Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7397 (0x1ce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 13 09:31:26 2017 GMT
            Not After : Dec 14 09:31:26 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=itep.ru, CN=se3.itep.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:e3:20:c2:97:67:8b:43:ef:31:a2:d9:e1:e9:2c:
                    bc:fc:9c:f5:61:b2:aa:e1:fe:36:46:dd:46:1d:63:
                    86:70:c6:90:b6:87:75:59:f6:13:16:73:bb:8a:f1:
                    f3:14:c6:cb:d7:69:e9:b6:4a:f1:fe:a4:04:83:74:
                    e9:57:24:d1:d7:cb:33:e3:6a:a6:fd:a5:b4:24:f9:
                    b4:c0:0a:78:e0:bb:6c:d3:3b:87:1f:d6:68:9a:fe:
                    7a:5c:0d:07:f3:f7:4a:9a:21:71:6b:b0:d3:db:cc:
                    71:f2:e2:63:15:e3:31:73:b0:d6:8e:9b:63:08:b2:
                    13:ad:f8:15:15:63:a0:3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                59:37:4A:B2:3E:0A:BB:C8:C1:7F:A5:23:8A:5B:D5:8E:7F:F0:56:B1
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:56:0e:19:61:bd:a9:f7:16:98:f2:5b:53:1d:42:e1:ab:
         cd:fb:6f:4e:a8:7e:65:45:68:cc:f4:c9:40:98:22:71:21:94:
         c5:19:b2:77:42:8b:28:02:d0:90:15:29:98:e3:21:e2:f0:88:
         93:35:29:4a:21:a6:0a:65:7c:b9:42:80:61:0a:ec:a1:93:84:
         83:0e:2a:f8:22:31:2d:fb:7d:80:e1:3c:c8:76:8e:8e:e0:6b:
         9e:3c:1b:50:da:33:7e:42:ae:d5:07:52:9a:2b:2a:d1:a1:ff:
         6b:2a:6a:65:c2:4c:e7:00:be:3a:e4:ba:ae:0c:42:7d:5e:ef:
         d1:5a:cf:47:dd:c8:7b:92:21:90:72:3f:b0:0f:7e:e6:83:ca:
         f4:5e:31:7e:7c:72:68:ab:30:ac:0c:63:49:b0:f0:49:e6:47:
         68:40:22:68:7b:30:1e:f1:95:e2:c7:1d:30:8d:21:af:03:da:
         ce:b4:3a:78:7e:66:17:50:60:20:90:99:ab:88:59:4f:ba:79:
         63:c5:ba:35:8d:2d:43:76:8b:15:08:78:f8:3d:96:79:89:78:
         9e:15:17:76:eb:fe:ed:b8:bd:21:6f:a6:3c:65:90:df:87:d7:
         14:64:38:91:b0:87:f1:c2:48:a0:cb:e6:57:74:43:08:1d:81:
         4d:d8:10:90
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgICHOUwDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xNzExMTMwOTMxMjZaFw0xODEyMTQwOTMxMjZaMFQxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMQ4wDAYDVQQLEwVob3N0czEQMA4GA1UECxMH
aXRlcC5ydTEUMBIGA1UEAxMLc2UzLml0ZXAucnUwgZ8wDQYJKoZIhvcNAQEBBQAD
gY0AMIGJAoGBAOMgwpdni0PvMaLZ4eksvPyc9WGyquH+NkbdRh1jhnDGkLaHdVn2
ExZzu4rx8xTGy9dp6bZK8f6kBIN06Vck0dfLM+Nqpv2ltCT5tMAKeOC7bNM7hx/W
aJr+elwNB/P3SpohcWuw09vMcfLiYxXjMXOw1o6bYwiyE634FRVjoD0pAgMBAAGj
ggKgMIICnDAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwID+DARBglghkgBhvhC
AQEEBAMCBNAwHQYDVR0OBBYEFFk3SrI+CrvIwX+lI4pb1Y5/8FaxMG0GA1UdIwRm
MGSAFLca+X3+0h5hqamMIWiLfmCMuXBZoUmkRzBFMQswCQYDVQQGEwJSVTENMAsG
A1UEChMEUkRJRzEnMCUGA1UEAxMeUnVzc2lhbiBEYXRhLUludGVuc2l2ZSBHcmlk
IENBggEAMD0GA1UdEgQ2MDSBFHJkaWctY2FAZ3JpZC5raWFlLnJ1hhxodHRwOi8v
Y2EuZ3JpZC5raWFlLnJ1L1JESUcvMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcw
AoYjaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhLmh0bWwwNgYDVR0fBC8w
LTAroCmgJ4YlaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhY3JsLnBlbTBM
BgNVHSAERTBDMEEGDCsGAQQBgax7AQECATAxMC8GCCsGAQUFBwIBFiNodHRwOi8v
Y2EuZ3JpZC5raWFlLnJ1L1JESUcvcG9saWN5LzArBglghkgBhvhCAQIEHhYcaHR0
cDovL2NhLmdyaWQua2lhZS5ydS9SRElHLzAWBglghkgBhvhCAQgECRYHcG9saWN5
LzAYBglghkgBhvhCAQQECxYJY2FjcmwucGVtMCAGCWCGSAGG+EIBAwQTFhFjZ2kt
YmluL2NoZWNrcmV2PzBUBglghkgBhvhCAQ0ERxZFSXNzdWllZCBieSBSRElHIENl
cnRpZmljYXRpb24gQXV0aG9yaXR5LCBodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JE
SUcvMA0GCSqGSIb3DQEBCwUAA4IBAQBKW1YOGWG9qfcWmPJbUx1C4avN+29OqH5l
RWjM9MlAmCJxIZTFGbJ3QosoAtCQFSmY4yHi8IiTNSlKIaYKZXy5QoBhCuyhk4SD
Dir4IjEt+32A4TzIdo6O4GuePBtQ2jN+Qq7VB1KaKyrRof9rKmplwkznAL465Lqu
DEJ9Xu/RWs9H3ch7kiGQcj+wD37mg8r0XjF+fHJoqzCsDGNJsPBJ5kdoQCJoezAe
8ZXixx0wjSGvA9rOtDp4fmYXUGAgkJmriFlPunljxbo1jS1DdosVCHj4PZZ5iXie
FRd26/7tuL0hb6Y8ZZDfh9cUZDiRsIfxwkigy+ZXdEMIHYFN2BCQ
-----END CERTIFICATE-----