Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7565 (0x1d8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 27 14:21:20 2017 GMT
            Not After : Jan 27 14:21:20 2019 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=hermes.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a7:ef:6e:b9:a7:38:37:e6:82:ae:d7:86:cc:86:
                    fa:dd:64:c8:f3:61:6d:8d:53:21:23:97:0b:4c:89:
                    a7:e4:09:0d:a3:b3:19:42:2e:68:e4:0e:c0:d8:d1:
                    d5:93:69:95:ea:4f:a2:2c:cb:d5:a1:e9:cd:b7:b2:
                    97:40:08:ac:75:f4:8f:5d:98:43:c8:d5:30:0e:41:
                    c4:76:24:e6:df:c0:b4:bd:3e:a7:1e:32:4c:98:38:
                    c5:04:33:32:69:e1:4d:3a:fc:b3:c6:bb:62:1d:ae:
                    9b:03:bc:65:ff:da:ba:7e:1d:64:b9:52:05:0b:16:
                    40:08:29:57:b7:5d:bb:20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                DE:9C:D9:26:3D:8B:50:65:7B:16:E9:D1:87:F4:07:2C:50:72:DE:28
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         52:02:af:d5:9b:04:a2:67:12:21:8c:09:86:13:16:84:bf:ca:
         ec:66:6e:64:f4:d2:9c:2c:84:21:9b:7f:4e:b6:b5:46:65:7a:
         ca:cc:13:40:62:e6:2b:b3:90:74:49:93:01:a0:a5:4f:4c:61:
         c8:c7:8c:71:a6:36:3d:62:7a:18:f2:26:e2:86:f8:fc:72:2b:
         ba:6c:64:be:04:34:ed:46:1d:f6:95:97:00:f5:2a:e7:68:e0:
         d4:7f:64:93:39:2a:85:40:d3:b2:b5:30:5a:0a:78:e4:13:cd:
         e5:06:b0:93:a3:68:93:3f:31:7f:aa:51:73:f5:76:9c:cf:a5:
         91:13:b2:0b:8d:c9:49:9f:8c:40:ae:49:87:4b:23:a3:3d:47:
         6f:75:2b:21:0c:4f:28:56:dc:3d:cc:bc:06:b7:ae:28:89:f2:
         19:03:e7:7a:5a:8e:ee:cd:7e:e1:79:42:ac:06:50:e1:17:97:
         17:34:2a:ba:a2:25:ec:9a:ea:c1:0c:4b:3d:08:bc:25:93:3b:
         34:db:7c:5d:d1:56:3e:f8:06:e5:77:10:9b:77:c6:fd:3f:24:
         30:69:38:5a:01:d5:03:eb:38:2e:de:60:bc:92:51:92:8c:38:
         34:11:df:99:7f:54:6f:90:bd:94:af:a3:4e:b5:e0:5b:94:b0:
         6c:07:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----