www.hydrosulphite.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:39:43:32:fd:ef:24:ad:ec:8c:f3:1f:bd:7d:6b:1c was issued on by Amazon.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.hydrosulphite.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:39:43:32:fd:ef:24:ad:ec:8c:f3:1f:bd:7d:6b:1c
Serial Number (int): 8272691857086364756597937621924932380
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4c:4d:09:6f:a8:a2:6b:43:88:37:e2:a4:6b:a4:61:b3:3e:1f:a0:fa
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 5c:5f:dd:8f:2d:fe:50:31:a1:87:9d:c6:49:36:99:ca:cf:ec:7e:08
Fingerprint (sha256): ca:38:c2:c0:8e:81:46:66:7e:a3:7d:b2:83:cd:32:1e:8b:11:8a:4d:73:a8:6f:cd:87:f5:8d:7c:22:0f:4e:6d

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate www.hydrosulphite.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hydrosulphite.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hydrosulphite.com
scnfields.com
glysantin.org.cn
managereresource.north-america.intranet.basf.com
www.agrigenio.es
axant-flex.com
www.aroma-ingredients.basf.com
surtain-herbicide.us
agshop.basf.co.jp
teraxxa-wins.com
basf-sonatrach-propanchem.com
www.myindustryworld.basf.com
be-secure.intranet.basf.com
www.glysantin.tw
clay-foam.com
basf-ypc.com.cn
partner.agro.basf.com
revxfields.com
hydrosulphite.com
experience.partnerportal.basf.com
www.glysantin.ws
wrl-ltd.com
www.glysantin.sk
pestcontrol-secure.basf.us
learnthelibertyadvantage.com
www.hydrosulfite.com

Other certificates including the domain name hydrosulphite.com

(limited to 100 certificates)
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com

Certificate

The complete raw certificate details for www.hydrosulphite.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSwYiewzjUP8DCH/PQHa
6njDD4cgxzFAqX8YDra3xmSZenQt/CpgpaSzWKVSk2aa9ctiX03a3MTbQrS8XCuE
eUJaF9Xb+bdoV2jkYnxt5gmjCWFFyfLTORrJ2mvPqMaBMoXkJEKovmcDGBxkRDou
e0EUVwH1CzvdJVRcYyqhyzq8XO7PQv7lTT25xQcoXozmFz1lLY0+TcsQ9EbwrgTA
zucTHTb2a4kPPJPxgQVQYP3455dA/AzQCE9RJgzZoRADxxMwzfAj21SFGytaC8H4
k8uHuA09ksew6cDntHfzfkR7z/Br2xG4gGSGnoHWkTL3zIfVdmQQieFjSRzrt9qG
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8272691857086364756597937621924932380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hydrosulphite.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17821345476512119791148058556648176750604776291254589267645345384630696952363209853194366385351239029338648546448751944399759180676636498091133651956590461637464874396605494223765116499336542916533012292364673877988955181730689104678299379758521359472483326548894818821916994819341578198848260369837905387627310646134330581193068979468262093047314092536600930400641062979507362334856549859189920403914490199798591848988949496188615505139670761037590895955880433426736620327201724102962551793085867033154119319961031675274244520444038176919264439349672270153080988540580128066815698089578491413505370430662501478336079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c4d096fa8a26b438837e2a46ba461b33e1fa0fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (597 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scnfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glysantin.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managereresource.north-america.intranet.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrigenio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axant-flex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aroma-ingredients.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surtain-herbicide.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agshop.basf.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teraxxa-wins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-sonatrach-propanchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindustryworld.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-secure.intranet.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clay-foam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-ypc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.agro.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revxfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.partnerportal.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrl-ltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestcontrol-secure.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnthelibertyadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulfite.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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