www.hydrosulphite.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:76:9f:00:1e:35:a7:3d:b4:a7:91:f5:68:a9:8e:2f was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.hydrosulphite.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:76:9f:00:1e:35:a7:3d:b4:a7:91:f5:68:a9:8e:2f
Serial Number (int): 4603599929138251031026916226826341935
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ee:64:4e:24:f6:2f:26:36:aa:8c:e4:5e:89:5a:2a:c0:98:48:fd:85
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 7d:71:65:7e:bd:61:20:be:75:d3:6e:08:b6:99:53:10:53:be:38:21
Fingerprint (sha256): 15:04:e7:39:ea:77:10:f2:8a:8e:8f:33:bf:08:24:be:8c:d1:23:50:00:ad:17:07:d5:11:3b:d4:aa:b8:94:17

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate www.hydrosulphite.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hydrosulphite.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hydrosulphite.com
basf-ypc.com.cn
revxfields.com
partner.agro.basf.com
hydrosulphite.com
glysantin.org.cn
experience.partnerportal.basf.com
managereresource.north-america.intranet.basf.com
www.glysantin.ws
wrl-ltd.com
www.agrigenio.es
axant-flex.com
www.aroma-ingredients.basf.com
surtain-herbicide.us
www.glysantin.sk
teraxxa-wins.com
basf-sonatrach-propanchem.com
pestcontrol-secure.basf.us
www.myindustryworld.basf.com
www.glysantin.tw
www.hydrosulfite.com

Other certificates including the domain name hydrosulphite.com

(limited to 100 certificates)
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com

Certificate

The complete raw certificate details for www.hydrosulphite.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqqVmU9EUi1ku2Ck3NMf
eD8GWbopzTM34ppuEc2FIUC2p6JDPBoUvJq9eGKWU2IMBYSCUhKzbyTa9UZ4gnFb
o6OSzqFq1JB/dXaO+TX9jQl2MD0nJCUHU65bFA0bNbXe39kF1r8FVahzqWFmUdYS
XTe/jHlWHweMwae9VWCzlllw6nu2b1hN067TSOQ1q9WtyFiXuvRtn+8hP/wcY6/M
Xp1Qau/jmu0MluqEuxzoLJyHa1y3/Vw6jjA8STlcvavhv/R6M4beWW6cKv8Ztcws
Wzs5ezJH69tMt78Y0+hO9iB4dyIT9pS0j6XlmriwWB6AGB5z3JHQoc6IK31lWMiU
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4603599929138251031026916226826341935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hydrosulphite.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20534723692760806040398202924536779621074851134808811459435209064271642763366135234206257104276501583900336810360013917285414429863999802595629542192583296356212462302686098319649270241970285194913369722436186079627815942075780015764271252456493672612024306731438158191343310299605035564392243479969916536651850481880003105258747657071932690700914672657466152159805770923429139823374966443338138328584152210668511107894102095246881531994105123319390192244799442977154121321380156199032069872093463585709231728064956494600867148165614441668953594195870626198824565366496324947494765960504605390498295256620528499725351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee644e24f62f2636aa8ce45e895a2ac09848fd85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-ypc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revxfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.agro.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glysantin.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.partnerportal.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managereresource.north-america.intranet.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrl-ltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrigenio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axant-flex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aroma-ingredients.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surtain-herbicide.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teraxxa-wins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-sonatrach-propanchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestcontrol-secure.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindustryworld.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulfite.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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