[p11-kit-object-v1]
label: "Telekom Security TLS ECC Root 2020"
class: x-certificate-extension
object-id: 2.5.29.37
value: "0%16%06%03U%1d%25%01%01%ff%04%0c0%0a%06%08%2b%06%01%05%05%07%03%01"
modifiable: false
-----BEGIN PUBLIC KEY-----
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzr/+V6i/1ar3EJrNvNERor1nQsyQ6xUY
kNmizQwqJes+T8610o8P8zXaQ4sCgL5vUSQdD2sryp/Cb1Ay5TcgtiD/iA0PbUm7
2wakh5CSlPQJ0M9/yIALwZezuzUnycIb
-----END PUBLIC KEY-----

[p11-kit-object-v1]
label: "Telekom Security TLS ECC Root 2020"
trusted: true
nss-mozilla-ca-policy: true
modifiable: false
nss-server-distrust-after: "%00"
nss-email-distrust-after: "%00"
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
#Certificate:
#    Data:
#        Version: 3 (0x2)
#        Serial Number:
#            36:3a:96:8c:c9:5c:b2:58:cd:d0:01:5d:c5:e5:57:00
#        Signature Algorithm: ecdsa-with-SHA384
#        Issuer: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS ECC Root 2020
#        Validity
#            Not Before: Aug 25 07:48:20 2020 GMT
#            Not After : Aug 25 23:59:59 2045 GMT
#        Subject: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS ECC Root 2020
#        Subject Public Key Info:
#            Public Key Algorithm: id-ecPublicKey
#                Public-Key: (384 bit)
#                pub:
#                    04:ce:bf:fe:57:a8:bf:d5:aa:f7:10:9a:cd:bc:d1:
#                    11:a2:bd:67:42:cc:90:eb:15:18:90:d9:a2:cd:0c:
#                    2a:25:eb:3e:4f:ce:b5:d2:8f:0f:f3:35:da:43:8b:
#                    02:80:be:6f:51:24:1d:0f:6b:2b:ca:9f:c2:6f:50:
#                    32:e5:37:20:b6:20:ff:88:0d:0f:6d:49:bb:db:06:
#                    a4:87:90:92:94:f4:09:d0:cf:7f:c8:80:0b:c1:97:
#                    b3:bb:35:27:c9:c2:1b
#                ASN1 OID: secp384r1
#                NIST CURVE: P-384
#        X509v3 extensions:
#            X509v3 Subject Key Identifier: 
#                E3:72:CC:6E:95:99:47:B1:E6:B3:61:4C:D1:CB:AB:E3:BA:CD:DE:9F
#            X509v3 Basic Constraints: critical
#                CA:TRUE
#            X509v3 Key Usage: critical
#                Certificate Sign, CRL Sign
#    Signature Algorithm: ecdsa-with-SHA384
#    Signature Value:
#        30:64:02:30:75:52:8b:b7:a4:10:4f:ae:4a:10:8b:b2:84:5b:
#        42:e1:e6:2a:36:02:da:a0:6e:19:3f:25:bf:da:59:32:8e:e4:
#        fb:90:dc:93:64:ce:ad:b4:41:47:60:e2:cf:a7:cb:1e:02:30:
#        37:41:8c:66:df:41:6b:d6:83:00:41:fd:2f:5a:f7:50:b4:67:
#        d1:2c:a8:71:d7:43:ca:9c:27:24:91:83:48:0d:cf:cd:f7:54:
#        81:af:ec:7f:e4:67:db:b8:90:ee:dd:25