Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6604 (0x19cc)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Oct 21 08:11:37 2016 GMT
            Not After : Nov 21 08:11:37 2017 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lemon.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:c7:64:42:58:e1:09:b1:78:7b:ab:e9:7b:0c:5d:
                    8b:81:12:8d:b6:8d:4e:df:16:60:02:11:fb:f1:dd:
                    fe:b4:ac:8e:49:23:cc:51:ef:8b:49:ca:3b:5b:58:
                    61:89:67:11:31:1c:f0:85:66:94:a7:53:52:e6:a2:
                    ff:ff:af:53:04:b0:b5:a4:27:96:f3:7f:1b:f5:cf:
                    c4:4d:a6:89:92:da:6e:54:70:b2:4c:73:20:3b:2d:
                    22:08:37:f6:f7:26:bd:62:7e:54:db:15:e7:d5:cf:
                    81:d9:d9:72:ca:d8:59:c3:29:6d:a6:3e:71:cf:8f:
                    97:e7:b4:9d:a1:32:2a:e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                04:41:D6:68:85:86:64:EA:C3:7E:8D:56:9E:4E:74:A5:6F:3A:26:DF
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 
                URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha1WithRSAEncryption
        27:56:0b:cf:11:b3:8e:c5:e3:a4:11:35:f2:b5:e7:12:cd:24:
        96:b5:fb:e7:e3:d4:9a:9f:82:09:f4:42:ee:98:0e:f8:de:f8:
        00:31:f4:7c:ec:1a:2a:04:3b:a9:d6:d9:4f:83:fe:45:05:aa:
        e0:01:e8:5b:4f:bb:26:9c:e2:b8:c7:d7:4f:e9:f6:57:37:aa:
        6e:da:58:06:b2:a3:5c:4f:67:b7:c7:b1:98:8e:6e:30:d9:61:
        a0:a2:5c:e6:ba:b9:cd:77:80:32:f4:81:db:b3:48:b5:01:e1:
        d2:70:c1:23:67:7b:48:20:96:89:e2:0b:88:dd:4b:73:56:5d:
        10:e4:19:63:b9:10:b1:0c:41:e1:d0:ea:68:24:4b:b1:0b:1b:
        f6:3b:e4:df:13:88:c0:10:29:ee:2a:f8:92:8e:94:b1:3c:ae:
        e4:bb:a1:30:27:b8:08:71:af:10:52:9d:bf:97:d4:d0:de:f8:
        31:9e:e7:e0:93:b9:2a:68:dc:ec:ce:5c:67:25:31:21:34:c8:
        c7:b7:d2:3f:bf:a1:aa:9e:e3:11:9f:ea:16:10:4a:3c:00:04:
        e1:f6:70:e8:af:fc:56:c9:0e:d6:5d:01:82:fb:07:f8:56:d8:
        a8:14:d5:ec:7e:4e:ff:9d:8c:3f:13:bd:66:5a:27:07:60:92:
        05:5d:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----