Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:68:1a:67:1b:68:f4:40:ed:c7:34:be:fe:c0:05:0d:7b:33:a9:49
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C=CZ/2.5.4.97=NTRCZ-47114983, O=Česká pošta, s.p., CN=PostSignum Root QCA ECC R1
        Validity
            Not Before: Jan 30 11:25:29 2024 GMT
            Not After : Jan 30 11:25:29 2034 GMT
        Subject: C=CZ/2.5.4.97=NTRCZ-47114983, O=Česká pošta, s.p., CN=PostSignum Public ECC R1 CA2
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
            EC Public Key:
                pub: 
                    04:01:4c:b8:7e:ae:84:48:40:ff:b3:d9:b2:68:61:
                    24:d6:f5:a5:f6:be:23:3a:0a:f2:2e:71:d7:b1:1c:
                    6e:f2:25:22:66:db:cf:12:5a:b5:52:7f:b5:79:0a:
                    9a:30:8e:11:9f:3c:93:9f:70:49:0d:f5:7a:8d:b8:
                    13:ec:07:86:42:f8:3e:00:07:40:98:f7:0f:c8:c8:
                    2c:db:31:54:7c:7e:1f:d2:03:ef:8f:60:83:a3:e0:
                    da:a1:ce:1d:78:d3:43:99:27:61:02:d9:c8:c5:ea:
                    8e:c4:a4:f1:d1:5b:09:75:fe:5b:55:a2:b3:17:c6:
                    6f:f2:16:4a:63:4b:5e:a4:23:8c:ec:bf:35
                ASN1 OID: secp521r1
        X509v3 extensions:
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  User Notice:
                    Explicit Text: Tento certifikat pro elektronickou pecet byl vydan v souladu s narizenim EU c. 910/2014.This is a certificate for electronic seal according to Regulation (EU) No 910/2014.

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                CA Issuers - URI:http://crt.postsignum.cz/crt/psrooteccr1.crt
                OCSP - URI:http://ocsp.postsignum.cz/OCSP/RQCAECCR1/

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                keyid:AA:25:8E:DA:27:C8:54:8C:DE:6D:29:AE:D0:D9:AB:BF:7C:76:75:86

            X509v3 CRL Distribution Points: 
                URI:http://crl.postsignum.cz/crl/psrooteccr1.crl
                URI:http://crl2.postsignum.cz/crl/psrooteccr1.crl
                URI:http://crl.postsignum.eu/crl/psrooteccr1.crl

            X509v3 Subject Key Identifier: 
                C5:73:E6:41:52:73:A8:A7:CE:E5:B7:BC:1E:83:98:C8:D0:B2:05:40
    Signature Algorithm: ecdsa-with-SHA512
        30:81:88:02:42:01:f0:a6:d6:e7:c0:ef:e5:f8:eb:0c:3c:b3:
        2a:d4:ab:dc:26:83:bc:89:26:d7:59:fb:cf:7a:81:23:fc:b6:
        f4:fb:fb:2f:d4:e5:5f:b3:64:0a:7f:79:11:19:a9:81:d1:4a:
        34:1a:fb:03:40:7c:75:64:cb:cb:03:43:00:cf:45:b3:2a:02:
        42:01:7d:0d:ad:20:df:27:26:28:28:a8:97:6e:a6:3d:0f:06:
        d2:9f:f8:03:bf:cf:84:1c:a1:a7:93:e8:a5:b2:fa:b5:08:8a:
        0c:a0:58:99:37:da:81:37:72:fc:65:d7:f8:78:a5:31:8c:79:
        17:a8:60:6c:6a:2a:0f:7c:46:82:79:12:c4