Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7148 (0x1bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Jun 23 11:18:48 2017 GMT
            Not After : Jul 24 11:18:48 2018 GMT
        Subject: C=RU, O=RDIG, OU=users, OU=inp.nsk.su, CN=Ilya Surin
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:aa:a0:33:0a:cd:7a:68:6e:83:cb:6e:fe:4f:0d:
                    07:33:0c:e2:07:6d:e8:a8:c2:53:2e:73:29:6e:c0:
                    65:0c:be:79:a5:78:52:cd:a5:7f:3e:02:dd:57:74:
                    a1:33:35:bc:8a:f0:e0:05:c8:99:78:f0:d2:cc:da:
                    0b:5f:2c:06:26:cf:df:bd:69:d3:fa:e0:10:93:7d:
                    df:21:e6:68:f9:08:9c:d1:94:79:08:a3:50:01:6d:
                    50:41:3d:81:6b:61:a8:60:a6:63:69:9b:a7:ba:b0:
                    d3:e6:22:42:de:7b:b2:99:59:e7:3f:87:28:25:ef:
                    a5:c3:d5:f4:51:45:e4:5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, S/MIME, Object Signing
            X509v3 Subject Alternative Name: 
                carrier-pigeon-destination:i dot k dot surin at inp dot nsk dot su
            X509v3 Subject Key Identifier: 
                37:70:C2:BC:C9:3E:DA:AF:CA:7C:D9:4C:F9:80:A1:C6:1B:23:70:19
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         65:04:66:0c:96:5f:a2:40:2e:3a:22:81:b0:eb:37:f6:25:aa:
         2a:79:9e:6c:8a:f0:68:e9:1d:a2:60:a1:40:39:dc:cd:f4:00:
         05:26:22:36:35:76:d9:0e:22:98:69:fd:40:35:6d:a2:fe:76:
         e2:2d:23:00:d1:aa:c4:1f:9d:51:5f:ab:61:f0:d8:57:1d:93:
         f3:74:d4:98:40:3f:8c:cd:58:84:b7:ee:84:0b:aa:1e:1c:d6:
         59:62:20:39:8a:dc:e1:b4:48:e3:4f:50:a7:1c:42:04:08:30:
         1f:70:bf:79:ce:d5:2a:83:6d:32:ad:53:c4:1a:ef:8e:02:c2:
         3b:17:ff:89:5f:c8:de:dc:65:b9:c0:eb:c2:c5:59:c6:c9:e1:
         87:41:3a:d2:24:c9:58:ec:2b:a3:5c:5f:a2:8d:48:42:a4:aa:
         94:19:5f:dc:ea:c1:f3:d0:ef:45:7b:51:59:96:3b:86:ec:8e:
         d1:f7:7c:d5:4f:b3:a2:6d:50:ac:5a:47:37:0d:48:ae:93:6e:
         16:11:5f:73:ad:37:77:53:b9:80:17:3a:45:f0:c0:a7:3a:1c:
         98:53:e2:75:9f:ea:4e:85:f7:63:0f:33:c3:8d:82:38:e0:4c:
         5b:b0:7f:98:e3:ec:dc:c7:11:03:78:77:51:9a:31:56:f4:49:
         05:58:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----