prd-eukanuba-cd-01.royalcanin.com

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 3d:83:b0:15:40:5e:a0:49:0d:b5:83:10:40:3d:a0:dc was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prd-eukanuba-cd-01.royalcanin.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3d:83:b0:15:40:5e:a0:49:0d:b5:83:10:40:3d:a0:dc
Serial Number (int): 81766670019151022741862705740816163036
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 60:54:dc:db:16:46:93:52:e6:70:e5:35:90:da:ef:66:d5:23:7b:d6
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): d1:a7:2a:b1:83:df:86:9f:5d:d1:2c:b5:79:4d:fc:8d:be:6d:e1:00
Fingerprint (sha256): 05:15:22:24:18:10:26:da:ae:2b:38:24:89:0b:d7:b3:00:84:b7:65:5c:e1:5e:6a:e8:98:af:20:4b:67:a6:a3

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/SJP24YP2a0I
CRL Distribution Point: http://crls.pki.goog/gts1p5/Rppwiu3F8ZU.crl

Check the revocation status for certificate prd-eukanuba-cd-01.royalcanin.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prd-eukanuba-cd-01.royalcanin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prd-eukanuba-cd-01.royalcanin.com

Other certificates including the domain name royalcanin.com

(limited to 100 certificates)
developer.royalcanin.com
shop.royalcanin.com
*.mars.com
shop.royalcanin.com
identity.royalcanin.com
sni.cloudflaressl.com
payapi.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
web.royalcanin.com
developer.royalcanin.com
shop.royalcanin.com
*.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
redirect.royalcanin.com
lambda-redirect26.mars-inc.com
gmvet-vs.royalcanin.com
scrmstg.royalcanin.com
admin-signin.royalcanin.com
prd-eukanuba-cd-01.royalcanin.com
sni.cloudflaressl.com
stg-vetfocus-cd-02.royalcanin.com
prescribers.royalcanin.com
sni.cloudflaressl.com
qr.royalcanin.com
adoption-platform.royalcanin.com
incapsula.com
support.royalcanin.com
accountpreview.royalcanin.com
www.breeder.royalcanin.com
apply.royalcanin.com
sn1034dl50se01.034d.dedicated.lync.com
my.royalcanin.com
www.accountpreview.royalcanin.com
web.royalcanin.com
welcome.royalcanin.com
admin-signin.royalcanin.com
support.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
openstg.royalcanin.com
lambda-redirect26.mars-inc.com
parcel-cdn.anz.royalcanin.com
*.royalcanin.fr
apply.royalcanin.com
accountdev.royalcanin.com
learning.royalcanin.com
id-sc-rlt-weu-01.rlt.royalcanin.com
sni.cloudflaressl.com
indsight.royalcanin.com
sni.cloudflaressl.com
*.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
registration.royalcanin.com
videosources.royalcanin.com
cd-sc-prd-weu-02.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stgwedding.royalcanin.com
sni.cloudflaressl.com
*.mars.com
breeder.royalcanin.com
myuat.royalcanin.com
go.royalcanin.com
payapi.royalcanin.com
support.royalcanin.com
gha.royalcanin.com
home.academy.royalcanin.com
support.royalcanin.com
sni.cloudflaressl.com
stg-sportingdog-cd-01.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
storeap.royalcanin.com
*.royalcanin.com
registration.royalcanin.com
store.royalcanin.com
sni.cloudflaressl.com
web.royalcanin.com
vetfocus.royalcanin.com
vetfollowup.royalcanin.com.au
sni.cloudflaressl.com
sni.cloudflaressl.com
web.royalcanin.com
web.royalcanin.com
shop.royalcanin.com
apply.royalcanin.com
id-sc-qa-weu-01.qa.royalcanin.com
prd-vetfocus-cm-01.royalcanin.com
account.royalcanin.com
*.mars.com
admin-dev.royalcanin.com
redirect.royalcanin.com
uat-royalcanin-cd-01.royalcanin.com
aws-cf-rd24.mars-inc.com
web.royalcanin.com
cm-sc-prd-weu-01.royalcanin.com

Certificate

The complete raw certificate details for prd-eukanuba-cd-01.royalcanin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8B3KHSrjEwkuMgtFjGy
vyBtbAak6IdRwcN2OjXSS0t58iDLja/POSVFUbL3PLy05TGZMUviXJzfp8WVTmzk
ouad8DUz4x6cG0IhqSI6OZI7OKL+0fZljUYBJ4VSBjpzigyQT7/53aoCkYYhOV75
W7Bj+FzkSvFSlUfcA3aoMJeuBQT53Z7pToZobuBMtpNXtQCpnJFb1haiWsOydcfj
83SaN3LAjA8tb2/pIHJFdPESWKyNVp2PZ+8lGoQvZNFhLeW0oxRNWv5R0mpIFLLD
D717LYyHSS0bOPHyJfvxguwIc/CY6KrHm61Up2aWHIqGoRO/B399B/NHZEpOEKKy
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81766670019151022741862705740816163036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 04:11:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-30 04:11:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prd-eukanuba-cd-01.royalcanin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26226237384099819699141230747006742511324192781262930310309267308166946443488034189515453670297239308281029278708674538609139748513631461953930219004180610063294464164700515091344992581622926310001104483910290513122584751233756573183739226213586205661640212609128328774377319950347788507153313532493267067455784449946482514320434942407429448388572406447385610585657260364296979869813530415911471805284751063769618069903685078975634806654325667744448838868634036001664566287329994258349354882028331830319781012962841556285348904031814501713415595213044292713750071397872140176589885455131946006414253582742999995167237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6054dcdb16469352e670e53590daef66d5237bd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/SJP24YP2a0I'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-eukanuba-cd-01.royalcanin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Rppwiu3F8ZU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f3290db28000004030046304402202a67b5a500407985e1aff58f59be82fba6c2e406f81348d8d327e7d2e8727f5d02201a1ba61d5891725a391298b82fda258367af405eaa35dee3dd02d54c44a0c7960076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f3290db5c0000040300473045022058ec5b65126039a6c26e23e148b97d86138e40fbb0a8ca209a75d061bf57fd6f022100a3c3989fab30fd00a44da0a75cfe365a6f975658cbbfd323da58da60797be987
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ee814c4ef6a72a02672f58ab4d034400e90d2cc60cb496f5ab67da4e84ab3c8b90798452367586bedf11d42e6303143250f3f4afb32f416214442d74c382530d6e2ae96cccdb5f4261020c7c9383673c7e19ae4567dd095b162c4e6d7c7a1ab91c653db191c8865e6994298aa55c4edccc0b3d210b250ec16ca67894224add51fc97771e078d460cb7bb2cab43e1837d15b8fa786d8aa0c4f4be7cc002c4a8e12cfa4cf95a0a671f5e9deed4660151b16712e690b37616886ba8b4badf94e04abd0e26a5f61b7174b8093ea4f3a6a8772625a3900f67633196fdcb952f8366dc3cbe4909b13a14e0958fa0521b3c7fee62292c999f060c48c354978c9e35edd