Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8591 (0x218f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Jun 27 16:41:28 2019 GMT
            Not After : Jul 27 16:41:28 2020 GMT
        Subject: C=RU, O=RDIG, OU=users, OU=ihep.su, CN=Andrey Ryzhov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a2:f5:7f:2a:ef:e6:80:c9:9c:52:2e:47:8d:5f:
                    70:a4:f9:1a:51:4f:08:c9:1c:39:33:2a:4e:9a:8d:
                    5c:0e:6b:8c:87:37:24:a8:fc:8b:08:54:25:73:8e:
                    66:30:af:54:78:45:d7:84:6c:20:a3:da:4a:84:c9:
                    a7:1b:e0:bb:07:26:74:31:1b:d9:d1:7f:ae:4b:92:
                    bc:d7:b3:1b:f2:e7:f3:6b:7e:bb:66:9b:98:51:11:
                    0b:ad:52:a1:79:e6:ea:84:ab:4c:26:c9:6e:38:63:
                    a7:01:4d:fa:7d:78:af:a6:e7:2d:37:5a:eb:50:cc:
                    4a:24:62:18:d5:44:23:8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, S/MIME, Object Signing
            X509v3 Subject Alternative Name: 
                carrier-pigeon-destination:Andrey dot Ryzhov at ihep dot ru
            X509v3 Subject Key Identifier: 
                B8:BA:87:45:CB:E1:DB:36:09:4A:A9:BD:9B:CC:A3:5D:D3:FF:FD:04
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         82:73:59:d7:f7:00:85:76:f7:de:a1:37:c5:7c:72:c5:17:f5:
         12:b8:ba:99:0b:d3:76:84:fd:c3:b3:98:57:6c:bd:f9:e1:67:
         e9:ec:74:ab:92:4d:e4:63:da:5a:92:57:40:64:5f:c0:b4:38:
         c9:ef:17:64:de:e0:05:2f:7b:06:ac:3b:0e:c9:94:13:1c:be:
         71:e0:ac:98:4a:df:3c:b2:b0:9e:d7:00:89:10:d5:f5:cf:0d:
         68:a2:fc:9c:b8:94:86:89:45:db:da:50:68:a4:e8:ee:83:c9:
         e8:91:56:d2:7b:93:2e:28:23:1e:86:cf:49:f9:f7:3d:cf:11:
         86:ba:f7:00:94:5b:9c:69:f1:c7:64:34:44:bf:62:2e:48:0f:
         cc:be:09:ef:f7:99:f1:7f:b1:06:1a:8b:54:8d:f8:44:c9:5a:
         a3:32:32:d8:89:39:51:95:96:8c:fe:fe:c8:3f:10:5f:9f:df:
         fc:54:e8:bf:c9:11:07:c3:b6:7a:92:ec:40:8e:3e:8b:eb:d1:
         a5:9a:bc:1d:59:39:aa:a8:7d:53:6c:28:31:85:1c:aa:5d:7b:
         61:0b:2c:a1:da:c5:80:7d:2f:3c:66:c5:ca:e1:52:fc:b6:02:
         52:a6:4b:f5:0d:5a:86:c1:64:a6:c4:dd:57:0d:48:ab:ed:e7:
         7c:98:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----