3m.brandwatch.com
Issued by R3
About this certificate
This digital certificate with serial number 04:d9:50:bf:19:a4:86:35:fd:56:2a:2f:fc:23:e7:55:30:1e was issued on by Let's Encrypt.
With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=3m.brandwatch.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d9:50:bf:19:a4:86:35:fd:56:2a:2f:fc:23:e7:55:30:1eSerial Number (int): 422397747837342601584321033572887423168542
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 23:57:79:ef:ae:2d:68:04:6d:50:69:e8:73:ac:fe:53:4a:ed:60:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 48:7b:ba:f5:f0:ae:21:f0:a6:59:0d:92:06:e8:20:31:62:42:7a:52
Fingerprint (sha256): 22:c1:35:f0:c0:93:a8:1e:21:9d:a5:aa:a6:89:74:8b:74:20:7f:1b:a0:47:7a:e7:2d:b5:ab:ed:33:7e:f6:9e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 3m.brandwatch.com
57
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 3m.brandwatch.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3m.brandwatch.com
alvarezandmarsal.brandwatch.com
astrazeneca.brandwatch.com
aws.brandwatch.com
bayer.brandwatch.com
bel.brandwatch.com
bosch.brandwatch.com
brunswickgroup.brandwatch.com
capitalone.brandwatch.com
caterpillar.brandwatch.com
chime.brandwatch.com
cih.brandwatch.com
cloudflare.brandwatch.com
conocophillips.brandwatch.com
convatec.brandwatch.com
eaglealpha.brandwatch.com
edfenergy.brandwatch.com
epicgames.brandwatch.com
evokehealth.brandwatch.com
fanniemae.brandwatch.com
fidelity.brandwatch.com
finra.brandwatch.com
gsk.brandwatch.com
haleon.brandwatch.com
hm.brandwatch.com
hmrc.brandwatch.com
indeed.brandwatch.com
intuit.brandwatch.com
irobot.brandwatch.com
itau.brandwatch.com
kerry.brandwatch.com
kpmg.brandwatch.com
latrobe.brandwatch.com
mailchimp.brandwatch.com
meta.brandwatch.com
mimesi.brandwatch.com
nationalgrid.brandwatch.com
nationalhighways.brandwatch.com
nedbank.brandwatch.com
ngn.brandwatch.com
panynj.brandwatch.com
pierre-fabre.brandwatch.com
pinterest.brandwatch.com
progressive.brandwatch.com
protagonist.brandwatch.com
sage.brandwatch.com
schwab.brandwatch.com
spotify.brandwatch.com
tbwa.brandwatch.com
tiktok.brandwatch.com
tpgtelecom.brandwatch.com
twitterads.brandwatch.com
uhg.brandwatch.com
unilever.brandwatch.com
usaa.brandwatch.com
vrtx.brandwatch.com
wk.brandwatch.com
alvarezandmarsal.brandwatch.com
astrazeneca.brandwatch.com
aws.brandwatch.com
bayer.brandwatch.com
bel.brandwatch.com
bosch.brandwatch.com
brunswickgroup.brandwatch.com
capitalone.brandwatch.com
caterpillar.brandwatch.com
chime.brandwatch.com
cih.brandwatch.com
cloudflare.brandwatch.com
conocophillips.brandwatch.com
convatec.brandwatch.com
eaglealpha.brandwatch.com
edfenergy.brandwatch.com
epicgames.brandwatch.com
evokehealth.brandwatch.com
fanniemae.brandwatch.com
fidelity.brandwatch.com
finra.brandwatch.com
gsk.brandwatch.com
haleon.brandwatch.com
hm.brandwatch.com
hmrc.brandwatch.com
indeed.brandwatch.com
intuit.brandwatch.com
irobot.brandwatch.com
itau.brandwatch.com
kerry.brandwatch.com
kpmg.brandwatch.com
latrobe.brandwatch.com
mailchimp.brandwatch.com
meta.brandwatch.com
mimesi.brandwatch.com
nationalgrid.brandwatch.com
nationalhighways.brandwatch.com
nedbank.brandwatch.com
ngn.brandwatch.com
panynj.brandwatch.com
pierre-fabre.brandwatch.com
pinterest.brandwatch.com
progressive.brandwatch.com
protagonist.brandwatch.com
sage.brandwatch.com
schwab.brandwatch.com
spotify.brandwatch.com
tbwa.brandwatch.com
tiktok.brandwatch.com
tpgtelecom.brandwatch.com
twitterads.brandwatch.com
uhg.brandwatch.com
unilever.brandwatch.com
usaa.brandwatch.com
vrtx.brandwatch.com
wk.brandwatch.com
Other certificates including the domain name brandwatch.com
(limited to 100 certificates)
nexus.brandwatch.com
now.phtech.com
holodeck.stage.website.brandwatch.com
app.stage.brandwatch.com
accounts.brandwatch.com
artifactory.brandwatch.com
axiom-storybook.brandwatch.com
now.phtech.com
now.phtech.com
app.stage.brandwatch.com
office-dev.brandwatch.com
newapi.brandwatch.com
now.phtech.com
engineering.brandwatch.com
vizia.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
react.brandwatch.com
portal.brandwatch.com
my.brandwatch.com
analytics.brandwatch.com
*.trial.staging.influence.brandwatch.com
now.phtech.com
em2.brandwatch.com
support.brandwatch.com
engineering.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
mail.brandwatch.com
accounts.platform-prod.gcp0.bwcom.net
developers.brandwatch.com
sni.cloudflaressl.com
app.stage.brandwatch.com
beta-acceso.brandwatch.com
office.brandwatch.com
systems.brandwatch.com
now.phtech.com
login.brandwatch.com
newapi.brandwatch.com
systems.brandwatch.com
now.phtech.com
3m.brandwatch.com
3m.brandwatch.com
now.phtech.com
my.brandwatch.com
3m.brandwatch.com
beta-acceso.brandwatch.com
now.phtech.com
now.phtech.com
vizia.brandwatch.com
now.phtech.com
www.brandwatch.com
frontend.analytics-stage.gcp0.bwcom.net
labs.brandwatch.com
portal.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
now.phtech.com
support.brandwatch.com
brandwatch.com
react.brandwatch.com
now.phtech.com
*.brandwatch.com
vizia-admin.brandwatch.com
vizia-admin.brandwatch.com
now.phtech.com
now.phtech.com
hello.brandwatch.com
brandwatch.com
support.brandwatch.com
axiom.brandwatch.com
*.vizia.brandwatch.com
now.phtech.com
beta-acceso.brandwatch.com
holodeck.stage.website.brandwatch.com
3m.brandwatch.com
artifactory.brandwatch.com
my.platform-prod.gcp0.bwcom.net
api.reviews.brandwatch.com
ssl98626.cloudflaressl.com
api.brandwatch.com
vizia.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
mission-control.platform-stage.gcp0.bwcom.net
academetry.brandwatch.com
now.phtech.com
mission-control.brandwatch.com
login.brandwatch.com
api.brandwatch.com
audiences.brandwatch.com
newapi.brandwatch.com
api.brandwatch.com
brandwatch.com
3m.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
holodeck.stage.website.brandwatch.com
app.stage.brandwatch.com
accounts.brandwatch.com
artifactory.brandwatch.com
axiom-storybook.brandwatch.com
now.phtech.com
now.phtech.com
app.stage.brandwatch.com
office-dev.brandwatch.com
newapi.brandwatch.com
now.phtech.com
engineering.brandwatch.com
vizia.brandwatch.com
now.phtech.com
now.phtech.com
now.phtech.com
react.brandwatch.com
portal.brandwatch.com
my.brandwatch.com
analytics.brandwatch.com
*.trial.staging.influence.brandwatch.com
now.phtech.com
em2.brandwatch.com
support.brandwatch.com
engineering.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
3m.brandwatch.com
labs.brandwatch.com
mail.brandwatch.com
accounts.platform-prod.gcp0.bwcom.net
developers.brandwatch.com
sni.cloudflaressl.com
app.stage.brandwatch.com
beta-acceso.brandwatch.com
