Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10468 (0x28e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  4 08:49:38 2021 GMT
            Not After : Jan  4 08:49:38 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=cluster.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c8:40:67:48:29:10:9a:5f:1c:de:8a:9a:cf:76:
                    fc:be:8b:ca:52:15:fb:4e:d1:eb:34:b9:34:bd:e2:
                    bd:1a:0c:fb:4a:b0:3a:b4:25:12:5e:93:ae:ed:0e:
                    84:68:a6:d2:43:e9:eb:09:2b:c0:62:a6:8b:df:14:
                    7b:fa:6d:cc:1f:a6:c0:b5:23:c3:a2:53:6f:e0:36:
                    91:09:af:c0:16:8b:f3:94:ea:fc:66:55:e6:96:0e:
                    6e:34:0d:4f:39:6f:66:a1:93:3f:c7:23:cc:42:b9:
                    83:d6:31:70:ac:50:de:15:54:31:ae:24:f8:be:bb:
                    33:9c:8e:a7:05:cd:70:b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:cluster.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                A8:8E:CA:9A:C0:F0:34:A1:50:DF:A9:65:67:16:ED:48:CC:F1:0C:B6
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         48:ae:e5:c1:48:13:8d:16:9f:e2:68:48:f9:2d:50:48:37:77:
         93:f7:83:18:7d:48:72:95:d7:6b:44:5f:e2:80:56:0f:64:17:
         1b:00:50:4b:e2:00:48:0a:96:06:93:27:13:19:27:fe:00:95:
         78:d2:6f:6f:48:1b:f2:4f:ec:54:b6:8c:67:a6:dd:e3:76:00:
         7a:25:40:fa:fb:ec:3d:3a:b7:31:1f:e1:16:8e:cd:3b:8e:47:
         0d:9d:3e:d0:cd:d0:2a:f6:e6:c0:64:45:f1:3f:e3:d7:34:05:
         78:00:ea:56:c4:68:f7:65:9e:a3:a0:60:62:1b:f2:d1:4d:d3:
         1d:72:d6:e0:32:0b:ee:85:c1:70:7d:d6:c6:7a:ac:1e:45:66:
         a4:6b:b4:1e:e3:ec:bc:3a:24:9b:d9:f0:e6:5a:86:b5:a6:d5:
         af:ec:ae:c8:5c:cb:89:d8:ff:7c:5a:6a:0b:de:ce:23:48:6c:
         ef:0d:0d:a0:8d:31:19:27:91:ce:b7:33:d4:09:b1:4d:44:fb:
         a0:cc:34:80:fd:3c:b4:18:d5:18:6e:66:d2:9c:80:d8:b7:9d:
         f8:af:8a:ad:2b:80:27:f1:34:c6:9c:7c:99:cc:c9:24:3c:9c:
         11:54:21:13:19:c2:b1:97:e0:ca:af:40:b8:1d:67:db:e3:65:
         04:90:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----