SUOMI/FINLAND (FINLAND) : Trusted List

Transcription

1 SUOMI/NLAND (NLAND) : Trusted List Tsl Id: id_for_enveloped_signing_of_the_entire_list Valid until nextupdate value: T11:00:00 TSL signed on: T10:46:05.486Z PDF generated on: Mon Sep 21 12:49:56 CEST 2015 SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 1

2 TSL Scheme Information TSL Id TSLTag id_for_enveloped_signing_of_the_entire_list TSL Version Identifier 4 TSL Sequence Number 18 TSL Type Scheme Operator Name Finnish Communications Regulatory Authority CORA Name [ fi ] CORA - Viestintavirasto PostalAddress Street Address [ en ] Itamerenkatu 3A Locality [ en ] Helsinki Postal Code [ en ] Country ElectronicAddress URI mailto:kirjaamo@ficora.fi URI Scheme Name :Supervision/Accreditation Status List of certification services from Certification Service Providers, which are supervised/accredited by the referenced Scheme Operator s Member State for compliance with the relevant provisions laid down in Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures. Scheme Information URI URI [ en ] terofcertificationauthoritiesprovidingqualifiedcertificates.html Status Determination Approach SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 2

3 Scheme Type Community Rules URI [ en ] URI [ en ] Scheme Territory Policy Or Legal Notice TSL Legal Notice [ en ] The applicable legal framework for the present TSL implementation of the Trusted List of supervised/accredited Certification Service Providers for Finland is Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on a Community framework for electronic signatures and its implementation in Finland laws. TSL Legal Notice [ fi ] Tämän Suomen valvottuja/akkreditoituja varmennepalvelujen tarjoajia koskevan luotetun luettelon TSL- toteutuksen suhteen noudatettava lakikehys on Euroopan parlamentin ja neuvoston direktiivi 1999/93/EY, annettu 13 päivänä joulukuuta 1999, sähköisiä allekirjoituksia koskevista yhteisön puitteista sekä sen implementointi Suomen laissa. Historical Information Period Pointer to other TSL - EUROPEAN UNION 1.EU TSL - MimeType: application/vnd.etsi.tsl+xml TSL Location EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: 114 X509 Certificate -----BEGIN CERTICATE----- MIIHPDCCBSSgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQGEwJFUzERMA8GA1UECgwI Rk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xMTExMTYxNTExMDdaFw0xNTExMTYxNTExMDda ME0xCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNTSU9OMSAwHgYDVQQDDBco U0lHTikgQU5ORUxJIEFORFJFU1NPTjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMw8 81fbxBn5Eq64Hf6pqEqn0Intg49k5D+E2JBMcyeOMYE4WwuzVqs7fuKMX5mhiFw7llVx42S7GIDn Ka6ascF7irISsYTGOtD6dGt8OEOQkG5i24wxT3we63VW1W/PEO0WoRjkPDBqgljnqcLn+WJLr3Yl 9fpkxyT+H3pl0jnGkGi7UUKEDuoCglFy9Tb1TE+eVNiGWmfskRy6q9Pioujp2FqrwNm95VAkLFGo NF4iZQda79bgjvAYnA5p4QXgr/5sWZjgsa3Ea9PlRwEvO7C8ndnRE/PTUNwaSmOZsmPH/ksCCnfT DqqehHVnry3K6QIUKhRsoT1m60qv4UKrvrsCAwEAAaOCA0EwggM9MF0GA1UdEQRWMFSBHUFOTkVM SS5BTkRSRVNTT05ARUMuRVVST1BBLkVVpDMwMTEYMBYGCSsGAQQBrGYBAgwJQU5EUkVTU09OMRUw EwYJKwYBBAGsZgEBDAZBTk5FTEkwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0OBBYE FEoUEf+0Oe59fVRs/rW2M0KhmlDsMB8GA1UdIwQYMBaAFEft+GPwma9e/n4OXFjL/uI1N6a9MIHg BgNVHSAEgdgwgdUwgcgGCisGAQQBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cuY2Vy dc5mbm10lmvzl2rwy3mvmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vydglmawnhdguuifvu ZGVyIHRoZSB1c2FnZSBjb25kaXRpb25zIGFzc2VydGVkIGluIHRoZSBGTk1ULVJDTSBDUFMgKDEw NiwgSm9yZ2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgU3BhaW4pLjAIBgYEAIswAQEwgYYG CCsGAQUFBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jc3BJU0FjYS5jZXJ0LmZubXQuZXMv b2nzceltqwnhl09jc3bszxnwb25kzxiwmwyikwybbquhmakgj2h0dha6ly93d3cuy2vydc5mbm10 LmVzL2NlcnRzL0lTQUNBLmNydDBGBggrBgEFBQcBAwQ6MDgwCAYGBACORgEBMAsGBgQAjkYBAwIB DzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHEMIHBMIG+oIG7oIG4 hogibgrhcdovl2xkyxbju0fjys5jzxj0lmzubxquzxmvq049q1jmmixjbj1ju0elmjbdqsxvpuzo TVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnk/YmFzZT9vYmplY3Rj bgfzcz1jukxeaxn0cmlidxrpb25qb2ludiyrahr0cdovl3d3dy5jzxj0lmzubxquzxmvy3jsc19j U0FjYS9DUkwyLmNybDANBgkqhkiG9w0BAQsFAAOCAgEALIKumRPBo9NIYyzm4LSJklE9CmsirJC8 9MPcFiC9+vg4YrO9Mmakr8G5ZAVZf+Zr6HgLcIf93/BSgE4UDFD9mAROPDElqx2ppg1+foIvlqg5 7EiHH2kOS4IYJEJpWCs4IqcBkSKcS5vJ5XVpNJL4elpeMQjsGoqjmkKDr1IeZQVOxOiW/bNhM9Fw 6R1aMMLbnziwAgHWDpmIj2Se74HuS3ca0ctm9fAPp/2Y87bgZ1ETs9A6wc4GxYEuGTwh1HPbDB6t gjsnjh0hy3qbitjb8im0xgvur9dqkt8ez4dvyxcaflycmflaemf8jljov4uu1yrrt9wesij5gcoe 43cy1cuvRMifqYhoi3KPojJaLTV7ASy1X0yuBWyg0jGyvE6aTIAu3XGCwdGYB1WnSzEUPJboqcyJ ydkxxxnbkfchw602pvb0ituqitgh+kfix2mqqf+v0rdewqu3wdadnhc+cqoc7sxkjxko657dyzt/ Ey5MR+gXRm6oK52iXIqjM8kbDqCqAOHVC73u+bUvh0y5B5PjGYuE2K9xK36ooavh5ytF/kY+y0Ju 804CRF00b4wKcibGxplOrU1g+ncONNmBHGbsLULXrum8+fsD3O04Mf0t0O9Mt/ZwAZTa8Cwq/0pq OWdRqucV7pq/A7fEnRb5AdBaAzxqrXVaa92NkScAm80= -----END CERTICATE----- Signature algorithm: SHA256withRSA Issuer CN: ISA CA SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 3

