Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12250 (0x2fda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Dec 20 21:17:30 2023 GMT
            Not After : Jan 19 21:17:30 2025 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=mss2.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:c0:55:f2:36:98:f5:c5:ad:72:33:ac:0d:c2:62:
                    52:de:0e:15:11:fc:92:82:3b:6e:43:49:95:ec:5c:
                    59:c6:67:c8:55:fb:c7:0c:b4:71:0e:56:dc:c9:f0:
                    3d:0e:66:33:59:71:34:d5:98:dd:15:5b:67:1f:94:
                    da:00:1a:c7:41:fe:d6:50:aa:a5:e7:c2:7c:a0:8c:
                    c3:63:ef:a5:d5:bc:65:48:8c:18:55:50:91:ce:f8:
                    0a:6a:b1:1b:ed:ad:82:2d:33:16:d6:82:5b:aa:24:
                    b1:03:60:91:43:87:27:6e:22:20:d2:1d:3f:6e:b5:
                    ec:0d:6a:20:39:97:49:59:41:a3:49:c2:4f:02:fd:
                    ca:af:63:5b:a7:b1:87:df:61:00:6c:be:dd:8e:1c:
                    e7:18:01:92:6e:2c:e1:0a:3d:47:72:5b:25:15:f2:
                    a2:bb:96:f6:ac:43:df:74:cc:27:9f:ed:ac:7e:ba:
                    f0:08:67:d7:68:98:c8:04:55:bd:42:0d:25:c6:fd:
                    64:8a:70:04:6a:ec:14:20:87:71:58:f0:f5:75:a0:
                    e6:25:9b:2d:3f:d3:3f:d2:3c:aa:6d:ff:d2:64:5c:
                    11:ee:ce:1e:bc:db:13:62:19:b8:fa:20:39:30:41:
                    e7:dc:b2:8a:82:ea:fe:a7:62:b1:5d:30:a0:36:55:
                    64:94:e6:78:c0:53:93:e3:0a:27:5f:b9:57:18:0a:
                    a6:a7:f2:8e:b3:4e:a3:1e:b6:f0:5d:6d:e9:d4:5b:
                    8d:ac:3d:b6:e9:1d:3b:6f:3b:d1:af:7e:9c:30:4a:
                    20:4a:7d:d1:7c:cc:f1:fa:2e:f8:9b:28:56:8c:9c:
                    4f:38:a8:62:13:b0:95:5f:87:fb:19:f5:48:68:76:
                    82:2c:ab:d1:bc:83:33:98:33:0d:49:bd:b2:00:94:
                    9f:76:e8:d2:d6:3f:df:00:82:ae:73:1f:50:ec:47:
                    3e:80:a6:aa:26:9e:b1:ed:46:ef:48:d4:50:8a:b9:
                    a9:17:da:12:cc:4e:28:e5:f9:e5:34:8a:f8:20:a8:
                    d0:67:4e:17:2f:13:0f:f7:e0:41:7a:f3:2f:ea:4b:
                    32:08:96:b5:62:5d:29:b6:96:61:bf:45:02:b6:d0:
                    74:4d:f8:56:97:1b:fb:60:34:dd:6b:4c:72:5e:f0:
                    70:ef:7f:7f:54:86:85:c5:1d:42:2a:30:56:20:e2:
                    72:b5:e0:d0:ca:6b:50:66:6f:9a:46:f2:bc:3e:83:
                    bd:8c:12:3f:86:ac:14:b6:ec:27:a1:6b:18:01:22:
                    9e:22:44:cd:71:c9:24:ec:93:b7:47:32:bf:30:13:
                    89:d5:e4:98:5e:20:15:4e:da:e5:cf:53:d4:b9:eb:
                    3b:40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:mss2.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                33:A7:A3:30:39:BA:AD:EA:08:70:F4:36:B6:B7:E5:FF:C0:C9:D6:E6
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:42:4a:03:d0:60:3f:0f:d6:b7:8c:81:d2:c8:e5:57:ca:
         8c:be:a7:e9:59:36:32:6f:42:5e:c0:1e:6a:5f:40:d6:3a:16:
         f1:d7:72:da:bc:fb:4d:c7:df:c9:03:30:d1:20:e1:23:fe:fd:
         75:7f:51:2b:80:d5:1a:8a:d6:56:5f:f2:2c:f7:94:1a:d3:32:
         93:e2:27:ef:24:90:0a:ef:44:41:2b:41:48:78:b3:ad:c9:52:
