Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8143 (0x1fcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 21 06:13:16 2018 GMT
            Not After : Dec 22 06:13:16 2019 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=ca.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a9:68:fd:f0:be:3d:ac:fd:01:3d:fa:b1:55:99:
                    ca:67:e9:25:1f:82:57:ee:00:b6:f6:80:c6:87:d7:
                    58:6e:3c:4d:46:fe:cf:22:1f:cb:78:d7:ab:89:87:
                    67:6a:cb:91:0e:76:ed:b7:ef:1c:3d:ce:f2:0b:e5:
                    d3:33:3b:6f:70:83:87:2d:f8:22:96:88:11:db:1f:
                    55:3f:59:45:dc:83:9e:7b:d8:61:0d:37:79:d8:84:
                    db:8a:63:b5:1f:bb:2e:64:5d:19:10:20:8f:7f:28:
                    c3:bd:69:38:6c:cb:2c:b4:52:ea:98:56:30:07:9c:
                    63:4b:ff:40:ed:61:66:71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                9B:1A:13:7A:34:C2:85:19:04:90:94:C3:20:34:50:BB:2F:69:BC:87
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         98:74:e3:8c:ea:72:0d:25:af:7b:6b:c0:20:a9:b7:61:3c:c1:
         e9:c2:4e:33:7a:a0:3f:4a:d6:4c:14:4b:14:90:18:ef:56:57:
         e3:e2:bb:01:bb:dc:2e:a8:94:b8:c9:36:15:bd:7a:3b:18:8e:
         a1:1f:fc:4d:3d:62:14:1a:a0:4c:51:3f:76:61:5a:c4:75:93:
         a8:57:ac:21:82:32:82:96:a6:51:f5:4a:73:a8:ad:0d:92:e1:
         45:71:2b:d2:bd:63:eb:44:a4:57:51:ff:8f:f9:03:d7:39:35:
         05:fd:8d:04:57:fd:b7:78:2a:61:d4:cc:b6:54:58:8a:b0:1b:
         9d:d4:22:5e:8b:f2:28:1b:60:2b:b1:dd:1b:49:c2:9a:1a:0f:
         10:c6:bc:22:72:1f:4a:87:4b:6a:d8:a2:2d:ad:42:0c:60:13:
         88:74:f9:6f:64:c9:52:d8:58:94:1a:94:22:50:84:b4:50:70:
         6b:b1:ae:41:21:8a:6b:b2:5e:f9:2c:0b:41:89:fb:b0:e3:70:
         98:e7:df:f8:1b:1c:a8:e4:25:c1:11:48:9b:6e:db:fa:61:4f:
         ae:cb:53:29:23:2c:1a:25:dd:4b:f1:11:a5:4d:52:a7:17:17:
         97:12:d3:31:32:ba:dc:fc:e1:6f:bf:9b:4a:05:62:e9:93:59:
         1c:76:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----