Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8963 (0x2303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 12 09:29:26 2019 GMT
            Not After : Jan 11 09:29:26 2021 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sdpd15.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c2:ab:93:5d:71:10:e2:58:bd:55:20:26:b2:9b:
                    4e:b0:71:b2:b1:46:c5:3e:c6:50:ec:03:22:4d:47:
                    57:e6:ab:8d:72:af:8f:ae:8d:9b:59:c2:7f:d4:9f:
                    d7:e9:ac:a1:d6:e2:36:9c:d0:96:3d:70:e3:07:62:
                    94:8a:e3:76:1e:e7:84:31:b3:1a:6c:b5:05:b2:53:
                    c7:3f:16:f8:fa:de:d4:33:ff:31:ed:cd:84:46:fe:
                    a6:08:ca:6f:43:00:a2:2a:76:6d:c2:c5:c2:61:89:
                    0d:34:30:62:3c:53:1a:8a:17:b7:87:18:5c:2b:5f:
                    2a:6b:27:03:61:97:e6:b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:lhcb-sdpd15.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                C6:43:A8:7D:23:79:60:EB:7A:2E:21:D0:C2:3E:50:01:19:BA:7F:6F
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         82:18:71:80:c9:0a:f4:ce:ef:38:e9:26:2f:ef:2b:81:f1:c4:
         e4:cd:1c:e3:6f:eb:e0:88:e3:4e:d1:e3:e8:a2:60:e3:a0:a8:
         fe:16:65:49:8e:d7:4f:70:11:82:77:da:28:48:a2:c3:e5:85:
         01:96:d2:76:90:36:f1:de:c3:fe:be:ea:b9:f3:ae:25:95:4f:
         ed:6e:7d:90:95:02:3d:e8:dc:a6:e7:67:b5:ad:cf:fd:5a:53:
         67:ff:64:49:34:fc:62:5a:72:c9:66:7b:09:cc:00:97:66:e6:
         5a:ba:62:22:6d:f2:b6:6c:57:2c:30:8b:53:91:58:0d:28:3e:
         b2:85:34:4f:bb:6c:0b:a6:d0:8f:0c:0c:a7:37:77:5a:06:72:
         1a:49:a0:d4:8f:d7:ff:a1:fb:bd:1a:3c:ae:8d:36:70:cb:07:
         5f:3a:33:7a:d7:f7:c4:ff:3d:27:0f:cf:87:3c:84:75:c2:65:
         06:43:b1:00:19:28:a4:fa:c1:70:b0:63:27:17:62:04:b4:a4:
         8f:72:45:e4:a9:b7:23:84:56:70:7d:95:c7:0c:13:2a:fe:6f:
         d6:86:61:55:09:45:3f:a2:5f:e1:37:23:48:15:57:21:41:60:
         7a:81:7d:c7:cb:3f:b0:58:88:e0:6e:f2:55:dd:b9:dd:10:9c:
         56:97:4d:cd
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgICIwMwDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xOTEyMTIwOTI5MjZaFw0yMTAxMTEwOTI5MjZaMGkxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMQ4wDAYDVQQLEwVob3N0czEVMBMGA1UECxMM
Z3JpZC5raWFlLnJ1MSQwIgYDVQQDExtsaGNiLXNkcGQxNS50MS5ncmlkLmtpYWUu
cnUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMKrk11xEOJYvVUgJrKbTrBx
srFGxT7GUOwDIk1HV+arjXKvj66Nm1nCf9Sf1+msodbiNpzQlj1w4wdilIrjdh7n
hDGzGmy1BbJTxz8W+Pre1DP/Me3NhEb+pgjKb0MAoip2bcLFwmGJDTQwYjxTGooX
t4cYXCtfKmsnA2GX5rG7AgMBAAGjggLWMIIC0jAMBgNVHRMBAf8EAjAAMA4GA1Ud
DwEB/wQEAwID+DARBglghkgBhvhCAQEEBAMCBNAwJgYDVR0RBB8wHYIbbGhjYi1z
ZHBkMTUudDEuZ3JpZC5raWFlLnJ1MB0GA1UdDgQWBBTGQ6h9I3lg63ouIdDCPlAB
Gbp/bzBtBgNVHSMEZjBkgBS3Gvl9/tIeYampjCFoi35gjLlwWaFJpEcwRTELMAkG
A1UEBhMCUlUxDTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1J
bnRlbnNpdmUgR3JpZCBDQYIBADA9BgNVHRIENjA0gRRyZGlnLWNhQGdyaWQua2lh
ZS5ydYYcaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHLzA/BggrBgEFBQcBAQQz
MDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy9jYS5o
dG1sMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJ
Ry9jYWNybC5wZW0wWgYDVR0gBFMwUTAMBgoqhkiG90wFAgIBMEEGDCsGAQQBgax7
AQECAjAxMC8GCCsGAQUFBwIBFiNodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcv
cG9saWN5LzArBglghkgBhvhCAQIEHhYcaHR0cDovL2NhLmdyaWQua2lhZS5ydS9S
RElHLzAWBglghkgBhvhCAQgECRYHcG9saWN5LzAYBglghkgBhvhCAQQECxYJY2Fj
cmwucGVtMCAGCWCGSAGG+EIBAwQTFhFjZ2ktYmluL2NoZWNrcmV2PzBUBglghkgB
hvhCAQ0ERxZFSXNzdWllZCBieSBSRElHIENlcnRpZmljYXRpb24gQXV0aG9yaXR5
LCBodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMA0GCSqGSIb3DQEBCwUAA4IB
AQCCGHGAyQr0zu846SYv7yuB8cTkzRzjb+vgiONO0ePoomDjoKj+FmVJjtdPcBGC
d9ooSKLD5YUBltJ2kDbx3sP+vuq5864llU/tbn2QlQI96Nym52e1rc/9WlNn/2RJ
NPxiWnLJZnsJzACXZuZaumIibfK2bFcsMItTkVgNKD6yhTRPu2wLptCPDAynN3da
BnIaSaDUj9f/ofu9GjyujTZwywdfOjN61/fE/z0nD8+HPIR1wmUGQ7EAGSik+sFw
sGMnF2IEtKSPckXkqbcjhFZwfZXHDBMq/m/WhmFVCUU/ol/hNyNIFVchQWB6gX3H
yz+wWIjgbvJV3bndEJxWl03N
-----END CERTIFICATE-----