Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7697 (0x1e11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Mar 21 05:20:35 2018 GMT
            Not After : Apr 21 05:20:35 2019 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss2.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:ce:c8:25:84:87:88:be:f3:6d:d9:37:ce:bb:de:
                    09:45:2f:4e:ee:9f:b4:98:0d:31:bf:b1:0f:f5:d6:
                    18:01:ff:99:10:b1:5c:f5:92:9c:79:a2:bb:36:84:
                    e1:bb:c6:77:fc:53:48:ad:53:72:e9:a5:d6:c1:23:
                    1d:c5:6f:47:7e:9f:6b:a2:6d:b2:76:71:6e:f7:5b:
                    d0:7b:e1:25:04:a8:b3:4b:b4:b6:7e:cc:25:9c:7c:
                    b4:4d:3d:9d:c1:88:07:3c:0a:b0:30:d8:af:7a:a2:
                    6c:f4:b7:74:17:e0:af:bd:8a:53:51:ca:81:67:39:
                    5e:0f:28:18:21:81:a9:73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Key Identifier: 
                40:50:19:C1:05:9A:A0:89:04:B1:7D:1D:9A:A3:DD:98:FB:24:21:98
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22139.1.1.2.1
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:21:ef:22:61:96:70:cf:27:92:38:f5:e6:ed:db:09:31:
         31:88:47:95:0e:3b:e0:9f:4b:c3:f8:da:7b:92:44:59:ea:af:
         20:7b:cd:2e:d7:90:97:66:d7:6a:d6:e0:bd:72:22:d0:67:47:
         cb:07:5c:12:05:2c:3f:4b:57:f2:76:53:6d:2b:39:b7:4c:b8:
         05:64:82:0a:5d:7b:b2:54:58:4b:f6:fa:f2:2f:6a:0d:9c:c8:
         70:86:9b:0a:85:98:0c:8e:88:c7:57:9c:c0:89:fb:6f:a6:b4:
         bc:35:a2:33:36:39:cb:67:79:47:b1:b0:f4:8b:8d:4d:54:81:
         68:82:c1:bc:66:8d:c6:a9:0a:eb:af:80:44:1e:6d:87:a4:48:
         49:fa:5c:5f:76:65:05:48:25:d9:d9:f6:e6:fc:a4:be:6f:f2:
         0c:76:3d:8f:60:5e:29:24:cc:6c:fb:a2:5b:ae:36:89:4c:e3:
         f4:69:8b:9b:0d:e3:7f:15:e2:69:a4:8a:31:52:6e:f5:59:f7:
         1a:86:e3:16:61:cf:b4:8b:76:d3:2a:71:b0:4a:9b:52:3f:34:
         27:26:26:ad:28:9c:e2:95:59:80:32:aa:17:28:4b:ba:ca:a5:
         5e:30:dd:eb:2c:cb:c7:06:11:f0:94:8e:9b:a4:c2:d7:cf:6b:
         9a:5c:34:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----