Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e8:90:c6:c5:53:a5:dc:d5:35:c2:4d:ec:a2:2e:3c
        Signature Algorithm: ecdsa-with-SHA256
        Issuer:
            organizationName = GSM Association
            commonName = GSM Association - RSP2 Root CI1
        Validity
            Not Before: Apr 27 00:00:00 2017 GMT
            Not After : Apr 26 23:59:59 2047 GMT
        Subject:
            countryName = DE
            localityName = Munich
            organizationName = Giesecke & Devrient GmbH
            organizationalUnitName = Mobile Security
            commonName = G&D RSP V2 EUM
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:50:b2:4c:51:c2:f6:41:ed:88:45:ca:45:9d:b1:
                    82:1e:d2:24:a7:cc:4d:3d:22:5a:44:e7:70:f3:7d:
                    30:ad:ec:6a:ee:c8:12:78:e1:a4:ab:a9:c6:d4:42:
                    e5:ec:fe:43:db:ee:f6:d9:12:ec:4c:86:e5:84:b7:
                    a4:b2:be:da:ff
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://gsma-crl.symauth.com/offlineca/gsma-rsp2-root-ci1.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Name Constraints: critical
                Permitted:
                  DirName:O = Giesecke & Devrient GmbH, serialNumber = 89049032
            X509v3 Subject Alternative Name: 
                Registered ID:1.3.6.1.4.1.11791.104.1.1
            X509v3 Subject Key Identifier: 
                ED:27:00:86:83:F5:91:4A:78:44:92:0B:F4:7D:E9:70:CB:4B:14:B3
            X509v3 Authority Key Identifier: 
                81:37:0F:51:25:D0:B1:D4:08:D4:C3:B2:32:E6:D2:5E:79:5B:EB:FB
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:20:6c:6b:07:8e:ff:4c:a3:2e:c3:45:65:b8:d3:c0:
        8a:69:e5:00:11:ee:fe:fb:7d:d7:c6:87:7d:c4:82:0f:a9:26:
        02:21:00:ea:47:fa:4d:7b:22:38:ca:0b:07:21:ab:d2:03:17:
        ef:bc:b2:7a:93:46:fe:dd:ac:d6:a4:16:c5:3c:6d:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----