Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7278 (0x1c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Aug 18 15:41:15 2017 GMT
            Not After : Sep 18 15:41:15 2018 GMT
        Subject: C=RU, O=RDIG, OU=users, OU=inp.nsk.su, CN=Andrey Kupich
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c6:b6:f8:81:e0:8a:44:c6:2e:ef:62:3e:2c:11:
                    60:1a:9c:f5:87:1d:d1:3e:bf:42:dd:cf:e5:27:a2:
                    19:92:ea:85:0d:e4:10:24:53:93:52:2f:52:84:6c:
                    60:69:4a:47:69:b4:59:36:e4:b8:69:52:1f:f2:e9:
                    f2:72:7b:e9:4c:64:94:b0:fc:3e:90:eb:bc:e1:4d:
                    91:a2:ab:1a:e5:0d:f6:8b:55:63:14:dd:ec:c7:72:
                    3d:ef:99:63:cb:54:38:d0:69:cc:93:98:3b:ac:6e:
                    ef:f5:36:94:9e:97:6c:09:a3:c1:ba:40:02:4f:78:
                    30:3a:3e:3d:23:fb:ed:f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, S/MIME, Object Signing
            X509v3 Subject Alternative Name: 
                carrier-pigeon-destination:andrey dot kupich at cern dot ch
            X509v3 Subject Key Identifier: 
                29:E0:7A:6E:68:40:96:9F:78:08:E4:EF:A6:29:CA:71:5F:20:BB:39
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         61:cb:af:81:f8:fd:01:26:16:a0:9d:98:5d:7f:f3:d8:f1:0b:
         90:86:a8:6b:74:60:b4:c0:ea:56:ee:d2:b6:34:da:c2:ad:9a:
         ef:ae:70:50:ed:a2:66:09:df:fb:77:dd:51:92:38:f5:7c:e1:
         1e:b6:be:74:b1:4f:c8:03:09:58:62:23:f1:d1:b4:4c:31:30:
         0c:66:b6:cf:86:0d:f1:ad:df:8c:98:50:c8:b5:48:d6:37:ac:
         71:a6:ec:81:72:f7:e6:17:72:6c:43:be:f4:0d:15:28:ee:61:
         df:65:21:2c:04:e0:ca:eb:85:2b:f8:32:c7:24:74:28:5a:b9:
         34:4c:ad:84:77:f2:94:fd:33:c8:ad:69:12:e8:55:10:d7:73:
         02:16:e2:1d:32:91:2e:d3:1d:fa:ab:0e:7e:c4:d4:14:a4:29:
         ac:04:b9:8c:85:f0:51:4d:cb:4d:08:63:fb:a7:95:08:f1:2a:
         f9:8b:b4:98:47:fe:84:91:40:fc:3c:59:7e:d1:10:60:b8:27:
         9a:fb:ea:04:10:9b:09:59:cf:3f:06:ec:16:71:81:20:2e:00:
         3f:a7:86:be:a2:73:34:e2:54:2e:2c:77:24:95:42:ba:66:f3:
         a1:a5:57:5a:cc:2b:c9:09:a4:56:07:58:61:b9:6a:ed:af:01:
         42:53:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----