I believe m/44'/2'/0'/0/1 is the *second* private key not the first
Being specific about the exclusiveness of the end points for normal vs. hardened key ranges and fixing some hexadecimal conversions