3m.brandwatch.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ab:29:11:59:f4:90:05:a4:44:81:63:22:e2:09:84:1c:04 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=3m.brandwatch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:29:11:59:f4:90:05:a4:44:81:63:22:e2:09:84:1c:04
Serial Number (int): 406692016911905939521845739977686303120388
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 10:be:e3:ca:99:bf:51:ee:c9:94:1f:4b:fc:66:e4:3f:72:53:0f:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:99:50:a0:c2:6a:1a:7e:e3:33:4a:4b:d2:44:36:fc:23:cf:64:bc
Fingerprint (sha256): 0e:9d:b2:a1:14:24:d0:e3:48:4e:a7:aa:08:2e:02:3e:22:50:e2:ea:91:94:a2:28:62:b1:f1:ab:9c:1d:c5:29

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 3m.brandwatch.com

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 3m.brandwatch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3m.brandwatch.com
ab-inbev.brandwatch.com
acn-song-kj.brandwatch.com
airup.brandwatch.com
astrazeneca.brandwatch.com
aws.brandwatch.com
bayer.brandwatch.com
bel.brandwatch.com
bosch.brandwatch.com
brunswickgroup.brandwatch.com
capitalone.brandwatch.com
caterpillar.brandwatch.com
chime.brandwatch.com
cih.brandwatch.com
conocophillips.brandwatch.com
convatec.brandwatch.com
deezer.brandwatch.com
eaglealpha.brandwatch.com
edfenergy.brandwatch.com
epicgames.brandwatch.com
evokehealth.brandwatch.com
fanniemae.brandwatch.com
fidelity.brandwatch.com
finra.brandwatch.com
gsk.brandwatch.com
haleon.brandwatch.com
herodigital.brandwatch.com
hm.brandwatch.com
hmrc.brandwatch.com
indeed.brandwatch.com
inizioevoke.brandwatch.com
intuit.brandwatch.com
irobot.brandwatch.com
itau.brandwatch.com
kpmg.brandwatch.com
latrobe.brandwatch.com
mercadona.brandwatch.com
mercedes-benz.brandwatch.com
meta.brandwatch.com
mimesi.brandwatch.com
nationalgrid.brandwatch.com
nationalhighways.brandwatch.com
nedbank.brandwatch.com
ngn.brandwatch.com
panynj.brandwatch.com
pierre-fabre.brandwatch.com
pinterest.brandwatch.com
progressive.brandwatch.com
protagonist.brandwatch.com
sage.brandwatch.com
schwab.brandwatch.com
spotify.brandwatch.com
tbwa.brandwatch.com
tiktok.brandwatch.com
tpgtelecom.brandwatch.com
twitterads.brandwatch.com
uhg.brandwatch.com
unilever.brandwatch.com
usaa.brandwatch.com
vrtx.brandwatch.com
wfp.brandwatch.com
wk.brandwatch.com

