www.tisto.pl

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:31:da:d5:79:59:6c:f6:b9:ee:68:da:ed:89:70:50:08 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tisto.pl,OU=Domain Control Validated,C=PL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:31:da:d5:79:59:6c:f6:b9:ee:68:da:ed:89:70:50:08
Serial Number (int): 1492204447370591312894119344684169172111368
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: e2:db:96:52:d5:f8:13:94:44:77:a6:2a:0b:c6:90:83:35:f0:2c:ce
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): ce:89:16:db:29:7d:a5:1f:12:5e:91:5d:79:07:71:a1:b4:57:df:9e
Fingerprint (sha256): 94:c8:d7:3e:47:e6:a6:32:ab:aa:23:3b:ee:92:83:6d:77:d0:a2:98:b8:1a:2e:ac:0a:1e:10:59:d6:28:eb:ff

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.tisto.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tisto.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tisto.pl
tisto.pl

Other certificates including the domain name tisto.pl

(limited to 100 certificates)
opinie.tisto.pl
info.tisto.pl
newsletter.tisto.pl
info.tisto.pl
www.tisto.pl
newsletter.tisto.pl
opinie.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
info.tisto.pl
opinie.tisto.pl
info.tisto.pl
info.tisto.pl
info.tisto.pl
www.tisto.pl
domowetekstylia.nstrefa.pl
opinie.tisto.pl
info.tisto.pl
newsletter.tisto.pl
opinie.tisto.pl
www.tisto.pl
info.tisto.pl
info.tisto.pl
info.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
info.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
info.tisto.pl
opinie.tisto.pl
www.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
info.tisto.pl
info.tisto.pl
newsletter.tisto.pl
info.tisto.pl
www.tisto.pl
opinie.tisto.pl
opinie.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
newsletter.tisto.pl
www.tisto.pl
newsletter.tisto.pl
www.tisto.pl
domowetekstylia.nstrefa.pl
info.tisto.pl
opinie.tisto.pl

Certificate

The complete raw certificate details for www.tisto.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492204447370591312894119344684169172111368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-18 03:08:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-18 03:08:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tisto.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809369312128685927746792679151075885611156190574059181566396335629011271374206436941713163461069229955985752745476170044871527767431202342979091064870167003157058119243716671544288504292092296560400234026505016134320079541788517754315775676716905576692621395649983144303832349358583447230723593488356168328497818918952571044871120746294386582858655870034503531863475659936304216451021052891398802208160606770769204786573996392483397999231553792969549877620428130872521770971358846490204049923017779084185337743702894730795690673544762939757694032463137259717308833162874475606479364247020744691055978099135111513073804654928129475870091661400070071810703346024539094475514578437383594786474959342726989023110256978797048157587910626494951418234865130588458405223461476259520116334841891742289005334959263286445199224082591764757399300192519645079676629932960413474938435733299777602661112340648032963429375129971432598129968177185285207084811602613605260300889370164438949393660661225375820147000716269885970354158703084453799144745944422084596259976594676565347242443830626633329854803618621103499825491890054090504226983625626341141402023324506009787151198656631800541650798331380648057982683514591662512344623657064418443428352231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tisto.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisto.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2db9652d5f813944477a62a0bc6908335f02cce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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