api.ea.login.cbre.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:83:6b:11:ba:e8:4a:14:c1:2d:1f:28:3c:8c:12:fd was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.ea.login.cbre.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:83:6b:11:ba:e8:4a:14:c1:2d:1f:28:3c:8c:12:fd
Serial Number (int): 19291554452008270566115102169412408061
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ad:b7:6d:16:f1:9d:1f:53:ee:ad:b9:4f:cb:bc:6e:f4:47:5f:ce:7c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): e6:bc:d4:b8:43:97:e1:62:4b:ec:50:f9:0e:de:76:1d:b0:1b:a5:0e
Fingerprint (sha256): 05:18:76:b4:3c:59:e9:92:82:1e:9c:1a:7b:d4:a2:5b:3a:c2:93:6f:9c:de:a3:0b:b9:39:41:9c:51:65:84:7f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate api.ea.login.cbre.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ea.login.cbre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ea.login.cbre.com

Other certificates including the domain name cbre.com

(limited to 100 certificates)
imperva.com
ava-dev.cbre.com
uat.locator.cbre.com
itrack-test.cbre.com
glv-consulting.cbre.com
tgm-nonprod2.green.cbre.com
vantage-analytics.cbre.com
myportaluat.cbre.com
navigator.cbre.com
corpcomms.cbre.com
uiweb.cbre.com
brokerhub.cbre.com
imperva.com
lsintraapps.cbre.com
po.cbre.com
imperva.com
dev.autobuild.cbre.com
opus.cbre.com
myocs.cbre.com
dev-reports-int.cbre.com
protofit-east.cbrebuild.com
vcse01.cbre.com
imperva.com
assetintel.cbre.com
imperva.com
flooredproducts.cbre.com
brand.cbre.com
navigator.cbre.com
www.highq.com
www.highq.com
looplink-pm4-1.loopnet.com
workplace.cbre.com
ecm.cbre.com
dev.api.autobuild.cbre.com
myportal.cbre.com
dashboard.cbre.com
imperva.com
imperva.com
imperva.com
staging.api.myproperty.cbre.com
test.horizons.cbre.com
imperva.com
ess.cbre.com
imperva.com
marketing.cbre.com
mypc.cbre.com
imperva.com
imperva.com
imperva.com
mapping.cbre.com
imperva.com
imperva.com
imperva.com
borrowerservices.cbre.com
sce-dev.intrepid.cbre.com
csgdr.cbre.com
vas-plat-apis.cbre.com
digitalfirst.firstsource.com
vas.cbre.com
myreimfin.cbre.com
screening.cbre.com
mymeeting.cbre.com
remote.cbre.com
vantage-analytics-prod.cbre.com
welcomegws.cbre.com
imperva.com
careers.cbre.com
us.artifactory.gcsonp.cbre.com
lmapi.cbre.com
myim.cbre.com
imperva.com
imperva.com
*.cbre.com
ess.cbre.com
imperva.com
imperva.com
imperva.com
imperva.com
dev.experience.cbre.com
imperva.com
cbre.com
api.ea.login.cbre.com
imperva.com
staging.api.ea.login.cbre.com
imperva.com
ssl364736.cloudflaressl.com
imperva.com
imperva.com
dealroom.salesloft.com
imperva.com
proptech-feedback.cbre.com
rolls-royce.locator.cbre.com
imperva.com
sso-test.cbre.com
hig.intrepid.cbre.com
imperva.com
myservice-uat.cbre.com
insightportal.cbre.com
imperva.com
mysupplier.cbre.com

Certificate

The complete raw certificate details for api.ea.login.cbre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzye7H12farg8gXePMUdX
KdRxHSoGzqAyduOhDiMwF980+0DwIo77Q/1IBz492QKbRUQmzbNARZwQiCxIuqJR
saP6MVQFkgVsMyyRjQ0j08cG7r9J+cch/z62mzYljI2xKCyFoH/ldwr0m+Jd8yjW
jAmpTqH2E+yowaqo8wFO2JnpIrM21kMK+IePf/7qlGbZ9ZtClFk2+XhFReRr4DKX
RrC/EjlIEPuocYPpY+7+Kx8r8QWO2GyIayp1bOWPJgbKfwvZ9wMITZ7jcjaGGzo5
1Xlt+MypJaQUfAfLlBs5JU72i9kVmYc8KeCfxnSmjy8fipTYvu652WfXhl5x4RJS
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19291554452008270566115102169412408061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ea.login.cbre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26150921188319894390440461806896051655952737362535812804524683327759254099118019005669731515473333805335764749589364186909120112443518120524879966171101133858419594584606043647628331499436460181457112582662888606474176385973729297172347310055447046325695631749212014761865021320737068112674692201392002086353770068018805203033120040378288908617730140430310947989298754261480759275420736806051804557407103489997443669095455667114129912004261909231159933871688623709118969284213404991457778903911417644511193512148548492497484816489654274389156741831688774161885750642809594576704202687178715490233392205382146248037001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adb76d16f19d1f53eeadb94fcbbc6ef4475fce7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ea.login.cbre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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