         d9:88:cc:68:1b:c0:9b:74:6f:a6:17:9e:f5:87:78:45:4c:ff:
         a5:f3:52:b8:ac:0a:11:0f:dc:c8:2e:3f:ed:ab:87:19:25:52:
         26:6d:4e:cc:b2:1a:f6:2d:24:38:59:ae:5f:bc:b5:67:84:e0:
         3a:4a:9f:84:8c:3f:13:0f:58:90:ef:b5:8c:ad:bc:6e:f4:ad:
         fa:34:e4:1f:6e:24:2d:62:9f:5a:27:6c:36:08:7b:39:81:85:
         68:f7:d2:22:7c:4e:ee:59:f8:39:7a:1d:9a:a7:ac:8b:4b:0e:
         21:c6:c8:fc:07:9f:54:6c:7b:dd:b1:1e:c1:ab:35:09:5c:8c:
         71:eb:5a:01:a4:24:50:b3:54:c2:37:2a:49:1a:9c:fd:29:19:
         89:9b:a8:30:9f:d5:32:28:b4:d1:10:02:67:22:02:7b:ac:f4:
         ef:19:3a:38
-----BEGIN CERTIFICATE-----
MIIGmjCCBYKgAwIBAgICL9owDQYJKoZIhvcNAQELBQAwRTELMAkGA1UEBhMCUlUx
DTALBgNVBAoTBFJESUcxJzAlBgNVBAMTHlJ1c3NpYW4gRGF0YS1JbnRlbnNpdmUg
R3JpZCBDQTAeFw0yMzEyMjAyMTE3MzBaFw0yNTAxMTkyMTE3MzBaMFsxCzAJBgNV
BAYTAlJVMQ0wCwYDVQQKDARSRElHMQ4wDAYDVQQLDAVob3N0czETMBEGA1UECwwK
cG5waS5udy5ydTEYMBYGA1UEAwwPbXNzMi5wbnBpLm53LnJ1MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAwFXyNpj1xa1yM6wNwmJS3g4VEfySgjtuQ0mV
7FxZxmfIVfvHDLRxDlbcyfA9DmYzWXE01ZjdFVtnH5TaABrHQf7WUKql58J8oIzD
Y++l1bxlSIwYVVCRzvgKarEb7a2CLTMW1oJbqiSxA2CRQ4cnbiIg0h0/brXsDWog
OZdJWUGjScJPAv3Kr2Nbp7GH32EAbL7djhznGAGSbizhCj1HclslFfKiu5b2rEPf
dMwnn+2sfrrwCGfXaJjIBFW9Qg0lxv1kinAEauwUIIdxWPD1daDmJZstP9M/0jyq
bf/SZFwR7s4evNsTYhm4+iA5MEHn3LKKgur+p2KxXTCgNlVklOZ4wFOT4wonX7lX
GAqmp/KOs06jHrbwXW3p1FuNrD226R07bzvRr36cMEogSn3RfMzx+i74myhWjJxP
OKhiE7CVX4f7GfVIaHaCLKvRvIMzmDMNSb2yAJSfdujS1j/fAIKucx9Q7Ec+gKaq
Jp6x7UbvSNRQirmpF9oSzE4o5fnlNIr4IKjQZ04XLxMP9+BBevMv6ksyCJa1Yl0p
tpZhv0UCttB0TfhWlxv7YDTda0xyXvBw739/VIaFxR1CKjBWIOJyteDQymtQZm+a
RvK8PoO9jBI/hqwUtuwnoWsYASKeIkTNcckk7JO3RzK/MBOJ1eSYXiAVTtrlz1PU
ues7QIcCAwEAAaOCAnwwggJ4MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgP4
MBEGCWCGSAGG+EIBAQQEAwIE0DAaBgNVHREEEzARgg9tc3MyLnBucGkubncucnUw
HQYDVR0OBBYEFDOnozA5uq3qCHD0Nra35f/AydbmMB8GA1UdIwQYMBaAFLca+X3+
0h5hqamMIWiLfmCMuXBZMD0GA1UdEgQ2MDSBFHJkaWctY2FAZ3JpZC5raWFlLnJ1
hhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcvMD8GCCsGAQUFBwEBBDMwMTAv
BggrBgEFBQcwAoYjaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2NhLmh0bWww
NgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NhLmdyaWQua2lhZS5ydS9SRElHL2Nh
Y3JsLmRlcjBaBgNVHSAEUzBRMAwGCiqGSIb3TAUCAgEwQQYMKwYBBAGBrHsBAQIC
MDEwLwYIKwYBBQUHAgEWI2h0dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy9wb2xp
Y3kvMCsGCWCGSAGG+EIBAgQeFhxodHRwOi8vY2EuZ3JpZC5raWFlLnJ1L1JESUcv
MBYGCWCGSAGG+EIBCAQJFgdwb2xpY3kvMBgGCWCGSAGG+EIBBAQLFgljYWNybC5w
ZW0wIAYJYIZIAYb4QgEDBBMWEWNnaS1iaW4vY2hlY2tyZXY/MFQGCWCGSAGG+EIB
DQRHFkVJc3N1aWVkIGJ5IFJESUcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHksIGh0
dHA6Ly9jYS5ncmlkLmtpYWUucnUvUkRJRy8wDQYJKoZIhvcNAQELBQADggEBAI7L
QkoD0GA/D9a3jIHSyOVXyoy+p+lZNjJvQl7AHmpfQNY6FvHXctq8+03H38kDMNEg
4SP+/XV/USuA1RqK1lZf8iz3lBrTMpPiJ+8kkArvREErQUh4s63JUtmIzGgbwJt0
b6YXnvWHeEVM/6XzUrisChEP3MguP+2rhxklUiZtTsyyGvYtJDhZrl+8tWeE4DpK
n4SMPxMPWJDvtYytvG70rfo05B9uJC1in1onbDYIezmBhWj30iJ8Tu5Z+Dl6HZqn
rItLDiHGyPwHn1Rse92xHsGrNQlcjHHrWgGkJFCzVMI3KkkanP0pGYmbqDCf1TIo
tNEQAmciAnus9O8ZOjg=
-----END CERTIFICATE-----