esbuat.emeaconsumer.citigroup.net
- Citigroup Inc. -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 0a:c7:a4:24:5f:f9:b6:9e:d1:75:ff:c4:ed:0c:bb:9d was issued on by DigiCert Inc.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Citigroup Inc.
Company registration number:
2154254
Organization: Citigroup Inc.
Organization unit: 162733
Organization: Citigroup Inc.
Organization unit: 162733
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:c7:a4:24:5f:f9:b6:9e:d1:75:ff:c4:ed:0c:bb:9dSerial Number (int): 14328876229789399677071841151463242653
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0e:0b:8f:64:36:0e:cc:83:0a:e5:2a:51:47:14:ae:40:67:a8:63:de
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 12:61:1a:13:14:27:6f:47:ec:1c:f6:69:16:ff:f0:40:cf:65:e3:c9
Fingerprint (sha256): 04:76:03:ab:3f:4f:38:ce:77:fc:03:a8:1b:51:a8:e3:6c:24:d5:f7:e3:ad:c6:92:3f:99:89:07:ad:54:e6:4a
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate esbuat.emeaconsumer.citigroup.net
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for esbuat.emeaconsumer.citigroup.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
esbuat.emeaconsumer.citigroup.net
rdegc-tibla05u.eur.nsroot.net
rdegc-tibla06u.eur.nsroot.net
rdegc-tibla07u.eur.nsroot.net
rdegc-tibla08u.eur.nsroot.net
rdegc-tiblc05u.eur.nsroot.net
rdegc-tiblc06u.eur.nsroot.net
rdegc-tibla05u.eur.nsroot.net
rdegc-tibla06u.eur.nsroot.net
rdegc-tibla07u.eur.nsroot.net
rdegc-tibla08u.eur.nsroot.net
rdegc-tiblc05u.eur.nsroot.net
rdegc-tiblc06u.eur.nsroot.net
Other certificates including the domain name citigroup.net
(limited to 100 certificates)
contentmanagementqa.globalwealthmanagement.citigroup.net
legalprocesscontrol.brazil.citigroup.net
wechatmediation.enterprise.citigroup.net
giftandentertainmentpreapproval.citigroup.net
uat2premediationassisted.enterprise.citigroup.net
dev.consumerloanapprovalsystem.ndm.korea.citigroup.net
uat.realtime.grosspayment.gateway.citigroup.net
ICGECCEUAPDR01.cob.citibankisrael.citigroup.net
securefiletransferuat.citigroup.net
alliancescreditinitiation.citibankaustralia.citigroup.net
ServiceCorporateactionsincomeUAT.icg.citigroup.net
esbuat.emeaconsumer.citigroup.net
banamexsoaperf.banamex.com
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TRADERECORDSINDIAPRE.ICG.CITIGROUP.NET
securefiletransfer2.uat.citigroup.net
calldetailreporting.ti.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TaxReportingEngineUAT.icg.citigroup.net
dev.icgtoolbox.citigroup.net
webimaging.p2p.citigroup.net
sd-cd7f-c896.nam.nsroot.net
secureaccessweb.uat.nam.citigroup.com
securitiesbillinguat.gts.citigroup.net
TRACKING.COMMERCIALBUSINESSGROUP.CITIGROUP.NET
p2p.uat2.citigroup.net
uat2.wechatmediation.enterprise.citigroup.net
WEBSCANNING.CITIBANKINDIA.CITIGROUP.NET
esbuat.globalconsumerindia.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
citigroupsoauat.citigroup.net
citigroupsoasit1.citigroup.net
contentmanagementqa.globalwealthmanagement.citigroup.net
secureaccessweb.nam.citigroup.net
ARTEMIS.SG.CITIGROUP.NET
citigroup.net
calldetailreportingtest.ti.citigroup.net
securitiesbilling.gts.citigroup.net
stg.generalledger.west.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
creditrisk.asia.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
secureaccess.sit.nam.citigroup.net
websocketqa.americas.privatebank.citigroup.net
citigroupaiuat.citigroup.net
cob.assetservices.workbench.icg.citigroup.net
citipay.usprdnewcert.citigroup.net
