Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6774 (0x1a76)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Feb  9 11:38:12 2017 GMT
            Not After : Mar 12 11:38:12 2018 GMT
        Subject: C=RU, O=RDIG, OU=users, OU=sinp.msu.ru, CN=Sergey Sivoklokov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:db:ea:b5:0b:21:8c:fa:4e:17:ad:a8:2b:a3:42:
                    8f:8e:a5:79:ee:d5:e2:af:46:15:0d:8a:79:81:db:
                    53:3a:7c:1b:41:7d:6b:ad:60:e8:69:f8:0c:f0:71:
                    32:90:87:b8:63:47:e2:ae:53:4d:6e:df:6d:4d:c3:
                    3f:98:56:1e:f9:87:3a:58:a1:76:92:f8:08:6c:cd:
                    f0:6f:9f:68:95:83:98:73:1e:4e:f0:7f:1e:a1:cf:
                    14:4c:bd:69:d9:71:8c:d8:4a:89:89:ac:1e:49:f0:
                    77:fd:8c:d0:c2:64:f5:a6:9b:fc:b8:aa:e9:44:1f:
                    01:02:cb:44:76:cd:5a:c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, S/MIME, Object Signing
            X509v3 Subject Alternative Name: 
                carrier-pigeon-destination:sivokl at mail dot cern dot ch
            X509v3 Subject Key Identifier: 
                47:C0:A5:3E:9E:13:42:AF:C5:D1:01:AB:E0:77:F6:B2:D0:7F:D6:F6
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 
                URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha1WithRSAEncryption
        8d:f3:90:03:e6:01:5e:3a:23:14:94:39:4b:7d:19:ad:36:f8:
        e1:a4:4e:c3:c8:56:af:bc:1f:d3:96:4d:ba:2f:21:3e:fd:0f:
        61:a9:ea:44:ec:77:4c:46:7b:3b:ce:17:41:d7:3c:c2:f1:b3:
        c0:13:fb:0f:39:61:f8:98:5e:8e:70:6d:f8:c9:1a:86:60:98:
        62:e4:92:ac:8f:6c:0e:5c:29:13:f9:db:6b:03:1d:93:16:c5:
        97:2c:ca:ad:df:72:db:fb:33:02:ff:58:b4:45:32:f1:95:04:
        ed:34:ac:62:04:53:ee:c5:88:86:a9:e4:e8:e0:9a:db:8a:52:
        d1:22:7d:51:ba:6b:ab:8a:f2:99:ef:60:65:aa:6c:0c:35:fb:
        a7:1b:fd:94:4a:a6:88:7b:f4:be:0f:fd:be:c6:1e:12:c0:49:
        07:0f:cc:7d:e7:3d:19:8d:b3:e5:ee:0f:1d:54:0e:f7:82:b7:
        e4:ec:46:4c:c2:03:fb:ea:c5:5f:d3:0e:71:9d:92:45:2f:e8:
        5c:b4:8a:46:7b:3c:0e:06:a8:5b:32:09:1c:00:e5:2b:1f:49:
        c1:b0:45:8d:e6:f3:70:59:e0:78:69:23:07:4f:85:c3:c9:a3:
        cc:5a:b4:61:0e:72:e9:5a:43:e9:d9:f1:70:13:8f:79:90:0d:
        6c:d2:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----