Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10035 (0x2733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Apr 27 16:34:36 2021 GMT
            Not After : May 28 16:34:36 2022 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss2.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c9:ae:85:29:17:37:8f:f0:b6:ea:70:15:bc:93:
                    49:ce:02:35:9b:6e:8b:fc:fc:2a:26:87:60:d6:7e:
                    60:46:08:b1:8f:52:e3:1c:5a:8d:14:ad:2b:97:b8:
                    a6:75:7f:9c:75:60:52:4b:89:fc:f4:d1:5d:54:a9:
                    5d:62:07:7c:63:db:f3:2e:1b:0c:53:c8:3d:62:c6:
                    6a:9f:c1:01:b4:11:f8:0c:fe:cc:62:20:cf:59:b4:
                    c9:27:77:2a:73:86:37:ab:61:ee:fd:5e:ce:c2:e5:
                    3b:5f:e2:f5:63:f4:a0:21:d0:62:f8:55:11:74:97:
                    c9:28:d2:4b:49:0d:06:76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss2.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                0A:52:7C:AF:D7:88:F2:57:EF:75:09:87:C3:13:25:B1:B6:7D:02:9A
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59
                DirName:/C=RU/O=RDIG/CN=Russian Data-Intensive Grid CA
                serial:00

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.pem

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         a1:ec:49:60:47:55:e5:e3:23:b9:7f:1b:df:6c:4c:31:87:a6:
         7c:ed:c9:63:ef:16:16:59:f3:36:ca:e7:0f:26:59:00:96:f8:
         4a:19:c1:2a:d1:bf:d9:e0:a5:53:dd:db:f8:89:9d:b4:b8:ad:
         17:bc:b5:46:e9:32:aa:ee:3a:d9:17:5c:d8:5d:2b:b3:4c:8a:
         c6:cf:bb:f3:92:20:d7:fb:66:67:3e:c5:2f:da:51:eb:0e:7f:
         a9:5d:57:6e:db:42:92:9e:03:a2:c1:a3:20:d8:7d:b1:b5:5a:
         8d:91:4b:8e:53:22:0d:81:88:ee:c3:27:42:f8:1f:b2:11:e8:
         d4:88:27:bc:00:e3:4a:51:d2:c3:2f:1a:c4:f4:b6:f7:92:35:
         47:db:2a:25:40:f7:02:3a:7c:92:6d:0e:2a:ad:20:5b:2b:ca:
         5b:89:45:5a:58:c8:f7:e6:6e:6c:38:93:4a:ac:70:6e:f1:9f:
         b8:85:63:ff:9f:a3:18:25:fb:7f:36:d5:2f:dc:66:10:4f:62:
         2c:f5:bd:a8:2d:00:8d:30:9e:d1:e7:6a:4a:00:e7:16:5d:44:
         44:13:a3:3d:85:27:54:29:53:f1:04:92:9e:dc:01:e6:b3:3f:
         5f:48:1e:e4:5f:c5:b4:4d:d8:ff:88:7d:76:18:34:1d:e5:06:
         ef:83:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----