Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11365 (0x2c65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 21 09:34:02 2022 GMT
            Not After : Dec 22 09:34:02 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=orb.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:a4:6f:20:1c:1b:1b:1d:5b:e3:10:dc:26:42:80:
                    1d:76:ce:5c:0d:9c:f2:66:43:65:17:0b:ba:3e:1b:
                    e2:e3:1a:92:6c:51:0e:18:b2:6d:ca:50:67:64:b6:
                    cf:13:ab:57:dd:b6:a6:43:0f:b1:22:02:91:df:ec:
                    64:8b:86:2b:da:4b:c5:e4:11:d5:11:28:9f:cf:ef:
                    a4:f6:b7:ed:39:52:12:ae:e2:a3:cc:a7:d1:97:81:
                    14:b4:08:cc:43:08:dd:9c:73:9f:9f:48:3d:b7:49:
                    f0:ff:2b:42:92:d4:a4:19:54:a1:64:03:d0:bf:b6:
                    5a:68:61:33:b6:b1:ef:c4:0f:24:f1:f1:3a:31:40:
                    3c:fd:2f:ac:5c:c7:d6:bb:00:d4:62:6a:e3:29:b5:
                    13:e2:60:1c:fc:bd:c8:f7:52:a9:53:b3:b3:37:70:
                    4c:62:aa:5b:5d:c5:1e:8a:79:ea:b5:97:b6:22:a0:
                    eb:5d:65:e2:3c:7b:b7:1a:c8:9b:60:f8:6d:4a:b4:
                    39:eb:1b:5d:2a:bb:90:cb:6a:4d:58:6a:e6:92:3a:
                    76:e0:e1:2a:08:e7:f0:ef:c8:68:61:38:9f:8e:db:
                    73:ea:78:82:e7:a1:b7:91:3f:f4:7d:f6:5f:42:21:
                    1f:6f:4b:87:f1:d1:99:ba:5c:fc:95:ee:f7:60:d6:
                    1d:11:59:0a:bc:99:fe:35:69:9c:2b:8d:83:42:ac:
                    5e:0a:a2:87:7e:2e:b2:77:b1:1c:50:20:da:00:dd:
                    b1:71:9c:b7:3e:d3:91:26:60:81:34:36:80:59:e7:
                    28:75:c9:4a:92:f3:b7:ac:ca:0e:01:ca:d8:c1:03:
                    b7:14:eb:f0:69:59:5b:02:9d:a9:38:cd:54:8f:56:
                    cb:62:8b:8a:79:1d:f7:62:84:db:ba:b7:3b:be:28:
                    12:3d:de:65:03:a4:3b:7d:e8:e0:45:61:18:63:9f:
                    b9:ab:fe:8b:be:e4:1a:67:cc:eb:09:81:7a:3b:5e:
                    69:99:f0:f8:e9:77:6a:3b:d7:64:24:ed:a3:02:fa:
                    42:80:0e:b0:5d:0e:b0:a2:58:26:ef:2a:06:c5:d9:
                    1d:97:aa:c8:4b:41:95:ed:57:f1:71:bc:4e:16:e0:
                    83:82:0e:ea:7b:14:40:17:4f:b9:cb:d6:26:c9:f6:
                    ed:22:27:c2:bd:19:94:03:d1:a7:7d:6c:3e:96:a3:
                    a8:74:da:de:36:04:7c:74:f8:97:a4:9e:a0:17:0f:
                    3c:fc:9e:4c:7c:f3:7c:38:33:b2:87:07:58:57:a2:
                    3e:00:65:59:e9:eb:39:e4:40:50:3a:0c:af:87:ce:
                    0e:7d:cc:d8:3a:92:1a:a6:9e:69:0f:b4:76:79:c7:
                    18:58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:orb.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                57:A9:2D:D8:28:C0:95:BC:44:19:83:7B:A1:AF:91:5E:FF:9B:64:F6
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:b0:15:77:2a:c1:80:71:b1:2c:bc:6d:04:92:e7:39:e2:
         6b:9c:84:3a:56:29:64:57:14:0a:12:f4:5d:1f:7c:f9:59:93:
         8a:4a:87:34:bc:5c:d7:98:d2:4f:9b:44:8b:5e:9d:a0:b9:db:
         6c:67:7a:c8:5b:7a:fa:59:63:20:73:ad:21:61:b0:f5:67:4f:
         bc:ea:93:31:ec:98:bc:66:f4:fb:13:4f:d5:5a:1c:44:e8:d3:
         eb:80:b2:c7:da:66:bf:c1:5e:75:79:5e:a4:f6:d0:56:9f:cd:
         ea:a8:69:0a:16:52:80:4e:35:41:04:35:2f:e1:24:5a:13:3d:
         60:f6:bf:40:9d:41:35:13:5a:13:97:b1:2e:53:17:2e:37:95:
         a6:d4:2d:bc:f8:ce:1b:44:ca:35:ee:67:ce:7e:9c:a4:45:f4:
         62:a6:af:dc:97:16:45:1b:ef:2d:34:4b:c6:0b:31:27:e5:90:
         0a:d2:03:40:23:64:74:e0:d4:94:89:3e:8b:ba:db:2a:49:c2:
         97:c1:d2:30:0a:ab:50:1f:bb:22:17:10:ea:7f:8b:20:83:31:
         40:0b:d5:cc:71:0f:d8:59:a6:22:57:70:3f:6d:4d:0c:70:e4:
         09:6c:80:07:b4:d8:6d:a5:93:cc:db:af:d1:e4:0f:ba:f5:17:
         ed:77:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----