Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8981 (0x2315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 12 09:32:44 2019 GMT
            Not After : Jan 11 09:32:44 2021 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=orb.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c4:12:ad:7e:9b:a0:46:bb:d1:da:3c:d8:e1:ce:
                    2f:89:9e:62:8f:96:a1:b1:13:86:f2:a0:5f:3e:75:
                    dc:09:4f:9d:8f:d8:44:13:4e:18:fe:53:8d:e8:08:
                    37:86:e3:1b:a2:fe:d9:1e:d8:13:c9:7f:be:50:36:
                    5d:d5:b4:88:29:a1:6e:32:09:6e:6e:bf:11:59:00:
                    3e:0b:5d:b7:af:fb:29:32:23:f8:b0:7a:21:c2:de:
                    76:36:f6:69:20:fb:4f:e1:23:d1:fd:1f:4b:db:76:
                    d6:f5:9b:ed:b0:35:57:be:c1:7b:3c:e3:42:05:27:
                    7d:74:5f:03:22:2a:94:c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:orb.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                AF:FE:67:2F:12:AE:B9:E3:1B:6A:EB:8F:AB:A9:45:B2:28:4B:83:6A
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         47:58:37:4c:ef:ff:90:82:72:25:8e:4a:6d:d0:dd:d3:3a:56:
         07:ce:1c:13:d5:40:a7:63:36:8a:6e:32:6e:17:52:cb:34:4e:
         f0:10:14:94:76:9f:98:78:66:38:2a:59:6c:27:b7:f3:d4:23:
         09:63:0e:ff:3f:79:74:5f:aa:b2:08:89:c8:61:7b:3e:2f:49:
         8b:d0:9b:7f:54:23:f9:9a:c6:88:d5:27:45:b4:8b:3d:c4:ad:
         ef:f6:f6:4a:14:a6:a5:d2:53:2b:73:71:e8:bd:12:1a:e8:7a:
         dc:08:96:91:a9:9b:19:a9:95:29:71:36:c4:d0:a8:03:75:34:
         d2:92:6d:63:fb:ea:d5:05:60:66:c8:4e:43:86:bb:14:1c:29:
         f1:c3:f7:4e:21:9d:b8:6c:6e:f0:9e:53:99:0f:ac:a5:44:a7:
         d9:a3:ea:06:c2:d3:e3:bc:05:87:61:d8:a3:be:c7:ef:81:98:
         db:c7:71:be:88:ab:f1:3a:31:c3:40:ee:9c:46:0b:74:83:65:
         d4:87:62:24:44:d7:bf:3f:8e:30:8d:4e:60:6d:37:ef:45:f9:
         8f:f4:35:09:6a:b0:e6:95:9b:df:88:b6:cc:00:7a:5e:6a:65:
         e6:27:c9:93:8c:0d:88:48:ee:2f:fd:7a:2d:86:a1:e1:50:27:
         b3:83:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----