logs.shopify.io

Issued by R3

About this certificate

This digital certificate with serial number 03:c9:ca:1d:ec:66:a3:1f:f5:3b:ad:4a:8c:a0:de:8e:f3:ea was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=logs.shopify.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:ca:1d:ec:66:a3:1f:f5:3b:ad:4a:8c:a0:de:8e:f3:ea
Serial Number (int): 330002272972927245341968893948704251114474
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:53:fb:c4:04:54:87:9e:ad:28:1a:be:49:52:d1:73:4f:00:67:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c3:b7:74:19:46:e0:b7:51:16:51:14:48:93:4a:78:06:fe:b4:0a:7f
Fingerprint (sha256): 32:74:6e:f7:64:cb:74:97:45:c0:7e:eb:13:5f:76:0c:0b:5e:2f:b1:20:7e:51:4b:73:76:89:7d:a6:4e:99:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate logs.shopify.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logs.shopify.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logs-us-east4-a-1.shopifycloud.com
logs.shopify.io
sh-splunk-us-east4-a-1.shopifycloud.com
sh.splunk.shopifysvc.com

Other certificates including the domain name shopify.io

(limited to 100 certificates)
shopify-slack-bot-staging.shopify.io
www.metacdn.com
cambridge.shopify.io
notary.shopifycloud.com
shard2.notary-shops.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
rare-emojis.shopify.io
disco-time.shopify.io
psn.shopify.io
p2.shared.global.fastly.net
sheriff.shopify.io
cinder.shopify.io
shard6.notary-shops.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
trillion.shopify.io
gamedays.shopify.io
plus-website-staging5.shopify.io
wedge-viewer.shopifycloud.com
captain-crunch.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
p2.shared.global.fastly.net
bourgeois.shopifycloud.com
sni.cloudflaressl.com
hive-logs-proxy.shopify.io
traffic.shopify.io
observe.shopifycloud.com
logs-edge-us-e4.shopifycloud.com
p2.shared.global.fastly.net
traffic.shopify.io
newrecruits.shopify.io
traffic.shopify.io
os-staging.shopify.io
wedge-viewer.shopifycloud.com
trust-rules-engine-sandbox-staging.shopify.io
reindex-coordinator.shopify.io
storybook.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
traffic.shopify.io
web.storybook.shopify.io
horton.shopify.io
app-orderprinter-staging.shopify.io
adequate-desk.shopify.io
blog.shopify.io
patdown.shopifycloud.com
bourgeois.shopifycloud.com
angry-owl.shopify.io
sauron.shopify.io
books.shopify.io
translations.shopify.io
customer-behaviour-api.shopify.io
traffic.shopify.io
octobox.shopify.io
shopify.map.fastly.net
globe.shopify.io
genesis.shopifycloud.com
affirm.plusplus.app
p2.shared.global.fastly.net
bogus-marketplace-app.shopify.io
themes.shopify.io
melody-staging2.shopify.io
twittertest.plusplus.app
devvy.shopify.io
identity-graph-api.shopify.io
cronograma-staging.shopify.io
linkpop-staging.shopify.io
mobile-staging.shopify.io
logs-svc-us-e4.shopifycloud.com
observability-team.docs.shopify.io
hive-logs-proxy-staging.shopify.io
terraform-private-registry.shopify.io
notary.shopify.io
foo.tunnel.shopify.io
metricflow.shopify.io
cluster-lifecycle-staging2.shopify.io
tasker.shopify.io
alittlesomethingfrom.shopify.io
shard3.notary-shops.shopify.io
athena-flex-production.shopifycloud.com
sbomasum-staging.shopify.io
clouddo-bot.shopify.io
p2.shared.global.fastly.net
wheeljack.shopify.io
scaling.shopify.io
docs.shopify.io
affirm.plusplus.app
spy-v2-staging.shopify.io
kepler.shopify.io
sni.cloudflaressl.com
traffic.shopify.io
superset-worker-staging-monitor.shopify.io
shard4.notary-shops.shopify.io
themes.shopify.io
authme.shopify.io
eventmarketing.shopify.io
usage-service-api.shopify.io
dns-vetting1-mims-pawel.map.fastly.net
accio-staging.shopifycloud.com
russbot.shopifycloud.com
shard2.notary-shops.shopify.io
adequate-desk.shopifycloud.com

Certificate

The complete raw certificate details for logs.shopify.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aQUsPe84ks68z1DuUSY
U1Z2Vl8bt52/jHhTe36cKl9yoSwvSytyuntve0nLI0uZjeJ16S22ye6vQTtSz4KO
0GPzG3BrM4gppvFIXDqCfbTkaDAFELOFOzV/gY08FNqpd1XjXHGUkH37Idlv4v9I
JWzfy89JQluuDhl8tWRJKdRfr8d4NVi5vD2r3jlxGQpwfzXrUSC1GfAeL63PZvHp
kWouyAVU3Iio8HX1tBUy303mkpnv86CP1PKtB1IBHx6d1JguefcVr9fw/CirICX0
Vt+loIk/mY8T+l0YSHHybcQ4zoBcPHDta951n7gWcVa56jbi/rZW36C4ToWQEKn4
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330002272972927245341968893948704251114474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 23:55:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 23:55:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logs.shopify.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28484529887929480488304620918280022235757003037380269354166078276397823283260944939390860320575736479996967342105111027303491165610470748722135888848593086844569486495405488789922735563562348504261715745277778200565540348207445336932642288924693386316068659553458447693354870494976712654034314512182495272183097588068725758987369074304162158799910353023694310206783102234457854439790709714233879303817971340860796017050855833702203863678961941991807214905608122446123234232754497295750458248166673528396671443490493443149289566397039210084396345249784000770198571128556496625904210171534864590362477302757522389203101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6353fbc40454879ead281abe4952d1734f0067bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs-us-east4-a-1.shopifycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs.shopify.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh-splunk-us-east4-a-1.shopifycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh.splunk.shopifysvc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00740048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7be948fb000004030045304302201d61fffd2b57a44e1073e3e65be1dcaf2812b1462863b4456ff21726d40aacd1021f1e2dd45e93211780f10502023e4dd23f5454fde6f3907fbd1142746afb1c9b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d7be9494d000004030047304502201681ace1d1cabdc8b980e84f828f363e3f4b9ccd1916a1e3a3fc69d3ae193faa022100fc75a50853e6c57214591d9ba46dec390b09935133809a6581c5805dabbfc1d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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