Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13688 (0x3578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=RU, O=RDIG, CN=Russian Data-Intensive Grid CA
        Validity
            Not Before: Jan  8 00:05:29 2026 GMT
            Not After : Feb  8 00:05:29 2027 GMT
        Subject: C=RU, O=RDIG, OU=hosts, OU=pnpi.nw.ru, CN=gt2.pnpi.nw.ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:de:e6:cd:c8:10:8e:b6:0b:54:7f:29:3e:36:87:
                    28:54:c9:ba:11:00:3b:c2:58:3a:09:c3:1d:62:c9:
                    65:c5:06:c0:f2:20:f2:18:40:95:26:fe:23:0a:c9:
                    b0:f1:e4:61:e3:fa:2b:f0:07:d9:1a:2b:c5:a9:f3:
                    b8:33:f3:57:68:a5:0b:65:9c:86:a4:b2:37:38:3d:
                    b4:84:2e:ad:e1:26:e1:41:3b:88:f0:59:e0:f0:32:
                    05:86:44:44:d6:dd:53:27:30:3f:06:ba:10:af:de:
                    04:7f:ac:ca:1a:0e:50:9b:a3:61:5c:5e:97:19:4d:
                    2f:97:b1:13:f9:9c:f7:96:cb:10:6a:ef:70:6f:80:
                    cf:3a:37:b0:51:ba:db:90:25:56:15:c5:1e:55:bc:
                    4b:a1:09:ae:e6:a9:ef:a2:58:1f:c2:e5:2c:32:46:
                    d0:c6:e0:73:0e:3b:b0:e2:a7:0c:50:6c:13:7e:49:
                    88:fa:e8:b2:21:e0:3c:0b:1c:ab:7e:50:82:08:02:
                    0f:08:48:b8:c2:46:45:cb:05:b6:6f:52:ba:f6:69:
                    c8:07:70:7e:51:97:77:9f:9f:09:35:c7:44:69:b0:
                    89:8f:84:1d:9e:e7:b9:0f:35:a0:56:52:87:d2:40:
                    4c:9e:48:ee:1a:ac:a2:63:a0:c8:6a:03:35:85:bd:
                    4a:74:5f:bc:a2:cc:74:f0:98:42:fc:2c:9b:65:4c:
                    ea:08:e5:61:88:60:90:92:8c:c5:f2:6c:38:55:06:
                    ae:7c:8e:1c:40:8c:cc:d4:25:61:18:61:21:ea:69:
                    4c:dc:71:75:11:54:2a:e0:0d:6c:ab:31:18:4a:fe:
                    41:bd:b1:d6:fa:0b:92:39:fe:cd:bc:f2:ca:51:24:
                    1e:cb:be:8c:28:9f:cf:81:05:a2:82:ee:2b:6a:15:
                    1d:b8:55:3c:7e:ab:57:46:8e:60:85:44:51:d4:2a:
                    cc:1d:93:47:d3:3c:3c:2a:0c:09:6e:f6:3e:70:fa:
                    a9:65:5f:a6:58:23:be:e1:7d:02:e5:4e:32:e8:a0:
                    ef:4f:41:34:61:7f:c1:c4:49:eb:6f:be:a5:fe:7d:
                    b0:6b:7c:86:51:17:12:8f:f4:e3:66:cc:b6:88:d1:
                    23:82:98:43:57:3d:fb:a5:83:c1:43:8d:52:db:85:
                    f5:c4:c5:b8:e7:7e:43:ea:16:b2:ad:ff:ea:77:5d:
                    60:14:29:28:d9:2e:16:4e:05:f1:02:9b:7a:48:d4:
                    76:91:4c:44:c0:3e:ff:0d:01:20:bb:4f:56:d8:94:
                    e5:41:6f:0a:fc:40:4f:1d:c1:e0:83:13:9e:08:7b:
                    8b:c0:0b:05:d4:b7:86:55:73:36:93:0a:f5:60:3d:
                    c3:e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, SSL Server, Object Signing
            X509v3 Subject Alternative Name: 
                DNS:gt2.pnpi.nw.ru
            X509v3 Subject Key Identifier: 
                9A:17:C3:4B:5A:92:37:C4:22:B8:A0:25:43:22:81:73:21:6E:D7:32
            X509v3 Authority Key Identifier: 
                keyid:B7:1A:F9:7D:FE:D2:1E:61:A9:A9:8C:21:68:8B:7E:60:8C:B9:70:59

            X509v3 Issuer Alternative Name: 
                carrier-pigeon-destination:rdig-ca at grid dot kiae dot ru, URI:http://ca dot grid dot kiae dot ru/RDIG/
            Authority Information Access: 
                CA Issuers - URI:http://ca.grid.kiae.ru/RDIG/ca.html

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ca.grid.kiae.ru/RDIG/cacrl.der

            X509v3 Certificate Policies: 
                Policy: 1.2.840.113612.5.2.2.1
                Policy: 1.3.6.1.4.1.22139.1.1.2.2
                  CPS: http://ca.grid.kiae.ru/RDIG/policy/

            Netscape Base Url: 
                http://ca.grid.kiae.ru/RDIG/
            Netscape CA Policy Url: 
                policy/
            Netscape CA Revocation Url: 
                cacrl.pem
            Netscape Revocation Url: 
                cgi-bin/checkrev?
            Netscape Comment: 
                Issuied by RDIG Certification Authority, http://ca.grid.kiae.ru/RDIG/
    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:67:84:1d:79:e5:28:1b:e5:40:1a:74:cd:7a:d0:a3:c8:
         24:7e:6b:6e:f8:61:be:b4:f3:73:8c:19:7a:04:26:cc:78:c3:
         62:c3:17:46:9a:01:c9:9a:14:52:de:f9:f8:2c:4d:8e:e5:df:
         65:46:fc:3d:b9:31:3b:2d:80:e4:b2:e2:62:ad:4b:ee:0b:bd:
         0f:38:02:38:82:78:7a:03:cd:15:0e:fc:c3:3a:8c:f5:0a:c1:
         a6:2a:6f:5c:a5:0d:df:e8:0b:3c:8d:ad:b5:72:4b:3d:a7:45:
         f6:76:2f:f7:4f:40:45:cb:53:23:b8:fc:4b:07:ba:ae:5b:58:
         b7:bc:c6:bd:e1:6e:1e:15:6a:65:5e:b4:0c:8f:f0:e8:70:9d:
         e3:c8:52:e2:45:89:69:5d:a4:87:3f:60:f3:92:27:f6:ab:9f:
         88:1b:af:1d:53:05:44:70:4c:58:0c:84:8a:4e:49:74:c3:51:
         d3:01:64:2e:aa:c0:6c:df:77:54:60:e5:18:30:1d:e5:ba:fb:
         65:64:d0:9e:f1:f7:fa:6f:0e:67:b4:2f:74:5b:13:3a:c5:ee:
         a9:8c:ac:aa:57:35:58:48:75:52:53:50:2b:fe:6a:83:fa:c7:
         cb:d4:5f:c5:76:5c:9b:58:4b:0e:fb:60:ac:73:a7:a4:42:f9:
         a1:ee:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----