Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7353 (0x1cb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Oct 26 15:23:58 2017 GMT
            Not After : Nov 26 15:23:58 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sespd2.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:e2:b0:db:61:7a:26:98:37:ac:8a:48:7a:ff:e4:
                    73:8e:30:07:50:e9:b5:d5:ff:72:94:b4:3a:c5:58:
                    5b:8a:26:c0:28:50:bf:23:05:c8:66:7d:33:48:2a:
                    30:be:80:92:97:76:95:81:8f:7f:5a:37:54:a2:45:
                    89:bb:8a:82:9f:5d:0d:48:19:df:e7:4b:b7:95:a9:
                    35:54:59:b2:33:57:33:9b:5f:99:8f:a7:d3:ad:ae:
                    d8:ea:b5:a2:85:5d:9a:2d:d2:45:1b:d9:27:1f:56:
                    5f:73:50:93:0c:c2:08:53:c4:4a:9e:33:52:a9:75:
                    7c:af:a8:4b:c2:89:fb:f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                AE:9D:90:DC:5E:D7:63:95:A9:B9:57:F3:48:70:17:BD:FB:25:24:5B
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         82:f5:8e:b5:4d:4f:7f:86:c7:96:c0:f3:49:bf:1e:df:01:d2:
         0e:1f:0f:2b:d9:cc:e5:8c:a1:53:80:56:03:9f:2c:8e:9f:0a:
         81:63:9d:1a:b0:40:ea:aa:22:84:93:db:c5:0f:27:ad:4d:3b:
         10:0c:b3:c6:eb:69:13:3e:07:09:14:5d:6c:e5:5d:12:fe:93:
         31:92:b3:a1:b5:05:4e:7f:a3:fa:c5:d4:d8:d6:a9:45:5d:ae:
         f2:9a:c2:0c:f3:4d:15:f5:5f:47:93:42:35:6a:28:f7:1d:ce:
         fc:8d:5f:cc:15:e4:bd:a1:0a:a1:ab:d3:15:20:80:a1:4a:30:
         48:ed:2e:9c:b8:4c:7c:58:1a:b3:ca:b7:72:9b:ca:2b:e1:76:
         2c:c2:b7:3a:af:3c:3d:f7:f5:09:01:79:ea:6c:a6:62:25:99:
         a0:37:70:fe:90:c5:7b:66:01:6f:25:24:b9:a4:52:bc:dd:da:
         5e:b1:d1:c8:59:74:34:3e:dd:fa:3f:43:da:9f:5f:b3:a9:86:
         0d:d6:1d:f6:de:0d:d6:eb:c7:22:76:71:10:54:ab:b7:f9:b7:
         a3:29:67:72:45:8f:78:7a:b8:93:1a:12:96:44:72:2b:dc:4a:
         96:76:bd:ff:83:3d:b9:5e:10:4c:59:8b:67:98:75:26:3f:7c:
         7c:16:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----