Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11414 (0x2c96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 15 15:47:13 2022 GMT
            Not After : Jan 15 15:47:13 2024 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss2.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:e0:77:59:bb:2b:cd:69:29:2c:74:06:06:ef:d4:
                    a0:10:ad:09:52:d3:6b:40:05:5d:ad:6a:d9:ce:49:
                    fb:16:06:2d:b7:e4:9f:d3:d3:15:ed:81:46:ab:eb:
                    16:81:bc:02:11:eb:bd:2e:98:64:f1:d5:4d:dc:e1:
                    e2:ed:1b:a2:bc:ee:d4:75:4e:3d:85:3f:7f:22:89:
                    62:e1:70:fb:8d:5a:78:f6:85:f5:a1:49:5c:86:a2:
                    1b:c0:3e:ae:a7:45:c2:22:6a:d3:77:25:ae:56:ed:
                    2a:e4:79:f2:96:54:bd:e7:d6:77:0f:ca:98:2d:c7:
                    5d:06:c1:d2:09:33:e9:52:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss2.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                80:7E:A0:CE:C2:B5:D2:C4:D6:34:63:2A:77:D8:67:33:6B:6B:06:B5
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         02:28:20:dd:fb:cb:42:2d:d2:d8:85:8a:e1:ef:6c:bc:47:c7:
         10:97:8e:44:52:66:c3:b7:71:ba:7e:05:ee:20:03:52:44:21:
         45:a5:9e:0a:af:17:c3:ea:e1:98:45:06:8b:ba:82:24:6a:53:
         80:d9:65:80:c6:f1:21:3e:2f:44:9c:90:15:b9:43:86:41:6b:
         7b:f0:f5:89:88:8e:8a:6d:23:58:fb:16:3c:45:5a:04:03:16:
         19:29:6f:04:3f:aa:5c:cc:24:b9:ee:07:eb:b2:17:9f:20:dc:
         c2:b0:d6:97:b8:83:41:11:b6:95:4a:c5:dd:96:00:4e:02:44:
         e4:dc:5d:53:74:26:bf:b3:0f:24:a7:cd:bf:fe:74:8c:a4:ca:
         a4:b3:2d:8d:1c:2b:6d:8d:53:64:a4:2f:8f:8d:cc:d5:a1:16:
         4a:3b:e9:f3:7f:59:bb:1e:40:51:6c:cd:a9:dc:44:52:f0:94:
         4b:4f:e3:1a:68:e0:03:78:8f:c8:5c:73:05:0e:c4:c9:8f:87:
         56:bf:d2:19:43:86:e3:7a:92:2e:00:1f:5d:f4:5e:6d:ea:a4:
         6b:5e:0c:71:4e:3a:9d:13:22:e7:44:8a:19:7e:1a:7e:4a:0f:
         a5:5e:f8:7f:ab:98:9e:92:43:a4:a8:60:7c:60:2d:af:c3:95:
         68:a8:50:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----