Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8967 (0x2307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 12 09:29:53 2019 GMT
            Not After : Jan 11 09:29:53 2021 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sdpd1.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:ec:78:73:0a:62:28:63:27:5a:ad:82:52:5c:93:
                    f6:8c:d7:51:6b:cf:18:03:ab:10:c8:be:a7:ed:0d:
                    55:4e:59:82:c0:ab:50:b1:d4:c3:38:ff:32:c7:5d:
                    18:bb:cf:2a:75:36:20:cd:c7:47:e9:17:5b:a2:03:
                    16:cc:f0:89:3f:f3:8a:d3:21:cd:6b:ca:bb:c5:1f:
                    ae:04:bf:47:7b:3a:7d:37:aa:57:3d:1d:3f:98:85:
                    82:56:1e:72:c6:64:51:16:2c:84:69:32:2a:d0:2b:
                    51:9a:8d:6c:86:0d:4e:e4:e8:7c:fd:f6:7c:e5:b3:
                    72:ae:b6:23:bc:bf:f2:94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:lhcb-sdpd1.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                E6:1B:3A:9E:89:9C:59:62:4E:B8:1C:B8:29:D8:73:CC:BE:17:B6:9F
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:6e:a8:b9:90:54:6d:63:b8:5e:a1:75:07:ae:2f:ce:a7:
         f1:2f:bc:ed:49:d6:38:63:10:df:12:81:74:65:61:73:47:3f:
         25:51:d9:68:65:b1:6b:6e:0a:ae:ec:57:5f:b2:db:1e:ab:3c:
         91:95:d5:da:ce:f2:43:3b:7d:4d:d4:fb:b9:b0:c1:de:e2:7c:
         68:71:2e:76:3a:70:c3:b5:6f:08:18:b0:d4:a1:fa:fd:cf:b0:
         55:34:f0:b8:06:12:87:97:22:24:a3:87:2c:38:10:b9:24:76:
         a3:0f:3a:07:11:89:9f:c0:6f:48:87:1a:5d:23:4d:4e:61:07:
         af:09:3f:50:94:6a:7d:52:11:72:5b:9e:73:21:40:11:8c:1c:
         e1:80:ce:6e:cd:c5:b3:16:a7:b5:78:d9:91:1a:eb:3e:66:87:
         59:fd:5d:d1:2f:7a:e2:06:73:33:9b:e6:fe:4d:1c:88:b9:e3:
         c0:1e:0f:ee:ea:17:10:6b:b1:e6:9d:36:03:02:71:f3:4d:a6:
         de:6f:e9:18:1e:58:76:9c:d5:54:8f:26:37:70:6a:fc:56:f4:
         82:10:b0:e8:8e:12:18:6e:80:69:3f:d2:52:ae:b9:4b:fb:fd:
         8d:1e:4f:3f:d5:35:5d:ea:39:b9:40:80:38:7a:da:b6:85:8a:
         52:ee:45:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----