Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8007 (0x1f47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Aug 17 09:50:53 2018 GMT
            Not After : Sep 17 09:50:53 2019 GMT
        Subject: C=RU, O=RDIG, OU=users, OU=inp.nsk.su, CN=Andrey Kupich
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:aa:5d:1b:6b:e7:0b:96:61:c1:d7:aa:0f:10:6c:
                    76:c0:d5:ba:6d:a5:64:ef:1e:31:f4:7b:a8:f9:70:
                    e4:f8:bf:ee:ba:59:e6:60:f7:7f:0d:a0:58:1e:39:
                    ca:31:1b:a5:47:b3:aa:99:3e:1f:3e:58:1e:d3:59:
                    5c:2d:16:c1:b0:e5:35:21:cb:3f:4a:de:bb:a0:d1:
                    58:4a:79:6c:67:cc:ea:d3:5b:1b:24:0d:9e:91:31:
                    97:ed:c2:3c:63:85:25:98:cd:b5:b4:2b:e5:78:a5:
                    d9:bb:2a:9c:5c:56:38:63:e5:14:c6:9b:df:02:af:
                    b4:67:88:f5:b6:b4:50:99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, S/MIME, Object Signing
            X509v3 Subject Alternative Name: 
                carrier-pigeon-destination:andrey dot kupich at cern dot ch
            X509v3 Subject Key Identifier: 
                32:07:F8:7C:72:B1:19:26:23:1D:D9:02:BB:1B:50:ED:96:D7:4E:31
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         1f:92:09:df:9d:6f:83:fa:11:c2:3b:c1:60:bb:6b:70:c5:81:
         84:a5:bc:50:45:d4:ba:55:8b:9f:76:69:b1:d8:1e:a0:b0:1a:
         cc:7f:a8:90:0e:c6:0c:77:d4:4a:cb:c4:4f:58:8b:32:0a:98:
         88:98:83:d9:36:e6:ed:48:f7:1b:b6:03:65:5a:b0:37:e7:ac:
         ba:75:ee:f9:fb:ca:95:a8:10:1f:b2:65:b3:c0:4d:34:48:f6:
         01:4f:e7:97:40:fd:4c:e4:7c:e2:60:19:1a:f1:82:ad:f7:e4:
         45:e0:96:d7:3e:82:5e:f0:b0:5b:e8:94:46:f5:5c:10:1e:9f:
         81:e5:69:4c:dd:d2:95:12:50:89:41:d1:77:fb:aa:b1:1b:62:
         7e:b5:0c:21:87:39:db:1f:29:5e:52:a3:58:cd:82:97:7f:ed:
         0e:22:0b:01:be:f8:8a:59:91:ca:98:c3:c6:47:10:b4:9c:f0:
         42:fd:00:9c:51:cb:64:c3:e6:38:93:36:e3:ee:a6:54:03:77:
         43:3c:91:fc:4f:36:6f:8f:78:ff:3a:94:cf:f0:b0:6e:32:6a:
         ab:15:b6:e0:ff:f8:7c:b5:90:63:03:e3:0e:0c:0c:a1:fc:15:
         66:27:c2:80:2f:68:8e:29:a7:2d:9a:b9:68:c8:e3:6c:45:42:
         c1:0b:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----