axiom-storybook.brandwatch.com

Issued by R3

About this certificate

This digital certificate with serial number 03:25:c6:65:2c:fa:1b:61:66:ed:74:46:92:65:82:2f:ca:ef was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=axiom-storybook.brandwatch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:c6:65:2c:fa:1b:61:66:ed:74:46:92:65:82:2f:ca:ef
Serial Number (int): 274191017848745125484812894491883147873007
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:0d:e3:ac:21:75:d3:87:f9:a0:93:65:55:1a:dc:0e:5a:ed:3a:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:2c:db:0c:b5:6a:17:d9:10:09:6b:69:a8:e8:7c:84:16:d1:56:d1
Fingerprint (sha256): 02:66:4f:ed:b3:1e:eb:b9:8e:3d:a1:a2:8e:a7:e9:1f:e1:7d:65:0f:2c:b5:ed:85:71:93:94:09:9f:31:d7:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate axiom-storybook.brandwatch.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for axiom-storybook.brandwatch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

axiom-react.apps.aws.live.brandwatch.net
axiom-storybook.brandwatch.com

Other certificates including the domain name brandwatch.com

(limited to 100 certificates)
nexus.brandwatch.com
now.phtech.com
holodeck.stage.website.brandwatch.com
app.stage.brandwatch.com
accounts.brandwatch.com
artifactory.brandwatch.com
axiom-storybook.brandwatch.com
now.phtech.com
now.phtech.com
app.stage.brandwatch.com
office-dev.brandwatch.com
newapi.brandwatch.com
now.phtech.com
engineering.brandwatch.com
vizia.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
react.brandwatch.com
portal.brandwatch.com
my.brandwatch.com
analytics.brandwatch.com
*.trial.staging.influence.brandwatch.com
now.phtech.com
em2.brandwatch.com
support.brandwatch.com
engineering.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
mail.brandwatch.com
accounts.platform-prod.gcp0.bwcom.net
developers.brandwatch.com
sni.cloudflaressl.com
app.stage.brandwatch.com
beta-acceso.brandwatch.com
office.brandwatch.com
systems.brandwatch.com
now.phtech.com
login.brandwatch.com
newapi.brandwatch.com
systems.brandwatch.com
now.phtech.com
3m.brandwatch.com
3m.brandwatch.com
now.phtech.com
my.brandwatch.com
3m.brandwatch.com
beta-acceso.brandwatch.com
now.phtech.com
now.phtech.com
vizia.brandwatch.com
now.phtech.com
www.brandwatch.com
frontend.analytics-stage.gcp0.bwcom.net
labs.brandwatch.com
portal.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
now.phtech.com
support.brandwatch.com
brandwatch.com
react.brandwatch.com
now.phtech.com
*.brandwatch.com
vizia-admin.brandwatch.com
vizia-admin.brandwatch.com
now.phtech.com
now.phtech.com
hello.brandwatch.com
brandwatch.com
support.brandwatch.com
axiom.brandwatch.com
*.vizia.brandwatch.com
now.phtech.com
beta-acceso.brandwatch.com
holodeck.stage.website.brandwatch.com
3m.brandwatch.com
artifactory.brandwatch.com
my.platform-prod.gcp0.bwcom.net
api.reviews.brandwatch.com
ssl98626.cloudflaressl.com
api.brandwatch.com
vizia.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
mission-control.platform-stage.gcp0.bwcom.net
academetry.brandwatch.com
now.phtech.com
mission-control.brandwatch.com
login.brandwatch.com
api.brandwatch.com
audiences.brandwatch.com
newapi.brandwatch.com
api.brandwatch.com
brandwatch.com
3m.brandwatch.com
now.phtech.com
now.phtech.com

Certificate

The complete raw certificate details for axiom-storybook.brandwatch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEY2r3CIlUihHYG31n9x
TIqJr2MPOxDwNsGmgtARwKGq0GbbVliG3eoRkEzj3x22PYxWSmnNjZd3hgOzKItO
TRXXpCp1gDOZmpjG6sbrahP2sgUXpENALOzTsI0ao3T95VH8/Eck9vKA8jKPv7HN
a8Iu+uptIQCvcNhqEPJ3O1AENwuTpxc7my1++GPKGCer/3iPDN22zsnsth2Ae3bb
poYTnGnOSG+zuN61BJIVqcVl3fndpeZ6ZT9KaPwCURLIy6SgQH4Ejrt2SLjvtKdk
vd18C9TSJ6ASS11tsuzW26XgaCzJuYHJpio3LecgrCzTNSNLK/46dyPw6cXoT6ZU
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274191017848745125484812894491883147873007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 06:22:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 06:22:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'axiom-storybook.brandwatch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24777331397095402844529719819558454933271059599150860444444596630584060167371419570287093058879217170527167778174049509654093583210687721261403649744582135622919815996287008797391926847067358849135230577756421004617937807472959213080247881880763720915210027293234057765003802725354512201960884137817289109197534976813322635041147973019756987192818275390369849095719042600122193918392309467759576549243066737682511087109361428771080750393393847636469645019838936767945634441064172324537660400718758425958102432598183015786810205523036428741833559386699488640717424780957182547774675918630022792497197489482337777767491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a0de3ac2175d387f9a09365551adc0e5aed3a88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axiom-react.apps.aws.live.brandwatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axiom-storybook.brandwatch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189a087098c000004030048304602210093f741c46c404cd578f2e2d51dd95a6f5e45082ea6563b35f2dfe010ee689d88022100eab50b6895edd848c91a2da7e9f0639645747d0c0cea431e6caf01a34af8a75a007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189a0870995000004030046304402206afb133a5da244758da2a7025cff44e628c134d89fe1ceee53b2903dfb368b56022069b488340b52d278f76bfe2f712c806bd716ac910a0cffab38544fb61d302f69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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