DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

xylem.com · 199.253.101.66:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=US ST=District of Columbia L=Washington O=Xylem Inc CN=xylem.com
Issuer
C=US O=IdenTrust OU=HydrantID Trusted Certificate Service CN=HydrantID Server CA O1
Valid from
2025-11-18T11:16:33+00:00
Expires
2026-12-13T11:15:33+00:00
Days remaining
60
Serial (hex)
40019A96AE3E98F3B43FC76C3FF52880
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:xylem.com

SHA-256 fingerprint

6D:93:C0:E8:CA:C2:FB:28:AB:4C:35:6A:15:15:31:5E:6F:75:08:A0:64:CF:AE:0F:58:6B:A0:9D:91:59:81:5D
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
authorityInfoAccess
OCSP - URI:http://commercial.ocsp.identrust.com CA Issuers - URI:http://validation.identrust.com/certs/hydrantidcaO1.p7c
authorityKeyIdentifier
89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 2.16.840.1.113839.0.6.3
crlDistributionPoints
Full Name: URI:http://validation.identrust.com/crl/hydrantidcao1.crl
subjectAltName
DNS:xylem.com
subjectKeyIdentifier
8D:0D:0B:2B:EA:C0:E8:B6:F3:99:F3:55:0F:AD:AF:19:22:9A:45:42
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Nov 18 11:16:33.114 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F6:80:A9:C5:11:D4:A6:78:ED:C1:1B: FF:5C:00:43:8E:DB:F3:D2:9F:18:AA:BE:B1:1E:AD:50: 6C:94:59:A4:AF:02:20:24:09:4E:B8:9F:23:77:EA:EF: 7D:87:99:7B:E4:D7:45:BF:1B:7F:C3:14:40:6B:6C:E1: 9B:D1:B9:08:07:76:6F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Nov 18 11:16:33.164 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B9:E8:1B:F2:9A:46:D0:C2:B4:DA:18: 8B:0A:E0:42:E5:CF:92:3C:80:81:63:7B:DE:70:AF:2D: F6:54:EE:C7:61:02:21:00:E4:CB:EE:A7:95:47:50:00: DE:DF:65:21:7F:15:93:02:02:EC:2D:9B:88:32:81:16: 8B:D6:F4:9F:42:38:C0:C1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Nov 18 11:16:33.155 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:03:BE:CE:8E:C5:F3:58:DC:2A:FA:C7:7F: D9:B0:0C:2D:23:57:C6:02:D5:D1:15:53:8C:CE:D0:E9: 71:F1:5D:E6:02:20:54:40:08:A5:1B:7E:6F:64:21:24: 8B:40:1E:15:55:37:E7:9B:9E:04:43:B5:66:CC:C0:3D: 36:36:31:8B:CD:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-13T16:06:10+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=IdenTrust OU=HydrantID Trusted Certificate Service CN=HydrantID Server CA O1
Issuer
C=US O=IdenTrust CN=IdenTrust Commercial Root CA 1
Valid from
2019-12-12T16:56:15+00:00
Expires
2029-12-12T16:56:15+00:00
Days remaining
1156
Serial (hex)
40016EFB0A205CFAEBE18F71D73ABB78
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8B:B2:F6:88:3F:ED:28:9A:52:1B:A2:7C:47:84:82:95:08:74:E1:43:CA:CC:EC:6F:C0:25:99:0C:0C:46:81:3E
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://commercial.ocsp.identrust.com CA Issuers - URI:http://validation.identrust.com/roots/commercialrootca1.p7c
authorityKeyIdentifier
ED:44:19:C0:D3:F0:06:8B:EE:A4:7B:BE:42:E7:26:54:C8:8E:36:76
certificatePolicies
Policy: X509v3 Any Policy CPS: https://secure.identrust.com/certificates/policy/ts/index.html User Notice: Explicit Text: This TrustID Server Certificate has been issued in accordance with IdenTrust's TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/index.html
crlDistributionPoints
Full Name: URI:http://validation.identrust.com/crl/commercialrootca1.crl
subjectKeyIdentifier
89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →