*.ist.com.gr

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 7c:1d:8e:87:d4:31:16:2c:ec:70:60:bd:a3:43:b5:2c was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.ist.com.gr

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 7c:1d:8e:87:d4:31:16:2c:ec:70:60:bd:a3:43:b5:2c
Serial Number (int): 164977738949862900372228093039001974060
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 96:8f:f7:e3:b5:57:93:97:5b:ed:11:1e:db:c4:41:20:01:61:2a:25
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): dd:db:46:78:1e:da:f5:dd:84:30:fe:af:9d:34:b5:b3:ed:b4:f1:08
Fingerprint (sha256): 9e:e7:68:66:a4:96:e3:6c:d7:4c:80:e8:73:48:d4:2e:b1:34:3e:6c:08:a1:4b:dd:d9:02:dd:b1:bf:d2:38:fd

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.ist.com.gr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ist.com.gr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ist.com.gr
ist.com.gr

Other certificates including the domain name ist.com.gr

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.ist.com.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164977738949862900372228093039001974060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ist.com.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 911918972449706885163023768659959604371219103187766724078593294457316065260172897651775886781094594490527363559586370447859023865489347562269146902015212570114456708036406811869152769593970232562327975208697390534027130494592580088402898375693851266376458721583126626662609452541281504286531427970249534782669300887009204793054797577321468666541620282398889595396311843668744822189724632031119791382867129110135534964239131751498086260846943139541506545178901307175438098432156608404378403934479654015254192718359549236747320232043114397756935255431132418231842171004481585496165915585447046306457498559239362111352404377845091371896975454116781480177415127398689998775252921282247419065724567612307567239930368350560108142116531788537863776883421368317841158102687125353056029443451427916085970040971731274216711225759046380544312594918487626756095485897738438220014987355671280438070409652759398555997163016548481698680203899797887592378112121901596069833415522619314375919958987279263776416791198309153995098755069933471069236586193034733406802526176819717054009185975991781980936503006995337792312062783530903499334332443250577197793033806623541092216523040515086898320057928407497846831928427686945720574709943187087907793136319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							968ff7e3b55793975bed111edbc4412001612a25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ist.com.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist.com.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018f961c58be000004030046304402206bfbafaccd4b9abee10beaf87e22e15cab5d0cb6d72daf8094ad99d7d1ee8e9902205d2d5486c785f7fec5eb81535a2075adb48dd24a8ef31cd9acf1ff350bdeef46007500a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018f961c589c0000040300463044022033051174802cb7a156f2ad7069cb4da545e04f329d8ad8e2b616679982ec9f76022051b73721b2305484bb20669a6fd6ae47a743560f8d6c14b6b8736ee638641cf90077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018f961c589b0000040300483046022100ba874e9a0ef4e69e0450895c1538c044cbd88cf6d7414b8b3a926fae32b40ea3022100d837ecd70b85e217d9f744981f57a969354540262557272c44d9191f35a6086b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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