office.brandwatch.com
systems.brandwatch.com
now.phtech.com
login.brandwatch.com
newapi.brandwatch.com
systems.brandwatch.com
now.phtech.com
3m.brandwatch.com
3m.brandwatch.com
now.phtech.com
my.brandwatch.com
3m.brandwatch.com
beta-acceso.brandwatch.com
now.phtech.com
now.phtech.com
vizia.brandwatch.com
now.phtech.com
www.brandwatch.com
frontend.analytics-stage.gcp0.bwcom.net
labs.brandwatch.com
portal.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
now.phtech.com
support.brandwatch.com
brandwatch.com
react.brandwatch.com
now.phtech.com
*.brandwatch.com
vizia-admin.brandwatch.com
vizia-admin.brandwatch.com
now.phtech.com
now.phtech.com
hello.brandwatch.com
brandwatch.com
support.brandwatch.com
axiom.brandwatch.com
*.vizia.brandwatch.com
now.phtech.com
beta-acceso.brandwatch.com
holodeck.stage.website.brandwatch.com
3m.brandwatch.com
artifactory.brandwatch.com
my.platform-prod.gcp0.bwcom.net
api.reviews.brandwatch.com
ssl98626.cloudflaressl.com
api.brandwatch.com
vizia.brandwatch.com
accounts.brandwatch.com
3m.brandwatch.com
mission-control.platform-stage.gcp0.bwcom.net
academetry.brandwatch.com
now.phtech.com
mission-control.brandwatch.com
login.brandwatch.com
api.brandwatch.com
audiences.brandwatch.com
newapi.brandwatch.com
api.brandwatch.com
brandwatch.com
3m.brandwatch.com
now.phtech.com
now.phtech.com
Certificate
The complete raw certificate details for 3m.brandwatch.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKRDCCCSygAwIBAgISBNlQvxmkhjX9Viov/CPnVTAeMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MTYxNDExNTlaFw0yMzExMTQxNDExNThaMBwxGjAYBgNVBAMT ETNtLmJyYW5kd2F0Y2guY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc0ul9ZSeLyaMYehZ+iC70gDqspiMwhv0jvf6WrKCAvQ7WAuM+AIO2evV611 ZULR5ZusvXcadRd54OIg6BaCXWKbMDy2Px3IxGvMUg9/oAc7HOlX9wap6HnmyI1R Z+eR8J6MsTsxlzulJmXT7uugRaAuPFOZCMtKFsnx8S3bzmSyc4nSyxqIN3Nnx4cA 4sL4q91M5QiBpHeR8v42G0rZuPrzrDRIZIaASODQtBT+Ul7iSbBOYAMnthKsTtSh 0A9IymFQfAr0B4hnwM39X1rN1YPaUYe5gQnkhNTPQYIvG6tdZ0BXIJqPSGb9A7hE xuquKybM7VWDy9SXNOxvcbc+qQIDAQABo4IHaDCCB2QwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBQjV3nvri1oBG1QaehzrP5TSu1g0zAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCBW4GA1UdEQSCBWUwggVhghEzbS5icmFuZHdhdGNoLmNvbYIfYWx2YXJl emFuZG1hcnNhbC5icmFuZHdhdGNoLmNvbYIaYXN0cmF6ZW5lY2EuYnJhbmR3YXRj aC5jb22CEmF3cy5icmFuZHdhdGNoLmNvbYIUYmF5ZXIuYnJhbmR3YXRjaC5jb22C EmJlbC5icmFuZHdhdGNoLmNvbYIUYm9zY2guYnJhbmR3YXRjaC5jb22CHWJydW5z d2lja2dyb3VwLmJyYW5kd2F0Y2guY29tghljYXBpdGFsb25lLmJyYW5kd2F0Y2gu Y29tghpjYXRlcnBpbGxhci5icmFuZHdhdGNoLmNvbYIUY2hpbWUuYnJhbmR3YXRj aC5jb22CEmNpaC5icmFuZHdhdGNoLmNvbYIZY2xvdWRmbGFyZS5icmFuZHdhdGNo LmNvbYIdY29ub2NvcGhpbGxpcHMuYnJhbmR3YXRjaC5jb22CF2NvbnZhdGVjLmJy YW5kd2F0Y2guY29tghllYWdsZWFscGhhLmJyYW5kd2F0Y2guY29tghhlZGZlbmVy Z3kuYnJhbmR3YXRjaC5jb22CGGVwaWNnYW1lcy5icmFuZHdhdGNoLmNvbYIaZXZv a2VoZWFsdGguYnJhbmR3YXRjaC5jb22CGGZhbm5pZW1hZS5icmFuZHdhdGNoLmNv bYIXZmlkZWxpdHkuYnJhbmR3YXRjaC5jb22CFGZpbnJhLmJyYW5kd2F0Y2guY29t ghJnc2suYnJhbmR3YXRjaC5jb22CFWhhbGVvbi5icmFuZHdhdGNoLmNvbYIRaG0u YnJhbmR3YXRjaC5jb22CE2htcmMuYnJhbmR3YXRjaC5jb22CFWluZGVlZC5icmFu ZHdhdGNoLmNvbYIVaW50dWl0LmJyYW5kd2F0Y2guY29tghVpcm9ib3QuYnJhbmR3 YXRjaC5jb22CE2l0YXUuYnJhbmR3YXRjaC5jb22CFGtlcnJ5LmJyYW5kd2F0Y2gu Y29tghNrcG1nLmJyYW5kd2F0Y2guY29tghZsYXRyb2JlLmJyYW5kd2F0Y2guY29t