4 Issuer O: FNMT-RCM Issuer C: ES (SIGN) ANNELI ANDRESSON EUROPEAN COMMISSION BE Valid from: Wed Nov 16 16:11:07 CET 2011 Valid to: Mon Nov 16 16:11:07 CET 2015 Public Key: Subject Alternative Name 30:82:01:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:01:0F:00:30:82:01:0A:02:82:01:01:00:CC:3C:F3:57:DB:C4:19:F9:12:AE:B8:1D:FE:A9:A8:4A:A7:D0:89:ED:83:8F:64:E4:3F:84:D8:90:4C:73:27:8E:31:81: 38:5B:0B:B3:56:AB:3B:7E:E2:8C:5F:99:A1:88:5C:3B:96:55:71:E3:64:BB:18:80:E7:29:AE:9A:B1:C1:7B:8A:B2:12:B1:84:C6:3A:D0:FA:74:6B:7C:38:43:90:90:6E:62:DB:8C:31:4F:7C:1E:EB:75:56:D5:6F:CF:10:ED:16:A1: 18:E4:3C:30:6A:82:58:E7:A9:C2:E7:F9:62:4B:AF:76:25:F5:FA:64:C7:24:FE:1F:7A:65:D2:39:C6:90:68:BB:51:42:84:0E:EA:02:82:51:72:F5:36:F5:4C:4F:9E:54:D8:86:5A:67:EC:91:1C:BA:AB:D3:E2:A2:E8:E9:D8:5A:AB:C 0:D9:BD:E5:50:24:2C:51:A8:34:5E:22:65:07:5A:EF:D6:E0:8E:F0:18:9C:0E:69:E1:05:E0:AF:FE:6C:59:98:E0:B1:AD:C4:6B:D3:E5:47:01:2F:3B:B0:BC:9D:D9:D1:13:F3:D3:50:DC:1A:4A:63:99:B2:63:C7:FE:4B:02:0A:77: D3:0E:AA:9E:84:75:67:AF:2D:CA:E9:02:14:2A:14:6C:A1:3D:66:EB:4A:AF:E1:42:AB:BE:BB:02:03:01:00:01 Basic Constraints IsCA: false Subject Key Identifier 4A:14:11:FF:B4:39:EE:7D:7D:54:6C:FE:B5:B6:33:42:A1:9A:50:EC Authority Key Identifier 47:ED:F8:63:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:35:37:A6:BD Certificate Policies Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: Authority Info Access QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl2,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 4

5 Thumbprint: 5D:39:E8:F1:16:69:50:E9:97:38:32:AD:26:6F:06:74:2C:C4:A9:48:48:69:DF:61:EF:CB:84:9D:B2:F C:60:4A X509SubjectName (SIGN) ANNELI ANDRESSON EUROPEAN COMMISSION BE EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTICATE----- MIIHSDCCBTCgAwIBAgIQHaaUHzn5vENUk+T/aHIefTANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQG EwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDEyMTkwODQyMzla Fw0xODEyMTkwODQyMzlaMEwxCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNT SU9OMR8wHQYDVQQDDBYoU0lHTikgQUdOSUVTWktBIEJBSk5PMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAog6nQQcoPlHOrwXYDD+wj38lwn1zbalTTJL7yW3N7OgO9/eSCIY5nGgfnsla pc36vso9rbsxw3cv4cjcf2ngzdszhxnjpf4ig4cesbyui30ugfantbplfj/r5avf0ordgkti2h/6 sn2swgs43grcrfq5yt/zphoigjxjzk4s36ifmbg1ggrqusdjo+uv3cbubcnjdfro3zmm9typdv19 4f1NwXRbFOon1WtaIsJNKzw4+MKCAyD9BBVATQxGLYeCT2tZt3DFbSSXZbBfSnfwGe7eMc99S12H r/mwapjhuwzzpienadvnlmnwxwutxcdo5hrmodtxv8vh9mklawvn4qidaqabo4idpzccazswwwyd VR0RBFQwUoEcQUdOSUVTWktBLkJBSk5PQEVDLkVVUk9QQS5FVaQyMDAxFDASBgkrBgEEAaxmAQIM BUJBSk5PMRgwFgYJKwYBBAGsZgEBDAlBR05JRVNaS0EwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMC BkAwHQYDVR0OBBYEe8EqP5sxbiNrSKwgNC00FsSfkjMB8GA1UdIwQYMBaAFEft+GPwma9e/n4O XFjL/uI1N6a9MIHgBgNVHSAEgdgwgdUwgcgGCisGAQQBrGYDBAEwgbkwKQYIKwYBBQUHAgEWHWh0 dha6ly93d3cuy2vydc5mbm10lmvzl2rwy3mvmiglbggrbgefbqccajb/dh1rdwfsawzpzwqgy2vy dglmawnhdguuifvuzgvyihrozsb1c2fnzsbjb25kaxrpb25zigfzc2vydgvkigluihrozsbgtk1u LVJDTSBDUFMgKDEwNiwgSm9yZ2UgSnVhbiBzdHJlZXQsMjgwMDksIE1hZHJpZCwgU3BhaW4pLjAI BgYEAIswAQEwgYYGCCsGAQUFBwEBBHoweDBBBggrBgEFBQcwAYY1aHR0cDovL29jc3BJU0FjYS5j ZXJ0LmZubXQuZXMvb2NzcElTQWNhL09jc3BSZXNwb25kZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly93 d3cuy2vydc5mbm10lmvzl2nlcnrzl0ltqunblmnyddbgbggrbgefbqcbawq6mdgwcaygbacorgeb MAsGBgQAjkYBAwIBDzAVBgYEAI5GAQIwCxMDRVVSAgECAgECMAgGBgQAjkYBBDCBzAYDVR0fBIHE MIHBMIG+oIG7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5jZXJ0LmZubXQuZXMvQ049Q1JMMSxjbj1J U0ElMjBDQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdDtiaW5hcnk/ YmFzZT9vYmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0cDovL3d3dy5jZXJ0LmZu bxquzxmvy3jsc19ju0fjys9dukwxlmnybdanbgkqhkig9w0baqsfaaocagead2cyyrljkbr+hxmw njwzne9q6nw29ulwx4c/kwfwgnxyjo/mbe2khgxfum7e441ih87px1p8jpteohtfvl8cxmsqydg5 6GBNq5NprbagpmKHiNCP77baZiLMFfEvc915ktLlYQEH+wIe5i0gMPmRWjA2urB/M+fXwLgqQdOE e4e0nslr7yjqhel1swqss4r1zk8zgv1uj0v+vamyxwftayyht/c9x+qtvxyafldcbvnpbxj3xug7 vqhe7g5/rpx4vvzaznv9d5ibk+scx05drfrqsym4qw1sw4j0w2nxafqwk3bfw6np5sgohfc9sh2l rc3f/wlvepy8pitxfukrzlseb8zwm2vfz3qrnggbxcz3dy3kfavdel/gnnhog5q4tn2tvv7yfxle gu7zn+iqbodlatbjxeu60fif9cs35igqwwlbeok8qvogfydxlgiprs3ijea1whyy+gh1mofsa7u3 0wEvooCzohFf4DBv06I4q9aCNBnTo4yki1yFhBm71r60hlAas6aK6TZ+NUoFWwPypMP617SlHdy8 QlFx1s3V+rIt2hxUUGddid/FXDKtuUCRqKqx6x8J8bI7DecZsCS7ijPCApjJ84HB8UASRzdGtEwc 97hvnAqXjpCS/tHAVcVvmP3isNDu4WtV2LQfL/TIY8zMxUebv/E5JyB3KAw= -----END CERTICATE----- Signature algorithm: SHA256withRSA Issuer CN: ISA CA Issuer O: FNMT-RCM Issuer C: ES (SIGN) AGNIESZKA BAJNO EUROPEAN COMMISSION BE Valid from: Fri Dec 19 09:42:39 CET 2014 Valid to: Wed Dec 19 09:42:39 CET 2018 Public Key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rusted List ID: id_for_enveloped_signing_of_the_entire_list Page 5

6 Subject Alternative Name Basic Constraints IsCA: false Subject Key Identifier 87:BC:12:A3:F9:B3:16:E2:36:B4:8A:C2:03:42:D3:41:6C:49:F9:23 Authority Key Identifier 47:ED:F8:63:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:35:37:A6:BD Certificate Policies Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: Authority Info Access QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl1,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: 55:F5:07:DE:3A:84:C6:3F:29:F0:46:93:F7:30:AD:D1:73:CA:DF:A0:9B:76:AB:07:F5:F9:74:84:12: FD:9A:AA X509SubjectName (SIGN) AGNIESZKA BAJNO EUROPEAN COMMISSION BE EU TSL digital identities TSL Scheme Operator certificate fields details Version: 3 SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 6

