Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8553 (0x2169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Jun 10 19:46:45 2019 GMT
            Not After : Jul 10 19:46:45 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=uipik.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a9:6a:0d:74:c9:43:8a:e7:7b:11:a8:15:51:49:
                    54:9e:4e:56:44:50:f9:1e:c8:6c:81:d1:83:e1:65:
                    48:8e:ea:3f:70:1c:e8:ae:a5:5f:88:43:ec:c2:fb:
                    67:3c:f9:d6:54:7d:73:84:1c:a5:4c:10:70:e6:66:
                    ff:79:bd:fe:4a:fd:34:c0:e2:29:83:e7:57:91:dd:
                    03:21:49:e5:2c:ec:32:cf:82:0b:88:5e:19:56:51:
                    d5:ca:80:9f:67:18:d3:69:e0:65:c9:9c:7e:8a:c8:
                    b4:e5:41:0a:5d:01:08:74:74:37:ef:f4:37:37:89:
                    16:30:23:e5:9c:3e:bb:4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                DE:76:06:C7:A4:30:77:0E:74:4B:5B:76:4A:C5:BF:F2:56:C3:84:F7
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         54:55:38:67:65:5c:4f:05:fe:a4:32:b5:e2:29:49:b7:8f:9d:
         e2:6c:06:30:d7:c1:a9:f8:bf:70:12:16:29:c2:10:06:85:30:
         e8:9f:cc:31:d3:51:e9:09:c1:7b:29:3d:a5:ce:63:aa:c7:c4:
         9d:1d:d7:5e:1e:38:58:99:7b:7e:64:0e:f4:63:4e:01:92:73:
         ed:98:9d:72:f5:e3:f3:6f:2b:1d:9e:0d:7e:51:57:70:22:77:
         44:e2:57:88:71:ff:78:7c:65:1f:6d:e7:51:91:17:c0:cb:01:
         6a:f0:a6:72:89:c7:b8:c8:07:bf:8b:66:f0:99:0f:bf:ae:7a:
         3d:b4:e2:cc:9a:97:5f:0d:d4:80:d3:f7:b1:cf:93:df:22:0a:
         ce:13:81:c9:95:ff:b1:41:4c:ea:42:67:d1:51:2e:b5:68:8a:
         32:20:e5:46:55:6b:bb:95:6f:c3:da:d9:78:d9:c3:c9:72:02:
         62:51:2b:58:50:e0:1b:fa:f8:59:59:ee:e0:b5:91:62:54:ec:
         fa:b4:21:99:17:b3:85:4a:e0:17:3e:3a:bd:f0:a9:0a:8f:b4:
         dd:43:75:eb:3e:ca:76:02:91:d7:ed:1e:7f:cb:06:4f:42:b3:
         96:3b:80:a6:00:dd:17:e7:fa:0d:c2:f0:19:15:2e:2a:da:68:
         63:75:a9:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----