Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7521 (0x1d61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 22 13:52:00 2017 GMT
            Not After : Dec 23 13:52:00 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sdpd12.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:e2:fe:13:dd:d8:10:f1:f2:3c:61:c6:80:9e:ed:
                    40:84:73:b3:21:ee:dc:a8:d2:91:03:97:80:b1:8f:
                    16:51:f6:57:2e:9f:5e:60:58:f7:66:1b:dd:87:dd:
                    c4:3d:51:4a:1a:73:d5:a5:47:a3:43:b3:12:d5:8d:
                    1a:5d:73:59:99:b9:7c:91:c4:3e:73:06:52:48:f4:
                    e8:d6:92:3b:cc:a6:e3:ca:44:a3:fd:a9:73:0c:d4:
                    95:f7:89:c1:18:61:82:2f:93:52:6d:fd:c9:74:04:
                    da:14:50:30:e5:a3:9c:0e:da:98:3e:3c:8f:ce:3e:
                    64:7f:35:4a:ce:a3:aa:75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                ED:18:E8:16:5C:C6:40:F5:48:2F:1D:C2:77:0D:DB:29:C8:7E:4A:10
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         42:b1:d3:37:d2:bd:be:ec:1c:3c:c6:6b:b3:5c:dd:57:4c:c6:
         c4:8e:c8:93:d8:8f:75:cb:8b:66:4e:ea:12:17:27:cb:15:c9:
         90:6e:da:56:55:5f:2c:1c:d4:67:0d:86:47:64:a3:a2:36:e5:
         0c:6b:8c:f0:e6:76:6d:e4:07:43:82:c1:f9:81:fa:a8:b7:89:
         65:69:28:f4:f7:0e:54:0d:ac:f1:60:c2:b7:a0:07:9b:71:92:
         b0:43:ea:f6:6d:ac:f2:60:f6:54:c7:bd:e7:80:f2:fe:4b:95:
         66:92:ed:1b:f5:e3:0b:f8:16:a3:d3:19:7c:b7:fa:92:ec:d1:
         31:f7:68:47:0c:42:a6:c9:d6:c5:e5:75:3c:25:a9:c1:cb:32:
         4b:e2:2b:48:56:08:a6:c1:4d:27:79:e5:1c:17:77:30:85:5a:
         2f:a9:21:ab:15:6f:2d:a4:3e:28:d6:38:3a:29:69:27:98:38:
         98:44:04:53:96:66:cd:28:db:18:31:30:0e:f4:5a:7f:7a:17:
         a7:7d:f2:8b:87:90:e1:cc:40:06:ca:23:21:e5:d7:3a:66:e6:
         db:a3:94:d5:8d:8f:04:ed:96:9b:9b:8c:bf:96:42:e2:ec:e4:
         7a:44:6d:5c:a1:f4:25:94:c7:6d:83:90:d6:43:ae:41:35:c8:
         ae:d9:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----