Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8879 (0x22af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 25 12:43:10 2019 GMT
            Not After : Dec 25 12:43:10 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sespd2.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:b7:2d:ff:b6:84:ac:87:69:20:d2:7a:69:1c:0d:
                    fa:fb:cf:d7:bc:8f:8c:70:07:0c:35:02:43:2c:ee:
                    a0:73:c4:dd:19:df:a0:4f:8c:dd:10:37:1d:cb:7b:
                    b2:22:cb:65:35:91:df:32:6c:d1:94:c0:df:d7:96:
                    7f:b2:13:47:6f:f1:d4:c3:cd:2b:d4:9c:87:52:d3:
                    00:9c:dd:9a:29:3d:3e:fa:fb:ca:bd:2f:cd:ad:89:
                    ee:11:64:75:86:e4:2b:a0:ed:31:f2:a9:d4:9f:dd:
                    76:6b:5d:51:ab:b6:d7:d9:25:9a:8d:74:ac:ed:87:
                    aa:f7:36:66:90:f9:d8:4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:lhcb-sespd2.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                7D:31:5C:9B:E0:E5:38:81:4A:BA:34:2B:BB:5E:3A:90:BC:EE:AE:20
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         54:3f:23:51:51:60:30:20:12:02:b8:5d:7c:22:76:a4:18:3c:
         e7:cf:a9:14:ed:50:64:b0:87:56:35:be:fe:ba:e2:44:0f:a4:
         b2:70:8d:8a:7f:53:b9:7c:a0:fb:54:00:27:7b:03:12:30:61:
         c5:ed:9b:3d:e0:6b:aa:9b:8b:be:40:6f:8a:80:2f:60:b0:35:
         ab:2f:28:a6:9a:4b:1c:d4:55:d6:47:97:c5:dd:e5:92:3b:13:
         aa:5e:4a:fe:98:18:2c:a6:77:0b:14:d6:14:eb:14:91:54:17:
         30:cf:ef:b8:16:eb:d9:9d:f1:11:46:d4:1c:6d:93:fa:84:3d:
         51:3b:42:65:89:ca:22:5a:e8:89:13:74:5d:18:6a:e7:80:58:
         dd:1d:56:89:d1:a5:3c:75:1e:76:96:5a:e1:a3:3c:15:71:59:
         49:c8:a0:ce:18:52:9e:20:26:87:d2:20:e3:31:fd:43:c7:0b:
         06:d8:d5:92:3f:c4:61:c4:3c:7d:ab:34:be:67:6e:20:55:1a:
         ac:47:6a:1f:c6:ab:f5:d0:bc:90:7a:7e:5f:1e:71:58:b0:6b:
         b2:3b:45:8c:9f:f6:eb:7a:12:e8:31:8f:43:74:59:f7:59:77:
         21:3f:2a:d8:67:f6:0f:1f:78:fe:49:aa:a4:0c:de:bb:ee:89:
         a0:a6:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----