7 Serial Number: X509 Certificate -----BEGIN CERTICATE----- MIIHYDCCBUigAwIBAgIQLc4fd1CtIihUFtlELwMLDDANBgkqhkiG9w0BAQsFADAxMQswCQYDVQQG EwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDzANBgNVBAMMBklTQSBDQTAeFw0xNDA5MTUxMjE5MTVa Fw0xODA5MTUxMjE5MTVaMFQxCzAJBgNVBAYTAkJFMRwwGgYDVQQKDBNFVVJPUEVBTiBDT01NSVNT SU9OMScwJQYDVQQDDB4oU0lHTikgSk9MQU5EQSBWQU4gRUlKTkRUSE9WRU4wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC0sin8VvNtcuOnUuGDWtXjZlTx5SoZzJiDG4/6bOt3geyPIvqH zci8hslijb1yqjnimglti6blhelr/skf8regueyn/ijgio2/89b82rsfm1r+ehsjklmvuu+kj7uu nhrcdlahgnohmpwide3dixy4jw0rbdjtyewv7cndedoc4le9iuj71zlsphmedtlfldwif0ay/r5b x1vaiapmzxjdicarsqlhnmnpk3yshw+poahzn8tj9vowjhtdsw/ftbnbqaszuk0l2iwd0pxrszso +yw86dx0kan1qsmwxdwz0pax+n39ml2ggug8stirpvlmzdggn6g52msz2grniaulagmbaagjggnp MIIDSzBrBgNVHREEZDBigSRKT0xBTkRBLlZBTi1FSUpORFRIT1ZFTkBFQy5FVVJPUEEuRVWkOjA4 MR4wHAYJKwYBBAGsZgECDA9WQU4gRUlKTkRUSE9WRU4xFjAUBgkrBgEEAaxmAQEMB0pPTEFOREEw CQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBkAwHQYDVR0OBBYEz+jZkpky2xCorjhNpu1m1pDZ76 MB8GA1UdIwQYMBaAFEft+GPwma9e/n4OXFjL/uI1N6a9MIHgBgNVHSAEgdgwgdUwgcgGCisGAQQB rgydbaewgbkwkqyikwybbquhagewhwh0dha6ly93d3cuy2vydc5mbm10lmvzl2rwy3mvmiglbggr BgEFBQcCAjB/DH1RdWFsaWZpZWQgY2VydGlmaWNhdGUuIFVuZGVyIHRoZSB1c2FnZSBjb25kaXRp b25zigfzc2vydgvkigluihrozsbgtk1ulvjdtsbdufmgkdewniwgsm9yz2ugsnvhbibzdhjlzxqs MjgwMDksIE1hZHJpZCwgU3BhaW4pLjAIBgYEAIswAQEwgYYGCCsGAQUFBwEBBHoweDBBBggrBgEF BQcwAYY1aHR0cDovL29jc3BJU0FjYS5jZXJ0LmZubXQuZXMvb2NzcElTQWNhL09jc3BSZXNwb25k ZXIwMwYIKwYBBQUHMAKGJ2h0dHA6Ly93d3cuY2VydC5mbm10LmVzL2NlcnRzL0lTQUNBLmNydDBG BggrBgEFBQcBAwQ6MDgwCAYGBACORgEBMAsGBgQAjkYBAwIBDzAVBgYEAI5GAQIwCxMDRVVSAgEC AgECMAgGBgQAjkYBBDCBzAYDVR0fBIHEMIHBMIG+oIG7oIG4hoGIbGRhcDovL2xkYXBJU0FjYS5j ZXJ0LmZubXQuZXMvQ049Q1JMNixjbj1JU0ElMjBDQSxvPUZOTVQtUkNNLEM9RVM/Y2VydGlmaWNh dgvszxzvy2f0aw9utglzddtiaw5hcnk/ymfzzt9vymply3rjbgfzcz1jukxeaxn0cmlidxrpb25q b2ludiyrahr0cdovl3d3dy5jzxj0lmzubxquzxmvy3jsc19ju0fjys9dukw2lmnybdanbgkqhkig 9w0BAQsFAAOCAgEAYnVYxWe3b57eq6qGlVE9f7tiEPUGqmKm2cXlRLY50Hat4O/dVDv9teyNd/fv cak4uhdhraf+ehoodsm9rtkrkc4vzwiua8xbgjl8nljd1odvgdik0kui7qvqq/x4c9ptyk0ucbw5 MNWyr97UO68rOBNiF+tS2mrOMJqjQS6vX7tf/HOvyPg9dLY/+KiiuijnAFS9+DPJNWQh8UkvSEqg Bkydy0pDFLLOREFHiBY7cOflfjoQm+tKxsPt8Mw/z/p5OLeg8cMyVprtVZ2LohgkJP/Do0SB1lge nlvway7f/7swsgn4y6yd99hb74mkdgreqpbvin5syrgpfzfkyyelz9/q7fhddr3tvxlsdcjlia5+ 5D8iprdw70vstU9p3mMPXCZNvBFSmVeGNDVm2jszt7oD254nj5dm/8tXdXqeq4MEi1wHRposKRc6 pptapfrtcizrlq8brkteka6subeshjyiia0942/zefro/h+cemtqz1zuchos3mwm6qjh0cesz0tm UpHzrNltR5WPo0IKiqqaDxdxN/9OuTId+P5zLRdwsVSduvUm+5krW8Pxn2pkyTg16NN2wLQ7p/Xn sepwbvv2leujt8n0obhvyzvbzsuchbcplqaqxmbig5dpzfxxbygxsumhuf3seoauomhxpm9n2uyf J5fwcoXHZPNI1Uw= -----END CERTICATE----- Signature algorithm: SHA256withRSA Issuer CN: ISA CA Issuer O: FNMT-RCM Issuer C: ES (SIGN) JOLANDA VAN EIJNDTHOVEN EUROPEAN COMMISSION BE Valid from: Mon Sep 15 14:19:15 CEST 2014 Valid to: Sat Sep 15 14:19:15 CEST 2018 Public Key: Subject Alternative Name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asic Constraints IsCA: false Subject Key Identifier 8C:FE:8D:99:29:93:2D:B1:0A:8A:E3:84:DA:6E:D6:6D:69:0D:9E:FA Authority Key Identifier 47:ED:F8:63:F0:99:AF:5E:FE:7E:0E:5C:58:CB:FE:E2:35:37:A6:BD Certificate Policies Policy OID: CPS pointer: CPS text: [Qualified certificate. Under the usage conditions asserted in the FNMT-RCM CPS (106, Jorge Juan street,28009, Madrid, Spain).] Policy OID: SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 7

8 Authority Info Access QCStatements - crit. = false id_etsi_qcs_qccompliance id_etsi_qcs_retentionperiod: 15 id_etsi_qcs_limitevalue Value: 200 Currency: EUR id_etsi_qcs_qcsscd CRL Distribution Points ldap://ldapisaca.cert.fnmt.es/cn=crl6,cn=isa%20ca,o=fnmt- RCM,C=ES?certificateRevocationList;binary?base?objectclass=cRLDistributionPoint Key Usage: nonrepudiation Thumbprint algorithm: SHA-256 Thumbprint: F0:E7:C9:5C:09:A5:F6:79:91:A0:35:3E:BB:DC:E8:20:13:39:49:EB:1F:F5:7E:6D:2D:F9:62:E8:02: A2:E4:0C X509SubjectName (SIGN) JOLANDA VAN EIJNDTHOVEN EUROPEAN COMMISSION BE TSL Type Scheme Operator Name European Commission Scheme Type Community Rules URI [ en ] Scheme Territory EU Mime Type application/vnd.etsi.tsl+xml 2.EU TSL - MimeType: application/pdf TSL Location EU TSL digital identities SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 8

