imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:38:34:b8:3a:11:1f:31:c7:35:2b:47:a2:82:6f:c6 was issued on by GlobalSign nv-sa.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:38:34:b8:3a:11:1f:31:c7:35:2b:47:a2:82:6f:c6
Serial Number (int): 1621065901114988351778995550629818310
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5d:13:28:13:0b:c5:73:04:43:3d:8a:f2:de:bb:4c:01:64:ce:2d:64
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): b0:60:a0:b9:e5:fd:48:c0:91:7a:c6:4e:63:90:7b:b5:e2:45:f7:54
Fingerprint (sha256): 1c:08:a6:01:ee:78:21:70:e0:07:92:02:65:09:29:70:0f:94:e9:56:91:b8:11:51:23:bb:ee:2c:ce:ca:b0:53

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbre.us
ticketwebtest.cbre.eu
uatara.nonprodtops.cbre.com.au
zoning.finishline.cbre.com
www.cbre.co.il
www.cbre.at
uatapi.nonprodtops.cbre.com.au
lettings.cbre.ch
hongkongcms.cbre.com
uat.nonprodtops.cbre.com.sg
cbre.co.il
cbre.hu
www.cbre.us
uatara2.nonprodtops.cbre.com.au
survey-uat.cbre.fr
uat.nonprodtops.cbre.co.nz
uatjobs.nonprodtops.cbre.com.au
preview.cbre.com
api.staging2.finishline.cbre.com
cbre.lu
highstreetresidential.com
qa.vantage-analytics.cbre.com
cbre.pl
cbreclarion.com
www.cbre.hu
apacfinishline.cbre.com
uatara.nonprodtops.cbre.com.sg
www.cbre.co.jp
cbre.pe
uatara.nonprodtops.cbre.co.nz
sitech.serviceinsightlocal.cbre.eu
egypt.cbre.com
staging.apacfinishline.cbre.com
uat.nonprodtops.cbre.com.au
www.cbre.pl
staging2.finishline.cbre.com
valuetrack-uat.cbre.com
cbre.co.jp
staging2.apacfinishline.cbre.com
www.commercial-listings.cbre.ae
www.commerciallistings.cbre.bh
staging.finishline.cbre.com
www.commercial-listings.cbre.ie
vas.tops.cbre.com.hk
www.cbre.lu
uat.nonprodtops.cbre.co.in
vas.tops.cbre.co.in
www.cbre.pe
cbre.fr
api.china.apacfinishline.cbre.com
restservice.staging2.finishline.cbre.com
www.immo.cbre.at
uatara.nonprodtops.cbre.com.hk
cbre.se
api.select.cbre.com
uatproptrack.nonprodtops.cbre.com.au
uatcre2.nonprodtops.cbre.com.au
uatcre.nonprodtops.cbre.co.nz
api.staging2.apacfinishline.cbre.com
api.chinastaging.apacfinishline.cbre.com
api.chinastaging2.apacfinishline.cbre.com
imperva.com
kenya.cbre.com
www.cbre.fr
api.staging.apacfinishline.cbre.com
cbre.ro
uatcre.nonprodtops.cbre.com.au
nefcap.com
training.vantageanalytics.cbre.com
www.cbreim.com
zoning.staging.finishline.cbre.com
api.apacfinishline.cbre.com
cbre.rs
www.cbreclarion.com
www.cbre.se
cbre.be
uat2.nonprodtops.cbre.com.au
valuetrack.cbre.com
www.propertysearch.cbre.com.tr
vas.tops.cbre.com.sg
www.commerciallistings.cbre.co.il
www.highstreetresidential.com
uatproptrack2.nonprodtops.cbre.com.au
www.nefcap.com
www.cbre.ro
zoning.staging2.finishline.cbre.com
cbre.at
tst.mainstreamsasp.com
www.cbre.rs
www.cbre.be
uatapi2.nonprodtops.cbre.com.au
uatjobs2.nonprodtops.cbre.com.au
cbreim.com
uat.nonprodtops.cbre.com.hk
novinky.cbre.cz

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPGTCCDgGgAwIBAgIQATg0uDoRHzHHNStHooJvxjANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyNCBRMTAeFw0yNDAx
MTkxNjUzMzRaFw0yNDA3MTcxNjUzMzRaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzAaYmtzt5RqlhDH93hP
