3m.brandwatch.com
Issued by R3
About this certificate
This digital certificate with serial number 04:ab:29:11:59:f4:90:05:a4:44:81:63:22:e2:09:84:1c:04 was issued on by Let's Encrypt.
With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=3m.brandwatch.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ab:29:11:59:f4:90:05:a4:44:81:63:22:e2:09:84:1c:04Serial Number (int): 406692016911905939521845739977686303120388
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 10:be:e3:ca:99:bf:51:ee:c9:94:1f:4b:fc:66:e4:3f:72:53:0f:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 11:99:50:a0:c2:6a:1a:7e:e3:33:4a:4b:d2:44:36:fc:23:cf:64:bc
Fingerprint (sha256): 0e:9d:b2:a1:14:24:d0:e3:48:4e:a7:aa:08:2e:02:3e:22:50:e2:ea:91:94:a2:28:62:b1:f1:ab:9c:1d:c5:29
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 3m.brandwatch.com
62
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 3m.brandwatch.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3m.brandwatch.com
ab-inbev.brandwatch.com
acn-song-kj.brandwatch.com
airup.brandwatch.com
astrazeneca.brandwatch.com
aws.brandwatch.com
bayer.brandwatch.com
bel.brandwatch.com
bosch.brandwatch.com
brunswickgroup.brandwatch.com
capitalone.brandwatch.com
caterpillar.brandwatch.com
chime.brandwatch.com
cih.brandwatch.com
conocophillips.brandwatch.com
convatec.brandwatch.com
deezer.brandwatch.com
eaglealpha.brandwatch.com
edfenergy.brandwatch.com
epicgames.brandwatch.com
evokehealth.brandwatch.com
fanniemae.brandwatch.com
fidelity.brandwatch.com
finra.brandwatch.com
gsk.brandwatch.com
haleon.brandwatch.com
herodigital.brandwatch.com
hm.brandwatch.com
hmrc.brandwatch.com
indeed.brandwatch.com
inizioevoke.brandwatch.com
intuit.brandwatch.com
irobot.brandwatch.com
itau.brandwatch.com
kpmg.brandwatch.com
latrobe.brandwatch.com
mercadona.brandwatch.com
mercedes-benz.brandwatch.com
meta.brandwatch.com
mimesi.brandwatch.com
nationalgrid.brandwatch.com
nationalhighways.brandwatch.com
nedbank.brandwatch.com
ngn.brandwatch.com
panynj.brandwatch.com
pierre-fabre.brandwatch.com
pinterest.brandwatch.com
progressive.brandwatch.com
protagonist.brandwatch.com
sage.brandwatch.com
schwab.brandwatch.com
spotify.brandwatch.com
tbwa.brandwatch.com
tiktok.brandwatch.com
tpgtelecom.brandwatch.com
twitterads.brandwatch.com
uhg.brandwatch.com
unilever.brandwatch.com
usaa.brandwatch.com
vrtx.brandwatch.com
wfp.brandwatch.com
wk.brandwatch.com
ab-inbev.brandwatch.com
acn-song-kj.brandwatch.com
airup.brandwatch.com
astrazeneca.brandwatch.com
aws.brandwatch.com
bayer.brandwatch.com
bel.brandwatch.com
bosch.brandwatch.com
brunswickgroup.brandwatch.com
capitalone.brandwatch.com
caterpillar.brandwatch.com
chime.brandwatch.com
cih.brandwatch.com
conocophillips.brandwatch.com
convatec.brandwatch.com
deezer.brandwatch.com
eaglealpha.brandwatch.com
edfenergy.brandwatch.com
epicgames.brandwatch.com
evokehealth.brandwatch.com
fanniemae.brandwatch.com
fidelity.brandwatch.com
finra.brandwatch.com
gsk.brandwatch.com
haleon.brandwatch.com
herodigital.brandwatch.com
hm.brandwatch.com
hmrc.brandwatch.com
indeed.brandwatch.com
inizioevoke.brandwatch.com
intuit.brandwatch.com
irobot.brandwatch.com
itau.brandwatch.com
kpmg.brandwatch.com
latrobe.brandwatch.com
mercadona.brandwatch.com
mercedes-benz.brandwatch.com
meta.brandwatch.com
mimesi.brandwatch.com
nationalgrid.brandwatch.com
nationalhighways.brandwatch.com
nedbank.brandwatch.com
ngn.brandwatch.com
panynj.brandwatch.com