9 TSL Scheme Operator certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTICATE----- MIIFKzCCBBOgAwIBAgISESFCgSJf+NfOVIYHRWWewAm0MA0GCSqGSIb3DQEBCwUAMGYxCzAJBgNV BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNHbG9iYWxTaWduIE9y Z2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcNMTUwMzAzMDg1MTAyWhcN MTgwNDIwMTAwNTA1WjBnMQswCQYDVQQGEwJCRTEQMA4GA1UECBMHQmVsZ2l1bTERMA8GA1UEBxMI QnJ1c3NlbHMxHDAaBgNVBAoTE0V1cm9wZWFuIENvbW1pc3Npb24xFTATBgNVBAMTDGVjLmV1cm9w YS5ldTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFBF1FjO2VA4nIvT3MtXToyfWMN FYRvJc2SIJF3pcZNZcUK9wwNL3j/lOB5+eABCTDShJf8fQgmyEcAU7gXhFw9DFgfnXsmmA1a79zz bs5kwzkmawee4lfsycbjocuuavd79oar4v3yv7gzmvab8nxuqwvecwzqwt6sl+rx0ogh1bbeko9w Q5lbEgRw1MLlyFH2kUieMhjCwO2nQJ9UMTaLu7px4LpZ7tlaVetY7UpMPiGAD34kct1YIoJWJllY bbz7jmalmradlvvu5y6ice4h4j0kdj/l3zliveciorqrx8ngiis1lfnsckvz2sbzjvjvxbqxyaey tzqvwxexdpmcaweaaaocadawgghmma4ga1uddweb/wqeawifodbjbgnvhsaeqjbamd4gbmebdaec AjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAX BgNVHREEEDAOggxlYy5ldXJvcGEuZXUwCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9n c29yz2fuaxphdglvbnzhbhnoytjnmi5jcmwwgaagccsgaqufbwebbigtmigqme0gccsgaqufbzac hkfodhrwoi8vc2vjdxjllmdsb2jhbhnpz24uy29tl2nhy2vydc9nc29yz2fuaxphdglvbnzhbhno YTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3Jn YW5pemF0aW9udmFsc2hhMmcyMB0GA1UdDgQWBBQ9lw0pOEotT5cKTF8vxu3W6ZCUhzAfBgNVHSME GDAWgBSW3mHxvRwWKVMcwMx9O4MAQOYafDANBgkqhkiG9w0BAQsFAAOCAQEArSonov8KbE8+5Vwe wgbhhilhanliirmlvj1siarxvxl6abmmo8cjw2+vtzaqdndkzuy6cnats0y0qkbecs7fvtvp8qqa iv71+jij6idt9r9ij1sundeqwz6mng98ecmvsduzlyieezxh049ta3hranscvrtu7kpt06cgbcjn ondg7yvxx2bs9civbexrqkmppvhwup23hw/iphhmifprmxpq3fa5fkrqnwjw1brblgloqc1mkj7j uvx108khlwa5cgiohctnoh9dfyuqpwqecbrobwdghl4o0ra+bu/z4j85ypob/+f7roqxrfcpv43z Pdg65pNoPppjFDE4TD2bhg== -----END CERTICATE----- Signature algorithm: SHA256withRSA Issuer CN: GlobalSign Organization Validation CA - SHA256 - G2 Issuer O: GlobalSign nv-sa Issuer C: BE ec.europa.eu European Commission Subject L: Brussels Subject ST: Belgium BE Valid from: Tue Mar 03 09:51:02 CET 2015 Valid to: Fri Apr 20 12:05:05 CEST 2018 Public Key: Certificate Policies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olicy OID: CPS pointer: Subject Alternative Name ec.europa.eu Basic Constraints IsCA: false Extended Key Usage id_kp_serverauth CRL Distribution Points SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 9

10 Authority Info Access Subject Key Identifier 3D:97:0D:29:38:4A:2D:4F:97:0A:4C:5F:2F:C6:ED:D6:E9:90:94:87 Authority Key Identifier 96:DE:61:F1:BD:1C:16:29:53:1C:C0:CC:7D:3B:83:00:40:E6:1A:7C Key Usage: digitalsignature - keyencipherment Thumbprint algorithm: SHA-256 Thumbprint: E2:B6:C3:00:9A:FA:80:BC:AB:2E:B5:FE:C5:A2:C4:AE:06:06:AC:A2:05:BA:4E:D6:2F:2F:B7:6C :C1:1E:08:DA X509SubjectName ec.europa.eu European Commission Subject L: Brussels Subject ST: Belgium BE Scheme Operator Name European Commission Scheme Type Community Rules URI [ en ] Scheme Territory EU Mime Type application/pdf TSL Type List Issue Date Time T09:00:00 Next Update date Time T11:00:00 Distribution Points URI URI SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 10

11 1 - TSP: Population Register Centre TSP Name Population Register Centre Name [ fi ] Vaestorekisterikeskus Name [ fi ] VRK TSP Trade Name NTR Vaestorekisterikeskus CA PostalAddress Street Address [ en ] P.O.Box 123 Locality [ en ] Helsinki Postal Code [ en ] Country ElectronicAddress URI mailto:kirjaamo@vrk.fi URI TSP Information URI URI [ en ] Service : VRK Gov. CA for Citizen Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name VRK Gov. CA for Citizen Qualified Certificates Service digital identities SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 11

12 Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTICATE----- MIIFjDCCBHSgAwIBAgIDAYiZMA0GCSqGSIb3DQEBBQUAMIGjMQswCQYDVQQGEwJGSTEQMA4GA1UE CBMHRmlubGFuZDEhMB8GA1UEChMYVmFlc3RvcmVraXN0ZXJpa2Vza3VzIENBMSkwJwYDVQQLEyBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBTZXJ2aWNlczEZMBcGA1UECxMQVmFybWVubmVwYWx2ZWx1 ddezmbcga1ueaxmqvljliedvdi4gum9vdcbdqtaefw0wmzaxmtaxmju5mdvafw0xotaxmdkxmju4 MzBaMIGhMQswCQYDVQQGEwJGSTEQMA4GA1UECBMHRmlubGFuZDEhMB8GA1UEChMYVmFlc3RvcmVr axn0zxjpa2vza3vzienbmsqwigydvqqlextwywx0aw9uigthbnnhbgfpc3zhcm1lbnrlzxqxnza1 BgNVBAMTLlZSSyBHb3YuIENBIGZvciBDaXRpemVuIFF1YWxpZmllZCBDZXJ0aWZpY2F0ZXMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Aj527olxDHOtkQQU+BG1FUs0xOy8Qw2z3Nmg V7yOkYRwi/C7aAbvaye712q8APGiDa+Pf0N/XzQNynWWyzC2krv+fQq5YjGypRbnvciAtGbJQSXB ox58ev6sd5cwlkgmo1ghxsxnu6l9v9xlswluh4xbyvqt+oxfptgjbk5e+71oyc8dl0ku6xmlefup NQZ1Rf3pqqlEfmQjP24ubcgy3ZAHVTFBh7rT66pw+L5zAVPYBCyUG7rdXHS9hulRa4Y8w3BFRBxb ChHsc7tuKk9kQmNGhQAJ7CdJx3V5kPsrxnuztOunimeBKoB5X3wgvk9f64n60Jp0qumnY4l9V6oZ AgMBAAGjggHHMIIBwzASBgNVHRMBAf8ECDAGAQH/AgEAMBEGCWCGSAGG+EIBAQQEAwIBBjCBywYD VR0gBIHDMIHAMIG9BgkqgXaEBQEKAQEwga8wgYQGCCsGAQUFBwICMHgadlZhcm1lbm5lcG9saXRp awtrysbvbibzywf0yxzpbgxhic0gq2vydglmawthdcbwb2xpy3kgzmlubnmglsbdzxj0awzpy2f0 ZSBwb2xpY3kgaXMgYXZhaWxhYmxlIGh0dHA6Ly93d3cuZmluZWlkLmZpL2NwczEwJgYIKwYBBQUH AgEWGmh0dHA6Ly93d3cuZmluZWlkLmZpL2NwczEvMEIGCCsGAQUFBwEBBDYwNDAyBggrBgEFBQcw AoYmaHR0cDovL3Byb3h5LmZpbmVpZC5maS9jYS92cmtyb290Yy5jcnQwDgYDVR0PAQH/BAQDAgHG MB8GA1UdIwQYMBaAFNvp4ZvS0SQL/KvjoGfqrpxLd/SwMDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6 Ly9wcm94eS5maW5laWQuZmkvYXJsL3Zya3Jvb3RhLmNybDAdBgNVHQ4EFgQUiFpvHUJHgob91+kN slfptvaobbcwdqyjkozihvcnaqefbqadggebaexit6ypqo+0rbvtk57skt1jsqe8duiwl8oevvdb ifpr4hxezzy8e/ogavf3hc/hjc8cojlsytoqztg16co4vhz+yc8rwh4tpuwgvks80h//jcweaa yp6e/z0z928vtnilbd34yjqvpu4u7jyhsay3tzybkjlsao5lahii32a9mnzxgonv+j+mkq1njkpg py6/vea5z4rdrx43/ezhs45wvxtfer+nuc1loqngfkosjdwg3ghoah13nm9jyasbtc7onddvobyf zwuoq+bof08r2bvza+2cd8puyqxcfvbmcpqscdvl6teyxewiqb+uiqsfaefjc3aqutnh/uiw8= -----END CERTICATE----- Signature algorithm: SHA1withRSA Issuer CN: VRK Gov. Root CA Issuer OU: Varmennepalvelut Issuer OU: Certification Authority Services Issuer O: Vaestorekisterikeskus CA Issuer ST: Finland Issuer C: VRK Gov. CA for Citizen Qualified Certificates Subject OU: Valtion kansalaisvarmenteet Vaestorekisterikeskus CA Subject ST: Finland Valid from: Fri Jan 10 13:59:05 CET 2003 Valid to: Wed Jan 09 13:58:30 CET 2019 Public Key: Basic Constraints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sCA: true - Path length: 0 SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 12

