link.hrb.ie

- Health Research Board -

Issued by GEANT eScience SSL CA 4

About this certificate

This digital certificate with serial number 51:4f:5e:bb:ac:6b:d9:88:f8:ed:50:e8:54:9a:10:0d was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Health Research Board

Organization: Health Research Board
State / Province: Dublin
Country: IE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 51:4f:5e:bb:ac:6b:d9:88:f8:ed:50:e8:54:9a:10:0d
Serial Number (int): 108079580525933374544504437856590761997
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 64:36:b7:41:ed:55:b8:22:ec:c6:4b:ce:80:21:1d:f6:09:5d:38:a8
AuthorityKeyId: 9a:2b:8a:22:d6:8d:0c:c0:2a:a5:6f:64:33:3f:96:60:67:15:1d:b2

Fingerprint (sha1): b6:1e:ec:25:41:d3:ce:c0:6b:4d:95:e8:94:3b:c8:6e:ff:38:db:79
Fingerprint (sha256): 08:cb:de:69:f5:5a:29:1b:c0:e7:70:ed:79:32:56:ce:48:7a:26:91:bd:4e:65:8b:ea:f4:2d:db:45:14:7f:52

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl

Check the revocation status for certificate link.hrb.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for link.hrb.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

link.hrb.ie

Other certificates including the domain name hrb.ie

(limited to 100 certificates)
hrb.ie
link.hrb.ie
evaluation.hrb.ie
link.hrb.ie
link.hrb.ie
grants.hrb.ie
grants.hrb.ie
hrb.ie
evaluation.hrb.ie
mdm.hrb.ie
evaluation.hrb.ie
hrb.ie
sophosmdm.hrb.ie
hrb.ie
remote.hrb.ie
sophosmdm.hrb.ie
transfare.hrb.ie
hrb.ie
hrb.ie
libguides.hrb.ie
mail.hrb.ie
hrb.ie
grants.hrb.ie
hrb.ie
evaluation.hrb.ie
mail.hrb.ie
evaluation.hrb.ie
hrb.ie
hrb.ie
ironport3.hrb.ie
libguides.hrb.ie
secure.hrb.ie
hrb.ie
link.hrb.ie
hrb-worldonpub.hrb.ie
libguides.hrb.ie
grants.hrb.ie
sophosmdm.hrb.ie
hrb.ie
hrb.ie
hrb.ie
evaluation.hrb.ie
hrb.ie
vpn.hrb.ie
hrb-worldonpub.hrb.ie
hrb.ie
evaluation.hrb.ie
hrb.ie
libguides.hrb.ie
hrb.ie
hrb.ie
vpn.hrb.ie
evaluation.hrb.ie
hrb.ie
libguides.hrb.ie
HRBmmfa01.hrb.ie
hrb.ie
libguides.hrb.ie
hrb.ie
grants.hrb.ie
libguides.hrb.ie

