portal.citidirect.com

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 34:4f:b5:58:30:7c:40:21:1d:bc:60:a7:6d:5e:a7:b3 was issued on by Symantec Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

As someone interested in digital certificates you will love EV SSL Certificates without the hessle, right? Easy, automated EV SSL Certificates for only € 99 ($ 121 or £ 87).


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Organization unit: WHG
Address: 399 Park Avenue
Postal code: 10043
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 34:4f:b5:58:30:7c:40:21:1d:bc:60:a7:6d:5e:a7:b3
Serial Number (int): 69533725335861929096657248230030878643
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 0d:95:db:15:e1:74:89:93:c1:f4:26:ce:2a:28:7f:c3:df:d2:2d:9f
Fingerprint (sha256): 91:0c:d1:45:b4:0e:ee:17:ee:ff:48:9f:dc:bb:9b:0c:a5:24:a1:9a:d2:10:dc:02:96:5e:57:85:4f:45:83:6b

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for the current certificate on portal.citidirect.com
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citidirectbeportalnam.citidirect.com
citidirectbeportalemea.citidirect.com
citidirectbeportalasia.citidirect.com
host1.portal2.citidirect.com
portal.citidirect.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgIQNE+1WDB8QCEdvGCnbV6nszANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTUxMjAxMDAwMDAwWhcNMTgwMTMw MjM1OTU5WjCCAQUxEzARBgsrBgEEAYI3PAIBAxMCVVMxGTAXBgsrBgEEAYI3PAIB AgwIRGVsYXdhcmUxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYD VQQFEwcyMTU0MjU0MQswCQYDVQQGEwJVUzEOMAwGA1UEEQwFMTAwNDMxETAPBgNV BAgMCE5ldyBZb3JrMREwDwYDVQQHDAhOZXcgWW9yazEYMBYGA1UECQwPMzk5IFBh cmsgQXZlbnVlMRcwFQYDVQQKDA5DaXRpZ3JvdXAgSW5jLjEMMAoGA1UECwwDV0hH MR4wHAYDVQQDDBVwb3J0YWwuY2l0aWRpcmVjdC5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDoC8+soylZrWFDBCpLKo1qB+A397pmVIT1B1hMp8LO pm6boCZqvCAH84ZcZX2MBwTZgdDYvbPZGwiKl7HqU+SQYwykIwLkueVKwM/EVSrV a9JX5IO6UvN6L7WKLW6RgFla+JLt6rApma83ADs5zIb2C15/X3Sm3XDmWGgtLixu 4fvIC83KY4oXxU3xiP3pgLW9iji/YD50WjfuN+kfu7iyQyeHnKwuuvCaJSgx54Lb YEKNCZrST1Hdaz1Z66P2ooPAaViNRSw/XHBJ7kXRcN69eroRN4EvDoWPDIEaj1PZ VrC3/kLO7BW2Lm6vDXm4zASuNl1jzT44FCdtFB6vRN5LAgMBAAGjggIZMIICFTCB tAYDVR0RBIGsMIGpgiRjaXRpZGlyZWN0YmVwb3J0YWxuYW0uY2l0aWRpcmVjdC5j b22CJWNpdGlkaXJlY3RiZXBvcnRhbGVtZWEuY2l0aWRpcmVjdC5jb22CJWNpdGlk aXJlY3RiZXBvcnRhbGFzaWEuY2l0aWRpcmVjdC5jb22CHGhvc3QxLnBvcnRhbDIu Y2l0aWRpcmVjdC5jb22CFXBvcnRhbC5jaXRpZGlyZWN0LmNvbTAJBgNVHRMEAjAA MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw ZgYDVR0gBF8wXTBbBgtghkgBhvhFAQcXBjBMMCMGCCsGAQUFBwIBFhdodHRwczov L2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2Iu Y29tL3JwYTAfBgNVHSMEGDAWgBQBWavn3ToLWaZkY9bPIAdX1ZHnajArBgNVHR8E JDAiMCCgHqAchhpodHRwOi8vc3Iuc3ltY2IuY29tL3NyLmNybDBXBggrBgEFBQcB AQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zci5zeW1jZC5jb20wJgYIKwYBBQUH MAKGGmh0dHA6Ly9zci5zeW1jYi5jb20vc3IuY3J0MBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDAuVZpxlr6hLWZuwVjyuUj8ms8y7T14yVS NZWA2O9N9BfK0IdGnC7bD6AXLl0RF2E6HSMskACegmgPsbmdv/Y3FBcxSnMpax04 gNSHTa115EF0WfyPqQJiht6l4mL2dEaLh2rlRGmzKLqXF/Xd4zOtVz3bzKVutPQf x4S73tBquDzgNlRpsPGj8x2JtxZibbl0CwB2R6P//RbRn0xZ2oyuiVOZXUhpPWs0 bvWQjuBtcSigxbJGkFGxEag3+ZHTl+dt5eEvlPAXk6m1NSHEeu7TSAV2FSYAsz/6 vn9VlJ7OTa9uIRBWmALM7Xwj+N0HZsd8hI/eyK0/7x/GCIbKwrmp -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AvPrKMpWa1hQwQqSyqN agfgN/e6ZlSE9QdYTKfCzqZum6AmarwgB/OGXGV9jAcE2YHQ2L2z2RsIipex6lPk kGMMpCMC5LnlSsDPxFUq1WvSV+SDulLzei+1ii1ukYBZWviS7eqwKZmvNwA7OcyG 9gtef190pt1w5lhoLS4sbuH7yAvNymOKF8VN8Yj96YC1vYo4v2A+dFo37jfpH7u4 skMnh5ysLrrwmiUoMeeC22BCjQma0k9R3Ws9Weuj9qKDwGlYjUUsP1xwSe5F0XDe vXq6ETeBLw6FjwyBGo9T2Vawt/5CzuwVti5urw15uMwErjZdY80+OBQnbRQer0Te SwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded