Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7231 (0x1c3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Aug 15 08:31:10 2017 GMT
            Not After : Sep 15 08:31:10 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=xr40.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:ba:fb:a9:f7:27:e8:ba:79:58:5b:8d:28:09:7c:
                    b4:31:d1:9e:d8:fc:89:6d:b0:f4:c4:ab:36:3d:10:
                    ad:65:cf:b3:bc:d7:dd:de:1f:0e:68:2b:d0:c3:fb:
                    37:03:1e:84:3a:9f:34:86:e9:c6:19:e0:a1:11:12:
                    68:24:4c:61:ad:f4:3e:ce:9e:40:8b:cd:fd:cb:34:
                    88:32:29:af:2b:a1:79:30:75:c3:ce:b8:2e:e2:c3:
                    0b:e0:a6:89:4a:98:4e:6c:ac:26:4b:d5:8f:da:64:
                    1c:82:ba:bd:07:57:c3:49:dd:70:bf:c3:2a:6e:9d:
                    66:05:ed:79:32:1c:04:5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                3D:76:8D:47:C8:B3:32:76:C7:C7:87:8A:31:AD:6F:99:24:BF:3A:40
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         c3:5f:01:49:a3:2f:17:8f:76:ee:80:d8:53:63:b2:91:e7:94:
         9f:51:29:e3:95:46:e3:75:60:89:e4:51:ff:f9:3e:dc:d3:7f:
         58:1a:3f:40:c7:79:78:88:25:54:d8:8e:d3:93:26:8e:97:d2:
         76:1b:f3:49:20:5b:02:c1:ca:04:3a:81:2c:f2:db:78:32:51:
         bc:04:64:2c:9c:09:07:c8:d2:b3:df:b3:d1:97:31:d5:84:e2:
         77:4c:38:04:b6:1b:2b:21:4d:6e:be:da:0b:7f:5c:28:58:7e:
         c0:5a:cc:c2:34:ca:34:f6:52:96:52:17:f7:7d:21:33:25:04:
         14:3e:dc:f4:83:ab:ca:c2:78:ac:6d:ab:de:95:18:e2:d7:7d:
         73:45:1c:91:02:4e:b7:83:21:ec:89:d1:7d:e4:0d:98:c2:d0:
         59:00:a9:21:16:06:1f:1b:f8:f5:9f:5c:92:3b:e6:8a:7b:49:
         c4:06:7d:e0:0d:78:23:1c:82:a9:98:f6:12:41:06:a7:a7:6d:
         f3:6b:be:37:34:7f:19:84:fb:47:9a:58:41:a9:9b:40:12:aa:
         e9:89:18:98:a2:0d:3c:62:86:c3:a7:ac:b4:7a:ff:d1:05:70:
         37:ae:fd:b7:3b:6a:6e:22:69:fd:f3:02:e9:df:dd:aa:60:8a:
         e3:b8:a7:98
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICHD8wDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xNzA4MTUwODMxMTBaFw0xODA5MTUwODMxMTBaMF8xCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKDARSRElHMQ4wDAYDVQQLDAVob3N0czEVMBMGA1UECwwM
Z3JpZC5raWFlLnJ1MRowGAYDVQQDDBF4cjQwLmdyaWQua2lhZS5ydTCBnzANBgkq
hkiG9w0BAQEFAAOBjQAwgYkCgYEAuvup9yfounlYW40oCXy0MdGe2PyJbbD0xKs2
PRCtZc+zvNfd3h8OaCvQw/s3Ax6EOp80hunGGeChERJoJExhrfQ+zp5Ai839yzSI
MimvK6F5MHXDzrgu4sML4KaJSphObKwmS9WP2mQcgrq9B1fDSd1wv8Mqbp1mBe15
MhwEW+0CAwEAAaOCAqAwggKcMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgP4
MBEGCWCGSAGG+EIBAQQEAwIE0DAdBgNVHQ4EFgQUPXaNR8izMnbHx4eKMa1vmSS/
OkAwbQYDVR0jBGYwZIAUtxr5ff7SHmGpqYwhaIt+YIy5cFmhSaRHMEUxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMScwJQYDVQQDEx5SdXNzaWFuIERhdGEtSW50
ZW5zaXZlIEdyaWQgQ0GCAQAwPQYDVR0SBDYwNIEUcmRpZy1jYUBncmlkLmtpYWUu
cnWGHGh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy8wPwYIKwYBBQUHAQEEMzAx
MC8GCCsGAQUFBzAChiNodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvY2EuaHRt
bDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcv
Y2FjcmwucGVtMEwGA1UdIARFMEMwQQYMKwYBBAGBrHsBAQIBMDEwLwYIKwYBBQUH
AgEWI2h0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy9wb2xpY3kvMCsGCWCGSAGG
+EIBAgQeFhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMBYGCWCGSAGG+EIB
CAQJFgdwb2xpY3kvMBgGCWCGSAGG+EIBBAQLFgljYWNybC5wZW0wIAYJYIZIAYb4
QgEDBBMWEWNnaS1iaW4vY2hlY2tyZXY/MFQGCWCGSAGG+EIBDQRHFkVJc3N1aWVk
IGJ5IFJESUcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHksIGh0dHA6Ly9jYS5ncmlk
LmtpYWUucnUvUkRJRy8wDQYJKoZIhvcNAQELBQADggEBAMNfAUmjLxePdu6A2FNj
spHnlJ9RKeOVRuN1YInkUf/5PtzTf1gaP0DHeXiIJVTYjtOTJo6X0nYb80kgWwLB
ygQ6gSzy23gyUbwEZCycCQfI0rPfs9GXMdWE4ndMOAS2GyshTW6+2gt/XChYfsBa
zMI0yjT2UpZSF/d9ITMlBBQ+3PSDq8rCeKxtq96VGOLXfXNFHJECTreDIeyJ0X3k
DZjC0FkAqSEWBh8b+PWfXJI75op7ScQGfeANeCMcgqmY9hJBBqenbfNrvjc0fxmE
+0eaWEGpm0ASqumJGJiiDTxihsOnrLR6/9EFcDeu/bc7am4iaf3zAunf3apgiuO4
p5g=
-----END CERTIFICATE-----