Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7043 (0x1b83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: May 17 12:20:57 2017 GMT
            Not After : Jun 17 12:20:57 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=jinr.ru, CN=srm-cms-mss.jinr-t1.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:de:8e:92:c6:e8:b1:ef:33:1c:27:eb:d0:8a:7a:
                    8a:15:d1:ca:3b:20:e3:8c:1f:83:e3:f9:71:1e:ec:
                    56:30:4a:bc:89:76:c3:1c:a1:d6:1a:06:e2:68:3a:
                    9b:7c:c7:0b:d9:a2:0f:d3:56:ac:b7:77:58:c7:f1:
                    62:6e:c4:1d:d6:25:b1:1a:c9:e1:c9:02:6d:b0:6a:
                    40:dd:49:40:2e:18:60:27:d5:2b:87:b1:44:78:c2:
                    04:2d:75:d1:e7:3e:34:ae:d0:03:30:b9:0b:e1:82:
                    10:05:4f:9c:f0:d4:a2:8e:10:50:5d:01:99:c0:fd:
                    40:08:35:39:59:fe:6e:71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                99:E7:DE:DA:25:5F:56:D8:5F:80:96:7E:A9:A9:80:6A:A1:32:E9:E5
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         aa:97:a1:f3:43:24:fc:35:2a:ca:1f:a6:97:8b:9b:57:eb:2a:
         bb:69:d2:0c:68:49:d1:5c:23:4c:b0:63:df:fe:03:76:79:1c:
         9b:c8:02:3b:2f:93:24:44:8f:9e:c0:cb:54:50:36:d6:44:b0:
         fa:b9:3d:bc:e2:25:04:b2:a7:a7:8f:c7:0a:f2:59:f1:0d:3f:
         5e:50:84:14:fd:d9:e3:e9:6f:99:69:53:3a:df:44:89:a7:e7:
         39:e6:06:c5:f7:4b:64:97:61:96:25:ce:ed:fc:bb:40:14:ac:
         32:fc:95:b4:2f:e9:ff:c8:f7:1a:5b:09:e2:ef:80:b0:0a:ea:
         21:cc:d4:86:4d:63:97:07:45:42:e5:6d:09:e2:cd:75:ba:c9:
         67:c6:b4:d7:b8:7c:3c:8c:0d:2a:b9:42:e2:46:37:0f:d2:7e:
         38:b7:1d:f8:e7:a0:ba:fa:f7:40:7e:32:01:f8:7b:28:6e:53:
         fd:d8:1b:ae:c9:17:fa:0f:75:b6:c7:66:de:76:4d:e6:52:4d:
         82:67:c1:c7:a0:0a:a4:09:5c:d6:08:0a:f2:eb:50:67:6e:62:
         82:d7:8b:75:39:0a:0c:69:9c:3a:18:a7:31:07:11:8c:ef:92:
         8a:57:04:8c:28:c0:51:e7:b6:6f:bf:f3:2f:ce:84:63:ff:2a:
         5b:74:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----