Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8403 (0x20d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Mar 25 08:24:28 2019 GMT
            Not After : Apr 24 08:24:28 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=jinr.ru, CN=rda001.jinr-t1.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c5:f0:0a:4a:ad:b7:a6:be:d0:28:ba:70:41:76:
                    a6:f4:f7:8b:15:2d:b4:34:82:ea:df:db:99:8c:c3:
                    9e:cd:38:41:a4:4a:d8:1f:15:6f:77:f5:ef:10:c7:
                    e0:a0:97:ee:4c:2f:3b:76:5f:7c:fb:f2:9f:d8:04:
                    d3:fa:14:0e:59:ed:fc:93:40:1f:72:12:72:8f:e1:
                    ee:40:d7:75:8f:f9:46:1e:8c:a5:b9:43:b1:2e:cd:
                    f9:59:23:93:cb:45:75:9d:e2:13:78:65:a4:e4:fb:
                    75:4c:3a:33:a4:26:32:6a:c8:84:3a:77:1c:66:2c:
                    6a:84:33:d0:e4:74:24:98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                57:00:93:F5:45:E7:89:50:FA:C1:2F:7C:94:F6:DB:D8:FB:BF:27:80
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         21:dd:89:8a:9d:c4:80:c6:8d:db:03:03:93:7b:a0:d7:74:f2:
         09:63:43:57:68:d2:b9:b8:af:15:33:e9:20:fe:f2:01:08:4a:
         93:44:76:74:f1:2a:bf:b6:44:65:80:d7:31:f9:7e:e5:cd:20:
         15:32:bd:8d:10:bb:22:c7:0c:0b:95:b7:0f:64:6c:8b:99:0a:
         0d:a1:46:e9:7b:86:d4:63:9e:5d:b1:81:d9:ec:62:d0:fa:27:
         c0:83:e1:1a:c3:1b:c5:0b:f9:b1:f0:66:59:10:b8:cf:3e:46:
         fd:f0:c4:fc:fa:f8:21:c9:86:cb:fe:9f:31:26:6b:4e:2f:f2:
         d0:0c:f1:a8:af:8d:9d:3e:d7:2a:fc:65:a6:87:b7:ca:2f:f5:
         65:a0:e0:6b:52:49:11:cf:35:4e:84:d4:c4:c5:42:50:39:bf:
         02:c6:98:b9:ef:ae:50:06:4c:72:02:ef:c3:b6:97:6e:a5:af:
         e8:0e:a9:00:93:11:f0:d2:42:68:44:31:82:39:a5:e3:59:cd:
         a9:09:32:ac:ac:1f:5b:5a:d5:21:5b:e5:dd:17:be:c0:84:e3:
         94:0e:d1:a4:75:c9:e7:56:8f:ce:a5:db:a8:28:ba:f5:fa:89:
         4b:15:3e:38:69:ca:fc:16:63:4e:a8:7b:11:e1:01:f5:ae:40:
         d4:eb:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----