Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8843 (0x228b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov  8 16:31:58 2019 GMT
            Not After : Dec  8 16:31:58 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=gt3.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c6:87:8f:3a:1a:fb:e4:73:2d:66:a1:4e:d3:19:
                    88:10:53:03:a8:b5:46:8a:e2:95:3c:b4:81:59:79:
                    1b:91:36:4a:87:ea:53:38:db:30:04:64:04:e8:eb:
                    07:36:2c:a4:2e:9e:8a:bb:ec:27:70:60:09:08:9a:
                    d9:3d:9f:94:88:07:3f:23:a0:41:cf:e6:17:82:59:
                    9c:1f:78:55:4e:80:20:7e:5c:06:c2:29:73:88:fa:
                    8c:58:d3:b0:79:c5:02:c7:a7:6a:81:06:d0:cb:54:
                    9c:76:5d:cd:b3:fb:ca:0c:81:f7:b6:b1:68:ea:84:
                    e1:5d:ae:85:b2:87:fb:bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:gt3.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                6D:B5:B1:2E:7F:2B:80:33:48:06:44:E3:BF:3B:F8:99:A8:F6:C0:0E
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         95:89:2f:df:bc:da:4d:df:b0:56:39:f7:18:b4:b0:7c:7e:95:
         5c:5a:b5:fa:78:72:b6:40:55:04:d5:df:9c:e7:d1:35:f4:fd:
         07:d9:f1:c4:4a:eb:10:94:bf:cf:d5:f3:4c:f2:d2:66:2c:27:
         c8:65:ed:92:2c:04:e0:fc:59:6f:72:24:27:4f:c5:7f:ea:20:
         7a:8e:89:ab:8c:b4:e4:6a:a3:77:f4:73:e6:28:04:30:8a:78:
         7d:9e:0e:1f:05:d8:60:8f:c6:17:f4:2f:88:9a:00:2b:e2:4f:
         a4:c8:47:5b:0a:b8:09:2b:3c:de:b6:f6:49:e5:31:56:2e:e3:
         bc:ce:f4:bd:c4:41:4c:ad:ee:2d:4e:71:88:a1:d8:94:ab:f3:
         2a:13:2b:6d:a0:69:b2:52:67:05:9f:87:ca:59:00:21:96:26:
         28:cb:86:43:c4:02:fd:6e:ed:61:09:54:15:bc:39:e9:a2:50:
         eb:e2:fc:93:7a:47:9e:81:be:ed:28:8a:78:14:b1:78:4b:22:
         7b:df:d2:f7:60:7b:e4:10:5e:7b:aa:da:ff:14:73:d1:fd:25:
         b4:51:36:4b:3c:32:10:84:e9:0a:90:a9:5d:a9:23:03:60:f1:
         d7:09:de:25:15:47:5d:e9:40:ea:97:e3:63:cf:93:aa:ca:f0:
         d5:06:44:71
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgICIoswDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xOTExMDgxNjMxNThaFw0yMDEyMDgxNjMxNThaMFoxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMQ4wDAYDVQQLEwVob3N0czETMBEGA1UECxMK
cG5waS5udy5ydTEXMBUGA1UEAxMOZ3QzLnBucGkubncucnUwgZ8wDQYJKoZIhvcN
AQEBBQADgY0AMIGJAoGBAMaHjzoa++RzLWahTtMZiBBTA6i1RorilTy0gVl5G5E2
SofqUzjbMARkBOjrBzYspC6eirvsJ3BgCQia2T2flIgHPyOgQc/mF4JZnB94VU6A
IH5cBsIpc4j6jFjTsHnFAsenaoEG0MtUnHZdzbP7ygyB97axaOqE4V2uhbKH+73B
AgMBAAGjggLJMIICxTAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwID+DARBglg
hkgBhvhCAQEEBAMCBNAwGQYDVR0RBBIwEIIOZ3QzLnBucGkubncucnUwHQYDVR0O
BBYEFG21sS5/K4AzSAZE4787+Jmo9sAOMG0GA1UdIwRmMGSAFLca+X3+0h5hqamM
IWiLfmCMuXBZoUmkRzBFMQswCQYDVQQGEwJSVTENMAsGA1UEChMEUkRJRzEnMCUG
A1UEAxMeUnVzc2lhbiBEYXRhLUludGVuc2l2ZSBHcmlkIENBggEAMD0GA1UdEgQ2
MDSBFHJkaWctY2FAZ3JpZC5raWFlLnJ1hhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1
L1JESUcvMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL2NhLmdy
aWQua2lhZS5ydS9SRElHL2NhLmh0bWwwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDov
L2NhLmdyaWQua2lhZS5ydS9SRElHL2NhY3JsLnBlbTBaBgNVHSAEUzBRMAwGCiqG
SIb3TAUCAgEwQQYMKwYBBAGBrHsBAQICMDEwLwYIKwYBBQUHAgEWI2h0dHA6Ly9j
YS5ncmlkLmtpYWUucnUvUkRJRy9wb2xpY3kvMCsGCWCGSAGG+EIBAgQeFhxodHRw
Oi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMBYGCWCGSAGG+EIBCAQJFgdwb2xpY3kv
MBgGCWCGSAGG+EIBBAQLFgljYWNybC5wZW0wIAYJYIZIAYb4QgEDBBMWEWNnaS1i
aW4vY2hlY2tyZXY/MFQGCWCGSAGG+EIBDQRHFkVJc3N1aWVkIGJ5IFJESUcgQ2Vy
dGlmaWNhdGlvbiBBdXRob3JpdHksIGh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJ
Ry8wDQYJKoZIhvcNAQELBQADggEBAJWJL9+82k3fsFY59xi0sHx+lVxatfp4crZA
VQTV35zn0TX0/QfZ8cRK6xCUv8/V80zy0mYsJ8hl7ZIsBOD8WW9yJCdPxX/qIHqO
iauMtORqo3f0c+YoBDCKeH2eDh8F2GCPxhf0L4iaACviT6TIR1sKuAkrPN629knl
MVYu47zO9L3EQUyt7i1OcYih2JSr8yoTK22gabJSZwWfh8pZACGWJijLhkPEAv1u
7WEJVBW8OemiUOvi/JN6R56Bvu0oingUsXhLInvf0vdge+QQXnuq2v8Uc9H9JbRR
Nks8MhCE6QqQqV2pIwNg8dcJ3iUVR13pQOqX42PPk6rK8NUGRHE=
-----END CERTIFICATE-----