{"domain":"xyleminc.com","port":443,"address":"199.253.101.66","resolved_addresses":["199.253.101.66"],"verified":false,"verification":"Certificate verification failed","verification_error":"SSL operation failed with code 1. OpenSSL Error messages:\nerror:0A000086:SSL routines::certificate verify failed","certificate":{"subject":{"C":"US","ST":"District of Columbia","L":"Washington","O":"Xylem Inc","CN":"*.xyleminc.com"},"issuer":{"C":"US","O":"IdenTrust","OU":"HydrantID Trusted Certificate Service","CN":"HydrantID Server CA O1"},"serial":"400198A3D656AFD3DD668BDD67E3DB42","version":3,"valid_from":"2025-08-13T14:29:49+00:00","valid_to":"2026-09-07T14:28:49+00:00","validity":"expired","days_remaining":-58,"san":"DNS:xyleminc.com, DNS:*.xyleminc.com","signature":"RSA-SHA256","sha256":"C8:DB:21:2D:30:B4:B4:80:2E:C8:17:D7:17:B4:6C:D1:F1:B8:A9:D4:1F:F1:8D:88:78:72:87:AB:53:BD:72:3E","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"keyUsage":"Digital Signature, Key Encipherment","authorityInfoAccess":"OCSP - URI:http://commercial.ocsp.identrust.com\nCA Issuers - URI:http://validation.identrust.com/certs/hydrantidcaO1.p7c","authorityKeyIdentifier":"89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9","certificatePolicies":"Policy: 2.23.140.1.2.2\nPolicy: 2.16.840.1.113839.0.6.3","crlDistributionPoints":"Full Name:\n  URI:http://validation.identrust.com/crl/hydrantidcao1.crl\n","subjectAltName":"DNS:xyleminc.com, DNS:*.xyleminc.com","subjectKeyIdentifier":"50:DD:16:BB:6B:22:63:66:FA:05:AE:E1:F9:DC:BA:69:04:7A:29:33","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication","ct_precert_scts":"Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:\n                82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77\n    Timestamp : Aug 13 14:29:49.933 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:14:A6:03:4D:82:9C:0E:36:D4:75:8D:36:\n                D7:79:38:BE:65:63:09:12:44:ED:91:21:A5:AF:AE:E3:\n                39:D0:54:31:02:21:00:E2:E3:46:40:96:D0:29:AA:17:\n                B7:7B:A9:F3:04:FF:D5:38:7E:63:27:B0:E1:58:60:E1:\n                97:FB:1E:CC:88:F5:45\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB:\n                B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14\n    Timestamp : Aug 13 14:29:49.999 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:B8:CE:1A:FF:8E:66:BC:A4:FD:A0:1F:\n                EA:DB:FB:58:16:AE:19:66:F0:38:71:34:65:19:18:03:\n                18:E5:C3:A3:DD:02:21:00:9C:97:A9:3E:12:B9:77:C3:\n                9F:26:07:5A:46:1B:77:DE:0B:63:8E:C3:2A:84:D5:EC:\n                39:A3:56:D6:AB:3E:19:D1\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:\n                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7\n    Timestamp : Aug 13 14:29:49.947 2025 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:46:BD:AB:3A:4E:39:7B:2C:14:ED:7F:FD:\n                26:00:6D:8B:5D:C2:AB:C1:AD:1F:AB:87:47:D4:9F:27:\n                AD:C2:90:D1:02:21:00:F1:5A:A5:AF:62:63:13:56:A4:\n                2A:9E:82:49:7F:21:D0:3E:60:6C:88:D9:F8:0F:7D:F9:\n                37:5A:97:E2:AD:16:E5"},"pem":"-----BEGIN CERTIFICATE-----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\nsR1cpm4qPJ1b5y2TofHnnaAoHeBL9HX5ykAZO3pHQOgnxA==\n-----END CERTIFICATE-----\n"},"chain":[{"subject":{"C":"US","O":"IdenTrust","OU":"HydrantID Trusted Certificate Service","CN":"HydrantID Server CA O1"},"issuer":{"C":"US","O":"IdenTrust","CN":"IdenTrust Commercial Root CA 1"},"serial":"40016EFB0A205CFAEBE18F71D73ABB78","version":3,"valid_from":"2019-12-12T16:56:15+00:00","valid_to":"2029-12-12T16:56:15+00:00","validity":"valid_period","days_remaining":1134,"san":"","signature":"RSA-SHA256","sha256":"8B:B2:F6:88:3F:ED:28:9A:52:1B:A2:7C:47:84:82:95:08:74:E1:43:CA:CC:EC:6F:C0:25:99:0C:0C:46:81:3E","key_type":"RSA","key_bits":2048,"curve":null,"extensions":{"basicConstraints":"CA:TRUE, pathlen:0","keyUsage":"Digital Signature, Certificate Sign, CRL Sign","authorityInfoAccess":"OCSP - URI:http://commercial.ocsp.identrust.com\nCA Issuers - URI:http://validation.identrust.com/roots/commercialrootca1.p7c","authorityKeyIdentifier":"ED:44:19:C0:D3:F0:06:8B:EE:A4:7B:BE:42:E7:26:54:C8:8E:36:76","certificatePolicies":"Policy: X509v3 Any Policy\n  CPS: https://secure.identrust.com/certificates/policy/ts/index.html\n  User Notice:\n    Explicit Text: This TrustID Server Certificate has been issued in accordance with IdenTrust's TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/index.html","crlDistributionPoints":"Full Name:\n  URI:http://validation.identrust.com/crl/commercialrootca1.crl\n","subjectKeyIdentifier":"89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9","extendedKeyUsage":"TLS Web Server Authentication, TLS Web Client Authentication"},"pem":"-----BEGIN CERTIFICATE-----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\n2XrKEZL5RmGZidpWP6ZBbvEs2MqSD7zcFvY=\n-----END CERTIFICATE-----\n"}],"protocol":"TLSv1.2","cipher":"ECDHE-RSA-AES256-GCM-SHA384","cipher_bits":256,"warnings":["Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages:\nerror:0A000086:SSL routines::certificate verify failed","The certificate has expired."],"attempts":[{"address":"199.253.101.66","verified":false,"error":"SSL operation failed with code 1. OpenSSL Error messages:\nerror:0A000086:SSL routines::certificate verify failed"}],"checked_at":"2026-11-03T22:14:02+00:00","resolver":"Public DNS resolver","scope":"One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan."}