Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7392 (0x1ce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 13 09:30:29 2017 GMT
            Not After : Dec 14 09:30:29 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=astra.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:bc:28:7e:44:b7:2f:92:92:22:fe:f6:83:7b:60:
                    f7:3a:a6:77:52:23:fd:b5:ae:cb:74:74:6f:e2:0d:
                    f2:4b:f2:74:a9:d2:d1:a0:1b:38:21:f3:9c:76:81:
                    d4:a1:dc:18:21:d7:e8:35:dd:e4:35:d9:47:f1:1a:
                    fb:a7:7f:bc:65:fc:20:47:c0:de:7f:8d:45:f9:29:
                    ad:81:81:61:db:f6:22:87:99:2a:64:ab:0f:75:17:
                    97:e2:dd:58:77:db:09:b2:54:ae:08:d7:e9:e3:c4:
                    d0:68:a3:9e:5f:47:91:ee:e8:2f:aa:24:6f:ea:d1:
                    90:91:ca:f2:8a:c1:ed:46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                E0:DD:2B:CB:0B:48:9F:94:5A:0C:86:B1:45:C8:EE:C4:9E:CD:78:61
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:0b:92:c0:89:4e:a2:d4:5f:18:5e:d9:39:03:d5:dc:1a:
         06:70:10:f9:ae:25:51:39:7d:04:be:76:1c:ad:00:1f:7e:01:
         a2:34:22:df:cc:c8:a0:bb:ce:c8:a8:db:55:07:13:b3:30:b0:
         2f:7e:ec:0a:31:87:40:6b:cb:62:84:a6:26:ae:fc:cf:e4:39:
         d0:aa:d3:d3:ca:4f:b3:c3:a7:21:25:94:02:09:d9:77:c1:ba:
         37:c9:1f:1c:4a:5b:1f:53:7a:b9:1b:6d:30:9f:40:83:d0:10:
         b9:56:d3:9b:e9:cd:d2:c9:a3:9b:fc:80:90:f3:7b:7f:61:5e:
         c8:1c:89:a9:7a:f6:82:2a:3d:6e:64:f5:0e:fd:7c:64:dd:ae:
         d3:ad:3b:b6:80:56:e1:8f:2b:54:c7:3e:92:ab:a6:98:6b:f4:
         ab:2a:6c:9a:4d:71:2c:5e:d8:f0:c3:45:fd:69:30:39:d4:f7:
         56:88:45:cf:d8:ad:a7:ae:9f:1f:91:0b:4d:ca:d2:d6:b3:8e:
         69:d2:8e:8c:94:cd:e4:6b:e8:2a:d8:7d:17:49:1f:05:70:70:
         c5:63:34:b8:1e:e7:39:5a:3d:2f:94:74:1a:60:28:52:42:1b:
         99:9c:f0:70:d0:9b:9a:fa:c6:0f:c5:a9:e7:07:8a:fe:4f:e9:
         37:40:7b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----