citiconnecttrademstr.apac.citigroup.net
- Citigroup Inc. -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 08:86:e7:7c:ac:ba:d4:c5:82:86:92:8b:cc:20:56:86 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Citigroup Inc.
Company registration number:
2154254
Organization: Citigroup Inc.
Organization unit: 150575
Organization: Citigroup Inc.
Organization unit: 150575
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:86:e7:7c:ac:ba:d4:c5:82:86:92:8b:cc:20:56:86Serial Number (int): 11334286859690875866927326138512463494
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f6:c7:3f:89:23:0e:66:22:7d:95:3d:d1:47:41:de:c2:1e:28:25:c1
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 2d:b0:38:ee:d1:7c:50:0a:3a:c1:7c:93:4f:34:a5:09:4c:3f:22:f9
Fingerprint (sha256): 16:47:49:f5:89:d8:1d:f4:90:7b:a6:8f:14:63:7b:19:b6:18:d1:e4:ae:b5:75:7d:fe:3d:ea:35:62:f5:bb:88
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate citiconnecttrademstr.apac.citigroup.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for citiconnecttrademstr.apac.citigroup.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
citiconnecttrademstr.apac.citigroup.net
Other certificates including the domain name citigroup.net
(limited to 100 certificates)
contentmanagementqa.globalwealthmanagement.citigroup.net
legalprocesscontrol.brazil.citigroup.net
wechatmediation.enterprise.citigroup.net
giftandentertainmentpreapproval.citigroup.net
uat2premediationassisted.enterprise.citigroup.net
dev.consumerloanapprovalsystem.ndm.korea.citigroup.net
uat.realtime.grosspayment.gateway.citigroup.net
ICGECCEUAPDR01.cob.citibankisrael.citigroup.net
securefiletransferuat.citigroup.net
alliancescreditinitiation.citibankaustralia.citigroup.net
ServiceCorporateactionsincomeUAT.icg.citigroup.net
esbuat.emeaconsumer.citigroup.net
banamexsoaperf.banamex.com
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TRADERECORDSINDIAPRE.ICG.CITIGROUP.NET
securefiletransfer2.uat.citigroup.net
calldetailreporting.ti.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TaxReportingEngineUAT.icg.citigroup.net
dev.icgtoolbox.citigroup.net
webimaging.p2p.citigroup.net
sd-cd7f-c896.nam.nsroot.net
secureaccessweb.uat.nam.citigroup.com
securitiesbillinguat.gts.citigroup.net
TRACKING.COMMERCIALBUSINESSGROUP.CITIGROUP.NET
p2p.uat2.citigroup.net
uat2.wechatmediation.enterprise.citigroup.net
WEBSCANNING.CITIBANKINDIA.CITIGROUP.NET
esbuat.globalconsumerindia.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
citigroupsoauat.citigroup.net
citigroupsoasit1.citigroup.net
contentmanagementqa.globalwealthmanagement.citigroup.net
secureaccessweb.nam.citigroup.net
ARTEMIS.SG.CITIGROUP.NET
citigroup.net
calldetailreportingtest.ti.citigroup.net
securitiesbilling.gts.citigroup.net
stg.generalledger.west.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
creditrisk.asia.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
secureaccess.sit.nam.citigroup.net
websocketqa.americas.privatebank.citigroup.net
citigroupaiuat.citigroup.net
cob.assetservices.workbench.icg.citigroup.net
citipay.usprdnewcert.citigroup.net
federationservicesuat.ad.citigroup.net
shieldusrtprodsalesforce.citigroup.net
m.citiprivatebankinviewqa2.americas.privatebank.citigroup.net