federationservicesuat.ad.citigroup.net
shieldusrtprodsalesforce.citigroup.net
m.citiprivatebankinviewqa2.americas.privatebank.citigroup.net
uat.sgmarketplace.enterprise.citigroup.net
esbuat.globalconsumerindia.citigroup.net
financingsolutionscenter.citifinancial.citigroup.net
uat.structurednotes.citigroup.net
citiconnecttrademstr.apac.citigroup.net
settlementinstructionmanagerServicesLog.ICG.citigroup.net
tradeimagingindia.icg.citigroup.net
securitiesbilling.gts.citigroup.net
CPWMPRODSFDC.citigroup.net
citigroupaidev.citigroup.net
swiftmessageserviceuat.workbench.icg.citigroup.net
cob.directsalesagent8.citigroup.com
uat.privatebank.citigroup.net
secureaccessweb.nam.citigroup.net
webmonitoring.citidirect.citigroup.net
clientreportinguat.privatebank.asia.citigroup.net
webexternal.p2p.citigroup.net
citigroupaicob.citigroup.net
FundsOfHedgeFundsDEV.Workbench.icg.citigroup.net
verisignuat2normalmediationself.enterprise.citigroup.net
mexicoivr.nam.nsroot.net
AutomatedClearingSystemUAT.CitiSouthAfrica.Citigroup.net
citiuserReportingServiceuat.workbench.icg.citigroup.net
tradeimgindiapre.icg.citigroup.net
securefiletransfer.citigroup.net
esbuat.assistedservices.externalconsumeremea.citigroup.net
generalledger.west.citigroup.net
SettlementinstructionManager.UAT.ICG.citigroup.net
uat.citigroup.com
consumersit.api.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
prod.sgmarketplace.enterprise.citigroup.net
clientdesktopuat.gts.citigroup.net
apac.intlcontentmanagement.citigroup.net
TRADERECORDSINFOASIA.ICG.CITIGROUP.NET
ISTCPWMSFDC.citigroup.net
uat1normalmediationself.enterprise.citigroup.net
gtsmiddleoffice.cob.cai.citigroup.net
calldetailreportingtest.ti.citigroup.net
settlementinstructionmanagerServicesAlert.ICG.citigroup.net
uat.nam.privatebank.citigroup.net
amlmonitoring.asiagts.citigroup.net
citipay.ccsadapteruat.citigroup.net
websocket.americas.privatebank.citigroup.net
websocketqa.americas.privatebank.citigroup.net
secureaccess.citigroup.net
consumeruat.api.citigroup.net
cititradeportal.citihandlowy.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
marketssecuritiesservicesdev.citigroup.net
legalprocesscontrol.brazil.citigroup.net
wechatmediation.enterprise.citigroup.net
giftandentertainmentpreapproval.citigroup.net
uat2premediationassisted.enterprise.citigroup.net
dev.consumerloanapprovalsystem.ndm.korea.citigroup.net
uat.realtime.grosspayment.gateway.citigroup.net
ICGECCEUAPDR01.cob.citibankisrael.citigroup.net
securefiletransferuat.citigroup.net
alliancescreditinitiation.citibankaustralia.citigroup.net
ServiceCorporateactionsincomeUAT.icg.citigroup.net
esbuat.emeaconsumer.citigroup.net
banamexsoaperf.banamex.com
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TRADERECORDSINDIAPRE.ICG.CITIGROUP.NET
securefiletransfer2.uat.citigroup.net
calldetailreporting.ti.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TaxReportingEngineUAT.icg.citigroup.net
dev.icgtoolbox.citigroup.net
webimaging.p2p.citigroup.net
sd-cd7f-c896.nam.nsroot.net
secureaccessweb.uat.nam.citigroup.com
securitiesbillinguat.gts.citigroup.net
TRACKING.COMMERCIALBUSINESSGROUP.CITIGROUP.NET
p2p.uat2.citigroup.net
uat2.wechatmediation.enterprise.citigroup.net
WEBSCANNING.CITIBANKINDIA.CITIGROUP.NET
esbuat.globalconsumerindia.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
citigroupsoauat.citigroup.net
citigroupsoasit1.citigroup.net
contentmanagementqa.globalwealthmanagement.citigroup.net
secureaccessweb.nam.citigroup.net
