Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9665 (0x25c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  1 19:08:21 2020 GMT
            Not After : Jan  1 19:08:21 2022 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=gt3.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d0:fc:d0:60:22:1b:6d:c2:61:d2:be:c0:ee:73:
                    8b:5b:1b:6d:a0:03:1c:dc:7f:3c:d7:e9:fd:da:e4:
                    db:c5:46:8c:fa:86:38:29:d9:27:99:a8:06:e7:3f:
                    42:3a:85:00:8a:84:01:83:9e:bf:ce:4b:52:db:3a:
                    e4:c7:0c:f9:e7:65:84:37:91:c2:d6:d6:7c:54:7b:
                    4e:ee:44:e2:61:ba:a2:20:5e:46:dc:d9:d3:28:e5:
                    4a:1e:f1:96:a7:f5:52:64:03:b8:26:36:61:8b:1f:
                    ee:b1:59:5f:b3:25:da:98:9b:95:e2:df:32:47:b5:
                    6b:ca:ed:32:b2:39:a5:31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:gt3.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                20:69:10:20:94:AA:86:63:9F:72:95:57:96:B3:83:B7:2A:84:EE:35
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         17:c3:fe:d6:33:ce:74:29:1d:a4:3d:fe:cd:c1:b4:fc:fc:3d:
         6e:f1:93:3d:62:69:3d:63:9d:4a:5f:d9:9e:4e:10:e5:24:11:
         76:9a:c0:1c:ac:be:b3:95:08:6b:1b:b5:ae:be:bc:aa:bc:d3:
         1d:0a:da:74:52:11:c3:01:c6:84:73:c0:28:fa:1b:64:2e:8f:
         32:61:c7:89:0c:80:44:47:02:b3:92:7b:09:f9:44:ce:76:89:
         25:e2:c5:2f:62:1f:b5:5b:09:df:74:1f:29:67:ce:74:38:d1:
         dc:fe:5f:d5:cd:41:93:73:50:79:b8:54:c4:9c:65:5e:07:c2:
         a3:5c:e9:f7:7f:14:28:20:4e:d2:37:31:a6:db:9e:ea:50:e6:
         0c:ad:10:b1:4e:9f:06:f5:ee:93:ed:f5:c1:a4:f2:93:84:85:
         62:73:91:f5:0a:8a:0a:3a:37:a6:8e:6e:53:9a:17:2d:c6:cf:
         31:7b:ea:c7:c9:50:15:c2:31:74:7b:51:e9:fc:ea:78:8c:80:
         ec:94:ff:40:50:8b:4e:69:ea:cd:af:69:8b:d9:ef:3d:a9:b4:
         40:60:0b:b4:12:01:8e:e9:f5:0a:1c:25:98:bf:da:e9:18:c2:
         1b:df:52:0e:60:02:2f:72:5e:79:30:19:aa:25:76:03:29:fc:
         b5:c2:93:85
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgICJcEwDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0yMDEyMDExOTA4MjFaFw0yMjAxMDExOTA4MjFaMFoxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKEwRSRElHMQ4wDAYDVQQLEwVob3N0czETMBEGA1UECxMK
cG5waS5udy5ydTEXMBUGA1UEAxMOZ3QzLnBucGkubncucnUwgZ8wDQYJKoZIhvcN
AQEBBQADgY0AMIGJAoGBAND80GAiG23CYdK+wO5zi1sbbaADHNx/PNfp/drk28VG
jPqGOCnZJ5moBuc/QjqFAIqEAYOev85LUts65McM+edlhDeRwtbWfFR7Tu5E4mG6
oiBeRtzZ0yjlSh7xlqf1UmQDuCY2YYsf7rFZX7Ml2pibleLfMke1a8rtMrI5pTHF
AgMBAAGjggLJMIICxTAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwID+DARBglg
hkgBhvhCAQEEBAMCBNAwGQYDVR0RBBIwEIIOZ3QzLnBucGkubncucnUwHQYDVR0O
BBYEFCBpECCUqoZjn3KVV5azg7cqhO41MG0GA1UdIwRmMGSAFLca+X3+0h5hqamM
IWiLfmCMuXBZoUmkRzBFMQswCQYDVQQGEwJSVTENMAsGA1UEChMEUkRJRzEnMCUG
A1UEAxMeUnVzc2lhbiBEYXRhLUludGVuc2l2ZSBHcmlkIENBggEAMD0GA1UdEgQ2
MDSBFHJkaWctY2FAZ3JpZC5raWFlLnJ1hhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1
L1JESUcvMD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL2NhLmdy
aWQua2lhZS5ydS9SRElHL2NhLmh0bWwwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDov
L2NhLmdyaWQua2lhZS5ydS9SRElHL2NhY3JsLnBlbTBaBgNVHSAEUzBRMAwGCiqG
SIb3TAUCAgEwQQYMKwYBBAGBrHsBAQICMDEwLwYIKwYBBQUHAgEWI2h0dHA6Ly9j
YS5ncmlkLmtpYWUucnUvUkRJRy9wb2xpY3kvMCsGCWCGSAGG+EIBAgQeFhxodHRw
Oi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMBYGCWCGSAGG+EIBCAQJFgdwb2xpY3kv
MBgGCWCGSAGG+EIBBAQLFgljYWNybC5wZW0wIAYJYIZIAYb4QgEDBBMWEWNnaS1i
aW4vY2hlY2tyZXY/MFQGCWCGSAGG+EIBDQRHFkVJc3N1aWVkIGJ5IFJESUcgQ2Vy
dGlmaWNhdGlvbiBBdXRob3JpdHksIGh0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJ
Ry8wDQYJKoZIhvcNAQELBQADggEBABfD/tYzznQpHaQ9/s3BtPz8PW7xkz1iaT1j
nUpf2Z5OEOUkEXaawBysvrOVCGsbta6+vKq80x0K2nRSEcMBxoRzwCj6G2QujzJh
x4kMgERHArOSewn5RM52iSXixS9iH7VbCd90HylnznQ40dz+X9XNQZNzUHm4VMSc
ZV4HwqNc6fd/FCggTtI3MabbnupQ5gytELFOnwb17pPt9cGk8pOEhWJzkfUKigo6
N6aOblOaFy3GzzF76sfJUBXCMXR7Uen86niMgOyU/0BQi05p6s2vaYvZ7z2ptEBg
C7QSAY7p9QocJZi/2ukYwhvfUg5gAi9yXnkwGaoldgMp/LXCk4U=
-----END CERTIFICATE-----