logs.shopify.io

Issued by R3

About this certificate

This digital certificate with serial number 03:66:c9:d9:9c:8c:d4:39:4a:df:d1:b9:d9:3a:6e:99:0b:92 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=logs.shopify.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:c9:d9:9c:8c:d4:39:4a:df:d1:b9:d9:3a:6e:99:0b:92
Serial Number (int): 296313963952001054367280257399418680576914
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:a5:67:2d:4d:0a:45:9b:93:25:86:0f:39:f2:9b:40:bc:99:97:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:48:6e:bd:5a:60:f9:94:77:93:fd:52:c3:3d:43:19:c7:a4:0e:f5
Fingerprint (sha256): 11:61:43:bd:42:08:87:e5:43:04:b6:c1:d1:e2:e6:fe:de:c6:77:d9:5f:5a:a0:8f:87:cb:0b:da:80:97:e1:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate logs.shopify.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logs.shopify.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logs-us-east4-b-1.shopifycloud.com
logs.shopify.io
sh-splunk-us-east4-b-1.shopifycloud.com
sh.splunk.shopifysvc.com

Other certificates including the domain name shopify.io

(limited to 100 certificates)
shopify-slack-bot-staging.shopify.io
www.metacdn.com
notary.shopifycloud.com
shard2.notary-shops.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
rare-emojis.shopify.io
disco-time.shopify.io
p2.shared.global.fastly.net
sheriff.shopify.io
cinder.shopify.io
shard6.notary-shops.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
gamedays.shopify.io
plus-website-staging5.shopify.io
wedge-viewer.shopifycloud.com
captain-crunch.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
p2.shared.global.fastly.net
bourgeois.shopifycloud.com
sni.cloudflaressl.com
hive-logs-proxy.shopify.io
traffic.shopify.io
observe.shopifycloud.com
logs-edge-us-e4.shopifycloud.com
p2.shared.global.fastly.net
traffic.shopify.io
newrecruits.shopify.io
traffic.shopify.io
os-staging.shopify.io
wedge-viewer.shopifycloud.com
trust-rules-engine-sandbox-staging.shopify.io
reindex-coordinator.shopify.io
storybook.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
traffic.shopify.io
horton.shopify.io
app-orderprinter-staging.shopify.io
adequate-desk.shopify.io
blog.shopify.io
patdown.shopifycloud.com
bourgeois.shopifycloud.com
angry-owl.shopify.io
sauron.shopify.io
books.shopify.io
translations.shopify.io
traffic.shopify.io
octobox.shopify.io
shopify.map.fastly.net
globe.shopify.io
genesis.shopifycloud.com
affirm.plusplus.app
p2.shared.global.fastly.net
bogus-marketplace-app.shopify.io
themes.shopify.io
melody-staging2.shopify.io
twittertest.plusplus.app
devvy.shopify.io
identity-graph-api.shopify.io
cronograma-staging.shopify.io
linkpop-staging.shopify.io
logs-svc-us-e4.shopifycloud.com
observability-team.docs.shopify.io
hive-logs-proxy-staging.shopify.io
terraform-private-registry.shopify.io
notary.shopify.io
foo.tunnel.shopify.io
metricflow.shopify.io
tasker.shopify.io
alittlesomethingfrom.shopify.io
shard3.notary-shops.shopify.io
athena-flex-production.shopifycloud.com
sbomasum-staging.shopify.io
clouddo-bot.shopify.io
p2.shared.global.fastly.net
wheeljack.shopify.io
scaling.shopify.io
docs.shopify.io
affirm.plusplus.app
spy-v2-staging.shopify.io
kepler.shopify.io
sni.cloudflaressl.com
traffic.shopify.io
superset-worker-staging-monitor.shopify.io
shard4.notary-shops.shopify.io
themes.shopify.io
authme.shopify.io
eventmarketing.shopify.io
usage-service-api.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
accio-staging.shopifycloud.com
russbot.shopifycloud.com
shard2.notary-shops.shopify.io
adequate-desk.shopifycloud.com
www.metacdn.com
*.docs.shopify.io
airbnb.plusplus.co
p2.shared.global.fastly.net
rare-emojis-staging.shopify.io
logs-canada.shopify.io
octobox.shopify.io

Certificate

The complete raw certificate details for logs.shopify.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BV85YSHElBmmNAdrm43
EjT1k45vEHCbWjt5xheV64cws4gyKBKWOlqx/YVK8Syebff8nq2F8BM0D0MO0pt5
eFu+wEo1Qrk0rkHQE2Ca6tPm+lpeN/6yHMnCxergqvMoL8yzc0bnlNyBOumI4cvm
mvhvK7IvUn9vCmtWPVZCUIry5yXRWJdi95/UtZ/2P0Q3qrlLnOltwVyQrONBWcA6
t4Zyi5dkv1ehpyJGvg5edYfz8BrnqEnESznUChEo8FEO96wllgUsynw5d1sY705G
k3ZDZP5h60RGLYs6ug0ypDYxmrPhhZY/vyKGUkSRUHzXusOeMAKCrIDjtpXdi5ll
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296313963952001054367280257399418680576914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:22:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 00:22:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logs.shopify.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29297882819274992402646341601575784796906100283664709780288145802210035402469181197833177800670119362012861492278220863423793496236285306598900811941992397408798860579095816421731705260902263537432810987825320727153749222308742683034644545396084446571686614948390883148238193298431750793827303891655610006438146786033386175277047956447018294435508182160058120474718856389985433351734712611047505225090885956945169207540588613815056639294614770515623673456215945145828767620826766256163940837380451064738824467198230469862894916259350520155769246467130356376598486451976050086845323684544893191084840763636676227065231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8aa5672d4d0a459b9325860f39f29b40bc99975d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs-us-east4-b-1.shopifycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs.shopify.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh-splunk-us-east4-b-1.shopifycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh.splunk.shopifysvc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b1c5398c90000040300473045022100b23a05b92363104aed0d4d8c92bc04cec93b8e815d6872ba43cb5db365c09503022016160c09acd8ea2cc70d7266195b51d5fc9e53c3903d85a02eb838e7a837d94f00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b1c5398fc0000040300463044022066f24fec02d5ecd9dd7061c9f992a2a6e09376265a38fc7648bcb74b0c47fb760220011b5f9587037741fad4896feb578c5bdc2c8b895f0f27b10d0056bcb14ccc43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000487408cf7b7bc9a33ca06f7928db6a998fc428d00a04d1687432b4ef326baae7d5de194a076caff7d015a0959288a43f64e8745be3d4d8852aeb14a0d5675e7cc42e451a5e1374c2b8209cd0a965a94f2442b123ee9848cb7ceec2bed0bcfbdf73b874f62e56ce39d7755aa05ef3d221d3c56e9c47755708193598bdf3f7b46f7fab27a1380a99648e14108525c54cb8f571bd3498c12e79d173261faaeeebe8c9fd56b9b7142d20a55ba23fffb9e5c9747850f75368990105e04b3676abc47f574302136a68b9cc2380316a8c3cf535608142de3b13b1b20e1e05be366726960c06a23eb959dd4a283fcf3959194e59b2fbf86ad2022a71efff744a4be2429