royal-canin.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number ed:4c:f6:a1:97:b3:25:ce:fc:63:46:74:e8:96:f1:2f was issued on by Sectigo Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=royal-canin.de,OU=Domain Control Validated

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ed:4c:f6:a1:97:b3:25:ce:fc:63:46:74:e8:96:f1:2f
Serial Number (int): 315426651837719184635962961140794192175
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 50:69:f9:78:2d:db:40:13:94:c7:d8:ea:3c:11:75:da:28:49:4f:96
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 72:83:22:40:6e:21:5a:b1:ae:63:de:ef:ba:ff:53:61:74:25:78:62
Fingerprint (sha256): 93:d9:a0:01:1f:f8:c1:1c:8b:d1:89:51:56:87:5e:68:cc:bb:47:72:b6:c0:4c:de:f7:9b:93:62:5e:46:13:3e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate royal-canin.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for royal-canin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

royal-canin.de
*.royal-canin.at
*.royal-canin.de
royal-canin.at

Other certificates including the domain name royal-canin.de

(limited to 100 certificates)
*.mars.com
aws-cf-rd25.mars-inc.com
incapsula.com
*.royalcanin.dk
*.royalcanin.dk
*.mars.com
lambda-redirect20.mars-inc.com
vetfollowup.royalcanin.com.au
multifunction.royal-canin.de
incapsula.com
royal-canin.de
incapsula.com
incapsula.com
*.royalcanin.dk
*.mars.com
multifunction.royal-canin.de
*.mars.com
vetservices.royal-canin.at
vetservices.royalcanin.be
aws-cf-rd25.mars-inc.com
www.royal-canin.de
vetservices.royalcanin.ch
*.royalcanin.dk
*.mars.com
*.mars.com
care.royal-canin.de
vetservices.royal-canin.at
*.mars.com
*.royalcanin.dk
*.mars.com
*.royal-canin.de
*.mars.com
vetservices.royalcanin.be
incapsula.com
*.mars.com
www.royal-canin.de
account.royal-canin.de
aws-cf-rd25.mars-inc.com
*.mars.com
www.royal-canin.de
*.mars.com
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
wfprwpa.rcs.it
www.royal-canin.de
www.vet.royal-canin.de
multifunction.royal-canin.de
*.mars.com
adminvfu.royalcanin.com
*.mars.com
www.royal-canin.de
vetservices.royal-canin.at
multifunction.royal-canin.de
onefeed.royal-canin.de
www.royal-canin.de
incapsula.com
onefeed.royal-canin.de
dlmessenger-eng.dealogic.com
vetservices.royal-canin.at
aws-cf-rd25.mars-inc.com
adminvfu.royalcanin.com
www.royal-canin.de
*.mars.com
*.mars.com
adminvfu.royalcanin.com
aws-cf-rd19.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd19.mars-inc.com
www.royal-canin.de
*.mars.com
vetservices.royal-canin.at
*.mars.com
aws-cf-rd25.mars-inc.com
incapsula.com
vetservices.royal-canin.at
*.mars.com
wfprwpa.rcs.it
royal-canin.de
*.royal-canin.de
*.royalcanin.dk
*.mars.com
www.royal-canin.de
aws-cf-rd25.mars-inc.com
*.mars.com
*.royalcanin.dk
onefeed.royal-canin.de
aws-cf-www-royalcanin-com-rd01.mars-inc.com
www.royal-canin.de
*.mars.com
adminvfu.royalcanin.com
*.royalcanin.dk
incapsula.com
aws-cf-rd19.mars-inc.com
gutschein.royal-canin.de
*.mars.com
aws-cf-rd25.mars-inc.com
*.mars.com
*.royal-canin.de
vetservices.royal-canin.at
multifunction.royal-canin.de

Certificate

The complete raw certificate details for royal-canin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMhQ3RZeX58NG2cjbuu7
iGBylmbi+vE/uTYh1U0t8h81frqm4XCjqfT7Qj2i7oXDV/9XtrJoO1sfxLL37H3B
Bb5UhvsjDX/GxkqSObfdceV5pqHOVXmoQ33Wcbcbtwd9QLS2GBgGC3B0HGuM7YK3
8vF/WCZlPB9DTtvKak1+2xdNopSSN3S0k5qUTskJYv+VS7YZPg0XKGCHZmf4v+l+
pk05i5YyAdkt7mvPBbsHvwoPU0to3nDuWMkyc3OhdFmbNGhJ1ncbMOVppxRF9HNF
YGZIra9fDMF4TNwzqVS9kD4DwzEtleuPsP2Igu60SCW/fCkUPkfW52qsH/+DF8yj
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315426651837719184635962961140794192175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'royal-canin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25346440432007327769686860112196404850732696945413276606693050615954280819458715436539767242424586671558348198281493813259049521607198527035204983805092371931754038034788262799019588725125975741897807447282397131592069966464579465198197814743004928501563007299147782734868201466455923982974804163105906206945012710815636243803270859170627642604489521943326194621506395634580783721139760989055751823055997316573236543899956723196390854214492863618706031479143804694278735829782860949416978017220665590869974541837786723362235551663853713647237901921822834672168596488576570820107926423885405403191284203281487443567573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5069f9782ddb401394c7d8ea3c1175da28494f96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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