Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9861 (0x2685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Jan 23 13:34:53 2021 GMT
            Not After : Feb 23 13:34:53 2022 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=lemon.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:ef:72:df:bf:1d:33:c0:78:fc:a6:ef:12:18:c4:
                    8e:d2:10:bd:eb:d0:c5:ed:c2:3f:73:1a:47:e3:61:
                    91:2c:01:04:69:93:2a:27:5b:a3:26:80:aa:c9:85:
                    6a:60:3f:36:18:8b:87:f6:7f:d0:34:05:16:53:30:
                    ea:50:9f:ee:75:64:3f:71:db:48:60:68:50:2d:53:
                    bb:1f:4e:b4:15:75:d7:2e:7f:10:47:80:b9:1e:6e:
                    38:b9:50:ec:c8:e8:5b:da:2c:ff:b6:ba:8e:d7:1f:
                    a2:d8:e9:1f:37:b6:df:3c:88:bc:18:3f:33:68:4b:
                    b5:8c:f5:91:55:8b:ac:7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:lemon.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                F8:54:52:B0:4B:1D:53:C3:54:CC:27:E3:B7:19:03:50:78:B9:90:13
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         44:ad:97:8b:d7:8e:2f:9e:a7:22:9a:cf:20:0e:ef:b4:fb:4a:
         28:7f:1e:dc:22:b3:21:b0:89:7d:83:34:9f:69:ee:e3:6f:13:
         92:b6:1f:23:75:a4:f5:68:4d:6f:6d:da:d2:9c:c6:3a:bf:fd:
         1c:a6:de:1e:e9:6e:27:fe:5b:de:0d:17:ac:a2:63:76:61:61:
         56:23:7b:94:14:53:7c:ce:89:00:e3:2a:9a:27:0f:19:37:d7:
         ce:5e:8c:f3:e3:25:a7:3b:ca:9c:f6:57:de:fa:c8:7b:f9:c1:
         a9:d2:a2:72:e6:45:5f:bd:25:bd:16:41:f6:f7:e1:07:4b:83:
         ec:92:66:dc:f9:28:b6:bd:a9:54:ac:da:f0:86:96:80:b9:d3:
         ee:df:c7:44:fa:ae:a1:09:ea:be:dd:c4:65:a9:fe:17:cd:48:
         70:0e:65:b7:3e:8b:47:64:39:4a:67:f2:33:d1:a8:1e:62:ff:
         9f:e7:95:ff:6c:09:a6:56:05:71:90:e9:4b:f8:69:4b:a9:77:
         28:cc:fb:4e:58:e3:e7:c6:6a:28:0a:2e:bb:90:3f:cb:a9:fb:
         96:51:a7:8e:ed:e9:75:43:09:6d:4b:ae:13:86:82:31:2d:73:
         a0:9e:c9:57:08:40:95:42:b3:df:7a:b2:52:72:69:28:ee:3b:
         b8:c6:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----