Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12198 (0x2fa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 20 21:10:20 2023 GMT
            Not After : Jan 19 21:10:20 2025 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss5.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:ba:26:d8:ce:8a:a9:db:58:86:89:b3:33:df:27:
                    c9:19:b0:9c:af:ca:c1:8b:ff:e8:4e:51:55:8d:c0:
                    9b:ba:b3:e0:69:d7:30:6d:b9:a5:a5:f6:77:d2:71:
                    6b:92:d1:5d:5e:29:2f:e9:ee:85:85:f1:ef:8c:54:
                    46:fb:7c:16:47:68:1f:2b:da:82:ff:ac:12:d7:2e:
                    42:92:99:69:07:d7:2a:61:73:98:e8:3c:ca:35:2b:
                    39:65:4e:88:d2:d2:bd:87:a4:5a:26:30:ac:c6:2c:
                    f8:31:ac:92:e0:29:e2:a0:f8:e1:5f:b3:e7:d5:d7:
                    0b:8b:1c:d3:eb:01:2d:39:8d:58:ca:50:a3:2b:e1:
                    c8:6b:ef:81:ca:bf:ee:39:96:48:69:ad:af:04:b8:
                    7b:47:a3:21:ab:27:7c:25:ca:d8:2c:79:9f:da:52:
                    97:35:08:31:17:8d:48:61:02:6f:92:52:09:b4:81:
                    85:3f:0f:02:06:fb:0f:3e:a0:a1:81:07:cf:6c:d1:
                    d8:b7:5d:d5:56:e4:e9:f8:c3:35:d7:6a:c6:39:ab:
                    a1:75:05:9b:f2:0d:7e:1f:41:24:85:20:c9:b4:2b:
                    c7:5b:1f:de:53:e5:56:09:74:ff:82:49:3c:59:ac:
                    07:6f:61:8d:d5:77:b9:46:f6:ed:2e:79:a5:2a:88:
                    d1:df:d0:ca:48:35:ad:1a:9c:ea:e6:18:e5:75:35:
                    cd:ca:9b:c1:5b:eb:fc:b6:aa:33:e6:54:3f:68:6d:
                    8c:dd:b5:f1:b4:f1:d0:c9:cd:94:ff:d9:80:c8:f8:
                    1b:11:80:ab:bc:ce:20:95:9d:eb:fc:d9:79:a6:1e:
                    de:37:1a:7b:d0:cc:eb:73:14:c7:4e:c9:9f:3e:1b:
                    bf:7c:7f:35:25:13:06:3f:39:6d:f3:43:d0:69:f7:
                    cd:db:8b:ea:f7:bb:d3:00:bc:56:87:c9:e0:d2:90:
                    b7:b6:b8:d0:6f:a4:9d:73:0f:64:75:33:16:10:e5:
                    c7:36:3e:ed:8e:90:cb:ac:ba:ee:30:3d:32:73:12:
                    2f:0e:30:bb:96:77:76:71:a7:41:55:04:a1:df:1a:
                    1d:ef:0f:ee:dc:c9:e9:11:3c:d3:5b:17:c6:de:8a:
                    75:6d:da:02:a9:91:ab:cb:7f:02:52:b9:49:5f:35:
                    52:42:f9:61:f2:3e:00:6f:ce:7c:8f:46:3d:9a:5f:
                    51:08:be:48:9c:e7:07:22:2a:f0:fb:2f:32:bc:44:
                    42:c0:ad:6f:25:5e:28:00:08:ca:a3:29:2a:94:fd:
                    e4:83:26:29:f5:28:82:f4:1f:85:05:e0:ba:58:e4:
                    61:dc:d4:8d:f4:6c:f3:40:0d:6d:e0:86:28:40:4c:
                    f0:2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss5.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                B9:F3:F6:B4:69:A8:4B:34:E1:1A:3F:30:1E:26:4C:E9:EB:52:16:BC
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         bd:27:1e:87:6a:9e:28:17:4a:4d:d9:91:3a:5f:02:8f:1d:7c:
         85:10:8a:50:e1:4e:db:d2:81:30:84:4a:f0:f5:b3:98:81:10:
         1b:cb:6b:3e:69:5b:34:02:77:3b:59:79:3d:21:64:19:f2:51:
         7c:8a:88:61:91:da:10:cb:cf:05:29:78:1b:8a:ae:16:5a:9e:
         fd:cc:a5:2e:29:27:f9:12:e2:27:54:ba:ce:c6:dd:8f:9d:f3:
