Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8970 (0x230a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 12 09:30:44 2019 GMT
            Not After : Jan 11 09:30:44 2021 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lhcb-sdpd4.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a5:ea:c1:c3:cc:07:8a:b5:05:38:b5:f6:1c:00:
                    96:48:c0:b3:bd:fb:f1:b2:b2:2c:66:59:c0:80:64:
                    c5:11:b1:9f:18:0a:85:af:ba:b3:cf:70:ee:50:fe:
                    f9:8c:73:5d:54:23:2e:80:6f:f4:37:c3:74:f6:c7:
                    e5:77:1e:ef:38:47:aa:08:86:b2:08:6f:80:b5:2a:
                    1b:b7:1a:80:57:9c:92:d7:1f:1d:02:02:51:1d:3d:
                    ae:0f:c7:e9:62:44:d4:c0:46:23:e1:65:90:fa:ea:
                    a0:b6:91:5d:4c:ec:6b:9a:b2:d0:77:6c:23:ba:5a:
                    6c:e7:8e:f7:34:47:75:3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:lhcb-sdpd4.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                42:29:2F:54:91:F4:4B:C5:2B:DC:5A:14:8E:09:AE:97:F2:ED:3E:5C
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         ab:b1:d3:f1:d3:a1:a9:ad:ca:c9:63:6a:49:ae:a7:1f:09:24:
         7a:87:aa:ee:4c:70:ed:dd:fb:05:a8:13:56:12:9b:7b:84:2e:
         44:e2:75:61:d2:54:2c:27:2b:f0:85:0d:20:74:e9:5a:0e:d6:
         26:32:aa:0a:d5:bb:04:8f:27:41:62:a3:9d:7f:09:c1:45:b6:
         25:fa:0b:c9:30:d3:d7:ac:d2:2d:0d:4d:15:4d:58:35:ba:4a:
         02:70:06:a5:49:b2:cf:a2:6c:e9:d9:8f:63:7f:0f:ae:a9:14:
         30:1b:15:4e:27:27:fe:54:7a:09:aa:78:af:61:99:ea:95:ee:
         19:2e:73:14:01:5c:6d:d2:6e:9c:e6:86:c9:ad:c1:98:98:82:
         57:e4:b9:df:84:e2:8d:b9:ba:7f:70:a9:97:93:0d:3c:ac:bf:
         b9:33:62:af:1c:c3:3e:70:ea:b9:f4:87:6f:fa:75:ae:3c:7a:
         2b:ef:29:4f:2c:d4:a3:cd:64:ba:e2:69:61:6c:13:93:22:3c:
         6e:18:d9:a9:6f:90:f7:d8:48:77:a8:92:87:16:f0:8a:b3:c8:
         2d:20:3d:45:bc:6f:85:14:c2:3b:00:b8:45:19:d4:0c:fb:ad:
         41:c4:30:90:43:50:aa:24:44:dd:a4:f2:17:9c:64:f2:69:95:
         f2:55:22:a8
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgICIwowDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xOTEyMTIwOTMwNDRaFw0yMTAxMTEwOTMwNDRaMGgxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMQ4wDAYDVQQLEwVob3N0czEVMBMGA1UECxMM
Z3JpZC5raWFlLnJ1MSMwIQYDVQQDExpsaGNiLXNkcGQ0LnQxLmdyaWQua2lhZS5y
dTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAperBw8wHirUFOLX2HACWSMCz
vfvxsrIsZlnAgGTFEbGfGAqFr7qzz3DuUP75jHNdVCMugG/0N8N09sfldx7vOEeq
CIayCG+AtSobtxqAV5yS1x8dAgJRHT2uD8fpYkTUwEYj4WWQ+uqgtpFdTOxrmrLQ
d2wjulps5473NEd1PQMCAwEAAaOCAtUwggLRMAwGA1UdEwEB/wQCMAAwDgYDVR0P
AQH/BAQDAgP4MBEGCWCGSAGG+EIBAQQEAwIE0DAlBgNVHREEHjAcghpsaGNiLXNk
cGQ0LnQxLmdyaWQua2lhZS5ydTAdBgNVHQ4EFgQUQikvVJH0S8Ur3FoUjgmul/Lt
PlwwbQYDVR0jBGYwZIAUtxr5ff7SHmGpqYwhaIt+YIy5cFmhSaRHMEUxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMScwJQYDVQQDEx5SdXNzaWFuIERhdGEtSW50
ZW5zaXZlIEdyaWQgQ0GCAQAwPQYDVR0SBDYwNIEUcmRpZy1jYUBncmlkLmtpYWUu
cnWGHGh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy8wPwYIKwYBBQUHAQEEMzAx
MC8GCCsGAQUFBzAChiNodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvY2EuaHRt
bDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcv
Y2FjcmwucGVtMFoGA1UdIARTMFEwDAYKKoZIhvdMBQICATBBBgwrBgEEAYGsewEB
AgIwMTAvBggrBgEFBQcCARYjaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL3Bv
bGljeS8wKwYJYIZIAYb4QgECBB4WHGh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJ
Ry8wFgYJYIZIAYb4QgEIBAkWB3BvbGljeS8wGAYJYIZIAYb4QgEEBAsWCWNhY3Js
LnBlbTAgBglghkgBhvhCAQMEExYRY2dpLWJpbi9jaGVja3Jldj8wVAYJYIZIAYb4
QgENBEcWRUlzc3VpZWQgYnkgUkRJRyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSwg
aHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHLzANBgkqhkiG9w0BAQsFAAOCAQEA
q7HT8dOhqa3KyWNqSa6nHwkkeoeq7kxw7d37BagTVhKbe4QuROJ1YdJULCcr8IUN
IHTpWg7WJjKqCtW7BI8nQWKjnX8JwUW2JfoLyTDT16zSLQ1NFU1YNbpKAnAGpUmy
z6Js6dmPY38PrqkUMBsVTicn/lR6Cap4r2GZ6pXuGS5zFAFcbdJunOaGya3BmJiC
V+S534Tijbm6f3Cpl5MNPKy/uTNirxzDPnDqufSHb/p1rjx6K+8pTyzUo81kuuJp
YWwTkyI8bhjZqW+Q99hId6iShxbwirPILSA9RbxvhRTCOwC4RRnUDPutQcQwkENQ
qiRE3aTyF5xk8mmV8lUiqA==
-----END CERTIFICATE-----