Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9032 (0x2348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 24 16:13:30 2019 GMT
            Not After : Jan 23 16:13:30 2021 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lemon.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:cb:2b:e2:32:6e:7c:ea:b0:e2:4b:6d:3b:f6:c4:
                    e7:2b:4e:98:78:b2:eb:11:fe:6a:4a:8b:49:65:d3:
                    0a:b3:a0:56:93:63:67:c3:2b:f2:40:52:5e:db:43:
                    0b:fe:e7:b1:6d:63:37:3b:db:ef:fe:fc:43:39:e8:
                    41:a8:b6:6c:12:10:eb:24:36:78:0b:e7:1b:19:13:
                    5a:a8:d1:3e:8f:23:43:02:f0:9f:5a:ae:68:b0:1c:
                    8c:87:c1:70:ce:a8:72:27:ca:67:5c:63:17:c4:41:
                    b1:11:99:38:f9:8c:59:cb:3d:05:75:ab:9b:d9:df:
                    4b:f9:cd:0e:cb:4d:04:8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:lemon.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                49:30:A5:CF:74:14:0A:74:18:A5:D4:6D:7B:14:8B:22:8B:79:F7:74
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         64:2b:70:37:74:2c:6f:cf:79:61:77:9c:35:a1:a9:f6:76:10:
         84:a8:3c:9a:a0:bc:de:8b:70:37:96:4f:f1:71:f9:4e:ad:bd:
         ed:f7:9c:42:b7:5b:48:bf:82:58:00:4c:c7:5c:05:1b:bd:20:
         b2:10:cc:da:22:df:a6:f3:42:68:c1:2f:15:f6:96:7f:c9:c9:
         df:a5:d4:b5:ce:b3:e1:97:8f:d4:6a:b4:e0:8a:ea:d9:88:92:
         64:ce:89:90:6a:5e:3e:a1:64:8d:f4:22:28:26:20:87:4c:1c:
         5d:06:85:52:bd:a2:56:50:34:19:a7:fe:4a:ba:d7:2e:98:8d:
         e8:94:a4:13:0e:52:0e:a9:51:b2:83:71:80:31:3c:fc:71:37:
         8f:36:7b:9d:34:6b:be:fd:85:1e:c8:55:6d:f8:c4:cf:69:7d:
         75:19:4e:63:d5:53:c2:73:71:28:ab:5c:25:34:0d:df:ac:04:
         1f:e2:ea:17:1d:4a:16:7b:5e:65:ad:eb:6c:c9:33:66:26:a0:
         67:09:f1:6c:d5:41:75:04:ab:59:ee:41:88:1c:50:b9:2b:e4:
         ea:2a:aa:4a:21:20:8d:5a:48:0f:00:1d:30:e2:14:be:b6:ad:
         09:a8:7b:f1:8e:69:a1:ab:3c:4b:0b:bd:c3:a1:1c:46:c2:19:
         db:6a:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----