Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8842 (0x228a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov  8 16:31:53 2019 GMT
            Not After : Dec  8 16:31:53 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=cluster.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:e4:c0:29:80:e8:11:42:19:c7:9a:29:80:35:be:
                    f1:6e:0e:fd:6b:e6:92:76:55:50:d0:86:9b:74:90:
                    04:23:3e:5d:5a:9d:f2:8a:a0:8c:76:b2:b1:33:df:
                    bc:e0:99:16:1a:b3:b6:86:0e:ad:43:93:70:a7:f2:
                    31:df:a0:88:e2:a7:43:e5:eb:ce:c5:74:e3:78:31:
                    23:95:bb:48:6a:f8:6f:b6:4f:f4:42:18:0b:1f:d1:
                    68:bb:18:62:a1:e7:15:df:6f:12:73:1e:51:52:44:
                    7b:39:84:1d:0c:23:30:dc:7e:8e:52:ce:a9:bf:0e:
                    cc:97:db:bc:25:10:22:ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:cluster.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                33:50:A5:97:EC:06:07:BF:61:89:94:D1:77:8F:19:D8:AA:97:82:2C
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         17:bd:5d:8c:cf:32:58:5e:eb:af:b6:c2:27:08:2c:c5:ea:89:
         7e:cd:93:ff:14:07:86:4f:4f:cb:14:3f:9c:45:6f:83:ba:f9:
         42:62:e5:69:51:20:49:c5:c6:e2:fa:93:81:fe:57:31:27:50:
         59:6a:2f:de:9b:dc:74:83:a7:ba:d5:0e:89:51:14:54:49:bf:
         5c:38:5d:85:98:e2:4d:d3:82:9c:30:90:d6:c7:b3:c8:7f:ed:
         77:ab:ac:0e:9c:6b:c7:e7:fb:99:f6:d7:24:66:18:2b:64:b7:
         83:5e:0c:63:69:3e:57:d7:f7:ce:22:b0:b6:42:a5:3c:cb:23:
         0a:9f:83:d3:0f:f4:89:64:a4:c8:d6:e2:f7:8e:f6:3c:14:26:
         85:ab:12:03:2e:a4:2c:9b:0c:3b:60:b2:78:7f:93:f1:6b:c3:
         4c:3f:3e:3b:90:59:8c:0a:6e:a4:50:fc:52:af:73:0b:7f:56:
         88:69:8c:01:e1:57:06:cf:20:44:2e:c2:8a:57:11:ae:31:7c:
         62:98:f0:77:3a:32:7a:19:6c:81:28:1d:8a:8d:cf:3d:13:a1:
         c6:b5:2b:12:89:4a:36:d1:40:9a:ca:f6:ff:bd:44:09:7a:01:
         5e:43:ea:ca:9b:ed:53:75:ad:ed:8c:e4:3f:48:43:d8:8b:c7:
         80:1a:cc:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----