www.citibank.co.uk
- Citigroup Inc. -
Issued by Symantec Class 3 EV SSL CA - G3
About this certificate
This digital certificate with serial number 62:e6:ac:b0:d5:1a:e1:a7:22:3d:86:ec:78:b9:1e:9d was issued on by Symantec Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Citigroup Inc.
Company registration number:
2154254
Organization: Citigroup Inc.
Organization unit: DigitalMiddlewareWebuk
Organization: Citigroup Inc.
Organization unit: DigitalMiddlewareWebuk
Address:
399 Park Avenue
Postal code: 10022
State / Province: New York
Locality: New York
Country: US
Postal code: 10022
State / Province: New York
Locality: New York
Country: US
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 62:e6:ac:b0:d5:1a:e1:a7:22:3d:86:ec:78:b9:1e:9dSerial Number (int): 131462074448946001275760103951804472989
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a
Fingerprint (sha1): 26:12:e7:22:10:4c:f5:3f:17:87:07:78:05:64:3b:4c:df:bc:5d:07
Fingerprint (sha256): 58:9f:94:b7:24:5f:18:f7:27:0a:3f:09:ce:bf:10:fc:fb:e1:93:70:19:9a:6a:90:66:e1:aa:48:84:c5:85:e6
Issuing Certificate URL: http://sr.symcb.com/sr.crt
Revocation information
OCSP Server: http://sr.symcd.comCRL Distribution Point: http://sr.symcb.com/sr.crl
Check the revocation status for certificate www.citibank.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.citibank.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
citibank.co.uk
www.citibank.co.uk
www.citibank.co.uk
Other certificates including the domain name citibank.co.uk
(limited to 100 certificates)
uat.citi.com
view.uat.mail.citibank.co.uk
uat2.marketingportal.citibank.com
www.citibank.co.uk
conversationalbanking.citibank.co.uk
uat.citi.com
uat.citi.com
www.citibank.co.uk
marketingportal.citibank.com
uat2.msa.citibank.co.uk
www.citi.com
uat.citi.com
www.citi.com
sit.digitalengagement.citi.eu
www.citi.com
www.citi.com
alertingservice.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
www.citi.com
akamai-san76.exacttarget.com
akamai-san134.exacttarget.com
akamai-san76.exacttarget.com
www.citibank.co.uk
cukehb1.cd.citibank.co.uk
www.citi.com
uat.citi.com
www.citi.com
citibankonline.ipb.citibank.co.uk
www.citi.com
uat2.marketingportal.citibank.com
akamai-san134.exacttarget.com
www.citi.com
www.citi.com
www.citi.com
www.citi.com
sit.digitalengagement.citi.eu
www.citi.com
www.citi.com
www.citibank.co.uk
www.citi.com
www.citibank.co.uk
uat2.marketingportal.citibank.com
www.citi.com
www.citi.com
uat.citi.com
uat2.marketingportal.citibank.com
www.citi.com
www.citi.com
www.citi.com
uat.citi.com
www.citi.com
alertingservice1.citibank.co.uk
uat2.marketingportal.citibank.com
uat.citi.com
www.citi.com
marketingportal.citibank.com
uatuk.ipb.citibank.co.uk
www.citi.com
www.citi.com
sit.digitalengagement.citibank.co.uk
uat.conversationalbanking.globalcommonbuild.citibank.co.uk
www.citi.com
click.uat.mail.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
www.citi.com
akamai-san134.exacttarget.com
front.citibank.co.uk
akamai-san76.exacttarget.com
www.citi.com
www.citi.com
www.citibank.co.uk
cukehb2.cd.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
www.citi.com
www.citi.com
uat2.marketingportal.citibank.com
www.citibank.co.uk
www.citi.com
click.mail.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
