value1 PcaCertificate ::= {
  version 3,
  type explicit,
  issuer sha256AndDigest : '29C671D5F2C66C73'H,
  toBeSigned {
    id name : "pca.scms-dc1.local",
    cracaId 'C66C73'H,
    crlSeries 2,
    validityPeriod {
      start 397818000,
      duration years : 4
    },
    region identifiedRegion : {
      countryOnly : 124,
      countryOnly : 484,
      countryOnly : 840
    },
    appPermissions {
      {
        psid 35,
        ssp opaque : '850001'H
      }
    },
    certIssuePermissions {
      {
        subjectPermissions all : NULL,
        minChainDepth 1,
        chainDepthRange 0,
        eeType '1'B
      }
    },
    encryptionKey {
      supportedSymmAlg aes128Ccm,
      publicKey eciesNistP256 : compressed-y-1 : '29471DBE36255F5FCAAC96770BC15C6E96F6D9E241D46219354EBDF71C2D176B'H
    },
    verifyKeyIndicator verificationKey : ecdsaNistP256 : compressed-y-1 : 'CA88544AA71C2A542EE08799762C030420648B3849BDF15E1DCE8B085D98F9D5'H
  },
  signature ecdsaNistP256Signature : {
    r x-only : '12C6D27F6FA182F7B41BEAA9CDD5E1D61C10F09E995A229D8B6875AF2224FCE2'H,
    s 'A5AA6B24D8737B5954680C15A7DCE353F8DAAB6C2A74F9F29DC6543D7749763C'H
  }
}