logs-canada.shopify.io

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:90:fd:ad:1e:70:dd:71:1b:52:78:81:d6:2c:19:be:84 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=logs-canada.shopify.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f8:90:fd:ad:1e:70:dd:71:1b:52:78:81:d6:2c:19:be:84
Serial Number (int): 345919610785440352410881223831078986956420
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:7c:72:16:bc:ae:be:c2:cf:65:f4:8e:63:93:8c:c2:6a:e6:49:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:79:0e:e0:ff:af:ca:24:1d:dc:25:54:af:6f:9f:47:7e:fb:41:fb
Fingerprint (sha256): 2d:be:26:e5:58:e3:42:d1:d2:6b:d8:38:61:73:6d:6e:e3:7b:e6:8a:95:29:bf:ba:fb:ab:86:7d:17:c1:13:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate logs-canada.shopify.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logs-canada.shopify.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logs-canada-na-ne1-c-1.shopifycloud.com
logs-canada.shopify.io
sh-canada.splunk.shopifysvc.com
sh-splunk-na-ne1-c-1.shopifycloud.com

Other certificates including the domain name shopify.io

(limited to 100 certificates)
shopify-slack-bot-staging.shopify.io
www.metacdn.com
notary.shopifycloud.com
shard2.notary-shops.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
rare-emojis.shopify.io
disco-time.shopify.io
p2.shared.global.fastly.net
sheriff.shopify.io
cinder.shopify.io
shard6.notary-shops.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
gamedays.shopify.io
plus-website-staging5.shopify.io
wedge-viewer.shopifycloud.com
captain-crunch.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
p2.shared.global.fastly.net
bourgeois.shopifycloud.com
sni.cloudflaressl.com
hive-logs-proxy.shopify.io
traffic.shopify.io
observe.shopifycloud.com
logs-edge-us-e4.shopifycloud.com
p2.shared.global.fastly.net
traffic.shopify.io
newrecruits.shopify.io
traffic.shopify.io
os-staging.shopify.io
wedge-viewer.shopifycloud.com
trust-rules-engine-sandbox-staging.shopify.io
reindex-coordinator.shopify.io
storybook.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
traffic.shopify.io
horton.shopify.io
app-orderprinter-staging.shopify.io
adequate-desk.shopify.io
blog.shopify.io
patdown.shopifycloud.com
bourgeois.shopifycloud.com
angry-owl.shopify.io
sauron.shopify.io
books.shopify.io
translations.shopify.io
traffic.shopify.io
octobox.shopify.io
shopify.map.fastly.net
globe.shopify.io
genesis.shopifycloud.com
affirm.plusplus.app
p2.shared.global.fastly.net
bogus-marketplace-app.shopify.io
themes.shopify.io
melody-staging2.shopify.io
twittertest.plusplus.app
devvy.shopify.io
identity-graph-api.shopify.io
cronograma-staging.shopify.io
linkpop-staging.shopify.io
logs-svc-us-e4.shopifycloud.com
observability-team.docs.shopify.io
hive-logs-proxy-staging.shopify.io
terraform-private-registry.shopify.io
notary.shopify.io
foo.tunnel.shopify.io
metricflow.shopify.io
tasker.shopify.io
alittlesomethingfrom.shopify.io
shard3.notary-shops.shopify.io
athena-flex-production.shopifycloud.com
sbomasum-staging.shopify.io
clouddo-bot.shopify.io
p2.shared.global.fastly.net
wheeljack.shopify.io
scaling.shopify.io
docs.shopify.io
affirm.plusplus.app
spy-v2-staging.shopify.io
kepler.shopify.io
sni.cloudflaressl.com
traffic.shopify.io
superset-worker-staging-monitor.shopify.io
shard4.notary-shops.shopify.io
themes.shopify.io
authme.shopify.io
eventmarketing.shopify.io
usage-service-api.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
accio-staging.shopifycloud.com
russbot.shopifycloud.com
shard2.notary-shops.shopify.io
adequate-desk.shopifycloud.com
www.metacdn.com
*.docs.shopify.io
airbnb.plusplus.co
p2.shared.global.fastly.net
rare-emojis-staging.shopify.io
logs-canada.shopify.io
octobox.shopify.io

Certificate

The complete raw certificate details for logs-canada.shopify.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncZ5arcUoLQFjecUt+6f
sGJQo6RErln71hNHHEvgcQIG1FBdhcirm3UafNg/7DIYorCZDs9l1xUjW70Xi0eU
fPHFzKkPO0Cz9uGcD3q4RxC1QUBjOQO7+0fRin0lgNRKEZoHlWb7uj6mZNDGBWgf
6uWQL2FQNg8ly32pwLuPlc2UGdB2KCyODM8bb9yIAaMcTtL+e0SMFTSgbYHbQVKy
SEaMXLPTO+yFcgPG8eRakU2We+DJxzJWjBPesvawPANV83IY17vHXDPieaT/S9EG
ussT/aFweyZ7l4PNXlkEpTZ48KTfgnNFxk3yzF6Sir7sSxugT9dyZa5yaZrieHIU
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345919610785440352410881223831078986956420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 23:27:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 23:27:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logs-canada.shopify.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19917285197118506320998644666467615991210725480662232509104278636335834214822653733114553089250771861577569464277642616430125268523840967729632122362063061146691915512371654475972889199377724718045162155546512352397955436472181219054524328242168678320756966743927718079710630201089212997930701337645132573353464590335087233378091431992910864038042938377268298821603098174685584478193171950155495639762206444269602874770925513358303090447364430359466037795375362946160865351786135661760260426840630737896718587357104971754357197909246565066955358183789834044743898226611776156991089753400695008936003625422059467838707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d97c7216bcaebec2cf65f48e63938cc26ae6492e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs-canada-na-ne1-c-1.shopifycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs-canada.shopify.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh-canada.splunk.shopifysvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh-splunk-na-ne1-c-1.shopifycloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eaba6d9db0000040300463044022028e0380e9f86f74a2283d7fad13bb6b72a6eba0a5cfde908f29eb5386028a90702202a2dbbcfa9b02f5505f29e50771831418109dada3d1a62a4ad584e4c464c1d480077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018eaba6d9ef0000040300483046022100b701ca57595097435b7b277c904e24af1516efff206a505b627469d4a14eea71022100ca7774f38d61e77f82fb28599de538306ec2521fcfab803ac06b9f607512707e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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