uat.sgmarketplace.enterprise.citigroup.net
esbuat.globalconsumerindia.citigroup.net
financingsolutionscenter.citifinancial.citigroup.net
uat.structurednotes.citigroup.net
citiconnecttrademstr.apac.citigroup.net
settlementinstructionmanagerServicesLog.ICG.citigroup.net
tradeimagingindia.icg.citigroup.net
securitiesbilling.gts.citigroup.net
CPWMPRODSFDC.citigroup.net
citigroupaidev.citigroup.net
swiftmessageserviceuat.workbench.icg.citigroup.net
cob.directsalesagent8.citigroup.com
uat.privatebank.citigroup.net
secureaccessweb.nam.citigroup.net
webmonitoring.citidirect.citigroup.net
clientreportinguat.privatebank.asia.citigroup.net
webexternal.p2p.citigroup.net
citigroupaicob.citigroup.net
FundsOfHedgeFundsDEV.Workbench.icg.citigroup.net
verisignuat2normalmediationself.enterprise.citigroup.net
mexicoivr.nam.nsroot.net
AutomatedClearingSystemUAT.CitiSouthAfrica.Citigroup.net
citiuserReportingServiceuat.workbench.icg.citigroup.net
tradeimgindiapre.icg.citigroup.net
securefiletransfer.citigroup.net
esbuat.assistedservices.externalconsumeremea.citigroup.net
generalledger.west.citigroup.net
SettlementinstructionManager.UAT.ICG.citigroup.net
uat.citigroup.com
consumersit.api.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
prod.sgmarketplace.enterprise.citigroup.net
clientdesktopuat.gts.citigroup.net
apac.intlcontentmanagement.citigroup.net
TRADERECORDSINFOASIA.ICG.CITIGROUP.NET
ISTCPWMSFDC.citigroup.net
uat1normalmediationself.enterprise.citigroup.net
gtsmiddleoffice.cob.cai.citigroup.net
calldetailreportingtest.ti.citigroup.net
settlementinstructionmanagerServicesAlert.ICG.citigroup.net
uat.nam.privatebank.citigroup.net
amlmonitoring.asiagts.citigroup.net
citipay.ccsadapteruat.citigroup.net
websocket.americas.privatebank.citigroup.net
websocketqa.americas.privatebank.citigroup.net
secureaccess.citigroup.net
consumeruat.api.citigroup.net
cititradeportal.citihandlowy.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
marketssecuritiesservicesdev.citigroup.net
legalprocesscontrol.brazil.citigroup.net
wechatmediation.enterprise.citigroup.net
giftandentertainmentpreapproval.citigroup.net
uat2premediationassisted.enterprise.citigroup.net
dev.consumerloanapprovalsystem.ndm.korea.citigroup.net
uat.realtime.grosspayment.gateway.citigroup.net
ICGECCEUAPDR01.cob.citibankisrael.citigroup.net
securefiletransferuat.citigroup.net
alliancescreditinitiation.citibankaustralia.citigroup.net
ServiceCorporateactionsincomeUAT.icg.citigroup.net
esbuat.emeaconsumer.citigroup.net
banamexsoaperf.banamex.com
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TRADERECORDSINDIAPRE.ICG.CITIGROUP.NET
securefiletransfer2.uat.citigroup.net
calldetailreporting.ti.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TaxReportingEngineUAT.icg.citigroup.net
dev.icgtoolbox.citigroup.net
webimaging.p2p.citigroup.net
sd-cd7f-c896.nam.nsroot.net
secureaccessweb.uat.nam.citigroup.com
securitiesbillinguat.gts.citigroup.net
TRACKING.COMMERCIALBUSINESSGROUP.CITIGROUP.NET
p2p.uat2.citigroup.net
uat2.wechatmediation.enterprise.citigroup.net
WEBSCANNING.CITIBANKINDIA.CITIGROUP.NET
esbuat.globalconsumerindia.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
citigroupsoauat.citigroup.net
