[p11-kit-object-v1]
label: "ISRG Root X2"
class: x-certificate-extension
object-id: 2.5.29.37
value: "0%16%06%03U%1d%25%01%01%ff%04%0c0%0a%06%08%2b%06%01%05%05%07%03%01"
modifiable: false
-----BEGIN PUBLIC KEY-----
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0H
ttwW+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7
AlF9ItgKbppbd9/w+kHsOdx1ymgHDB/q
-----END PUBLIC KEY-----

[p11-kit-object-v1]
label: "ISRG Root X2"
trusted: true
nss-mozilla-ca-policy: true
modifiable: false
nss-server-distrust-after: "%00"
nss-email-distrust-after: "%00"
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
#Certificate:
#    Data:
#        Version: 3 (0x2)
#        Serial Number:
#            41:d2:9d:d1:72:ea:ee:a7:80:c1:2c:6c:e9:2f:87:52
#        Signature Algorithm: ecdsa-with-SHA384
#        Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X2
#        Validity
#            Not Before: Sep  4 00:00:00 2020 GMT
#            Not After : Sep 17 16:00:00 2040 GMT
#        Subject: C=US, O=Internet Security Research Group, CN=ISRG Root X2
#        Subject Public Key Info:
#            Public Key Algorithm: id-ecPublicKey
#                Public-Key: (384 bit)
#                pub:
#                    04:cd:9b:d5:9f:80:83:0a:ec:09:4a:f3:16:4a:3e:
#                    5c:cf:77:ac:de:67:05:0d:1d:07:b6:dc:16:fb:5a:
#                    8b:14:db:e2:71:60:c4:ba:45:95:11:89:8e:ea:06:
#                    df:f7:2a:16:1c:a4:b9:c5:c5:32:e0:03:e0:1e:82:
#                    18:38:8b:d7:45:d8:0a:6a:6e:e6:00:77:fb:02:51:
#                    7d:22:d8:0a:6e:9a:5b:77:df:f0:fa:41:ec:39:dc:
#                    75:ca:68:07:0c:1f:ea
#                ASN1 OID: secp384r1
#                NIST CURVE: P-384
#        X509v3 extensions:
#            X509v3 Key Usage: critical
#                Certificate Sign, CRL Sign
#            X509v3 Basic Constraints: critical
#                CA:TRUE
#            X509v3 Subject Key Identifier: 
#                7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
#    Signature Algorithm: ecdsa-with-SHA384
#    Signature Value:
#        30:65:02:30:7b:79:4e:46:50:84:c2:44:87:46:1b:45:70:ff:
#        58:99:de:f4:fd:a4:d2:55:a6:20:2d:74:d6:34:bc:41:a3:50:
#        5f:01:27:56:b4:be:27:75:06:af:12:2e:75:98:8d:fc:02:31:
#        00:8b:f5:77:6c:d4:c8:65:aa:e0:0b:2c:ee:14:9d:27:37:a4:
#        f9:53:a5:51:e4:29:83:d7:f8:90:31:5b:42:9f:0a:f5:fe:ae:
#        00:68:e7:8c:49:0f:b6:6f:5b:5b:15:f2:e7