Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:69:9d:74:86:bc:bc:db:5c:16:d5:9f:5d:67:d4:68:c0:ba:3a:0f
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C=CZ/2.5.4.97=NTRCZ-47114983, O=Česká pošta, s.p., CN=PostSignum Root QCA ECC R1
        Validity
            Not Before: Jan 30 10:48:06 2024 GMT
            Not After : Jan 30 10:48:06 2034 GMT
        Subject: C=CZ/2.5.4.97=NTRCZ-47114983, O=Česká pošta, s.p., CN=PostSignum Public ECC R1 CA1
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
            EC Public Key:
                pub: 
                    04:01:5e:9f:9f:8c:e8:bd:69:35:c0:5b:26:ce:5c:
                    10:36:9d:3a:9f:9b:d2:5b:2a:3e:b3:52:d0:5a:cd:
                    1c:a7:46:54:54:c6:13:cf:06:e9:12:4e:69:94:2b:
                    89:89:fb:ef:59:84:9c:32:47:42:ee:2f:8b:b3:d7:
                    2b:ea:3f:6f:03:3a:c9:01:c0:2d:25:f3:6c:4c:09:
                    59:65:1c:f0:3f:60:82:33:41:4e:18:d5:e4:73:94:
                    57:9b:3b:1b:4e:c1:3d:85:bc:99:ec:bf:2a:a4:af:
                    7e:cd:46:7f:3a:92:5a:56:6e:d9:b7:e0:f9:4c:d2:
                    c8:94:ab:ba:11:3c:90:51:38:f0:3f:3d:af
                ASN1 OID: secp521r1
        X509v3 extensions:
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  User Notice:
                    Explicit Text: Tento certifikat pro elektronickou pecet byl vydan v souladu s narizenim EU c. 910/2014.This is a certificate for electronic seal according to Regulation (EU) No 910/2014.

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://crt.postsignum.cz/crt/psrooteccr1.crt
                OCSP - URI:http://ocsp.postsignum.cz/OCSP/RQCAECCR1/

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                E-mail Protection, TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                keyid:AA:25:8E:DA:27:C8:54:8C:DE:6D:29:AE:D0:D9:AB:BF:7C:76:75:86

            X509v3 CRL Distribution Points: 
                URI:http://crl.postsignum.cz/crl/psrooteccr1.crl
                URI:http://crl2.postsignum.cz/crl/psrooteccr1.crl
                URI:http://crl.postsignum.eu/crl/psrooteccr1.crl

            X509v3 Subject Key Identifier: 
                AF:9B:26:64:EB:2D:3B:BA:AB:8A:27:46:66:8B:61:2E:98:A4:99:82
    Signature Algorithm: ecdsa-with-SHA512
        30:81:88:02:42:01:87:d4:c3:dd:f4:42:9c:73:2f:bd:c4:cf:
        56:b5:90:0c:01:30:db:17:c2:c2:ac:c9:6d:89:c0:84:77:dd:
        f7:4e:32:ea:4d:0d:c5:02:67:77:bf:dc:f6:83:55:d5:3d:6d:
        42:05:da:11:e5:d6:06:8b:ab:19:a3:c1:57:2c:26:c0:12:02:
        42:01:41:3f:04:88:97:c4:2f:fe:0c:a8:4f:e4:a3:2f:79:ac:
        df:e8:05:9d:de:ed:80:9f:20:53:4a:22:8b:f6:7b:cc:29:ad:
        eb:38:51:d4:62:0a:3d:b8:07:00:8d:3c:fa:0d:ee:bb:93:f1:
        d0:fc:85:92:fa:8b:23:65:17:83:43:a8:4a