Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9661 (0x25bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  1 19:07:28 2020 GMT
            Not After : Jan  1 19:07:28 2022 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss5.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:bb:e9:19:38:75:d3:3a:9d:30:a2:01:39:5d:0a:
                    e7:ca:4a:5b:19:d1:ab:65:6c:98:d4:cb:fa:b0:72:
                    6f:39:f7:50:fc:b5:8f:42:33:f9:15:e5:df:72:72:
                    84:1d:8d:11:16:6c:59:50:62:b7:b2:11:0a:55:6a:
                    3e:2b:ed:c2:f7:18:ae:72:1f:31:82:e0:36:20:b5:
                    af:18:0a:51:db:90:9e:0b:aa:93:f3:ea:17:43:67:
                    e9:2e:d8:0b:43:05:67:3f:0f:d2:76:f4:dc:0f:ce:
                    63:ad:77:19:97:2c:a5:68:1f:67:89:5c:9f:27:c5:
                    b7:82:11:73:f1:17:6b:fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss5.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                A5:A0:99:8A:E9:65:7F:28:09:53:98:5A:F3:35:78:22:FD:A3:81:CE
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         59:64:af:d6:a0:a3:31:f9:8e:58:3e:ef:8e:27:bf:1e:a6:44:
         a1:66:36:92:b5:e5:ee:79:20:c6:d4:93:d0:e6:5a:c1:b8:cf:
         0b:10:c0:3d:45:79:12:d8:74:81:7e:13:2a:7e:fc:4e:88:5e:
         9c:30:a0:d1:ee:65:9e:18:b4:a5:f1:2a:d9:7e:4a:43:e8:62:
         3f:bc:f0:47:c3:03:dc:e4:1e:0f:1d:13:ac:63:23:82:24:78:
         b9:f7:70:1d:a3:f8:38:d7:a8:17:ef:df:59:8c:8d:46:92:7a:
         32:d4:22:8a:9a:a9:c0:ad:43:06:2f:d0:37:b3:e8:bf:45:87:
         c0:a8:37:32:22:bb:48:3c:5c:88:dd:4e:91:6e:7d:50:e9:ae:
         8e:18:27:77:f7:ed:b3:b6:29:71:4b:31:ed:39:f5:df:bc:27:
         45:8c:24:71:eb:6a:58:04:45:38:73:12:2b:39:f2:a9:86:05:
         c0:4c:f9:1f:01:ec:70:4f:c8:3b:da:3a:5c:ef:5d:d1:08:71:
         06:25:ab:76:46:e2:c7:de:c7:d0:65:41:07:cf:a3:c4:60:ce:
         fd:5c:ad:b0:67:b7:c8:38:5b:87:7d:47:5c:dd:fe:eb:c2:de:
         6f:1b:e5:15:55:fd:cc:49:b2:aa:d7:53:e7:bc:c2:d6:6c:61:
         18:5a:21:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----