13 Certificate Policies Policy OID: CPS text: [Varmennepolitiikka on saatavilla - Certifikat policy finns - Certificate policy is available CPS pointer: Authority Info Access Authority Key Identifier DB:E9:E1:9B:D2:D1:24:0B:FC:AB:E3:A0:67:EA:AE:9C:4B:77:F4:B0 CRL Distribution Points Subject Key Identifier 88:5A:6F:1D:42:47:82:86:FD:D7:E9:0D:B2:57:CF:4D:50:28:04:17 Key Usage: digitalsignature - nonrepudiation - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 36:C5:EB:DE:1D:6A:9A:0E:D4:E6:6B:61:4A:0C:7A:21:7A:07:7D:C6:38:EE:70:4F:BF:66:68:44:3 B:59:54:B1 Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T12:00: Service : VRK Gov. CA for Citizen Qualified Certificates - G2 Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name VRK Gov. CA for Citizen Qualified Certificates - G2 Service digital identities Certificate fields details Version: 3 Serial Number: SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 13

14 X509 Certificate -----BEGIN CERTICATE----- MIIGbjCCBVagAwIBAgIDAaqVMA0GCSqGSIb3DQEBBQUAMIGjMQswCQYDVQQGEwJGSTEQMA4GA1UE CBMHRmlubGFuZDEhMB8GA1UEChMYVmFlc3RvcmVraXN0ZXJpa2Vza3VzIENBMSkwJwYDVQQLEyBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBTZXJ2aWNlczEZMBcGA1UECxMQVmFybWVubmVwYWx2ZWx1 ddezmbcga1ueaxmqvljliedvdi4gum9vdcbdqtaefw0xmzexmjexmte0mznafw0ymzeymtcymtu5 NTlaMIGUMQswCQYDVQQGEwJGSTEhMB8GA1UEChMYVmFlc3RvcmVraXN0ZXJpa2Vza3VzIENBMSQw IgYDVQQLExtWYWx0aW9uIGthbnNhbGFpc3Zhcm1lbnRlZXQxPDA6BgNVBAMTM1ZSSyBHb3YuIENB IGZvciBDaXRpemVuIFF1YWxpZmllZCBDZXJ0aWZpY2F0ZXMgLSBHMjCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBANSqdbLnGvekcFhilqkaxVUoKW4X27/4VzwCP5/sQHSCNu1NYskhV86V mux3/fblorz4gmw0mwrhcn3sd9lwi8ldywpef2b+gf4q4sx9j95h3a2fktrwqhipktyudl3d+dli htzq0c4kdym69uhwgucybisndxcwhegldpvyi3yfwxhmdxalz4lt+/hyqhxy+2wxhcfvy8oe1m6h MP9WdvBQIqAVk1HL4y/oA9ZLnbuYHFeh3HuYk6wJM95dQLYh1x6U5C8aOWqaPKpxo/2AkAVpa+cS VGIjsm3exdMDwCJUOGfiUbIQAproI9li0/WbUUsCdmpPKqc+qGGGtNH9dt/f50JZsOYhoj82qk4M 6FAEyOtlUh3Vw4QwSk32UCLOkSY/5WmtWKw/lSRuHyc3R/hDCDAhx0rfd2VIEtNB/iwPSU2ulPDf OP4N0PQ/WTEkfCOzElIxYooajMEJRgrLZUcr1EssKaNZqpi1yR/j47wSD3dVi1wFdwYqje10o301 +EsyMg/h2z8Nxt0pNs8ruVYMH0ZvKy2HCk0UapfEOz+xC7VyymRtRs1qa5bGUpC5pMr87pAzZALt axie7ur55ciyljnka8twjf4r+wvy1rtjjt1yshjeu6to+lnykwsx9ok+okavr/dyfz5omffbsiip v3amulprw0kdz3/h9/yvagmbaagjggg2miibsjasbgnvhrmbaf8ecdagaqh/ageameigccsgaquf BwEBBDYwNDAyBggrBgEFBQcwAoYmaHR0cDovL3Byb3h5LmZpbmVpZC5maS9jYS92cmtyb290Yy5j cnqwgc0ga1udiasbxtcbwjcbvwyjkof2haubchubmigxmigfbggrbgefbqccajb5gndwyxjtzw5u ZXBvbGl0aWlra2Egb24gc2FhdGF2aWxsYSAtIENlcnRpZmlrYXQgcG9saWN5IGZpbm5zIC0gQ2Vy dglmawnhdgugcg9sawn5iglzigf2ywlsywjszsbodhrwoi8vd3d3lmzpbmvpzc5mas9jchmymtan BggrBgEFBQcCARYbaHR0cDovL3d3dy5maW5laWQuZmkvY3BzMjEvMA4GA1UdDwEB/wQEAwIBxjAf BgNVHSMEGDAWgBTb6eGb0tEkC/yr46Bn6q6cS3f0sDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8v chjvehkuzmluzwlklmzpl2fybc92cmtyb290ys5jcmwwhqydvr0obbyefmgvhypfhzqhdyiq/j3d 9bAecNO1MA0GCSqGSIb3DQEBBQUAA4IBAQARZWp+O29NypOOHUgPwk/DIpZ1KcMNNyq2J7dzPUIx ABHfsjv3E8W6ocn7huAoBYpOkfxca/x/WVfKL9PuK/18IovcgUbrO/KJmGLgL5u0+1mASw/Vffbb e0yijqpjsb36amln1zsh+mhjfghji8c8nbbu0ebiyk63pio0//eqhuhjuzgx+j8zlft0rygtm319 SQEzxiYWGaDzV1DzK4ik7ohBwHW4cD2TFPFRIiOT8Ogui5PDfO+y287g44vzt3ea4v4nl0qxQAzK EuDdTpZimjRFzHx9bmQSV5u9bDicmJRwiIOikYqEbVihsKNtue74YOIes3xogMR42HTqUWBh -----END CERTICATE----- Signature algorithm: SHA1withRSA Issuer CN: VRK Gov. Root CA Issuer OU: Varmennepalvelut Issuer OU: Certification Authority Services Issuer O: Vaestorekisterikeskus CA Issuer ST: Finland Issuer C: VRK Gov. CA for Citizen Qualified Certificates - G2 Subject OU: Valtion kansalaisvarmenteet Vaestorekisterikeskus CA Valid from: Thu Nov 21 12:14:33 CET 2013 Valid to: Sun Dec 17 22:59:59 CET 2023 Public Key: Basic Constraints 30:82:02:22:30:0D:06:09:2A:86:48:86:F7:0D:01:01:01:05:00:03:82:02:0F:00:30:82:02:0A:02:82:02:01:00:D4:AA:75:B2:E7:1A:F7:A4:70:58:62:96:A9:1A:C5:55:28:29:6E:17:DB:BF:F8:57:3C:02:3F:9F:EC:40:74:82:36:ED:4 D:62:C9:21:57:CE:95:9A:E5:F7:FC:50:65:A1:1C:F8:18:C5:B4:31:64:47:08:DD:EC:77:D9:56:23:C2:DD:C9:63:DE:7F:60:7E:19:FE:2A:E1:25:FD:8F:DE:47:DD:AD:9F:29:3A:F0:42:12:0F:29:36:2E:0E:5D:DD:F8:32:C8:86:D C:EA:D0:2E:0A:77:23:3A:F5:48:70:82:E0:B2:6C:8B:0D:0F:17:16:1D:E8:0B:74:FB:F2:23:7C:85:59:71:E6:75:70:0B:CF:89:53:FB:F8:58:AA:15:F2:FB:65:97:1D:C1:6F:CB:CA:04:D6:6E:A1:30:FF:56:76:F0:50:22:A0:15:93:5 