citigroupsoasit1.citigroup.net
contentmanagementqa.globalwealthmanagement.citigroup.net
secureaccessweb.nam.citigroup.net
ARTEMIS.SG.CITIGROUP.NET
citigroup.net
calldetailreportingtest.ti.citigroup.net
securitiesbilling.gts.citigroup.net
stg.generalledger.west.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
creditrisk.asia.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
secureaccess.sit.nam.citigroup.net
websocketqa.americas.privatebank.citigroup.net
citigroupaiuat.citigroup.net
cob.assetservices.workbench.icg.citigroup.net
citipay.usprdnewcert.citigroup.net
federationservicesuat.ad.citigroup.net
shieldusrtprodsalesforce.citigroup.net
m.citiprivatebankinviewqa2.americas.privatebank.citigroup.net
uat.sgmarketplace.enterprise.citigroup.net
esbuat.globalconsumerindia.citigroup.net
financingsolutionscenter.citifinancial.citigroup.net
uat.structurednotes.citigroup.net
citiconnecttrademstr.apac.citigroup.net
settlementinstructionmanagerServicesLog.ICG.citigroup.net
tradeimagingindia.icg.citigroup.net
securitiesbilling.gts.citigroup.net
CPWMPRODSFDC.citigroup.net
citigroupaidev.citigroup.net
swiftmessageserviceuat.workbench.icg.citigroup.net
cob.directsalesagent8.citigroup.com
uat.privatebank.citigroup.net
secureaccessweb.nam.citigroup.net
webmonitoring.citidirect.citigroup.net
clientreportinguat.privatebank.asia.citigroup.net
webexternal.p2p.citigroup.net
citigroupaicob.citigroup.net
FundsOfHedgeFundsDEV.Workbench.icg.citigroup.net
verisignuat2normalmediationself.enterprise.citigroup.net
mexicoivr.nam.nsroot.net
AutomatedClearingSystemUAT.CitiSouthAfrica.Citigroup.net
citiuserReportingServiceuat.workbench.icg.citigroup.net
tradeimgindiapre.icg.citigroup.net
securefiletransfer.citigroup.net
esbuat.assistedservices.externalconsumeremea.citigroup.net
generalledger.west.citigroup.net
SettlementinstructionManager.UAT.ICG.citigroup.net
uat.citigroup.com
consumersit.api.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
prod.sgmarketplace.enterprise.citigroup.net
clientdesktopuat.gts.citigroup.net
apac.intlcontentmanagement.citigroup.net
TRADERECORDSINFOASIA.ICG.CITIGROUP.NET
ISTCPWMSFDC.citigroup.net
uat1normalmediationself.enterprise.citigroup.net
gtsmiddleoffice.cob.cai.citigroup.net
calldetailreportingtest.ti.citigroup.net
settlementinstructionmanagerServicesAlert.ICG.citigroup.net
uat.nam.privatebank.citigroup.net
amlmonitoring.asiagts.citigroup.net
citipay.ccsadapteruat.citigroup.net
websocket.americas.privatebank.citigroup.net
websocketqa.americas.privatebank.citigroup.net
secureaccess.citigroup.net
consumeruat.api.citigroup.net
cititradeportal.citihandlowy.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
marketssecuritiesservicesdev.citigroup.net
Certificate
The complete raw certificate details for citiconnecttrademstr.apac.citigroup.