dev.api.autobuild.cbre.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:1f:62:cb:73:4f:45:8c:d9:23:57:54:ab:3a:71:1c was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.api.autobuild.cbre.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:1f:62:cb:73:4f:45:8c:d9:23:57:54:ab:3a:71:1c
Serial Number (int): 16113700947178328101374380914203324700
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5a:06:b4:57:8d:d8:8a:03:ce:76:ce:ca:36:f2:80:e8:05:59:2f:5d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 36:ba:ce:7a:32:c7:1f:73:21:0a:c2:b0:a7:30:df:e2:26:6c:5f:c1
Fingerprint (sha256): 02:6b:d3:16:50:ad:6e:fb:f2:4f:b4:c1:d6:63:bd:8d:dc:1b:ed:7b:ba:35:92:26:9e:1f:87:59:89:23:4a:12

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dev.api.autobuild.cbre.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.api.autobuild.cbre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.api.autobuild.cbre.com

Other certificates including the domain name cbre.com

(limited to 100 certificates)
imperva.com
ava-dev.cbre.com
uat.locator.cbre.com
itrack-test.cbre.com
glv-consulting.cbre.com
tgm-nonprod2.green.cbre.com
vantage-analytics.cbre.com
myportaluat.cbre.com
navigator.cbre.com
corpcomms.cbre.com
uiweb.cbre.com
brokerhub.cbre.com
imperva.com
lsintraapps.cbre.com
po.cbre.com
imperva.com
dev.autobuild.cbre.com
opus.cbre.com
myocs.cbre.com
dev-reports-int.cbre.com
protofit-east.cbrebuild.com
vcse01.cbre.com
imperva.com
assetintel.cbre.com
imperva.com
flooredproducts.cbre.com
brand.cbre.com
navigator.cbre.com
www.highq.com
www.highq.com
looplink-pm4-1.loopnet.com
workplace.cbre.com
ecm.cbre.com
dev.api.autobuild.cbre.com
myportal.cbre.com
dashboard.cbre.com
imperva.com
imperva.com
imperva.com
staging.api.myproperty.cbre.com
test.horizons.cbre.com
imperva.com
ess.cbre.com
imperva.com
marketing.cbre.com
mypc.cbre.com
imperva.com
imperva.com
imperva.com
mapping.cbre.com
imperva.com
imperva.com
imperva.com
borrowerservices.cbre.com
sce-dev.intrepid.cbre.com
csgdr.cbre.com
vas-plat-apis.cbre.com
digitalfirst.firstsource.com
vas.cbre.com
myreimfin.cbre.com
screening.cbre.com
mymeeting.cbre.com
remote.cbre.com
vantage-analytics-prod.cbre.com
welcomegws.cbre.com
imperva.com
careers.cbre.com
us.artifactory.gcsonp.cbre.com
lmapi.cbre.com
myim.cbre.com
imperva.com
imperva.com
*.cbre.com
ess.cbre.com
imperva.com
imperva.com
imperva.com
imperva.com
dev.experience.cbre.com
imperva.com
cbre.com
api.ea.login.cbre.com
imperva.com
staging.api.ea.login.cbre.com
imperva.com
ssl364736.cloudflaressl.com
imperva.com
imperva.com
dealroom.salesloft.com
imperva.com
proptech-feedback.cbre.com
rolls-royce.locator.cbre.com
imperva.com
sso-test.cbre.com
hig.intrepid.cbre.com
imperva.com
myservice-uat.cbre.com
insightportal.cbre.com
imperva.com
mysupplier.cbre.com

Certificate

The complete raw certificate details for dev.api.autobuild.cbre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU/NdE7rMtzYGME+OgEN
hTXctWIkP+AU4LjdnnkAEXVDRfMq+jDbJxEUlyCISTTNrvUA2wziZ1LX+/cE9pxr
xxJk5z3PnTec/i5JuFF/hVZUyqF4v4NFI+t4u8HSlM3l4ZAMfggk0mOERTl2rYEN
zxUgbRp2GgjXVf56Z/kcu3hrWN+NUZW3tF/mv3A4Xk+AORmK93iJzH3cHnOR/SmL
V24w3iTDvUi1r0HCg3B10fbTuZXaWc/nDA9YlAuhwEPC8gxWkuV1GoIZiNMu6+pX
Zssam71zvCaiSgJoxmjW5GrciKfxgOfTY3NKerVbS1o46Olck34sHQEy9v9/J6Ko
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16113700947178328101374380914203324700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.api.autobuild.cbre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23393438525744470025458435468781424468933471868854012932759135547640622633036728781320988897634457506786610540449595493870234378394983199914358509695128312720813003836617315484679921410109629455034674131162896506455761946445893554045736897873027075841147143411179242187176851026098443271916282747851153831544811378315152500858221092326093087383047486455778413249657909630992950423828315511186294342840432986123809010409002617118389130298768265833664861058191349950540652179949841257913239706547835497575395018340809774317437592128049229890423731826869492414015014521418736350507229108842924673124749206165020593006677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a06b4578dd88a03ce76ceca36f280e805592f5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.autobuild.cbre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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