1:CB:E3:2F:E8:03:D6:4B:9D:BB:98:1C:57:A1:DC:7B:98:93:AC:09:33:DE:5D:40:B6:21:D7:1E:94:E4:2F:1A:39:6A:9A:3C:AA:71:A3:FD:80:90:05:69:6B:E7:12:54:62:23:B2:6D:DE:C5:D3:03:C0:22:54:38:67:E2:51:B2:10:0 2:9A:E8:23:D9:62:D3:F5:9B:51:4B:02:76:6A:4F:2A:A7:3E:A8:61:86:B4:D1:FD:76:DF:DF:E7:42:59:B0:E6:21:A2:3F:36:AA:4E:0C:E8:50:04:C8:EB:65:52:1D:D5:C3:84:30:4A:4D:F6:50:22:CE:91:26:3F:E5:69:AD:58:AC:3 F:95:24:6E:1F:27:37:47:F8:43:08:30:21:C7:4A:DF:77:65:48:12:D3:41:FE:2C:0F:49:4D:AE:94:F0:DF:38:FE:0D:D0:F4:3F:59:31:24:7C:23:B3:12:52:31:62:8A:1A:8C:C1:09:46:0A:CB:65:47:2B:D4:4B:2C:29:A3:59:AA:98:B 5:C9:1F:E3:E3:BC:12:0F:77:55:8B:5C:05:77:06:2A:8D:ED:74:A3:7D:35:F8:4B:32:32:0F:E1:DB:3F:0D:C6:DD:29:36:CF:2B:B9:56:0C:1F:46:6F:2B:2D:87:0A:4D:14:6A:97:C4:3B:3F:B1:0B:B5:72:CA:64:6D:46:CD:6A:6B: 96:C6:52:90:B9:A4:CA:FC:EE:90:33:64:02:ED:6B:12:1E:EE:EA:F9:E4:28:98:2E:39:E4:03:C4:F0:8D:FE:11:F9:65:58:D6:B4:C9:26:DD:58:48:78:DE:53:A4:E8:F8:B9:F2:29:64:B1:F4:E2:BE:38:A6:95:AF:F7:58:15:9E:68:31: F1:41:B2:22:0F:BF:70:26:50:B3:D1:5B:42:83:67:7F:E1:F7:FC:95:02:03:01:00:01 IsCA: true - Path length: 0 Authority Info Access Certificate Policies Policy OID: CPS text: [Varmennepolitiikka on saatavilla - Certifikat policy finns - Certificate policy is available CPS pointer: Authority Key Identifier DB:E9:E1:9B:D2:D1:24:0B:FC:AB:E3:A0:67:EA:AE:9C:4B:77:F4:B0 SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 14

15 CRL Distribution Points Subject Key Identifier C1:AF:1D:8A:5F:1D:9A:87:0D:82:10:FC:9D:DD:F5:B0:1E:70:D3:B5 Key Usage: digitalsignature - nonrepudiation - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status 82:63:C4:EC:2B:EF:EB:26:BD:D8:33:F7:78:73:CC:8E:C5:9D:93:4A:16:28:2C:2B:08:48:CD:A2:A F:DA:8E:B5 Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T12:00: Service : VRK CA for Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name VRK CA for Qualified Certificates Service digital identities Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTICATE----- MIIFejCCBGKgAwIBAgIDAYiaMA0GCSqGSIb3DQEBBQUAMIGjMQswCQYDVQQGEwJGSTEQMA4GA1UE CBMHRmlubGFuZDEhMB8GA1UEChMYVmFlc3RvcmVraXN0ZXJpa2Vza3VzIENBMSkwJwYDVQQLEyBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBTZXJ2aWNlczEZMBcGA1UECxMQVmFybWVubmVwYWx2ZWx1 ddezmbcga1ueaxmqvljliedvdi4gum9vdcbdqtaefw0wmzaxmtqwnzu3mdjafw0xotaxmtmwnzu2 MTBaMIGPMQswCQYDVQQGEwJGSTEQMA4GA1UECBMHRmlubGFuZDEhMB8GA1UEChMYVmFlc3RvcmVr axn0zxjpa2vza3vzienbmr8whqydvqqlexzpcmdhbmlzywf0aw92yxjtzw50zwv0msowkaydvqqd EyFWUksgQ0EgZm9yIFF1YWxpZmllZCBDZXJ0aWZpY2F0ZXMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxGO4peMUc0UklH4cTBXBs8I3/BpGUvNYMSvN9wkMe8zJxW7eLuOAuNrbQUdLE 57hzOOjYY67LP2zGyWCU5codtdpT+M+qTgdohtGZwPw1FyNOp1aiDjjVLCBBKEzxfVWrglzmf4zP IF1jJBKspUuJtjWkdtqcNCeb9ZPV8J9yS6+V7TTUGv63VCx48AfkWegKRHrBJxtby07P4liRpoQg Z4uYy2sD3rHuQnv3ukbx3VxtMKHLAGwzQa/yBPGcFha5IeWnONTx+3YrJYTysKvtE7z302tQvpl+ WFTsOXKhsM7/TEf+EerUqY7P36H/qUvyFsvvzotRP858s4r3eQlRAgMBAAGjggHHMIIBwzASBgNV HRMBAf8ECDAGAQH/AgEAMBEGCWCGSAGG+EIBAQQEAwIBBjCBywYDVR0gBIHDMIHAMIG9BgkqgXaE BQEKAQIwga8wgYQGCCsGAQUFBwICMHgadlZhcm1lbm5lcG9saXRpaWtrYSBvbiBzYWF0YXZpbGxh IC0gQ2VydGlmaWthdCBwb2xpY3kgZmlubnMgLSBDZXJ0aWZpY2F0ZSBwb2xpY3kgaXMgYXZhaWxh YmxlIGh0dHA6Ly93d3cuZmluZWlkLmZpL2NwczIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZmlu ZWlkLmZpL2NwczIvMEIGCCsGAQUFBwEBBDYwNDAyBggrBgEFBQcwAoYmaHR0cDovL3Byb3h5LmZp bmvpzc5mas9jys92cmtyb290yy5jcnqwdgydvr0paqh/baqdaghgmb8ga1udiwqymbaafnvp4zvs 0SQL/KvjoGfqrpxLd/SwMDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9wcm94eS5maW5laWQuZmkv YXJsL3Zya3Jvb3RhLmNybDAdBgNVHQ4EFgQUVBoCN4+OY9+P8DAjSqj8Z1fwU6gwDQYJKoZIhvcN AQEFBQADggEBAF9FRZ3uzOv7VtEy/AudyUgNXmqgt7a2hns6jjGUegvZThpHESJ3SAz1dtIXbmQ1 XM0j8CKb5GRmgBMMbqXgWVEuvw6Jikh0If9TYMtnw0y5QDZig1rmCvwZnz/LR9IkcqU7MdaWFDPO QzDfnZX90cerh+bn9DuHhcZ3xtiy9OwXOVpp8w8rcoVY4+3A1Sn1QmNsEsuxZDoKZiwNZn87IKRj 5h5okh3Tsu8XXtV+Lc4bQnY2mtDA0vMgZ9KJlM6NwrXOc4f9unALJkyX3Ygd2DfvrIKOJlKIm7/c 91Xc9vBW8uGlFDOyzdhhcDYt30Gb1eBcLxxSdkcuIFcIq7cMyvE= -----END CERTICATE----- Signature algorithm: SHA1withRSA Issuer CN: VRK Gov. Root CA Issuer OU: Varmennepalvelut SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 15

