Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12153 (0x2f79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov 15 15:21:52 2023 GMT
            Not After : Dec 15 15:21:52 2024 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=ca.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:3c:ad:f8:16:47:41:30:57:f0:23:ab:67:
                    23:1c:6f:03:66:5c:cb:cc:c1:10:69:cb:fd:53:7f:
                    61:b4:fd:97:f4:df:5d:84:1d:4d:e1:f9:67:8b:0f:
                    8f:8c:a7:a6:6b:aa:05:b9:e6:62:66:13:6b:22:98:
                    8d:09:ef:4a:b4:da:8b:06:aa:9f:e4:21:8c:ba:27:
                    ba:2d:35:7a:29:ce:5d:f4:0f:31:4a:2d:33:03:5d:
                    69:9a:78:1e:38:66:0c:65:c0:a3:27:aa:c1:e5:ea:
                    f5:7e:63:4a:9c:79:89:08:ee:85:78:17:5b:98:cb:
                    ad:84:4a:2f:d1:7a:1d:57:96:ad:27:5b:d7:c8:78:
                    26:9a:11:ba:06:b7:11:55:4e:a1:2c:6e:17:8a:a9:
                    3c:3e:d0:e5:51:1b:90:2f:81:bc:c4:3d:4a:ca:99:
                    33:bb:4b:e9:60:cc:1b:3d:34:51:1e:dd:29:92:49:
                    62:73:20:97:1d:79:4d:59:53:eb:cf:ad:39:fb:83:
                    f9:6f:ff:d6:65:f2:1b:b1:34:dd:0f:24:0a:4c:e6:
                    14:0e:aa:15:e9:4c:90:2c:f2:63:af:b4:68:72:dc:
                    41:9e:57:e6:0f:68:2e:7b:65:00:97:78:3c:d3:0b:
                    bf:16:de:6d:10:c2:83:13:5b:4f:a6:3c:89:69:a8:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:ca.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                7D:6F:48:F7:AE:7A:11:6F:E3:20:D6:90:F7:B0:8C:24:D4:20:13:33
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         94:72:2e:ed:17:a1:34:03:a6:29:c2:b0:d4:7e:c2:b0:af:10:
         22:43:1f:28:0a:21:6e:03:a8:95:99:83:4a:56:eb:18:8b:d4:
         26:34:91:96:0b:75:b4:e6:67:f4:14:87:bd:b8:ea:6e:f5:3e:
         9b:e2:05:02:8b:1e:0c:79:a6:50:f9:b0:6b:76:0c:1e:96:25:
         60:91:84:17:70:b7:7f:51:92:d9:a2:50:53:5b:bc:40:1d:fb:
         35:78:29:35:fc:af:95:78:d4:3a:ee:1a:98:94:12:5b:c5:63:
         6b:3c:18:7e:73:62:48:dd:a3:8c:11:c7:64:c7:f9:4e:51:8c:
         ee:54:b7:f1:df:41:0b:85:fb:dd:dc:a3:7c:33:49:dd:90:11:
         ce:59:f7:83:7e:a7:22:6b:d1:12:21:92:a2:a7:27:a8:9f:9c:
         78:a6:45:b4:9e:1f:27:a7:09:54:e8:c3:ad:eb:76:53:1a:e5:
         bc:1c:77:e1:1c:af:3c:9f:c5:f0:96:6e:9b:2d:9c:ef:38:fa:
         cf:af:41:83:93:54:93:09:c1:41:c3:f5:39:d1:c8:92:6b:82:
         72:b5:dd:f6:8e:e4:2b:8f:79:5a:a9:c5:c6:c6:e8:f0:75:03:
         07:86:27:33:1c:66:dc:a1:ac:94:87:f0:e4:80:de:30:4f:99:
         89:2b:d4:41
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgICL3kwDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0yMzExMTUxNTIxNTJaFw0yNDEyMTUxNTIxNTJaMF0xCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKDARSRElHMQ4wDAYDVQQLDAVob3N0czEVMBMGA1UECwwM
Z3JpZC5raWFlLnJ1MRgwFgYDVQQDDA9jYS5ncmlkLmtpYWUucnUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGDyt+BZHQTBX8COrZyMcbwNmXMvMwRBp
y/1Tf2G0/Zf0312EHU3h+WeLD4+Mp6ZrqgW55mJmE2simI0J70q02osGqp/kIYy6
J7otNXopzl30DzFKLTMDXWmaeB44ZgxlwKMnqsHl6vV+Y0qceYkI7oV4F1uYy62E
Si/Reh1Xlq0nW9fIeCaaEboGtxFVTqEsbheKqTw+0OVRG5AvgbzEPUrKmTO7S+lg
zBs9NFEe3SmSSWJzIJcdeU1ZU+vPrTn7g/lv/9Zl8huxNN0PJApM5hQOqhXpTJAs
8mOvtGhy3EGeV+YPaC57ZQCXeDzTC78W3m0QwoMTW0+mPIlpqBERAgMBAAGjggJ8
MIICeDAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwID+DARBglghkgBhvhCAQEE
BAMCBNAwGgYDVR0RBBMwEYIPY2EuZ3JpZC5raWFlLnJ1MB0GA1UdDgQWBBR9b0j3
rnoRb+Mg1pD3sIwk1CATMzAfBgNVHSMEGDAWgBS3Gvl9/tIeYampjCFoi35gjLlw
WTA9BgNVHRIENjA0gRRyZGlnLWNhQGdyaWQua2lhZS5ydYYcaHR0cDovL2NhLmdy
aWQua2lhZS5ydS9SRElHLzA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0
dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy9jYS5odG1sMDYGA1UdHwQvMC0wK6Ap
oCeGJWh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy9jYWNybC5kZXIwWgYDVR0g
BFMwUTAMBgoqhkiG90wFAgIBMEEGDCsGAQQBgax7AQECAjAxMC8GCCsGAQUFBwIB
FiNodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvcG9saWN5LzArBglghkgBhvhC
AQIEHhYcaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHLzAWBglghkgBhvhCAQgE
CRYHcG9saWN5LzAYBglghkgBhvhCAQQECxYJY2FjcmwucGVtMCAGCWCGSAGG+EIB
AwQTFhFjZ2ktYmluL2NoZWNrcmV2PzBUBglghkgBhvhCAQ0ERxZFSXNzdWllZCBi
eSBSRElHIENlcnRpZmljYXRpb24gQXV0aG9yaXR5LCBodHRwOi8vY2EuZ3JpZC5r
aWFlLnJ1L1JESUcvMA0GCSqGSIb3DQEBCwUAA4IBAQCUci7tF6E0A6YpwrDUfsKw
rxAiQx8oCiFuA6iVmYNKVusYi9QmNJGWC3W05mf0FIe9uOpu9T6b4gUCix4MeaZQ
+bBrdgweliVgkYQXcLd/UZLZolBTW7xAHfs1eCk1/K+VeNQ67hqYlBJbxWNrPBh+
c2JI3aOMEcdkx/lOUYzuVLfx30ELhfvd3KN8M0ndkBHOWfeDfqcia9ESIZKipyeo
n5x4pkW0nh8npwlU6MOt63ZTGuW8HHfhHK88n8Xwlm6bLZzvOPrPr0GDk1STCcFB
w/U50ciSa4Jytd32juQrj3laqcXGxujwdQMHhiczHGbcoayUh/DkgN4wT5mJK9RB
-----END CERTIFICATE-----