Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ec:fb:49:d0:72:43:74:c9:c8:3d:c2:8f:a3:9e:f8
        Signature Algorithm: ecdsa-with-SHA256
        Issuer:
            organizationName = GSM Association
            commonName = GSM Association - RSP2 Root CI1
        Validity
            Not Before: Mar 28 00:00:00 2019 GMT
            Not After : Mar 27 23:59:59 2049 GMT
        Subject:
            countryName = CN
            organizationName = Giesecke & Devrient (China) Information Technologies Co., Ltd.
            organizationalUnitName = MOBILE SECURITY
            commonName = LIVE EUM for RSP
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:f6:87:70:2c:1c:7c:93:5d:97:c3:05:a2:6e:db:
                    21:c6:53:a5:00:2c:6e:f1:24:e6:27:e9:fa:be:7b:
                    1b:84:86:e5:ba:a5:74:df:83:ee:eb:bf:79:e1:6d:
                    4b:e4:82:20:cf:b6:aa:b6:8c:f9:26:b5:2a:c5:13:
                    7b:db:54:65:fe
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FD:14:6C:7A:4B:87:43:1F:65:67:C8:F5:87:A0:4E:1D:F9:3E:D9:DF
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://gsma-crl.symauth.com/offlineca/gsma-rsp2-root-ci1.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Name Constraints: critical
                Permitted:
                  DirName:O = "Giesecke & Devrient (China) Information Technologies Co., Ltd.", serialNumber = 89049032
                  DirName:O = "Giesecke & Devrient (China) Information Technologies Co., Ltd.", serialNumber = 89049038
            X509v3 Subject Alternative Name: 
                Registered ID:1.3.6.1.4.1.11791.104.1.5
            X509v3 Authority Key Identifier: 
                81:37:0F:51:25:D0:B1:D4:08:D4:C3:B2:32:E6:D2:5E:79:5B:EB:FB
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:46:02:21:00:ad:e5:cb:c3:0c:2a:a2:92:6e:09:d8:1e:0f:
        7a:53:a0:46:e5:d1:c0:67:68:a4:66:35:76:05:f6:b2:e5:26:
        17:02:21:00:d8:34:20:38:21:40:b8:cc:17:44:7a:0f:03:dd:
        e3:19:78:97:a2:2e:70:c4:8f:f1:91:67:c5:7e:b4:98:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----