HTTP/1.0 302 Moved Temporarily
Location: https://saml-idp.op.fi/
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, must-revalidate
Connection: close
Content-Type: text/html; charset=utf-8
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 48668
Set-Cookie: Secure; HttpOnly; Secure

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:1a:0c:e6:b6:6f:0b:a0:54:78:c7:7a:ae:7d:21
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2014 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1M
        Validity
            Not Before: May 22 10:42:30 2024 GMT
            Not After : Jun 21 10:42:29 2025 GMT
        Subject: C=FI, L=Helsinki/jurisdictionC=FI, O=OP Osuuskunta/businessCategory=Private Organization/serialNumber=0242522-1, CN=saml-idp.op.fi
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:50:0a:4b:8f:a8:ee:a8:c2:83:0c:db:6b:
                    71:04:2f:29:21:24:95:46:94:f5:4c:db:07:67:d3:
                    fe:13:65:89:2d:9a:0a:6d:f7:47:78:a0:79:af:e8:
                    76:56:93:50:eb:36:fa:5f:6c:07:84:3b:3a:85:fa:
                    3b:48:97:92:5b:80:75:76:fe:f8:6c:7c:d3:9c:6f:
                    f4:82:5e:73:8e:0e:51:ba:ca:67:41:e1:e6:24:7d:
                    5e:bc:96:9f:33:af:ea:7d:f1:79:e1:a0:e2:58:70:
                    4e:d6:84:d4:a2:30:9c:4e:20:9a:30:4a:86:2f:ab:
                    d8:94:a9:a3:e6:3e:ba:c0:78:d4:8d:5f:5a:d3:8f:
                    b6:07:e9:f3:12:a9:e3:1b:c4:77:fc:59:7b:eb:1c:
                    64:7f:63:88:f2:29:c2:4f:90:e2:10:09:1b:ee:59:
                    52:19:85:ac:85:2d:4a:d3:af:2c:fa:d5:f6:aa:be:
                    b1:a8:5b:83:0e:4c:74:f8:4a:23:cd:6e:fb:88:17:
                    e2:a4:28:1a:70:7d:c2:46:c0:ae:6f:03:01:69:87:
                    33:f7:ed:d7:68:28:01:e6:6d:89:2a:27:03:8e:42:
                    92:8c:b1:34:93:57:db:d0:b9:ff:a6:36:1f:89:13:
                    f3:14:25:a4:cd:7e:5a:b7:ed:c6:6f:fd:b5:0f:28:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FE:A6:13:00:EB:CE:A2:4D:CD:B8:83:A8:C9:6A:FF:8C:81:0F:B4:5E
            X509v3 Authority Key Identifier: 
                C3:F7:D0:B5:2A:30:AD:AF:0D:91:21:70:39:54:DD:BC:89:70:C7:3A
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1m-chain256.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.entrust.net/level1m.crl
            X509v3 Subject Alternative Name: 
                DNS:saml-idp.op.fi, DNS:www.saml-idp.op.fi
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 2.16.840.1.114028.10.1.2
                  CPS: https://www.entrust.net/rpa
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : May 22 10:42:30.478 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AD:54:72:A1:DA:6D:CC:20:20:4D:23:
                                04:1F:7D:4F:E8:C5:2D:5D:4F:3A:0C:2C:5D:B4:E7:9A:
                                36:35:C6:B0:30:02:21:00:E0:BA:89:4F:5E:4A:73:BF:
                                F1:B5:5C:8A:9B:11:08:A0:40:91:8D:CB:FA:EB:3D:8B:
                                E7:9E:BD:78:F6:B3:7F:2A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E0:92:B3:FC:0C:1D:C8:E7:68:36:1F:DE:61:B9:96:4D:
                                0A:52:78:19:8A:72:D6:72:C4:B0:4D:A5:6D:6F:54:04
                    Timestamp : May 22 10:42:30.581 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E7:63:37:C9:3D:39:CB:90:EA:41:41:
                                C0:E7:10:37:51:6E:F7:84:B1:9B:54:B9:29:76:45:BD:
                                F5:DC:F7:32:44:02:20:0D:A8:C2:F9:28:C5:13:E2:F9:
                                C4:EB:D4:1C:B9:16:B1:23:7C:EA:A5:AB:E3:4F:37:97:
                                C9:85:EE:51:F9:9E:DB
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : May 22 10:42:30.567 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:58:CB:1B:91:02:C9:17:40:9E:1E:EF:BE:
                                62:0D:C2:90:82:12:10:B4:65:2E:FB:49:B0:02:FC:DB:
                                E4:DB:87:86:02:20:0F:2E:1E:1D:95:1E:D0:23:6B:F9:
                                85:74:99:82:6D:A5:A4:5B:B2:A1:EE:6A:90:DF:13:5D:
                                A9:6B:58:CA:3D:C8
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        cf:52:87:7e:8d:63:bb:92:2b:d3:c6:da:65:92:c4:59:0f:e4:
        36:b7:b6:14:47:bf:b9:53:e9:50:c5:ec:e9:ab:c5:a6:c6:87:
        91:44:1b:12:60:8d:ff:75:22:49:d7:52:a9:b9:6e:3a:9b:23:
        b6:a9:2e:78:87:58:f5:46:19:e1:1e:a6:2e:6d:dd:c0:43:0c:
        8d:14:ac:3d:79:3d:1f:d5:1b:d5:a0:cc:24:c2:d7:6c:60:07:
        8b:ae:e2:63:f2:7e:e0:c6:12:43:e9:81:b4:3c:ee:b5:bb:30:
        d9:3b:3a:00:fc:fa:15:2c:b8:dd:33:cd:b2:ae:f9:2f:7b:73:
        fc:33:54:99:94:17:78:1b:1f:04:ba:ea:0e:0c:a3:fd:16:33:
        41:3c:aa:66:e7:6c:5b:93:9f:b2:c2:d0:fb:96:24:ea:51:3e:
        e3:6b:4a:37:81:1d:7b:ed:d9:67:fc:5b:69:d7:d0:0c:bc:9c:
        34:90:b9:d6:3f:50:23:a4:25:48:e0:b4:50:9f:75:4a:30:6f:
        d4:0e:c6:6b:3f:aa:d4:b8:69:b0:78:09:cd:49:0d:d6:ea:39:
        92:a1:23:b6:06:c9:86:ce:dd:03:e5:be:38:2a:85:e2:84:f2:
        cb:58:c3:8b:98:64:cb:88:d6:6f:1b:48:8e:7d:44:d8:e2:ab:
        aa:c7:53:e2