3m.brandwatch.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d9:50:bf:19:a4:86:35:fd:56:2a:2f:fc:23:e7:55:30:1e was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=3m.brandwatch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d9:50:bf:19:a4:86:35:fd:56:2a:2f:fc:23:e7:55:30:1e
Serial Number (int): 422397747837342601584321033572887423168542
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:57:79:ef:ae:2d:68:04:6d:50:69:e8:73:ac:fe:53:4a:ed:60:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:7b:ba:f5:f0:ae:21:f0:a6:59:0d:92:06:e8:20:31:62:42:7a:52
Fingerprint (sha256): 22:c1:35:f0:c0:93:a8:1e:21:9d:a5:aa:a6:89:74:8b:74:20:7f:1b:a0:47:7a:e7:2d:b5:ab:ed:33:7e:f6:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 3m.brandwatch.com

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 3m.brandwatch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3m.brandwatch.com
alvarezandmarsal.brandwatch.com
astrazeneca.brandwatch.com
aws.brandwatch.com
bayer.brandwatch.com
bel.brandwatch.com
bosch.brandwatch.com
brunswickgroup.brandwatch.com
capitalone.brandwatch.com
caterpillar.brandwatch.com
chime.brandwatch.com
cih.brandwatch.com
cloudflare.brandwatch.com
conocophillips.brandwatch.com
convatec.brandwatch.com
eaglealpha.brandwatch.com
edfenergy.brandwatch.com
epicgames.brandwatch.com
evokehealth.brandwatch.com
fanniemae.brandwatch.com
fidelity.brandwatch.com
finra.brandwatch.com
gsk.brandwatch.com
haleon.brandwatch.com
hm.brandwatch.com
hmrc.brandwatch.com
indeed.brandwatch.com
intuit.brandwatch.com
irobot.brandwatch.com
itau.brandwatch.com
kerry.brandwatch.com
kpmg.brandwatch.com
latrobe.brandwatch.com
mailchimp.brandwatch.com
meta.brandwatch.com
mimesi.brandwatch.com
nationalgrid.brandwatch.com
nationalhighways.brandwatch.com
nedbank.brandwatch.com
ngn.brandwatch.com
panynj.brandwatch.com
pierre-fabre.brandwatch.com
pinterest.brandwatch.com
progressive.brandwatch.com
protagonist.brandwatch.com
sage.brandwatch.com
schwab.brandwatch.com
spotify.brandwatch.com
tbwa.brandwatch.com
tiktok.brandwatch.com
tpgtelecom.brandwatch.com
twitterads.brandwatch.com
uhg.brandwatch.com
unilever.brandwatch.com
usaa.brandwatch.com
vrtx.brandwatch.com
wk.brandwatch.com

