Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6603 (0x19cb)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Oct 21 08:11:23 2016 GMT
            Not After : Nov 21 08:11:23 2017 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=astra.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:ac:6a:ed:aa:4c:af:8f:de:48:b9:06:89:7b:30:
                    a5:7e:26:c1:50:cf:06:e0:94:d7:d4:3b:c3:07:e8:
                    44:56:52:4d:ad:a2:5c:c9:c3:2e:32:64:57:28:fd:
                    ec:de:de:6a:dc:6f:bb:fc:41:6d:3f:cd:cb:83:17:
                    11:a3:08:0e:d8:4f:7d:52:16:27:09:0d:5e:9c:95:
                    0a:46:7f:09:2d:07:fa:e9:a4:25:45:44:f8:fa:f7:
                    1d:d6:61:57:91:4d:9e:82:0e:9a:06:49:d0:3b:10:
                    82:54:52:85:6d:46:f5:f6:9d:38:d4:a6:7f:0f:01:
                    92:ef:42:ee:fa:40:5b:32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                E5:56:D7:E4:C5:D8:7A:80:48:D7:B8:57:C6:01:EA:FA:95:18:2E:FF
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 
                URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha1WithRSAEncryption
        2e:24:fb:bf:45:e8:d3:3d:ea:d3:d5:93:d7:49:df:16:d6:3c:
        69:c5:5c:00:53:7f:95:90:5e:79:c1:d1:03:58:32:b7:c3:25:
        e7:ed:29:e1:eb:50:bc:61:05:1d:9e:80:b7:07:ca:43:c0:b8:
        02:d2:42:e0:0a:de:b1:fb:3d:51:6d:7a:f6:8f:8f:0b:1f:e2:
        ad:b4:d3:da:0a:44:c5:97:7a:1d:9e:91:b1:d3:56:5e:88:88:
        59:63:12:5a:53:40:b4:82:18:ae:ba:8a:40:b4:e0:33:f4:5d:
        a8:4c:e2:87:76:45:eb:0f:e7:df:29:9e:43:de:59:b3:ad:58:
        72:f7:a9:f0:b5:41:28:3c:7c:d9:51:6f:3b:d3:36:8d:83:6c:
        7e:d2:a0:eb:cf:b9:01:80:52:1d:36:65:e8:af:49:f6:88:28:
        8f:b0:32:7d:88:5e:c3:a9:10:61:34:13:ae:8a:ba:21:9f:68:
        b5:3f:0e:43:75:48:23:a6:d9:dc:9f:6d:6c:50:61:d0:fb:d5:
        d9:64:20:40:ba:e8:f0:68:05:c2:6c:33:88:e1:e7:52:7e:71:
        e2:40:bf:4f:b3:07:93:cb:b2:f5:ed:9c:30:4e:4c:e1:83:20:
        5b:ea:61:78:7b:ee:91:e0:48:9e:2b:0b:f9:b2:05:29:12:d3:
        25:b9:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----