pierre-fabre.brandwatch.com
pinterest.brandwatch.com
progressive.brandwatch.com
protagonist.brandwatch.com
sage.brandwatch.com
schwab.brandwatch.com
spotify.brandwatch.com
tbwa.brandwatch.com
tiktok.brandwatch.com
tpgtelecom.brandwatch.com
twitterads.brandwatch.com
uhg.brandwatch.com
unilever.brandwatch.com
usaa.brandwatch.com
vrtx.brandwatch.com
wfp.brandwatch.com
wk.brandwatch.com
Other certificates including the domain name brandwatch.com
(limited to 100 certificates)
nexus.brandwatch.com
now.phtech.com
holodeck.stage.website.brandwatch.com
app.stage.brandwatch.com
accounts.brandwatch.com
artifactory.brandwatch.com
axiom-storybook.brandwatch.com
now.phtech.com
now.phtech.com
app.stage.brandwatch.com
office-dev.brandwatch.com
newapi.brandwatch.com
now.phtech.com
engineering.brandwatch.com
vizia.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
react.brandwatch.com
portal.brandwatch.com
my.brandwatch.com
analytics.brandwatch.com
*.trial.staging.influence.brandwatch.com
now.phtech.com
em2.brandwatch.com
support.brandwatch.com
engineering.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
mail.brandwatch.com
accounts.platform-prod.gcp0.bwcom.net
developers.brandwatch.com
sni.cloudflaressl.com
app.stage.brandwatch.com
beta-acceso.brandwatch.com
office.brandwatch.com
systems.brandwatch.com
now.phtech.com
login.brandwatch.com
newapi.brandwatch.com
systems.brandwatch.com
now.phtech.com
3m.brandwatch.com
3m.brandwatch.com
now.phtech.com
my.brandwatch.com
3m.brandwatch.com
beta-acceso.brandwatch.com
now.phtech.com
now.phtech.com
vizia.brandwatch.com
now.phtech.com
www.brandwatch.com
frontend.analytics-stage.gcp0.bwcom.net
labs.brandwatch.com
portal.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
now.phtech.com
support.brandwatch.com
brandwatch.com
react.brandwatch.com
now.phtech.com
*.brandwatch.com
vizia-admin.brandwatch.com
vizia-admin.brandwatch.com
now.phtech.com
now.phtech.com
hello.brandwatch.com
brandwatch.com
support.brandwatch.com
axiom.brandwatch.com
*.vizia.brandwatch.com
now.phtech.com
beta-acceso.brandwatch.com
holodeck.stage.website.brandwatch.com
3m.brandwatch.com
artifactory.brandwatch.com
my.platform-prod.gcp0.bwcom.net
api.reviews.brandwatch.com
ssl98626.cloudflaressl.com
api.brandwatch.com
vizia.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
mission-control.platform-stage.gcp0.bwcom.net
academetry.brandwatch.com
now.phtech.com
mission-control.brandwatch.com
login.brandwatch.com
api.brandwatch.com
audiences.brandwatch.com
newapi.brandwatch.com
api.brandwatch.com
brandwatch.com
3m.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
holodeck.stage.website.brandwatch.com
app.stage.brandwatch.com
accounts.brandwatch.com
artifactory.brandwatch.com
axiom-storybook.brandwatch.com
now.phtech.com
now.phtech.com
app.stage.brandwatch.com
office-dev.brandwatch.com
newapi.brandwatch.com
now.phtech.com
engineering.brandwatch.com
vizia.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
react.brandwatch.com
portal.brandwatch.com
my.brandwatch.com
analytics.brandwatch.com
*.trial.staging.influence.brandwatch.com
now.phtech.com
em2.brandwatch.com
support.brandwatch.com
engineering.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
mail.brandwatch.com
accounts.platform-prod.gcp0.bwcom.net
developers.brandwatch.com
sni.cloudflaressl.com
app.stage.brandwatch.com
beta-acceso.brandwatch.com
office.brandwatch.com
systems.brandwatch.com
now.phtech.com