Other certificates including the domain name brandwatch.com

(limited to 100 certificates)
nexus.brandwatch.com
now.phtech.com
holodeck.stage.website.brandwatch.com
app.stage.brandwatch.com
accounts.brandwatch.com
artifactory.brandwatch.com
axiom-storybook.brandwatch.com
now.phtech.com
now.phtech.com
app.stage.brandwatch.com
office-dev.brandwatch.com
newapi.brandwatch.com
now.phtech.com
engineering.brandwatch.com
vizia.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
react.brandwatch.com
portal.brandwatch.com
my.brandwatch.com
analytics.brandwatch.com
*.trial.staging.influence.brandwatch.com
now.phtech.com
em2.brandwatch.com
support.brandwatch.com
engineering.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
mail.brandwatch.com
accounts.platform-prod.gcp0.bwcom.net
developers.brandwatch.com
sni.cloudflaressl.com
app.stage.brandwatch.com
beta-acceso.brandwatch.com
office.brandwatch.com
systems.brandwatch.com
now.phtech.com
login.brandwatch.com
newapi.brandwatch.com
systems.brandwatch.com
now.phtech.com
3m.brandwatch.com
3m.brandwatch.com
now.phtech.com
my.brandwatch.com
3m.brandwatch.com
beta-acceso.brandwatch.com
now.phtech.com
now.phtech.com
vizia.brandwatch.com
now.phtech.com
www.brandwatch.com
frontend.analytics-stage.gcp0.bwcom.net
labs.brandwatch.com
portal.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
now.phtech.com
support.brandwatch.com
brandwatch.com
react.brandwatch.com
now.phtech.com
*.brandwatch.com
vizia-admin.brandwatch.com
vizia-admin.brandwatch.com
now.phtech.com
now.phtech.com
hello.brandwatch.com
brandwatch.com
support.brandwatch.com
axiom.brandwatch.com
*.vizia.brandwatch.com
now.phtech.com
beta-acceso.brandwatch.com
holodeck.stage.website.brandwatch.com
3m.brandwatch.com
artifactory.brandwatch.com
my.platform-prod.gcp0.bwcom.net
api.reviews.brandwatch.com
ssl98626.cloudflaressl.com
api.brandwatch.com
vizia.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
mission-control.platform-stage.gcp0.bwcom.net
academetry.brandwatch.com
now.phtech.com
mission-control.brandwatch.com
login.brandwatch.com
api.brandwatch.com
audiences.brandwatch.com
newapi.brandwatch.com
api.brandwatch.com
brandwatch.com
3m.brandwatch.com
now.phtech.com
now.phtech.com

Certificate

The complete raw certificate details for 3m.brandwatch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc0ul9ZSeLyaMYehZ+iC
70gDqspiMwhv0jvf6WrKCAvQ7WAuM+AIO2evV611ZULR5ZusvXcadRd54OIg6BaC
XWKbMDy2Px3IxGvMUg9/oAc7HOlX9wap6HnmyI1RZ+eR8J6MsTsxlzulJmXT7uug
RaAuPFOZCMtKFsnx8S3bzmSyc4nSyxqIN3Nnx4cA4sL4q91M5QiBpHeR8v42G0rZ
uPrzrDRIZIaASODQtBT+Ul7iSbBOYAMnthKsTtSh0A9IymFQfAr0B4hnwM39X1rN
1YPaUYe5gQnkhNTPQYIvG6tdZ0BXIJqPSGb9A7hExuquKybM7VWDy9SXNOxvcbc+
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406692016911905939521845739977686303120388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 15:04:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 15:04:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3m.brandwatch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25980031535381481118021544615576608798188050780516097706316797884979338402655802511497005091760583411590897327966799372364113487924640052571828797597100426896625234589006231118313828395578422288735099565376954604646901741114664556337039619265984745001205892921611679691060567773126397676307311146407747910575788067546933051719955417324565917074030142771007691008024654526145384354401231387679894444929649482523141794351538235443901839218213426612864068068061162315180364980516036898271067696525247187985708589454678624763982538414692782229009084985752107048017646959756581153054434881295928952841443349927903280709289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10bee3ca99bf51eec9941f4bfc66e43f72530f52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1503 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-inbev.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acn-song-kj.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airup.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrazeneca.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayer.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosch.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswickgroup.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalone.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillar.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chime.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cih.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conocophillips.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convatec.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deezer.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglealpha.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edfenergy.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicgames.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evokehealth.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanniemae.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelity.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finra.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsk.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haleon.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herodigital.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmrc.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeed.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inizioevoke.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuit.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irobot.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itau.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latrobe.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercadona.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercedes-benz.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimesi.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgrid.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhighways.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedbank.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngn.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panynj.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pierre-fabre.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinterest.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressive.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protagonist.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sage.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwab.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotify.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbwa.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktok.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpgtelecom.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitterads.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilever.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaa.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrtx.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfp.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wk.brandwatch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d656a77ee000004030046304402201f563aacd186363d78c5c39125595c88ea7a9790295fa54f5c3aae6cde09abf1022048306f45a5eeef042e3252d4a9c366137d516b780f6b5ae9813e06f05abbd74b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d656a7b41000004030047304502202791350a0271885e7c47fcd7608a7ec05016b70375c18ee2b772af2883b3cbb9022100f02beae5c4845873f3e74f418bc071b204c9ab69749559f5a2553866c198a4a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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