16 Issuer OU: Certification Authority Services Issuer O: Vaestorekisterikeskus CA Issuer ST: Finland Issuer C: VRK CA for Qualified Certificates Subject OU: Organisaatiovarmenteet Vaestorekisterikeskus CA Subject ST: Finland Valid from: Tue Jan 14 08:57:02 CET 2003 Valid to: Sun Jan 13 08:56:10 CET 2019 Public Key: Basic Constraints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sCA: true - Path length: 0 Certificate Policies Policy OID: CPS text: [Varmennepolitiikka on saatavilla - Certifikat policy finns - Certificate policy is available CPS pointer: Authority Info Access Authority Key Identifier DB:E9:E1:9B:D2:D1:24:0B:FC:AB:E3:A0:67:EA:AE:9C:4B:77:F4:B0 CRL Distribution Points Subject Key Identifier 54:1A:02:37:8F:8E:63:DF:8F:F0:30:23:4A:A8:FC:67:57:F0:53:A8 Key Usage: digitalsignature - nonrepudiation - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status AE:75:B2:00:65:5E:16:AF:C6:35:01:2C:99:FE:50:3D:C0:70:EA:CA:88:A3:62:E8:2F:D7:40:EA:3C :F3:68:5E Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 16

17 Status Starting Time T12:00: Service : VRK CA for Qualified Certificates - G2 Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name VRK CA for Qualified Certificates - G2 Service digital identities Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTICATE----- MIIGXDCCBUSgAwIBAgIDAaqWMA0GCSqGSIb3DQEBBQUAMIGjMQswCQYDVQQGEwJGSTEQMA4GA1UE CBMHRmlubGFuZDEhMB8GA1UEChMYVmFlc3RvcmVraXN0ZXJpa2Vza3VzIENBMSkwJwYDVQQLEyBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBTZXJ2aWNlczEZMBcGA1UECxMQVmFybWVubmVwYWx2ZWx1 ddezmbcga1ueaxmqvljliedvdi4gum9vdcbdqtaefw0xmzexmjexmziwnthafw0ymzeymtcymtu5 NTlaMIGCMQswCQYDVQQGEwJGSTEhMB8GA1UEChMYVmFlc3RvcmVraXN0ZXJpa2Vza3VzIENBMR8w HQYDVQQLExZPcmdhbmlzYWF0aW92YXJtZW50ZWV0MS8wLQYDVQQDEyZWUksgQ0EgZm9yIFF1YWxp ZmllZCBDZXJ0aWZpY2F0ZXMgLSBHMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL7Z ycxzczlljbrpqh4sz9feqzyzp60vmpz/hqibe+jimwckfhohdi4stnmu0b5vzu8wnhstztehfzwx ddx5axhkdgtzmzwan4k/ule0su+ou7x6dqheubq8tr6hd0thqwylmcjxktidczkkvwwdoojli9jd y6obmtooxcbmtm3rh5pmao0lzod2dbykr17mgyv8riii9zfupphsjqfconv0nekaz+a1gaoufzbn 0MBO5HK7ikM6sDqhXZpiG1/iDyvqdx+RxkaQw/5e3kGIC71OMBlwJWtY7HY+uORD6Jx1OJZE2jfl QI4RdZsin/qsXAwq+5DBk6LO3Oh/GLaXyPOaIIVHOnr7cWdYdlvwWUzpVNaSv9dxx8nal74WT309 TziUQcbbWWhbgzzZa6y7NVfvff5HgpOCll7MAKE9ZITSWfzp7DQyuxaMSy8Uptc+JKROn6Pik++w 40qgvRpE0NmsPHd+4RBasFy+/rSXeMYqnemqDtJgNMvvJJBeBhX3I6Ycpp5/ZZgZo8xdPFXheYgu RuiXBvXe+uZYVF3ZaNqlb7m8/hNu4zr49PeQU6oUufyd7Ph+MgnvdGYKHoRim5jXuzfnbxOitNPZ ohvcmtosx8vkww/ilphdpmuviqbxmflz8hqgcqyjiybon4ame5zvll3dqpck7sogvakak9yjagmb AAGjggG2MIIBsjASBgNVHRMBAf8ECDAGAQH/AgEAMEIGCCsGAQUFBwEBBDYwNDAyBggrBgEFBQcw AoYmaHR0cDovL3Byb3h5LmZpbmVpZC5maS9jYS92cmtyb290Yy5jcnQwgc0GA1UdIASBxTCBwjCB vwyjkof2haubchucmigxmigfbggrbgefbqccajb5gndwyxjtzw5uzxbvbgl0awlra2egb24gc2fh dgf2awxsysatienlcnrpzmlryxqgcg9sawn5igzpbm5zic0gq2vydglmawnhdgugcg9sawn5iglz IGF2YWlsYWJsZSBodHRwOi8vd3d3LmZpbmVpZC5maS9jcHMyMjAnBggrBgEFBQcCARYbaHR0cDov L3d3dy5maW5laWQuZmkvY3BzMjIvMA4GA1UdDwEB/wQEAwIBxjAfBgNVHSMEGDAWgBTb6eGb0tEk C/yr46Bn6q6cS3f0sDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vcHJveHkuZmluZWlkLmZpL2Fy bc92cmtyb290ys5jcmwwhqydvr0obbyeffapv6/wmx5x1i26dupuihmuyinxma0gcsqgsib3dqeb BQUAA4IBAQAMYa0t0OZXcXzRzWG1cby/h/dS8PRoul+FzWmciaC5a/hB2aXDrcLCkKUij6fqhh 0VNRxJP4BVSSnu2edNoUSm9eVvLz9t5Zt9Ci+0P8TCgK2ITOXOtkO3V0hnISCumoLVx/+0kd9tNT zvprm6pqhprt0dlf2jssqevf4su2q2mpcyq8flgvdlbogrvchbqozt6peddpbmq3qff8y/ikzwfa VboLv0AzP9g9SBE2UhXOhaOEEt6+Ybp6m3K8sHSOAwzfY+GJyRdJUwozvF4B6T/NYgw7pnzwSULg NBYVDlY5PXG8COecziIaWUMU+HkzGeCoNBBq/yMZIKrp3Fbd -----END CERTICATE----- Signature algorithm: SHA1withRSA Issuer CN: VRK Gov. Root CA Issuer OU: Varmennepalvelut Issuer OU: Certification Authority Services Issuer O: Vaestorekisterikeskus CA Issuer ST: Finland Issuer C: VRK CA for Qualified Certificates - G2 Subject OU: Organisaatiovarmenteet Vaestorekisterikeskus CA SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 17

