imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:73:b3:b4:b0:f9:1a:50:f4:12:3e:78:3f:79:e9:4d was issued on by GlobalSign nv-sa.

With 137 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:73:b3:b4:b0:f9:1a:50:f4:12:3e:78:3f:79:e9:4d
Serial Number (int): 1929987001675235799267510982652062029
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:68:b2:5c:92:94:1b:4b:29:bd:07:22:16:28:42:fd:4d:ff:62:91
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): 09:2f:d3:ca:ee:37:68:7d:4e:5e:34:86:41:fe:43:ca:2b:0e:f6:a8
Fingerprint (sha256): 04:ac:58:34:66:35:e8:29:9d:10:e4:2d:d0:1c:80:83:f3:0a:24:8d:7b:0d:b1:5f:11:77:76:3f:40:92:8f:62

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

137

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.cbreim.com
ecm-ags.cbreim.com
c-hunter.cbre.eu
topsnet.cbre.com.hk
costlab.cbre.com
uat-ol-tops2.cbre.com
uat2.sequentraqa.com
avm.cbre.com
previewtopsnet.cbre.co.nz
pulsetech.cbre.com.hk
workplace.cbre.fr
uat.devx.cbre.com
internal-vas-plat-apis.cbre.com
ticketweb.cbre.eu
pulse-test.cbre.com
ventes-portfolio.cbre.fr
uat.efficy.cbre.be
ecm.cbreim.com
mywork.cbre.com
tasaciones.cbre.es
build3dstaging.cbre.com
ecmtest-ags.cbreim.com
workplace.cbre.nl
previewwstopscre.cbre.com.au
previewtopsnet.cbre.com.au
devapi.devx.cbre.com
myaccess-uat.cbre.com
previewwstopsjobs2.cbre.com.au
pulse-rec.cbre.com
topsnet.cbre.co.nz
previewwstopsapi2.cbre.com.au
uat-harbour.cbre.com
pulse-uat.cbre.com
assetintel-uat.cbre.com
devx.cbre.com
previewtopsnet.cbre.com.sg
www.commercialloanservices.com
build3ddev.cbre.com
costlibrary.cbre.com
previewtopsnet.cbre.com.hk
workplace.cbre.hu
pulse-pes.cbre.com
test-costlab.cbre.com
commercialloanservices.com
go-test.cbreim.com
previewwstopsara2.cbre.com.au
pulse.cbre.com
sequentra.eu
imperva.com
workplace.cbre.pl
sequentraqa.com
stage.avm.cbre.com
workplace.cbre.com
uatapi.pjmtech-np.cbre.com
assetintel.cbre.com
ecm-auth.cbreim.com
vas-tops2-uat.cbre.com
dev.devx.cbre.com
build.cbre.com
topsnet.cbre.co.in
workplace.cbre.at
uat-www.cbre.com.sg
vas-uat.cbre.com
pulseresponse.cbre.co.in
pjmtech.cbre.com
previewwstopscre2.cbre.com.au
previewwstops2.cbre.com.au
harbour.cbre.com
previewwstopsara.cbre.co.nz
mapping.cbre.com
uat.pjmtech-np.cbre.com
wstops.cbre.com.hk
api.pjmtech.cbre.com
myaccess-dev.cbre.com
vas-plat-apis.cbre.com
workplace.cbre.sk
dev-workplace.cbre.com
vas-plat-apis-green.cbre.com
previewwstops.cbre.com.sg
myservice.cbre.com
wstops.cbre.com.sg
pulseresponse.cbre.com.hk
agile.cbre.com
tfe.cloudeng.cbre.com
dev-erix-research.cbre.eu
myservice-uat.cbre.com
borrowerportal.cbreloanservices.com
commercialloanservices.uat.cbre.com
uatcompass.cbre.com.au
www.sequentra.net
pulsetech.cbre.co.in
www.us.sequentra.net
vas-tops2.cbre.com
gps-selfservice.cbre.com
www.sequentraqa.com
previewtopsnet.cbre.co.in
previewwstops.cbre.com.au
erix.cbre.eu
sequentra.net
wstops.cbre.com.au
walter.cbre.eu
previewwstopsjobs.cbre.com.au
internalapi.devx.cbre.com
efficy.cbre.be
wstopsjobs.cbre.com.au
wstopscre.cbre.com.au
uatapi.devx.cbre.com
ecmtest.cbreim.com
wstopsapi.cbre.com.au
api.devx.cbre.com
mywork-uat.cbre.com
test-workplace.cbre.com
compass.cbre.com.au
dev-costlab.cbre.com
ecmtest-auth.cbreim.com
topsnet.cbre.com.au
plansdev.cbre.com
previewwstops.cbre.com.hk
myaccess.cbre.com
workplace.cbre.de
cyprus-uat.cbre.com
www.us.sequentraqa.com
www.sequentra.eu
walter-dev.cbre.eu
previewtopsnet2.cbre.com.au
previewwstopsara.cbre.com.au
uat-erix-api.cbre.eu
wstopsara.cbre.com.au
cyprus.cbre.com
borrowerportal.uat.cbre.com
internal.devx.cbre.com
plansstaging.cbre.com
test-tasaciones.cbre.es
topsnet.cbre.com.sg
dev.avm.cbre.com
uat-erix-research.cbre.eu
plans.cbre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQG72/koV85RnwCkjQBJ
eezO6dUfbTznGuRbzI06v6GdETRddGDsPjVq25pm5S+PZ2ooRu+ibNXpHlHVoleg
SDqaDwhRvwIx1AkxjMVRWaAzst/0EFK+KqMMlSX4VzqAeVua4h8uAFNHIWTrBFut
Bwnnp0Fmn+Q4YtUVe/eIWOYCzFoCSUzH6p+cEG7tCImsVv7iP5YXbNfXSxbfa031
hpbcqRoGt4EQExq1lnsN1+jwJ+GxjO6JPJg8ZvYlXOcR+S1zGtTb3tLiGHn8nKwh
