Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8848 (0x2290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov  8 16:32:30 2019 GMT
            Not After : Dec  8 16:32:30 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss5.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c6:f2:8b:ef:c0:ec:a5:e8:34:a4:55:76:16:de:
                    c6:42:d0:2f:35:63:55:90:e2:8b:2e:e0:11:54:e3:
                    a7:c3:43:00:54:d7:2d:fc:01:d3:46:c8:86:27:e9:
                    bb:41:c6:87:7f:b4:d3:c4:0b:40:e5:44:fe:1a:b2:
                    30:1e:ea:1e:ea:fa:04:41:85:b4:3e:41:c5:61:9d:
                    9a:81:4e:ef:9d:93:29:a9:bb:aa:15:8b:f7:7e:f1:
                    0d:c4:b7:88:39:7d:00:7a:a7:35:28:d4:8a:e0:85:
                    55:d9:4c:0c:50:7d:69:24:ce:7a:9b:e3:9a:6e:98:
                    72:5c:cd:7b:b0:fa:71:9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss5.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                42:F6:4D:1D:13:75:66:95:E7:A3:77:98:5B:19:F4:2C:A7:FC:C9:B9
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         a6:bb:cc:f3:df:d4:7e:90:e1:2e:7f:e0:f3:0c:e9:ef:53:ab:
         da:c8:7f:95:c9:37:f2:a0:c3:5e:45:2f:36:01:71:04:71:36:
         f3:33:d1:e1:b2:1b:e6:43:a9:57:f8:eb:76:fb:83:c6:ed:10:
         34:76:9e:58:14:2b:fa:ed:bd:27:30:a9:49:db:52:6b:9e:1b:
         1a:76:28:f5:15:a4:89:82:0f:fb:9a:6e:e5:9e:f5:22:08:94:
         1c:d9:27:04:97:1b:43:7d:ce:0f:fc:0b:1c:5c:38:7f:11:f3:
         c3:b5:ea:1e:2e:b1:b3:89:85:ae:2c:b9:45:b3:b0:84:19:83:
         7d:e0:38:b9:9b:8a:17:ff:39:4a:33:ef:0f:d4:2d:a7:a4:87:
         77:25:85:8e:3f:5a:b1:ad:04:cc:1f:aa:b8:0e:5e:a1:e3:c9:
         62:34:af:d2:69:34:54:58:a1:6d:ae:0f:cb:37:90:08:9d:14:
         d4:49:02:fb:e9:a4:3a:27:cf:52:b5:d7:b1:0d:82:55:c9:e7:
         c9:1a:07:f4:26:c1:5f:dc:9b:0c:ab:f4:60:b5:12:71:a2:62:
         fa:56:6f:8a:1a:0e:76:28:d0:ea:38:85:21:65:41:d7:8d:c7:
         78:5d:3a:4d:f4:f9:17:fa:63:9f:d3:e1:d7:cc:17:ee:f9:4a:
         52:0f:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----