shop.royalcanin.ch

- Royal Canin (Schweiz) AG -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 12:49:dc:73:c9:12:8c:f4:15:93:ca:1d:08:ea:65:c0 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Royal Canin (Schweiz) AG

Company registration number: CH-020.3.922.194-6
Organization: Royal Canin (Schweiz) AG
State / Province: Zurich
Locality: Daellikon
Country: CH

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:49:dc:73:c9:12:8c:f4:15:93:ca:1d:08:ea:65:c0
Serial Number (int): 24309612898381933909754731366628091328
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): 1c:2f:e8:16:bd:5f:96:3e:d5:d8:9a:12:ac:1d:79:bf:65:f8:fb:24
Fingerprint (sha256): 2c:9f:6c:12:e9:0e:93:a5:8c:a3:62:f2:b2:89:36:04:60:be:3e:16:fe:2b:37:e9:c8:99:1d:a2:bf:13:4e:f0

Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer

Revocation information

OCSP Server: http://gtextval2-ocsp.geotrust.com
CRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl

Check the revocation status for certificate shop.royalcanin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.royalcanin.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.royalcanin.ch

Other certificates including the domain name royalcanin.ch

(limited to 100 certificates)
my.royalcanin.ch
*.royalcanin.dk
check.royalcanin.ch
my.royalcanin.ch
multifunction.royalcanin.ch
*.royalcanin.dk
mail.royalcanin.ch
deals.royalcanin.ch
*.mars.com
multifunction.royalcanin.ch
www.royalcanin.ch
deals.royalcanin.ch
share.royalcanin.ch
vetfollowup.royalcanin.com.au
multifunction.royalcanin.ch
www.royalcanin.com
royalcanin-com-redirect.mars-inc.com
deals.royalcanin.ch
shop.royalcanin.ch
aws-cf-rd08.mars-inc.com
deals.royalcanin.ch
multifunction.royalcanin.ch
shop.royalcanin.ch
*.mars.com
*.mars.com
mail.royalcanin.ch
vetservices.royal-canin.at
vetservices.royalcanin.be
my.royalcanin.ch
royalcanin-com-redirect.mars-inc.com
vetservices.royalcanin.ch
*.royalcanin.dk
deals.royalcanin.ch
*.mars.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
*.royalcanin.dk
*.mars.com
*.mars.com
vetservices.royalcanin.be
check.royalcanin.ch
*.mars.com
share.royalcanin.ch
multifunction.royalcanin.ch
*.mars.com
*.royalcanin.ch
my.royalcanin.ch
deals.royalcanin.ch
shop.royalcanin.ch
*.mars.com
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
multifunction.royalcanin.ch
deals.royalcanin.ch
multifunction.royalcanin.ch
my.royalcanin.ch
deals.royalcanin.ch
*.mars.com
adminvfu.royalcanin.com
deals.royalcanin.ch
vetservices.royal-canin.at
*.royalcanin.ch
www.royalcanin.ch
account.royalcanin.ch
check.royalcanin.ch
*.royalcanin.ch
my.royalcanin.ch
shop.royalcanin.ch
vetservices.royal-canin.at
adminvfu.royalcanin.com
deals.royalcanin.ch
shop.royalcanin.ch
*.mars.com
my.royalcanin.ch
deals.royalcanin.ch
multifunction.royalcanin.ch
adminvfu.royalcanin.com
aws-cf-rd19.mars-inc.com
*.royalcanin.ch
aws-cf-rd19.mars-inc.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
mail.royalcanin.ch
vetservices.royal-canin.at
mail.royalcanin.ch
my.royalcanin.ch
mail.royalcanin.ch
*.mars.com
*.mars.com
*.royalcanin.dk
aws-cf-www-royalcanin-com-rd01.mars-inc.com
deals.royalcanin.ch
share.royalcanin.ch
*.mars.com
deals.royalcanin.ch
adminvfu.royalcanin.com
share.royalcanin.ch
*.royalcanin.dk

Certificate

The complete raw certificate details for shop.royalcanin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh+ItdPX7uUsQtLUaJKo
Xy53/Q110VhUN4e8qdXhOuOlthUGgSsPy+ao/kZqyUMD7BlqH0EVe0ljciRBraiI
k/5xRKBRBah1hhurMKmitYz9zKJ8T+t95RwaAXzi3abRIDsTyWlib/m5hUtuuy24
r85ufzz+zzGEb9ZcNF36vrTsXSA00FS84n+UYcdf+8BiJNn7E4Rpg89lhsJB01FJ
NNpFOsB/1UDDl1s9/P0GUB2aAluP3QRAkf8WWauVBA2zJOOFnp0m4kODTxy2DkuK
DViWowesYDzV1cefsAjoI/175xJi1vQbSzO+DBOSKNgiOLobjDIdXMsm0Smg6Jtu
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24309612898381933909754731366628091328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Daellikon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH-020.3.922.194-6'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Royal Canin (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'shop.royalcanin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23495874730708613372280963212400617937501423811741637484237877518365661415441904409253178227823307994939315833874764303893186974369773132706511132797831275953635459624621092080506805987286466266184367243714811609332441836786021230914995236646822162431591096433902401904703305893997204922714637663548376150540528118079324886975884610985187934089379299356928228085532893531629405372426192880248632941943456661273919825162669351153315101984898676578346144642216204536364527759230832144980130799876287172629778037439119182618630886794801397237279270907815007162530161468105083113482443222169476660210416750218213687258709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.royalcanin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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