Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12296 (0x3008)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 22 04:43:28 2023 GMT
            Not After : Jan 21 04:43:28 2025 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=grid.kiae.ru, CN=orange.t1.grid.kiae.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Modulus:
                    00:d9:1d:e9:9b:8c:d1:40:23:c7:34:13:4d:87:4a:
                    3f:e6:d1:cf:ed:ad:0b:72:2a:b9:dc:80:ac:62:86:
                    30:f9:56:ac:b4:a7:8b:88:4d:6c:28:32:60:d7:67:
                    4b:4b:1a:c7:ad:96:a4:c6:6f:00:1e:d1:55:e3:9a:
                    13:6c:2b:7f:cb:eb:42:cd:e5:27:a1:e5:cd:98:ba:
                    88:2f:59:ae:9a:93:5e:44:3f:d9:35:2f:e3:20:07:
                    4f:30:e6:77:f7:e0:50:9f:07:88:a4:b9:58:23:09:
                    ad:52:ba:4e:c6:8b:f1:13:e9:fb:4a:b1:f0:e5:d6:
                    3e:9d:a1:9b:7a:86:e2:ad:56:12:1d:dc:71:e1:07:
                    3a:ff:cf:5c:ce:89:49:6b:2f:d6:f3:70:cb:38:82:
                    43:f8:fb:11:1f:91:99:a8:cf:3b:99:65:56:d9:8c:
                    d2:2f:e1:82:fe:96:bc:f8:3c:b1:39:0f:6a:15:3a:
                    bf:a3:5a:d8:b6:e7:ed:42:d8:14:5e:93:34:ab:fb:
                    be:42:66:6f:04:dc:fc:b2:fa:d5:91:68:27:ee:5c:
                    87:b2:a3:67:df:88:84:01:81:4e:38:90:2c:f4:22:
                    00:06:a4:ef:13:7d:03:ee:80:a0:ab:7b:83:06:5e:
                    e3:ae:e0:1a:92:56:05:c7:06:15:d2:5a:ac:92:3a:
                    7b:9f:57:f0:66:4d:45:bc:10:78:93:1b:a5:a6:6b:
                    b0:5d:7f:98:fd:bc:67:5a:f6:0d:12:8a:50:ca:96:
                    11:ab:df:59:08:41:02:ce:8d:6f:e8:bd:21:3f:31:
                    48:bd:6f:e4:8b:37:f3:3a:0a:db:97:87:e7:5f:2a:
                    40:22:07:89:e7:b8:e2:30:3a:64:f5:6a:40:5c:f0:
                    26:0a:e9:05:9f:4e:b7:88:69:6a:bd:58:a9:16:63:
                    cf:93:87:ee:ee:81:22:b9:33:0f:60:9d:37:f9:81:
                    b4:b4:c9:cb:94:3f:b2:d9:0d:4a:e5:46:59:61:75:
                    79:6d:53:67:94:74:48:87:f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:orange.t1.grid.kiae.ru
            X509v3 Subject Key Identifier: 
                28:F4:02:9B:07:EE:BD:1C:4E:FE:0C:AB:F2:A7:C9:BD:5F:36:9B:41
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         55:28:fc:3c:9c:c0:1a:77:89:58:2d:5e:19:cb:a4:a6:9f:43:
         30:ce:b7:69:a9:98:f4:76:65:77:df:21:08:06:f3:99:35:86:
         b8:de:e9:a4:33:8c:81:a7:b5:2a:87:aa:c5:b3:17:e8:54:bb:
         ce:e5:ec:f2:2f:49:45:f8:a7:e6:0f:62:f6:08:a0:3d:22:12:
         d2:07:48:3b:99:9b:97:44:17:80:38:e7:3d:a3:cf:54:89:53:
         7e:d1:5c:d2:10:97:06:df:e6:1f:63:28:d2:3c:8a:0e:f2:d3:
         0e:0e:12:06:fb:ad:1c:22:d0:cd:c5:95:fe:d0:e8:8f:41:b9:
         a9:fc:55:fe:ac:7c:fd:83:83:71:8c:63:2c:70:dd:53:e6:0d:
         2b:38:c6:81:82:fa:82:4a:70:69:a2:3c:68:54:6d:c6:d5:15:
         f0:66:98:e0:31:70:f9:2c:96:88:5f:c0:b3:1f:e8:66:20:e3:
         c7:ab:b7:f5:8d:7e:67:18:15:f3:0b:dc:81:89:2d:01:2f:72:
         97:3b:cf:9f:70:cc:76:92:dc:b7:0f:67:bf:25:be:ac:3d:67:
         c5:a2:85:e5:b1:bc:47:e3:c9:0a:88:9f:93:5c:38:d7:97:3d:
         36:34:2e:c0:2e:2e:f9:c6:4e:24:b6:df:ee:8b:06:1f:62:84:
         72:2f:02:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----