Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7333 (0x1ca5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Oct 17 06:38:01 2017 GMT
            Not After : Nov 17 06:38:01 2018 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss1.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:e8:4c:0b:13:c6:ad:6b:68:5f:4b:8a:e0:fe:63:
                    e4:ed:00:20:e2:c9:0d:92:8a:12:8a:b1:cc:02:ee:
                    eb:2f:92:c6:28:97:99:91:55:89:01:98:da:20:ce:
                    00:b9:80:ef:a6:19:62:64:af:e9:14:95:7c:75:53:
                    0c:7f:b2:c1:48:f5:67:ce:15:d0:c1:93:fa:49:24:
                    12:36:30:7f:87:48:61:78:8e:43:8b:7b:67:dc:49:
                    9e:ec:46:22:65:6b:75:5e:80:b0:52:c8:59:d2:33:
                    94:1a:47:e8:31:6f:9f:c9:0c:ef:f1:3d:74:38:40:
                    57:04:75:de:2e:cd:4c:3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                EA:2F:4C:75:D7:32:07:5E:A2:67:D1:15:3D:5C:B6:B0:E3:84:2E:2C
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         42:28:09:bc:c4:6c:d6:72:1e:a9:3e:c7:6a:7c:9b:3c:ed:30:
         77:db:16:f4:e4:3c:92:64:61:d0:81:01:af:5e:f6:4a:c1:5a:
         c7:c8:80:eb:c2:76:22:17:59:1b:82:f6:ac:f8:0c:ef:ad:9c:
         fd:27:52:bd:bb:82:76:4d:e1:7d:0f:a7:37:63:30:3a:2a:10:
         51:fe:df:3f:83:42:41:bd:a9:35:0e:e3:de:48:77:5a:e8:14:
         18:c1:3c:e2:2e:bd:5b:ee:17:22:20:37:bc:d5:ea:ef:d6:4d:
         be:28:12:e9:4c:37:a0:1a:11:52:24:48:18:d1:9c:c3:cd:76:
         31:2e:b3:9b:ff:56:96:0a:4e:b7:5d:3d:7f:90:b3:00:e1:e5:
         33:49:f0:02:d6:d3:1f:52:57:2e:05:ba:a0:49:08:74:61:5e:
         0c:27:bc:b1:f4:e0:a2:73:7f:ff:60:c7:aa:f4:3d:f1:4a:42:
         d3:86:ff:7c:29:22:13:04:91:f6:2d:b7:c0:2b:8f:6e:ab:e4:
         c2:63:f6:5e:35:78:c9:6b:0d:97:f6:e5:17:31:71:10:51:fa:
         a6:0f:54:88:4a:5b:01:0b:fb:88:00:90:e8:d1:25:a8:94:4a:
         3f:4d:9a:a5:3b:90:f9:56:d9:f1:91:98:e3:3b:ce:d2:3d:51:
         e9:46:27:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----