login.brandwatch.com
newapi.brandwatch.com
systems.brandwatch.com
now.phtech.com
3m.brandwatch.com
3m.brandwatch.com
now.phtech.com
my.brandwatch.com
3m.brandwatch.com
beta-acceso.brandwatch.com
now.phtech.com
now.phtech.com
vizia.brandwatch.com
now.phtech.com
www.brandwatch.com
frontend.analytics-stage.gcp0.bwcom.net
labs.brandwatch.com
portal.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
now.phtech.com
support.brandwatch.com
brandwatch.com
react.brandwatch.com
now.phtech.com
*.brandwatch.com
vizia-admin.brandwatch.com
vizia-admin.brandwatch.com
now.phtech.com
now.phtech.com
hello.brandwatch.com
brandwatch.com
support.brandwatch.com
axiom.brandwatch.com
*.vizia.brandwatch.com
now.phtech.com
beta-acceso.brandwatch.com
holodeck.stage.website.brandwatch.com
3m.brandwatch.com
artifactory.brandwatch.com
my.platform-prod.gcp0.bwcom.net
api.reviews.brandwatch.com
ssl98626.cloudflaressl.com
api.brandwatch.com
vizia.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
mission-control.platform-stage.gcp0.bwcom.net
academetry.brandwatch.com
now.phtech.com
mission-control.brandwatch.com
login.brandwatch.com
api.brandwatch.com
audiences.brandwatch.com
newapi.brandwatch.com
api.brandwatch.com
brandwatch.com
3m.brandwatch.com
now.phtech.com
now.phtech.com
Certificate
The complete raw certificate details for 3m.brandwatch.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKvDCCCaSgAwIBAgISBKspEVn0kAWkRIFjIuIJhBwEMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDExNTA0NTJaFw0yNDA1MDExNTA0NTFaMBwxGjAYBgNVBAMT ETNtLmJyYW5kd2F0Y2guY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc0ul9ZSeLyaMYehZ+iC70gDqspiMwhv0jvf6WrKCAvQ7WAuM+AIO2evV611 ZULR5ZusvXcadRd54OIg6BaCXWKbMDy2Px3IxGvMUg9/oAc7HOlX9wap6HnmyI1R Z+eR8J6MsTsxlzulJmXT7uugRaAuPFOZCMtKFsnx8S3bzmSyc4nSyxqIN3Nnx4cA 4sL4q91M5QiBpHeR8v42G0rZuPrzrDRIZIaASODQtBT+Ul7iSbBOYAMnthKsTtSh 0A9IymFQfAr0B4hnwM39X1rN1YPaUYe5gQnkhNTPQYIvG6tdZ0BXIJqPSGb9A7hE xuquKybM7VWDy9SXNOxvcbc+qQIDAQABo4IH4DCCB9wwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBQQvuPKmb9R7smUH0v8ZuQ/clMPUjAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCBegGA1UdEQSCBd8wggXbghEzbS5icmFuZHdhdGNoLmNvbYIXYWItaW5i ZXYuYnJhbmR3YXRjaC5jb22CGmFjbi1zb25nLWtqLmJyYW5kd2F0Y2guY29tghRh aXJ1cC5icmFuZHdhdGNoLmNvbYIaYXN0cmF6ZW5lY2EuYnJhbmR3YXRjaC5jb22C EmF3cy5icmFuZHdhdGNoLmNvbYIUYmF5ZXIuYnJhbmR3YXRjaC5jb22CEmJlbC5i cmFuZHdhdGNoLmNvbYIUYm9zY2guYnJhbmR3YXRjaC5jb22CHWJydW5zd2lja2dy b3VwLmJyYW5kd2F0Y2guY29tghljYXBpdGFsb25lLmJyYW5kd2F0Y2guY29tghpj YXRlcnBpbGxhci5icmFuZHdhdGNoLmNvbYIUY2hpbWUuYnJhbmR3YXRjaC5jb22C EmNpaC5icmFuZHdhdGNoLmNvbYIdY29ub2NvcGhpbGxpcHMuYnJhbmR3YXRjaC5j b22CF2NvbnZhdGVjLmJyYW5kd2F0Y2guY29tghVkZWV6ZXIuYnJhbmR3YXRjaC5j b22CGWVhZ2xlYWxwaGEuYnJhbmR3YXRjaC5jb22CGGVkZmVuZXJneS5icmFuZHdh dGNoLmNvbYIYZXBpY2dhbWVzLmJyYW5kd2F0Y2guY29tghpldm9rZWhlYWx0aC5i cmFuZHdhdGNoLmNvbYIYZmFubmllbWFlLmJyYW5kd2F0Y2guY29tghdmaWRlbGl0 eS5icmFuZHdhdGNoLmNvbYIUZmlucmEuYnJhbmR3YXRjaC5jb22CEmdzay5icmFu ZHdhdGNoLmNvbYIVaGFsZW9uLmJyYW5kd2F0Y2guY29tghpoZXJvZGlnaXRhbC5i cmFuZHdhdGNoLmNvbYIRaG0uYnJhbmR3YXRjaC5jb22CE2htcmMuYnJhbmR3YXRj aC5jb22CFWluZGVlZC5icmFuZHdhdGNoLmNvbYIaaW5pemlvZXZva2UuYnJhbmR3 YXRjaC5jb22CFWludHVpdC5icmFuZHdhdGNoLmNvbYIVaXJvYm90LmJyYW5kd2F0 Y2guY29tghNpdGF1LmJyYW5kd2F0Y2guY29tghNrcG1nLmJyYW5kd2F0Y2guY29t ghZsYXRyb2JlLmJyYW5kd2F0Y2guY29tghhtZXJjYWRvbmEuYnJhbmR3YXRjaC5j b22CHG1lcmNlZGVzLWJlbnouYnJhbmR3YXRjaC5jb22CE21ldGEuYnJhbmR3YXRj aC5jb22CFW1pbWVzaS5icmFuZHdhdGNoLmNvbYIbbmF0aW9uYWxncmlkLmJyYW5k