Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:48:09:0b:87:9c:ef:21:56:72:ac:d3:de:6c:1b:5b
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = EE, O = AS Sertifitseerimiskeskus, CN = EE Certification Centre Root CA, emailAddress = pki@sk.ee
        Validity
            Not Before: Dec 17 12:38:43 2015 GMT
            Not After : Dec 17 23:59:59 2030 GMT
        Subject: C = EE, O = AS Sertifitseerimiskeskus, 2.5.4.97 = NTREE-10747013, CN = ESTEID-SK 2015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:d2:81:fa:d4:d0:f1:6d:d5:bd:93:c9:cb:03:5a:
                    86:68:be:01:ee:fc:9d:a1:dd:84:c2:9f:d2:4c:16:
                    41:df:01:2d:20:90:8b:76:4a:44:b1:2f:29:5d:f1:
                    62:46:ac:03:56:c8:06:19:bb:be:43:df:6d:ae:56:
                    f9:2c:8e:f2:8b:ba:c8:91:1a:2f:e4:d7:ed:05:d4:
                    8d:3d:25:39:ac:08:58:3d:08:6f:65:94:20:3b:04:
                    5a:1d:ae:44:cb:e0:5a:2c:91:e6:2e:a6:10:4b:d8:
                    50:bd:0b:02:63:2c:2c:fb:15:6f:34:55:29:2b:4a:
                    46:0f:ae:22:c9:ca:9d:32:e0:65:fe:75:aa:dd:f2:
                    ee:66:9a:70:06:1d:15:16:5b:66:e2:78:6b:ff:54:
                    b4:47:d4:d1:26:9a:85:50:66:c6:af:83:8a:fc:3c:
                    1e:6d:0e:4f:8e:17:52:e3:48:02:50:dc:26:0b:b7:
                    cf:43:8b:c8:1f:ec:7e:4c:29:36:68:6f:ae:dc:ca:
                    00:cf:42:2b:a5:55:aa:8b:0c:c6:fe:fc:6b:7a:e3:
                    cf:02:48:17:78:50:9e:61:fe:9f:5c:bb:06:cf:85:
                    a2:be:c6:45:6e:98:76:a4:c8:c4:2e:ee:ac:96:d9:
                    41:5d:f0:06:dd:f1:af:e3:7b:7d:d5:55:e2:73:2c:
                    d1:fd:e4:f9:76:c0:7e:cc:5b:16:d6:c1:d5:fb:53:
                    8d:3e:bf:aa:ce:00:f1:08:7d:9c:9a:ea:a8:64:d7:
                    c8:22:af:9b:ba:86:f7:78:0f:1e:7b:e5:e9:24:a2:
                    50:af:ed:6a:1a:b9:a1:82:08:ef:02:17:3b:9b:a7:
                    14:e3:1f:d0:7f:1c:11:62:12:15:36:12:5f:fa:c2:
                    95:4e:19:10:85:b2:7d:5f:1b:8a:93:77:35:f3:0c:
                    a6:c0:bd:66:a4:30:f4:3c:81:89:aa:5b:2c:31:e8:
                    ae:27:82:33:6a:01:5b:80:44:86:34:35:1d:e2:27:
                    26:d2:14:13:f0:29:90:79:49:b5:19:b5:9e:05:8b:
                    1e:a8:f8:4c:41:7f:7b:40:50:4b:5c:92:d5:cb:64:
                    82:ca:80:33:ec:1a:b5:a8:0e:37:fb:e1:1c:89:b3:
                    7e:c8:17:35:9d:0b:36:66:8a:bc:72:4f:4c:2b:46:
                    c2:c4:33:1e:52:44:14:cf:a5:5e:40:6a:7a:f4:89:
                    8e:42:bb:30:e3:aa:93:cf:49:ad:75:0a:cc:49:b9:
                    e4:5c:2b:8b:6a:7e:5d:3e:6d:bc:e0:9f:47:99:aa:
                    a2:62:2e:a3:e8:a2:dc:67:63:64:52:70:d0:15:eb:
                    01:56:53:04:9b:e7:c7:6b:68:91:ea:59:c0:15:86:
                    74:e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:12:F2:5A:3E:EA:56:1C:BF:CD:06:AC:F1:F1:25:C9:A9:4B:D4:14:99

            X509v3 Subject Key Identifier: 
                B3:AB:88:BC:99:D5:62:A4:85:2A:08:CD:B4:1D:72:3B:83:72:47:51
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: 0.4.0.2042.1.2
                Policy: 0.4.0.194112.1.2
                Policy: 1.3.6.1.4.1.10015.1.1
                  CPS: https://www.sk.ee/CPS
                Policy: 1.3.6.1.4.1.10015.1.2
                Policy: 1.3.6.1.4.1.10015.1.3
                Policy: 1.3.6.1.4.1.10015.1.4

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Name Constraints: 
                Excluded:
                  DNS:""
                  IP:0.0.0.0/0.0.0.0
                  IP:0:0:0:0:0:0:0:0/0:0:0:0:0:0:0:0

            X509v3 Extended Key Usage: 
                OCSP Signing, TLS Web Client Authentication, E-mail Protection
            Authority Information Access: 
                OCSP - URI:http://ocsp.sk.ee/CA
                CA Issuers - URI:http://www.sk.ee/certs/EE_Certification_Centre_Root_CA.der.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.sk.ee/repository/crls/eeccrca.crl

    Signature Algorithm: sha384WithRSAEncryption
         74:56:0c:62:37:3f:4d:2b:da:c3:a7:96:f2:c7:2a:4f:5e:13:
         b5:fd:dd:e4:fe:e1:ee:53:79:a4:2c:3a:91:39:cd:04:54:4e:
         db:21:c4:df:01:9f:1d:93:a1:0f:6b:82:2d:7c:ab:e3:30:5e:
         6d:9f:d2:6a:c6:6a:46:18:1b:46:e2:c7:b6:60:0d:0b:c2:30:
         3f:e4:b9:16:26:c0:b1:9d:7e:c4:d7:c2:1f:0a:b8:be:ae:48:
         71:7e:53:f6:53:b2:ce:aa:1b:b9:b1:08:71:bd:62:f7:9b:90:
         de:58:8f:fa:d8:46:f6:7d:fe:e2:7d:ae:27:81:cb:1c:38:c2:
         8e:db:d7:da:76:d8:f5:e4:02:45:cf:e7:2d:fe:a8:af:ce:7a:
         df:7c:96:ac:08:f7:b9:09:86:24:b6:cf:11:58:46:4f:9d:5d:
         b6:b3:9a:85:47:9e:8c:d8:2a:6b:19:69:25:2f:a1:83:4d:1f:
         5f:6d:a5:2e:c1:2d:db:20:8b:d2:a9:6e:f4:0b:6f:9c:b0:20:
         ca:bd:ba:dd:fe:6f:65:ef:ce:af:32:ce:61:cc:16:d2:c8:27:
         a0:1f:bb:58:c9:a6:a0:fc:d8:15:00:15:cb:e2:e6:f8:67:3f:
         c3:3b:6f:de:f8:47:5f:16:08:ea:60:35:0b:d7:0c:8f:b6:ff:
         c6:48:35:e5