Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8847 (0x228f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov  8 16:32:20 2019 GMT
            Not After : Dec  8 16:32:20 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss4.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c0:f7:d5:28:5e:4f:a4:ba:55:bd:d5:5f:66:a1:
                    9d:58:f3:36:40:b9:2f:f0:7e:25:ad:36:07:4e:01:
                    80:94:1a:9e:e9:20:63:38:bc:a3:6a:90:8c:e5:9e:
                    47:25:d8:01:9c:56:2d:fa:6a:64:15:2e:86:87:c2:
                    cb:d4:62:65:51:2f:db:19:18:c7:3c:32:7d:dd:7c:
                    9f:3e:0f:a8:83:4d:92:9c:27:41:c1:8d:2e:32:ca:
                    c8:f5:1a:49:82:21:df:2a:10:c8:11:d0:61:ca:5b:
                    37:ee:18:ad:44:06:71:2b:3e:02:6a:ec:4d:3a:6c:
                    3b:91:a3:35:d2:5e:eb:75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss4.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                0C:33:9B:51:82:B7:AA:EC:ED:7A:A1:D5:D1:DB:AC:85:88:F2:A6:58
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         9a:fd:c0:ba:c3:7c:b1:c5:45:59:23:c2:33:fc:03:9e:59:52:
         1a:f3:62:9c:c1:ad:21:8a:86:fe:5d:30:f1:a6:43:5f:55:66:
         80:92:31:2c:d3:a5:22:2f:a0:71:cd:8b:2f:d3:25:e7:f5:f5:
         1b:8a:a2:e6:e3:cc:11:bf:80:f6:30:d1:21:e0:ec:0a:96:7b:
         d0:16:91:7f:52:cd:d3:05:38:a8:e6:5b:63:5e:f9:16:57:02:
         67:a2:a1:28:40:d0:4d:fb:f8:58:43:2b:bb:5c:84:b2:2e:38:
         f0:6b:a6:6e:58:9b:93:a6:05:05:1c:25:d7:30:a3:5a:4b:17:
         3c:d7:c5:6b:4f:09:65:33:97:cf:d3:c3:50:da:4b:57:5e:c0:
         3b:9c:3a:13:61:5e:94:f8:05:18:c4:d1:5b:44:1c:cd:48:15:
         80:10:d0:30:b6:75:7d:c6:8b:84:3c:a3:cf:1b:a9:5c:a3:69:
         cd:cc:b0:35:87:8b:1d:78:7f:c5:3a:f5:53:5a:64:c7:58:23:
         0b:dd:57:fc:37:a0:06:9c:5c:30:c1:4e:1c:f9:63:92:03:28:
         b7:be:6a:43:6c:ac:bc:8d:11:dc:2c:b4:fb:25:ea:fc:47:8b:
         f1:ca:e0:d7:a0:18:8f:16:ef:f4:ec:64:d5:2a:77:7c:86:e0:
         0e:aa:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----