ARTEMIS.SG.CITIGROUP.NET
citigroup.net
calldetailreportingtest.ti.citigroup.net
securitiesbilling.gts.citigroup.net
stg.generalledger.west.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
creditrisk.asia.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
secureaccess.sit.nam.citigroup.net
websocketqa.americas.privatebank.citigroup.net
citigroupaiuat.citigroup.net
cob.assetservices.workbench.icg.citigroup.net
citipay.usprdnewcert.citigroup.net
federationservicesuat.ad.citigroup.net
shieldusrtprodsalesforce.citigroup.net
m.citiprivatebankinviewqa2.americas.privatebank.citigroup.net
uat.sgmarketplace.enterprise.citigroup.net
esbuat.globalconsumerindia.citigroup.net
financingsolutionscenter.citifinancial.citigroup.net
uat.structurednotes.citigroup.net
citiconnecttrademstr.apac.citigroup.net
settlementinstructionmanagerServicesLog.ICG.citigroup.net
tradeimagingindia.icg.citigroup.net
securitiesbilling.gts.citigroup.net
CPWMPRODSFDC.citigroup.net
citigroupaidev.citigroup.net
swiftmessageserviceuat.workbench.icg.citigroup.net
cob.directsalesagent8.citigroup.com
uat.privatebank.citigroup.net
secureaccessweb.nam.citigroup.net
webmonitoring.citidirect.citigroup.net
clientreportinguat.privatebank.asia.citigroup.net
webexternal.p2p.citigroup.net
citigroupaicob.citigroup.net
FundsOfHedgeFundsDEV.Workbench.icg.citigroup.net
verisignuat2normalmediationself.enterprise.citigroup.net
mexicoivr.nam.nsroot.net
AutomatedClearingSystemUAT.CitiSouthAfrica.Citigroup.net
citiuserReportingServiceuat.workbench.icg.citigroup.net
tradeimgindiapre.icg.citigroup.net
securefiletransfer.citigroup.net
esbuat.assistedservices.externalconsumeremea.citigroup.net
generalledger.west.citigroup.net
SettlementinstructionManager.UAT.ICG.citigroup.net
uat.citigroup.com
consumersit.api.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
prod.sgmarketplace.enterprise.citigroup.net
clientdesktopuat.gts.citigroup.net
apac.intlcontentmanagement.citigroup.net
TRADERECORDSINFOASIA.ICG.CITIGROUP.NET
ISTCPWMSFDC.citigroup.net
uat1normalmediationself.enterprise.citigroup.net
gtsmiddleoffice.cob.cai.citigroup.net
calldetailreportingtest.ti.citigroup.net
settlementinstructionmanagerServicesAlert.ICG.citigroup.net
uat.nam.privatebank.citigroup.net
amlmonitoring.asiagts.citigroup.net
citipay.ccsadapteruat.citigroup.net
websocket.americas.privatebank.citigroup.net
websocketqa.americas.privatebank.citigroup.net
secureaccess.citigroup.net
consumeruat.api.citigroup.net
cititradeportal.citihandlowy.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
marketssecuritiesservicesdev.citigroup.net
Certificate
The complete raw certificate details for esbuat.emeaconsumer.citigroup.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGuTCCBaGgAwIBAgIQCsekJF/5tp7Rdf/E7Qy7nTANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTIwMDIwNjAwMDAwMFoXDTIyMDIxMDEy MDAwMFowgeoxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRkwFwYLKwYBBAGCNzwCAQITCERlbGF3YXJlMRAwDgYDVQQF EwcyMTU0MjU0MQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNV BAcTCE5ldyBZb3JrMRcwFQYDVQQKEw5DaXRpZ3JvdXAgSW5jLjEPMA0GA1UECxMG MTYyNzMzMSowKAYDVQQDEyFlc2J1YXQuZW1lYWNvbnN1bWVyLmNpdGlncm91cC5u ZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi28PA/yeh+MRZ0AF+ aS8dskcxZ/P82SIit8z/fiAGF/V3Wb9H1T/VXe2+1X6PDF7Sser/zF5TA6YKuTiK hOOyPNcYMPbmX4pBI1dCSDm+yOHHHUllg2sdSJAkGDKj0RyDxvMBJ2prPx0GNDXg ImmWtjNizYFH3npZSbf7RevO75LQBDqdkNuyGzJwWXkBS4LJQeCv4JMHSfonkVCk awlWynx92A2ecHSpsoTHgq4x9F1na99KmYJ3WG0n4uSJ6/sStsWWPPrI2CVe5ulF