imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:14:50:d0:a5:f3:50:4e:7b:a2:4b:2b:cb:74:4e:14 was issued on by GlobalSign nv-sa.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:14:50:d0:a5:f3:50:4e:7b:a2:4b:2b:cb:74:4e:14
Serial Number (int): 1434713056540882357852276438475230740
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: aa:02:4d:30:64:47:20:74:40:5b:5b:72:23:a5:c2:1e:2e:ef:0a:f6
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 8e:25:3f:84:30:e4:f8:b7:6d:91:37:a3:ee:a4:4d:12:fc:cc:43:2e
Fingerprint (sha256): 1b:17:ab:9f:35:7b:29:69:3e:f1:bd:53:ec:d2:f7:0c:03:c6:c8:53:6a:13:e5:a8:39:25:d0:5a:5d:c1:ec:e9

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sit-vaws.serviceinsightlocal.cbre.eu
api-uat.cbre.fr
archibus-sandbox.buildingi.com
uat-vaws.serviceinsightlocal.cbre.eu
uat-pmservice.serviceinsightlocal.cbre.eu
cmms.serviceinsight.cbre.eu
uat-sitech.serviceinsightlocal.cbre.eu
staging.forecaster.cbre.com
uat-crsp.serviceinsightlocal.cbre.eu
sit-crsm.serviceinsightlocal.cbre.eu
trn-authbridge.serviceinsightlocal.cbre.eu
cmms.serviceinsight.cbre.com
uat-cfg.serviceinsightlocal.cbre.eu
uat-crsm.serviceinsightlocal.cbre.eu
uat-uk-service-harbour-api.cbreapps.com
sit-di.serviceinsightlocal.cbre.eu
trn-scen.serviceinsightlocal.cbre.eu
cbredevblue.simmsonline.com
trn-sitech.serviceinsightlocal.cbre.eu
apiausy-test.cbre.com
api-tgm.green.cbre.com
sqdevorig.cbre.com
api-dev.cbre.com
immobilier.cbre.fr
qat-uk-service-harbour-api.cbreapps.com
api-test.cbre.com
api.cbre.fr
sit-crsp.serviceinsightlocal.cbre.eu
sit-noti.serviceinsightlocal.cbre.eu
ch.cbre.eu
cbretest.simmsonline.com
uat-scen.serviceinsightlocal.cbre.eu
webtid.intego.dk
tgm.green.cbre.com
trn-cfg.serviceinsightlocal.cbre.eu
www.webquoteapp.com
uat-noti.serviceinsightlocal.cbre.eu
webquote.cbreapps.com
bt-webquote.cbreapps.com
trn-crsp.serviceinsightlocal.cbre.eu
dynamicriskassessment-uat.cbreapps.com
gia-api-dev.cbre.com
trn-dyin.serviceinsightlocal.cbre.eu
au-staging.host-building.com
archibus-demo.buildingi.com
cmms-auth.serviceinsight.cbre.com
sit-dyin.serviceinsightlocal.cbre.eu
wqsiteloader.cbreapps.com
prd-api-email-sender.cbreapps.com
trn-crsm.serviceinsightlocal.cbre.eu
uat-authbridge.serviceinsightlocal.cbre.eu
uat-dyin.serviceinsightlocal.cbre.eu
nonprod-efm.serviceinsight.cbre.eu
staging.miq.cbre.com
fast.cbre.fr
reeft.intego.dk
sit-sitech.serviceinsightlocal.cbre.eu
ssopip.cbrehotels.com
propertycentral.cbre.com
apiaz-test.cbre.com
apiazemea-test.cbre.com
apiemea-test.cbre.com
miq.cbre.com
trn-vaws.serviceinsightlocal.cbre.eu
cbreblue.simmsonline.com
cbredev.simmsonline.com
trn-di.serviceinsightlocal.cbre.eu
uat-di.serviceinsightlocal.cbre.eu
sit-authbridge.serviceinsightlocal.cbre.eu
sit-cfg.serviceinsightlocal.cbre.eu
sit-scen.serviceinsightlocal.cbre.eu
imperva.com
uat-mriasia.cbre.com
immobilier-uat.cbre.fr
cbretestblue.simmsonline.com
apikey-test.cbre.com
cmms-auth.serviceinsight.cbre.eu
uat-fundq.cbreim.com
webquoteapp.com
trn-noti.serviceinsightlocal.cbre.eu
dynamicriskassessment-qat.cbreapps.com
qat-api-email-sender.cbreapps.com
trn-pmservice.serviceinsightlocal.cbre.eu
apiazapac-test.cbre.com
dynamicriskassessment.cbreapps.com
centricity-staging.host-building.com
sit-pmservice.serviceinsightlocal.cbre.eu
cbre.simmsonline.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4BEFIws6kc4wY4aYRqw
8YYnwma+ftm64p0pNJP2XNf6EUC1gDSy9+EvlvOpGi1g5158Y1n19tPhu3UBu13i
JDPMUZaLYzk/O0kID5SgXk8ii9dglBar4apJHCpz1mvEWIRtEyhOkcbhrJJz+A2n
tF7ZiHqOANp6VAIwfrv8x5Fwus8y8tPnpL9lj5XRUQ5JE6woWxiTbb7Jp1NCpT9T
CJRndy+kXqnIuF72Jabe0kI9J3kxNbo1EJYkd+xtI8qGunSq8A/OqhrLwN17ZzQ1
6olda+mpjcife+9KE0861tMwenq/FR45xhO6npfw9Oi8jYuQu2MojPUT//5eyG7H
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1434713056540882357852276438475230740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 20:57:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 20:57:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24174766540177431668568704590902334068507353756291846313156457837787978861636490385791753524199433630232516736471006682881021094507798553991493620363006755831055851395798952819382878838969313474324213752613009944644087188672513075121424881305495804106350279859837430225700954911880989921607183987335964434002829997403196519073276466570707563012404093791974516155646872964973352258391020989280696005796702159467657785942848473785297786358728716813698310834375926801937629946790475961484155743915193786791790032643985477147617025940547305514283955842800349528263290882752706705365494642878672674356740833267665733601073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2689 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus-sandbox.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.forecaster.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-uk-service-harbour-api.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbredevblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiausy-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-tgm.green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqdevorig.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat-uk-service-harbour-api.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbretest.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtid.intego.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgm.green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webquoteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webquote.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bt-webquote.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment-uat.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gia-api-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au-staging.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus-demo.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms-auth.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wqsiteloader.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-api-email-sender.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-efm.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.miq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeft.intego.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssopip.cbrehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertycentral.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiaz-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiazemea-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiemea-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbredev.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-mriasia.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier-uat.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbretestblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apikey-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms-auth.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-fundq.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webquoteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment-qat.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat-api-email-sender.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiazapac-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centricity-staging.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.simmsonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa024d3064472074405b5b7223a5c21e2eef0af6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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