Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11459 (0x2cc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 15 16:00:15 2022 GMT
            Not After : Jan 15 16:00:15 2024 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=astra.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:bf:65:db:6b:8a:29:ba:b2:15:8c:e0:2a:46:
                    f4:44:cb:ca:e4:63:40:ff:9c:48:1f:82:13:72:dc:
                    06:d2:8d:4f:e3:81:46:a1:6f:06:4c:54:c2:49:3a:
                    de:5d:7d:35:12:2c:ac:6a:59:3f:83:89:32:fc:5a:
                    ed:ce:1a:b1:9d:8f:ad:29:8f:47:5c:d0:f7:c6:a0:
                    ac:d0:16:20:b5:33:5b:e0:a7:ea:fa:bf:a1:3c:af:
                    54:c9:4d:30:ef:90:c5:b0:40:86:51:d5:fd:ab:ce:
                    a3:bb:a2:be:6e:c4:05:cf:cd:61:23:ad:08:fc:bc:
                    db:44:a4:57:b1:2a:00:b8:a4:54:36:7c:ac:28:9c:
                    ef:ff:53:95:a9:af:ff:55:50:a2:8d:f7:1f:77:9e:
                    b2:8b:c5:71:7a:5c:94:5a:5b:8e:0d:e8:45:5e:71:
                    77:ea:02:a3:77:7f:0a:49:da:eb:49:3d:98:d1:39:
                    8e:58:c7:06:cc:89:f6:32:54:92:64:a5:8f:77:b2:
                    45:8b:ce:de:c4:2f:3a:d8:65:54:ab:fc:df:02:ab:
                    b6:f0:07:24:26:ed:79:f3:68:49:4d:34:e0:79:b7:
                    5a:b4:d6:39:00:40:1e:4a:6e:11:24:82:d2:6f:4c:
                    c7:8e:43:62:29:8f:f8:74:6d:64:8d:7f:30:3b:44:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:astra.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                22:44:52:33:14:7E:29:3D:E7:18:57:9B:31:4C:09:4A:24:58:BC:E2
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         b4:e6:a3:3c:4d:ad:a8:64:46:42:94:53:86:72:51:40:74:c0:
         36:72:99:54:5c:9b:88:de:2a:c2:df:05:cc:63:c0:af:f9:e0:
         2f:de:28:94:e7:85:18:f1:5f:38:60:d3:d4:28:34:20:6d:75:
         59:e4:2d:37:7c:fa:8b:85:73:94:9c:fc:ab:92:27:a6:53:88:
         21:17:d8:1d:d6:4c:79:4a:c6:f1:20:a3:77:b6:8e:00:2e:af:
         f5:4c:f4:52:30:53:38:ff:9f:07:5c:49:56:aa:8a:09:e2:ad:
         5c:82:0e:9a:7b:16:1c:cc:7f:32:70:17:cb:38:bc:99:e6:f5:
         93:4b:9a:f9:67:6b:62:39:32:dd:7e:62:62:cb:ca:7d:6d:6c:
         05:1f:dc:0c:db:b3:6e:41:c4:82:56:72:b7:ce:24:21:de:e4:
         54:fb:3c:7b:e0:16:37:e0:8c:3f:c1:c8:41:3c:1b:bb:80:84:
         c9:b9:08:25:0c:e9:9a:b3:0b:b2:89:a2:2b:18:50:10:ef:29:
         8f:b1:e5:dc:16:c0:ba:7f:de:d6:26:fd:7c:4b:a8:14:c0:4d:
         5e:02:d0:56:3a:eb:a9:17:d8:27:22:04:fc:c8:f3:87:df:ef:
         72:6f:ef:b1:90:f3:6b:b5:b5:ee:25:91:90:55:37:b4:73:c2:
         ff:51:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----