online-store-web-canada.shopifyapps.com

Issued by R3

About this certificate

This digital certificate with serial number 04:67:ae:7a:d2:ad:7f:ca:67:a8:ec:0d:0b:22:3f:5d:de:8a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=online-store-web-canada.shopifyapps.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:ae:7a:d2:ad:7f:ca:67:a8:ec:0d:0b:22:3f:5d:de:8a
Serial Number (int): 383730150924433003104680328139636960255626
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fe:96:d7:a6:a6:59:a1:c2:45:73:f4:4d:d3:a4:15:b6:43:d1:e4:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:96:c9:7b:c3:6e:6c:35:59:9d:97:90:e4:60:57:83:c7:e7:df:b8
Fingerprint (sha256): 03:81:ec:a8:37:f4:fa:1e:4d:2a:c8:c8:92:cc:1b:1d:31:3a:c0:1c:be:c8:f2:58:13:5d:e2:1c:1a:55:d4:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate online-store-web-canada.shopifyapps.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for online-store-web-canada.shopifyapps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online-store-web-canada.shopifyapps.com
online-store-web-canada.shopifycloud.com

Other certificates including the domain name shopifyapps.com

(limited to 100 certificates)
script-editor.shopifyapps.com
f4.shared.global.fastly.net
delivery-app.shopifycloud.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
v.ssl.fastly.net
local-deliveries.shopifycloud.com
dns-vetting1-mims-pawel.map.fastly.net
v.ssl.fastly.net
script-editor.shopifyapps.com
v.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
f4.shared.global.fastly.net
routing-foundations-misc-alt.shopifycloud.com
buy-button.shopifycloud.com
developer-tools.shopifyapps.com
j.ssl.fastly.net
local-deliveries.shopifycloud.com
os-staging.shopify.io
online-store-web-canada.shopifyapps.com
post-fulfillment-genghis.shopifyapps.com
dns-vetting1-mims-pawel.map.fastly.net
j.ssl.fastly.net
sell-on-amazon.shopifycloud.com
f4.shared.global.fastly.net
welcome-shopify-plus.shopifyapps.com
shopify.map.fastly.net
j.ssl.fastly.net
merchant-to-merchant-curator.shopifyapps.com
curated-commerce.shopifyapps.com
abacus.shopifyapps.com
f4.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
shopify.map.fastly.net
fb-commerce.shopifyapps.com
shopify.map.fastly.net
shopify.map.fastly.net
search-and-discovery-staging-2.shopifyapps.com
shipping-manifests.shopifysvc.com
script-editor.shopifyapps.com
j.ssl.fastly.net
developer-tools.shopifyapps.com
shipping-manifests.shopifysvc.com
productreviews.shopifyapps.com
dns-vetting1-jeffg-noah.map.fastly.net
f4.shared.global.fastly.net
canadapost.shopifycloud.com
dns-vetting1-mims-pawel.map.fastly.net
v.ssl.fastly.net
grapevinereviews.shopifyapps.com
grapevinereviews.shopifyapps.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
f4.shared.global.fastly.net
local-deliveries.shopifycloud.com
app-reviews.shopifycloud.com
f4.shared.global.fastly.net
messenger-commerce.shopifycloud.com
shopify-chat.shopifyapps.com
f4.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
fulfillment-staging.shopifyapps.com
launchpad.shopifyapps.com
themekit-access.shopifycloud.com
wallet-order-service.shopifyapps.com
google-product-publisher.shopifyapps.com
delivery-app.shopifycloud.com
shopify.map.fastly.net
hs-codes-service.shopifyapps.com
v.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
shopify.map.fastly.net
orderprinter.shopifycloud.com
fb-commerce.shopifyapps.com
fb-commerce.shopifyapps.com
j.ssl.fastly.net
merchant-data-warehouse.shopifyapps.com
f4.shared.global.fastly.net
google-product-publisher.shopifyapps.com
fb-commerce-staging.shopifyapps.com
dns-vetting1-mims-pawel.map.fastly.net
geolocation-recommendations-staging.shopifycloud.com
routing-foundations-misc-alt.shopifycloud.com
delivery-app.shopifycloud.com
dns-vetting1-jeffg-noah.map.fastly.net
curated-commerce-curator-staging.shopifyapps.com
subscriptions.shopifyapps.com
*.wholesale.shopifyapps.com
developer-tools.shopifyapps.com
f4.shared.global.fastly.net
nirvana.shopifyapps.com
widgets.shopifyapps.com
welcome-shopify-plus.shopifyapps.com
shopify.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
cod-app.shopifycloud.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net

Certificate

The complete raw certificate details for online-store-web-canada.shopifyapps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gzRK6AovNc0N1KL4TVz
jhV0QptNoRIphsey6aq5gYrhq2TEu1qx+2HhUBPnVVBT160ipGWgLKU0EEZWUzux
2R47mfp+2aB1iYGfaa+JJl3czdi5bcNPaqvfrDbRoK4cmDuI8BEMN0pu3QYxNoMW
nllBgDBEfD0vfi5/Vs4fKqVw0lv3d+ZNRO8MAorQxl+xxsT/n1XJYcwuwNmCyt9k
PSUJRwHB+GZ874zU1BupxCHSQildnXmILQZaNuuwkx13CN37Hg7BUjMS/egXgL9b
HLIUIcRrCjYLAlSQuongI47WmQjrCeFggEnPMfy1DZreHeFtohnPl3IFiKtUHAEf
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383730150924433003104680328139636960255626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-11 16:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-09 16:08:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'online-store-web-canada.shopifyapps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30051036915649818285574949877890838593248047446399147701746018112307432601285095581985551051039569076248014376452573190114077854834961227837502642739042894797001817827356372772353462024741869524744304011589218991376146554883574574263695883020148580332030651135061517108135872403379249825394301385281681437908734583080434988625390928491197523237459542356659224830931539511858646492739884126461594085098976213890468501937406669729887142326189702087282150030760495479846043319215486981776374749623565037146945655345188894846343672351697982306323639969134119882859998600232621290237959842081896077960097727968125263093693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe96d7a6a659a1c24573f44dd3a415b643d1e4d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-store-web-canada.shopifyapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-store-web-canada.shopifycloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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