ru.hach.com

- Hach Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ca:f9:e9:9f:d3:a0:1d:e9:00:00:00:00:50:ee:3e:5d was issued on by Entrust, Inc..

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hach Company

Organization: Hach Company
State / Province: Colorado
Locality: Loveland
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ca:f9:e9:9f:d3:a0:1d:e9:00:00:00:00:50:ee:3e:5d
Serial Number (int): 269801675530538575463473099409919458909
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ca:32:c5:98:e0:48:af:53:59:e0:24:d2:00:13:a4:c1:ae:c0:55:a7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 04:c8:0d:34:23:d0:3f:ec:56:a7:d7:bf:d8:c3:fe:d0:b5:4f:65:51
Fingerprint (sha256): 14:9e:28:aa:42:c4:80:50:b2:c9:fe:a6:72:3f:22:b6:68:39:ed:48:1a:a5:3c:79:a2:b8:d8:3f:8c:14:5f:f4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ru.hach.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ru.hach.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ru.hach.com
www.ru.hach.com
in.hach.com
latam.hach.com
www.hach.com
cz.hach.com
es.hach.com
ie.hach.com
uk.hach.com
bg.hach.com
dk.hach.com
se.hach.com
de.hach.com
at.hach.com
it.hach.com
nl.hach.com
pl.hach.com
sea.hach.com
si.hach.com
gr.hach.com
hu.hach.com
ro.hach.com
sk.hach.com
tr.hach.com
be.hach.com
fr.hach.com
pt.hach.com
ch.hach.com
ca.hach.com
au.hach.com
nz.hach.com
mena.hach.com
hr.hach.com
www.aquafineuv.com
aquafineuv.com
jp.hach.com
kr.hach.com
www.xos.com
xos.com
www.mccrometer.com
mccrometer.com
www.latam.hach.com
www.in.hach.com
www.sk.hach.com
www.it.hach.com
www.dk.hach.com
www.pl.hach.com
www.nl.hach.com
www.sea.hach.com
www.mena.hach.com
www.au.hach.com
www.de.hach.com
www.tr.hach.com
www.si.hach.com
www.pt.hach.com
www.be.hach.com
www.cz.hach.com
www.ca.hach.com
www.es.hach.com
www.ie.hach.com
www.ch.hach.com
www.bg.hach.com
www.at.hach.com
www.hu.hach.com
www.fr.hach.com
www.ro.hach.com
www.nz.hach.com
www.uk.hach.com
www.gr.hach.com
www.hr.hach.com
www.se.hach.com
www.jp.hach.com
www.kr.hach.com
www.dhwaterquality.com
dhwaterquality.com
co.hach.com
www.co.hach.com
www.termodinamica.cl
termodinamica.cl
siteadmin.hach.com
www.seabird.com
seabird.com
za.hach.com
www.za.hach.com
th.hach.com
www.th.hach.com

Other certificates including the domain name hach.com

(limited to 100 certificates)
ru.hach.com
ffco-eu.fsn.hach.com
it.lesl.cloud
us.fsn.hach.com
status.adaptive.co.uk
it.lesl.cloud
ffse-eu.fsn.hach.com
fsdata.hach.com
ru.hach.com
ru.hach.com
inframark.hach.com
fcwb-us.fsn.hach.com
it.lesl.cloud
ffco-us.fsn.hach.com
it.lesl.cloud
ftp.hach.com
fsdata.hach.com
it.lesl.cloud
it.lesl.cloud
hachvpn-eu.hach.com
istore.hach.com
status.acloud.guru
ru.hach.com
go.hach.com
platformstatus.northebridge.com
ru.hach.com
m.hach.com
api-eu.fsn.hach.com
status.acloud.guru
it.lesl.cloud
Inframark.hach.com
fsdata.hach.com
status.acloud.guru
ffdac-us.fsn.hach.com
hachvpn-eu.hach.com
citrix.hach.com
status.adaptive.co.uk
ru.hach.com
ffco-eu.fsn.hach.com
ru.hach.com
ottvpn2.hach.com
dds.hach.com
*.Hach.com
it.lesl.cloud
it.lesl.cloud
hachvpn-eu.hach.com
platformstatus.northebridge.com
itsupport.hach.com
orion.fsn.hach.com
foart-us.fsn.hach.com
www.hach.com
ffdac-eu.fsn.hach.com
wims.hach.com
it.lesl.cloud
virtual.hach.com
hachvpn-eu.hach.com
it.lesl.cloud
es.support.hach.com
ffaa-us.fsn.hach.com
virtual.hach.com
knowledge.hach.com
us.fsn.hach.com
status.acloud.guru
it.lesl.cloud
NHP.HACH.COM
it.lesl.cloud
na-access.danahermail.com
hachvpn1.hach.com
ru.hach.com
go.hach.com
istore.hach.com
info.hach.com
ru.hach.com
imperva.com
imperva.com
nhp.hach.com
it.lesl.cloud
hachvpn-ind.hach.com
ffaa-us.fsn.hach.com
hachvpn.hach.com
support.hach.com
it.lesl.cloud
hachvpn.hach.com
it.lesl.cloud
hachvpn2.hach.com
ru.hach.com
frsupport.hach.com
it.lesl.cloud
api-us.fsn.hach.com
us.fsn.hach.com
status.adaptive.co.uk
sds.hach.com
status.acloud.guru
rd.hach.com
m.hach.com
wfeu.fsn.hach.com
ottvpn1.hach.com
sea.hach.com
pibs.hach.com
ffco-us.fsn.hach.com

Certificate

The complete raw certificate details for ru.hach.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1V1QbxAV+bdc5lWmTMT
1jfQoZ+XWEoLUYCd4xOA0Bbo7AJyJaoYYBVDxwiFYEutlxcTdAgJKaEFIQt6JM9L
Jz9ZZQ22aVNMoJU85rJ/Itmdl5ScQXTApleEHTgT5fR1Px53UEEaZrPa/oYj23Z8
WSDcKDe50thA7kw1USZi7wnqPYpon6oiBehvclM1g568xpdzz+Z9NdQLIlM5D1QG
uwQolmFTqIfZ2MxU9MnLQmWyTJ6U4CIbr0OETRuep46Ra79e/xIIdaD+zrRV98LS
ROiO0cSvU6s93WDqimxGctdSE+B7ty9oGt5ozl+VSJxXbs/6DNxmPFVxOMl3deKZ
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269801675530538575463473099409919458909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 14:53:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 15:23:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Loveland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hach Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ru.hach.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22638797516247720905568515378846212289340749542719761217028173399228734572662178015812469442854895289092311132936308269926977854189256034908825618946695173587213874670654018222649392427243804823270464500221886820904205865488526763366454244967971618874537430345809594135489427612364301209662311505726062013948617922891564635027976841282646699462829775378008446792438349440542371082557084861702318068903623009477234109950238469249135466480836187142692140116420036747849423721793046191438466788909971479251907853954873703838038138020084464071198028320841229922080022582722131352349025870272382437797742174810546999826809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1338 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ru.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latam.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hu.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mena.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquafineuv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquafineuv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccrometer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccrometer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latam.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.in.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sk.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dk.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pl.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nl.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sea.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mena.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.au.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.de.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.si.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pt.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.be.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cz.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ca.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.es.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ch.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bg.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.at.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hu.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ro.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nz.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uk.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.se.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kr.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhwaterquality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhwaterquality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.termodinamica.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termodinamica.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteadmin.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seabird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'za.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.za.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'th.hach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.th.hach.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca32c598e048af5359e024d20013a4c1aec055a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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