Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10717 (0x29dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Mar 12 08:29:42 2022 GMT
            Not After : Apr 12 08:29:42 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=diamond.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b1:fe:14:7a:69:b8:69:35:55:bd:81:b1:85:03:
                    04:16:d7:1a:e6:b4:26:d6:51:b3:95:a1:e9:f3:59:
                    98:27:8d:62:03:30:7a:92:68:b8:ff:1e:9e:2b:b3:
                    60:4d:ca:20:cc:bf:cb:ef:4f:4f:51:36:54:76:c2:
                    c0:21:f5:19:5d:d2:8b:8b:34:97:2a:26:01:92:08:
                    b5:f0:3a:d0:93:25:f5:2e:50:a4:95:7f:99:f4:6e:
                    1d:fa:f3:ec:09:b3:2b:db:0f:7b:8c:70:dc:3a:b1:
                    2b:f4:ef:26:ec:f8:b8:aa:64:47:d7:33:d1:c0:66:
                    1a:44:1b:0c:1c:1d:ee:c7:8f:18:8a:ad:1d:42:a6:
                    c2:39:54:f3:ff:c0:de:51:02:dd:fb:22:39:78:ec:
                    a5:d2:28:d2:7d:5e:9d:bd:02:a2:d0:60:d2:96:f6:
                    7f:e7:71:00:94:8b:8f:8c:43:25:17:48:7a:c2:c3:
                    d4:d8:7e:60:1a:f4:e5:1b:98:68:23:e7:15:99:4e:
                    90:9f:39:50:aa:14:8d:42:80:c8:f9:f0:58:49:0d:
                    88:a4:05:6b:03:20:fa:c2:92:10:dc:8c:c8:30:e6:
                    0a:59:0e:8a:d5:21:a3:df:ca:22:5b:5f:ed:50:c9:
                    e0:5a:6a:9c:d9:eb:0e:fb:1e:c8:5d:7f:98:4c:41:
                    84:52:60:20:f8:6e:40:2f:46:80:d7:8e:d1:d4:e4:
                    1a:b0:2c:e7:64:92:16:ca:e5:ce:5d:4b:e7:48:2a:
                    2e:ac:fe:26:eb:2b:76:1e:2b:66:94:69:b6:8a:29:
                    01:8e:23:5b:fc:c2:b3:a5:89:15:ba:6d:92:e5:40:
                    e1:e9:57:89:cc:14:7c:e3:b7:37:bf:91:1f:09:23:
                    46:2c:b2:bd:1f:07:9b:b7:25:71:57:6f:99:ff:25:
                    cd:99:d4:52:00:eb:a1:06:0d:da:bf:7a:4d:bf:fb:
                    51:4f:87:f7:7a:af:2c:76:fe:d1:65:97:94:06:db:
                    d2:95:27:3b:25:fb:4a:e8:ee:e1:c9:d1:f6:74:e9:
                    d9:56:02:72:19:a5:76:68:df:36:80:99:dc:48:ac:
                    8d:90:10:5c:79:3f:dd:ac:bd:ee:ab:c7:46:41:88:
                    b0:5d:ff:82:4d:32:be:58:98:09:ce:a1:91:a1:9b:
                    e0:b2:16:34:35:01:81:b9:98:04:39:bf:8a:4a:88:
                    36:fc:10:ef:cd:17:26:25:02:b7:42:3a:83:c1:7f:
                    f6:63:d8:bc:a1:c1:b8:ef:d1:f7:9d:73:f5:d2:74:
                    9f:64:cf:36:eb:67:e3:9f:81:42:76:29:e0:92:cb:
                    9e:74:8a:63:6a:f6:a1:a9:8f:d1:27:11:8b:5c:84:
                    9e:ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:diamond.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                67:1E:6D:FA:F7:09:11:08:60:A4:E6:0B:39:8A:C6:5B:7B:DB:D1:E1
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         85:cd:bd:b4:bc:32:cb:25:fe:5e:1a:bf:52:21:43:15:c4:e9:
         b1:8f:97:5e:bf:d3:f6:80:08:43:4d:19:71:45:61:ce:2b:a8:
         ab:6e:0f:48:b7:95:aa:d1:f2:a9:d9:36:97:c0:4d:6a:83:2c:
         00:d4:75:3e:be:f1:98:d1:78:32:77:c6:99:26:c8:e4:5c:08:
