www.irex.org

- International Research and Exchanges Board Inc. -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 2e:29:ea:13:bc:d2:05:56:a0:78:66:21:24:40:46:5f was issued on by GeoTrust Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

International Research and Exchanges Board Inc.

Company registration number: 0100472686
Organization: International Research and Exchanges Board Inc.
Organization unit: ICT
State / Province: District of Columbia
Locality: Washington
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:29:ea:13:bc:d2:05:56:a0:78:66:21:24:40:46:5f
Serial Number (int): 61362119624925481826593947126526395999
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): 1f:1b:bd:6e:2e:04:ec:a2:c3:43:4c:c4:64:3d:5f:2a:99:28:18:c1
Fingerprint (sha256): 73:a3:72:13:a9:e9:7f:b2:94:45:ae:42:6f:dc:8c:d9:3b:b6:f0:90:f3:67:78:12:30:0f:e0:7d:86:4e:61:96

Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer

Revocation information

OCSP Server: http://gtextval2-ocsp.geotrust.com
CRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl

Check the revocation status for certificate www.irex.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.irex.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careers.irex.org
irex.org
oas.irex.org
yaliapp.irex.org
www.irex.org

Other certificates including the domain name irex.org

(limited to 100 certificates)
lingos.irex.org
glamartsy.wiki
lingos.irex.org
accredible.armanl.eu
www.irex.org
irex.org
*.irex.org
irex.org
irex.org
www.irex.org
spam.irex.org
etm-demo.spotparking.com.au
irex.org
accredible.armanl.eu
exchange2.irex.org
csp.irex.org
aws.irex.org
627elmp04.blackmesh.com
www.aidhon.com
idars.irex.org
www.mightydata.xyz
accredible.armanl.eu
*.irex.org
www.saiki.lol
lingos.irex.org
remote.irex.org
irex.org
itservices.irex.org
support.irex.org
627elmp04.blackmesh.com
yalisummit.irex.org
*.irex.org
ylai.irex.org
support.irex.org
accredible.armanl.eu
lingos.irex.org
tjsp.irex.org
apply.mandelawashingtonfellowship.org
itservices.irex.org
aws.irex.org
oasmd.irex.org
627elmp04.blackmesh.com
627elmp04.blackmesh.com
itservices.irex.org
support.irex.org
627elmp04.blackmesh.com
627elmp04.blackmesh.com
lingos.irex.org
ap.irex.org
*.irex.org
itservices.irex.org
www.aidhon.com
www.irex.org
tender.md.irex.org
627elmp04.blackmesh.com
stage-ylai.irex.org
aws.irex.org
lingos.irex.org
accredible.armanl.eu
www.irex.org
iknow.irex.org
www.irex.org
cipmd.irex.org
lingos.irex.org
support.hr.irex.org
accredible.armanl.eu
627elmp04.blackmesh.com
irex.org
itservices.irex.org
www.irex.org
627elmp04.blackmesh.com
cee.irex.org
lingos.irex.org
ylai.irex.org
tender.md.irex.org
vpn.irex.org
products.candbdev.com
www.irex.org
aws.irex.org
627elmp04.blackmesh.com
www.irex.org
vibe.irex.org
support.irex.org
*.irex.org
aws.irex.org
itservices.irex.org
support.irex.org
Quickbooks.irex.org
www.irex.org
www.juliangoetze.me
*.irex.org
627elmp04.blackmesh.com
itservices.irex.org
irex.org
accredible.armanl.eu
support.irex.org
accredible.armanl.eu
accredible.armanl.eu
lingos.irex.org
aws.irex.org

Certificate

The complete raw certificate details for www.irex.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61362119624925481826593947126526395999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0100472686'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'International Research and Exchanges Board Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.irex.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656118931349302747575225142955608805202393268170239449650105437385446275251901020560179179919736704784260371208302032203010753551519464383119822757621645098313717801502178016472301063332340665298998833655534954223963675024810247774754061735565245981105473038374698929672928226775793055611912089294816418452654994753071181202391115492901292182042656913704316173230363518307376868431350983005665629565698787267821826639152282986304427667393090211283957300185189726109893466503702976261714243205158614712412073783318659731457652121441882984282402110387383499806194421041945944742160000611578653896954199170155159679530933562361921814488172508381043510900291212508915868468123864400753036293742841620111133459946499058524437197512386009847897571115366369995326401861739832196132987961536680527392644036272443703907941164829329301327773499870342411906745769238572720364809145777627833280308920573005402454787257563273470491425900261330566756224711196090519850518067647029154832226811022741043114275838576073623701420578344936317948546247160646667244224744849237855187297143374103422305575952916198384079581069392235634231965695915543168842285317635010089383536238784699315207958455515892721763069580128100294637457293176353938456745945049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.irex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oas.irex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaliapp.irex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irex.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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