{"domain":"xylem.com","port":443,"address":"199.253.101.66","resolved_addresses":["199.253.101.66"],"verified":true,"verification":"Certificate chain, hostname and dates verified using this server\u2019s CA store.","verification_error":null,"certificate":{"subject":{"C":"US","ST":"District of Columbia","L":"Washington","O":"Xylem Inc","CN":"xylem.com"},"issuer":{"C":"US","O":"IdenTrust","OU":"HydrantID Trusted Certificate Service","CN":"HydrantID Server CA O1"},"serial":"40019A96AE3E98F3B43FC76C3FF52880","version":3,"valid_from":"2025-11-18T11:16:33+00:00","valid_to":"2026-12-13T11:15:33+00:00","validity":"valid_period","days_remaining":60,"san":"DNS:xylem.com","signature":"RSA-SHA256","sha256":"6D:93:C0:E8:CA:C2:FB:28:AB:4C:35:6A:15:15:31:5E:6F:75:08:A0:64:CF:AE:0F:58:6B:A0:9D:91:59:81:5D","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"keyUsage":"Digital Signature, Key Encipherment","authorityInfoAccess":"OCSP - URI:http://commercial.ocsp.identrust.com\nCA Issuers - URI:http://validation.identrust.com/certs/hydrantidcaO1.p7c","authorityKeyIdentifier":"89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9","certificatePolicies":"Policy: 2.23.140.1.2.2\nPolicy: 2.16.840.1.113839.0.6.3","crlDistributionPoints":"Full Name:\n  URI:http://validation.identrust.com/crl/hydrantidcao1.crl\n","subjectAltName":"DNS:xylem.com","subjectKeyIdentifier":"8D:0D:0B:2B:EA:C0:E8:B6:F3:99:F3:55:0F:AD:AF:19:22:9A:45:42","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:\n                82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77\n    Timestamp : Nov 18 11:16:33.114 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:F6:80:A9:C5:11:D4:A6:78:ED:C1:1B:\n                FF:5C:00:43:8E:DB:F3:D2:9F:18:AA:BE:B1:1E:AD:50:\n                6C:94:59:A4:AF:02:20:24:09:4E:B8:9F:23:77:EA:EF:\n                7D:87:99:7B:E4:D7:45:BF:1B:7F:C3:14:40:6B:6C:E1:\n                9B:D1:B9:08:07:76:6F\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB:\n                B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14\n    Timestamp : Nov 18 11:16:33.164 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:B9:E8:1B:F2:9A:46:D0:C2:B4:DA:18:\n                8B:0A:E0:42:E5:CF:92:3C:80:81:63:7B:DE:70:AF:2D:\n                F6:54:EE:C7:61:02:21:00:E4:CB:EE:A7:95:47:50:00:\n                DE:DF:65:21:7F:15:93:02:02:EC:2D:9B:88:32:81:16:\n                8B:D6:F4:9F:42:38:C0:C1\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:\n                E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A\n    Timestamp : Nov 18 11:16:33.155 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:03:BE:CE:8E:C5:F3:58:DC:2A:FA:C7:7F:\n                D9:B0:0C:2D:23:57:C6:02:D5:D1:15:53:8C:CE:D0:E9:\n                71:F1:5D:E6:02:20:54:40:08:A5:1B:7E:6F:64:21:24:\n                8B:40:1E:15:55:37:E7:9B:9E:04:43:B5:66:CC:C0:3D:\n                36:36:31:8B:CD:00"},"pem":"-----BEGIN CERTIFICATE-----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\nOJqfKQSsft/O\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"IdenTrust","OU":"HydrantID Trusted Certificate Service","CN":"HydrantID Server CA O1"},"issuer":{"C":"US","O":"IdenTrust","CN":"IdenTrust Commercial Root CA 1"},"serial":"40016EFB0A205CFAEBE18F71D73ABB78","version":3,"valid_from":"2019-12-12T16:56:15+00:00","valid_to":"2029-12-12T16:56:15+00:00","validity":"valid_period","days_remaining":1155,"san":"","signature":"RSA-SHA256","sha256":"8B:B2:F6:88:3F:ED:28:9A:52:1B:A2:7C:47:84:82:95:08:74:E1:43:CA:CC:EC:6F:C0:25:99:0C:0C:46:81:3E","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"basicConstraints":"CA:TRUE, pathlen:0","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","authorityInfoAccess":"OCSP - URI:http://commercial.ocsp.identrust.com\nCA Issuers - URI:http://validation.identrust.com/roots/commercialrootca1.p7c","authorityKeyIdentifier":"ED:44:19:C0:D3:F0:06:8B:EE:A4:7B:BE:42:E7:26:54:C8:8E:36:76","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://secure.identrust.com/certificates/policy/ts/index.html\n  User Notice:\n    Explicit Text: This TrustID Server Certificate has been issued in accordance with IdenTrust's TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/index.html","crlDistributionPoints":"Full Name:\n  URI:http://validation.identrust.com/crl/commercialrootca1.crl\n","subjectKeyIdentifier":"89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication"},"pem":"-----BEGIN CERTIFICATE-----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\n2XrKEZL5RmGZidpWP6ZBbvEs2MqSD7zcFvY=\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.2","cipher":"ECDHE-RSA-AES256-GCM-SHA384","cipher_bits":256,"warnings":[],"attempts":[{"address":"199.253.101.66","verified":true,"error":null}],"checked_at":"2026-10-13T22:08:56+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}