Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11300 (0x2c24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 21 09:19:09 2022 GMT
            Not After : Dec 22 09:19:09 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=orange.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:db:28:1d:6b:42:d4:56:5c:57:25:3f:f9:2b:0b:
                    34:b8:93:a8:f7:e4:16:50:86:8b:c4:1e:12:83:a8:
                    73:3d:a2:b8:7d:07:d8:1d:f5:6d:83:9b:af:67:b5:
                    38:fe:54:33:60:ad:be:ef:25:5d:56:c8:11:8a:21:
                    27:29:a9:eb:2d:42:2c:04:7b:ad:0e:69:1d:76:12:
                    09:64:6e:76:4c:d4:64:9c:f4:e1:1a:75:b2:66:5e:
                    d6:39:2b:a0:b0:aa:33:62:ee:ce:87:c9:9f:55:3d:
                    62:c3:e1:a6:ba:d5:86:06:b3:0b:6b:b7:2e:57:21:
                    f5:a5:f7:bb:00:e1:3c:cc:b2:24:d1:c8:41:05:63:
                    a7:0f:cb:f6:63:dc:a7:e4:70:db:68:04:d6:ca:ef:
                    a9:8c:d0:e7:7b:22:30:f3:a0:ce:e0:c8:e1:0f:fb:
                    dc:80:50:36:de:cc:5e:05:96:b2:1c:67:f1:b3:0b:
                    f1:ca:c9:ae:8e:f7:0a:a7:e0:0e:d3:e5:84:44:f2:
                    3d:3d:25:5d:5f:39:5c:82:83:db:65:78:be:35:87:
                    7a:26:24:b7:42:43:b6:9f:62:a1:2c:2b:80:35:5b:
                    5b:b0:06:36:0d:53:7b:6f:dd:69:2e:51:30:d9:59:
                    2a:76:71:c5:ea:0d:d7:8c:67:a0:7c:e4:26:1b:cb:
                    da:62:bd:7f:1e:6f:be:22:b1:14:db:2a:b3:ea:c2:
                    d9:76:de:69:56:94:74:37:97:3f:72:49:9e:90:d1:
                    db:d1:fb:ee:9f:39:5f:32:cc:c4:ea:0d:22:bd:5f:
                    9a:d9:0d:62:dd:f7:52:e8:f6:46:ac:e7:25:e3:01:
                    cf:c5:f6:82:3d:41:1a:59:44:e6:4f:af:fe:a6:e3:
                    42:3d:50:cf:1e:47:da:79:2c:3c:02:f9:c6:85:5e:
                    a2:7e:69:72:bc:5b:a6:12:2a:06:f4:60:70:0c:c6:
                    81:21:fc:1b:49:fe:7d:23:e7:29:fe:54:49:c3:64:
                    30:e6:e2:a5:3a:31:6b:77:cf:f3:d8:fa:a4:f9:54:
                    2a:28:92:56:98:91:3e:12:dd:33:34:95:05:46:f1:
                    31:5e:c4:6c:0d:d9:60:82:2f:6b:3d:e8:24:1c:04:
                    30:91:05:55:5d:91:4a:b9:30:b1:44:d4:b5:0b:89:
                    db:af:01:f2:c5:f2:32:b0:42:93:06:8d:1d:da:5c:
                    a2:80:f1:69:d9:1a:1b:cd:93:22:5a:f7:f9:1a:6c:
                    9a:49:d7:ad:c4:3f:f1:b1:9d:74:29:2f:1e:cb:02:
                    5b:04:0a:ef:bd:c4:38:9c:88:63:d3:55:ab:c4:dc:
                    54:2d:ed:cf:87:4e:85:ad:c6:5f:07:00:21:85:b7:
                    10:70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:orange.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                F3:4D:4A:9F:30:ED:03:84:F8:72:23:48:BA:37:7A:20:D3:81:54:E5
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         09:cf:86:3b:41:b8:a5:0d:65:1a:58:56:b0:54:e6:8e:9e:14:
         e9:fb:e4:5f:ea:04:f0:5e:f8:58:44:bc:6c:b6:0a:78:93:68:
         a7:d1:9e:27:6f:8d:28:32:c5:57:d6:09:a5:72:05:f0:68:31:
         9e:ef:26:3a:77:37:65:b8:b0:75:37:2d:4f:20:7f:91:cf:21:
         71:ce:e6:02:3f:15:39:93:59:5b:82:67:37:12:3b:b8:78:0e:
         e8:ab:76:0e:a0:2b:57:31:d5:81:36:9e:ed:6d:b0:0b:8e:9b:
         83:3d:7d:8b:0b:96:75:7e:d0:e4:a4:7e:d1:75:c4:76:d2:72:
         f7:cd:de:62:6b:f0:c1:34:b2:7c:dc:b4:05:a5:8d:21:43:d9:
         a0:0f:ab:7a:88:56:48:5b:9d:7f:60:23:e5:fd:94:12:7a:60:
         5d:ce:a0:cc:84:2c:04:bf:c6:db:a1:8c:0e:5d:5a:f2:3a:13:
         d8:d8:7f:1e:ae:53:26:11:ec:fc:ee:f9:84:7a:2e:92:13:4d:
         7f:fa:c4:23:5e:22:b2:2e:e0:99:25:37:7e:53:1a:c6:f7:5f:
         7f:a6:49:3f:85:c1:7d:21:34:3f:e4:7d:b3:0b:81:58:b6:28:
         98:e6:34:37:61:d2:bf:71:fc:ec:74:20:f3:89:1b:81:bf:c9:
         65:ff:65:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----