Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10581 (0x2955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 16 11:17:28 2021 GMT
            Not After : Jan 16 11:17:28 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=orange.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:ab:e4:4a:1a:66:b3:e1:33:4e:e7:c9:b5:ed:62:
                    00:70:3b:86:d9:7e:61:02:e5:74:6c:ff:18:3a:c5:
                    2d:25:f5:9f:f1:3f:39:d3:03:f1:9a:7a:e4:8f:df:
                    0b:11:61:68:cd:a3:4b:41:88:73:61:20:4f:d8:81:
                    d2:8e:20:6a:22:db:39:8c:6e:e7:2e:9f:bd:66:7c:
                    e5:95:5e:8f:72:90:15:0b:86:d3:0f:d7:32:0a:04:
                    bf:96:6e:a8:a8:64:c1:dc:a6:de:b6:fd:7e:26:c4:
                    3a:79:b5:98:e3:f5:ea:6f:ad:a6:84:16:20:81:c6:
                    2c:52:36:53:40:dc:71:40:31:4e:82:2e:0d:59:67:
                    5f:83:d8:4b:23:90:81:51:5b:41:cc:32:f7:af:da:
                    e8:3e:8d:9c:c4:97:39:f1:00:cd:a8:3a:e6:bf:3a:
                    34:2c:d2:12:61:df:6c:53:4f:27:22:99:73:be:77:
                    bb:2e:9d:f5:05:4c:e1:00:1e:19:9a:b7:a2:72:85:
                    4f:25:bf:04:72:80:9f:91:8d:ad:67:63:c0:a9:3b:
                    bf:45:73:39:eb:e8:8a:90:be:92:e4:d1:57:89:15:
                    46:ed:fc:2a:49:9e:84:a1:f5:1b:5c:0b:f8:79:a8:
                    57:5c:28:c7:de:c8:f8:1c:7d:c9:13:26:60:09:9d:
                    8b:e7:30:1b:ae:8c:8f:ce:e0:65:2c:2c:a3:98:7c:
                    dc:a5:95:6c:e3:c8:fc:c1:32:0a:b3:a4:82:dd:83:
                    f4:94:86:a1:5a:87:ae:4b:9f:8b:e0:2f:16:8e:57:
                    42:38:ab:d8:d3:7a:ce:a4:28:04:69:1a:95:d5:6d:
                    56:56:f2:db:d9:25:ce:6d:d3:02:4e:49:22:06:34:
                    76:7d:be:32:d8:98:e7:3b:8d:dc:47:79:9f:f4:34:
                    c4:96:be:3f:6f:df:c8:3c:dc:f5:5e:ea:d9:db:1e:
                    12:3a:76:32:1e:df:52:69:2e:18:1e:cd:c0:35:b9:
                    e8:69:9c:0b:6c:26:04:a5:ff:38:d1:60:71:07:98:
                    9e:7d:6d:54:7f:b8:94:00:52:f2:7b:e5:9b:b4:e4:
                    37:b6:8a:41:6c:b9:ad:a6:4c:b6:50:77:aa:ec:86:
                    76:b2:45:c2:7a:3f:0e:ee:64:b5:13:54:69:83:87:
                    07:0d:2f:de:f0:ba:74:fc:a8:bf:4f:54:bb:db:dd:
                    84:64:ed:09:5f:08:06:09:3d:6d:74:95:38:3d:d9:
                    a9:1a:40:8e:f6:7f:60:45:41:81:89:31:f6:fd:23:
                    67:b0:25:09:c4:75:1e:85:e3:c7:89:ac:84:0f:2f:
                    cb:98:fa:b0:8e:ee:33:3d:64:a5:7c:a1:a1:f0:1b:
                    88:4b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:orange.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                34:C0:55:BE:E8:E1:0A:27:8C:7D:69:37:53:8D:A2:83:2A:EA:70:7E
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:b3:32:0b:86:3c:80:63:95:77:01:c2:50:c1:82:e5:88:
         5a:bc:23:81:82:ed:a7:4e:79:9a:a6:09:42:77:3c:90:24:78:
         65:91:28:32:3d:58:11:14:24:3c:13:ae:d1:9f:f5:9d:45:ba:
         e2:6f:a2:09:1b:0b:07:37:e5:15:da:b7:6e:ed:ca:07:29:d7:
         48:7a:93:12:d8:57:09:9a:b4:a7:e3:3f:91:60:4f:23:d6:33:
         cd:59:18:b2:dc:60:7d:9c:38:90:42:e8:2d:84:2f:39:89:c4:
         78:ff:94:c0:33:84:f4:c3:0f:ff:b6:d4:80:c5:f9:10:13:2c:
         d2:96:48:c0:ce:91:37:d0:2f:87:72:8d:fa:f5:96:83:44:b0:
         9d:54:38:b5:bb:30:7c:14:6d:1b:cd:03:26:23:58:b1:b1:4d:
         dd:ae:12:5d:2d:e8:e2:b8:85:c6:7a:9b:dc:58:4a:f1:ec:bd:
         f7:22:a7:43:79:e6:14:99:b3:a3:a2:54:d5:26:5b:71:f9:89:
         f9:e6:8d:95:10:0d:e5:72:3e:dc:c1:fd:c5:7a:1e:64:de:fc:
         00:f7:e5:b3:bb:0f:b5:57:29:e1:93:ad:7d:30:5b:f0:be:05:
         99:97:4b:47:59:a6:3c:39:74:d9:49:49:80:6f:80:c3:5d:3e:
         00:8d:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----