nsprogress.royalcanin.fr

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:62:25:35:77:02:d9:4c:0b:a7:67:ff:cb:8f:38:ca was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nsprogress.royalcanin.fr

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:62:25:35:77:02:d9:4c:0b:a7:67:ff:cb:8f:38:ca
Serial Number (int): 13801879735065680381148016704586987722
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ce:09:63:06:00:ff:94:91:94:ae:9b:ae:4c:ec:c4:36:35:77:02:f4
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 89:60:91:89:8d:5a:31:60:8a:97:75:da:3e:4e:75:e2:91:3b:04:13
Fingerprint (sha256): 2b:6f:20:49:27:93:05:9e:87:3a:3d:06:27:1d:88:24:07:bd:c5:61:a8:18:64:b5:cf:e0:45:7e:c9:ca:a7:4c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate nsprogress.royalcanin.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nsprogress.royalcanin.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nsprogress.royalcanin.fr

Other certificates including the domain name royalcanin.fr

(limited to 100 certificates)
incapsula.com
*.royalcanin.dk
aws-cf-rd18.mars-inc.com
*.royalcanin.fr
*.royalcanin.dk
*.royalcanin.fr
www.royalcanin.fr
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect6.mars-inc.com
operation.royalcanin.fr
nsprogress.royalcanin.fr
avent.royalcanin.fr
aws-cf-rd18.mars-inc.com
www.recommandation.royalcanin.fr
vetfollowup.royalcanin.com.au
shop.royalcanin.fr
csxd-02.contentsquare.net
aws-cf-rd24.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
*.royalcanin.fr
royalcanin-com-redirect.mars-inc.com
incapsula.com
aws-cf-rd23.mars-inc.com
incapsula.com
jeu.royalcanin.fr
aws-cf-rd23.mars-inc.com
avent.royalcanin.fr
incapsula.com
aws-cf-rd18.mars-inc.com
csxd-02.contentsquare.net
*.royalcanin.fr
aws-cf-rd18.mars-inc.com
nsprogress.royalcanin.fr
preprod-sponsoring.royalcanin.fr
aws-cf-rd23.mars-inc.com
vetservices.royal-canin.at
vetservices.royalcanin.be
monvetoetmoi.royalcanin.fr
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
csxd-02.contentsquare.net
mon.royalcanin.fr
aws-cf-rd18.mars-inc.com
offres.royalcanin.fr
lambda-redirect6.mars-inc.com
incapsula.com
vetservices.royal-canin.at
aws-cf-rd24.mars-inc.com
*.mars.com
shop.royalcanin.fr
*.royalcanin.dk
futurexcellenceveterinaire.royalcanin.fr
*.mars.com
vetservices.royalcanin.be
incapsula.com
lambda-redirect6.mars-inc.com
csxd-02.contentsquare.net
aws-cf-rd18.mars-inc.com
aws-cf-rd23.mars-inc.com
*.royalcanin.fr
aws-cf-rd24.mars-inc.com
operation.royalcanin.fr
lambda-redirect6.mars-inc.com
aws-cf-rd23.mars-inc.com
nsprogress.royalcanin.fr
operation.royalcanin.fr
monvetoetmoi.royalcanin.fr
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd23.mars-inc.com
dev.shop.royalcanin.fr
aws-cf-rd24.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
avent.royalcanin.fr
aws-cf-rd18.mars-inc.com
*.mars.com
aws-cf-rd18.mars-inc.com
adminvfu.royalcanin.com
shop.royalcanin.fr
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
shop.royalcanin.fr
vetservices.royal-canin.at
csxd-02.contentsquare.net
aws-cf-rd18.mars-inc.com
offres.royalcanin.fr
aws-cf-rd23.mars-inc.com
csxd-02.contentsquare.net
incapsula.com
aws-cf-rd23.mars-inc.com
nsprogress.royalcanin.fr
www.recommandation.royalcanin.fr
www.recommandation.royalcanin.fr
aws-cf-rd24.mars-inc.com
aws-cf-rd18.mars-inc.com

Certificate

The complete raw certificate details for nsprogress.royalcanin.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlxSDLn17MILj1ivkdZr
dmSoWFaNditsXQx8BQB0nzhNRBc1KU8rZQ5R1tmPb7Po4JXnJQRAIrP2pr/54poF
anlCQDmC6dxGBNnYQgRgmIH5qneTUugDROhPwlZ78jVh/19BLeIPNtQNxW0u6+DH
xDFegdKbQO9gXPs4nkjRhimv16Sm/959BTvAt+pwK2TLgCyDNWlsMoaVZvNr8yYL
y3Caty+C0VapM2ilA1ex8r37bYHmpnbPFbwDlbtdRen9iL0sxG8XfE5n+5MiEt2t
ux/MkkppZJEQ8k8voRIFHJgdw9iz1r/8yifUmr69b835gbTUcpIQMcE/cKgVKyHx
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13801879735065680381148016704586987722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsprogress.royalcanin.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26050615761594408697413482887576857244700081533619676411440817164812236721144771319257046552566694908412591662600373757937796313594731435070957437854383142348195933659746607103244587392263404107248395900229532234965991141769385674137651604608651060135775823723498363636390390184748755868762695984296868473953401963933813393866081796582908171031807495228031659210311043974729748735152210812221297867346784832584861795143325614954470717341606169773038274282608253493028543220653349786946187964884318192483304245456073456707085652781266470297304942483734234164859866802037638520798017294032367465470530016587334880981443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce09630600ff949194ae9bae4cecc436357702f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsprogress.royalcanin.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000188f5df5e4e0000040300483046022100e7e8f38a8ed559f9d4d30ffddb6a6f9669617f4c4fa9b338e691e37f4c76cfc5022100a6ff177997e364ea55085238e50e9f2ca9d9877c79ecc7b7fa6555bdb72de95f00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000188f5df5e750000040300483046022100da7ea3ae8d008f522e8cc46e48f05ccc9f4e7e0e460c181daf7a07ca39d51ccb022100fe2bfcef57d6a9f8546e91b38f9dd3f2aac36472c030f71cddff08a9f65972b0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188f5df5e3e00000403004630440220249a61e4d0588b0ddd39a23d55a859af636604eef3673295653d1de4151c22ec022077eed414e0742dc95ff416c1cfc42a4478a37c1858ec3a4ef5fb5ccdc56e41cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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