ftp.hach.com

- Hach Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 56:76:da:78:2f:fd:81:05:c0:58:2f:0a:36:5a:62:89 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Hach Company

Organization: Hach Company
State / Province: Colorado
Locality: Loveland
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 56:76:da:78:2f:fd:81:05:c0:58:2f:0a:36:5a:62:89
Serial Number (int): 114930729754335235491102547015198466697
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1e:f2:e7:04:09:a6:fc:39:7c:f5:70:6f:e6:f4:fd:66:1d:f8:e5:2a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 45:4f:95:8a:4d:49:41:0f:bd:97:d5:32:96:fa:88:a6:3b:18:ff:f3
Fingerprint (sha256): 0f:97:d2:87:82:24:05:e0:de:ea:42:8c:aa:e0:43:4a:af:dd:db:71:ec:1c:37:e4:b1:d6:3d:9a:52:e6:03:6b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ftp.hach.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ftp.hach.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ftp.hach.com

Other certificates including the domain name hach.com

(limited to 100 certificates)
ru.hach.com
ffco-eu.fsn.hach.com
it.lesl.cloud
us.fsn.hach.com
status.adaptive.co.uk
it.lesl.cloud
ffse-eu.fsn.hach.com
fsdata.hach.com
ru.hach.com
ru.hach.com
inframark.hach.com
fcwb-us.fsn.hach.com
it.lesl.cloud
ffco-us.fsn.hach.com
it.lesl.cloud
ftp.hach.com
fsdata.hach.com
it.lesl.cloud
it.lesl.cloud
hachvpn-eu.hach.com
istore.hach.com
status.acloud.guru
ru.hach.com
go.hach.com
platformstatus.northebridge.com
ru.hach.com
m.hach.com
api-eu.fsn.hach.com
status.acloud.guru
it.lesl.cloud
Inframark.hach.com
fsdata.hach.com
status.acloud.guru
ffdac-us.fsn.hach.com
hachvpn-eu.hach.com
citrix.hach.com
status.adaptive.co.uk
ru.hach.com
ffco-eu.fsn.hach.com
ru.hach.com
ottvpn2.hach.com
dds.hach.com
*.Hach.com
it.lesl.cloud
it.lesl.cloud
hachvpn-eu.hach.com
platformstatus.northebridge.com
itsupport.hach.com
orion.fsn.hach.com
foart-us.fsn.hach.com
www.hach.com
ffdac-eu.fsn.hach.com
wims.hach.com
it.lesl.cloud
virtual.hach.com
hachvpn-eu.hach.com
it.lesl.cloud
es.support.hach.com
ffaa-us.fsn.hach.com
virtual.hach.com
knowledge.hach.com
us.fsn.hach.com
status.acloud.guru
it.lesl.cloud
NHP.HACH.COM
it.lesl.cloud
na-access.danahermail.com
hachvpn1.hach.com
ru.hach.com
go.hach.com
istore.hach.com
info.hach.com
ru.hach.com
imperva.com
imperva.com
nhp.hach.com
it.lesl.cloud
hachvpn-ind.hach.com
ffaa-us.fsn.hach.com
hachvpn.hach.com
support.hach.com
it.lesl.cloud
hachvpn.hach.com
it.lesl.cloud
hachvpn2.hach.com
ru.hach.com
frsupport.hach.com
it.lesl.cloud
api-us.fsn.hach.com
us.fsn.hach.com
status.adaptive.co.uk
sds.hach.com
status.acloud.guru
rd.hach.com
m.hach.com
wfeu.fsn.hach.com
ottvpn1.hach.com
sea.hach.com
pibs.hach.com
ffco-us.fsn.hach.com

Certificate

The complete raw certificate details for ftp.hach.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArix7ko4VOLKlRSPaGRwO
Ak8lYaEWd8j6x0m9/TiJmdTnhKK9ztBixKZCLkZ4W8Qcfwxqwfn07d0CrBIi8dma
1Y3LNoQy3oKWfrpjB6vLwSrZcJ5S4xAK7n4Ww6JNtLVd6v1MOQEu03NuXpWKMsYl
EB2FuxwznRx7UQtaHUd5QUKlrRtLFMrXk245k84VX4FZrhTr6/jg7QA1mJCXTz+5
kRnsSeyTMqIygiyMLtCW782up9ogAW/Py86FEy82TBtyuao+UuluV24rNTRA7yik
T2GELzRkEcx/EVHcdi+d/n4QFtb+WmjOb2k5A67BkP2zcEfas0jF0ym5jkoOScDp
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114930729754335235491102547015198466697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 19:03:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-29 19:03:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Loveland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hach Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ftp.hach.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21987400303468255600936408665672594718883403698497448506278868760438796072123641084861591213027714131147152815061610459096930441473918659869099779498804343359055239376179541719332088847943035204652348595402252915692966560919499530435918721746485465167221909318214537469195765858932704549917464103306254504399911177261770545104337038877859926879293124955573467940573018254017633871996373109009861237269549320370035620564406878464151287885035717221929658645950114409859615866615802694245918759830599415999207814968045028505020494220103837755107090046354857824858689000308216571769486962576160070304756740120844351629773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ef2e70409a6fc397cf5706fe6f4fd661df8e52a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.hach.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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