Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8878 (0x22ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 25 12:42:53 2019 GMT
            Not After : Dec 25 12:42:53 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sespd1.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c5:6f:3c:30:00:30:59:84:3d:1c:7f:04:18:52:
                    c2:d6:bd:56:a4:2d:24:3f:70:b7:10:c8:62:9e:93:
                    d2:d2:cd:94:d9:5a:7b:ef:85:45:db:76:55:27:66:
                    ba:c3:dc:76:f3:80:2d:81:f2:e1:13:51:7f:32:5c:
                    b4:8c:bf:ea:f9:89:7c:45:d9:62:e7:5f:16:92:8a:
                    9e:65:ce:a4:3f:b6:dc:dc:63:d9:a2:d8:ce:5c:ae:
                    de:4e:1d:38:28:55:69:4b:fd:77:c6:d4:82:5a:27:
                    f4:77:ca:55:1d:cd:75:3a:58:29:9f:c1:0b:47:9e:
                    8e:44:c8:03:98:09:28:bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:lhcb-sespd1.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                6B:CA:A7:13:56:F9:DD:1A:A7:C6:01:80:5E:03:AF:BF:62:5D:45:B3
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         0b:c7:43:b4:92:7e:1a:fc:ac:1e:e5:3a:84:5b:7c:36:40:36:
         0f:08:8f:a2:4c:4b:f1:06:4e:c8:db:05:22:ab:87:a9:0a:37:
         61:c4:88:9e:b6:8d:26:7a:e8:53:6e:63:e3:0c:38:aa:95:42:
         72:75:c5:77:d3:71:c6:2d:d4:9b:dc:56:fa:af:11:43:a2:86:
         0d:af:47:2c:16:9f:ee:67:c7:90:11:e9:8f:f4:c4:1c:af:20:
         5d:65:3b:9f:51:4b:73:08:11:8b:db:1b:c2:b1:4f:00:47:8d:
         71:09:d6:d7:8d:aa:a5:3e:ef:e0:5c:71:bd:ff:aa:3c:fd:aa:
         b7:64:42:f0:54:54:0b:03:4e:e3:fe:fa:4f:47:8e:93:f5:24:
         28:3b:37:3c:27:5d:20:b0:99:f4:31:ea:3f:52:78:19:51:38:
         50:38:20:cb:ce:dc:7d:4a:b7:b4:a7:c7:e6:a9:4a:80:67:ab:
         2b:d5:7d:9e:99:82:51:be:2c:76:99:0c:bc:b3:3c:02:ac:c9:
         ca:73:a1:fc:0d:9d:96:02:8c:34:a8:31:24:93:19:92:f3:32:
         76:b6:df:84:f8:65:30:54:44:a3:8d:1c:83:f7:99:f3:61:2a:
         1a:53:cc:74:bb:64:20:36:d5:3f:7d:12:82:85:85:2f:7b:d2:
         f1:e2:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----