Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6837 (0x1ab5)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Mar  6 15:17:32 2017 GMT
            Not After : Apr  6 15:17:32 2018 GMT
        Subject: C=RU, O=RDIG, OU=users, OU=itep.ru, CN=Semen Shakhov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:bf:c0:4f:d9:75:f0:33:20:c4:39:11:6b:f7:30:
                    15:48:d0:7a:53:ce:7f:8b:a1:7c:2e:70:6c:0a:53:
                    c5:fb:91:8d:0c:11:26:86:eb:c7:71:95:44:dd:49:
                    09:ce:b7:07:0f:44:79:d8:0a:6e:27:fd:4d:5e:6d:
                    e3:02:f9:98:9b:99:40:53:d0:d6:38:4e:f5:a2:74:
                    a1:9d:db:9d:45:ec:ae:6c:37:32:41:d3:30:0a:45:
                    0f:a9:90:10:d9:71:08:e1:7f:df:18:d4:f9:b5:80:
                    ef:f1:49:5c:86:1a:f7:68:da:03:25:3b:12:48:f8:
                    df:7a:b6:06:f6:a2:b6:b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, S/MIME, Object Signing
            X509v3 Subject Alternative Name: 
                carrier-pigeon-destination:semen dot shakhov at cern dot ch
            X509v3 Subject Key Identifier: 
                DC:F3:B7:B7:7A:B0:61:BF:5B:66:FC:90:4A:73:98:C4:A5:69:41:86
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 
                URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha1WithRSAEncryption
        6f:71:0c:52:0f:97:7a:ab:87:d2:86:c4:00:c4:bc:28:c5:fb:
        2c:13:67:3c:5f:32:36:68:1b:24:31:87:3c:3d:cd:83:eb:a1:
        96:7d:bf:99:3f:7c:e7:e4:0f:fa:7c:12:c4:73:bc:e3:7b:f2:
        89:49:7c:82:00:13:51:fd:98:91:4c:ed:66:c9:46:1a:c9:a8:
        64:0b:9d:12:8d:6e:50:83:ee:b5:54:cd:d9:03:fb:1b:a5:fe:
        05:ce:ed:ba:9b:91:95:4d:a7:c4:f5:4e:76:70:4b:22:ab:c0:
        77:16:07:e5:5e:92:5c:f7:d2:69:85:0c:3a:ac:41:ba:aa:2a:
        a0:61:02:3d:ec:42:11:e0:df:ce:20:c9:d0:e9:e7:6e:dc:7f:
        7f:86:92:08:83:3e:0d:0e:e8:a4:e3:5f:cb:41:e1:1b:92:2e:
        fa:54:99:0b:05:ff:02:a5:8d:41:ef:90:69:4b:0c:fc:64:5c:
        00:6e:f4:cd:6a:21:0f:39:c9:9c:0c:70:02:5d:98:39:01:92:
        48:83:c1:6e:5e:4a:3f:f5:e0:b6:82:ec:92:51:ff:76:eb:8c:
        65:4e:2a:63:2f:fd:fa:17:f2:ae:4b:05:87:5f:93:8d:50:96:
        54:f7:22:2f:94:64:b2:e8:0c:a2:f2:40:49:e9:22:0c:41:e4:
        1a:ce:83:a7
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICGrUwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xNzAzMDYxNTE3MzJaFw0xODA0MDYxNTE3MzJaMFYxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKDARSRElHMQ4wDAYDVQQLDAV1c2VyczEQMA4GA1UECwwH
aXRlcC5ydTEWMBQGA1UEAwwNU2VtZW4gU2hha2hvdjCBnzANBgkqhkiG9w0BAQEF
AAOBjQAwgYkCgYEAv8BP2XXwMyDEORFr9zAVSNB6U85/i6F8LnBsClPF+5GNDBEm
huvHcZVE3UkJzrcHD0R52ApuJ/1NXm3jAvmYm5lAU9DWOE71onShndudReyubDcy
QdMwCkUPqZAQ2XEI4X/fGNT5tYDv8Ulchhr3aNoDJTsSSPjferYG9qK2t9kCAwEA
AaOCAsIwggK+MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgP4MBEGCWCGSAGG
+EIBAQQEAwIEsDAgBgNVHREEGTAXgRVzZW1lbi5zaGFraG92QGNlcm4uY2gwHQYD
VR0OBBYEFNzzt7d6sGG/W2b8kEpzmMSlaUGGMG0GA1UdIwRmMGSAFLca+X3+0h5h
qamMIWiLfmCMuXBZoUmkRzBFMQswCQYDVQQGEwJSVTENMAsGA1UEChMEUkRJRzEn
MCUGA1UEAxMeUnVzc2lhbiBEYXRhLUludGVuc2l2ZSBHcmlkIENBggEAMD0GA1Ud
EgQ2MDSBFHJkaWctY2FAZ3JpZC5raWFlLnJ1hhxodHRwOi8vY2EuZ3JpZC5raWFl
LnJ1L1JESUcvMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL2Nh
LmdyaWQua2lhZS5ydS9SRElHL2NhLmh0bWwwNgYDVR0fBC8wLTAroCmgJ4YlaHR0
cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhY3JsLnBlbTBMBgNVHSAERTBDMEEG
DCsGAQQBgax7AQECATAxMC8GCCsGAQUFBwIBFiNodHRwOi8vY2EuZ3JpZC5raWFl
LnJ1L1JESUcvcG9saWN5LzArBglghkgBhvhCAQIEHhYcaHR0cDovL2NhLmdyaWQu
a2lhZS5ydS9SRElHLzAWBglghkgBhvhCAQgECRYHcG9saWN5LzAYBglghkgBhvhC
AQQECxYJY2FjcmwucGVtMCAGCWCGSAGG+EIBAwQTFhFjZ2ktYmluL2NoZWNrcmV2
PzBUBglghkgBhvhCAQ0ERxZFSXNzdWllZCBieSBSRElHIENlcnRpZmljYXRpb24g
QXV0aG9yaXR5LCBodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMA0GCSqGSIb3
DQEBBQUAA4IBAQBvcQxSD5d6q4fShsQAxLwoxfssE2c8XzI2aBskMYc8Pc2D66GW
fb+ZP3zn5A/6fBLEc7zje/KJSXyCABNR/ZiRTO1myUYayahkC50SjW5Qg+61VM3Z
A/sbpf4Fzu26m5GVTafE9U52cEsiq8B3FgflXpJc99JphQw6rEG6qiqgYQI97EIR
4N/OIMnQ6edu3H9/hpIIgz4NDuik41/LQeEbki76VJkLBf8CpY1B75BpSwz8ZFwA
bvTNaiEPOcmcDHACXZg5AZJIg8FuXko/9eC2guySUf9264xlTipjL/36F/KuSwWH
X5ONUJZU9yIvlGSy6Ayi8kBJ6SIMQeQazoOn
-----END CERTIFICATE-----