Certificate

The complete raw certificate details for link.hrb.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHwzCCBaugAwIBAgIQUU9eu6xr2Yj47VDoVJoQDTANBgkqhkiG9w0BAQwFADBK
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEgMB4GA1UE
AxMXR0VBTlQgZVNjaWVuY2UgU1NMIENBIDQwHhcNMjIxMjA3MDAwMDAwWhcNMjMx
MjA3MjM1OTU5WjCBljETMBEGCgmSJomT8ixkARkWA29yZzEWMBQGCgmSJomT8ixk
ARkWBnRlcmVuYTETMBEGCgmSJomT8ixkARkWA3RjczELMAkGA1UEBhMCSUUxDzAN
BgNVBAgTBkR1YmxpbjEeMBwGA1UEChMVSGVhbHRoIFJlc2VhcmNoIEJvYXJkMRQw
EgYDVQQDEwtsaW5rLmhyYi5pZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL4147ypmDGWTbMDAjYwy8095BwmkVko1pC2IBTM3FSQFTEgKOWPk7sYstRp
Lb2fidydbtUNQy/CyAj+QisSgtMyL42dfywBtV89xkRap/MCSBC19VZe4mKUzOhY
TawzEYuLqE82oV4+GvY6DTly+fH4ifwRLqVljW8/R1QFS7yTfK3JldkXm6GvpM5E
xd9F1HUmMK5mfNcBDdK+zZo4ZoW10UVxw4C0nX82gz8neQGxU1fCp2oRw0i9GuuS
PmgF/n4nO9ozQ5ZGKdLHiP7qBVnPwTYxU02GawuC+X8519zytQCGJlTt79j9Csxt
vs97CwHZWlCHgk9pZdhWseFQXG0CAwEAAaOCA1YwggNSMB8GA1UdIwQYMBaAFJor
iiLWjQzAKqVvZDM/lmBnFR2yMB0GA1UdDgQWBBRkNrdB7VW4IuzGS86AIR32CV04
qDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwdQYDVR0gBG4wbDAMBgoqhkiG90wFAgIBMA0GCyqGSIb3
TAUCAwMCMA0GCyqGSIb3TAUCAwECMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUH
AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBFBgNVHR8EPjA8
MDqgOKA2hjRodHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UZVNjaWVu
Y2VTU0xDQTQuY3JsMHsGCCsGAQUFBwEBBG8wbTBABggrBgEFBQcwAoY0aHR0cDov
L0dFQU5ULmNydC5zZWN0aWdvLmNvbS9HRUFOVGVTY2llbmNlU1NMQ0E0LmNydDAp
BggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Auc2VjdGlnby5jb20wggF+Bgor
BgEEAdZ5AgQCBIIBbgSCAWoBaAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqF
hjTr3IKKAAABhOzEx4oAAAQDAEcwRQIgC0RWNI2ZPXUjFNkFamoyqZGcTHfS+7X0
jQwtlzETek0CIQCGpW8Uh/Z4qzPCaH7Ju+SD9Oq6GiyD7i4rupmwnrP61wB2ALc+
+yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhOzEx0MAAAQDAEcwRQIh
ALK/y+8HHoG2s5vFFUMkrFMBNNgxm4fBaUAD4h5907qjAiBkIa3lQJkxDf92FLlf
MaWUmYAVLH44GtEfbdbliV79KwB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nh
d31tBr1uAAABhOzExycAAAQDAEcwRQIhANa1pZj6678zR3doaHlqkHBwETRYxJLd
c3GO4wlfzhAFAiB+yL1l/mUuY/QaVAQU6XCEl6pZJz9Ly5MYP7Srea+MuDAWBgNV
HREEDzANggtsaW5rLmhyYi5pZTANBgkqhkiG9w0BAQwFAAOCAgEAOsiR0feDGpmx
6HzH7l6r2lBJY2zNx/BsNt7FlsFhDWeIXqKHZGP5wdndBKHpmZFhdUW0I1Bt21IO
QH7c1aYagG9UW7jntQlVH8j14+gXK4B/OE05XvigLHc3RnBYCWW+EIghZY9kWqiy
RxbHSxHS5E1eHApLAb5sTN8atg3hihVZaVhbSFXJJwh/2hpt7IqPsLefbnDnA24B
6TpCmBLm0AEK4LYnCmYUv4vnXdOBgWejoBn0mffGNC1EuwM6ocoyWDyge0ifWHSu
LW5mgF5fLewScVmdnawjF8GIvGh8PVqNJc17dgncYyQfa5RxlS6Carkz4lTqqX3z
t9ImmZbo3X2gPCuaQDUmixwfIl+cHQfV3X+TlzfuCi0jZ6iha0aOQjRATrwRCe83
jh4jubBfR7k5n8vy+agxwJD7Ct3VqfgRDjzLb14kPewtvwunQzEc06l3Hn0lWDUL
o/jw8KiKF86g4PDS/qPbcOttkgQeokGrcEWGPG1ZyPdDhoEvMQOBruZRTyeIkTjz
jJMBFKN9H2z24CKVb34qcTUlNbLp/CINXB6ip4T/5MDxl4XqMyAslMQ5I1eHjmp6
vtZpTwiR2tZydst4jn2PVcQgGLO3TqgpE7L+FyK7XKC1yED3DkoAhw9ufEimO2hP
p+iM1XZdreL8FDme/gdwx/uaFkemogY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjXjvKmYMZZNswMCNjDL
zT3kHCaRWSjWkLYgFMzcVJAVMSAo5Y+Tuxiy1GktvZ+J3J1u1Q1DL8LICP5CKxKC
0zIvjZ1/LAG1Xz3GRFqn8wJIELX1Vl7iYpTM6FhNrDMRi4uoTzahXj4a9joNOXL5
8fiJ/BEupWWNbz9HVAVLvJN8rcmV2Reboa+kzkTF30XUdSYwrmZ81wEN0r7Nmjhm
hbXRRXHDgLSdfzaDPyd5AbFTV8KnahHDSL0a65I+aAX+fic72jNDlkYp0seI/uoF
Wc/BNjFTTYZrC4L5fznX3PK1AIYmVO3v2P0KzG2+z3sLAdlaUIeCT2ll2Fax4VBc
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108079580525933374544504437856590761997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT eScience SSL CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'terena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'tcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Health Research Board'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'link.hrb.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24011851894508510248365047217466600804940984558804808954751928019267965952859461943733953664023736888856173214943506405604117256142067838436499871923474896813136896092400279253728897910956313740692206033910497839057953581427982708622682446574072071546060924037552053622009078811582884114258571362844221149459510188335445257428851945061445219050527005308928986672774729620710965527379714091414129438554445601023909742752247142375720848170329087535299402193500857363472428904842525827314062941578707470340019600144720236896482175239087088220457819899449204505183642897921696016558595750379338474284934852250201748429933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9a2b8a22d68d0cc02aa56f64333f966067151db2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6436b741ed55b822ecc64bce80211df6095d38a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184ecc4c78a000004030047304502200b4456348d993d752314d9056a6a32a9919c4c77d2fbb5f48d0c2d9731137a4d02210086a56f1487f678ab33c2687ec9bbe483f4eaba1a2c83ee2e2bba99b09eb3fad7007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184ecc4c7430000040300473045022100b2bfcbef071e81b6b39bc5154324ac530134d8319b87c1694003e21e7dd3baa302206421ade54099310dff7614b95f31a5949980152c7e381ad11f6dd6e5895efd2b007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184ecc4c7270000040300473045022100d6b5a598faebbf3347776868796a907070113458c492dd73718ee3095fce100502207ec8bd65fe652e63f41a540414e9708497aa59273f4bcb93183fb4ab79af8cb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.hrb.ie'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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