Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8983 (0x2317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 12 09:33:01 2019 GMT
            Not After : Jan 11 09:33:01 2021 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=sdpd1.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:cc:a4:11:9a:dc:45:53:0a:fc:e3:76:eb:66:f1:
                    bc:fe:02:b3:99:ad:85:aa:cf:e3:83:d1:97:4f:18:
                    e7:02:58:6a:e5:0d:56:73:94:19:a2:8c:c0:5f:5d:
                    0b:9e:8f:4d:ce:8e:04:26:fe:e3:b0:f9:f0:16:1d:
                    fc:a8:f5:62:52:f4:e4:12:b9:56:62:06:79:08:b0:
                    51:23:62:b8:36:1b:02:26:65:67:cd:13:c3:c4:4e:
                    7a:7b:be:a3:3e:b5:a4:6c:37:22:17:34:a0:64:7b:
                    c0:ea:68:6e:bb:1e:4e:2e:94:a1:d1:c0:df:ae:4c:
                    49:e8:79:d0:da:dc:76:7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:sdpd1.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                D4:56:10:FF:53:76:20:4B:A4:BE:17:78:B6:D6:88:E4:E5:89:A2:E1
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         2e:c8:75:d4:ce:1a:16:53:eb:52:2a:8a:f3:91:f6:ff:7b:3f:
         cd:10:ff:c4:c7:ef:43:d3:fd:f2:1c:24:17:cd:ac:14:50:de:
         26:51:47:99:f8:d3:bb:72:74:36:ba:8d:73:1b:19:7b:7b:7f:
         5f:4d:dc:80:f7:d0:0a:75:10:7c:ab:f3:78:8b:8f:fa:18:17:
         b1:16:9a:74:d6:dc:25:ce:fc:ee:22:80:50:fa:0a:00:db:db:
         19:a4:c8:0a:72:b1:f8:89:1f:94:a7:99:52:7c:7d:ce:85:99:
         32:d3:5f:ca:c0:72:10:35:43:a3:ed:27:4d:bd:74:31:47:3e:
         f0:3e:82:27:38:e1:66:70:97:a3:93:c6:1d:78:d2:69:a0:22:
         40:b7:f5:b0:34:74:66:6a:71:90:46:80:3f:f6:c8:d7:84:2f:
         28:27:be:99:f5:46:24:55:73:b2:51:9f:bc:82:7a:0d:b7:9a:
         a2:55:3f:46:f2:da:8a:77:ce:51:f5:b4:3a:46:77:c2:45:ff:
         c2:0b:9f:65:a6:bc:f3:bc:61:f8:e8:0b:c5:47:c1:65:ce:85:
         9e:27:f5:a0:e2:c3:e8:c6:ae:7d:27:e1:8c:a9:53:07:f5:4b:
         74:f5:02:66:ef:fc:17:22:82:f9:73:6c:c0:e7:7d:c0:f1:f6:
         9c:22:5f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----