Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10469 (0x28e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  4 08:49:44 2021 GMT
            Not After : Jan  4 08:49:44 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss2.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:b7:bb:58:63:2d:30:55:a5:05:f8:f4:e1:a8:27:
                    8e:e0:cd:62:e8:1c:70:57:15:a9:3d:01:34:b8:b8:
                    40:07:73:1a:26:01:26:19:18:37:38:8f:da:40:a5:
                    2d:4c:1c:df:a3:23:0b:b1:a1:5e:7a:b4:4b:16:3d:
                    b3:74:e6:14:0b:0d:0c:34:f3:be:55:cd:a4:5f:0c:
                    33:79:f4:2c:4d:03:1d:e4:25:b1:7f:9d:d9:3a:4f:
                    06:02:72:41:42:85:8d:ad:bc:cf:8a:e7:f3:54:89:
                    30:af:6c:11:7c:66:1a:9b:7c:57:93:07:df:74:c9:
                    1d:97:f6:a1:e6:e6:5a:34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss2.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                03:BB:5D:45:05:5D:43:CC:E9:4E:98:F0:DD:12:47:86:CD:54:67:98
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         bf:3e:8f:1f:8a:51:cb:16:a8:81:af:92:66:1d:c7:1d:15:74:
         27:41:7f:99:cf:6d:53:5c:9f:97:47:f4:da:ba:51:e4:b7:77:
         79:17:7f:a6:8d:67:15:cc:e5:a2:45:7b:ae:a1:95:f9:3b:96:
         60:f4:cf:06:e2:4f:d5:f2:7a:40:12:aa:b2:a3:99:1a:1a:83:
         ab:ee:9c:69:94:38:09:9b:07:cf:b8:ce:7a:87:94:37:73:11:
         91:7c:41:f5:18:f9:73:3f:d0:a8:49:b2:e4:0c:90:13:17:0e:
         2f:b2:0b:c1:89:c2:88:97:44:f1:aa:78:52:26:b6:49:4d:b7:
         51:6b:7b:e4:c2:5e:bd:d2:71:4d:4e:2e:fc:b7:da:ec:c7:39:
         86:86:1d:bb:76:1a:bd:bd:b8:ce:f7:42:17:00:13:81:14:37:
         07:65:f5:30:88:18:56:cd:b9:76:07:03:93:4d:d4:8f:fa:03:
         e1:d5:73:e8:d9:78:3c:90:39:d5:ed:0f:32:0b:0b:46:78:4d:
         73:fa:e7:03:f3:04:7e:c1:50:d9:ab:bc:c7:2f:87:d8:fd:88:
         79:97:09:41:d2:f3:7d:b2:40:e7:70:35:33:53:13:47:83:df:
         5b:9c:65:b3:ff:52:47:57:14:8d:55:90:e6:29:68:f1:3c:b8:
         15:62:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----