citibank.zyns.com

Issued by WoSign CA Free SSL Certificate G2

About this certificate

This digital certificate with serial number 11:20:d5:da:cb:d0:7f:a9:f2:94:88:33:48:68:53:69 was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=citibank.zyns.com

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 11:20:d5:da:cb:d0:7f:a9:f2:94:88:33:48:68:53:69
Serial Number (int): 22767366915879206678639302593303040873
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: ea:f0:7c:01:13:63:2b:96:81:f1:57:79:9f:9e:5a:bb:4a:0e:4b:41
AuthorityKeyId: d2:a7:16:20:7c:af:d9:95:9e:eb:43:0a:19:f2:e0:b9:74:0e:a8:c7

Fingerprint (sha1): 91:e6:ef:a9:b3:ed:9a:ef:d9:90:4d:63:f7:89:99:88:40:ed:ca:7a
Fingerprint (sha256): 27:45:b8:66:8c:69:f5:f5:30:5e:9a:16:16:95:4e:51:a3:ce:10:b5:a2:23:b4:01:96:4a:05:32:03:70:a8:0f

Issuing Certificate URL: http://aia1.wosign.com/ca6.server1.free.cer

Revocation information

OCSP Server: http://ocsp1.wosign.com/ca6/server1/free
CRL Distribution Point: http://crls1.wosign.com/ca6-server1-free.crl

Check the revocation status for certificate citibank.zyns.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citibank.zyns.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citibank.zyns.com

Other certificates including the domain name zyns.com

(limited to 100 certificates)
bramy-kraty.zyns.com
bramy-kraty.zyns.com
fidanzati.zyns.com
teig.zyns.com
vlajky.org
hadiah-skin.zyns.com
clmpy.zyns.com
bnptrustb.zyns.com
gitalemarcha.zyns.com
jswberry.zyns.com
bramy-kraty.zyns.com
halicontrustb.zyns.com
event-supercell2018.zyns.com
diamonds99.zyns.com
def.zyns.com
postpartum.zyns.com
jentersokermenn.sexualne.info
vitamin.zyns.com
jswberry.zyns.com
skinevos18.zyns.com
ipip.zyns.com
quicklybot.zyns.com
coc-tournament.zyns.com
mmy.zyns.com
mlbb-s8.zyns.com
jswberry.zyns.com
jswberry.zyns.com
cibconline.zyns.com
ranken.zyns.com
get-myskin.zyns.com
peru.zyns.com
2016.zyns.com
coc-random.zyns.com
cdn.celsius.zyns.com
webmail-client5.zyns.com
jswberry.zyns.com
raspberryperformance.zyns.com
westgatecourier.zyns.com
citib.zyns.com
bnptrustb.zyns.com
etc.zyns.com
bramy-kraty.zyns.com
cibcb.zyns.com
gitalemarcha.zyns.com
mss.zyns.com
claim-skin-free.zyns.com
suits.zyns.com
chaseonline.zyns.com
get-skin56.zyns.com
jswberry.zyns.com
eventcollectskin.zyns.com
cdn.celsius.zyns.com
jswberry.zyns.com
hexcon.zyns.com
moba.zyns.com
jswberry.zyns.com
onedrrive-a21.tcsswoop.org
www.soundz.zyns.com
ecbn.zyns.com
halicontrustb.zyns.com
filmdilan.zyns.com
airmaxcourier.zyns.com
darkanetwork.zyns.com
jswberry.zyns.com
homevpn.zyns.com
reviews.zyns.com
getfreeskin.zyns.com
get-gemsfree-18.zyns.com
em1.zyns.com
financeiro392018.mrbonus.com
clownbot.zyns.com
jswberry.zyns.com
lanuevatierra.zyns.com
mooton-event.zyns.com
ferismm.zyns.com
airmaxcourier.zyns.com
pbwc18.zyns.com
citibank.zyns.com
freeskin52.zyns.com
jswberry.zyns.com
xgnc.zyns.com
bramy-kraty.zyns.com
moba-events.zyns.com
westgatecourier.zyns.com
clownbot.zyns.com
studio.zyns.com
bramy-kraty.zyns.com
gm-pb.zyns.com
l7ai91ueu760nlq.nha33njufb.ygto.com
hadiah-skin.zyns.com
royaltrustb.zyns.com
rednuevatierra.zyns.com
darkanetwork.zyns.com
mmy.zyns.com
helskfjsqaz.zyns.com
blurit.zyns.com
is-over.zyns.com
amule.celsius.zyns.com
adoptomimascota.zyns.com
def.zyns.com

Certificate

The complete raw certificate details for citibank.zyns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeNYowRCamQ/oDkkNyCC
R72pOwPMtj/Gcxtt3XUdwmRL1R8AxWmIN0UaWajMXKPDZnLP53BJ8495vP5Q2hHx
UjUMY1d3+YW80tLnOpJamDk2KCi3nZROlKLW50eR0mMF9SXAxhEgSKfc0hfjwwJD
ijFsVhWV8/m0jS9CoWdItOKn+FSGuHIKieFFcA1KpRNRorPaySYfzOjJu6edv4V9
K/yf+dpb1qEsC1CUrJZl0cGYfkg/xdcvq3sm7vTnQzYZKuox8feTFqYsdcGqgjym
6ZYZHJEx4kwfshPrcP5m4wu4Z5JDUl+cFAIiTOtTCrHV7i07ovoyWm5iLWjz9ZiV
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22767366915879206678639302593303040873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Free SSL Certificate G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-04 11:02:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-04 11:02:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'citibank.zyns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25990961126066997169589736089533652314091231508927287078282697469588468189740978621478449515544441433815207698958810321617271454933724463106200226525418177939919197531283437258665471278244695579075801015270926600702682199624196634016622510951815216969227113223016815978279633653304786422321946240246978262339519317928294551854644030151229771103425175430399090809586775511468023426315403493413345443635658464922121328589618242756308105565471276691514828991025778929554737687896773498695203215728477940829284545295436834449411875137148535395358401536541433513753696052426015652406425626543886239036582138174716178372037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eaf07c0113632b9681f157799f9e5abb4a0e4b41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d2a716207cafd9959eeb430a19f2e0b9740ea8c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.wosign.com/ca6/server1/free'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.wosign.com/ca6.server1.free.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls1.wosign.com/ca6-server1-free.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citibank.zyns.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.6.1.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c8e4b8a386ce6db9adc879845e0ebd9f57a92a8929b93d22937991244b3455670d7c1ac34ebce8ae8b7dbbf5d8aa6191a80dd900c9d49587928f5db343fb9c459f8716bd37f9f430cad10593f6dc3d83d608be74e220d0a8033c85c6ac44d5320ca59cd4d4b6adbf21940c7f8d42fbf5311cc2393ca0406c40b5e2b993e6676e85bd5adeaf0714531c1ae19dd151ed2b3859bcf0493a3afc580d7a4c98277abead8504b5665d8c0b1a0381df81ebed28ffb9603cb7522604bc61749c083fce102b945001e70a684aad4c03b766aa859eb0fdc31056a7d17d1f30a3854ddbb53720f998c25cd843b04e42b5b563766225d4167f5bd44745f7d52b244669ffea3