18 Valid from: Thu Nov 21 14:20:58 CET 2013 Valid to: Sun Dec 17 22:59:59 CET 2023 Public Key: Basic Constraints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sCA: true - Path length: 0 Authority Info Access Certificate Policies Policy OID: CPS text: [Varmennepolitiikka on saatavilla - Certifikat policy finns - Certificate policy is available CPS pointer: Authority Key Identifier DB:E9:E1:9B:D2:D1:24:0B:FC:AB:E3:A0:67:EA:AE:9C:4B:77:F4:B0 CRL Distribution Points Subject Key Identifier 56:A9:57:AF:D6:31:7E:71:D6:2D:BA:0E:E3:EE:8A:13:14:CA:29:D7 Key Usage: digitalsignature - nonrepudiation - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status A5:DF:C5:AD:09:B2:F6:6A:68:EF:0F:B3:B4:BD:AA:42:AA:3A:DD:6F:3E:7B:BF:CB:DF:D2:7F: C7:CC:D9:F3:D8 Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T12:00: Service : VRK CA for Healthcare Professionals Qualified Certificates Service Type Identifier Service type description [en] A certificate generation service creating and signing qualified certificates based on the identity and other attributes verified by the relevant registration services. Service Name VRK CA for Healthcare Professionals Qualified Certificates Service digital identities SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 18

19 Certificate fields details Version: 3 Serial Number: X509 Certificate -----BEGIN CERTICATE----- MIIFjDCCBHSgAwIBAgIDAaZVMA0GCSqGSIb3DQEBBQUAMIGjMQswCQYDVQQGEwJGSTEQMA4GA1UE CBMHRmlubGFuZDEhMB8GA1UEChMYVmFlc3RvcmVraXN0ZXJpa2Vza3VzIENBMSkwJwYDVQQLEyBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSBTZXJ2aWNlczEZMBcGA1UECxMQVmFybWVubmVwYWx2ZWx1 ddezmbcga1ueaxmqvljliedvdi4gum9vdcbdqtaefw0xmdewmjcxmtqxmjzafw0ymzeymtcxotu5 NTlaMIG0MQswCQYDVQQGEwJGSTEQMA4GA1UECBMHRmlubGFuZDEhMB8GA1UEChMYVmFlc3RvcmVr axn0zxjpa2vza3vzienbmsswkqydvqqleyjuzxj2zxlkzw5odw9sbg9uigftbwf0dgl2yxjtzw50 ZWV0MUMwQQYDVQQDEzpWUksgQ0EgZm9yIEhlYWx0aGNhcmUgUHJvZmVzc2lvbmFscyBRdWFsaWZp ZWQgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+HbiIMhxbvT 7n7lF4DpnO1ICRXEUleN6eo//szmbvONfNaJtjKlz6rYGMlH1m3DNVlCn5RVHkXb9pNCxXYoqBV0 0RO/Ry7nEy0dB/ZVlck80CUIHtK5sYC9RKe0YSa3xQKA5xhPFcy6wxmE6jeqs0r32S+qvbUU5Vej HTfU+cTghwLiE0XLwBTjK5cX8S8gGHsZvgJUvID/g94l6AaOC3xOVSezGWW2VJicMUl1n/dNpjQs yten03trjgwi5tg27wnzvgbqzjwuxwkb+nzag7lcq4wzcb9sp/dg+g5aaeu/jwt7fmabqxxfsjv7 sg0kojcxwkrdhxknrl332qrqywidaqabo4ibtdccabawegydvr0taqh/bagwbgeb/wibadcbywyd VR0gBIHDMIHAMIG9BgkqgXaEBQEKAQcwga8wgYQGCCsGAQUFBwICMHgadlZhcm1lbm5lcG9saXRp awtrysbvbibzywf0yxzpbgxhic0gq2vydglmawthdcbwb2xpy3kgzmlubnmglsbdzxj0awzpy2f0 ZSBwb2xpY3kgaXMgYXZhaWxhYmxlIGh0dHA6Ly93d3cuZmluZWlkLmZpL2NwczYwJgYIKwYBBQUH AgEWGmh0dHA6Ly93d3cuZmluZWlkLmZpL2NwczYvMEIGCCsGAQUFBwEBBDYwNDAyBggrBgEFBQcw AoYmaHR0cDovL3Byb3h5LmZpbmVpZC5maS9jYS92cmtyb290Yy5jcnQwDgYDVR0PAQH/BAQDAgHG MB8GA1UdIwQYMBaAFNvp4ZvS0SQL/KvjoGfqrpxLd/SwMDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6 Ly9wcm94eS5maW5laWQuZmkvYXJsL3Zya3Jvb3RhLmNybDAdBgNVHQ4EFgQUzRt/1lZfBvUKKTJe 6i1snCZYABIwDQYJKoZIhvcNAQEFBQADggEBAGGkQW99duGBicXk4r2Q9tspbIHDbvum7+ARNjxN uttmlxoeqzxha98ai33fy6woq1mmv9wtunfjacvtb5h0hwjmmsweqocs/xvt1mn/+hwvru1el6er f9euafmjmfxss3fwcdry4g/o4yum2dc/mb8ziyz33mm7p0qgycmzxqadcunczezpf2cv/qzhaxgs 7if0sEoNC04KnPg/4WbcqzbwrPaGTd/m+TX4DhY4SyehMCbI3yxwuOK2VHkGKDPRDo2zH5yHL+0M xcu9n7wmuq3n5wxbvl/b+bv+6cclyl0h6c+3sikpesinu9gx2tjf/pco37nbj/rn0jy4uzpred4= -----END CERTICATE----- Signature algorithm: SHA1withRSA Issuer CN: VRK Gov. Root CA Issuer OU: Varmennepalvelut Issuer OU: Certification Authority Services Issuer O: Vaestorekisterikeskus CA Issuer ST: Finland Issuer C: VRK CA for Healthcare Professionals Qualified Certificates Subject OU: Terveydenhuollon ammattivarmenteet Vaestorekisterikeskus CA Subject ST: Finland Valid from: Wed Oct 27 13:41:26 CEST 2010 Valid to: Sun Dec 17 20:59:59 CET 2023 Public Key: Basic Constraints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sCA: true - Path length: 0 SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 19

20 Certificate Policies Policy OID: CPS text: [Varmennepolitiikka on saatavilla - Certifikat policy finns - Certificate policy is available CPS pointer: Authority Info Access Authority Key Identifier DB:E9:E1:9B:D2:D1:24:0B:FC:AB:E3:A0:67:EA:AE:9C:4B:77:F4:B0 CRL Distribution Points Subject Key Identifier CD:1B:7F:D6:56:5F:06:F5:0A:29:32:5E:EA:2D:6C:9C:26:58:00:12 Key Usage: digitalsignature - nonrepudiation - keycertsign - crlsign Thumbprint algorithm: SHA-256 Thumbprint: Service Status C2:73:FA:D0:43:93:0E:B4:F5:F5:20:2F:5A:92:EA:D9:35:15:7F:DD:73:E2:9F:80:7A:95:B0:E4:2C: 16:0F:99 Service status description [en] The service identified in "Service digital identity" provided by the trust service provider identified in "TSP name" is currently under supervision, for compliance with the provisions laid down in the applicable European legislation, by the Member State identified in the "Scheme territory" in which the trust service provider is established. Status Starting Time T12:00:00 SUOMI/NLAND (NLAND) - Trusted List ID: id_for_enveloped_signing_of_the_entire_list Page 20