Certificate Overview
Valid Host Names | Matched | cardupgrade.citi.com www.cardupgrade.citi.com | |
---|---|---|---|
Expires | in 2 years | Valid after Dec 10, 2015 | |
Trust | Trusted | The certificate was issued by Symantec Class 3 EV SSL CA - G3 |
Security
Encryption Ciphers | OK | ||
---|---|---|---|
Public Key Size | 2048 bits | Key sizes 1024 bits or larger are considered secure. Be aware that unnecessarily large key sizes will slow down the connection establishment. | |
Secure Renegotiation | Yes | ||
Protocols | OK | SSLv3, TLSv1 |
Performance
HTTP Keepalive | No | Enabling HTTP Keep-Alive will allow subsequent requests to be served faster, without the need to establish a new SSL/TLS connection. | |
---|---|---|---|
SSL Session Cache | Yes | ||
TLS Stateless Resume | No | TLS stateless resume allows for faster re-connections to TLS enabled servers, without needing session state to be stored on the server. | |
SSL Handshake Size | 4016 bytes | A smaller SSL handshake means a faster connection. Reducing the number & size of certificates in your chain, and reducing the size of the public key will reduce this. |
Encryption Ciphers (TLS/SSLv3)
Cipher | Strength | Algo | Key | KeyEx | Handshake | ||
---|---|---|---|---|---|---|---|
ECDHE-RSA-AES256-SHA | High | AES | 256-bit | ECDH | 68ms | 3928 bytes | |
AES256-SHA | High | AES | 256-bit | RSA | 48ms | 3714 bytes | |
ECDHE-RSA-DES-CBC3-SHA | High | 3DES | 168-bit | ECDH | 68ms | 3912 bytes | |
DES-CBC3-SHA | High | 3DES | 168-bit | RSA | 49ms | 3698 bytes | |
ECDHE-RSA-AES128-SHA | High | AES | 128-bit | ECDH | 71ms | 3928 bytes | |
AES128-SHA | High | AES | 128-bit | RSA | 49ms | 3714 bytes |