www.citi.com
www.citi.com
www.citi.com
frontuat.citibank.co.uk
uat2.marketingportal.citibank.com
www.citibank.co.uk
uat2.msa.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
citibankonline.ipb.citibank.co.uk
www.citibank.co.uk
view.uat.mail.citibank.co.uk
uat2.marketingportal.citibank.com
www.citibank.co.uk
conversationalbanking.citibank.co.uk
uat.citi.com
uat.citi.com
www.citibank.co.uk
marketingportal.citibank.com
uat2.msa.citibank.co.uk
www.citi.com
uat.citi.com
www.citi.com
sit.digitalengagement.citi.eu
www.citi.com
www.citi.com
alertingservice.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
www.citi.com
akamai-san76.exacttarget.com
akamai-san134.exacttarget.com
akamai-san76.exacttarget.com
www.citibank.co.uk
cukehb1.cd.citibank.co.uk
www.citi.com
uat.citi.com
www.citi.com
citibankonline.ipb.citibank.co.uk
www.citi.com
uat2.marketingportal.citibank.com
akamai-san134.exacttarget.com
www.citi.com
www.citi.com
www.citi.com
www.citi.com
sit.digitalengagement.citi.eu
www.citi.com
www.citi.com
www.citibank.co.uk
www.citi.com
www.citibank.co.uk
uat2.marketingportal.citibank.com
www.citi.com
www.citi.com
uat.citi.com
uat2.marketingportal.citibank.com
www.citi.com
www.citi.com
www.citi.com
uat.citi.com
www.citi.com
alertingservice1.citibank.co.uk
uat2.marketingportal.citibank.com
uat.citi.com
www.citi.com
marketingportal.citibank.com
uatuk.ipb.citibank.co.uk
www.citi.com
www.citi.com
sit.digitalengagement.citibank.co.uk
uat.conversationalbanking.globalcommonbuild.citibank.co.uk
www.citi.com
click.uat.mail.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
www.citi.com
akamai-san134.exacttarget.com
front.citibank.co.uk
akamai-san76.exacttarget.com
www.citi.com
www.citi.com
www.citibank.co.uk
cukehb2.cd.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
www.citi.com
www.citi.com
uat2.marketingportal.citibank.com
www.citibank.co.uk
www.citi.com
click.mail.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
www.citi.com
www.citi.com
www.citi.com
frontuat.citibank.co.uk
uat2.marketingportal.citibank.com
www.citibank.co.uk
uat2.msa.citibank.co.uk
www.citi.com
www.citi.com
www.citi.com
citibankonline.ipb.citibank.co.uk
www.citibank.co.uk
Certificate
The complete raw certificate details for www.citibank.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIQYuassNUa4aciPYbseLkenTANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTcwMzI5MDAwMDAwWhcNMTkwMzMw MjM1OTU5WjCCARUxEzARBgsrBgEEAYI3PAIBAxMCVVMxGTAXBgsrBgEEAYI3PAIB AgwIRGVsYXdhcmUxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYD VQQFEwcyMTU0MjU0MQswCQYDVQQGEwJVUzEOMAwGA1UEEQwFMTAwMjIxETAPBgNV BAgMCE5ldyBZb3JrMREwDwYDVQQHDAhOZXcgWW9yazEYMBYGA1UECQwPMzk5IFBh cmsgQXZlbnVlMRcwFQYDVQQKDA5DaXRpZ3JvdXAgSW5jLjEfMB0GA1UECwwWRGln aXRhbE1pZGRsZXdhcmVXZWJ1azEbMBkGA1UEAwwSd3d3LmNpdGliYW5rLmNvLnVr MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq5DSnpfD1rBs7rxqQqB D09YU8yq4BDOrtKujrpvwhq68ufVLlCOkVNGVD4JgRDoYDv68feUkxlEf+prY7up 8FWkKdrtQU5vsfRXTmdTg5sOBLTceqayr25LCHgWAR3Xwx6bMsE+6bmD4/4FKLpG FQtH0CXUu8O3+19XfemP0wX3b/eLGRzQgfOiESfXHRo49AfYKlFU3utmrwjr3+JJ TkXTPqLLITfrf+2/HPF3kwhSMKHx7Icv8d6hktn4PrYwzNvDWKcFpRqwqt1fotC0 Q/QT3sLVTTOYmadnqYOWz8Y5IeUFAXY0Iop7Zh+6WKHjN3TnHqPkk8z6YdrthaYp