int): 212327911927843851754521656842112317226
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ed:c6:36:99:4e:22:4c:ae:06:c0:f2:26:35:7b:84:76:b7:ae:6a:99
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): ee:d6:09:6e:09:a3:70:ef:1c:8d:dc:77:96:d5:7d:50:97:a4:4d:85
Fingerprint (sha256): a2:36:e1:10:6b:a3:f9:f9:4b:d3:3d:3f:a7:2f:17:c0:da:8f:8a:ea:b1:b5:49:11:6c:61:3c:e4:53:b2:e6:f9

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate fira.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fira.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fira.fi

Other certificates including the domain name fira.fi

(limited to 100 certificates)
clientadmin.symterra.co.uk
naxis.quilzer.net
developers.fira.fi
fira-tyopoyta.futurice.com
hub.fira.fi
old.fira.fi
*.fira.fi
developers.fira.fi
www.under25collegewars.com
developers.fira.fi
*.fira.fi
tyopoyta.fira.fi
ffp.fira.fi
fira.fi
fira-tyopoyta.futurice.com
efcbe.edwit.de
developers.fira.fi
gyaanx.in
fira.fi
fira.fi
developers.fira.fi
developers.fira.fi
fira.fi
www.cactus.app
helminauha.fira.fi
ffp.fira.fi
www.blissretreat.co.nz
logosgumruk.com
rickvandeijk.nl
11521797.peerly.app
tyopoyta.fira.fi
tyopoyta.fira.fi
old.fira.fi
tyopoyta.fira.fi
www.karstenbygg.no
ffp.fira.fi
api.codeofeverand.com
*.fira.fi
tyopoyta.fira.fi
tyopoyta.fira.fi
ffp.fira.fi
tyopoyta.fira.fi
fira.fi
www.restaurantefutu.es
developers.fira.fi
hub.fira.fi
admin.kiey.com
fira.fi
tyopoyta.fira.fi
ffp.fira.fi
olimpiafisioterapia.es
developers.fira.fi
tyopoyta.fira.fi
fira.fi
muskepeers.com
tyopoyta.fira.fi
www.vanami.design
fira.fi
fira.fi
matsuhisajapan.com
ammoshopper.com
hub.fira.fi
old.fira.fi
cloud.fira.fi
www.fira.fi
www.armitecno.com
fira.fi
tyopoyta.fira.fi
raportointi.fira.fi
hub.fira.fi
logosgumruk.com
hub.fira.fi
fira.fi
thefreedomreports.com
fira.fi
developers.fira.fi
tyopoyta.fira.fi
tyopoyta.fira.fi
www.avionics.one
www.duiardal.se
link.trenddii.com
tyopoyta.fira.fi
www.sequenceapp.co
lojasmm.appshare.com.br
hub.fira.fi
livegame.ynet.co.il
tyopoyta.fira.fi
hub.fira.fi
tyopoyta.fira.fi
tyopoyta.fira.fi
seuranta.fira.fi
old.fira.fi
fira.fi
fira.fi
fira.fi
fira.fi
api.codeofeverand.com
hub.fira.fi
painel.grupolocutorescomerciais.com.br
washmecleanlaundry.com

