Audit Trail

Evidence record for domain check

Integrity Verified
Verification ID
0e7d74bf-d74b-406a-8369-57cf0bc685e2
Domain
citigroup.com
Mode
manual
Started
2026-03-07 01:00:18 +08
Finished
2026-03-07 01:00:29 +08
Status
completed
Test Node Profile
dual stack
Engine Version
2.0.0
MGv6C Version
1.0.0
Test Node Identity
{
    "os": "Linux srv1440888 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Mon Feb  9 10:15:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.30",
    "server_ipv4": null,
    "server_ipv6": null
}
Node Network Evidence
{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "unreachable",
            "v6_egress": "unreachable"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}
DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47589
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
citigroup.com.		1067	IN	A	104.96.178.165
citigroup.com.		1067	IN	A	104.94.222.171

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23405
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; AUTHORITY SECTION:
com.			900	IN	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1772787596 1800 900 604800 900

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44710
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
citigroup.com.		1617	IN	MX	5 mx-a.mail.citi.com.
citigroup.com.		1617	IN	MX	5 mx-b.mail.citi.com.

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23918
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
citigroup.com.		3600	IN	NS	ns2.nsroot2.com.
citigroup.com.		3600	IN	NS	ns1.nsroot1.com.

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57271
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
citigroup.com.		3600	IN	TXT	"paloaltonetworks-site-verification=3882d978b07397802d48b9068f445c4de7b6e8fc234da8251d8d77cc0e055342"
citigroup.com.		3600	IN	TXT	"v=spf1 a:1._spf.citigroup.com a:2._spf.citigroup.com include:spf-00123c01.pphosted.com redirect=ext1._spf.citigroup.com"
citigroup.com.		3600	IN	TXT	"facebook-domain-verification=2amqbctg7cv6hq0dxq4tf107b3y0zn"
citigroup.com.		3600	IN	TXT	"google-site-verification=a5KdIF5qvy8oEnllolMuPZkvHZiN39w_Sc_wqWtJZDI"
citigroup.com.		3600	IN	TXT	"google-site-verification=W1oZvZ4pAy7ASU5vtQdbeLvsM-BLaTkQqUKHkEfkKW8"
citigroup.com.		3600	IN	TXT	"webexdomainverification.9L49J=8ea68d0a-1e43-4ae8-9f61-f0dc3a1ba394"
citigroup.com.		3600	IN	TXT	"cisco-ci-domain-verification=4ff6832706517f60b04d042675c64a5525964fb03e1eb52365349b8b765063df"
citigroup.com.		3600	IN	TXT	"postman-domain-verification=b0973f7c46e67edf55bb3d7f0de30d91ae3c1329d2512ad912375d873557ec111f5e579af0d3e0903d8ff7cf1ebfb3c9e219bbdbf12203912f850ab59087acee"
citigroup.com.		3600	IN	TXT	"MS=ms92288257"
citigroup.com.		3600	IN	TXT	"MS=617A9E7598377F278D9D3B8CEBB893E897E4391D"
citigroup.com.		3600	IN	TXT	"google-site-verification=aFfLeCV8R5dO_bwkfnkyLB-RaRNaZ_vYRC_yM_z6rSM"
citigroup.com.		3600	IN	TXT	"google-site-verification=B2RTefeDQDD6q_djOf22I7ncFCBM1hs0OuR29V5rbbo"
citigroup.com.		3600	IN	TXT	"globalsign-domain-verification=5333822B44304398DE567C2747872C29"

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36397
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; AUTHORITY SECTION:
citigroup.com.		1800	IN	SOA	ns1.nsroot1.com. hostmaster.citi.com. 2021102407 3600 300 2419200 3600

RRSIG

ns1.nsroot1.com. hostmaster.citi.com. 2021102407 3600 300 2419200 3600

DNSKEY

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11411
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; AUTHORITY SECTION:
citigroup.com.		1800	IN	SOA	ns1.nsroot1.com. hostmaster.citi.com. 2021102407 3600 300 2419200 3600

DNSSEC_VALIDATION

; unsigned answer
citigroup.com.		3596	IN	SOA	ns1.nsroot1.com. hostmaster.citi.com. 2021102407 3600 300 2419200 3600

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver Transport A (IPv4) AAAA (IPv6) Delta
System Default 8.57 ms (p95: 9.21) 14.95 ms (p95: 18.31) +6.4 ms
Google IPv4 17.31 ms (p95: 19.34) 32.45 ms (p95: 38.79) +15.1 ms
Google IPv6 27.07 ms (p95: 27.13) 26.06 ms (p95: 29.91) -1 ms
Cloudflare IPv4 23.28 ms (p95: 30.17) 9.7 ms (p95: 22.1) -13.6 ms
Cloudflare IPv6 10.76 ms (p95: 17.08) 17.32 ms (p95: 17.86) +6.6 ms
TLS Handshake Details
{
    "ipv4": {
        "ip_used": "104.94.222.171",
        "ip_version": 4,
        "raw_handshake": "depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2\nverify return:1\ndepth=1 C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2\nverify return:1\ndepth=0 jurisdictionC = US, jurisdictionST = Delaware, businessCategory = Private Organization, serialNumber = 2154254, C = US, ST = New York, L = New York, O = Citigroup Inc., CN = www.citi.com\nverify return:1\nCONNECTED(00000010)\n---\nCertificate chain\n 0 s:jurisdictionC = US, jurisdictionST = Delaware, businessCategory = Private Organization, serialNumber = 2154254, C = US, ST = New York, L = New York, O = Citigroup Inc., CN = www.citi.com\n   i:C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2\n   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256\n   v:NotBefore: Oct 29 00:00:00 2025 GMT; NotAfter: Mar 31 23:59:59 2026 GMT\n-----BEGIN CERTIFICATE-----\nMIIMcTCCC1mgAwIBAgIQC2liiBgEpLAr++0T6j176jANBgkqhkiG9w0BAQsFADBE\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE\naWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjUxMDI5MDAwMDAwWhcNMjYwMzMxMjM1\nOTU5WjCBxDETMBEGCysGAQQBgjc8AgEDEwJVUzEZMBcGCysGAQQBgjc8AgECEwhE\nZWxhd2FyZTEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xEDAOBgNVBAUT\nBzIxNTQyNTQxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazERMA8GA1UE\nBxMITmV3IFlvcmsxFzAVBgNVBAoTDkNpdGlncm91cCBJbmMuMRUwEwYDVQQDEwx3\nd3cuY2l0aS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1dbF\nVVYKD9Dc1bJKuLIDESbJBXp+Ti/Zvzz6SMaKPP/fMjO/k5nGBVsTw1xNOLRjve+9\nNyFBeajMtZRJyPPsfqgmJnoDEKV0z3zBDTH31vRUZ2K1934iHUumpcNE+GsO5yqH\nhlJOYrENJZkTxSSQg3SKj38tDDtj+5TvT+k/mht3xSftZKa8hP4XFxH6axxUnxbc\nX5+HbSzz7Rx8kddEzv0PxMLGqa9LlkfRfJQzqhai7NXUD3h2JCa62ziQ/yxIKjnb\nCjnFKZHPAbt5qChsM5v6582kENhg0OjO/kNTCrLKC1r3fF+wLGFUsvjdGSm2LWRJ\n52v82vebzJVvNuJ/AgMBAAGjggjcMIII2DAfBgNVHSMEGDAWgBRqTlC/mGidW3sg\nddRZAXlIZpIyBjAdBgNVHQ4EFgQUq6tHCCsRZtJEbGTnK84PTB4Ni08wggWcBgNV\nHREEggWTMIIFj4IMd3d3LmNpdGkuY29tgg1hY2NpdHJhZGUuY29tghBhY2NpdHJh\nZGUuY29tLm14ggtiYW5hbWV4LmNvbYISYmxvZy5jaXRpZ3JvdXAuY29tghljYXJk\nc2VydmljZXNkaXJlY3QuY29tLmF1ghVjYXJlZXJzLmNpdGlncm91cC5jb22CCmNp\ndGkuY28uaWSCCGNpdGkuY29tggtjaXRpYmFuay5hZYIOY2l0aWJhbmsuY28uaWSC\nDmNpdGliYW5rLmNvLmtygg5jaXRpYmFuay5jby50aIIOY2l0aWJhbmsuY28udWuC\nDGNpdGliYW5rLmNvbYIPY2l0aWJhbmsuY29tLmF1gg9jaXRpYmFuay5jb20uY26C\nD2NpdGliYW5rLmNvbS5oa4IPY2l0aWJhbmsuY29tLnNngg9jaXRpYmFuay5jb20u\ndm6CC2NpdGliYW5rLmN6ggtjaXRpYmFuay5odYILY2l0aWJhbmsucGyCC2NpdGli\nYW5rLnNrghFjaXRpYmFua29ubGluZS5wbIIOY2l0aWRpcmVjdC5jb22CCmNpdGlm\neC5jb22CD2NpdGlmeHB1bHNlLmNvbYIOY2l0aWdvbGQuY28ua3KCD2NpdGlnb2xk\nLmNvbS5oa4IPY2l0aWdvbGQuY29tLnNnggtjaXRpZ29sZC5wbIINY2l0aWdyb3Vw\nLmNvbYIMY2l0aWdyb3VwLmpwgg9jaXRpbWFuYWdlci5jb22CEGNpdGlwYXkuY2l0\naS5jb22CEGNpdGl2ZWxvY2l0eS5jb22CHGV1cm9wZS5jaXRpZ29sZC5jaXRpYmFu\nay5jb22CDmZpbmRteWNpdGkuY29tghRob21lb3duZXJzdXBwb3J0LmNvbYIUaW52\nZXN0bWVudHMuY2l0aS5jb22CDGlwYi5jaXRpLmNvbYISaXBiLmNpdGliYW5rLmNv\nLnVrghBpcGIuY2l0aWJhbmsuY29tgg9pcGIuY2l0aWJhbmsuZXWCDmlwYnVzLmNp\ndGkuY29tgiBpcGJ1c2NsaWVudGFwcHJlY2lhdGlvbi5jaXRpLmNvbYIbcmVjb2du\naXRpb25wcm9ncmFtLmNpdGkuY29tgg9zZWN1cmUuY2l0aS5jb22CEXVuaXZlcnNh\nbGNhcmQuY29tghB3b3JrZGF5LmNpdGkuY29tghZ3d3cuYmxvZy5jaXRpZ3JvdXAu\nY29tghl3d3cuY2FyZGJlbmVmaXRzLmNpdGkuY29tghl3d3cuY2FyZWVycy5jaXRp\nZ3JvdXAuY29tgg53d3cuY2l0aS5jby5pZIIPd3d3LmNpdGliYW5rLmFlghJ3d3cu\nY2l0aWJhbmsuY28uaWSCE3d3dy5jaXRpYmFuay5jb20udHeCD3d3dy5jaXRpYmFu\nay5jeoIPd3d3LmNpdGliYW5rLmh1gg93d3cuY2l0aWJhbmsuc2uCEHd3dy5jaXRp\nZ3JvdXAuanCCE3d3dy5jaXRpbWFuYWdlci5jb22CFHd3dy5jaXRpcGF5LmNpdGku\nY29tgiB3d3cuZXVyb3BlLmNpdGlnb2xkLmNpdGliYW5rLmNvbYIYd3d3LmludmVz\ndG1lbnRzLmNpdGkuY29tghB3d3cuaXBiLmNpdGkuY29tghZ3d3cuaXBiLmNpdGli\nYW5rLmNvLnVrghR3d3cuaXBiLmNpdGliYW5rLmNvbYITd3d3LmlwYi5jaXRpYmFu\nay5ldYISd3d3LmlwYnVzLmNpdGkuY29tgiR3d3cuaXBidXNjbGllbnRhcHByZWNp\nYXRpb24uY2l0aS5jb22CEHd3dy5tb3J0Z2FnZS5jb22CEXd3dy5zZWFyc2NhcmQu\nY29tghV3d3cudW5pdmVyc2FsY2FyZC5jb22CDXd3dzQuY2l0aS5jb20wSgYDVR0g\nBEMwQTALBglghkgBhv1sAgEwMgYFZ4EMAQEwKTAnBggrBgEFBQcCARYbaHR0cDov\nL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU\nBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2Ny\nbDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNybDA0oDKgMIYuaHR0\ncDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNybDBzBggr\nBgEFBQcBAQRnMGUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv\nbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD\nZXJ0RVZSU0FDQUcyLmNydDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSC\nAW8EggFrAWkAdwCWl2S/VViXrfdDh2g3CEJ36fA61fak8zZuRqQ/D8qpxgAAAZow\nqMpFAAAEAwBIMEYCIQCv4r0M+YFphls37Kdx01bX55Snj8MCHlGh9KksRfMGmgIh\nAN7LHrHlPwF5E4ZHdtKooabbp0cqxuxrLJDZZgmJU+qyAHYAZBHEbKQS7KeJHKIC\nLgC8q08oB9QeNSer6v7VA8l9zfAAAAGaMKjKOgAABAMARzBFAiAOYr9WaIjVEB1J\nGdz/yKDXoMzuNH13zf1stMiJisAa1gIhAPmRIoU25isKVT0jUKc6CGvOPgYpBHoz\nq4SmwA6Os4zoAHYASZybad4dfOz8Nt7Nh2SmuFuvCoeAGdFVUvvp6ynd+MMAAAGa\nMKjKTAAABAMARzBFAiAJ7NVvYcGGWYmcOMhhBhVfyoLdN9kYl1ggkYeLd3mMfgIh\nALS02kXKUzk5yeD3VjmPoTxn3CYNA/z0c4L6pm6SD1DYMA0GCSqGSIb3DQEBCwUA\nA4IBAQAEtP7dYdEX9RiM8eDg4nSPeNl2GgBYGqrrhLIA+89NNuD8sxZNjTwK2O/L\nvONPvcUtoVCrMb2NWbyniLG7eDQ0IJqu+XPR5pVppeTDV9QGXtpbiPdxMKXuYxWx\nob/sbskWDrGb+is47tAIGYVn5J3U695/0/cNmHA1s6Vk9D5TYRL1u12po3+tkMmh\nqpr5cNdIxkYR5PJbGmO2XpvH4ojCD3kOSOh6KLjhdiCjry1Jwl5R66yCWwTRePvU\nEcQiYzMc8lxpD5PHZJQ8X3D+28gc1hc8jhYqjeQ527ofGMnPHqqZUgXp3F4qucPu\nl22vR6VoYqNKP0CJyxZYGNkW3vlr\n-----END CERTIFICATE-----\n 1 s:C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2\n   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2\n   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256\n   v:NotBefore: Jul  2 12:42:50 2020 GMT; NotAfter: Jul  2 12:42:50 2030 GMT\n-----BEGIN CERTIFICATE-----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"
    }
}
HTTP Response Headers
{
    "v4_http": {
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "104.94.222.171",
        "total_time_ms": 458.19,
        "connect_time_ms": 229.7,
        "response_headers": [
            "HTTP/1.1 403 Forbidden",
            "Server: AkamaiGHost",
            "Mime-Version: 1.0",
            "Content-Type: text/html",
            "Content-Length: 361",
            "Expires: Fri, 06 Mar 2026 09:00:25 GMT",
            "Cache-Control: max-age=0, no-cache, no-store",
            "Pragma: no-cache",
            "Date: Fri, 06 Mar 2026 09:00:25 GMT",
            "Connection: close"
        ],
        "starttransfer_time_ms": 458.16
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\nl22vR6VoYqNKP0CJyxZYGNkW3vlr\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2",
                    "rsa(e)": "10001",
                    "rsa(n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
                    "Subject": "jurisdictionC = US, jurisdictionST = Delaware, businessCategory = Private Organization, serialNumber = 2154254, C = US, ST = New York, L = New York, O = Citigroup Inc., CN = www.citi.com",
                    "Version": "2",
                    "Signature": "04:b4:fe:dd:61:d1:17:f5:18:8c:f1:e0:e0:e2:74:8f:78:d9:76:1a:00:58:1a:aa:eb:84:b2:00:fb:cf:4d:36:e0:fc:b3:16:4d:8d:3c:0a:d8:ef:cb:bc:e3:4f:bd:c5:2d:a1:50:ab:31:bd:8d:59:bc:a7:88:b1:bb:78:34:34:20:9a:ae:f9:73:d1:e6:95:69:a5:e4:c3:57:d4:06:5e:da:5b:88:f7:71:30:a5:ee:63:15:b1:a1:bf:ec:6e:c9:16:0e:b1:9b:fa:2b:38:ee:d0:08:19:85:67:e4:9d:d4:eb:de:7f:d3:f7:0d:98:70:35:b3:a5:64:f4:3e:53:61:12:f5:bb:5d:a9:a3:7f:ad:90:c9:a1:aa:9a:f9:70:d7:48:c6:46:11:e4:f2:5b:1a:63:b6:5e:9b:c7:e2:88:c2:0f:79:0e:48:e8:7a:28:b8:e1:76:20:a3:af:2d:49:c2:5e:51:eb:ac:82:5b:04:d1:78:fb:d4:11:c4:22:63:33:1c:f2:5c:69:0f:93:c7:64:94:3c:5f:70:fe:db:c8:1c:d6:17:3c:8e:16:2a:8d:e4:39:db:ba:1f:18:c9:cf:1e:aa:99:52:05:e9:dc:5e:2a:b9:c3:ee:97:6d:af:47:a5:68:62:a3:4a:3f:40:89:cb:16:58:18:d9:16:de:f9:6b:",
                    "Start date": "Oct 29 00:00:00 2025 GMT",
                    "Expire date": "Mar 31 23:59:59 2026 GMT",
                    "Serial Number": "0b6962881804a4b02bfbed13ea3d7bea",
                    "RSA Public Key": "2048",
                    "X509v3 Key Usage": "Digital Signature, Key Encipherment",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "rsaEncryption",
                    "CT Precertificate SCTs": "Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:\n                E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6\n    Timestamp : Oct 29 15:49:19.557 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:AF:E2:BD:0C:F9:81:69:86:5B:37:EC:\n                A7:71:D3:56:D7:E7:94:A7:8F:C3:02:1E:51:A1:F4:A9:\n                2C:45:F3:06:9A:02:21:00:DE:CB:1E:B1:E5:3F:01:79:\n                13:86:47:76:D2:A8:A1:A6:DB:A7:47:2A:C6:EC:6B:2C:\n                90:D9:66:09:89:53:EA:B2\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:\n                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0\n    Timestamp : Oct 29 15:49:19.546 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:0E:62:BF:56:68:88:D5:10:1D:49:19:DC:\n                FF:C8:A0:D7:A0:CC:EE:34:7D:77:CD:FD:6C:B4:C8:89:\n                8A:C0:1A:D6:02:21:00:F9:91:22:85:36:E6:2B:0A:55:\n                3D:23:50:A7:3A:08:6B:CE:3E:06:29:04:7A:33:AB:84:\n                A6:C0:0E:8E:B3:8C:E8\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:\n                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3\n    Timestamp : Oct 29 15:49:19.564 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:09:EC:D5:6F:61:C1:86:59:89:9C:38:C8:\n                61:06:15:5F:CA:82:DD:37:D9:18:97:58:20:91:87:8B:\n                77:79:8C:7E:02:21:00:B4:B4:DA:45:CA:53:39:39:C9:\n                E0:F7:56:39:8F:A1:3C:67:DC:26:0D:03:FC:F4:73:82:\n                FA:A6:6E:92:0F:50:D8",
                    "X509v3 Basic Constraints": "CA:FALSE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.16.840.1.114412.2.1\nPolicy: 2.23.140.1.1\n  CPS: http://www.digicert.com/CPS",
                    "Authority Information Access": "OCSP - URI:http://ocsp.digicert.com\nCA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt",
                    "X509v3 Subject Key Identifier": "AB:AB:47:08:2B:11:66:D2:44:6C:64:E7:2B:CE:0F:4C:1E:0D:8B:4F",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl\nFull Name:\n  URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl",
                    "X509v3 Authority Key Identifier": "6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06",
                    "X509v3 Subject Alternative Name": "DNS:www.citi.com, DNS:accitrade.com, DNS:accitrade.com.mx, DNS:banamex.com, DNS:blog.citigroup.com, DNS:cardservicesdirect.com.au, DNS:careers.citigroup.com, DNS:citi.co.id, DNS:citi.com, DNS:citibank.ae, DNS:citibank.co.id, DNS:citibank.co.kr, DNS:citibank.co.th, DNS:citibank.co.uk, DNS:citibank.com, DNS:citibank.com.au, DNS:citibank.com.cn, DNS:citibank.com.hk, DNS:citibank.com.sg, DNS:citibank.com.vn, DNS:citibank.cz, DNS:citibank.hu, DNS:citibank.pl, DNS:citibank.sk, DNS:citibankonline.pl, DNS:citidirect.com, DNS:citifx.com, DNS:citifxpulse.com, DNS:citigold.co.kr, DNS:citigold.com.hk, DNS:citigold.com.sg, DNS:citigold.pl, DNS:citigroup.com, DNS:citigroup.jp, DNS:citimanager.com, DNS:citipay.citi.com, DNS:citivelocity.com, DNS:europe.citigold.citibank.com, DNS:findmyciti.com, DNS:homeownersupport.com, DNS:investments.citi.com, DNS:ipb.citi.com, DNS:ipb.citibank.co.uk, DNS:ipb.citibank.com, DNS:ipb.citibank.eu, DNS:ipbus.citi.com, DNS:ipbusclientappreciation.citi.com, DNS:recognitionprogram.citi.com, DNS:secure.citi.com, DNS:universalcard.com, DNS:workday.citi.com, DNS:www.blog.citigroup.com, DNS:www.cardbenefits.citi.com, DNS:www.careers.citigroup.com, DNS:www.citi.co.id, DNS:www.citibank.ae, DNS:www.citibank.co.id, DNS:www.citibank.com.tw, DNS:www.citibank.cz, DNS:www.citibank.hu, DNS:www.citibank.sk, DNS:www.citigroup.jp, DNS:www.citimanager.com, DNS:www.citipay.citi.com, DNS:www.europe.citigold.citibank.com, DNS:www.investments.citi.com, DNS:www.ipb.citi.com, DNS:www.ipb.citibank.co.uk, DNS:www.ipb.citibank.com, DNS:www.ipb.citibank.eu, DNS:www.ipbus.citi.com, DNS:www.ipbusclientappreciation.citi.com, DNS:www.mortgage.com, DNS:www.searscard.com, DNS:www.universalcard.com, DNS:www4.citi.com"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2",
                    "rsa(e)": "10001",
                    "rsa(n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
                    "Subject": "C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2",
                    "Version": "2",
                    "Signature": "52:32:0a:c2:75:8d:be:3b:db:29:9d:83:6f:c0:78:86:fb:d9:42:25:bc:84:2d:1d:14:b2:82:f0:a7:31:a9:49:d9:07:0f:ba:55:0c:31:49:9b:7f:ff:07:c1:2c:fb:5e:d3:d6:8e:47:6a:df:87:44:3b:2f:46:be:dd:dc:c1:32:a3:d8:97:92:4c:4b:84:a1:20:02:90:36:16:dd:9e:65:f3:eb:4e:89:5c:f7:93:f0:49:69:e7:dc:56:7c:06:17:46:3b:86:eb:4c:0e:3e:ce:43:d2:2a:83:17:8b:f5:fe:58:b0:4d:37:6f:59:fe:76:c2:4b:b1:ff:a8:b1:ad:ee:05:62:12:f4:c8:75:4f:31:f8:7e:25:fd:78:a0:64:c5:03:69:59:89:f8:1e:5d:ed:cc:12:2b:bc:8e:a1:07:5f:a0:80:46:98:0e:4c:a7:82:e1:33:3a:39:da:b7:ff:fe:45:cf:7c:4d:f0:60:86:55:1e:a5:6e:c7:19:67:4e:41:58:99:f7:c2:5f:df:cb:a2:7e:d2:59:a1:9d:83:a4:5c:93:84:47:84:72:d6:b6:6c:f6:95:36:79:08:4a:36:96:30:ec:1b:30:85:18:93:fb:a1:3e:2a:e9:0f:28:14:2d:fc:8a:bb:dd:28:82:7d:e5:c5:31:63:38:f8:b6:73:88:",
                    "Start date": "Jul  2 12:42:50 2020 GMT",
                    "Expire date": "Jul  2 12:42:50 2030 GMT",
                    "Serial Number": "01678f1fef882255d8b0a70e6b7bb220",
                    "RSA Public Key": "2048",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "rsaEncryption",
                    "X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS\n  User Notice:\n    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua",
                    "Authority Information Access": "OCSP - URI:http://ocsp.digicert.com",
                    "X509v3 Subject Key Identifier": "6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\nFull Name:\n  URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl",
                    "X509v3 Authority Key Identifier": "4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39"
                }
            ]
        },
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "104.94.222.171",
        "total_time_ms": 996.51,
        "connect_time_ms": 280.27,
        "response_headers": [
            "HTTP/1.1 403 Forbidden",
            "Server: AkamaiGHost",
            "Mime-Version: 1.0",
            "Content-Type: text/html",
            "Content-Length: 361",
            "Expires: Fri, 06 Mar 2026 09:00:27 GMT",
            "Cache-Control: max-age=0, no-cache, no-store",
            "Pragma: no-cache",
            "Date: Fri, 06 Mar 2026 09:00:27 GMT",
            "Connection: close"
        ],
        "starttransfer_time_ms": 996.48
    }
}
Connectivity Test Output
{
    "tcp_connect_v4_80": "301 0.262655 0.541816",
    "tcp_connect_v4_443": "301 0.275526 1.110055"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 19b50c6906ff2e0ac3325ea54182a89f12ee8a0a5b1e7fc2f89e0981f6f459af
http_headers: 085e22d3f7b3d29db722bafeea4098d2f3355a5c24292f4d879ecfc2a02fde5c
dns_responses: baf4c84cf3f3b1e0aab541852baa680d8357a92540544f1011f34b0a5c199c6a
tls_handshake: 3216205789ee42bcd5d8ea6926c30bdb140ab3e3bb372a32efa75570c748e06b
connectivity_log: fa3f8e73e5d5f8948e97183d6354aedc2cb34c18e4badd921d6144413922737f
dns_resolution_times: 0137989e1da3b35b491db3459b8d2e623628c1d993ba9d6a3755d5676e397363