imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q2

About this certificate

This digital certificate with serial number 01:7c:e8:be:45:59:f2:21:c1:64:6a:af:47:d3:4d:3f was issued on by GlobalSign nv-sa.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:7c:e8:be:45:59:f2:21:c1:64:6a:af:47:d3:4d:3f
Serial Number (int): 1977793400085362907589388213916224831
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: aa:02:4d:30:64:47:20:74:40:5b:5b:72:23:a5:c2:1e:2e:ef:0a:f6
AuthorityKeyId: c6:a2:61:13:45:15:cc:90:8f:ba:c1:ac:bc:cc:3b:0d:0e:d0:de:06

Fingerprint (sha1): 21:4d:c0:92:d9:19:72:a7:d7:fe:69:04:d6:c8:06:1b:c9:a7:5d:d1
Fingerprint (sha256): 27:96:b9:46:54:ec:76:c7:b2:02:be:9e:ff:93:89:7f:75:0c:2c:f5:66:ea:24:cb:d5:4b:59:19:a1:dc:15:35

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl

Check the revocation status for certificate imperva.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sit-vaws.serviceinsightlocal.cbre.eu
api-uat.cbre.fr
archibus-sandbox.buildingi.com
uat-vaws.serviceinsightlocal.cbre.eu
uat-pmservice.serviceinsightlocal.cbre.eu
cmms.serviceinsight.cbre.eu
uat-sitech.serviceinsightlocal.cbre.eu
staging.forecaster.cbre.com
uat-crsp.serviceinsightlocal.cbre.eu
sit-crsm.serviceinsightlocal.cbre.eu
mlams.cbre.co.in
trn-authbridge.serviceinsightlocal.cbre.eu
cmms.serviceinsight.cbre.com
chatbot.cbre.com
uat-cfg.serviceinsightlocal.cbre.eu
uat-crsm.serviceinsightlocal.cbre.eu
uat-uk-service-harbour-api.cbreapps.com
sit-di.serviceinsightlocal.cbre.eu
trn-scen.serviceinsightlocal.cbre.eu
uat-api-email-sender.cbreapps.com
cbredevblue.simmsonline.com
trn-sitech.serviceinsightlocal.cbre.eu
apiausy-test.cbre.com
api-tgm.green.cbre.com
sqdevorig.cbre.com
api-dev.cbre.com
immobilier.cbre.fr
qat-uk-service-harbour-api.cbreapps.com
api-test.cbre.com
api.cbre.fr
sit-crsp.serviceinsightlocal.cbre.eu
sit-noti.serviceinsightlocal.cbre.eu
ch.cbre.eu
cbretest.simmsonline.com
uat-scen.serviceinsightlocal.cbre.eu
webtid.intego.dk
tgm.green.cbre.com
trn-cfg.serviceinsightlocal.cbre.eu
www.webquoteapp.com
cbrehomes.co.in
uat-noti.serviceinsightlocal.cbre.eu
webquote.cbreapps.com
bt-webquote.cbreapps.com
trn-crsp.serviceinsightlocal.cbre.eu
dynamicriskassessment-uat.cbreapps.com
gia-api-dev.cbre.com
trn-dyin.serviceinsightlocal.cbre.eu
au-staging.host-building.com
archibus-demo.buildingi.com
cmms-auth.serviceinsight.cbre.com
sit-dyin.serviceinsightlocal.cbre.eu
ess2.cbre.co.in
wqsiteloader.cbreapps.com
prd-api-email-sender.cbreapps.com
trn-crsm.serviceinsightlocal.cbre.eu
uat-authbridge.serviceinsightlocal.cbre.eu
uat-dyin.serviceinsightlocal.cbre.eu
nonprod-efm.serviceinsight.cbre.eu
staging.miq.cbre.com
fast.cbre.fr
reeft.intego.dk
sit-sitech.serviceinsightlocal.cbre.eu
ssopip.cbrehotels.com
propertycentral.cbre.com
apiaz-test.cbre.com
apiazemea-test.cbre.com
apiemea-test.cbre.com
ess.cbre.co.in
calc.cbre.com
miq.cbre.com
trn-vaws.serviceinsightlocal.cbre.eu
cbreblue.simmsonline.com
cbredev.simmsonline.com
trn-di.serviceinsightlocal.cbre.eu
uat-di.serviceinsightlocal.cbre.eu
sit-authbridge.serviceinsightlocal.cbre.eu
sit-cfg.serviceinsightlocal.cbre.eu
sit-scen.serviceinsightlocal.cbre.eu
imperva.com
uat-mriasia.cbre.com
immobilier-uat.cbre.fr
cbretestblue.simmsonline.com
apikey-test.cbre.com
cmms-auth.serviceinsight.cbre.eu
prod-uk-service-harbour-api.cbreapps.com
uat-fundq.cbreim.com
webquoteapp.com
trn-noti.serviceinsightlocal.cbre.eu
dynamicriskassessment-qat.cbreapps.com
qat-api-email-sender.cbreapps.com
trn-pmservice.serviceinsightlocal.cbre.eu
apiazapac-test.cbre.com
dynamicriskassessment.cbreapps.com
centricity-staging.host-building.com
sit-pmservice.serviceinsightlocal.cbre.eu
cbre.simmsonline.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4BEFIws6kc4wY4aYRqw
8YYnwma+ftm64p0pNJP2XNf6EUC1gDSy9+EvlvOpGi1g5158Y1n19tPhu3UBu13i
JDPMUZaLYzk/O0kID5SgXk8ii9dglBar4apJHCpz1mvEWIRtEyhOkcbhrJJz+A2n
tF7ZiHqOANp6VAIwfrv8x5Fwus8y8tPnpL9lj5XRUQ5JE6woWxiTbb7Jp1NCpT9T
CJRndy+kXqnIuF72Jabe0kI9J3kxNbo1EJYkd+xtI8qGunSq8A/OqhrLwN17ZzQ1
6olda+mpjcife+9KE0861tMwenq/FR45xhO6npfw9Oi8jYuQu2MojPUT//5eyG7H
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1977793400085362907589388213916224831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-15 22:47:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 22:47:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24174766540177431668568704590902334068507353756291846313156457837787978861636490385791753524199433630232516736471006682881021094507798553991493620363006755831055851395798952819382878838969313474324213752613009944644087188672513075121424881305495804106350279859837430225700954911880989921607183987335964434002829997403196519073276466570707563012404093791974516155646872964973352258391020989280696005796702159467657785942848473785297786358728716813698310834375926801937629946790475961484155743915193786791790032643985477147617025940547305514283955842800349528263290882752706705365494642878672674356740833267665733601073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2867 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-uat.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus-sandbox.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.forecaster.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlams.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-uk-service-harbour-api.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api-email-sender.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbredevblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiausy-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-tgm.green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqdevorig.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat-uk-service-harbour-api.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbretest.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtid.intego.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgm.green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webquoteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrehomes.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webquote.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bt-webquote.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment-uat.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gia-api-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au-staging.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus-demo.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms-auth.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess2.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wqsiteloader.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-api-email-sender.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-efm.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.miq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeft.intego.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssopip.cbrehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertycentral.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiaz-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiazemea-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiemea-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calc.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbredev.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-mriasia.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier-uat.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbretestblue.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apikey-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms-auth.serviceinsight.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-uk-service-harbour-api.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-fundq.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webquoteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment-qat.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat-api-email-sender.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiazapac-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicriskassessment.cbreapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centricity-staging.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.simmsonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa024d3064472074405b5b7223a5c21e2eef0af6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6a261134515cc908fbac1acbccc3b0d0ed0de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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