NUmB5lTHHJRURz17vMs7f/RsjRiC5sObP0rhpRVFAgFm8k5arIDiqRgniyXQg+l5
WUU+Le959oeAFToiYxX7OEO1ixkIe0ke08fss/tq8tf54iPvO7wFtGI/JAKx74/d
SYFKNyo+OKl0jjHsNhAjtiz1At/blBceA7Pb3BLhUDKb4upTMTcUnKoubSQhCBf8
wF6U/CuV0aSpB2VEk+zgPPR19GC0MKoxXs40ij1KnutX6mc5J6QDPt4uStRo+5MC
TQf6/mvHamGP6kykg8/0spbkGBUJuzHeXWM939caH5afV+EkzXRQRvTpKGEPEfjv
CQIDAQABo4IMHzCCDBswggjSBgNVHREEggjJMIIIxYIHY2JyZS51c4IVdGlja2V0
d2VidGVzdC5jYnJlLmV1gh51YXRhcmEubm9ucHJvZHRvcHMuY2JyZS5jb20uYXWC
GnpvbmluZy5maW5pc2hsaW5lLmNicmUuY29tgg53d3cuY2JyZS5jby5pbIILd3d3
LmNicmUuYXSCHnVhdGFwaS5ub25wcm9kdG9wcy5jYnJlLmNvbS5hdYIQbGV0dGlu
Z3MuY2JyZS5jaIIUaG9uZ2tvbmdjbXMuY2JyZS5jb22CG3VhdC5ub25wcm9kdG9w
cy5jYnJlLmNvbS5zZ4IKY2JyZS5jby5pbIIHY2JyZS5odYILd3d3LmNicmUudXOC
H3VhdGFyYTIubm9ucHJvZHRvcHMuY2JyZS5jb20uYXWCEnN1cnZleS11YXQuY2Jy
ZS5mcoIadWF0Lm5vbnByb2R0b3BzLmNicmUuY28ubnqCH3VhdGpvYnMubm9ucHJv
ZHRvcHMuY2JyZS5jb20uYXWCEHByZXZpZXcuY2JyZS5jb22CIGFwaS5zdGFnaW5n
Mi5maW5pc2hsaW5lLmNicmUuY29tggdjYnJlLmx1ghloaWdoc3RyZWV0cmVzaWRl
bnRpYWwuY29tgh1xYS52YW50YWdlLWFuYWx5dGljcy5jYnJlLmNvbYIHY2JyZS5w
bIIPY2JyZWNsYXJpb24uY29tggt3d3cuY2JyZS5odYIXYXBhY2ZpbmlzaGxpbmUu
Y2JyZS5jb22CHnVhdGFyYS5ub25wcm9kdG9wcy5jYnJlLmNvbS5zZ4IOd3d3LmNi
cmUuY28uanCCB2NicmUucGWCHXVhdGFyYS5ub25wcm9kdG9wcy5jYnJlLmNvLm56
giJzaXRlY2guc2VydmljZWluc2lnaHRsb2NhbC5jYnJlLmV1gg5lZ3lwdC5jYnJl
LmNvbYIfc3RhZ2luZy5hcGFjZmluaXNobGluZS5jYnJlLmNvbYIbdWF0Lm5vbnBy
b2R0b3BzLmNicmUuY29tLmF1ggt3d3cuY2JyZS5wbIIcc3RhZ2luZzIuZmluaXNo
bGluZS5jYnJlLmNvbYIXdmFsdWV0cmFjay11YXQuY2JyZS5jb22CCmNicmUuY28u
anCCIHN0YWdpbmcyLmFwYWNmaW5pc2hsaW5lLmNicmUuY29tgh93d3cuY29tbWVy
Y2lhbC1saXN0aW5ncy5jYnJlLmFlgh53d3cuY29tbWVyY2lhbGxpc3RpbmdzLmNi
cmUuYmiCG3N0YWdpbmcuZmluaXNobGluZS5jYnJlLmNvbYIfd3d3LmNvbW1lcmNp
YWwtbGlzdGluZ3MuY2JyZS5pZYIUdmFzLnRvcHMuY2JyZS5jb20uaGuCC3d3dy5j
YnJlLmx1ghp1YXQubm9ucHJvZHRvcHMuY2JyZS5jby5pboITdmFzLnRvcHMuY2Jy
ZS5jby5pboILd3d3LmNicmUucGWCB2NicmUuZnKCIWFwaS5jaGluYS5hcGFjZmlu
aXNobGluZS5jYnJlLmNvbYIocmVzdHNlcnZpY2Uuc3RhZ2luZzIuZmluaXNobGlu
ZS5jYnJlLmNvbYIQd3d3LmltbW8uY2JyZS5hdIIedWF0YXJhLm5vbnByb2R0b3Bz
LmNicmUuY29tLmhrggdjYnJlLnNlghNhcGkuc2VsZWN0LmNicmUuY29tgiR1YXRw
cm9wdHJhY2subm9ucHJvZHRvcHMuY2JyZS5jb20uYXWCH3VhdGNyZTIubm9ucHJv
ZHRvcHMuY2JyZS5jb20uYXWCHXVhdGNyZS5ub25wcm9kdG9wcy5jYnJlLmNvLm56
giRhcGkuc3RhZ2luZzIuYXBhY2ZpbmlzaGxpbmUuY2JyZS5jb22CKGFwaS5jaGlu
YXN0YWdpbmcuYXBhY2ZpbmlzaGxpbmUuY2JyZS5jb22CKWFwaS5jaGluYXN0YWdp
bmcyLmFwYWNmaW5pc2hsaW5lLmNicmUuY29tggtpbXBlcnZhLmNvbYIOa2VueWEu
Y2JyZS5jb22CC3d3dy5jYnJlLmZygiNhcGkuc3RhZ2luZy5hcGFjZmluaXNobGlu
ZS5jYnJlLmNvbYIHY2JyZS5yb4IedWF0Y3JlLm5vbnByb2R0b3BzLmNicmUuY29t
LmF1ggpuZWZjYXAuY29tgiJ0cmFpbmluZy52YW50YWdlYW5hbHl0aWNzLmNicmUu
Y29tgg53d3cuY2JyZWltLmNvbYIiem9uaW5nLnN0YWdpbmcuZmluaXNobGluZS5j
YnJlLmNvbYIbYXBpLmFwYWNmaW5pc2hsaW5lLmNicmUuY29tggdjYnJlLnJzghN3
d3cuY2JyZWNsYXJpb24uY29tggt3d3cuY2JyZS5zZYIHY2JyZS5iZYIcdWF0Mi5u
b25wcm9kdG9wcy5jYnJlLmNvbS5hdYITdmFsdWV0cmFjay5jYnJlLmNvbYIed3d3
LnByb3BlcnR5c2VhcmNoLmNicmUuY29tLnRyghR2YXMudG9wcy5jYnJlLmNvbS5z
Z4Ihd3d3LmNvbW1lcmNpYWxsaXN0aW5ncy5jYnJlLmNvLmlsgh13d3cuaGlnaHN0
cmVldHJlc2lkZW50aWFsLmNvbYIldWF0cHJvcHRyYWNrMi5ub25wcm9kdG9wcy5j
