Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8218 (0x201a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  7 15:46:00 2018 GMT
            Not After : Jan  7 15:46:00 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=sdpd2.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:b2:fb:b1:0e:1f:e4:36:3f:82:a3:c0:3f:f9:53:
                    aa:82:91:c5:26:76:92:50:14:51:d8:47:78:87:a4:
                    02:72:06:ea:33:0d:32:2d:79:7a:e9:62:43:22:cd:
                    08:41:44:5c:93:b2:71:76:d4:0c:d2:2d:2b:4b:31:
                    ea:ff:5e:0a:00:2c:17:56:b6:ba:7c:08:4e:ff:b4:
                    3c:19:71:3c:84:63:e1:8e:e9:19:70:b6:c4:a9:6a:
                    fa:cb:61:19:75:d1:6e:56:47:53:ae:14:71:62:63:
                    bf:b5:de:bc:c0:c3:22:b5:98:30:cb:3e:86:fb:77:
                    ad:02:6c:fe:e5:a4:c7:76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                0A:CD:23:88:E6:8B:62:83:F5:49:0E:27:F7:EC:17:9B:35:47:C6:46
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         b8:7d:92:d2:9c:58:a9:a5:d2:e5:fa:a4:91:d6:c4:50:83:1f:
         79:e9:ab:ec:96:25:09:dd:3c:83:81:51:60:b5:27:6d:d1:38:
         03:f3:05:bf:37:de:aa:9b:d7:0d:81:f1:24:89:1f:85:0c:53:
         62:a3:9b:2a:9e:89:4f:21:14:be:79:73:a8:56:25:3c:be:16:
         33:fb:7f:68:69:92:0d:26:55:f4:1b:6b:38:26:97:19:55:25:
         18:9e:76:a5:b5:52:77:d1:fe:91:c5:55:80:71:85:7a:7e:6a:
         9b:82:23:41:65:36:70:4e:83:1d:05:0c:95:3c:f8:a0:37:eb:
         07:71:f4:d8:89:9c:03:d0:4d:0a:2e:57:a1:01:85:2f:b2:dd:
         ee:00:0d:f5:1d:16:d1:19:65:fe:07:95:e4:17:22:45:e6:e9:
         35:9b:a1:d8:9d:50:d5:8e:2b:ca:d9:e2:e0:3a:8d:fb:82:35:
         89:c0:5d:e4:3c:9d:7f:b8:87:79:64:af:33:d1:5e:60:d0:98:
         58:f9:a5:81:ef:10:b0:2b:a2:b6:ab:6c:3d:c5:b6:9f:bd:0b:
         9f:29:33:54:99:4d:6e:5a:2d:11:c0:d1:fd:fc:e7:ac:0b:8d:
         2a:4a:ea:ee:4f:ae:3d:6a:9f:b0:36:29:e9:97:01:2c:68:c6:
         e0:b5:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----