Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8845 (0x228d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov  8 16:32:09 2019 GMT
            Not After : Dec  8 16:32:09 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss2.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c2:b2:3a:20:cf:f5:4a:a4:d0:fe:25:6d:1a:e1:
                    5f:4b:40:df:d8:fa:a6:e9:fa:4e:05:41:c6:3d:01:
                    e1:96:7f:ea:f9:9c:52:9e:80:90:6b:61:fd:62:20:
                    33:a2:54:a8:4a:0b:c6:ef:46:1b:2c:ad:15:79:75:
                    43:be:cd:1b:64:1b:b0:8d:d5:43:1a:29:21:d9:b1:
                    94:e5:b7:1f:36:d5:03:5b:d3:f9:7e:ae:b5:5e:21:
                    33:3b:d2:5f:17:48:85:af:48:de:b7:da:68:8d:98:
                    d3:c8:a7:07:89:4a:d0:be:e5:5f:c4:d0:56:ce:62:
                    cc:c1:f7:b6:18:90:49:52:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss2.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                29:B9:53:C6:E1:35:DB:25:86:C3:DB:C0:27:58:E6:1A:7F:39:D9:FD
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         33:d1:13:c3:c1:c7:16:7b:a4:cd:f1:19:bf:a1:09:6f:76:62:
         e1:d5:fe:cd:e1:7c:17:62:65:03:21:a2:1e:60:b9:ad:cb:69:
         b3:05:03:69:c7:8e:ec:a2:32:f1:97:8b:b6:97:e5:da:67:c4:
         f8:b2:9c:58:36:2b:d0:7b:7a:19:36:ae:b0:7d:48:b3:d3:80:
         23:85:bc:b8:9c:25:92:04:08:3c:af:59:ba:a8:a8:c4:db:13:
         12:2e:f4:fe:ed:bb:e6:4a:82:ae:7c:aa:e3:30:6c:ed:a8:82:
         8a:66:7c:33:4b:44:58:65:d3:5c:11:d0:4a:31:e0:47:e3:41:
         2c:5e:82:1f:03:7f:8a:d6:6c:54:05:a5:40:17:e2:aa:7c:dc:
         15:5e:b7:df:58:4e:8b:a8:15:89:03:f4:93:29:4d:de:8d:d5:
         fe:ff:0b:56:53:b5:d1:e7:39:3e:1c:59:4f:7b:51:07:65:e7:
         13:84:b0:61:84:d1:7d:78:f0:8b:3e:5d:6c:8d:b7:6e:ec:dc:
         98:08:0a:c6:0a:ad:bd:bd:31:01:41:86:2b:82:ae:82:fb:55:
         ef:3b:51:0a:cd:64:5a:97:3d:0a:3c:1a:9d:10:44:da:1f:ce:
         53:97:7b:90:ea:a5:de:cb:64:3f:30:16:c6:8e:2e:d6:b8:f6:
         52:fb:e8:52
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgICIo0wDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0xOTExMDgxNjMyMDlaFw0yMDEyMDgxNjMyMDlaMFsxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMQ4wDAYDVQQLEwVob3N0czETMBEGA1UECxMK
cG5waS5udy5ydTEYMBYGA1UEAxMPbXNzMi5wbnBpLm53LnJ1MIGfMA0GCSqGSIb3
DQEBAQUAA4GNADCBiQKBgQDCsjogz/VKpND+JW0a4V9LQN/Y+qbp+k4FQcY9AeGW
f+r5nFKegJBrYf1iIDOiVKhKC8bvRhssrRV5dUO+zRtkG7CN1UMaKSHZsZTltx82
1QNb0/l+rrVeITM70l8XSIWvSN632miNmNPIpweJStC+5V/E0FbOYszB97YYkElS
pwIDAQABo4ICyjCCAsYwDAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCA/gwEQYJ
YIZIAYb4QgEBBAQDAgTQMBoGA1UdEQQTMBGCD21zczIucG5waS5udy5ydTAdBgNV
HQ4EFgQUKblTxuE12yWGw9vAJ1jmGn852f0wbQYDVR0jBGYwZIAUtxr5ff7SHmGp
qYwhaIt+YIy5cFmhSaRHMEUxCzAJBgNVBAYTAlJVMQ0wCwYDVQQKEwRSRElHMScw
JQYDVQQDEx5SdXNzaWFuIERhdGEtSW50ZW5zaXZlIEdyaWQgQ0GCAQAwPQYDVR0S
BDYwNIEUcmRpZy1jYUBncmlkLmtpYWUucnWGHGh0dHA6Ly9jYS5ncmlkLmtpYWUu
cnUvUkRJRy8wPwYIKwYBBQUHAQEEMzAxMC8GCCsGAQUFBzAChiNodHRwOi8vY2Eu
Z3JpZC5raWFlLnJ1L1JESUcvY2EuaHRtbDA2BgNVHR8ELzAtMCugKaAnhiVodHRw
Oi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvY2FjcmwucGVtMFoGA1UdIARTMFEwDAYK
KoZIhvdMBQICATBBBgwrBgEEAYGsewEBAgIwMTAvBggrBgEFBQcCARYjaHR0cDov
L2NhLmdyaWQua2lhZS5ydS9SRElHL3BvbGljeS8wKwYJYIZIAYb4QgECBB4WHGh0
dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy8wFgYJYIZIAYb4QgEIBAkWB3BvbGlj
eS8wGAYJYIZIAYb4QgEEBAsWCWNhY3JsLnBlbTAgBglghkgBhvhCAQMEExYRY2dp
LWJpbi9jaGVja3Jldj8wVAYJYIZIAYb4QgENBEcWRUlzc3VpZWQgYnkgUkRJRyBD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSwgaHR0cDovL2NhLmdyaWQua2lhZS5ydS9S
RElHLzANBgkqhkiG9w0BAQsFAAOCAQEAM9ETw8HHFnukzfEZv6EJb3Zi4dX+zeF8
F2JlAyGiHmC5rctpswUDaceO7KIy8ZeLtpfl2mfE+LKcWDYr0Ht6GTausH1Is9OA
I4W8uJwlkgQIPK9ZuqioxNsTEi70/u275kqCrnyq4zBs7aiCimZ8M0tEWGXTXBHQ
SjHgR+NBLF6CHwN/itZsVAWlQBfiqnzcFV6331hOi6gViQP0kylN3o3V/v8LVlO1
0ec5PhxZT3tRB2XnE4SwYYTRfXjwiz5dbI23buzcmAgKxgqtvb0xAUGGK4KugvtV
7ztRCs1kWpc9CjwanRBE2h/OU5d7kOql3stkPzAWxo4u1rj2UvvoUg==
-----END CERTIFICATE-----