Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7369 (0x1cc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Oct 31 14:59:45 2017 GMT
            Not After : Dec  1 14:59:45 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=rnag1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:e1:90:1d:41:fb:04:1e:e5:51:a7:9b:a9:5b:85:
                    c1:9c:72:58:0b:8a:d3:33:f1:ba:f5:c2:3d:07:d9:
                    89:f4:f1:14:b6:51:6a:1b:4b:56:ce:d6:0e:2c:d2:
                    10:ff:74:3c:54:13:6a:5f:af:63:9a:fb:2b:7a:15:
                    ba:5b:ce:6e:46:a7:38:82:cd:58:dd:3d:60:3d:07:
                    f5:53:fe:97:e9:3a:dc:52:94:4e:88:3b:d8:f9:90:
                    39:4d:a0:83:2b:77:c8:75:54:f4:cc:7f:02:c6:87:
                    1e:9d:42:11:6e:74:cd:ec:ff:a9:fe:4e:4e:85:cf:
                    eb:8e:8d:20:77:8c:6c:45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                09:BC:2D:AD:34:A0:02:18:8F:02:22:3A:F6:A9:DE:DC:6F:F7:73:03
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         9d:32:bd:6c:25:29:45:25:e5:eb:70:a7:c8:bf:60:57:2d:76:
         d2:56:78:13:34:01:c8:81:7e:0a:f9:ae:63:cb:ef:54:97:ac:
         e1:09:6b:35:57:bf:05:d8:37:ac:ee:dd:11:42:56:21:e6:da:
         dd:81:0b:d1:1b:00:c8:c3:db:81:50:21:fb:94:a6:62:51:c5:
         22:be:31:eb:eb:13:54:c4:33:5d:55:b1:3f:0f:60:f4:80:c3:
         0c:b0:45:97:ca:5e:d2:4d:fa:0b:7f:db:02:bf:20:ed:d2:39:
         31:b0:8f:a0:a2:de:cb:fc:6f:8a:56:8e:99:ef:07:87:8c:ed:
         d1:3c:39:bd:15:d9:a8:70:83:ae:a7:fe:1b:31:38:cf:01:3c:
         e7:72:50:47:22:cd:c6:ed:61:b1:55:b9:16:ec:5b:f6:6b:a9:
         98:74:79:15:d7:74:4d:76:b5:24:97:f6:d8:a1:84:2a:64:78:
         c5:3b:5d:84:91:ad:67:42:50:0a:d4:31:40:c5:54:bc:42:d3:
         1f:f8:8c:4b:df:aa:a2:e5:44:1f:14:9f:f1:d0:37:d6:e7:dd:
         c9:3f:c6:ce:88:94:10:4e:6c:17:0c:75:6e:da:84:74:7a:97:
         b6:7d:1e:97:61:ea:21:d0:4a:57:d7:48:55:ec:14:3b:0a:5e:
         6d:54:56:d5
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICHMkwDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xNzEwMzExNDU5NDVaFw0xODEyMDExNDU5NDVaMGAxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKDARSRElHMQ4wDAYDVQQLDAVob3N0czEVMBMGA1UECwwM
Z3JpZC5raWFlLnJ1MRswGQYDVQQDDBJybmFnMS5ncmlkLmtpYWUucnUwgZ8wDQYJ
KoZIhvcNAQEBBQADgY0AMIGJAoGBAOGQHUH7BB7lUaebqVuFwZxyWAuK0zPxuvXC
PQfZifTxFLZRahtLVs7WDizSEP90PFQTal+vY5r7K3oVulvObkanOILNWN09YD0H
9VP+l+k63FKUTog72PmQOU2ggyt3yHVU9Mx/AsaHHp1CEW50zez/qf5OToXP646N
IHeMbEXPAgMBAAGjggKgMIICnDAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwID
+DARBglghkgBhvhCAQEEBAMCBNAwHQYDVR0OBBYEFAm8La00oAIYjwIiOvap3txv
93MDMG0GA1UdIwRmMGSAFLca+X3+0h5hqamMIWiLfmCMuXBZoUmkRzBFMQswCQYD
VQQGEwJSVTENMAsGA1UEChMEUkRJRzEnMCUGA1UEAxMeUnVzc2lhbiBEYXRhLUlu
dGVuc2l2ZSBHcmlkIENBggEAMD0GA1UdEgQ2MDSBFHJkaWctY2FAZ3JpZC5raWFl
LnJ1hhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMD8GCCsGAQUFBwEBBDMw
MTAvBggrBgEFBQcwAoYjaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhLmh0
bWwwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElH
L2NhY3JsLnBlbTBMBgNVHSAERTBDMEEGDCsGAQQBgax7AQECATAxMC8GCCsGAQUF
BwIBFiNodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvcG9saWN5LzArBglghkgB
hvhCAQIEHhYcaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHLzAWBglghkgBhvhC
AQgECRYHcG9saWN5LzAYBglghkgBhvhCAQQECxYJY2FjcmwucGVtMCAGCWCGSAGG
+EIBAwQTFhFjZ2ktYmluL2NoZWNrcmV2PzBUBglghkgBhvhCAQ0ERxZFSXNzdWll
ZCBieSBSRElHIENlcnRpZmljYXRpb24gQXV0aG9yaXR5LCBodHRwOi8vY2EuZ3Jp
ZC5raWFlLnJ1L1JESUcvMA0GCSqGSIb3DQEBCwUAA4IBAQCdMr1sJSlFJeXrcKfI
v2BXLXbSVngTNAHIgX4K+a5jy+9Ul6zhCWs1V78F2Des7t0RQlYh5trdgQvRGwDI
w9uBUCH7lKZiUcUivjHr6xNUxDNdVbE/D2D0gMMMsEWXyl7STfoLf9sCvyDt0jkx
sI+got7L/G+KVo6Z7weHjO3RPDm9FdmocIOup/4bMTjPATznclBHIs3G7WGxVbkW
7Fv2a6mYdHkV13RNdrUkl/bYoYQqZHjFO12Eka1nQlAK1DFAxVS8QtMf+IxL36qi
5UQfFJ/x0DfW593JP8bOiJQQTmwXDHVu2oR0epe2fR6XYeoh0EpX10hV7BQ7Cl5t
VFbV
-----END CERTIFICATE-----