Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7366 (0x1cc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Oct 31 14:58:59 2017 GMT
            Not After : Dec  1 14:58:59 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=ca.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:b8:12:05:90:a3:96:cb:02:bc:95:fe:97:aa:3c:
                    0c:1f:bc:d7:fa:88:30:f8:4b:4b:9b:9c:52:c2:a9:
                    57:f9:88:36:52:88:8c:fb:e7:8c:49:ee:60:4a:78:
                    87:45:7f:6e:64:7a:55:11:25:ae:c9:01:65:5c:8b:
                    4e:45:a3:a4:ba:04:6a:d3:f2:8c:d6:37:83:3f:80:
                    31:d7:eb:74:2e:db:19:4f:39:00:fd:95:43:0a:8d:
                    35:32:8a:e1:89:e5:1a:1a:f7:4b:06:b9:82:b4:07:
                    08:bd:ee:d6:43:eb:d9:a9:06:f8:b4:c3:0c:95:d3:
                    f1:f8:70:07:27:0b:eb:a1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                F0:D1:32:DE:F6:4D:AC:A8:94:55:19:05:E3:E4:16:C6:EB:D4:86:5D
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         7d:90:27:c4:83:3d:4d:25:e6:f8:91:2e:3b:17:16:fd:c5:8f:
         2d:d6:70:e5:40:c9:d3:37:18:69:7c:b4:bb:86:39:9f:9a:b3:
         48:a9:05:4b:60:63:5d:36:35:21:3d:4f:cd:a8:7f:5e:f7:ac:
         ac:e9:e0:e2:c5:a2:30:23:0d:92:9a:ad:7f:d6:01:a3:f3:1c:
         67:16:3d:0f:33:b3:4e:2f:c3:d9:38:fc:81:15:a5:d3:19:4e:
         1b:b3:49:bf:90:54:7c:9a:c7:ac:07:e8:cf:5c:be:5e:ee:f6:
         f3:1a:9b:cd:04:4c:3d:7e:57:38:23:bc:55:ee:02:6e:e7:d5:
         c2:5d:00:0e:c4:61:42:21:47:bb:bf:a0:69:f9:e2:5f:d9:51:
         6e:41:5a:6e:75:c8:b4:eb:7a:37:43:04:99:26:a7:3a:97:fb:
         80:31:de:e4:28:b0:34:cb:b9:83:8e:b4:21:bf:a4:a1:6b:5d:
         3b:49:65:36:0f:bf:13:97:e0:9e:63:b8:8b:bb:01:de:15:1e:
         22:73:fe:5a:ec:0c:ab:49:ec:2b:c0:48:18:12:05:7a:d1:6b:
         1f:90:ba:a7:b2:20:ea:4b:35:d4:a5:e1:cf:07:97:99:8a:e7:
         bd:a2:d7:69:7f:0c:fc:f9:8c:3e:5b:d8:00:c3:00:57:4c:0f:
         14:b0:cd:53
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHMYwDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xNzEwMzExNDU4NTlaFw0xODEyMDExNDU4NTlaMF0xCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKDARSRElHMQ4wDAYDVQQLDAVob3N0czEVMBMGA1UECwwM
Z3JpZC5raWFlLnJ1MRgwFgYDVQQDDA9jYS5ncmlkLmtpYWUucnUwgZ8wDQYJKoZI
hvcNAQEBBQADgY0AMIGJAoGBALgSBZCjlssCvJX+l6o8DB+81/qIMPhLS5ucUsKp
V/mINlKIjPvnjEnuYEp4h0V/bmR6VRElrskBZVyLTkWjpLoEatPyjNY3gz+AMdfr
dC7bGU85AP2VQwqNNTKK4YnlGhr3Swa5grQHCL3u1kPr2akG+LTDDJXT8fhwBycL
66GlAgMBAAGjggKgMIICnDAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwID+DAR
BglghkgBhvhCAQEEBAMCBNAwHQYDVR0OBBYEFPDRMt72TayolFUZBePkFsbr1IZd
MG0GA1UdIwRmMGSAFLca+X3+0h5hqamMIWiLfmCMuXBZoUmkRzBFMQswCQYDVQQG
EwJSVTENMAsGA1UEChMEUkRJRzEnMCUGA1UEAxMeUnVzc2lhbiBEYXRhLUludGVu
c2l2ZSBHcmlkIENBggEAMD0GA1UdEgQ2MDSBFHJkaWctY2FAZ3JpZC5raWFlLnJ1
hhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMD8GCCsGAQUFBwEBBDMwMTAv
BggrBgEFBQcwAoYjaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhLmh0bWww
NgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2Nh
Y3JsLnBlbTBMBgNVHSAERTBDMEEGDCsGAQQBgax7AQECATAxMC8GCCsGAQUFBwIB
FiNodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvcG9saWN5LzArBglghkgBhvhC
AQIEHhYcaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHLzAWBglghkgBhvhCAQgE
CRYHcG9saWN5LzAYBglghkgBhvhCAQQECxYJY2FjcmwucGVtMCAGCWCGSAGG+EIB
AwQTFhFjZ2ktYmluL2NoZWNrcmV2PzBUBglghkgBhvhCAQ0ERxZFSXNzdWllZCBi
eSBSRElHIENlcnRpZmljYXRpb24gQXV0aG9yaXR5LCBodHRwOi8vY2EuZ3JpZC5r
aWFlLnJ1L1JESUcvMA0GCSqGSIb3DQEBCwUAA4IBAQB9kCfEgz1NJeb4kS47Fxb9
xY8t1nDlQMnTNxhpfLS7hjmfmrNIqQVLYGNdNjUhPU/NqH9e96ys6eDixaIwIw2S
mq1/1gGj8xxnFj0PM7NOL8PZOPyBFaXTGU4bs0m/kFR8msesB+jPXL5e7vbzGpvN
BEw9flc4I7xV7gJu59XCXQAOxGFCIUe7v6Bp+eJf2VFuQVpudci063o3QwSZJqc6
l/uAMd7kKLA0y7mDjrQhv6Sha107SWU2D78Tl+CeY7iLuwHeFR4ic/5a7AyrSewr
wEgYEgV60WsfkLqnsiDqSzXUpeHPB5eZiue9otdpfwz8+Yw+W9gAwwBXTA8UsM1T
-----END CERTIFICATE-----