Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10514 (0x2912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  8 16:40:47 2021 GMT
            Not After : Jan  8 16:40:47 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=astra.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:9d:a9:fe:ac:8f:44:cd:ab:43:6e:65:c6:
                    d9:4b:16:9d:31:66:64:29:a8:20:a8:d1:ed:3d:e7:
                    c7:26:6b:fc:50:6c:8a:d8:7f:04:5b:2a:1b:52:e0:
                    eb:e5:62:e5:fb:8d:7f:62:cf:1b:cb:b4:4a:2c:f3:
                    95:f0:f3:86:c6:1c:83:f4:50:47:35:cc:32:16:db:
                    68:d1:0e:0b:a7:38:56:48:30:c8:1c:4e:a6:fb:ab:
                    88:a6:de:db:1e:47:9f:50:84:c7:9c:6b:d8:a8:2d:
                    ba:2a:67:ac:31:df:7b:98:8f:15:e6:d3:9b:0f:45:
                    af:b7:94:cf:a1:ce:99:69:1c:83:10:64:59:fa:38:
                    d4:4e:e7:b2:83:c9:7d:80:ab:19:3e:64:15:b4:48:
                    62:c4:79:55:96:03:2c:b7:1d:35:1a:f6:e5:d8:b3:
                    2a:db:c1:65:43:2c:25:1b:07:94:50:cd:5b:78:4b:
                    e6:57:06:43:11:22:d5:cc:d3:d4:3b:d4:9d:88:7b:
                    7e:a5:47:d2:8f:4d:30:2d:8b:52:da:d5:9e:91:3c:
                    99:93:85:90:6e:7f:c8:96:97:dc:9b:26:19:30:fe:
                    5c:3d:d7:44:02:6b:f1:08:60:7a:06:00:0d:a7:a5:
                    5a:44:46:6f:d2:0b:ba:05:66:e0:7b:e4:57:e8:f5:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:astra.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                72:58:E4:5E:CE:F8:0A:16:84:07:79:48:9E:B8:5D:A8:E5:0E:FB:CE
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         1c:06:37:e4:af:bd:04:3d:26:a3:38:8d:8d:16:e1:89:fa:37:
         fa:f7:47:16:b2:a7:c4:06:60:52:dc:f1:23:be:20:e5:9b:f7:
         72:c6:9c:82:9b:15:65:94:74:bb:d7:48:db:67:25:7a:78:6a:
         a6:72:bd:6e:4e:a5:1b:26:23:dc:4d:4d:31:01:3e:29:90:35:
         8b:6e:b4:7e:2e:7a:03:69:ec:f0:09:a0:45:d8:cf:1b:be:ea:
         6b:2a:a7:5a:5d:19:d0:6f:d6:17:ca:d8:98:80:ca:4e:54:61:
         29:9d:24:11:8a:f5:3a:c6:79:c6:37:7a:59:a1:c9:c9:e4:1f:
         e8:39:47:5f:9c:c1:51:c2:c8:90:da:40:b6:03:36:5d:e8:aa:
         ea:5f:0a:35:35:d1:fe:e6:78:51:bd:0b:38:be:dc:41:4b:26:
         6f:02:d0:93:a6:3a:91:52:c3:57:0b:4d:14:64:d2:20:cc:36:
         4f:76:28:a1:90:7c:64:97:f3:ab:26:e9:8e:42:59:3a:79:35:
         99:08:73:19:0f:db:c0:ec:f0:7a:a4:73:52:2d:ab:d4:d4:fb:
         0a:e8:1b:14:76:ab:ae:6e:76:a9:1e:1b:15:3e:e1:07:f2:31:
         ea:df:76:7f:1a:eb:9d:b0:08:0d:65:9c:99:83:38:6b:4d:0a:
         09:c4:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----