Other certificates including the domain name brandwatch.com

(limited to 100 certificates)
nexus.brandwatch.com
now.phtech.com
holodeck.stage.website.brandwatch.com
app.stage.brandwatch.com
accounts.brandwatch.com
artifactory.brandwatch.com
axiom-storybook.brandwatch.com
now.phtech.com
now.phtech.com
app.stage.brandwatch.com
office-dev.brandwatch.com
newapi.brandwatch.com
now.phtech.com
engineering.brandwatch.com
vizia.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
react.brandwatch.com
portal.brandwatch.com
my.brandwatch.com
analytics.brandwatch.com
*.trial.staging.influence.brandwatch.com
now.phtech.com
em2.brandwatch.com
support.brandwatch.com
engineering.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
mail.brandwatch.com
accounts.platform-prod.gcp0.bwcom.net
developers.brandwatch.com
sni.cloudflaressl.com
app.stage.brandwatch.com
beta-acceso.brandwatch.com
office.brandwatch.com
systems.brandwatch.com
now.phtech.com
login.brandwatch.com
newapi.brandwatch.com
systems.brandwatch.com
now.phtech.com
3m.brandwatch.com
3m.brandwatch.com
now.phtech.com
my.brandwatch.com
3m.brandwatch.com
beta-acceso.brandwatch.com
now.phtech.com
now.phtech.com
vizia.brandwatch.com
now.phtech.com
www.brandwatch.com
frontend.analytics-stage.gcp0.bwcom.net
labs.brandwatch.com
portal.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
now.phtech.com
support.brandwatch.com
brandwatch.com
react.brandwatch.com
now.phtech.com
*.brandwatch.com
vizia-admin.brandwatch.com
vizia-admin.brandwatch.com
now.phtech.com
now.phtech.com
hello.brandwatch.com
brandwatch.com
support.brandwatch.com
axiom.brandwatch.com
*.vizia.brandwatch.com
now.phtech.com
beta-acceso.brandwatch.com
holodeck.stage.website.brandwatch.com
3m.brandwatch.com
artifactory.brandwatch.com
my.platform-prod.gcp0.bwcom.net
api.reviews.brandwatch.com
ssl98626.cloudflaressl.com
api.brandwatch.com
vizia.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
mission-control.platform-stage.gcp0.bwcom.net
academetry.brandwatch.com
now.phtech.com
mission-control.brandwatch.com
login.brandwatch.com
api.brandwatch.com
audiences.brandwatch.com
newapi.brandwatch.com
api.brandwatch.com
brandwatch.com
3m.brandwatch.com
now.phtech.com
now.phtech.com

Certificate

The complete raw certificate details for 3m.brandwatch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc0ul9ZSeLyaMYehZ+iC
70gDqspiMwhv0jvf6WrKCAvQ7WAuM+AIO2evV611ZULR5ZusvXcadRd54OIg6BaC
XWKbMDy2Px3IxGvMUg9/oAc7HOlX9wap6HnmyI1RZ+eR8J6MsTsxlzulJmXT7uug
RaAuPFOZCMtKFsnx8S3bzmSyc4nSyxqIN3Nnx4cA4sL4q91M5QiBpHeR8v42G0rZ
uPrzrDRIZIaASODQtBT+Ul7iSbBOYAMnthKsTtSh0A9IymFQfAr0B4hnwM39X1rN
1YPaUYe5gQnkhNTPQYIvG6tdZ0BXIJqPSGb9A7hExuquKybM7VWDy9SXNOxvcbc+
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422397747837342601584321033572887423168542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 14:11:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 14:11:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3m.brandwatch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25980031535381481118021544615576608798188050780516097706316797884979338402655802511497005091760583411590897327966799372364113487924640052571828797597100426896625234589006231118313828395578422288735099565376954604646901741114664556337039619265984745001205892921611679691060567773126397676307311146407747910575788067546933051719955417324565917074030142771007691008024654526145384354401231387679894444929649482523141794351538235443901839218213426612864068068061162315180364980516036898271067696525247187985708589454678624763982538414692782229009084985752107048017646959756581153054434881295928952841443349927903280709289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							235779efae2d68046d5069e873acfe534aed60d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1381 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alvarezandmarsal.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrazeneca.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayer.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosch.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswickgroup.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalone.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillar.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chime.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cih.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudflare.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conocophillips.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convatec.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglealpha.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edfenergy.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicgames.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evokehealth.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanniemae.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelity.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finra.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsk.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haleon.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmrc.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeed.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuit.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irobot.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itau.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerry.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latrobe.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailchimp.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimesi.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgrid.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhighways.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedbank.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngn.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panynj.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pierre-fabre.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinterest.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressive.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protagonist.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sage.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwab.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotify.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbwa.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktok.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpgtelecom.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitterads.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilever.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaa.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrtx.brandwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wk.brandwatch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189fee750b80000040300483046022100c15bc702d3746e9a002730852d593c6e468994a65bf821a90ee27290cee5735f022100ad395fc123bbaeb98a673aba90ac5281479b171c6c4bd3d31ef229a73875a362007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189fee7509c00000403004730450221009327a474d2d7e1a9da5694759b00e1b376ac16e6b08911fd57b69cb07f7f5f26022012933adde99d3fee6e8eeadca656a52cf67532c3d60140d9b3664e4178334734
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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