d2F0Y2guY29tgh9uYXRpb25hbGhpZ2h3YXlzLmJyYW5kd2F0Y2guY29tghZuZWRi YW5rLmJyYW5kd2F0Y2guY29tghJuZ24uYnJhbmR3YXRjaC5jb22CFXBhbnluai5i cmFuZHdhdGNoLmNvbYIbcGllcnJlLWZhYnJlLmJyYW5kd2F0Y2guY29tghhwaW50 ZXJlc3QuYnJhbmR3YXRjaC5jb22CGnByb2dyZXNzaXZlLmJyYW5kd2F0Y2guY29t ghpwcm90YWdvbmlzdC5icmFuZHdhdGNoLmNvbYITc2FnZS5icmFuZHdhdGNoLmNv bYIVc2Nod2FiLmJyYW5kd2F0Y2guY29tghZzcG90aWZ5LmJyYW5kd2F0Y2guY29t ghN0YndhLmJyYW5kd2F0Y2guY29tghV0aWt0b2suYnJhbmR3YXRjaC5jb22CGXRw Z3RlbGVjb20uYnJhbmR3YXRjaC5jb22CGXR3aXR0ZXJhZHMuYnJhbmR3YXRjaC5j b22CEnVoZy5icmFuZHdhdGNoLmNvbYIXdW5pbGV2ZXIuYnJhbmR3YXRjaC5jb22C E3VzYWEuYnJhbmR3YXRjaC5jb22CE3ZydHguYnJhbmR3YXRjaC5jb22CEndmcC5i cmFuZHdhdGNoLmNvbYIRd2suYnJhbmR3YXRjaC5jb20wEwYDVR0gBAwwCjAIBgZn gQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZHNA/lagL6nTDr HFIBy1bdLIHZu7+rOdiEcwAAAY1lanfuAAAEAwBGMEQCIB9WOqzRhjY9eMXDkSVZ XIjqepeQKV+lT1w6rmzeCavxAiBIMG9Fpe7vBC4yUtSpw2YTfVFreA9rWumBPgbw WrvXSwB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjWVqe0EA AAQDAEcwRQIgJ5E1CgJxiF58R/zXYIp+wFAWtwN1wY7it3KvKIOzy7kCIQDwK+rl xIRYc/PnT0GLwHGyBMmraXSVWfWiVThmwZikpjANBgkqhkiG9w0BAQsFAAOCAQEA bmGwzY+8U3GoZF6vdwXEMqNh1TMgUEJphvjiiFdDbHw9+4CTvG/CJCOSe+USsrzW +wYwOQ9x4oCte10KuQM8L2oWQfFDSvs+8QanRe20FmlM5d4gou1g3OLefGe/abot ruAKRkES6bTyHIb4WKeDThAugcCJHETvOtTwkUYUQAEpH8PaoFlsmBAA11zH7mFj etPBHrzuaQoJhamfLjozeTT6PFCPIadoKXwFrkIYhsg7Ce1rKHcIQdQjUcIcWAqZ JSkOPsTU/CNhvMlDc01sxDKKEkTAYkQRrT45B+fAeIwcVyOUl3aWW0yPHBUFQnxR Qrm4SiSRuP2mnRJbN4Y4Ag== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc0ul9ZSeLyaMYehZ+iC 70gDqspiMwhv0jvf6WrKCAvQ7WAuM+AIO2evV611ZULR5ZusvXcadRd54OIg6BaC XWKbMDy2Px3IxGvMUg9/oAc7HOlX9wap6HnmyI1RZ+eR8J6MsTsxlzulJmXT7uug RaAuPFOZCMtKFsnx8S3bzmSyc4nSyxqIN3Nnx4cA4sL4q91M5QiBpHeR8v42G0rZ uPrzrDRIZIaASODQtBT+Ul7iSbBOYAMnthKsTtSh0A9IymFQfAr0B4hnwM39X1rN 1YPaUYe5gQnkhNTPQYIvG6tdZ0BXIJqPSGb9A7hExuquKybM7VWDy9SXNOxvcbc+ qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 406692016911905939521845739977686303120388 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 15:04:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 15:04:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3m.brandwatch.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25980031535381481118021544615576608798188050780516097706316797884979338402655802511497005091760583411590897327966799372364113487924640052571828797597100426896625234589006231118313828395578422288735099565376954604646901741114664556337039619265984745001205892921611679691060567773126397676307311146407747910575788067546933051719955417324565917074030142771007691008024654526145384354401231387679894444929649482523141794351538235443901839218213426612864068068061162315180364980516036898271067696525247187985708589454678624763982538414692782229009084985752107048017646959756581153054434881295928952841443349927903280709289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 10bee3ca99bf51eec9941f4bfc66e43f72530f52 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1503 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-inbev.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acn-song-kj.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airup.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrazeneca.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayer.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosch.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswickgroup.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalone.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillar.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chime.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cih.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conocophillips.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convatec.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deezer.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglealpha.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edfenergy.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicgames.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evokehealth.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanniemae.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelity.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finra.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsk.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haleon.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herodigital.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmrc.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeed.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inizioevoke.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuit.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irobot.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itau.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latrobe.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercadona.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercedes-benz.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimesi.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgrid.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhighways.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedbank.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngn.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panynj.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pierre-fabre.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinterest.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressive.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protagonist.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sage.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwab.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotify.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbwa.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktok.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpgtelecom.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitterads.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilever.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaa.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrtx.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfp.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wk.brandwatch.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d656a77ee000004030046304402201f563aacd186363d78c5c39125595c88ea7a9790295fa54f5c3aae6cde09abf1022048306f45a5eeef042e3252d4a9c366137d516b780f6b5ae9813e06f05abbd74b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d656a7b41000004030047304502202791350a0271885e7c47fcd7608a7ec05016b70375c18ee2b772af2883b3cbb9022100f02beae5c4845873f3e74f418bc071b204c9ab69749559f5a2553866c198a4a6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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