AQIDAQABo4IDBzCCAwMwLQYDVR0RBCYwJIIOY2l0aWJhbmsuY28udWuCEnd3dy5j aXRpYmFuay5jby51azAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwbwYDVR0gBGgwZjBbBgtghkgBhvhFAQcX BjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEF BQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAHBgVngQwBATAfBgNVHSME GDAWgBQBWavn3ToLWaZkY9bPIAdX1ZHnajArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vc3Iuc3ltY2IuY29tL3NyLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUH MAGGE2h0dHA6Ly9zci5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zci5z eW1jYi5jb20vc3IuY3J0MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDd6x0r eg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVsYrpG/AAAEAwBHMEUCIFIj oSyifa64GRsBJMERiAjOta/oFA98xWiukrfokaApAiEAoaR8cP0wVlx3YP/tl2YZ tIqZiPkPwxfNWFWEVUT6y6UAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O yA3cEAAAAVsYrpH9AAAEAwBHMEUCIDW6DerkS5uWL0Tdg6ZNbUUdXUcUOsqUasBK LPyaN67KAiEAsYID1ErQBt8chI40VZmSu7ixkJx5jDYecb54rleoZU8AdgDuS723 dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVsYrpO8AAAEAwBHMEUCIG3m F8qhtE5iN53NmTGj574gLYnGl/q/D9FODR6AyWSXAiEAnWbcymPoOhNJ5+rngi+J F9R/l07QwlRMLPQIi+NEd3YwDQYJKoZIhvcNAQELBQADggEBAEn5j8ZPRix+lYaC 8IQFrDV6pq/l5QGzvG9w0y+ejIKgHn3hNciRJTQbcXy5hwW9dbEqkKFtHBIG7yRM tUIH7WtMfA5JKnOwvU1uqsxcAn5KyFqJ843VtEPy4BFncWWkUs3EhVWOeq3Uba1i M0h0thKi+MHjgckgLDWllZtfQtRo+12M/N+HWE6LtF2nf6wXBdZJzC4GnozNVVOz YxWdGB3KSpqq09OY7V5pTQ3qrkThi5WqfXHA69tDXDXiDKV0uC0hwPUx6pVUnFXy Rza3v8EC83KBzxsT+wAZCzLbAfc0t47zMcWmkT8OTW2dfGGB+TfsfIRPAU9xFgNs t9ERBSQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq5DSnpfD1rBs7rxqQqB D09YU8yq4BDOrtKujrpvwhq68ufVLlCOkVNGVD4JgRDoYDv68feUkxlEf+prY7up 8FWkKdrtQU5vsfRXTmdTg5sOBLTceqayr25LCHgWAR3Xwx6bMsE+6bmD4/4FKLpG FQtH0CXUu8O3+19XfemP0wX3b/eLGRzQgfOiESfXHRo49AfYKlFU3utmrwjr3+JJ TkXTPqLLITfrf+2/HPF3kwhSMKHx7Icv8d6hktn4PrYwzNvDWKcFpRqwqt1fotC0 Q/QT3sLVTTOYmadnqYOWz8Y5IeUFAXY0Iop7Zh+6WKHjN3TnHqPkk8z6YdrthaYp AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 131462074448946001275760103951804472989 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10022' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '399 Park Avenue' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Citigroup Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DigitalMiddlewareWebuk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.citibank.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16496911862221499467308380118577977598120366564505192468347523711607435264592139866514751344574436343903669548340360483794623691411129242158649838244619805254334390311432024231897255471497991576525422666652477939297257271914297242633030434641178542753323324642680954657741087271691550875108898249655858361789236687853227083940907453567689268158942263283629514829091690618644956714969244751735035897897188038540590463005188391730781028572201309386957493271303549804009016967254705005182482720028069162877070006578640125067436527103420442673884222993103058222649348512460906252690972895291566421063808319588189870631169 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citibank.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citibank.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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