Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8846 (0x228e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov  8 16:32:15 2019 GMT
            Not After : Dec  8 16:32:15 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss3.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:af:70:eb:cf:a1:25:9b:b6:1b:93:21:af:0e:01:
                    8c:a0:9a:38:b3:cb:d9:e7:6c:41:27:36:55:5f:80:
                    1d:64:eb:db:e5:2c:2d:de:25:9a:4e:a6:55:f5:24:
                    dd:09:6f:06:2c:69:c7:09:48:1e:d5:13:44:78:7c:
                    5c:59:f0:f8:d4:35:a8:82:41:5d:22:34:e7:ff:95:
                    40:3b:26:02:b4:81:27:4c:dc:62:a4:9c:ea:9d:4b:
                    73:bd:1f:3c:57:7c:78:01:f6:cc:de:1f:2b:01:42:
                    5c:21:7d:b4:da:12:36:7a:3b:43:c4:a2:cb:2b:b0:
                    d7:c8:53:50:8b:a5:28:91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss3.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                45:14:D1:80:B5:19:C8:8D:87:D6:B7:5F:95:7D:A4:F6:16:43:C3:25
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         82:84:83:28:19:5b:0d:48:ad:fa:1b:32:ca:96:d1:b9:91:f5:
         f8:ee:79:53:43:ab:04:1c:26:e5:e4:0f:05:a8:44:33:fa:73:
         7b:f4:ca:86:6c:dd:b4:c6:81:04:42:7e:05:f7:2f:ee:85:b1:
         2c:dd:bb:05:d0:bd:95:16:20:a3:f2:f5:4c:da:c6:ba:a7:6a:
         b6:1f:73:43:59:00:71:50:67:0d:f6:91:e7:48:9f:c8:69:29:
         e2:7c:7b:b6:80:f3:e9:ad:03:f9:3f:3b:30:45:d5:78:aa:cf:
         43:74:e8:52:91:9e:c1:14:9d:78:ed:74:b4:9a:05:32:35:e9:
         c2:3a:4a:e9:33:f4:e5:74:1f:8b:e9:f9:95:32:db:f8:ff:ea:
         28:27:4a:b8:07:ca:24:31:2e:72:92:fa:c6:1e:9d:82:d9:46:
         29:9a:a1:5c:ea:69:72:90:e6:8c:ec:d1:5c:d5:05:79:e9:0f:
         44:d1:9f:55:ea:30:2c:bd:9f:41:cd:d9:6a:9e:10:e0:b9:32:
         9e:e1:30:8b:b2:d8:9e:14:5d:0c:88:62:80:4d:93:ad:2c:8e:
         de:88:c2:b0:0e:a7:d3:04:15:23:60:7f:7c:2e:b5:f5:da:2b:
         05:d4:29:a2:ab:ed:74:a1:7d:f8:28:cb:61:52:0a:41:2f:6f:
         f8:1d:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----