OV SSL/TLS Certificate for *.hrb.ie Issued to Health Research Board

Certificate is witin its validity period

Issued by GEANT Vereniging (GEANT eScience SSL CA 4)

About the *.hrb.ie OV SSL/TLS Certificate

This certificate with serial number f1:30:33:a0:0e:5a:90:71:bc:51:27:e3:51:8c:0f:26 for *.hrb.ie was issued on by GEANT Vereniging.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for *.hrb.ie provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): f1:30:33:a0:0e:5a:90:71:bc:51:27:e3:51:8c:0f:26
Serial Number (int): 320594224317212461193562033783697051430
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: 59:8d:8b:40:1c:b2:db:a5:b8:a8:95:29:5c:52:54:2a:cc:af:1e:42
Authority Key Identifier: 9a:2b:8a:22:d6:8d:0c:c0:2a:a5:6f:64:33:3f:96:60:67:15:1d:b2

Fingerprint (SHA-1): 0b:94:ef:af:69:64:3c:a7:10:3c:51:40:9d:a6:66:cf:71:74:bd:eb
Fingerprint (SHA-256): a3:ba:ed:28:e8:ba:2b:a9:7a:6d:03:67:a1:79:9a:41:ad:1f:f2:34:9f:27:77:94:fb:5e:0b:93:92:2e:2e:e4

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt

Revocation Information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl

Check the revocation status for certificate *.hrb.ie
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.hrb.ie

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.hrb.ie

X.509 Certificate

The complete raw X.509 certificate details for *.hrb.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6UsjznhJrLaYY5Yo7Bt
KQtGD4Dx/nWi9FWSlior2immkQ+e9Xh8+sHl0ZnTUondU9CSAkzazYHgtGNDrs8I
i7BEsv3jjsbTY0kJBf7fKA4Z+pvpwvKc9dP7IaHLyxmabcMv6wwPAtnT+85yCtN7
1HyAXUhQ4nWsXGFUuDgFYzeOKzdF6JE12E/gmu5286ucV43okAzK7UnakHEjDDzp
BiDkWeJcPRfs/SfnWBNjomVYbzzsN8O0ZShKe5JjIslRHMClRg5MTMwq36lyV9Ix
6jMnTj2ymqd6xN1CyA/XXSCBFQmYlGObUkgppZbwPrep8SUJE/DxvIgesIC1sHjd
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320594224317212461193562033783697051430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT eScience SSL CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'terena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'tcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Health Research Board'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hrb.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31767264911388596902329976678585974987022102586884694191975878475164364467363044938718416424742308059627434457692109870804938457230236824800746829978234190844396610321532099238444584328258551785277611743850471835780878162358306132659230164977800556325179856801591683387557528182387821865818082340259796186020149195473379051486882107894274897665731330324920326242701098776895603099189046306756231150853353665999500656315189799796394712376417694113509799878810574083140046189677011835634381566376617324761461515162325119730870352065125062012110984174245729049423897930204574390148528506080398721596002151297992399314397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9a2b8a22d68d0cc02aa56f64333f966067151db2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							598d8b401cb2dba5b8a895295c52542accaf1e42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrb.ie'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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