YnJlLmNvbS5hdYIOd3d3Lm5lZmNhcC5jb22CC3d3dy5jYnJlLnJvgiN6b25pbmcu
c3RhZ2luZzIuZmluaXNobGluZS5jYnJlLmNvbYIHY2JyZS5hdIIWdHN0Lm1haW5z
dHJlYW1zYXNwLmNvbYILd3d3LmNicmUucnOCC3d3dy5jYnJlLmJlgh91YXRhcGky
Lm5vbnByb2R0b3BzLmNicmUuY29tLmF1giB1YXRqb2JzMi5ub25wcm9kdG9wcy5j
YnJlLmNvbS5hdYIKY2JyZWltLmNvbYIbdWF0Lm5vbnByb2R0b3BzLmNicmUuY29t
Lmhrgg9ub3Zpbmt5LmNicmUuY3owDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUXRMoEwvFcwRDPYry3rtMAWTO
LWQwVwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUF
BwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNV
HRMBAf8EAjAAMIGeBggrBgEFBQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDov
L29jc3AuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjRxMTBK
BggrBgEFBQcwAoY+aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQv
Z3NhdGxhc3IzZHZ0bHNjYTIwMjRxMS5jcnQwHwYDVR0jBBgwFoAUZsDHo5rN/vPq
zktTC2FerzMFs+EwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxz
aWduLmNvbS9jYS9nc2F0bGFzcjNkdnRsc2NhMjAyNHExLmNybDCCAYAGCisGAQQB
1nkCBAIEggFwBIIBbAFqAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf
tZsAAAGNIqSM2gAABAMARzBFAiEAz9Wn1kTGox+SFngL4T9BwlXHG2+xhyzGgVGd
J5YhE/ICIEH3swfgE2j0MIUgMApH3MVSxjbujWZxr2WuA8sW4i3wAHcA2ra/az+1
tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGNIqSORQAABAMASDBGAiEA7z5Z
03om1JI68QZdy7Mu7esiT9ic5Fdlv9wCKaZsWGQCIQD4xBxLjfj3ld5IOe8DNFMx
+JYuYH5SZ4xlm57AipDdtgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5
2IRzAAABjSKkkDsAAAQDAEgwRgIhAJiIfSvvic++ZblBYRRTeP5lqPP8pmX8dsjD
K9CAhXmKAiEA+wi4rfKoNXTiYJYOAV8AKo+IJokUZlzNWUDvc34gLpswDQYJKoZI
hvcNAQELBQADggEBAEzIrkDsrBvIoxYrNY4ocOn8JNjHld2MWXH+RTuSHDMtP4SG
/89q2FexqWpIQs/7+6uBjJz4IrKP+gBypOL3va7QMFEc7/CWKmb2fDr1O1RD9D5z
tS/xrGT+AOsswOk5/tQmjPWjS3Uqvn98lhpMv+x3vpX3fy+uTlD+odk54EnaUbYl
jPjsH27KX0Oc1ZDmb97Ch71+n6dRcEzqpUHy96npISSaQWCIFIRC1YnBoVFJNpzh
VngKFVLPoWd1987VTzFu+roGTVxdbiyvGd+KfZrlVtyqmnVEDPkvesoeMmQ2qUYu
btSZ11mjXHkcoampBHd0hWOnX9Wp3bogp+b5M/I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzAaYmtzt5RqlhDH93hP
NUmB5lTHHJRURz17vMs7f/RsjRiC5sObP0rhpRVFAgFm8k5arIDiqRgniyXQg+l5
WUU+Le959oeAFToiYxX7OEO1ixkIe0ke08fss/tq8tf54iPvO7wFtGI/JAKx74/d
SYFKNyo+OKl0jjHsNhAjtiz1At/blBceA7Pb3BLhUDKb4upTMTcUnKoubSQhCBf8
wF6U/CuV0aSpB2VEk+zgPPR19GC0MKoxXs40ij1KnutX6mc5J6QDPt4uStRo+5MC
TQf6/mvHamGP6kykg8/0spbkGBUJuzHeXWM939caH5afV+EkzXRQRvTpKGEPEfjv
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1621065901114988351778995550629818310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 16:53:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 16:53:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21610470654260903842822591605117347049774337620413971486021392369147456963804252840093982418452974598358769844659120999711313982755166254431724973940434988383135540806698389578266612129850849899520143208103196277179948811266607142861557685779619745036941700862775076438128134700710884398094226208410164670795318444736133242241213523915997862609854434958399627665910119847186455575574041404827727135910456867340655483719448057161566406618080034668531179874148447176493860344123438746652527318164441239972692108668766832781875071450162974827511133804299034127480195292309662161072716977861047943438806645269964871233289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketwebtest.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoning.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lettings.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongkongcms.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey-uat.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatjobs.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging2.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highstreetresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.vantage-analytics.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreclarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara.nonprodtops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara.nonprodtops.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egypt.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging2.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuetrack-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging2.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas.tops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas.tops.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.china.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restservice.staging2.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immo.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara.nonprodtops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.select.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatproptrack.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcre2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcre.nonprodtops.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging2.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.chinastaging.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.chinastaging2.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenya.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcre.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nefcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.vantageanalytics.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoning.staging.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreclarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuetrack.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertysearch.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas.tops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highstreetresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatproptrack2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nefcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoning.staging2.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.mainstreamsasp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatjobs2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novinky.cbre.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d1328130bc57304433d8af2debb4c0164ce2d64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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