WaLPftI892bC0aFv9P46rw6Bh0D39BL44Pk8gz9NQ+QQdAkeynni/DfTG7Zewo/e bVPDAgMBAAGjggLNMIICyTAfBgNVHSMEGDAWgBQ901Cl1qCt7vNKYApl0yHU+PjW DzAdBgNVHQ4EFgQUDguPZDYOzIMK5SpRRxSuQGeoY94wgegGA1UdEQSB4DCB3YIh ZXNidWF0LmVtZWFjb25zdW1lci5jaXRpZ3JvdXAubmV0gh1yZGVnYy10aWJsYTA1 dS5ldXIubnNyb290Lm5ldIIdcmRlZ2MtdGlibGEwNnUuZXVyLm5zcm9vdC5uZXSC HXJkZWdjLXRpYmxhMDd1LmV1ci5uc3Jvb3QubmV0gh1yZGVnYy10aWJsYTA4dS5l dXIubnNyb290Lm5ldIIdcmRlZ2MtdGlibGMwNXUuZXVyLm5zcm9vdC5uZXSCHXJk ZWdjLXRpYmxjMDZ1LmV1ci5uc3Jvb3QubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0 cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNybDA0oDKg MIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNy bDBLBgNVHSAERDBCMDcGCWCGSAGG/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAcGBWeBDAEBMIGIBggrBgEFBQcBAQR8MHow JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBSBggrBgEFBQcw AoZGaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkV4dGVu ZGVkVmFsaWRhdGlvblNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsnRQDH2qk35Idu9tj6BYczoxm ZbOUlIqCAcbeC8BBLu95TxYQDoAlf8l4UDCtfmFLkIRD1J/1kJiCJZwcew3bSioZ pxITkcEZo1pUMaiS+/kqgPGWc83K0f8jVpnyXD5EFPhpzEsTmazPbq/tu+vV8gm0 yNxZ0ZlrqGV7smoIkpEdAv2yxaoXV3LchsdmjI9DIO8ybbd3BM67rsVi+s3r5Ad1 s3I3XVqZcgrMg+ReQoK5OcLURpGk6TG0guTasFjxY4CL8aHsCzaEVXwdaLRvsuU5 Ty9e7QbzT/v8KS9vLS5QmrzeDn7P5B+bZ2DnN7bJOqVbIR6jS/jvR33jlYJ+ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotvDwP8nofjEWdABfmkv HbJHMWfz/NkiIrfM/34gBhf1d1m/R9U/1V3tvtV+jwxe0rHq/8xeUwOmCrk4ioTj sjzXGDD25l+KQSNXQkg5vsjhxx1JZYNrHUiQJBgyo9Ecg8bzASdqaz8dBjQ14CJp lrYzYs2BR956WUm3+0Xrzu+S0AQ6nZDbshsycFl5AUuCyUHgr+CTB0n6J5FQpGsJ Vsp8fdgNnnB0qbKEx4KuMfRdZ2vfSpmCd1htJ+Lkiev7ErbFljz6yNglXubpRVmi z37SPPdmwtGhb/T+Oq8OgYdA9/QS+OD5PIM/TUPkEHQJHsp54vw30xu2XsKP3m1T wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14328876229789399677071841151463242653 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Citigroup Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '162733' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esbuat.emeaconsumer.citigroup.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20558975399150309117688419111795701768489831756719019451377329931529732917527538659237746338517002584351566462792606835168443171314348250616207358244741008371550647806988282231018946036352011353000700810887364630823506500457333683767033244015209723911058882414773359423896728662930468500197828431120037442888210191431759780972333742247435646476741414638182819250420336871866690095758919218839153170131393221520693659440294195223305413734032134833214656805308082609606330450990846569614524672713433391842581712680792067498705047226107119608576232721429144038989386993391364519108039762443044638007422965720583221629891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0e0b8f64360ecc830ae52a514714ae4067a863de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbuat.emeaconsumer.citigroup.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdegc-tibla05u.eur.nsroot.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdegc-tibla06u.eur.nsroot.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdegc-tibla07u.eur.nsroot.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdegc-tibla08u.eur.nsroot.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdegc-tiblc05u.eur.nsroot.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdegc-tiblc06u.eur.nsroot.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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