[p11-kit-object-v1]
label: "Atos TrustedRoot Root CA ECC TLS 2021"
class: x-certificate-extension
object-id: 2.5.29.37
value: "0%16%06%03U%1d%25%01%01%ff%04%0c0%0a%06%08%2b%06%01%05%05%07%03%01"
modifiable: false
-----BEGIN PUBLIC KEY-----
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEloZYKDcKZ9Cg3iQZGeHkBQcfl+3oZIK5
9sRxUM6KDP/XtXa7oWyTbIOiaG6l2b4siJVBzV3dscqDY4PMwL502eCdpO5KTlbg
mClBk1IQ1SQ4AjJn8ZQSb+/Xxd4u/RmA
-----END PUBLIC KEY-----

[p11-kit-object-v1]
label: "Atos TrustedRoot Root CA ECC TLS 2021"
trusted: true
nss-mozilla-ca-policy: true
modifiable: false
nss-server-distrust-after: "%00"
nss-email-distrust-after: "%00"
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
#Certificate:
#    Data:
#        Version: 3 (0x2)
#        Serial Number:
#            3d:98:3b:a6:66:3d:90:63:f7:7e:26:57:38:04:ef:00
#        Signature Algorithm: ecdsa-with-SHA384
#        Issuer: CN=Atos TrustedRoot Root CA ECC TLS 2021, O=Atos, C=DE
#        Validity
#            Not Before: Apr 22 09:26:23 2021 GMT
#            Not After : Apr 17 09:26:22 2041 GMT
#        Subject: CN=Atos TrustedRoot Root CA ECC TLS 2021, O=Atos, C=DE
#        Subject Public Key Info:
#            Public Key Algorithm: id-ecPublicKey
#                Public-Key: (384 bit)
#                pub:
#                    04:96:86:58:28:37:0a:67:d0:a0:de:24:19:19:e1:
#                    e4:05:07:1f:97:ed:e8:64:82:b9:f6:c4:71:50:ce:
#                    8a:0c:ff:d7:b5:76:bb:a1:6c:93:6c:83:a2:68:6e:
#                    a5:d9:be:2c:88:95:41:cd:5d:dd:b1:ca:83:63:83:
#                    cc:c0:be:74:d9:e0:9d:a4:ee:4a:4e:56:e0:98:29:
#                    41:93:52:10:d5:24:38:02:32:67:f1:94:12:6f:ef:
#                    d7:c5:de:2e:fd:19:80
#                ASN1 OID: secp384r1
#                NIST CURVE: P-384
#        X509v3 extensions:
#            X509v3 Basic Constraints: critical
#                CA:TRUE
#            X509v3 Subject Key Identifier: 
#                76:28:25:D6:7D:E0:66:9A:7A:09:B2:6A:3B:8E:33:D7:36:D3:4F:A2
#            X509v3 Key Usage: critical
#                Digital Signature, Certificate Sign, CRL Sign
#    Signature Algorithm: ecdsa-with-SHA384
#    Signature Value:
#        30:65:02:30:5b:99:29:f3:9c:31:b6:89:6b:6c:d6:bd:77:e1:
#        7c:e7:51:7e:b8:3a:cd:a3:36:5f:7c:f7:3c:77:3e:e4:50:ad:
#        a8:e7:d2:59:0c:26:8e:30:3b:6e:08:2a:c2:a7:5a:c8:02:31:
#        00:99:e3:0c:e7:a3:c3:af:d3:49:2e:46:82:23:66:5d:c9:00:
#        14:12:fd:38:f4:e1:98:6b:77:29:7a:db:24:cf:65:40:bf:d2:
#        dc:8c:11:e8:f4:7d:7f:20:84:a9:42:e4:28