Trust Directory
Independent public mirror of national PKI trust anchors, not an authority. Certificates are published by each national PKI (e.g., BCCR for Costa Rica); this site mirrors and structures them.

Finland

Published by Liikenne- ja viestintävirasto (Traficom) — Finnish Transport and Communications Agency, Finland's eIDAS supervisory body and national Trusted List scheme operator

Certificates
12
Roots
0
Intermediates
12
did:pki
12
Updated
Model
Accredited CAs (ETSI Trusted List)
Governing law
Reglamento eIDAS (UE) 910/2014 · Laki vahvasta sähköisestä tunnistamisesta ja sähköisistä luottamuspalveluista (617/2009)
Key algorithms
RSA-4096, EC P-384
Signature standards
CAdESPAdESXAdESASiC
CapabilitiesQualified e-signature & e-seal (eIDAS)Qualified timestampingQualified website authentication (QWAC / PSD2)

Finland's qualified-signature trust is anchored in the FINeID public-sector PKI operated by Digi- ja väestötietovirasto (DVV), the Digital and Population Data Services Agency (formerly Väestörekisterikeskus, VRK), and supervised by Liikenne- ja viestintävirasto (Traficom), the Finnish Transport and Communications Agency acting as Finland's eIDAS supervisory body and national Trusted List scheme operator, publishing the Finnish national eIDAS Trusted List (fi-tl-v6.xml, ETSI TS 119 612). The 12 currently-granted CA certificates were promoted wholesale after verifying the Trusted List's XAdES signature through the EU LOTL chain of trust: the LOTL signature was checked against the pinned European Commission signing anchor, and the Finnish TSL's signature (signer: C=FI, O=Liikenne- ja viestintävirasto, CN=SchemeOperator II; cert SHA-256 ba5cc469d6212114800e63ad770f0aa58a1ba0db54c76d32fdab33061153fd7d) against the identity the LOTL declares for Finland, so the list's single seal vouches for every certificate it contains (eIDAS Art. 22). Only services with a currently-granted status and a CA / qualified-certificate service type were selected; withdrawn, deprecated, and non-CA services were dropped. Verification evidence is in VERIFICATION.md. Key algorithms across the set are mixed: 8 CAs use RSA-4096 and 4 use EC P-384. All 12 entries are the DVV/VRK issuing CAs (citizen, organisational, service-provider, and social-welfare & healthcare certificates); the self-signed DVV Gov. Root CA - G3 and VRK Gov. Root CA - G2 that issue them are not carried by the list and must be sourced separately if root-anchored path building is required.

  • DVV Citizen Certificates - G4E

    Intermediate CAValid (5399 days left)
    Issuer
    DVV Gov. Root CA - G3 ECC
    Valid
    to
    Serial
    0179a35efb…0b2aa3
    SHA-256
    aad1beac46…13197924d7

    Issuer "DVV Gov. Root CA - G3 ECC" is not present in this mirror, so the chain cannot be fully resolved here.

  • DVV Citizen Certificates - G4R

    Intermediate CAValid (5399 days left)
    Issuer
    DVV Gov. Root CA - G3 RSA
    Valid
    to
    Serial
    0179a35977…18a576
    SHA-256
    2176c05e69…cc03b82064

    Issuer "DVV Gov. Root CA - G3 RSA" is not present in this mirror, so the chain cannot be fully resolved here.

  • DVV Organisational Certificates - G4E

    Intermediate CAValid (5399 days left)
    Issuer
    DVV Gov. Root CA - G3 ECC
    Valid
    to
    Serial
    0179a3670f…0103ae
    SHA-256
    8fdbdccb58…48bbc230d4

    Issuer "DVV Gov. Root CA - G3 ECC" is not present in this mirror, so the chain cannot be fully resolved here.

  • DVV Organisational Certificates - G4R

    Intermediate CAValid (5399 days left)
    Issuer
    DVV Gov. Root CA - G3 RSA
    Valid
    to
    Serial
    0179a3638f…66a89d
    SHA-256
    dfc3e96517…856984006f

    Issuer "DVV Gov. Root CA - G3 RSA" is not present in this mirror, so the chain cannot be fully resolved here.

  • DVV Service Certificates - G5E

    Intermediate CAValid (5399 days left)
    Issuer
    DVV Gov. Root CA - G3 ECC
    Valid
    to
    Serial
    0179a39cdd…650e56
    SHA-256
    93c176167e…6126b6c7ba

    Issuer "DVV Gov. Root CA - G3 ECC" is not present in this mirror, so the chain cannot be fully resolved here.

  • DVV Service Certificates - G5R

    Intermediate CAValid (5399 days left)
    Issuer
    DVV Gov. Root CA - G3 RSA
    Valid
    to
    Serial
    0179a399c4…87192f
    SHA-256
    46319c6904…63e3f3be31

    Issuer "DVV Gov. Root CA - G3 RSA" is not present in this mirror, so the chain cannot be fully resolved here.

  • VRK CA for Service Providers - G4

    Intermediate CAValid (4285 days left)
    Issuer
    VRK Gov. Root CA - G2
    Valid
    to
    Serial
    030d45
    SHA-256
    1bd3870b84…7c7ab35c9d

    Issuer "VRK Gov. Root CA - G2" is not present in this mirror, so the chain cannot be fully resolved here.

  • VRK Gov. CA for Citizen Certificates - G3

    Intermediate CAValid (4285 days left)
    Issuer
    VRK Gov. Root CA - G2
    Valid
    to
    Serial
    030d43
    SHA-256
    39a835b14b…dff20384e8

    Issuer "VRK Gov. Root CA - G2" is not present in this mirror, so the chain cannot be fully resolved here.