Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9242 (0x241a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Apr 14 02:29:06 2020 GMT
            Not After : May 15 02:29:06 2021 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss2.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d5:98:56:15:a2:49:2f:09:5d:d2:19:1e:dd:88:
                    f6:be:9d:9b:b5:6a:c9:59:ab:80:42:84:09:c3:39:
                    25:af:ce:9d:48:88:e4:95:11:ec:92:bb:ba:f4:2b:
                    2f:ef:62:39:72:c4:f7:77:8b:af:f2:cc:4b:20:18:
                    bf:a4:17:09:b6:95:37:f9:a2:c4:70:05:62:ee:f7:
                    72:2c:10:99:cc:ae:28:ec:5d:d2:e7:1b:dc:97:3f:
                    a4:5d:a9:44:3f:b8:5f:26:40:3c:61:32:47:4c:51:
                    4b:16:47:e7:14:4e:76:3c:95:a3:53:30:80:31:e4:
                    33:4f:f4:f9:67:f9:a4:af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss2.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                E6:E7:D1:AF:77:1A:91:5A:0F:E9:23:D6:86:24:96:73:3C:35:29:BB
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         a6:e9:a5:75:fc:c9:d5:d9:0a:9c:25:bb:39:cd:92:fd:4b:f0:
         54:59:60:10:1a:af:3e:bb:95:be:70:0b:f5:02:3e:89:9f:11:
         f5:0d:a9:a7:c3:44:c4:15:df:4e:2b:7f:06:5b:4d:e3:34:6d:
         de:32:4d:26:db:11:52:cd:c4:5a:9b:7b:db:e9:51:24:38:a0:
         41:87:d5:36:76:b2:07:e1:f0:a5:7f:d8:81:3d:d0:22:c2:b4:
         c6:6d:77:5b:24:fe:32:f6:9d:ab:bf:bb:b0:24:aa:db:67:f8:
         5a:14:be:c0:0c:ce:90:0e:67:c8:df:9e:c7:65:96:ee:92:21:
         39:ba:58:37:87:e6:81:15:da:91:af:b2:59:19:c4:90:d4:18:
         1d:50:d3:d9:00:8a:f9:3b:8c:42:71:81:81:b7:47:86:00:89:
         5c:14:ba:b8:aa:13:89:bc:b9:00:90:a2:30:48:51:72:a1:11:
         a5:8f:f8:81:7d:56:40:a8:7d:71:68:38:94:6a:c5:82:5f:c9:
         d1:fb:17:11:88:51:21:5b:09:61:1d:0f:48:0e:02:72:06:d7:
         66:f9:8f:9b:fd:44:ce:9e:73:ec:09:51:62:7d:25:b2:bc:5b:
         53:92:b2:1b:08:98:1d:e1:32:a0:9c:34:ec:84:ca:65:9b:4e:
         eb:66:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----