Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7845 (0x1ea5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Jun  7 10:41:45 2018 GMT
            Not After : Jul  8 10:41:45 2019 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sdpd23.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:bb:4e:28:6e:41:bb:85:51:38:ab:a1:a0:9f:8f:
                    8e:c5:76:17:49:41:13:b7:4f:8c:27:ad:0a:bb:73:
                    b7:2b:6d:93:5b:6a:89:78:a0:3d:2d:ef:9e:ca:7b:
                    b5:53:9f:7d:82:2c:b8:cf:cd:7c:04:33:83:44:43:
                    a9:41:3f:43:44:70:4d:8b:1c:ad:aa:13:7e:29:81:
                    71:54:e0:b9:16:be:34:c4:f9:ea:c0:67:66:4f:c2:
                    8f:e6:6c:9c:71:8b:7d:01:ec:df:11:7f:36:89:a8:
                    dd:73:fe:bd:05:39:67:9c:9c:cb:1a:ea:9f:b7:ff:
                    d8:2e:50:69:2d:2b:92:fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                AD:2E:74:2A:FD:74:F7:27:3A:EB:87:DB:95:35:0E:6D:E5:FF:7D:85
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         89:2f:56:18:0c:09:33:23:a6:ce:f1:df:a7:dc:80:67:f8:bb:
         7b:06:c6:6f:f9:9b:8c:03:78:b2:b5:f0:8b:76:ec:06:bd:3a:
         c3:01:42:04:1b:08:cb:9b:f8:19:bf:bd:39:55:91:cd:73:34:
         c5:90:97:f6:11:cb:9b:5e:11:88:23:93:0a:a9:a7:41:8d:c6:
         16:38:28:f2:4b:89:09:96:e6:84:79:f1:ff:21:70:43:3a:6c:
         d0:b2:93:4d:15:b3:77:dc:ac:8c:3d:7d:62:6f:f9:87:79:9d:
         33:de:48:54:81:ec:e7:97:42:70:ee:f2:19:f3:6d:df:d3:01:
         6e:7e:5c:c3:dd:21:f2:14:8a:ed:7b:98:4e:8a:15:48:1c:3f:
         c6:8e:e3:3d:0d:40:ed:2c:93:20:fc:a3:20:2e:76:60:43:54:
         fb:29:9b:39:ef:71:42:61:e6:60:db:08:3b:28:64:e9:d1:85:
         7c:cb:2a:00:0f:44:63:02:eb:00:bc:ac:ac:90:44:ef:f2:aa:
         f1:f7:dc:9b:e7:b6:d0:96:63:6c:06:2d:70:97:b2:c2:b6:dd:
         43:92:72:cb:f3:43:d8:72:60:2a:ad:ee:ab:fc:27:5a:29:80:
         69:bd:6e:72:44:7a:cf:b8:2d:aa:6e:af:6d:f7:b9:80:35:40:
         01:fb:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----