         92:a7:66:b5:a3:66:16:3d:c3:8b:13:ef:56:60:ab:77:bb:87:
         1a:38:4f:72:5e:8a:44:f5:51:e8:10:e3:af:ee:11:7a:44:db:
         a3:f5:2f:52:ca:c7:b0:b7:89:62:56:7a:a6:80:2d:1f:85:cb:
         ce:86:82:76:27:da:41:b1:3a:f9:cb:9a:ac:2f:18:2a:f6:8e:
         eb:47:f3:e2:ec:94:92:d2:ff:83:46:2b:0f:6b:01:d5:7f:d0:
         42:fc:85:01:11:a1:1e:8c:dd:8b:57:c4:c9:3b:3b:46:92:9c:
         a6:e0:5a:82:a3:ee:3d:aa:e8:c9:1c:9e:48:49:4d:34:d9:f1:
         01:5f:02:e7:af:86:d1:31:26:1a:eb:2e:2c:e5:d9:e0:c5:95:
         89:16:c1:a5:b4:7f:96:84:18:a4:8c:63:01:77:c1:e3:88:df:
         c5:29:de:76
-----BEGIN CERTIFICATE-----
MIIGmjCCBYKgAwIBAgICL6YwDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0yMzEyMjAyMTEwMjBaFw0yNTAxMTkyMTEwMjBaMFsxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKDARSRElHMQ4wDAYDVQQLDAVob3N0czETMBEGA1UECwwK
cG5waS5udy5ydTEYMBYGA1UEAwwPbXNzNS5wbnBpLm53LnJ1MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAuibYzoqp21iGibMz3yfJGbCcr8rBi//oTlFV
jcCburPgadcwbbmlpfZ30nFrktFdXikv6e6FhfHvjFRG+3wWR2gfK9qC/6wS1y5C
kplpB9cqYXOY6DzKNSs5ZU6I0tK9h6RaJjCsxiz4MayS4CnioPjhX7Pn1dcLixzT
6wEtOY1YylCjK+HIa++Byr/uOZZIaa2vBLh7R6Mhqyd8JcrYLHmf2lKXNQgxF41I
YQJvklIJtIGFPw8CBvsPPqChgQfPbNHYt13VVuTp+MM112rGOauhdQWb8g1+H0Ek
hSDJtCvHWx/eU+VWCXT/gkk8WawHb2GN1Xe5RvbtLnmlKojR39DKSDWtGpzq5hjl
dTXNypvBW+v8tqoz5lQ/aG2M3bXxtPHQyc2U/9mAyPgbEYCrvM4glZ3r/Nl5ph7e
Nxp70MzrcxTHTsmfPhu/fH81JRMGPzlt80PQaffN24vq97vTALxWh8ng0pC3trjQ
b6Sdcw9kdTMWEOXHNj7tjpDLrLruMD0ycxIvDjC7lnd2cadBVQSh3xod7w/u3Mnp
ETzTWxfG3op1bdoCqZGry38CUrlJXzVSQvlh8j4Ab858j0Y9ml9RCL5InOcHIirw
+y8yvERCwK1vJV4oAAjKoykqlP3kgyYp9SiC9B+FBeC6WORh3NSN9GzzQA1t4IYo
QEzwLT0CAwEAAaOCAnwwggJ4MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgP4
MBEGCWCGSAGG+EIBAQQEAwIE0DAaBgNVHREEEzARgg9tc3M1LnBucGkubncucnUw
HQYDVR0OBBYEFLnz9rRpqEs04Ro/MB4mTOnrUha8MB8GA1UdIwQYMBaAFLca+X3+
0h5hqamMIWiLfmCMuXBZMD0GA1UdEgQ2MDSBFHJkaWctY2FAZ3JpZC5raWFlLnJ1
hhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMD8GCCsGAQUFBwEBBDMwMTAv
BggrBgEFBQcwAoYjaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhLmh0bWww
NgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2Nh
Y3JsLmRlcjBaBgNVHSAEUzBRMAwGCiqGSIb3TAUCAgEwQQYMKwYBBAGBrHsBAQIC
MDEwLwYIKwYBBQUHAgEWI2h0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy9wb2xp
Y3kvMCsGCWCGSAGG+EIBAgQeFhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcv
MBYGCWCGSAGG+EIBCAQJFgdwb2xpY3kvMBgGCWCGSAGG+EIBBAQLFgljYWNybC5w
ZW0wIAYJYIZIAYb4QgEDBBMWEWNnaS1iaW4vY2hlY2tyZXY/MFQGCWCGSAGG+EIB
DQRHFkVJc3N1aWVkIGJ5IFJESUcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHksIGh0
dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy8wDQYJKoZIhvcNAQELBQADggEBAL0n
HodqnigXSk3ZkTpfAo8dfIUQilDhTtvSgTCESvD1s5iBEBvLaz5pWzQCdztZeT0h
ZBnyUXyKiGGR2hDLzwUpeBuKrhZanv3MpS4pJ/kS4idUus7G3Y+d85KnZrWjZhY9
w4sT71Zgq3e7hxo4T3JeikT1UegQ46/uEXpE26P1L1LKx7C3iWJWeqaALR+Fy86G
gnYn2kGxOvnLmqwvGCr2jutH8+LslJLS/4NGKw9rAdV/0EL8hQERoR6M3YtXxMk7
O0aSnKbgWoKj7j2q6MkcnkhJTTTZ8QFfAuevhtExJhrrLizl2eDFlYkWwaW0f5aE
GKSMYwF3weOI38Up3nY=
-----END CERTIFICATE-----