Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7012 (0x1b64)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Apr 24 16:03:04 2017 GMT
            Not After : May 25 16:03:04 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=jinr.ru, CN=rdz03.jinr.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:af:57:1a:71:7f:9e:dc:57:87:79:0d:f7:bb:27:
                    c1:99:6d:83:59:de:23:2f:d3:4a:26:48:e2:99:20:
                    65:e6:97:a9:67:8e:9d:3c:a7:ae:a7:5e:d1:3d:ee:
                    39:8d:21:8b:41:b9:d1:ed:9f:6c:1c:3d:be:76:3b:
                    82:a5:ea:50:eb:9d:11:03:ea:d1:57:a6:64:e8:90:
                    09:0d:08:80:3d:1c:48:c2:eb:04:f9:a9:dd:2a:fd:
                    5c:97:e4:fa:61:9d:1f:be:9a:59:c0:58:23:4b:cd:
                    66:8a:cd:ae:e2:86:e1:58:e2:01:e4:45:ec:dc:bd:
                    c7:5c:20:79:c4:de:03:f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                C8:AA:3D:6C:E7:CF:88:38:14:80:8C:28:DD:8A:E5:49:90:BE:7B:C4
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 
                URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha1WithRSAEncryption
        26:c9:51:3d:52:87:24:63:9b:95:a9:ee:e7:56:1c:de:42:c2:
        bd:67:53:2d:43:7a:c0:0e:12:a1:8f:a3:cf:b3:ca:14:4d:2b:
        27:1d:54:9b:37:18:19:e5:05:6d:51:6b:28:13:7b:4b:91:af:
        7b:81:42:3d:48:5d:6c:21:bb:69:0d:98:29:dc:8c:15:f1:85:
        0d:a5:84:07:bf:22:d0:ba:25:11:44:0a:1d:d5:a0:bf:bd:08:
        e3:4a:2c:15:e1:9f:2e:43:4d:e7:c3:a2:b6:67:5e:f2:21:4d:
        3a:8b:40:1b:11:e5:72:1b:9a:68:ba:71:78:c7:b3:d4:83:29:
        81:fc:a5:ec:c7:51:f5:ff:f2:a2:24:87:79:2e:8f:2d:e6:0f:
        87:6f:3c:61:31:f3:6b:19:95:28:8b:00:40:d1:b4:3f:40:2a:
        e7:f7:db:02:3a:ab:de:51:01:e1:54:b8:01:bf:65:94:71:81:
        29:41:42:1f:83:7a:2a:42:76:94:33:fb:95:93:27:9e:44:7f:
        c8:90:fa:12:b9:4c:07:8a:d7:a3:9a:69:08:29:7f:5d:db:23:
        df:c0:bb:51:0c:7c:0b:f3:d8:3c:79:b2:48:e1:5e:bf:12:84:
        a1:1d:18:0d:d5:34:a3:cc:86:77:1d:46:0a:3c:4e:ca:aa:c5:
        7c:51:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----