*.royalcanin.fr

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:f2:e8:30:8f:9f:ec:5f:5a:f3:d6:39:68:59:16:c3 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.royalcanin.fr

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:f2:e8:30:8f:9f:ec:5f:5a:f3:d6:39:68:59:16:c3
Serial Number (int): 18541209151398874353335964677629875907
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b3:69:23:8a:b5:47:34:22:5f:03:f5:ca:7b:dd:5e:9a:82:bd:89:3c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c3:18:20:f8:dd:17:28:fa:6a:e2:10:13:26:3d:67:7a:49:bc:a0:92
Fingerprint (sha256): 29:f9:94:f0:37:f4:77:cd:a2:d0:70:10:98:a3:83:a5:c0:b1:56:35:17:ca:ab:53:1b:c9:d3:b4:1e:c9:d1:75

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.royalcanin.fr

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.royalcanin.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.royalcanin.fr
achetermonchien.com
www.achetermonchien.com
www.achetermonchat.com
wikichat.fr
www.wikichien.fr
achetermonchat.com
www.wikichat.fr
wikichien.fr

Other certificates including the domain name royalcanin.fr

(limited to 100 certificates)
incapsula.com
*.royalcanin.dk
aws-cf-rd18.mars-inc.com
*.royalcanin.fr
*.royalcanin.dk
*.royalcanin.fr
www.royalcanin.fr
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect6.mars-inc.com
operation.royalcanin.fr
nsprogress.royalcanin.fr
avent.royalcanin.fr
aws-cf-rd18.mars-inc.com
www.recommandation.royalcanin.fr
vetfollowup.royalcanin.com.au
shop.royalcanin.fr
csxd-02.contentsquare.net
aws-cf-rd24.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
*.royalcanin.fr
royalcanin-com-redirect.mars-inc.com
incapsula.com
aws-cf-rd23.mars-inc.com
incapsula.com
jeu.royalcanin.fr
aws-cf-rd23.mars-inc.com
avent.royalcanin.fr
incapsula.com
aws-cf-rd18.mars-inc.com
csxd-02.contentsquare.net
*.royalcanin.fr
aws-cf-rd18.mars-inc.com
nsprogress.royalcanin.fr
preprod-sponsoring.royalcanin.fr
aws-cf-rd23.mars-inc.com
vetservices.royal-canin.at
vetservices.royalcanin.be
monvetoetmoi.royalcanin.fr
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
csxd-02.contentsquare.net
mon.royalcanin.fr
aws-cf-rd18.mars-inc.com
offres.royalcanin.fr
lambda-redirect6.mars-inc.com
incapsula.com
vetservices.royal-canin.at
aws-cf-rd24.mars-inc.com
*.mars.com
shop.royalcanin.fr
*.royalcanin.dk
futurexcellenceveterinaire.royalcanin.fr
*.mars.com
vetservices.royalcanin.be
incapsula.com
lambda-redirect6.mars-inc.com
csxd-02.contentsquare.net
aws-cf-rd18.mars-inc.com
aws-cf-rd23.mars-inc.com
*.royalcanin.fr
aws-cf-rd24.mars-inc.com
operation.royalcanin.fr
lambda-redirect6.mars-inc.com
aws-cf-rd23.mars-inc.com
nsprogress.royalcanin.fr
operation.royalcanin.fr
monvetoetmoi.royalcanin.fr
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd23.mars-inc.com
dev.shop.royalcanin.fr
aws-cf-rd24.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
avent.royalcanin.fr
aws-cf-rd18.mars-inc.com
*.mars.com
aws-cf-rd18.mars-inc.com
adminvfu.royalcanin.com
shop.royalcanin.fr
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
shop.royalcanin.fr
vetservices.royal-canin.at
csxd-02.contentsquare.net
aws-cf-rd18.mars-inc.com
offres.royalcanin.fr
aws-cf-rd23.mars-inc.com
csxd-02.contentsquare.net
incapsula.com
aws-cf-rd23.mars-inc.com
nsprogress.royalcanin.fr
www.recommandation.royalcanin.fr
www.recommandation.royalcanin.fr
aws-cf-rd24.mars-inc.com
aws-cf-rd18.mars-inc.com

Certificate

The complete raw certificate details for *.royalcanin.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+/gAtZdW1MWR1U/0pD8
Bx0KxbemA3FIm5WKxX21oUkWCZdjnmx4K8muwKd83Cm7UBlaXkcvGZAd7ItDh2Du
6yRzoNfPCbMWMwSEltKk9qIPII2f+avaqxmurFOAIOK/d35sCu3imAybpjTyb0mo
U0YwfCScGr//dfZrMb6E9fC71jzOx9p96p3mAyPvDpYd44wF5bQdkqPtkExgLCZu
De7uNR/Dz1I6N3LWbo3zGHNhbWNLdm9dh0LXkPYlydrKfeOrQ49EftpZTzyoQhqc
6ntqcOVfCJbDq1HRr2M7ibTLnVJJJ4cq3ShjvTRBCDiiuBfViRG97/DNeDX23qXg
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18541209151398874353335964677629875907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.royalcanin.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23724849821110712037833460498729314726007889908068925455264753391788143492653117070844806539006449006601491104878504867319600463315900974898305492838066021432063060142979220938901707013559011276095489430614888566097430788704528960425655277819824752677625629862331763619625059245458254136453496272592093212583188428393555813272748330400382947984353838524850635702986783990361082668889202284949461365020019181124970734117581646152682092328280998267413222288778111540838276340259399509164868879394180301467017136205906117120909326110419082310364931148536091790858921872419406887917727782911266926169947225770245201715451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b369238ab54734225f03f5ca7bdd5e9a82bd893c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achetermonchien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.achetermonchien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.achetermonchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikichat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wikichien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achetermonchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wikichat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikichien.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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