Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9787 (0x263b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  8 19:14:38 2020 GMT
            Not After : Jan  8 19:14:38 2022 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=orange.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:b7:bd:46:a2:1b:2b:cf:8a:81:4d:56:10:8f:0d:
                    d2:94:f5:79:35:7d:12:37:28:ab:09:d0:b6:67:b1:
                    eb:12:e9:5f:60:54:e8:25:bf:7b:c8:31:78:fb:29:
                    f5:bc:c7:d2:9e:41:a1:68:98:76:10:c1:c3:90:08:
                    73:94:23:f3:65:bb:bc:c6:b1:64:88:87:1c:f4:02:
                    78:ed:cd:c3:d2:b1:e3:20:92:95:ee:b4:bf:0c:d5:
                    6a:d0:3a:9b:e1:a7:ee:8b:c0:6c:d0:60:12:ea:4b:
                    19:02:77:09:64:0b:e2:5f:f1:3f:af:57:6f:57:cc:
                    c0:b4:21:dd:7c:de:a2:d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:orange.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                D2:13:3F:5C:1E:3D:33:01:63:5D:08:1A:91:79:C9:F7:DC:20:8F:7A
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:ce:74:d5:6b:6a:b1:5d:90:e8:b3:de:e4:a5:81:c3:91:
         aa:29:d0:71:6a:2f:e1:50:a5:07:0a:f8:4c:1f:d0:e5:e5:e2:
         b6:85:2b:f7:f6:df:61:88:43:bc:de:9d:8b:9c:1c:1e:21:30:
         24:d6:a5:79:3b:1b:01:41:41:95:47:78:6c:a7:c7:aa:6d:10:
         3b:94:4e:5f:7b:f7:37:31:70:44:a2:dd:39:da:23:d5:df:93:
         21:da:eb:66:6f:50:bc:12:5d:ce:3e:59:26:9a:1c:63:4f:3c:
         af:f0:86:51:1d:d0:f1:05:1a:a0:8b:56:25:34:fe:16:24:8f:
         2f:d3:a8:17:f4:23:ff:93:26:47:35:1e:a2:8c:1b:db:3a:b5:
         2e:e1:a4:ea:f6:ea:d9:c9:54:29:eb:bf:ab:df:b5:cf:30:35:
         f1:4b:92:0a:08:27:cc:ae:a7:f4:5b:b9:5e:19:a9:20:d2:3e:
         7e:ae:91:24:0f:80:4e:1e:e5:de:40:91:ca:ce:4b:35:64:af:
         72:49:c7:48:e9:4a:9f:e0:ce:74:c0:63:86:6f:50:7c:2f:87:
         2f:4b:04:a0:40:34:fe:88:85:4f:a4:a9:6c:dd:5c:88:fe:1c:
         07:d4:43:72:b1:4c:71:c8:50:99:ce:ac:37:c2:a2:96:c7:f1:
         51:a2:22:5e
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICJjswDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0yMDEyMDgxOTE0MzhaFw0yMjAxMDgxOTE0MzhaMGQxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMQ4wDAYDVQQLEwVob3N0czEVMBMGA1UECxMM
Z3JpZC5raWFlLnJ1MR8wHQYDVQQDExZvcmFuZ2UudDEuZ3JpZC5raWFlLnJ1MIGf
MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3vUaiGyvPioFNVhCPDdKU9Xk1fRI3
KKsJ0LZnsesS6V9gVOglv3vIMXj7KfW8x9KeQaFomHYQwcOQCHOUI/Nlu7zGsWSI
hxz0AnjtzcPSseMgkpXutL8M1WrQOpvhp+6LwGzQYBLqSxkCdwlkC+Jf8T+vV29X
zMC0Id183qLXkwIDAQABo4IC0TCCAs0wDAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8E
BAMCA/gwEQYJYIZIAYb4QgEBBAQDAgTQMCEGA1UdEQQaMBiCFm9yYW5nZS50MS5n
cmlkLmtpYWUucnUwHQYDVR0OBBYEFNITP1wePTMBY10IGpF5yffcII96MG0GA1Ud
IwRmMGSAFLca+X3+0h5hqamMIWiLfmCMuXBZoUmkRzBFMQswCQYDVQQGEwJSVTEN
MAsGA1UEChMEUkRJRzEnMCUGA1UEAxMeUnVzc2lhbiBEYXRhLUludGVuc2l2ZSBH
cmlkIENBggEAMD0GA1UdEgQ2MDSBFHJkaWctY2FAZ3JpZC5raWFlLnJ1hhxodHRw
Oi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEF
BQcwAoYjaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhLmh0bWwwNgYDVR0f
BC8wLTAroCmgJ4YlaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhY3JsLnBl
bTBaBgNVHSAEUzBRMAwGCiqGSIb3TAUCAgEwQQYMKwYBBAGBrHsBAQICMDEwLwYI
KwYBBQUHAgEWI2h0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy9wb2xpY3kvMCsG
CWCGSAGG+EIBAgQeFhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMBYGCWCG
SAGG+EIBCAQJFgdwb2xpY3kvMBgGCWCGSAGG+EIBBAQLFgljYWNybC5wZW0wIAYJ
YIZIAYb4QgEDBBMWEWNnaS1iaW4vY2hlY2tyZXY/MFQGCWCGSAGG+EIBDQRHFkVJ
c3N1aWVkIGJ5IFJESUcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHksIGh0dHA6Ly9j
YS5ncmlkLmtpYWUucnUvUkRJRy8wDQYJKoZIhvcNAQELBQADggEBAB7UznTVa2qx
XZDos97kpYHDkaop0HFqL+FQpQcK+Ewf0OXl4raFK/f232GIQ7zenYucHB4hMCTW
pXk7GwFBQZVHeGynx6ptEDuUTl979zcxcESi3TnaI9XfkyHa62ZvULwSXc4+WSaa
HGNPPK/whlEd0PEFGqCLViU0/hYkjy/TqBf0I/+TJkc1HqKMG9s6tS7hpOr26tnJ
VCnrv6vftc8wNfFLkgoIJ8yup/RbuV4ZqSDSPn6ukSQPgE4e5d5AkcrOSzVkr3JJ
x0jpSp/gznTAY4ZvUHwvhy9LBKBANP6IhU+kqWzdXIj+HAfUQ3KxTHHIUJnOrDfC
opbH8VGiIl4=
-----END CERTIFICATE-----