Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8303 (0x206f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Jan 14 14:13:36 2019 GMT
            Not After : Feb 14 14:13:36 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=hermes.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d8:9b:b0:22:b6:e4:22:ff:90:a5:e2:50:c2:1d:
                    68:3e:b9:7a:48:2f:e3:ec:fd:87:ec:61:10:2e:e2:
                    d9:54:52:cb:6a:a2:cc:41:a9:66:b2:22:6d:3c:eb:
                    f5:22:10:9b:23:d2:6f:0c:f4:b8:34:c0:08:52:9f:
                    4c:a7:db:7b:98:1f:e5:e0:28:4f:4c:6e:b6:33:09:
                    09:cf:c3:28:e0:f1:1e:ae:35:86:03:d2:de:d7:f9:
                    1f:bf:02:8d:ab:63:ab:fc:d5:34:b2:11:a1:b0:11:
                    93:42:ac:0b:9a:2b:25:49:49:0d:bd:4e:cf:5b:d7:
                    71:3a:06:51:04:85:c9:c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                E8:66:B9:2F:A9:57:62:C6:01:CF:A8:1E:BF:BC:44:5C:C1:31:F7:DB
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         b9:ed:96:ed:88:93:01:a9:a7:06:41:55:48:ae:b1:12:2b:56:
         a5:3d:2d:83:2c:43:df:d1:12:22:78:f4:f4:d8:64:13:86:ba:
         c4:ae:6e:a2:fb:49:4e:3f:67:d7:02:cf:04:f2:21:d1:1b:bc:
         ef:ea:d0:5f:e4:a4:ae:04:2f:f4:82:5d:bd:5f:44:33:0a:a3:
         3d:15:df:c2:05:60:a1:7c:c3:3b:2b:14:c4:b3:7c:b2:b5:f4:
         89:b2:43:db:d4:5d:3a:38:93:86:6e:29:27:14:7e:06:69:ea:
         8e:90:4d:77:26:34:2e:41:2b:06:00:4e:42:2a:9d:f3:c4:25:
         6a:45:01:6e:76:33:fc:b5:21:ea:ce:2e:40:60:5e:fa:89:4c:
         9e:4b:95:67:ac:c1:a8:e5:48:5c:d7:68:96:cc:ee:39:45:56:
         fe:94:b8:bb:4e:dc:80:73:e2:4c:15:67:5f:c4:c2:b0:2f:cd:
         fe:a0:52:76:92:16:31:10:1a:c5:ba:65:ee:71:64:57:f9:60:
         62:4d:0d:ef:5e:c6:fb:02:c6:c0:c6:83:54:c3:a8:e8:7d:6d:
         55:f9:0b:6c:fd:d3:22:03:f2:40:d1:ff:71:92:d0:ce:9c:f1:
         2a:2a:5f:01:bc:9a:2e:b7:0f:71:22:7b:ad:83:7f:e8:ff:14:
         76:74:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----