DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

xyleminc.com · 199.253.101.66:443

Unverified
Certificate verification failed. These are unverified certificate details presented by the server. SSL operation failed with code 1. OpenSSL Error messages: error:0A000086:SSL routines::certificate verify failed
The certificate has expired.

Certificate verification failed

Subject
C=US ST=District of Columbia L=Washington O=Xylem Inc CN=*.xyleminc.com
Issuer
C=US O=IdenTrust OU=HydrantID Trusted Certificate Service CN=HydrantID Server CA O1
Valid from
2025-08-13T14:29:49+00:00
Expires
2026-09-07T14:28:49+00:00
Days remaining
-38
Serial (hex)
400198A3D656AFD3DD668BDD67E3DB42
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:xyleminc.com, DNS:*.xyleminc.com

SHA-256 fingerprint

C8:DB:21:2D:30:B4:B4:80:2E:C8:17:D7:17:B4:6C:D1:F1:B8:A9:D4:1F:F1:8D:88:78:72:87:AB:53:BD:72:3E
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
authorityInfoAccess
OCSP - URI:http://commercial.ocsp.identrust.com CA Issuers - URI:http://validation.identrust.com/certs/hydrantidcaO1.p7c
authorityKeyIdentifier
89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 2.16.840.1.113839.0.6.3
crlDistributionPoints
Full Name: URI:http://validation.identrust.com/crl/hydrantidcao1.crl
subjectAltName
DNS:xyleminc.com, DNS:*.xyleminc.com
subjectKeyIdentifier
50:DD:16:BB:6B:22:63:66:FA:05:AE:E1:F9:DC:BA:69:04:7A:29:33
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Aug 13 14:29:49.933 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:14:A6:03:4D:82:9C:0E:36:D4:75:8D:36: D7:79:38:BE:65:63:09:12:44:ED:91:21:A5:AF:AE:E3: 39:D0:54:31:02:21:00:E2:E3:46:40:96:D0:29:AA:17: B7:7B:A9:F3:04:FF:D5:38:7E:63:27:B0:E1:58:60:E1: 97:FB:1E:CC:88:F5:45 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Aug 13 14:29:49.999 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B8:CE:1A:FF:8E:66:BC:A4:FD:A0:1F: EA:DB:FB:58:16:AE:19:66:F0:38:71:34:65:19:18:03: 18:E5:C3:A3:DD:02:21:00:9C:97:A9:3E:12:B9:77:C3: 9F:26:07:5A:46:1B:77:DE:0B:63:8E:C3:2A:84:D5:EC: 39:A3:56:D6:AB:3E:19:D1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Aug 13 14:29:49.947 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:46:BD:AB:3A:4E:39:7B:2C:14:ED:7F:FD: 26:00:6D:8B:5D:C2:AB:C1:AD:1F:AB:87:47:D4:9F:27: AD:C2:90:D1:02:21:00:F1:5A:A5:AF:62:63:13:56:A4: 2A:9E:82:49:7F:21:D0:3E:60:6C:88:D9:F8:0F:7D:F9: 37:5A:97:E2:AD:16:E5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-14T19:11:48+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=IdenTrust OU=HydrantID Trusted Certificate Service CN=HydrantID Server CA O1
Issuer
C=US O=IdenTrust CN=IdenTrust Commercial Root CA 1
Valid from
2019-12-12T16:56:15+00:00
Expires
2029-12-12T16:56:15+00:00
Days remaining
1154
Serial (hex)
40016EFB0A205CFAEBE18F71D73ABB78
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

8B:B2:F6:88:3F:ED:28:9A:52:1B:A2:7C:47:84:82:95:08:74:E1:43:CA:CC:EC:6F:C0:25:99:0C:0C:46:81:3E
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://commercial.ocsp.identrust.com CA Issuers - URI:http://validation.identrust.com/roots/commercialrootca1.p7c
authorityKeyIdentifier
ED:44:19:C0:D3:F0:06:8B:EE:A4:7B:BE:42:E7:26:54:C8:8E:36:76
certificatePolicies
Policy: X509v3 Any Policy CPS: https://secure.identrust.com/certificates/policy/ts/index.html User Notice: Explicit Text: This TrustID Server Certificate has been issued in accordance with IdenTrust's TrustID Certificate Policy found at https://secure.identrust.com/certificates/policy/ts/index.html
crlDistributionPoints
Full Name: URI:http://validation.identrust.com/crl/commercialrootca1.crl
subjectKeyIdentifier
89:B8:9B:B6:9E:ED:FB:B0:C6:BD:0D:EC:67:4E:3C:A3:92:9D:2D:F9
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
-----BEGIN CERTIFICATE-----
MIIG1jCCBL6gAwIBAgIQQAFu+wogXPrr4Y9x1zq7eDANBgkqhkiG9w0BAQsFADBK
MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVu
VHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMTkxMjEyMTY1NjE1WhcNMjkx
MjEyMTY1NjE1WjByMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MS4w
LAYDVQQLEyVIeWRyYW50SUQgVHJ1c3RlZCBDZXJ0aWZpY2F0ZSBTZXJ2aWNlMR8w
HQYDVQQDExZIeWRyYW50SUQgU2VydmVyIENBIE8xMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA6huZbDVWMGj7XbFZQWl+uhh0SIeWhO8rl79MV4+7ZSj2
Lxos5e8za0H1JVVzTNPaup2Go438C5zeaqaGtyUshV8D0xwUiWyamspTao7PjjuC
h81+tp9z76rp1irjNMh5o/zeJ0h3Kag5zQG9sfI7J7ihLnTFbArjNZIRaZnszOnu
Ga18jh/9epnGmEYL5BV119LNVo5luWshvG/kifk9mHjtkA8LzVdsOkvCrmHBpzpD
o4qyPk2lDypq04IU48JUqhFrG4kvlPz+VO7sse0uxYXj81FdNb2qoJnvAjqV+Zj4
Nii8PIcuNGqghDjzrs2PW/gEhkaWDikhhSY7DjOLiQIDAQABo4ICjjCCAoowEgYD
VR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwgYkGCCsGAQUFBwEBBH0w
ezAwBggrBgEFBQcwAYYkaHR0cDovL2NvbW1lcmNpYWwub2NzcC5pZGVudHJ1c3Qu
Y29tMEcGCCsGAQUFBzAChjtodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29t
L3Jvb3RzL2NvbW1lcmNpYWxyb290Y2ExLnA3YzAfBgNVHSMEGDAWgBTtRBnA0/AG
i+6ke75C5yZUyI42djCCASsGA1UdIASCASIwggEeMIIBGgYEVR0gADCCARAwSgYI
KwYBBQUHAgEWPmh0dHBzOi8vc2VjdXJlLmlkZW50cnVzdC5jb20vY2VydGlmaWNh
dGVzL3BvbGljeS90cy9pbmRleC5odG1sMIHBBggrBgEFBQcCAjCBtAyBsVRoaXMg
VHJ1c3RJRCBTZXJ2ZXIgQ2VydGlmaWNhdGUgaGFzIGJlZW4gaXNzdWVkIGluIGFj
Y29yZGFuY2Ugd2l0aCBJZGVuVHJ1c3QncyBUcnVzdElEIENlcnRpZmljYXRlIFBv
bGljeSBmb3VuZCBhdCBodHRwczovL3NlY3VyZS5pZGVudHJ1c3QuY29tL2NlcnRp
ZmljYXRlcy9wb2xpY3kvdHMvaW5kZXguaHRtbDBKBgNVHR8EQzBBMD+gPaA7hjlo
dHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29tL2NybC9jb21tZXJjaWFscm9v
dGNhMS5jcmwwHQYDVR0OBBYEFIm4m7ae7fuwxr0N7GdOPKOSnS35MB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAgEAdMrY9RYw
NyVgzeOqqcbdIxy5gHRQFbh3RTuIi0fsnbEh3v7BN+I3zmXJq71gyLOzG9wvqCul
XtLQNAZnrlSacXichYDV5zdcnbBrFH/CXt47oW4L+9yD5LPMKaSU5DP9DEu88ws+
QAjzL6/q+hP+CLQh0/vr62HoEGS1+NyLfnJIN0RVcVDxBAwVqNF8MU5An98ZmHj4
XaSPA6s2s+3794ULe6r2TzVXiLtun0JJ0kBZL3Mx0plhONvhq7jCsa6bYCF71DNs
7VhrNUh+BZNdQvLqAdfQJtFY5EiWpExhiPC/ZdtVYN5RfrOMCWgBbjnl5e2n5WYa
7LM4HR+z7U+6JCBqaRjlbaNNLed/qg+OMdpBJe16qJJT9E5Uzdc4PsUbL2a+9IUb
uxx8nmrbQswe8p4yvcy9RLje07a4Y09otZ/Aai3Gijup67jTCez1hd7VYIAuznqP
os6SLponh2vVcHu9vQoT18OCL9janJ2Ilh3lJHUxv1kHD9IxZNpn0j/QPzGFv2Ez
UXZVAECEQLS80qWh6zCXhXl6dVAeM84sSysIiY4Kv8oaXEF5Atyg0LcUuB6Iwgg3
K/QUY3QusnjrDcgGRyoWn0Zt53meMCi3C0hoQ+FrQ3zF4/7wtxKnGGBH5hKBU23M
2XrKEZL5RmGZidpWP6ZBbvEs2MqSD7zcFvY=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →