Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8964 (0x2304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 12 09:29:32 2019 GMT
            Not After : Jan 11 09:29:32 2021 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sdpd16.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:b9:01:17:d7:fc:61:39:8e:7c:13:e0:c0:b5:fd:
                    ef:2c:23:33:39:6a:57:f0:9c:71:4f:6c:ba:6f:4b:
                    0b:35:dc:a3:00:27:fd:e2:fe:9e:82:17:2e:40:62:
                    9e:7a:a3:cd:1d:96:53:14:f4:be:5a:e0:eb:2d:f1:
                    c2:e9:02:95:0f:3c:19:74:a5:28:22:7a:b6:d3:29:
                    6a:77:cd:11:6a:9d:92:8e:66:8b:3b:42:e7:3d:5b:
                    e3:fa:df:64:e4:ef:2d:d2:5d:62:ad:74:c2:19:b8:
                    80:59:23:e3:b9:c9:c6:90:b1:a0:85:d5:4d:20:c9:
                    c5:05:dc:44:e1:be:23:df:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:lhcb-sdpd16.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                43:35:F3:6B:D7:89:87:BA:CF:46:35:10:44:00:A3:38:A1:6C:48:F6
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         c5:c7:53:0f:ad:02:0e:af:48:47:01:0d:b8:98:a7:7b:c3:0d:
         38:cf:9d:90:0b:19:54:7f:8c:68:e4:d3:f7:1e:83:77:73:71:
         2e:42:6b:54:f9:99:27:79:b2:e2:d4:44:16:24:67:f9:5a:3e:
         08:50:f7:67:3b:86:9b:09:27:4a:86:97:7a:c0:61:0d:c1:4a:
         ca:79:b0:a3:f5:c1:42:1b:10:7c:5b:30:f5:ce:87:e5:b6:88:
         6d:8a:20:d8:14:3a:0e:91:91:0d:9d:55:2b:8d:a9:45:71:b1:
         07:9f:67:ac:5c:55:69:89:3c:96:87:68:6b:49:37:8c:1f:92:
         48:10:ae:22:3e:33:2f:34:1d:dc:9d:18:7a:43:ee:18:d3:76:
         8f:aa:19:ce:f4:bc:26:98:8b:96:28:70:57:c9:47:36:aa:bb:
         27:36:d5:94:85:2a:0d:07:fc:44:3b:58:45:00:b4:46:c4:07:
         44:23:9c:fd:fd:e0:b7:43:e1:14:c1:7f:ac:65:40:df:03:73:
         13:d9:49:b1:54:3b:15:e3:65:4f:18:24:b3:09:b7:62:2e:a7:
         a5:a3:c7:2b:bc:af:84:3e:a7:3c:f2:3e:5f:43:a3:a3:81:7c:
         e1:48:7b:ca:76:36:57:af:e2:77:70:41:32:c0:d3:fa:33:79:
         ef:d6:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----