www.cmslistings.cbre.eu

- CBRE Ltd -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 3a:e8:c9:34:10:ef:3a:e2:52:5b:64:ab:ae:4e:0a:70 was issued on by thawte, Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CBRE Ltd

Organization: CBRE Ltd
Organization unit: EMEA IT
State / Province: London
Locality: London
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:e8:c9:34:10:ef:3a:e2:52:5b:64:ab:ae:4e:0a:70
Serial Number (int): 78303917516140956865924685099082582640
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): d6:6a:96:1c:e4:64:5d:99:6f:0c:0f:c7:76:cf:a7:da:6e:33:32:35
Fingerprint (sha256): 15:01:78:80:49:84:0f:4a:3f:2e:2b:4c:e4:10:d0:a0:09:91:1c:25:b9:11:83:dd:42:54:ba:0d:f8:e5:97:9d

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www.cmslistings.cbre.eu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cmslistings.cbre.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat.ie.cmslistings.cbre.eu
www.fi.cmslistings.cbre.eu
uat.uk.cmslistings.cbre.eu
www.ie.cmslistings.cbre.eu
www.uk.cmslistings.cbre.eu
uat.fi.cmslistings.cbre.eu
www.residential.cmslistings.cbre.eu
uat.cmslistings.cbre.eu
uat.residential.cmslistings.cbre.eu
www.cmslistings.cbre.eu

Other certificates including the domain name cbre.eu

(limited to 100 certificates)
tst-cmms.cbre.eu
ticketweb.cbre.eu
fdpowershell.az.cbre.eu
mypc.cbre.eu
snib7d6gl.wpc.edgecastcdn.net
imperva.com
imperva.com
imperva.com
*.uat.cbre.eu
www.gwsconnect.cbre.eu
imperva.com
imperva.com
innovation.cbre.eu
imperva.com
imperva.com
incapsula.com
www.cbre.co.nz
www.gwsconnect.cbre.eu
imperva.com
imperva.com
www.cbre.co.nz
imperva.com
www.cbre.eu
imperva.com
imperva.com
erix.cbre.eu
thehouseofproptech.cbre.eu
imperva.com
imperva.com
*.cbre.eu
www.cbreresidential.com
incapsula.com
www.cbre.co.nz
at.cbre.eu
sky.cbre.eu
*.cbre.eu
crm365spain.uat.cbre.eu
www.cbre.co.nz
maximo.cbre.eu
imperva.com
incapsula.com
imperva.com
www.cbre.co.nz
imperva.com
*.cbre.eu
sso.cbre.eu
teamship.cbre.eu
login.cbre.eu
imperva.com
imperva.com
*.cbre.eu
extranet.cbre.eu
imperva.com
www.cbre.co.nz
myemail.cbre.com
imperva.com
aboutrealestate.cbre.eu
sky.cbre.eu
imperva.com
imperva.com
mysupplier.cbre.eu
cmms.cbre.eu
*.cbre.eu
www.cbre.eu
www.cmslistings.cbre.eu
landx-oauth-test.aws-r52.cbre.eu
www.cbreresidential.com
imperva.com
tst-cmms.cbre.eu
imperva.com
imperva.com
core.cbre.eu
erix-research.cbre.eu
www.gwsconnect.cbre.eu
www.cbreresidential.com
loop-test.cbre.eu
imperva.com
imperva.com
owa.cbre.eu
www.cbreresidential.com
imperva.com
cyprus.uat.cbre.eu
sso.cbre.eu
imperva.com
www.cbre.co.nz
imperva.com
imperva.com
landx-api-test.aws-r52.cbre.eu
proptech.cbre.eu
*.cbre.eu
www.assetiq.cbre.eu
www.cbreresidential.com
imperva.com
imperva.com
www.cbre.co.nz
at.cbre.eu
imperva.com
emeainsightreporting.cbre.eu
*.cbre.eu
owa.cbre.eu

Certificate

The complete raw certificate details for www.cmslistings.cbre.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnABOHfSbT4BiYKImD0a
V9K5qyndARgVzLNQCMPn1EunXr8YW7r3O0o9+nCsH2c8eDbCM2yP3aakHkZ6TA7W
OrDs8mrN9/7qI7ySHmuJ0OxJ3HG/S2gz//w6gWCFs5FYXnJzXvPjR09nqD++Ewa1
YZ0dmOpgpZDAvpKxLkxWL2250qOJccJSVfqhSVJs6tE6N0+ksZFpV62IBmSCz7QB
S+uAT83YdRsJRzOowM3cwVrcpyeJTuZ9pySfRtkwXpyoSLeU9vof1X/mk11q65mc
/nXTJ3JTtg7RuvrxplaCn3ih34qYNlW4QWxtak58NoLjygrV99j7VVCBCs08e2ws
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78303917516140956865924685099082582640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CBRE Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EMEA IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.cmslistings.cbre.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25050415992833552204353032243278686927495846023030686501090945595851828363311193806335422819447732175964595784783882338955751935585224749313034853460796342429142605145890618028282909293028937400397172738306866674854668690238671408948728684621886985191208856900926470652005817339725065026376411985203649241638725435513914440121092069305925345289709858786850359456179196395270676261172075341942645397509038509985427105717252659002788618287499354002122664326375417395792280680499639176944873671276162087778758843731156809998693159865520194908896285382455693467566413242202562333321818344247800081660939087435960029031557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (296 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.ie.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fi.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.uk.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uk.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fi.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residential.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.residential.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmslistings.cbre.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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