Investorreporting.citidirect.com

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 1f:00:ee:41:a4:4e:17:e4:1e:53:20:14:5b:3f:3f:28 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

As someone interested in digital certificates you will love EV SSL Certificates without the hessle, right? Easy, automated EV SSL Certificates for only € 99 ($ 121 or £ 87).


We have idenified some issues with this certificate:

  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Organization unit: Global Transaction Services
Address: 399 Park Avenue
Postal code: 10043
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:00:ee:41:a4:4e:17:e4:1e:53:20:14:5b:3f:3f:28
Serial Number (int): 41210900283498575231863274564969512744
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 1e:c3:ff:43:64:11:b3:ff:97:f8:ce:33:04:38:36:c4:31:ca:e0:41
Fingerprint (sha256): cb:b8:b5:e4:30:f9:3f:ca:aa:ba:5f:db:94:84:de:9b:49:7d:2d:81:5f:a3:0d:c3:8e:77:91:14:1e:cc:df:ca

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for the current certificate on Investorreporting.citidirect.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

investorreporting.citidirect.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIQHwDuQaROF+QeUyAUWz8/KDANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTUwOTI5MDAwMDAwWhcNMTcxMDEz MjM1OTU5WjCCASgxEzARBgsrBgEEAYI3PAIBAxMCVVMxGTAXBgsrBgEEAYI3PAIB AgwIRGVsYXdhcmUxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYD VQQFEwcyMTU0MjU0MQswCQYDVQQGEwJVUzEOMAwGA1UEEQwFMTAwNDMxETAPBgNV BAgMCE5ldyBZb3JrMREwDwYDVQQHDAhOZXcgWW9yazEYMBYGA1UECQwPMzk5IFBh cmsgQXZlbnVlMRcwFQYDVQQKDA5DaXRpZ3JvdXAgSW5jLjEkMCIGA1UECwwbR2xv YmFsIFRyYW5zYWN0aW9uIFNlcnZpY2VzMSkwJwYDVQQDDCBJbnZlc3RvcnJlcG9y dGluZy5jaXRpZGlyZWN0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANalEhGjlJzvO/m0zC7hZ2k+qGrihvXEqfN4O+1gF5FRECSutyEOoawnA3FU qhaDGtCuQjWsuAVHJVupkzAIolsws4Kn+NgR/CtAHw0Nt6e7tHokFg0jSsVo7epO 8+7F4e0jI5nCHeVwZme+PI+u2QUm4uwOkN6D+aYMShvNq0z5+CSg5v5QyIqEz5Uf 6ocs9pK3zojPogxmh8RfnTDSmZsXtjQJ+tdjIuNcamze09kglaD7qgHVKzhB9yJm uAeSn12wJw4VVD7gGXz8fToIe3Z+j6YRKxOY4zVsC70gQyJydOFfL2ZESPlHYk26 fvOIK+UKLgBd57ZRPaGlrZYFiJMCAwEAAaOCAvswggL3MCsGA1UdEQQkMCKCIGlu dmVzdG9ycmVwb3J0aW5nLmNpdGlkaXJlY3QuY29tMAkGA1UdEwQCMAAwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBmBgNVHSAE XzBdMFsGC2CGSAGG+EUBBxcGMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1j Yi5jb20vY3BzMCUGCCsGAQUFBwICMBkaF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBh MB8GA1UdIwQYMBaAFAFZq+fdOgtZpmRj1s8gB1fVkedqMCsGA1UdHwQkMCIwIKAe oByGGmh0dHA6Ly9zci5zeW1jYi5jb20vc3IuY3JsMFcGCCsGAQUFBwEBBEswSTAf BggrBgEFBQcwAYYTaHR0cDovL3NyLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0 cDovL3NyLnN5bWNiLmNvbS9zci5jcnQwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB ZwB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABUBczDV0AAAQD AEcwRQIgD7GjLNjzaUUtnq+wactf4iQGC+HAL9r0KhjgrKrxyFgCIQD0URBVHroR cHSsyyqiiuX6us5+S/PBxEZR1ufmCnVjAwB2AKS5CZC0GFgUh7sTosxncAo8NZgE +RvfuON3zQ7IDdwQAAABUBczDZEAAAQDAEcwRQIgHSILESxOgSilaWUEM2VSbZHF C1WKcvaPJZsM9TYrLcYCIQD970WxsBdzVjHtjXBNmv2YwyVlC/9JimhN8bUBxOH6 rQB1AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT/vEAAABUBczDaEAAAQD AEYwRAIgY0SFEssoCCyKC6GJ03edI6tORuY579e5y9AS+nFYhUsCIFMoUXV42pnL G9zkw9uZG/xSJsWCWo0bn8vvDv7EP0raMA0GCSqGSIb3DQEBCwUAA4IBAQAkaPx9 UUWuxILqpiidbmCTr694vLCzhPgJWue+CUu/Q55Wmy44gQzYvPgMyvAkRTZm5FNA /aecSD0Dw/u8RQwX0jQUDzXgP0I3zDYOkl0z+xfaF0qfnlLVMeEHwRIuJIYKElE/ 9sxUk38eDuNt6T9IuRJ69eGbed9Ai1mwxhmX4zFHou3Sz+4YZTjfC7i4fJGFtTw2 C+3nWINaosuXLecjBBGbeu3pIMDYq1wMl4x12V4cYQfKyCDOFwGDRAoUM8TG9jdO cgtag3F7CKSQWUgi7cUSPjQffzNSvePgGBUfDNqPbSAoe7aj1s9IrttGC/DgOuWA xXUEzZc1WFVO7Reg -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qUSEaOUnO87+bTMLuFn aT6oauKG9cSp83g77WAXkVEQJK63IQ6hrCcDcVSqFoMa0K5CNay4BUclW6mTMAii WzCzgqf42BH8K0AfDQ23p7u0eiQWDSNKxWjt6k7z7sXh7SMjmcId5XBmZ748j67Z BSbi7A6Q3oP5pgxKG82rTPn4JKDm/lDIioTPlR/qhyz2krfOiM+iDGaHxF+dMNKZ mxe2NAn612Mi41xqbN7T2SCVoPuqAdUrOEH3Ima4B5KfXbAnDhVUPuAZfPx9Ogh7 dn6PphErE5jjNWwLvSBDInJ04V8vZkRI+UdiTbp+84gr5QouAF3ntlE9oaWtlgWI kwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded