Audit Trail
Evidence record for domain check
Integrity Verified
Test Node Identity
{
"os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
"hostname": "srv1440888",
"php_version": "8.3.31",
"server_ipv4": "76.13.221.142",
"server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
"profile": "ipv6_only",
"enforcement_evidence": {
"egress_check": {
"v4_egress": "76.13.221.142",
"v6_egress": "unreachable"
},
"ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
"ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
"sysctl_flags": {
"net.ipv6.conf.all.disable_ipv6": "0"
},
"nftables_summary": "unavailable or no permissions"
}
}
DNS Responses
A
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55838 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: citigroup.com. 3600 IN A 104.96.178.165 citigroup.com. 3600 IN A 104.94.222.171
DS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64713 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: com. 884 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 1781282893 1800 900 604800 900
MX
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43598 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: citigroup.com. 1800 IN MX 5 mx-b.mail.citi.com. citigroup.com. 1800 IN MX 5 mx-a.mail.citi.com.
NS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54578 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: citigroup.com. 3600 IN NS ns2.nsroot2.com. citigroup.com. 3600 IN NS ns1.nsroot1.com.
TXT
;; Truncated, retrying in TCP mode. ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62076 ;; flags: qr rd ra; QUERY: 1, ANSWER: 16, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: citigroup.com. 3600 IN TXT "google-site-verification=a5KdIF5qvy8oEnllolMuPZkvHZiN39w_Sc_wqWtJZDI" citigroup.com. 3600 IN TXT "google-site-verification=aFfLeCV8R5dO_bwkfnkyLB-RaRNaZ_vYRC_yM_z6rSM" citigroup.com. 3600 IN TXT "google-site-verification=fFBk708T6VrNiFf8tgKZCw8vlZRvagtVZl-EnvQcOzY" citigroup.com. 3600 IN TXT "google-site-verification=jyExexYbISl-RPnkFRcw-mDH_aR3jJH71dDGXCNvAUQ" citigroup.com. 3600 IN TXT "cisco-ci-domain-verification=4ff6832706517f60b04d042675c64a5525964fb03e1eb52365349b8b765063df" citigroup.com. 3600 IN TXT "paloaltonetworks-site-verification=3882d978b07397802d48b9068f445c4de7b6e8fc234da8251d8d77cc0e055342" citigroup.com. 3600 IN TXT "v=spf1 a:1._spf.citigroup.com a:2._spf.citigroup.com include:spf-00123c01.pphosted.com redirect=ext1._spf.citigroup.com" citigroup.com. 3600 IN TXT "postman-domain-verification=b0973f7c46e67edf55bb3d7f0de30d91ae3c1329d2512ad912375d873557ec111f5e579af0d3e0903d8ff7cf1ebfb3c9e219bbdbf12203912f850ab59087acee" citigroup.com. 3600 IN TXT "MS=ms92288257" citigroup.com. 3600 IN TXT "MS=617A9E7598377F278D9D3B8CEBB893E897E4391D" citigroup.com. 3600 IN TXT "facebook-domain-verification=2amqbctg7cv6hq0dxq4tf107b3y0zn" citigroup.com. 3600 IN TXT "globalsign-domain-verification=5333822B44304398DE567C2747872C29" citigroup.com. 3600 IN TXT "webexdomainverification.9L49J=8ea68d0a-1e43-4ae8-9f61-f0dc3a1ba394" citigroup.com. 3600 IN TXT "google-site-verification=B2RTefeDQDD6q_djOf22I7ncFCBM1hs0OuR29V5rbbo" citigroup.com. 3600 IN TXT "google-site-verification=Lu5ecxuGzVLD5xOgdMcF244KOFnquxxCegkBp8DUuBY" citigroup.com. 3600 IN TXT "google-site-verification=W1oZvZ4pAy7ASU5vtQdbeLvsM-BLaTkQqUKHkEfkKW8"
AAAA
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41126 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: citigroup.com. 3597 IN SOA ns1.nsroot1.com. hostmaster.citi.com. 2021103026 3600 300 2419200 3600
RRSIG
ns1.nsroot1.com. hostmaster.citi.com. 2021103026 3600 300 2419200 3600
DNSKEY
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59989 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: citigroup.com. 3597 IN SOA ns1.nsroot1.com. hostmaster.citi.com. 2021103026 3600 300 2419200 3600
DNSSEC_VALIDATION
; unsigned answer citigroup.com. 3597 IN SOA ns1.nsroot1.com. hostmaster.citi.com. 2021103026 3600 300 2419200 3600
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 6.9 ms (p95: 19.83) | 6.04 ms (p95: 17.39) | -0.9 ms |
| IPv4 | 20.88 ms (p95: 23.33) | 22.32 ms (p95: 26.08) | +1.4 ms | |
| IPv6 | 32.89 ms (p95: 35.97) | 32.89 ms (p95: 33.59) | 0 ms | |
| Cloudflare | IPv4 | 24 ms (p95: 25.01) | 24.19 ms (p95: 29.76) | +0.2 ms |
| Cloudflare | IPv6 | 29.8 ms (p95: 32.73) | 38.88 ms (p95: 42.35) | +9.1 ms |
TLS Handshake Details
{
"ipv4": {
"ip_used": "104.96.178.165",
"ip_version": 4,
"raw_handshake": "depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2\nverify return:1\ndepth=1 C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2\nverify return:1\ndepth=0 jurisdictionC = US, jurisdictionST = Delaware, businessCategory = Private Organization, serialNumber = 2154254, C = US, ST = New York, L = New York, O = Citigroup Inc., CN = www.citi.com\nverify return:1\nCONNECTED(00000010)\n---\nCertificate chain\n 0 s:jurisdictionC = US, jurisdictionST = Delaware, businessCategory = Private Organization, serialNumber = 2154254, C = US, ST = New York, L = New York, O = Citigroup Inc., CN = www.citi.com\n i:C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2\n a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256\n v:NotBefore: Apr 10 00:00:00 2026 GMT; NotAfter: Oct 8 23:59:59 2026 GMT\n-----BEGIN CERTIFICATE-----\nMIIMejCCC2KgAwIBAgIQDFh0Bc83RGkCRO0kn1JSKDANBgkqhkiG9w0BAQsFADBE\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE\naWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjYwNDEwMDAwMDAwWhcNMjYxMDA4MjM1\nOTU5WjCBxDETMBEGCysGAQQBgjc8AgEDEwJVUzEZMBcGCysGAQQBgjc8AgECEwhE\nZWxhd2FyZTEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xEDAOBgNVBAUT\nBzIxNTQyNTQxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazERMA8GA1UE\nBxMITmV3IFlvcmsxFzAVBgNVBAoTDkNpdGlncm91cCBJbmMuMRUwEwYDVQQDEwx3\nd3cuY2l0aS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJat+5\n0qIzn+LSN8vqtlQEePFNRr9MRYPwwNvS6/ZF2ifcYguVPNCaE1JuxPi6+nSKuOVo\npvDVw10uxsXTtEs2gE4sd+jDy80pkM0hWrCYiDvVRzuGIafjgSPgC7LJYIn3l2tp\nSyMIwr1O/ELQ01adRVPsxvQX4rrjyyhm4sr0bAiFM1i7Auvw40iLOFkyULDq/igv\n0SYfMxNFA7uyAXtp2FRP90k9m7SylpRWZMJr1KPoY1sH5KHnbrcCY7+p6+LCrrOF\nKjpLj9e7D9c6lLM3SspfxNJnonLjmTvFFjtpw6lUeEgMsdQGQxCCTTe/4bdu5gXd\ngAzGohsf5ElPAmj5AgMBAAGjggjlMIII4TAfBgNVHSMEGDAWgBRqTlC/mGidW3sg\nddRZAXlIZpIyBjAdBgNVHQ4EFgQUDf44ZHwhaTKvcHLFGrGJCl3DtfMwggWyBgNV\nHREEggWpMIIFpYIMd3d3LmNpdGkuY29tgg1hY2NpdHJhZGUuY29tghBhY2NpdHJh\nZGUuY29tLm14ggtiYW5hbWV4LmNvbYISYmxvZy5jaXRpZ3JvdXAuY29tghVjYXJl\nZXJzLmNpdGlncm91cC5jb22CCmNpdGkuY28uaWSCCGNpdGkuY29tggtjaXRpYmFu\nay5hZYIOY2l0aWJhbmsuY28uaWSCDmNpdGliYW5rLmNvLmtygg5jaXRpYmFuay5j\nby50aIIOY2l0aWJhbmsuY28udWuCDGNpdGliYW5rLmNvbYIPY2l0aWJhbmsuY29t\nLmNugg9jaXRpYmFuay5jb20uaGuCD2NpdGliYW5rLmNvbS5zZ4IPY2l0aWJhbmsu\nY29tLnZuggtjaXRpYmFuay5jeoILY2l0aWJhbmsuaHWCC2NpdGliYW5rLnBsggtj\naXRpYmFuay5za4IRY2l0aWJhbmtvbmxpbmUucGyCDmNpdGlkaXJlY3QuY29tggpj\naXRpZnguY29tgg9jaXRpZnhwdWxzZS5jb22CDmNpdGlnb2xkLmNvLmtygg9jaXRp\nZ29sZC5jb20uaGuCD2NpdGlnb2xkLmNvbS5zZ4ILY2l0aWdvbGQucGyCDWNpdGln\ncm91cC5jb22CDGNpdGlncm91cC5qcIIPY2l0aW1hbmFnZXIuY29tghBjaXRpcGF5\nLmNpdGkuY29tghRjaXRpdGhhbmt5b3VjYXJkLmNvbYIOY2l0aXRyYXZlbC5jb22C\nEGNpdGl2ZWxvY2l0eS5jb22CHGV1cm9wZS5jaXRpZ29sZC5jaXRpYmFuay5jb22C\nDmZpbmRteWNpdGkuY29tghRob21lb3duZXJzdXBwb3J0LmNvbYIUaW52ZXN0bWVu\ndHMuY2l0aS5jb22CDGlwYi5jaXRpLmNvbYISaXBiLmNpdGliYW5rLmNvLnVrghBp\ncGIuY2l0aWJhbmsuY29tgg9pcGIuY2l0aWJhbmsuZXWCDmlwYnVzLmNpdGkuY29t\ngiBpcGJ1c2NsaWVudGFwcHJlY2lhdGlvbi5jaXRpLmNvbYIbcmVjb2duaXRpb25w\ncm9ncmFtLmNpdGkuY29tgg9zZWN1cmUuY2l0aS5jb22CEXVuaXZlcnNhbGNhcmQu\nY29tghB3b3JrZGF5LmNpdGkuY29tghZ3d3cuYmxvZy5jaXRpZ3JvdXAuY29tghl3\nd3cuY2FyZGJlbmVmaXRzLmNpdGkuY29tghl3d3cuY2FyZWVycy5jaXRpZ3JvdXAu\nY29tgg53d3cuY2l0aS5jby5pZIIPd3d3LmNpdGliYW5rLmFlghJ3d3cuY2l0aWJh\nbmsuY28uaWSCE3d3dy5jaXRpYmFuay5jb20udHeCD3d3dy5jaXRpYmFuay5jeoIP\nd3d3LmNpdGliYW5rLmh1gg93d3cuY2l0aWJhbmsuc2uCEHd3dy5jaXRpZ3JvdXAu\nanCCE3d3dy5jaXRpbWFuYWdlci5jb22CFHd3dy5jaXRpcGF5LmNpdGkuY29tghh3\nd3cuY2l0aXRoYW5reW91Y2FyZC5jb22CEnd3dy5jaXRpdHJhdmVsLmNvbYIgd3d3\nLmV1cm9wZS5jaXRpZ29sZC5jaXRpYmFuay5jb22CGHd3dy5pbnZlc3RtZW50cy5j\naXRpLmNvbYIQd3d3LmlwYi5jaXRpLmNvbYIWd3d3LmlwYi5jaXRpYmFuay5jby51\na4IUd3d3LmlwYi5jaXRpYmFuay5jb22CE3d3dy5pcGIuY2l0aWJhbmsuZXWCEnd3\ndy5pcGJ1cy5jaXRpLmNvbYIkd3d3LmlwYnVzY2xpZW50YXBwcmVjaWF0aW9uLmNp\ndGkuY29tghF3d3cuc2VhcnNjYXJkLmNvbYIVd3d3LnVuaXZlcnNhbGNhcmQuY29t\ngg13d3c0LmNpdGkuY29tMEoGA1UdIARDMEEwCwYJYIZIAYb9bAIBMDIGBWeBDAEB\nMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNV\nHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwdQYDVR0fBG4wbDA0oDKg\nMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNy\nbDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FD\nQUcyLmNybDBzBggrBgEFBQcBAQRnMGUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw\nLmRpZ2ljZXJ0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZGlnaWNl\ncnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNydDAMBgNVHRMBAf8EAjAAMIIBfAYK\nKwYBBAHWeQIEAgSCAWwEggFoAWYAdQDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1\nrXaa2Q5SzQAAAZ11Mo42AAAEAwBGMEQCIEoIMnf3nvnpfl3VVaz9PA0L0BvJg/Xd\nCnZsB4TvIqQlAiAmJvA5xBZj4usvecYzTp1tyGaVPKtdouCcpGZQRjCLcAB2ANdt\nfRDRp/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABnXUyjkUAAAQDAEcwRQIg\nD37nrZOSTDI5ohgYWtHL+Ixtf8Gh4jpEK7Aff/zQWNYCIQDzC0KHCrCOoJ2J3tt8\nJdZJ4401rkcxmMdNEiVzX7ZGQAB1AJROQ4f67MHvgfMZJCaoGGUBx9NfOAIBP3Jn\nfVU3LhnYAAABnXUyjkUAAAQDAEYwRAIgMwW5fM3VYA7sM96/ebOd4h1ylGRovdcu\naGn40XYe3OoCIBl0SVDBNyOX0yioffZ0qYF68tfq5ZBALbqqLwegO2VMMA0GCSqG\nSIb3DQEBCwUAA4IBAQAWbgZY+co0slIuqJ7NjYycn7OgfiwFFMkkvgYOYGkFpbD1\n7buBOu1HA41w2YW5+XcK3qCKuJmlBLs7q06lNGbkjRw1xBEXEM8I3x9wN6FRKG7n\nYEMOi0i7OKC+WLaMXlV7fywuQEKgbFBGowIpJS4qmCG44TLdwnIe9p2J096CcRzJ\nDDNoscwpP+2J8+SIYUOyAKppTlt2GCIKUwJercqlog+1kGbpw+ReO93RZ5r7+bTB\nQ3M9yG+H+iPyyXeB0IwL0uo1Cww1BYzvBeyx0mpVb48KpyG+d7itFvW6mn2wR3bN\nAjMlxY4Mv8vOXdzsvXAQ6YSGKr0pEhu6j5WwJHN4\n-----END CERTIFICATE-----\n 1 s:C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2\n i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2\n a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256\n v:NotBefore: Jul 2 12:42:50 2020 GMT; NotAfter: Jul 2 12:42:50 2030 GMT\n-----BEGIN CERTIFICATE-----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"
}
}
HTTP Response Headers
{
"v4_http": {
"http_code": 403,
"curl_error": null,
"primary_ip": "104.96.178.165",
"total_time_ms": 121.79,
"connect_time_ms": 55.78,
"response_headers": [
"HTTP/1.1 403 Forbidden",
"Server: AkamaiGHost",
"Mime-Version: 1.0",
"Content-Type: text/html",
"Content-Length: 363",
"Expires: Fri, 12 Jun 2026 16:48:45 GMT",
"Cache-Control: max-age=0, no-cache, no-store",
"Pragma: no-cache",
"Date: Fri, 12 Jun 2026 16:48:45 GMT",
"Connection: close"
],
"starttransfer_time_ms": 121.75
},
"v4_https": {
"tls": {
"protocol": 0,
"certificates": [
{
"Cert": "-----BEGIN CERTIFICATE-----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\nAjMlxY4Mv8vOXdzsvXAQ6YSGKr0pEhu6j5WwJHN4\n-----END CERTIFICATE-----\n",
"Issuer": "C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2",
"rsa(e)": "10001",
"rsa(n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
"Subject": "jurisdictionC = US, jurisdictionST = Delaware, businessCategory = Private Organization, serialNumber = 2154254, C = US, ST = New York, L = New York, O = Citigroup Inc., CN = www.citi.com",
"Version": "2",
"Signature": "16:6e:06:58:f9:ca:34:b2:52:2e:a8:9e:cd:8d:8c:9c:9f:b3:a0:7e:2c:05:14:c9:24:be:06:0e:60:69:05:a5:b0:f5:ed:bb:81:3a:ed:47:03:8d:70:d9:85:b9:f9:77:0a:de:a0:8a:b8:99:a5:04:bb:3b:ab:4e:a5:34:66:e4:8d:1c:35:c4:11:17:10:cf:08:df:1f:70:37:a1:51:28:6e:e7:60:43:0e:8b:48:bb:38:a0:be:58:b6:8c:5e:55:7b:7f:2c:2e:40:42:a0:6c:50:46:a3:02:29:25:2e:2a:98:21:b8:e1:32:dd:c2:72:1e:f6:9d:89:d3:de:82:71:1c:c9:0c:33:68:b1:cc:29:3f:ed:89:f3:e4:88:61:43:b2:00:aa:69:4e:5b:76:18:22:0a:53:02:5e:ad:ca:a5:a2:0f:b5:90:66:e9:c3:e4:5e:3b:dd:d1:67:9a:fb:f9:b4:c1:43:73:3d:c8:6f:87:fa:23:f2:c9:77:81:d0:8c:0b:d2:ea:35:0b:0c:35:05:8c:ef:05:ec:b1:d2:6a:55:6f:8f:0a:a7:21:be:77:b8:ad:16:f5:ba:9a:7d:b0:47:76:cd:02:33:25:c5:8e:0c:bf:cb:ce:5d:dc:ec:bd:70:10:e9:84:86:2a:bd:29:12:1b:ba:8f:95:b0:24:73:78:",
"Start date": "Apr 10 00:00:00 2026 GMT",
"Expire date": "Oct 8 23:59:59 2026 GMT",
"Serial Number": "0c587405cf3744690244ed249f525228",
"RSA Public Key": "2048",
"X509v3 Key Usage": "Digital Signature, Key Encipherment",
"Signature Algorithm": "sha256WithRSAEncryption",
"Public Key Algorithm": "rsaEncryption",
"CT Precertificate SCTs": "Signed Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:\n C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD\n Timestamp : Apr 10 02:22:20.726 2026 GMT\n Extensions: none\n Signature : ecdsa-with-SHA256\n 30:44:02:20:4A:08:32:77:F7:9E:F9:E9:7E:5D:D5:55:\n AC:FD:3C:0D:0B:D0:1B:C9:83:F5:DD:0A:76:6C:07:84:\n EF:22:A4:25:02:20:26:26:F0:39:C4:16:63:E2:EB:2F:\n 79:C6:33:4E:9D:6D:C8:66:95:3C:AB:5D:A2:E0:9C:A4:\n 66:50:46:30:8B:70\nSigned Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:\n 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77\n Timestamp : Apr 10 02:22:20.741 2026 GMT\n Extensions: none\n Signature : ecdsa-with-SHA256\n 30:45:02:20:0F:7E:E7:AD:93:92:4C:32:39:A2:18:18:\n 5A:D1:CB:F8:8C:6D:7F:C1:A1:E2:3A:44:2B:B0:1F:7F:\n FC:D0:58:D6:02:21:00:F3:0B:42:87:0A:B0:8E:A0:9D:\n 89:DE:DB:7C:25:D6:49:E3:8D:35:AE:47:31:98:C7:4D:\n 12:25:73:5F:B6:46:40\nSigned Certificate Timestamp:\n Version : v1 (0x0)\n Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:\n 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8\n Timestamp : Apr 10 02:22:20.741 2026 GMT\n Extensions: none\n Signature : ecdsa-with-SHA256\n 30:44:02:20:33:05:B9:7C:CD:D5:60:0E:EC:33:DE:BF:\n 79:B3:9D:E2:1D:72:94:64:68:BD:D7:2E:68:69:F8:D1:\n 76:1E:DC:EA:02:20:19:74:49:50:C1:37:23:97:D3:28:\n A8:7D:F6:74:A9:81:7A:F2:D7:EA:E5:90:40:2D:BA:AA:\n 2F:07:A0:3B:65:4C",
"X509v3 Basic Constraints": "CA:FALSE",
"X509v3 Extended Key Usage": "TLS Web Server Authentication",
"X509v3 Certificate Policies": "Policy: 2.16.840.1.114412.2.1\nPolicy: 2.23.140.1.1\n CPS: http://www.digicert.com/CPS",
"Authority Information Access": "OCSP - URI:http://ocsp.digicert.com\nCA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt",
"X509v3 Subject Key Identifier": "0D:FE:38:64:7C:21:69:32:AF:70:72:C5:1A:B1:89:0A:5D:C3:B5:F3",
"X509v3 CRL Distribution Points": "Full Name:\n URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl\nFull Name:\n URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl",
"X509v3 Authority Key Identifier": "6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06",
"X509v3 Subject Alternative Name": "DNS:www.citi.com, DNS:accitrade.com, DNS:accitrade.com.mx, DNS:banamex.com, DNS:blog.citigroup.com, DNS:careers.citigroup.com, DNS:citi.co.id, DNS:citi.com, DNS:citibank.ae, DNS:citibank.co.id, DNS:citibank.co.kr, DNS:citibank.co.th, DNS:citibank.co.uk, DNS:citibank.com, DNS:citibank.com.cn, DNS:citibank.com.hk, DNS:citibank.com.sg, DNS:citibank.com.vn, DNS:citibank.cz, DNS:citibank.hu, DNS:citibank.pl, DNS:citibank.sk, DNS:citibankonline.pl, DNS:citidirect.com, DNS:citifx.com, DNS:citifxpulse.com, DNS:citigold.co.kr, DNS:citigold.com.hk, DNS:citigold.com.sg, DNS:citigold.pl, DNS:citigroup.com, DNS:citigroup.jp, DNS:citimanager.com, DNS:citipay.citi.com, DNS:citithankyoucard.com, DNS:cititravel.com, DNS:citivelocity.com, DNS:europe.citigold.citibank.com, DNS:findmyciti.com, DNS:homeownersupport.com, DNS:investments.citi.com, DNS:ipb.citi.com, DNS:ipb.citibank.co.uk, DNS:ipb.citibank.com, DNS:ipb.citibank.eu, DNS:ipbus.citi.com, DNS:ipbusclientappreciation.citi.com, DNS:recognitionprogram.citi.com, DNS:secure.citi.com, DNS:universalcard.com, DNS:workday.citi.com, DNS:www.blog.citigroup.com, DNS:www.cardbenefits.citi.com, DNS:www.careers.citigroup.com, DNS:www.citi.co.id, DNS:www.citibank.ae, DNS:www.citibank.co.id, DNS:www.citibank.com.tw, DNS:www.citibank.cz, DNS:www.citibank.hu, DNS:www.citibank.sk, DNS:www.citigroup.jp, DNS:www.citimanager.com, DNS:www.citipay.citi.com, DNS:www.citithankyoucard.com, DNS:www.cititravel.com, DNS:www.europe.citigold.citibank.com, DNS:www.investments.citi.com, DNS:www.ipb.citi.com, DNS:www.ipb.citibank.co.uk, DNS:www.ipb.citibank.com, DNS:www.ipb.citibank.eu, DNS:www.ipbus.citi.com, DNS:www.ipbusclientappreciation.citi.com, DNS:www.searscard.com, DNS:www.universalcard.com, DNS:www4.citi.com"
},
{
"Cert": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
"Issuer": "C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2",
"rsa(e)": "10001",
"rsa(n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
"Subject": "C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2",
"Version": "2",
"Signature": "52:32:0a:c2:75:8d:be:3b:db:29:9d:83:6f:c0:78:86:fb:d9:42:25:bc:84:2d:1d:14:b2:82:f0:a7:31:a9:49:d9:07:0f:ba:55:0c:31:49:9b:7f:ff:07:c1:2c:fb:5e:d3:d6:8e:47:6a:df:87:44:3b:2f:46:be:dd:dc:c1:32:a3:d8:97:92:4c:4b:84:a1:20:02:90:36:16:dd:9e:65:f3:eb:4e:89:5c:f7:93:f0:49:69:e7:dc:56:7c:06:17:46:3b:86:eb:4c:0e:3e:ce:43:d2:2a:83:17:8b:f5:fe:58:b0:4d:37:6f:59:fe:76:c2:4b:b1:ff:a8:b1:ad:ee:05:62:12:f4:c8:75:4f:31:f8:7e:25:fd:78:a0:64:c5:03:69:59:89:f8:1e:5d:ed:cc:12:2b:bc:8e:a1:07:5f:a0:80:46:98:0e:4c:a7:82:e1:33:3a:39:da:b7:ff:fe:45:cf:7c:4d:f0:60:86:55:1e:a5:6e:c7:19:67:4e:41:58:99:f7:c2:5f:df:cb:a2:7e:d2:59:a1:9d:83:a4:5c:93:84:47:84:72:d6:b6:6c:f6:95:36:79:08:4a:36:96:30:ec:1b:30:85:18:93:fb:a1:3e:2a:e9:0f:28:14:2d:fc:8a:bb:dd:28:82:7d:e5:c5:31:63:38:f8:b6:73:88:",
"Start date": "Jul 2 12:42:50 2020 GMT",
"Expire date": "Jul 2 12:42:50 2030 GMT",
"Serial Number": "01678f1fef882255d8b0a70e6b7bb220",
"RSA Public Key": "2048",
"X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
"Signature Algorithm": "sha256WithRSAEncryption",
"Public Key Algorithm": "rsaEncryption",
"X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
"X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
"X509v3 Certificate Policies": "Policy: X509v3 Any Policy\n CPS: https://www.digicert.com/CPS\n User Notice:\n Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua",
"Authority Information Access": "OCSP - URI:http://ocsp.digicert.com",
"X509v3 Subject Key Identifier": "6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06",
"X509v3 CRL Distribution Points": "Full Name:\n URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl\nFull Name:\n URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl",
"X509v3 Authority Key Identifier": "4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39"
}
]
},
"http_code": 403,
"curl_error": null,
"primary_ip": "104.96.178.165",
"total_time_ms": 225.84,
"connect_time_ms": 53.42,
"response_headers": [
"HTTP/1.1 403 Forbidden",
"Server: AkamaiGHost",
"Mime-Version: 1.0",
"Content-Type: text/html",
"Content-Length: 363",
"Expires: Fri, 12 Jun 2026 16:48:45 GMT",
"Cache-Control: max-age=0, no-cache, no-store",
"Pragma: no-cache",
"Date: Fri, 12 Jun 2026 16:48:45 GMT",
"Connection: close"
],
"starttransfer_time_ms": 225.8
}
}
Connectivity Test Output
{
"tcp_connect_v4_80": "301 0.054762 0.121844",
"tcp_connect_v4_443": "301 0.053027 0.234596"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: b147e743d7906d458c33968233a0ac204776814d6f08a5c1909d93cb149fba73
http_headers: aae00c31027bc28a9e75b75089b81fd6d415c19b55e03c1af50646b2a27282eb
dns_responses: ed9d283b693087bd738d5cbd6312f5c91b10593af179f6aeec7faf8d5762aa91
tls_handshake: eadbe1ca93dea5def5ba0ac5c80fa0d37619c5ee1efcd85021d98cca7204f9af
connectivity_log: bf5944abdcaae683723e81684dad3f56ce06c3e42a840ba467ad3c3776d15e7d
dns_resolution_times: 69ddbd4a78074d301dec059811560c4b9ceba4f735e4084a19fedc259fd9cde6