Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11264 (0x2c00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Oct 17 09:18:01 2022 GMT
            Not After : Nov 17 09:18:01 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=ca.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:78:27:6c:0c:3f:d9:72:a3:80:5c:7e:e4:
                    ea:70:04:58:c7:f4:94:5f:3b:af:a4:73:6b:b5:e4:
                    55:e6:1a:c3:f1:e7:aa:f8:e8:b4:10:b0:8f:e0:9b:
                    b9:2b:af:20:84:69:69:2e:27:a0:84:56:7a:b9:0b:
                    86:9a:f5:56:a6:9f:07:d4:7d:b2:d9:01:4e:e2:a0:
                    90:0c:92:36:71:09:c0:e0:fd:9b:ad:80:50:65:75:
                    d2:c6:e9:85:c5:ca:3d:47:4f:57:6d:89:ee:82:8a:
                    d5:3a:47:9e:40:28:e5:1c:55:0a:fd:04:48:ec:a0:
                    11:83:01:82:85:fe:a7:71:f8:43:9b:e6:8b:29:2c:
                    69:4b:fb:b4:93:94:9b:94:e0:f4:96:8a:98:39:29:
                    28:15:3f:0d:9f:32:08:34:95:26:cb:ec:61:73:10:
                    36:0c:e7:93:c0:bf:d9:0c:c3:eb:fe:70:f6:d9:65:
                    01:d6:68:77:43:99:76:92:ba:1d:73:b0:58:fd:79:
                    94:bb:dc:88:25:02:4a:fa:8e:f5:b9:04:f2:ec:3b:
                    37:28:17:81:2c:bd:9f:f4:60:9b:bf:25:4a:0d:6f:
                    af:6a:51:50:b9:26:da:4d:ec:21:02:56:8a:61:31:
                    37:47:8b:a4:21:84:e3:ba:8c:ff:11:16:8e:c7:6c:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:ca.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                21:32:3B:BE:A5:8B:7B:92:3E:B9:04:BF:F8:C7:5E:F9:E8:FB:CC:88
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         b8:28:a6:e3:01:6b:7f:4e:34:8c:df:c0:36:e6:74:d4:82:12:
         a1:4e:13:61:27:77:c8:a6:6f:24:b6:aa:d2:4f:41:d5:89:41:
         4b:ac:1d:4e:a8:ac:1f:be:2c:bd:4e:b8:e6:bd:78:64:96:06:
         4b:8b:20:53:6d:44:cb:08:99:ff:fe:08:bf:3a:37:43:1b:3b:
         92:7f:cc:42:0c:a9:1c:b4:e4:f2:57:bc:2b:57:54:dc:38:13:
         67:10:d1:46:71:03:56:4c:7a:b3:d2:65:7f:9d:9a:30:9a:d7:
         e5:c1:b9:57:67:3b:6b:7a:0d:f8:f4:b7:e3:80:fc:9c:8c:e0:
         76:31:d3:bb:9c:ec:2a:e9:71:47:3a:51:4a:01:62:df:27:43:
         b7:7c:2a:45:25:40:6d:6f:b4:3c:4b:4a:4a:14:2f:93:06:36:
         33:f2:45:a8:44:8b:11:e0:d4:03:25:be:7b:58:67:93:9f:b6:
         06:8b:57:54:e7:ea:0d:12:de:b1:e1:4e:76:bc:4d:24:1a:e8:
         4d:13:13:3b:a9:0f:41:4d:5f:ff:ce:fd:a3:74:f5:0f:ca:fa:
         e2:22:b8:d1:38:c3:54:d1:9c:ce:ab:d6:5a:47:91:a4:b1:a6:
         13:ff:eb:44:e0:b5:2f:3b:c7:a3:32:34:d7:6d:82:22:e2:16:
         01:38:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----