Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:ea:fe:09:8e:ae:ac:88:23:2e:0c:56:e3:18:17
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: O=GSM Association, CN=GSM Association - RSP2 Root CI1
        Validity
            Not Before: May  1 00:00:00 2018 GMT
            Not After : Apr 30 23:59:59 2048 GMT
        Subject: C=DE, L=Munich, O=Giesecke Devrient Mobile Security GmbH, OU=Mobile Security, CN=Iron RSP V2 EUM
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:6b:57:84:37:20:33:78:c5:80:a2:59:8d:b8:18:
                    cf:5d:e7:86:e1:f8:c0:16:68:95:ad:78:e7:9c:ba:
                    2f:81:25:5a:85:1b:fe:cb:ae:7c:f9:38:59:0b:02:
                    7b:56:8c:09:3b:6a:25:93:e2:7e:21:b8:17:ef:86:
                    b3:26:0a:29:d2
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                62:12:90:3B:D9:76:B3:C0:69:DF:1F:CA:48:30:A2:4E:F1:43:B2:89
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://gsma-crl.symauth.com/offlineca/gsma-rsp2-root-ci1.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Name Constraints: critical
                Permitted:
                  DirName:O = Giesecke & Devrient GmbH, serialNumber = 89049032
            X509v3 Subject Alternative Name: 
                Registered ID:1.3.6.1.4.1.11791.104.1.1
            X509v3 Authority Key Identifier: 
                81:37:0F:51:25:D0:B1:D4:08:D4:C3:B2:32:E6:D2:5E:79:5B:EB:FB
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:20:78:d0:3c:55:43:a9:37:12:01:66:cb:1e:72:db:
        86:be:a8:9f:58:4e:0b:82:51:43:eb:1f:0a:e8:21:bb:72:9f:
        02:21:00:ee:db:fa:40:3f:95:0e:f6:3c:da:93:0a:ee:47:17:
        c6:79:62:aa:a0:96:1e:9c:5a:dd:ad:57:3a:b0:39:ba:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----