value1 RootCaCertificate ::= {
  version 3,
  type explicit,
  issuer self : sha256,
  toBeSigned {
    id name : "rca.scms-dc1.local",
    cracaId '000000'H,
    crlSeries 0,
    validityPeriod {
      start 397818000,
      duration years : 70
    },
    appPermissions {
      {
        psid 35,
        ssp opaque : '810001'H
      },
      {
        psid 256,
        ssp opaque : '00010001010100'H
      }
    },
    certIssuePermissions {
      {
        subjectPermissions all : NULL,
        minChainDepth 3,
        chainDepthRange -1,
        eeType '11000000'B
      },
      {
        subjectPermissions explicit : {
          {
            psid 35
          }
        },
        minChainDepth 1,
        chainDepthRange -1,
        eeType '11000000'B
      },
      {
        subjectPermissions explicit : {
          {
            psid 38
          }
        },
        minChainDepth 1,
        chainDepthRange -1,
        eeType '11000000'B
      },
      {
        subjectPermissions explicit : {
          {
            psid 256
          }
        },
        minChainDepth 1,
        chainDepthRange -1,
        eeType '11000000'B
      }
    },
    verifyKeyIndicator verificationKey : ecdsaNistP256 : compressed-y-1 : '4C6A8D077DDC5DB8319B8A51F82503BE81E9523851923B793CFA96A676696531'H
  },
  signature ecdsaNistP256Signature : {
    r x-only : '828AAC992C5CC07754A2AE79C2F733B024038D058F02D9D42679E97F3C740E95'H,
    s '2E30B6175D474AFC2393AEDE8AB32C0B9FEB2647D97C2AB372112B86E9CD7EA1'H
  }
}