Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12255 (0x2fdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 22 04:34:42 2023 GMT
            Not After : Jan 21 04:34:42 2025 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=sespd3.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Modulus:
                    00:d4:39:51:84:a4:68:55:5a:51:d1:9d:2e:2f:1e:
                    4f:ee:04:06:93:30:62:1d:c4:97:b5:d7:7d:e8:29:
                    79:c5:b6:cf:d6:0e:ea:fe:7f:f4:a2:50:48:c5:9e:
                    7d:68:29:91:47:97:ff:b5:47:a1:30:36:31:fc:d5:
                    3f:ac:68:26:9f:cc:c1:b4:a5:5b:01:13:76:40:c7:
                    11:d4:4d:9e:f9:e0:9c:d6:16:5e:50:9d:6f:47:c7:
                    67:6b:f3:fa:bd:f2:c5:2f:fb:40:c2:f6:b2:67:66:
                    b0:a5:3d:b8:70:b0:c2:46:83:d9:73:e9:cd:f7:f9:
                    3a:5d:49:36:46:22:69:f9:3a:59:b3:a9:c9:bf:61:
                    59:e0:94:5f:61:15:9d:cb:24:c4:aa:62:91:40:2c:
                    5c:18:1e:f3:cf:df:a7:fb:31:65:02:15:6a:65:9b:
                    63:54:44:30:90:bc:ed:fb:d4:53:2c:e3:b1:2f:b1:
                    51:26:ae:b0:4a:4f:43:b4:7f:8f:06:9c:0a:b3:cf:
                    8b:b3:fc:9a:89:18:38:d1:ab:02:08:d5:62:f9:58:
                    db:e4:57:7b:f8:c1:f2:d5:4f:07:59:f6:3c:78:20:
                    ea:53:b3:53:5e:2a:ef:29:97:30:4e:b4:e5:b1:df:
                    2b:d6:5e:50:fd:5c:40:2a:50:cd:de:96:9e:a5:fd:
                    17:52:f8:5a:57:b9:55:c5:4c:a1:1e:06:cb:d8:a0:
                    95:23:a8:f9:5f:3a:b3:d3:e6:69:24:c3:00:78:e5:
                    9d:37:f9:cf:85:18:e8:22:a1:26:68:3b:67:50:3b:
                    42:6d:6a:4f:b1:9e:70:21:b3:4f:e7:8f:2f:b1:8d:
                    f0:42:d3:c1:45:df:c3:4b:05:a7:86:ee:73:0e:2d:
                    d5:23:e1:cc:80:a3:d2:1b:10:fb:ac:48:bb:06:8a:
                    2e:8f:f3:e5:b2:6e:8a:10:a2:7e:37:48:48:e0:8f:
                    8e:73:b1:35:a2:6d:12:89:ac:fe:7d:e1:5b:1c:76:
                    8f:87:e2:38:d0:03:25:5b:0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:sespd3.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                40:D1:FC:88:5A:F5:00:41:17:25:15:09:EC:EE:BF:A0:6A:B6:4E:29
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         6a:30:b8:6a:a2:40:65:3e:fc:9b:71:ec:cb:93:d2:12:8e:09:
         83:fe:69:6b:db:2f:7c:eb:9a:f6:f0:46:67:05:3c:17:61:b8:
         00:ac:20:6a:eb:4f:64:08:4a:0c:57:58:d9:63:3e:de:67:d9:
         40:27:d4:bd:f5:06:5b:67:15:04:11:e3:f2:1a:13:1c:82:37:
         12:64:46:21:d2:a1:dc:87:b3:fa:ec:1f:18:ec:e7:dd:cc:c6:
         82:42:46:29:8b:35:8d:83:76:ae:a6:d1:e9:60:eb:5a:36:73:
         9a:d2:0d:ba:e0:6a:3e:63:dc:94:57:44:5c:cf:63:67:61:dc:
         fd:eb:d3:5e:2b:df:de:31:1d:d2:a0:0b:46:5c:01:a5:b2:ef:
         92:bb:45:f6:49:91:d4:8e:84:72:72:51:04:27:70:8e:3e:fb:
         c3:b4:8e:98:b7:a1:04:e3:3b:c5:6d:bb:65:5f:db:02:70:0e:
         77:4e:6b:50:1c:b2:80:b3:2d:b5:c7:06:b4:ef:fe:0b:89:73:
         c0:cd:78:9f:9f:e1:77:7d:60:55:a9:7a:7a:34:90:f8:9e:56:
         47:1f:59:92:ba:69:7d:0e:1d:a1:d2:6a:c0:a0:53:7f:48:59:
         d2:c9:94:d3:01:7b:0b:fa:da:f8:b0:84:3a:db:66:b2:47:a0:
         95:ec:5d:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----