Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10471 (0x28e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec  4 08:50:01 2021 GMT
            Not After : Jan  4 08:50:01 2023 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss4.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c3:25:b2:14:dd:50:2a:28:4b:50:3d:92:b9:52:
                    27:66:8e:90:70:c2:54:74:1e:5d:f4:e6:c5:4b:87:
                    ac:a1:3b:e6:c6:8d:95:7c:19:45:08:42:3c:99:a3:
                    98:60:94:9e:c2:ce:25:6e:b7:89:77:e2:11:4c:a2:
                    86:5b:7a:6d:58:9e:45:99:d6:a5:0b:2f:f6:2e:14:
                    38:33:45:26:7c:f9:4a:17:77:f7:8c:98:02:bc:35:
                    0d:b2:54:b2:7e:47:ec:27:dc:cf:e1:a8:97:8f:78:
                    57:08:29:f9:cb:cf:11:6e:b4:6a:af:5b:ac:02:ce:
                    63:ca:a8:d8:b8:7d:92:6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss4.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                4D:6B:68:33:7E:BD:05:CF:18:29:0D:EB:DC:DF:E9:58:03:FC:C2:4E
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         6c:66:01:01:2a:e3:a2:d9:06:b6:9c:49:84:4b:2b:db:db:32:
         c7:d7:de:e7:ae:aa:9b:ee:4a:5f:b7:8f:f6:7e:92:19:0e:5e:
         52:0d:a5:7c:07:fc:3c:1e:79:35:12:1f:8a:40:a1:f5:8b:97:
         64:25:a6:ef:78:4f:2e:a0:58:ab:8c:c4:db:ac:ec:13:9c:e2:
         e1:9b:6d:ce:28:15:41:98:4a:57:f2:3f:b2:dd:64:32:1b:13:
         96:08:57:8e:81:a8:22:29:b7:94:c4:ab:a5:0e:42:5f:94:e1:
         29:37:33:db:53:66:41:e2:c3:88:9a:4c:7c:a6:85:80:b4:36:
         58:8c:1b:ce:e9:94:cf:d0:1a:0d:12:ae:3c:1a:80:a2:ee:65:
         fd:ca:77:05:eb:93:db:6a:63:97:4a:f6:49:8a:b5:96:bc:be:
         f6:bd:39:14:25:da:37:bc:4b:c6:d7:75:4b:d6:c2:9e:43:ca:
         a9:5a:c0:5b:b3:0a:bf:4e:58:34:81:3e:a7:32:01:2e:f4:d4:
         f4:1b:f9:a0:7d:f1:50:56:61:30:ce:43:26:70:7e:8c:8f:c4:
         99:50:fc:d6:1a:53:a9:60:2a:6f:50:73:26:33:bc:f4:c1:1b:
         bd:d6:f6:46:ef:e0:42:3e:ff:6d:a0:88:fb:c3:77:7c:60:84:
         52:bf:ae:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----