imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:e3:99:53:c1:3b:dd:ee:5a:8a:f5:f8:08:3d:ff:62 was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e3:99:53:c1:3b:dd:ee:5a:8a:f5:f8:08:3d:ff:62
Serial Number (int): 2510989227082150692814076496102424418
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: aa:02:4d:30:64:47:20:74:40:5b:5b:72:23:a5:c2:1e:2e:ef:0a:f6
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 73:3e:b5:38:3f:de:44:7f:5a:cc:9f:83:d7:50:e6:92:02:0c:9f:05
Fingerprint (sha256): 19:43:59:0c:e6:e4:22:03:5e:82:59:ec:07:45:d5:8b:cf:63:2d:ee:a4:d2:50:c3:04:f2:d2:5e:a5:46:dd:5f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sit-vaws.serviceinsightlocal.cbre.eu
api-uat.cbre.fr
archibus-sandbox.buildingi.com
uat-vaws.serviceinsightlocal.cbre.eu
uat-pmservice.serviceinsightlocal.cbre.eu
cmms.serviceinsight.cbre.eu
uat-sitech.serviceinsightlocal.cbre.eu
staging.forecaster.cbre.com
uat-crsp.serviceinsightlocal.cbre.eu
sit-crsm.serviceinsightlocal.cbre.eu
trn-authbridge.serviceinsightlocal.cbre.eu
cmms.serviceinsight.cbre.com
chatbot.cbre.com
uat-cfg.serviceinsightlocal.cbre.eu
uat-crsm.serviceinsightlocal.cbre.eu
uat-uk-service-harbour-api.cbreapps.com
sit-di.serviceinsightlocal.cbre.eu
trn-scen.serviceinsightlocal.cbre.eu
uat-api-email-sender.cbreapps.com
cbredevblue.simmsonline.com
trn-sitech.serviceinsightlocal.cbre.eu
apiausy-test.cbre.com
api-tgm.green.cbre.com
sqdevorig.cbre.com
api-dev.cbre.com
immobilier.cbre.fr
qat-uk-service-harbour-api.cbreapps.com
api-test.cbre.com
api.cbre.fr
sit-crsp.serviceinsightlocal.cbre.eu
sit-noti.serviceinsightlocal.cbre.eu
ch.cbre.eu
cbretest.simmsonline.com
uat-scen.serviceinsightlocal.cbre.eu
webtid.intego.dk
tgm.green.cbre.com
trn-cfg.serviceinsightlocal.cbre.eu
www.webquoteapp.com
uat-noti.serviceinsightlocal.cbre.eu
webquote.cbreapps.com
bt-webquote.cbreapps.com
trn-crsp.serviceinsightlocal.cbre.eu
dynamicriskassessment-uat.cbreapps.com
gia-api-dev.cbre.com
trn-dyin.serviceinsightlocal.cbre.eu
au-staging.host-building.com
archibus-demo.buildingi.com
cmms-auth.serviceinsight.cbre.com
sit-dyin.serviceinsightlocal.cbre.eu
wqsiteloader.cbreapps.com
prd-api-email-sender.cbreapps.com
trn-crsm.serviceinsightlocal.cbre.eu
uat-authbridge.serviceinsightlocal.cbre.eu
uat-dyin.serviceinsightlocal.cbre.eu
nonprod-efm.serviceinsight.cbre.eu
staging.miq.cbre.com
fast.cbre.fr
reeft.intego.dk
sit-sitech.serviceinsightlocal.cbre.eu
ssopip.cbrehotels.com
propertycentral.cbre.com
apiaz-test.cbre.com
apiazemea-test.cbre.com
apiemea-test.cbre.com
calc.cbre.com
miq.cbre.com
trn-vaws.serviceinsightlocal.cbre.eu
cbreblue.simmsonline.com
cbredev.simmsonline.com
trn-di.serviceinsightlocal.cbre.eu
uat-di.serviceinsightlocal.cbre.eu
sit-authbridge.serviceinsightlocal.cbre.eu
sit-cfg.serviceinsightlocal.cbre.eu
sit-scen.serviceinsightlocal.cbre.eu
imperva.com
uat-mriasia.cbre.com
immobilier-uat.cbre.fr
cbretestblue.simmsonline.com
apikey-test.cbre.com
cmms-auth.serviceinsight.cbre.eu
prod-uk-service-harbour-api.cbreapps.com
uat-fundq.cbreim.com
webquoteapp.com
trn-noti.serviceinsightlocal.cbre.eu
dynamicriskassessment-qat.cbreapps.com
qat-api-email-sender.cbreapps.com
trn-pmservice.serviceinsightlocal.cbre.eu
apiazapac-test.cbre.com
dynamicriskassessment.cbreapps.com
centricity-staging.host-building.com
sit-pmservice.serviceinsightlocal.cbre.eu
cbre.simmsonline.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4BEFIws6kc4wY4aYRqw
8YYnwma+ftm64p0pNJP2XNf6EUC1gDSy9+EvlvOpGi1g5158Y1n19tPhu3UBu13i
JDPMUZaLYzk/O0kID5SgXk8ii9dglBar4apJHCpz1mvEWIRtEyhOkcbhrJJz+A2n
tF7ZiHqOANp6VAIwfrv8x5Fwus8y8tPnpL9lj5XRUQ5JE6woWxiTbb7Jp1NCpT9T
CJRndy+kXqnIuF72Jabe0kI9J3kxNbo1EJYkd+xtI8qGunSq8A/OqhrLwN17ZzQ1
6olda+mpjcife+9KE0861tMwenq/FR45xhO6npfw9Oi8jYuQu2MojPUT//5eyG7H
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2510989227082150692814076496102424418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 21:26:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 21:26:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24174766540177431668568704590902334068507353756291846313156457837787978861636490385791753524199433630232516736471006682881021094507798553991493620363006755831055851395798952819382878838969313474324213752613009944644087188672513075121424881305495804106350279859837430225700954911880989921607183987335964434002829997403196519073276466570707563012404093791974516155646872964973352258391020989280696005796702159467657785942848473785297786358728716813698310834375926801937629946790475961484155743915193786791790032643985477147617025940547305514283955842800349528263290882752706705365494642878672674356740833267665733601073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2799 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus-sandbox.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.forecaster.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-uk-service-harbour-api.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api-email-sender.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbredevblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiausy-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-tgm.green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqdevorig.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat-uk-service-harbour-api.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbretest.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtid.intego.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgm.green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webquoteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webquote.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bt-webquote.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment-uat.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gia-api-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au-staging.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus-demo.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms-auth.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wqsiteloader.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-api-email-sender.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-efm.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.miq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeft.intego.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssopip.cbrehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertycentral.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiaz-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiazemea-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiemea-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calc.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbredev.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-mriasia.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier-uat.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbretestblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apikey-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms-auth.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-uk-service-harbour-api.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-fundq.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webquoteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment-qat.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat-api-email-sender.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiazapac-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centricity-staging.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.simmsonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa024d3064472074405b5b7223a5c21e2eef0af6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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