Certificate

The complete raw certificate details for fira.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXTCCBEWgAwIBAgIRAJ+83kzp0zBGrjbotWYptyowDQYJKoZIhvcNAQEMBQAw
SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T
U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yNDAzMjAwMDAwMDBaFw0y
NDA2MTgyMzU5NTlaMBIxEDAOBgNVBAMTB2ZpcmEuZmkwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDMU+LJdmbc2PTLjdvWsol3vc6blOetH4KQ6rWFP2Vx
zx7RcGqv7Lb6vU4SQg0SE8djAiGI+tLVi8AUBFqllUdK0J2FW2ISYk/TfAuDpMkf
BBzI4wVi1H1+gG9YzWVkZr47S08NAnTC/U1IIQENK6QnxmCYXvhdMDT1y8npeoy/
FwjxI5FKZIKQx7W0FFyj8RFE5u6ov42xIqwRzTgxcnLPQb3/6BvQxru+tQms2nKN
9Du+Hbw1T/I2HB2F/QES6HOLYtZkPUSIH08iWExb31lEO8DgOKKumyTF8s9lUbYO
gealrUunXiDU8xdDbCLea1HBvG+d1nbl1ETb1Et6XGNXAgMBAAGjggJzMIICbzAf
BgNVHSMEGDAWgBTI2XhootkZaNU9ct5fCj7ctYaGpjAdBgNVHQ4EFgQU7cY2mU4i
TK4GwPImNXuEdreuapkwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGy
MQECAk4wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYG
Z4EMAQIBMIGIBggrBgEFBQcBAQR8MHowSwYIKwYBBQUHMAKGP2h0dHA6Ly96ZXJv
c3NsLmNydC5zZWN0aWdvLmNvbS9aZXJvU1NMUlNBRG9tYWluU2VjdXJlU2l0ZUNB
LmNydDArBggrBgEFBQcwAYYfaHR0cDovL3plcm9zc2wub2NzcC5zZWN0aWdvLmNv
bTCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHb/iD8KtvuVUcJhzPWHujS0pM27
KdxoQgqf5mdMWjp0AAABjlkupvMAAAQDAEcwRQIhALZaX0qknen1YRlbKMgPKg28
mvUFOtvbiHuSKIh2oJYNAiBrno9Y2o94ZTf6uAss+tVjIyzJCNpXIfAjwzEjUX3g
rQB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjlkupqEAAAQD
AEcwRQIgaGHXnI7SKb6/7OUfikeVONHNAFEQ1MoCcbVd9nDTX10CIQCEWbp0aROp
cWLeq3qbrwXc6iFw+6NG0cI4aeYI51/rjjASBgNVHREECzAJggdmaXJhLmZpMA0G
CSqGSIb3DQEBDAUAA4ICAQA1A/LjhWsHkeRrn/qGHqlH+KpAnkrUcCUpSG8Tg3pK
ZoXpHvV7/gPGwbtMpdDye3+vYoefou+tpuXwv3i6/7U7WqMHYbgcxw2jlcCrfGXA
6HkQFlLBsqe8YPKOTD+VS2SKLjhNNf8mGGBOxsV1H9hBXrQzkevoxBtb2w7Fik25
uYAifthP6NI2OIP4gGniLdjUfbQ33NsoBYjD250mCKqTa+c3p89HSS0aFrQ9Q+a/
fqZuVTOkEGYj2VBVG29iLoMjGiq2wUTV5nAtxr16M/0KO411XZT3dTko9EjBVE/q
zzpn1WMJdz7aRZyOjn1oUtOeAmcpCd2ulekfLthVTbJAXBxkeVswjDWFcI0v7L10
8tUHdXbiJCnDhVW528kHoTSeUHMhPclME4p7lCpr1z+bUgvVJWlQBvweFVzu5eLP
ky6B70BYuvhJfN6mNhureiqW9e/dn8My03ya22Awp0y+Ge50FSP+Cj73ZExETFB0
EagK107Bz4ZrEfSYTuh4POCeB0nYFbbe5FtauZ7b6qdmq+Y6sxH9roj9QNftpcB6
n0BBVQEsZ5hTemuc0uCUKr7CnPSkAuDMUh1aAXI/ab69AEuLWcSFsPnYaCqKbWMs
zGLQo7ciFerjj/vs6QmaB1TUx1Ox1BsutPuh+2SZYEfiDgBH03F6PfV3O1IiuAc8
Ug==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFPiyXZm3Nj0y43b1rKJ
d73Om5TnrR+CkOq1hT9lcc8e0XBqr+y2+r1OEkINEhPHYwIhiPrS1YvAFARapZVH
StCdhVtiEmJP03wLg6TJHwQcyOMFYtR9foBvWM1lZGa+O0tPDQJ0wv1NSCEBDSuk
J8ZgmF74XTA09cvJ6XqMvxcI8SORSmSCkMe1tBRco/ERRObuqL+NsSKsEc04MXJy
z0G9/+gb0Ma7vrUJrNpyjfQ7vh28NU/yNhwdhf0BEuhzi2LWZD1EiB9PIlhMW99Z
RDvA4DiirpskxfLPZVG2DoHmpa1Lp14g1PMXQ2wi3mtRwbxvndZ25dRE29RLelxj
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 212327911927843851754521656842112317226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fira.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25793979885465271808512396373661022462001621794757391777693012257026962997066343778780976368437247031559214954454204575276078589754819359870079713543787021703551762608023063247620370090344389124739517334111665107714775072236935118458561752560080930546442384469490656853932942224292095076201504862481917755552049664074350050239735415894386678842787704999781549207303143882090515178352693241395251528063490880001339814014843198573707618364544053246532303527484303750095159266363306113744611018119362433539546581298466919413897380869240559566127405237436229230732328680159455548475295262472255119497931796285672180704087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edc636994e224cae06c0f226357b8476b7ae6a99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e592ea6f30000040300473045022100b65a5f4aa49de9f561195b28c80f2a0dbc9af5053adbdb887b92288876a0960d02206b9e8f58da8f786537fab80b2cfad563232cc908da5721f023c33123517de0ad0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e592ea6a1000004030047304502206861d79c8ed229bebfece51f8a479538d1cd005110d4ca0271b55df670d35f5d0221008459ba746913a97162deab7a9baf05dcea2170fba346d1c23869e608e75feb8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fira.fi'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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