$ openssl asn1parse -i < [EXTENSIONS]
    0:d=0  hl=2 l= 104 cons: SEQUENCE          
    2:d=1  hl=2 l= 102 cons:  SEQUENCE          
    4:d=2  hl=2 l=   3 prim:   OBJECT            :X509v3 Certificate Policies
    9:d=2  hl=2 l=  95 prim:   OCTET STRING      [HEX DUMP]:305D304D060A2A83088C9C1E01020201303F303D06082B06010505070201163168747470733A2F2F7265706F312E7365636F6D74727573742E6E65742F73706370702F6370732F696E6465782E68746D6C300C060A2A83088C9B1B64870501
-----BEGIN EXTENSIONS-----
MGgwZgYDVR0gBF8wXTBNBgoqgwiMnB4BAgIBMD8wPQYIKwYBBQUHAgEWMWh0dHBzOi8vcmVwbzE
uc2Vjb210cnVzdC5uZXQvc3BjcHAvY3BzL2luZGV4Lmh0bWwwDAYKKoMIjJsbZIcFAQ==
-----END EXTENSIONS-----

$ openssl asn1parse -i < [POLICIES]
    0:d=0  hl=2 l=  93 cons: SEQUENCE          
    2:d=1  hl=2 l=  77 cons:  SEQUENCE          
    4:d=2  hl=2 l=  10 prim:   OBJECT            :1.2.392.200222.1.2.2.1
   16:d=2  hl=2 l=  63 cons:   SEQUENCE          
   18:d=3  hl=2 l=  61 cons:    SEQUENCE          
   20:d=4  hl=2 l=   8 prim:     OBJECT            :Policy Qualifier CPS
   30:d=4  hl=2 l=  49 prim:     IA5STRING         :https://repo1.secomtrust.net/spcpp/cps/index.html
   81:d=1  hl=2 l=  12 cons:  SEQUENCE          
   83:d=2  hl=2 l=  10 prim:   OBJECT            :1.2.392.200091.100.901.1
-----BEGIN POLICIES-----
MF0wTQYKKoMIjJweAQICATA/MD0GCCsGAQUFBwIBFjFodHRwczovL3JlcG8xLnNlY29tdHJ1c3Q
ubmV0L3NwY3BwL2Nwcy9pbmRleC5odG1sMAwGCiqDCIybG2SHBQE=
-----END POLICIES-----