[p11-kit-object-v1]
label: "BJCA Global Root CA2"
class: x-certificate-extension
object-id: 2.5.29.37
value: "0%16%06%03U%1d%25%01%01%ff%04%0c0%0a%06%08%2b%06%01%05%05%07%03%01"
modifiable: false
-----BEGIN PUBLIC KEY-----
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEncuAkY1TZ7W5ULED+OVJH0EiCbBRUljW
KzSPxRJGFMWLLyyE/yxuqNXxCeMDIRTEQz18wSzES2pKzemH4H32Ir76SlG4MIr9
4d4YEgr2R7fnF78nitRBTJY8YJbB/RUc
-----END PUBLIC KEY-----

[p11-kit-object-v1]
label: "BJCA Global Root CA2"
trusted: true
nss-mozilla-ca-policy: true
modifiable: false
nss-server-distrust-after: "%00"
nss-email-distrust-after: "%00"
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
#Certificate:
#    Data:
#        Version: 3 (0x2)
#        Serial Number:
#            2c:17:08:7d:64:2a:c0:fe:85:18:59:06:cf:b4:4a:eb
#        Signature Algorithm: ecdsa-with-SHA384
#        Issuer: C=CN, O=BEIJING CERTIFICATE AUTHORITY, CN=BJCA Global Root CA2
#        Validity
#            Not Before: Dec 19 03:18:21 2019 GMT
#            Not After : Dec 12 03:18:21 2044 GMT
#        Subject: C=CN, O=BEIJING CERTIFICATE AUTHORITY, CN=BJCA Global Root CA2
#        Subject Public Key Info:
#            Public Key Algorithm: id-ecPublicKey
#                Public-Key: (384 bit)
#                pub:
#                    04:9d:cb:80:91:8d:53:67:b5:b9:50:b1:03:f8:e5:
#                    49:1f:41:22:09:b0:51:52:58:d6:2b:34:8f:c5:12:
#                    46:14:c5:8b:2f:2c:84:ff:2c:6e:a8:d5:f1:09:e3:
#                    03:21:14:c4:43:3d:7c:c1:2c:c4:4b:6a:4a:cd:e9:
#                    87:e0:7d:f6:22:be:fa:4a:51:b8:30:8a:fd:e1:de:
#                    18:12:0a:f6:47:b7:e7:17:bf:27:8a:d4:41:4c:96:
#                    3c:60:96:c1:fd:15:1c
#                ASN1 OID: secp384r1
#                NIST CURVE: P-384
#        X509v3 extensions:
#            X509v3 Subject Key Identifier: 
#                D2:4A:B1:51:7F:06:F0:D1:82:1F:4E:6E:5F:AB:83:FC:48:D4:B0:91
#            X509v3 Basic Constraints: critical
#                CA:TRUE
#            X509v3 Key Usage: critical
#                Certificate Sign, CRL Sign
#    Signature Algorithm: ecdsa-with-SHA384
#    Signature Value:
#        30:65:02:30:1a:bc:5b:d7:fe:a9:d2:54:0e:4a:5d:d2:6d:b1:
#        40:dc:f4:43:d5:d2:4a:99:19:12:56:80:f7:83:34:e1:35:4e:
#        48:6d:04:0f:57:31:30:30:2d:b1:aa:9d:03:38:db:06:02:31:
#        00:cb:cc:87:53:cb:7a:df:20:51:73:90:c0:a8:5b:61:d0:c5:
#        50:39:fd:85:fe:c1:e3:78:f8:a6:d6:4b:bd:9b:87:8f:0f:e5:
#        d6:53:96:ab:3c:c8:40:da:61:f7:53:a3:f7