Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7153 (0x1bf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Jul  6 15:04:55 2017 GMT
            Not After : Aug  6 15:04:55 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=jinr.ru, CN=rocmon.jinr.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:98:3c:fd:e1:75:06:d8:44:cf:f9:08:be:f2:65:
                    0d:69:2b:a5:0a:58:43:e3:10:a3:5d:a9:41:e8:5c:
                    46:ea:15:4a:f8:4f:bf:e9:61:e7:fc:99:34:f3:41:
                    29:93:8d:fc:f4:77:97:8f:bd:ad:81:24:fd:a0:78:
                    e5:86:11:9d:85:b8:9b:75:ba:7d:04:24:4b:4f:aa:
                    fe:cf:30:6a:cd:7e:b9:d7:53:6f:f2:65:78:fe:c4:
                    a0:24:e3:90:ef:a1:fc:e0:a3:29:c6:6a:85:64:ca:
                    14:cb:4b:ae:dd:9d:9a:c6:f3:77:b4:2e:f4:cf:b1:
                    8b:52:a1:72:91:32:85:70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                88:5F:17:A2:0D:5C:33:60:5E:92:37:80:A9:9F:AA:71:3F:6E:53:CB
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         71:8f:29:86:0a:9d:87:4b:54:8c:0d:0b:fd:39:0b:ba:8e:71:
         88:07:cc:68:8d:84:a7:d7:38:62:a5:44:93:2f:f4:39:7f:65:
         b8:68:17:7e:a6:89:38:4d:f4:ed:8d:64:92:9e:67:64:56:2a:
         10:c9:d0:34:63:ea:50:70:00:31:14:83:cd:1e:21:ae:f1:13:
         93:a9:03:a0:99:8c:92:87:68:a6:c9:5f:8c:ab:f5:86:3c:22:
         55:f0:e7:4b:8b:d5:a5:ae:1c:0f:1d:9b:5f:90:f2:b8:53:ca:
         9e:b8:25:c6:da:da:a5:ea:e9:1c:9d:01:39:69:25:e1:e1:ee:
         49:fc:24:2a:d6:30:72:7b:f0:0b:6d:42:93:a0:f7:d8:c4:68:
         01:ec:77:5c:96:2b:16:49:00:1c:a1:a5:ee:41:7d:03:e3:ac:
         23:f3:66:e9:8d:38:18:6a:38:8c:e6:49:06:f3:a9:fd:30:3d:
         99:1e:99:1b:5e:5f:a1:c5:1c:b2:f4:79:02:87:de:7d:1f:0d:
         a8:c3:d1:c7:9b:47:1e:b0:3f:43:e0:fa:a2:99:2b:43:ee:ea:
         2d:17:1f:b3:8a:d5:69:71:86:91:39:fd:35:92:71:2f:b8:e6:
         00:1c:93:dc:11:95:6b:88:c8:16:c4:7f:20:08:61:23:cb:b5:
         e4:79:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----