         27:ed:ea:4c:df:43:6f:6b:80:19:64:2b:38:eb:1c:c3:ef:7e:
         50:17:2b:f7:fe:e0:74:7e:c8:6b:5c:33:40:a9:15:46:d0:f0:
         67:10:81:5a:e8:ec:38:1f:e5:ac:09:a8:e4:80:1e:41:b7:ac:
         de:4b:66:bc:aa:5c:1b:c7:13:65:3b:f4:d2:73:52:8f:20:d6:
         2d:e2:2f:d0:b0:2b:5c:71:d1:46:bd:de:73:db:78:6e:06:b2:
         1f:11:dc:9b:5e:18:90:79:3e:7c:db:26:c7:81:06:93:dd:95:
         aa:e1:22:84:f0:8d:36:a3:b5:8a:ae:32:8d:4b:72:3b:6e:6b:
         74:df:3e:39:20:4e:ea:1d:79:03:fa:fe:03:b3:7d:93:43:0b:
         41:03:43:17:0e:5c:26:2e:86:f1:1c:83:31:75:3c:25:3b:51:
         37:ba:ad:d3:2d:2b:86:be:67:09:13:a3:c6:7b:7c:b5:39:a2:
         f2:98:b5:4a
-----BEGIN CERTIFICATE-----
MIIGrDCCBZSgAwIBAgICKd0wDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0yMjAzMTIwODI5NDJaFw0yMzA0MTIwODI5NDJaMGUxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMQ4wDAYDVQQLEwVob3N0czEVMBMGA1UECxMM
Z3JpZC5raWFlLnJ1MSAwHgYDVQQDExdkaWFtb25kLnQxLmdyaWQua2lhZS5ydTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALH+FHppuGk1Vb2BsYUDBBbX
Gua0JtZRs5Wh6fNZmCeNYgMwepJouP8eniuzYE3KIMy/y+9PT1E2VHbCwCH1GV3S
i4s0lyomAZIItfA60JMl9S5QpJV/mfRuHfrz7AmzK9sPe4xw3DqxK/TvJuz4uKpk
R9cz0cBmGkQbDBwd7sePGIqtHUKmwjlU8//A3lEC3fsiOXjspdIo0n1enb0CotBg
0pb2f+dxAJSLj4xDJRdIesLD1Nh+YBr05RuYaCPnFZlOkJ85UKoUjUKAyPnwWEkN
iKQFawMg+sKSENyMyDDmClkOitUho9/KIltf7VDJ4FpqnNnrDvseyF1/mExBhFJg
IPhuQC9GgNeO0dTkGrAs52SSFsrlzl1L50gqLqz+Jusrdh4rZpRptoopAY4jW/zC
s6WJFbptkuVA4elXicwUfOO3N7+RHwkjRiyyvR8Hm7clcVdvmf8lzZnUUgDroQYN
2r96Tb/7UU+H93qvLHb+0WWXlAbb0pUnOyX7Suju4cnR9nTp2VYCchmldmjfNoCZ
3EisjZAQXHk/3ay97qvHRkGIsF3/gk0yvliYCc6hkaGb4LIWNDUBgbmYBDm/ikqI
NvwQ780XJiUCt0I6g8F/9mPYvKHBuO/R951z9dJ0n2TPNutn45+BQnYp4JLLnnSK
Y2r2oamP0ScRi1yEnuzrAgMBAAGjggKEMIICgDAMBgNVHRMBAf8EAjAAMA4GA1Ud
DwEB/wQEAwID+DARBglghkgBhvhCAQEEBAMCBNAwIgYDVR0RBBswGYIXZGlhbW9u
ZC50MS5ncmlkLmtpYWUucnUwHQYDVR0OBBYEFGcebfr3CREIYKTmCzmKxlt729Hh
MB8GA1UdIwQYMBaAFLca+X3+0h5hqamMIWiLfmCMuXBZMD0GA1UdEgQ2MDSBFHJk
aWctY2FAZ3JpZC5raWFlLnJ1hhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcv
MD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL2NhLmdyaWQua2lh
ZS5ydS9SRElHL2NhLmh0bWwwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NhLmdy
aWQua2lhZS5ydS9SRElHL2NhY3JsLmRlcjBaBgNVHSAEUzBRMAwGCiqGSIb3TAUC
AgEwQQYMKwYBBAGBrHsBAQICMDEwLwYIKwYBBQUHAgEWI2h0dHA6Ly9jYS5ncmlk
LmtpYWUucnUvUkRJRy9wb2xpY3kvMCsGCWCGSAGG+EIBAgQeFhxodHRwOi8vY2Eu
Z3JpZC5raWFlLnJ1L1JESUcvMBYGCWCGSAGG+EIBCAQJFgdwb2xpY3kvMBgGCWCG
SAGG+EIBBAQLFgljYWNybC5wZW0wIAYJYIZIAYb4QgEDBBMWEWNnaS1iaW4vY2hl
Y2tyZXY/MFQGCWCGSAGG+EIBDQRHFkVJc3N1aWVkIGJ5IFJESUcgQ2VydGlmaWNh
dGlvbiBBdXRob3JpdHksIGh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy8wDQYJ
KoZIhvcNAQELBQADggEBAIXNvbS8Mssl/l4av1IhQxXE6bGPl16/0/aACENNGXFF
Yc4rqKtuD0i3larR8qnZNpfATWqDLADUdT6+8ZjReDJ3xpkmyORcCCft6kzfQ29r
gBlkKzjrHMPvflAXK/f+4HR+yGtcM0CpFUbQ8GcQgVro7Dgf5awJqOSAHkG3rN5L
ZryqXBvHE2U79NJzUo8g1i3iL9CwK1xx0Ua93nPbeG4Gsh8R3JteGJB5PnzbJseB
BpPdlarhIoTwjTajtYquMo1Lcjtua3TfPjkgTuodeQP6/gOzfZNDC0EDQxcOXCYu
hvEcgzF1PCU7UTe6rdMtK4a+ZwkTo8Z7fLU5ovKYtUo=
-----END CERTIFICATE-----