qual2.citifinancial-sf.ca

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate


This digital certificate with serial number 7d:69:2a:8e:34:97:2e:01:26:af:4e:79:f7:88:48:dc was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Address: 399 Park Avenue
Postal code: 10043
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Postal code: 10043
State / Province: New York
Locality: New York
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:69:2a:8e:34:97:2e:01:26:af:4e:79:f7:88:48:dc
Serial Number (int): 166699553771139056969229570353981311196
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 98:2a:7d:66:c5:31:e3:3b:21:19:a8:15:df:f8:ea:bd:0b:1f:6e:7c
Fingerprint (sha256): 52:6d:f3:1d:fe:32:0e:40:02:78:3b:74:93:9d:5c:3f:00:57:b4:13:02:e3:60:4f:7d:07:cd:9a:fd:d4:b6:21

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for the current certificate on qual2.citifinancial-sf.ca
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

qual2.citifinancial-sf.ca

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIQfWkqjjSXLgEmr05594hI3DANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTUwODA3MDAwMDAwWhcNMTcwODA2 MjM1OTU5WjCB+zETMBEGCysGAQQBgjc8AgEDEwJVUzEZMBcGCysGAQQBgjc8AgEC DAhEZWxhd2FyZTEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xEDAOBgNV BAUTBzIxNTQyNTQxCzAJBgNVBAYTAlVTMQ4wDAYDVQQRDAUxMDA0MzERMA8GA1UE CAwITmV3IFlvcmsxETAPBgNVBAcMCE5ldyBZb3JrMRgwFgYDVQQJDA8zOTkgUGFy ayBBdmVudWUxFzAVBgNVBAoMDkNpdGlncm91cCBJbmMuMSIwIAYDVQQDDBlxdWFs Mi5jaXRpZmluYW5jaWFsLXNmLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzl4XFkmWmov3E9Wsp/AK1+nZDrhbYTN8l8tAHgj33+6MDmCvL/vHNDcA AhpQPILIEy0gryfv+KM416J6bi7ZH7VyNBut/LxyxMmmcCZvVwMvKb+/35XMS0Pg TJCbJj3aZXurdr735+0Q0KY41Jw/tVdtmkJzIxrdGT3PeQFxmlbCbMCQYX52V+6x p1/8kSDlyM6fpKB4kjXcv2/oGVvkKo7jWVjaqZcpTW01ThBIXHc9o5tAZTIc4Iwv E4ULkGnLR9R6BOY3GzIntK9DcTuNp0GvuUxcnUi9rF99nEuy8fOvFWkVK4EHjVDC fyzAbj7I3+33mdD9nZvPtTdcvG5UvwIDAQABo4IC9DCCAvAwJAYDVR0RBB0wG4IZ cXVhbDIuY2l0aWZpbmFuY2lhbC1zZi5jYTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZgYDVR0gBF8wXTBb BgtghkgBhvhFAQcXBjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29t L2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNV HSMEGDAWgBQBWavn3ToLWaZkY9bPIAdX1ZHnajArBgNVHR8EJDAiMCCgHqAchhpo dHRwOi8vc3Iuc3ltY2IuY29tL3NyLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYB BQUHMAGGE2h0dHA6Ly9zci5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9z ci5zeW1jYi5jb20vc3IuY3J0MIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQCk uQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAU8JNBgkAAAEAwBGMEQC IBj47+J1skWAGs6hbVGJaQv9DgWSYf8AvcQrIYBpJx4qAiAMDPUX33jFFD6kBUON nHLsxYNqF3It84tPa6KjFXUd8AB2AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+U mFXWidDdAAABTwk0GMcAAAQDAEcwRQIgB5sHmcX3/Zwsl4vFKzhlJCx9wlbPQxav an2J9cEOwpMCIQC0zFstyqrzVlBOYSgv4I/NivF/RKT9qd4qUMLZ/ILCDwB2AGj2 mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT/vEAAABTwk0GC8AAAQDAEcwRQIg MWoP3Tg3StyjzmLuvcbRAHnwc2OxJj58UHPJgRQmVbYCIQD44eoqBY/jGJSKMVau QUTUc0rh2iP+PcrrqUtcljRjXTANBgkqhkiG9w0BAQsFAAOCAQEAfdudg32DrwII HS8RbUNfnhD8XomklEguaKtVdQH42KFNTijuRQEBe3gQk7tmp0RBsw6lQVqslcgN 41JRG5uaQFQz5z/teVIvbIhI+KPXpLvhDqlis1lsmAYY6i8VKbJ2ZxdchukE39+X EzNPM3sDPXXlEhKT8o9UznDmHZsEIHyMMiWvi/QqB9L7NyACfKuvtMdDZaoNEZ0g XU7Fu3tTBpk4oTzUDqX5h9De87X4mVE1YlGLANrEFakaND/y/lkDsmBM9e6lAPeS +HkcnjQkPk2cFlq1qFXRuZRDq1gGjvUF3rSZZGbnQPorKS7p+Jz3tnG8nUfBLT9h 86h1Jlvpuw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl4XFkmWmov3E9Wsp/AK 1+nZDrhbYTN8l8tAHgj33+6MDmCvL/vHNDcAAhpQPILIEy0gryfv+KM416J6bi7Z H7VyNBut/LxyxMmmcCZvVwMvKb+/35XMS0PgTJCbJj3aZXurdr735+0Q0KY41Jw/ tVdtmkJzIxrdGT3PeQFxmlbCbMCQYX52V+6xp1/8kSDlyM6fpKB4kjXcv2/oGVvk Ko7jWVjaqZcpTW01ThBIXHc9o5tAZTIc4IwvE4ULkGnLR9R6BOY3GzIntK9DcTuN p0GvuUxcnUi9rF99nEuy8fOvFWkVK4EHjVDCfyzAbj7I3+33mdD9nZvPtTdcvG5U vwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded