Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8849 (0x2291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Nov  8 16:32:41 2019 GMT
            Not After : Dec  8 16:32:41 2020 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=v025.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c2:a7:88:3d:6b:54:0b:5b:5a:f0:bb:d9:57:ed:
                    38:8e:d0:8d:77:57:95:c0:dc:56:d7:13:ef:90:7f:
                    78:38:4a:11:07:87:72:eb:b9:7f:8a:51:ae:d0:5b:
                    e3:92:f5:23:9c:2c:30:b0:e5:e4:90:78:47:e1:f5:
                    d2:92:8f:09:83:48:74:e1:e5:3e:b5:a8:c2:b2:92:
                    5c:ad:5d:23:81:27:68:84:6c:3d:fa:de:c5:e8:82:
                    fb:06:bf:78:11:8c:3f:76:b1:ec:19:35:ad:bc:03:
                    fc:6c:51:fe:c5:9c:7b:ff:5e:06:d1:ea:2d:ca:c0:
                    11:65:67:b5:3d:2c:e8:88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:v025.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                38:92:E3:C7:96:01:A9:02:5C:2A:C8:DB:37:86:72:16:34:63:49:A5
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         13:82:a7:c0:20:bc:88:92:11:85:4b:f2:75:75:07:d8:22:59:
         b9:e0:53:22:87:f9:7f:d9:91:c5:9c:9f:29:8c:c5:17:26:ed:
         56:fd:62:85:82:cb:a1:a4:03:8e:cd:4e:db:1a:57:90:cb:14:
         44:db:06:36:42:f3:e9:b2:23:99:48:a8:0f:f4:eb:1c:50:ca:
         42:49:4b:35:de:83:08:c1:69:0f:c0:14:80:2b:e8:44:0a:58:
         0f:76:c2:ef:77:d2:1f:67:aa:c4:18:f8:4d:de:c5:29:10:db:
         73:24:35:b0:c5:e4:af:5c:06:55:48:03:ce:2e:4b:2a:6a:cd:
         23:15:78:84:0f:fc:38:62:c5:51:b8:7a:22:53:d5:b3:f9:1f:
         17:a4:f8:29:61:ac:8c:57:34:24:8b:1b:b2:cf:57:b8:ee:fe:
         24:30:e0:9d:46:14:dd:e2:58:a5:f3:27:46:71:cc:e6:a4:48:
         85:8b:00:b8:a3:ae:dc:85:6a:7c:58:07:fd:74:46:f7:3f:40:
         a9:db:a0:34:99:6d:49:fb:79:56:b3:08:af:86:e7:b2:8f:0c:
         b6:62:2c:39:f5:71:8b:04:62:ea:13:f4:e8:41:a2:2f:c4:36:
         e6:d9:5f:69:ab:65:5a:de:95:2e:b1:c1:12:2c:dc:c7:c9:dc:
         75:b5:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----