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIQCIbnfKy61MWChpKLzCBWhjANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE4MDcyMDAwMDAwMFoXDTIwMDcxOTEy MDAwMFowgfAxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRkwFwYLKwYBBAGCNzwCAQITCERlbGF3YXJlMRAwDgYDVQQF EwcyMTU0MjU0MQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNV BAcTCE5ldyBZb3JrMRcwFQYDVQQKEw5DaXRpZ3JvdXAgSW5jLjEPMA0GA1UECxMG MTUwNTc1MTAwLgYDVQQDEydjaXRpY29ubmVjdHRyYWRlbXN0ci5hcGFjLmNpdGln cm91cC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOW57Bs6dR mS1S+05ys4nWEYgNPdoPLLuQcwYS5a7Rtr4lvIFpaN6eUSfXQFu5FwHuhQI4PKg0 eNyKtuTvImi2CO7+vmpEJc0XAUe/TFBskrdgDYEPYSVCXmF5sxVU/UgCe5p3rYeF 3avmXvDDpn5n0guPmtJpEa1z7ZgUzLR33tLS+6ddtwlYK6S0E3M4X/IThlbnOOyH ybowU7nZ5suGGyMnrUGXOTewTMnzEW+gKAM18hO96R5n4UE7FGehcbVxDVTj3kJ9 GmVugLzUEQdFj/QbBFB7wx04Q9wGbnmYp5aXpuPyvGRXdkRCh8qh9v/xysfgMRdR KwnGHOcH+VJxAgMBAAGjggIWMIICEjAfBgNVHSMEGDAWgBQ901Cl1qCt7vNKYApl 0yHU+PjWDzAdBgNVHQ4EFgQU9sc/iSMOZiJ9lT3RR0Hewh4oJcEwMgYDVR0RBCsw KYInY2l0aWNvbm5lY3R0cmFkZW1zdHIuYXBhYy5jaXRpZ3JvdXAubmV0MA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0f BG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItZXYtc2Vy dmVyLWcyLmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTIt ZXYtc2VydmVyLWcyLmNybDBLBgNVHSAERDBCMDcGCWCGSAGG/WwCATAqMCgGCCsG AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAcGBWeBDAEBMIGI BggrBgEFBQcBAQR8MHowJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBSBggrBgEFBQcwAoZGaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0U0hBMkV4dGVuZGVkVmFsaWRhdGlvblNlcnZlckNBLmNydDAJBgNVHRME AjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyVdIZ wvMWSW3nUqVGiEONlhcxQQ900MrGJdYOnNA31GfxgdeJjAW3r/gTS/xSXKBqzcQs PWUD+8PGchdibio3fOzztS7HRT35EdLmN9lspXiXpwFvmKg45ELk8mQW4onYGdc9 +zR8DFkroWPitUYq5RwlUqaf9suD9ugQuSPcCbPWRbIC/wOqvTH6pFf98xRNPIDx 3Y40Onbezz309mnGx5ofQfTp0py77cd0EZYJ6i/CN1+Gsv8ZRSdXuM0QnHGUCtSP /8Pxjs4cWaf+x4l4Dp88CGss99l+HzFF3q67ldV+ls98gAeeXynlzKCUnLubo7C6 mnN1cWba1+xEAAMI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjluewbOnUZktUvtOcrOJ 1hGIDT3aDyy7kHMGEuWu0ba+JbyBaWjenlEn10BbuRcB7oUCODyoNHjcirbk7yJo tgju/r5qRCXNFwFHv0xQbJK3YA2BD2ElQl5hebMVVP1IAnuad62Hhd2r5l7ww6Z+ Z9ILj5rSaRGtc+2YFMy0d97S0vunXbcJWCuktBNzOF/yE4ZW5zjsh8m6MFO52ebL hhsjJ61Blzk3sEzJ8xFvoCgDNfITvekeZ+FBOxRnoXG1cQ1U495CfRplboC81BEH RY/0GwRQe8MdOEPcBm55mKeWl6bj8rxkV3ZEQofKofb/8crH4DEXUSsJxhznB/lS cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11334286859690875866927326138512463494 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Citigroup Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '150575' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citiconnecttrademstr.apac.citigroup.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17971018881635671499874724361176135633780449622698522893035176432098265065679935945842661501412968866464583732688691946131311497085203199784157312588475614487676547596855971827805273181220977471284701682771342891756150451693021635056574029365627564890270657279621682793209247727943300775422344822699525864738718083563448931755092842664026205083209073984756989876634370352988720948770576538206256528983244499757780954723714834858703587928868912160301265269335908856521874736598256160440299733616357520735979040597125139094376753886947276471359099159983450375378439888336377844834304903568617495381419134583617407767153 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f6c73f89230e66227d953dd14741dec21e2825c1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citiconnecttrademstr.apac.citigroup.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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