Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10467 (0x28e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  4 08:49:26 2021 GMT
            Not After : Jan  4 08:49:26 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=v025.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d1:ed:bf:15:05:4c:3b:23:df:5e:91:15:8f:c5:
                    63:ca:75:c2:8c:75:ec:a1:29:22:2f:52:42:f5:9a:
                    4c:9c:cc:03:48:04:7e:7b:61:e5:41:ba:09:7f:6e:
                    ef:1d:6a:9e:fc:c1:f1:19:07:12:67:1f:2d:20:14:
                    fe:14:f1:d2:f8:69:e1:07:f7:4b:aa:bc:70:d2:b4:
                    10:b7:a0:0a:95:8a:a3:ca:ef:70:ab:92:2c:82:44:
                    c4:6e:78:7b:18:98:5b:f9:8f:05:d7:8f:53:e9:b0:
                    57:0e:78:09:1c:82:70:f6:42:c0:f7:8c:bf:5e:7b:
                    6b:3b:6c:15:75:5a:44:3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:v025.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                1B:8B:4F:CC:D4:D1:EC:B5:D1:A6:47:FC:BF:67:67:FF:87:DE:36:20
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:0c:ca:fa:bf:66:9c:0d:49:34:b5:e7:b1:32:28:88:4f:
         73:d2:49:ad:e9:25:d5:e1:aa:92:fb:b2:ab:3e:b1:a3:e2:d8:
         dc:ff:16:0d:4d:7f:e9:b4:b7:c0:c2:6f:f8:74:a4:4c:b7:ab:
         40:55:5f:39:e3:9e:74:3c:e6:95:52:23:b9:55:1d:7b:8a:c8:
         32:bf:4c:9f:fb:91:7b:72:b7:2e:1f:5b:19:41:ba:16:1a:75:
         51:5f:81:72:d6:12:ca:95:20:6d:43:51:77:90:57:5d:2e:45:
         67:3c:27:89:b7:36:c6:30:97:02:ed:fd:3a:ba:d2:66:0a:c3:
         9a:ab:1c:ad:c8:f8:3e:00:23:fe:e9:39:c2:ea:b5:1c:29:d4:
         98:ba:98:82:c4:5e:92:e9:98:53:5b:d3:f4:46:2c:0d:5c:e7:
         5b:c2:32:e6:54:d9:d3:88:12:20:ed:3f:56:27:9c:b0:1a:7c:
         a0:33:20:bc:ff:7c:b0:0a:44:a4:80:fb:8f:e4:47:93:b6:56:
         1f:e8:a2:63:8c:76:8f:09:2d:5d:ef:83:00:74:86:7b:8d:94:
         a5:6b:3c:c8:94:88:c5:c2:6a:0e:be:8c:a1:fa:84:27:59:c2:
         9e:27:d4:7f:6d:f0:d8:89:7f:ad:36:38:a1:23:c2:87:50:15:
         a6:be:32:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----