Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11624 (0x2d68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Apr  5 15:57:57 2023 GMT
            Not After : May  5 15:57:57 2024 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=diamond.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:e6:cd:33:5f:4d:33:72:30:a4:1d:cb:e9:a2:90:
                    6e:6a:62:2f:7c:4f:c0:64:e7:eb:b5:ff:b4:b6:5b:
                    4b:cf:e7:6c:2e:db:0f:e4:c7:3b:aa:01:67:37:7b:
                    90:13:f8:ea:10:05:32:0f:54:f5:9d:3a:c8:fe:0a:
                    fe:43:b3:49:32:2c:fa:84:99:4c:1f:ef:04:f9:53:
                    63:63:83:0f:ca:16:ad:5e:70:7b:01:3a:19:6c:6e:
                    03:69:b8:b2:c3:f4:59:71:c7:07:5b:29:50:c2:9f:
                    07:5e:8a:cd:42:f2:9e:82:5f:00:21:f2:06:0a:0c:
                    f1:fd:69:e3:c8:b5:02:fa:4f:d7:f7:67:4e:08:15:
                    3c:ef:90:df:c4:1b:da:d3:87:c7:61:92:a9:59:d8:
                    d6:69:cd:08:48:c7:b4:fa:c9:63:da:73:da:5b:c1:
                    d4:01:d8:0d:e5:3a:64:ba:b4:d1:91:c5:de:5b:10:
                    c1:1e:bc:0c:55:44:64:e0:c4:7a:e3:47:47:d0:af:
                    f2:34:e3:e3:4d:13:f4:f7:8c:af:e6:4f:74:17:b2:
                    0a:84:bf:e2:cd:82:15:f4:27:0a:3a:20:5e:df:b1:
                    e0:32:22:6d:e2:6e:c4:2d:3b:20:a0:82:5b:f0:9e:
                    2d:97:15:91:a4:e1:13:a2:07:78:99:58:b7:4d:36:
                    a2:de:3a:e2:2d:af:e6:57:bf:9f:55:a2:ad:0d:40:
                    02:49:8b:5e:9a:fc:da:09:c9:bd:fa:bc:10:40:fd:
                    7d:b1:19:e3:71:c1:52:ca:c3:9c:f9:db:80:a6:3e:
                    07:ee:85:52:8a:44:23:d5:4b:c0:36:a8:d3:6b:42:
                    61:47:83:3b:71:d6:1e:8f:0e:05:e2:c4:aa:0f:fd:
                    45:8e:f4:53:d9:bd:fd:d9:20:d9:ba:d6:c0:d2:c8:
                    ef:73:b1:b1:39:c5:23:b0:16:b4:73:2f:88:ba:db:
                    52:ef:77:91:7b:fb:f3:20:33:97:ec:50:23:c3:e1:
                    0f:ac:79:51:88:40:4e:59:4b:4c:d2:b5:78:6d:1f:
                    bb:88:dd:34:ea:f7:53:f7:fc:5b:53:e2:e4:93:c5:
                    31:8d:1f:1d:aa:1c:46:09:63:81:2d:4d:48:8c:c5:
                    0e:c0:e1:54:22:a6:b6:5d:af:ac:9d:90:2e:c4:84:
                    8d:4e:90:6e:1e:d2:75:03:f0:8a:ca:3c:47:65:14:
                    ee:ea:c3:a1:16:4a:02:1d:af:0e:70:de:a9:b2:eb:
                    d8:b5:9f:b3:2c:df:c3:2d:fd:60:20:7d:3d:d8:8a:
                    b7:d5:9f:2f:1e:ef:a1:a8:2e:39:cc:d2:48:02:8f:
                    86:ad:69:9e:9e:e9:82:f3:54:77:f9:83:32:22:46:
                    9f:cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:diamond.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                F2:BC:D4:6D:19:E4:70:10:17:1E:65:B0:EC:8B:DB:DE:58:D6:04:E4
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         ae:87:3a:6a:ee:ff:84:26:4f:1b:6b:48:68:b5:e9:f2:e3:b0:
         89:3d:b8:0a:d8:8d:04:8a:88:45:e5:eb:8b:ec:0b:ae:2d:7f:
         d4:27:c1:ac:5a:35:78:6e:1b:72:07:af:ca:d0:4e:b8:b5:a7:
         c1:c9:b3:bd:fc:a6:8f:60:cc:8c:c9:5b:22:12:49:84:5f:08:
         72:e5:8e:9f:e6:cb:5b:26:e3:16:27:76:ab:88:a5:59:34:15:
         c7:94:3c:50:fb:8a:72:5a:47:e9:7f:31:7f:02:c5:7e:a7:6a:
         48:ed:1b:c4:24:61:d1:3d:fe:19:8d:3a:1f:ee:0d:be:1f:19:
         4a:ff:54:14:ce:4e:84:62:9d:44:d9:34:6f:bd:8d:1f:1b:0e:
         86:f9:38:e7:e1:7f:04:1e:d5:72:34:a2:64:a9:bb:de:84:c4:
         80:35:14:4a:75:34:3c:01:98:f9:50:a4:4d:2f:19:d3:b6:0d:
         0c:fc:92:3e:d6:53:0f:88:af:15:45:ee:cf:2f:f4:87:90:17:
         75:7e:84:af:13:99:94:29:31:d5:82:e2:ec:6d:d3:b7:bf:64:
         11:92:b7:7a:c7:c7:02:a0:90:31:aa:c5:5e:4a:ec:95:6e:6a:
         56:2a:b7:74:3d:f3:92:3e:4f:fd:ea:54:2b:2d:d4:8c:e7:5a:
         21:3d:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----