Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10425 (0x28b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 24 13:53:15 2021 GMT
            Not After : Dec 25 13:53:15 2022 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=jinr.ru, CN=rdd023.jinr-t1.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:5b:ec:85:4a:13:b6:07:6e:29:69:2c:13:
                    10:45:79:b8:f9:59:d5:16:c7:18:7f:49:39:d3:f3:
                    0e:80:b7:68:f7:4e:e2:13:b5:ab:0a:32:0c:9e:ad:
                    64:82:56:77:92:6e:70:a6:ca:98:8a:f2:9c:1d:bb:
                    93:ea:0c:2c:e6:3d:2c:9f:f0:50:9f:14:84:a7:6a:
                    dd:86:fa:f4:ec:31:52:65:cb:94:78:8c:d5:db:17:
                    6f:75:c8:c5:51:15:cc:7a:e8:46:87:e6:a0:02:ff:
                    d3:28:1b:0b:8b:ee:b1:28:30:2e:8a:64:6a:db:2f:
                    ce:14:e4:29:c3:d2:d8:f8:84:56:b1:99:56:f2:29:
                    f4:e0:03:72:d3:e3:c0:15:73:5e:9e:3f:16:2d:c5:
                    35:83:17:0e:e3:e4:57:f7:a9:d0:81:e6:e0:55:6e:
                    57:03:ea:b7:d5:d8:ae:2e:35:ce:a1:8f:bc:c2:b6:
                    f0:0e:dc:b3:1c:cb:3c:46:e8:2c:76:59:a3:53:e5:
                    9d:64:a5:d2:1b:07:f0:54:b8:bb:54:e2:be:2c:40:
                    66:2b:15:64:80:34:eb:a9:bd:79:3d:91:fb:05:42:
                    ea:d7:ee:98:38:f6:5c:f5:eb:90:01:9e:db:3e:f2:
                    19:49:b6:d7:90:8f:47:4b:20:b0:04:87:5c:bf:4b:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:rdd023.jinr-t1.ru
            X509v3 Subject Key Identifier: 
                55:9F:2C:6C:8C:08:D0:97:02:78:6B:5E:22:D7:9B:E3:7A:A2:0E:A5
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         58:81:30:2d:0b:31:28:44:3c:3b:9a:9f:5c:1f:b7:f8:27:cd:
         26:6d:ac:bb:82:56:26:87:d8:51:3f:15:fd:a8:92:f5:18:f3:
         61:37:d6:a8:6d:58:af:ae:9e:6e:14:7a:28:d0:e9:eb:49:40:
         22:5f:6b:30:fa:1a:de:34:e7:36:b0:22:74:bf:4b:ce:4e:5c:
         ec:91:a8:bb:48:7e:ad:70:20:35:2e:02:f4:8b:a7:82:e0:97:
         43:2c:ff:2f:69:3d:7a:97:6d:fa:1f:84:9c:63:cd:96:6b:dc:
         60:bc:99:30:b4:f9:15:93:c2:c0:0a:47:59:a9:95:26:48:af:
         08:1b:71:2e:8a:f5:95:36:25:c9:b3:24:5b:a2:66:47:6e:43:
         13:5e:a0:12:b8:ff:35:cc:3b:a4:d8:55:03:45:23:8f:1f:3c:
         d2:e8:a7:70:46:1c:b5:d5:c7:08:b8:33:4a:c8:84:3a:9b:81:
         cc:cb:64:1b:eb:08:16:2a:82:af:86:84:ef:9d:01:61:2f:3a:
         e4:fd:fc:a3:c9:11:ae:98:2f:90:a7:41:a8:be:6a:ae:9d:43:
         22:a8:e0:76:27:31:97:8c:11:6a:2f:6e:8c:e2:ca:7b:4e:74:
         63:e4:64:a4:8d:5b:4a:d9:41:46:43:5e:82:ca:7f:5d:68:3c:
         ef:09:86:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----