5seDpS4glAtwprei3ORDfTt8gAyb9dwo2RTP9IlyGtqjONvFDa+U6jO4IwYMPPUJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1929987001675235799267510982652062029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 15:40:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 15:40:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20325222080644494961406406823077646962838499748649809277855952289997936121683028693717178128629739199761194616104353807204466301555068650767066435165647858258547946750422256902969652830248884433978960470514030488714112360468889329918455589538605612808585651435284221930388252374006213927652501073382383106904014406281409476640757412329364799854806892892127988067712320657031271838709833841801845082040097047993364792878418110377484225817133382831549090898333129571224762836637917701240245594033854562240455365205857992744493809616886955359977861785107832966859400607755764057305075276578187412352768617347444576160113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm-ags.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-hunter.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ol-tops2.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsetech.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-vas-plat-apis.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketweb.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventes-portfolio.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.efficy.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasaciones.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build3dstaging.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest-ags.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopscre.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsjobs2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-rec.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsapi2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetintel-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build3ddev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlibrary.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-pes.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-test.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.pjmtech-np.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetintel.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm-auth.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-tops2-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseresponse.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjmtech.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopscre2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapping.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pjmtech-np.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pjmtech.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-plat-apis.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-plat-apis-green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myservice.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseresponse.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agile.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfe.cloudeng.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-erix-research.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myservice-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borrowerportal.cbreloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialloanservices.uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcompass.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsetech.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-tops2.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gps-selfservice.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erix.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walter.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsjobs.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efficy.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsjobs.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopscre.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsapi.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest-auth.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plansdev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyprus-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walter-dev.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-erix-api.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsara.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyprus.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borrowerportal.uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plansstaging.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-tasaciones.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-erix-research.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plans.cbre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec68b25c92941b4b29bd0722162842fd4dff6291
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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