www.tisto.pl

Issued by Shoper® SSL

About this certificate

This digital certificate with serial number 64:a2:55:30:f0:e9:ed:52:0f:bc:87:ff:bf:94:8c:7f was issued on by Dreamcommerce S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Certificate Subject

CN=www.tisto.pl,C=PL

Dreamcommerce S.A.

Organization: Dreamcommerce S.A.
Organization unit: Dreamcommerce S.A.
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 64:a2:55:30:f0:e9:ed:52:0f:bc:87:ff:bf:94:8c:7f
Serial Number (int): 133765679551901543230593296420281027711
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ed:3d:80:2f:d9:33:df:f3:0b:43:c2:51:08:fd:50:c8:4e:78:c8:a6
AuthorityKeyId: 64:d9:7c:e6:02:06:1b:45:0b:3d:75:58:98:4a:46:07:60:35:9d:c1

Fingerprint (sha1): fa:9a:d5:18:7a:65:a2:d5:19:89:2c:56:d2:f0:ec:3e:80:53:0d:a9
Fingerprint (sha256): 48:4d:e7:00:24:45:5f:ea:97:46:07:53:cb:43:e3:e9:9b:06:55:57:4c:e0:63:03:f6:ff:51:32:1c:b9:3d:cb

Issuing Certificate URL: http://repository.certum.pl/shopersslsha2.cer

Revocation information

OCSP Server: http://shoperssl.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/shopersslsha2.crl

Check the revocation status for certificate www.tisto.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tisto.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tisto.pl
tisto.pl

Other certificates including the domain name tisto.pl

(limited to 100 certificates)
opinie.tisto.pl
info.tisto.pl
newsletter.tisto.pl
info.tisto.pl
www.tisto.pl
newsletter.tisto.pl
opinie.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
info.tisto.pl
opinie.tisto.pl
info.tisto.pl
info.tisto.pl
info.tisto.pl
www.tisto.pl
domowetekstylia.nstrefa.pl
opinie.tisto.pl
info.tisto.pl
newsletter.tisto.pl
opinie.tisto.pl
www.tisto.pl
info.tisto.pl
info.tisto.pl
info.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
info.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
info.tisto.pl
opinie.tisto.pl
www.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
info.tisto.pl
info.tisto.pl
newsletter.tisto.pl
info.tisto.pl
www.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
www.tisto.pl
newsletter.tisto.pl
www.tisto.pl
domowetekstylia.nstrefa.pl
info.tisto.pl
opinie.tisto.pl

Certificate

The complete raw certificate details for www.tisto.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5g5uhWa6e1LKwEedcSu
4xHnvZBekdxz/PqcQkz8CdJKAeNN12xnn6zLrrbGcd3urR+Mqu0hHKN9Af9BezoQ
Hhhgoz9BAEh3NJ2ZWQgYJ2n8ioWQ1bMr8Z0EZ6oVBwPQ3199947pUywgwxqOIP4d
G8gmnWFY1rZMi9NQVwErweC0YwD3TP9aI47xMhsnVrF9Wj5ZhFHUlzM0y7FZs1t+
02rwz/8xnqrCFcl7lDAhOAKtO/VoT0YO3xwdC8+FPYRV4v96e+z6ocO7BId2Vnv9
WLfXH42cvPL2PsAjkPVTfYeZNUcdks0hoFnhbo+Fvmvq/URFvyN1c8yZCIbhzeag
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133765679551901543230593296420281027711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dreamcommerce S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dreamcommerce S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shoper® SSL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-23 13:50:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 13:50:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.tisto.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26206394317608191494930526879893162650486382381518006559339449630869589165776671785711457489419529510913627535108450781669924608101523517295119316659402563514637654315626801222412644611003572025796428976217416959097841353055126614850124852225453783855928029884673057214865278354973933051138757549884957174920432627657191015919243046502903448416131575266563399301350693769492024597333504883727542035821214701270110713198797108352378471083772975508353540376450310386890079566838226495715590647398186066538845666303903005089170970510887880023828872529684227811207966868481898187460089519182991742888790511529336970322159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/shopersslsha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://shoperssl.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/shopersslsha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 64d97ce602061b450b3d7558984a460760359dc1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed3d802fd933dff30b43c25108fd50c84e78c8a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.9.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [85 115 97 103 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 116 114 105 99 116 108 121 32 115 117 98 106 101 99 116 101 100 32 116 111 32 116 104 101 32 67 69 82 84 85 77 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 105 110 99 111 114 112 111 114 97 116 101 100 32 98 121 32 114 101 102 101 114 101 110 99 101 32 104 101 114 101 105 110 32 97 110 100 32 105 110 32 116 104 101 32 114 101 112 111 115 105 116 111 114 121 32 97 116 32 104 116 116 112 115 58 47 47 119 119 119 46 99 101 114 116 117 109 46 112 108 47 114 101 112 111 115 105 116 111 114 121 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tisto.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisto.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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