ghhtYWlsY2hpbXAuYnJhbmR3YXRjaC5jb22CE21ldGEuYnJhbmR3YXRjaC5jb22C FW1pbWVzaS5icmFuZHdhdGNoLmNvbYIbbmF0aW9uYWxncmlkLmJyYW5kd2F0Y2gu Y29tgh9uYXRpb25hbGhpZ2h3YXlzLmJyYW5kd2F0Y2guY29tghZuZWRiYW5rLmJy YW5kd2F0Y2guY29tghJuZ24uYnJhbmR3YXRjaC5jb22CFXBhbnluai5icmFuZHdh dGNoLmNvbYIbcGllcnJlLWZhYnJlLmJyYW5kd2F0Y2guY29tghhwaW50ZXJlc3Qu YnJhbmR3YXRjaC5jb22CGnByb2dyZXNzaXZlLmJyYW5kd2F0Y2guY29tghpwcm90 YWdvbmlzdC5icmFuZHdhdGNoLmNvbYITc2FnZS5icmFuZHdhdGNoLmNvbYIVc2No d2FiLmJyYW5kd2F0Y2guY29tghZzcG90aWZ5LmJyYW5kd2F0Y2guY29tghN0Yndh LmJyYW5kd2F0Y2guY29tghV0aWt0b2suYnJhbmR3YXRjaC5jb22CGXRwZ3RlbGVj b20uYnJhbmR3YXRjaC5jb22CGXR3aXR0ZXJhZHMuYnJhbmR3YXRjaC5jb22CEnVo Zy5icmFuZHdhdGNoLmNvbYIXdW5pbGV2ZXIuYnJhbmR3YXRjaC5jb22CE3VzYWEu YnJhbmR3YXRjaC5jb22CE3ZydHguYnJhbmR3YXRjaC5jb22CEXdrLmJyYW5kd2F0 Y2guY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB 8wDxAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJ/udQuAAA BAMASDBGAiEAwVvHAtN0bpoAJzCFLVk8bkaJlKZb+CGpDuJykM7lc18CIQCtOV/B I7uuuYpnOrqQrFKBR5sXHGxL09Me8imnOHWjYgB2AOg+0No+9QY1MudXKLyJa8kD 08vREWvs62nhd31tBr1uAAABif7nUJwAAAQDAEcwRQIhAJMnpHTS1+Gp2laUdZsA 4bN2rBbmsIkR/Ve2nLB/f18mAiASkzrd6Z0/7m6O6tymVqUs9nUyw9YBQNmzZk5B eDNHNDANBgkqhkiG9w0BAQsFAAOCAQEAkr/ozn012XZ8Yb0TXw3s9rQeL+wJUbEP ffD94UTmlO0mrKrN+cleaUXlcUP/GMZttcrME6PMOTVxm8YEZTaQWIrS4dPopKSt y5oymrHpVZEFoeHbbia4zLJtPjmlUaXMKv6kHdrTvc6lSsWXaINMWmzxD/vh9qet cYVa1v7z5mtx8bClHV1wHb4rYZOccg/6rnGKKB02pKzHnaJ75pG/TgJbpMLIUmLW Ha2D25Ug3IuCQxCbmoWBDzv4fL9aGYvfEBlNr+6PVAfYms5OayA6Q6HaPAsGJco7 hq+pUjoioTo9DHBTtfb3HXWsK3GXz6ZbZS256lyJ7mRcBOLxntXznw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc0ul9ZSeLyaMYehZ+iC 70gDqspiMwhv0jvf6WrKCAvQ7WAuM+AIO2evV611ZULR5ZusvXcadRd54OIg6BaC XWKbMDy2Px3IxGvMUg9/oAc7HOlX9wap6HnmyI1RZ+eR8J6MsTsxlzulJmXT7uug RaAuPFOZCMtKFsnx8S3bzmSyc4nSyxqIN3Nnx4cA4sL4q91M5QiBpHeR8v42G0rZ uPrzrDRIZIaASODQtBT+Ul7iSbBOYAMnthKsTtSh0A9IymFQfAr0B4hnwM39X1rN 1YPaUYe5gQnkhNTPQYIvG6tdZ0BXIJqPSGb9A7hExuquKybM7VWDy9SXNOxvcbc+ qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 422397747837342601584321033572887423168542 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 14:11:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 14:11:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3m.brandwatch.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25980031535381481118021544615576608798188050780516097706316797884979338402655802511497005091760583411590897327966799372364113487924640052571828797597100426896625234589006231118313828395578422288735099565376954604646901741114664556337039619265984745001205892921611679691060567773126397676307311146407747910575788067546933051719955417324565917074030142771007691008024654526145384354401231387679894444929649482523141794351538235443901839218213426612864068068061162315180364980516036898271067696525247187985708589454678624763982538414692782229009084985752107048017646959756581153054434881295928952841443349927903280709289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 235779efae2d68046d5069e873acfe534aed60d3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1381 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alvarezandmarsal.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrazeneca.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayer.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosch.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswickgroup.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalone.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterpillar.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chime.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cih.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudflare.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conocophillips.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convatec.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglealpha.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edfenergy.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicgames.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evokehealth.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanniemae.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelity.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finra.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsk.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haleon.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmrc.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeed.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuit.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irobot.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itau.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerry.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latrobe.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailchimp.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimesi.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgrid.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhighways.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedbank.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngn.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panynj.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pierre-fabre.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinterest.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressive.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protagonist.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sage.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwab.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotify.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbwa.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktok.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpgtelecom.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitterads.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilever.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaa.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrtx.brandwatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wk.brandwatch.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189fee750b80000040300483046022100c15bc702d3746e9a002730852d593c6e468994a65bf821a90ee27290cee5735f022100ad395fc123bbaeb98a673aba90ac5281479b171c6c4bd3d31ef229a73875a362007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189fee7509c00000403004730450221009327a474d2d7e1a9da5694759b00e1b376ac16e6b08911fd57b69cb07f7f5f26022012933adde99d3fee6e8eeadca656a52cf67532c3d60140d9b3664e4178334734 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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