Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8127 (0x1fbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 20 16:22:51 2018 GMT
            Not After : Dec 21 16:22:51 2019 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=jinr.ru, CN=rdz09.jinr.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:ce:25:3f:42:75:4c:ae:62:b6:ee:df:ce:6e:59:
                    7b:9b:90:2b:3a:6a:e3:ee:1a:9f:a7:20:b1:f0:f2:
                    4c:9d:05:68:53:c3:0a:20:1e:eb:7b:78:ce:d7:96:
                    76:7e:be:76:a9:2b:c1:41:a2:1f:b7:b5:3c:26:a0:
                    f4:f3:b9:91:30:16:df:b5:29:99:e1:59:cc:cf:6f:
                    fa:76:a3:e8:0f:02:90:21:e9:89:0c:5a:3e:c8:af:
                    3e:95:37:89:92:39:9e:16:2a:a7:c6:1c:d1:eb:d2:
                    12:32:e0:67:c0:06:0c:6a:8a:f8:ef:0b:3d:e5:f2:
                    80:89:82:b0:bf:3e:d8:41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                85:53:5C:73:5F:49:E7:74:59:32:3F:7C:03:2B:8A:5C:54:5B:5C:FC
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         a4:1a:a3:72:f7:18:dc:5f:ca:53:b9:d7:ab:7b:fe:0f:79:85:
         d5:40:52:50:ba:49:17:3b:bb:1e:2b:93:bb:ae:0c:25:e9:fc:
         fb:46:ca:43:a3:62:50:c9:be:ba:e9:0d:8d:63:48:41:0c:50:
         85:96:53:4d:fc:bc:d5:da:43:36:12:3e:74:0b:cf:18:8a:de:
         e0:89:88:7c:df:20:d5:a4:0f:d0:24:7d:ab:d3:41:cb:f0:28:
         88:5e:92:01:57:cb:3c:08:d7:8e:27:54:bf:83:d7:fb:5b:9d:
         53:49:13:7b:6a:4f:3c:f0:d6:4b:2a:f3:b4:61:3d:7e:7c:1f:
         c9:4c:99:a4:fe:07:55:7f:85:42:78:2b:88:f3:80:7a:e4:01:
         89:bb:9f:da:24:6a:8e:9f:05:0e:a5:fd:12:2c:b2:15:2e:f3:
         84:27:37:6b:a3:45:ce:0e:36:6f:47:57:21:56:98:68:91:80:
         e3:28:d3:40:43:bf:9b:46:f6:50:fa:67:dc:c9:98:57:cd:dc:
         c0:2a:f9:99:94:ac:df:e4:75:3f:87:f3:d5:29:cf:67:25:bb:
         4c:ac:bc:3d:91:59:51:4d:b4:31:b7:11:f3:83:41:31:56:23:
         0c:cf:42:62:07:61:7d:39:0f:f8:33:d1:57:53:04:ed:5d:37:
         45:70:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----