imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:85:a8:8f:2c:43:5a:cf:42:b2:7b:e6:ba:bf:9e:98 was issued on by GlobalSign nv-sa.

With 139 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:85:a8:8f:2c:43:5a:cf:42:b2:7b:e6:ba:bf:9e:98
Serial Number (int): 2023222266109468266248746774873218712
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:68:b2:5c:92:94:1b:4b:29:bd:07:22:16:28:42:fd:4d:ff:62:91
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 52:7c:0f:4d:96:b6:f7:74:c6:5a:d6:0e:75:8a:a1:18:ca:96:71:4a
Fingerprint (sha256): 30:77:f5:14:57:84:33:b3:34:97:ae:60:f3:80:65:f6:cc:59:e3:dc:56:c4:cc:c7:a5:21:15:9b:1e:9c:ff:62

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

139

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.cbreim.com
ecm-ags.cbreim.com
c-hunter.cbre.eu
topsnet.cbre.com.hk
costlab.cbre.com
docs-staging.host-building.com
spaces-staging.host-building.com
uat-ol-tops2.cbre.com
uat2.sequentraqa.com
avm.cbre.com
previewtopsnet.cbre.co.nz
pulsetech.cbre.com.hk
translate.host-building.com
uat.devx.cbre.com
internal-vas-plat-apis.cbre.com
ticketweb.cbre.eu
pulse-test.cbre.com
ventes-portfolio.cbre.fr
uat.efficy.cbre.be
ecm.cbreim.com
uat.host-building.com
mywork.cbre.com
tasaciones.cbre.es
toulouse.cbre.fr
build3dstaging.cbre.com
ecmtest-ags.cbreim.com
previewwstopscre.cbre.com.au
previewtopsnet.cbre.com.au
devapi.devx.cbre.com
myaccess-uat.cbre.com
previewwstopsjobs2.cbre.com.au
pulse-rec.cbre.com
topsnet.cbre.co.nz
previewwstopsapi2.cbre.com.au
uat-harbour.cbre.com
pulse-uat.cbre.com
assetintel-uat.cbre.com
devx.cbre.com
previewtopsnet.cbre.com.sg
www.commercialloanservices.com
build3ddev.cbre.com
spaces.host-building.com
costlibrary.cbre.com
previewtopsnet.cbre.com.hk
pulse-pes.cbre.com
test-costlab.cbre.com
commercialloanservices.com
go-test.cbreim.com
previewwstopsara2.cbre.com.au
pulse.cbre.com
sequentra.eu
imperva.com
design.project.cbre.fr
sequentraqa.com
stage.avm.cbre.com
workplace.cbre.com
uatapi.pjmtech-np.cbre.com
assetintel.cbre.com
ecm-auth.cbreim.com
vas-tops2-uat.cbre.com
dev.devx.cbre.com
build.cbre.com
topsnet.cbre.co.in
uat-www.cbre.com.sg
vas-uat.cbre.com
pulseresponse.cbre.co.in
pjmtech.cbre.com
previewwstopscre2.cbre.com.au
previewwstops2.cbre.com.au
harbour.cbre.com
previewwstopsara.cbre.co.nz
mapping.cbre.com
uat.pjmtech-np.cbre.com
wstops.cbre.com.hk
ventes-total-uat.cbre.fr
api.pjmtech.cbre.com
myaccess-dev.cbre.com
vas-plat-apis.cbre.com
dev-workplace.cbre.com
vas-plat-apis-green.cbre.com
myservice.cbre.com
wstops.cbre.com.sg
pulseresponse.cbre.com.hk
agile.cbre.com
tfe.cloudeng.cbre.com
dev-erix-research.cbre.eu
forecaster.cbre.com
myservice-uat.cbre.com
borrowerportal.cbreloanservices.com
commercialloanservices.uat.cbre.com
uatcompass.cbre.com.au
www.sequentra.net
pulsetech.cbre.co.in
www.us.sequentra.net
vas-tops2.cbre.com
gps-selfservice.cbre.com
www.sequentraqa.com
previewtopsnet.cbre.co.in
previewwstops.cbre.com.au
erix.cbre.eu
sequentra.net
wstops.cbre.com.au
walter.cbre.eu
previewwstopsjobs.cbre.com.au
internalapi.devx.cbre.com
efficy.cbre.be
wstopsjobs.cbre.com.au
wstopscre.cbre.com.au
uatapi.devx.cbre.com
ecmtest.cbreim.com
wstopsapi.cbre.com.au
docs.host-building.com
api.devx.cbre.com
mywork-uat.cbre.com
test-workplace.cbre.com
compass.cbre.com.au
dev-costlab.cbre.com
ecmtest-auth.cbreim.com
topsnet.cbre.com.au
plansdev.cbre.com
previewwstops.cbre.com.hk
myaccess.cbre.com
cyprus-uat.cbre.com
www.us.sequentraqa.com
www.sequentra.eu
walter-dev.cbre.eu
previewtopsnet2.cbre.com.au
previewwstopsara.cbre.com.au
uat-erix-api.cbre.eu
wstopsara.cbre.com.au
cyprus.cbre.com
borrowerportal.uat.cbre.com
internal.devx.cbre.com
plansstaging.cbre.com
test-tasaciones.cbre.es
topsnet.cbre.com.sg
dev.avm.cbre.com
uat-erix-research.cbre.eu
plans.cbre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQG72/koV85RnwCkjQBJ
eezO6dUfbTznGuRbzI06v6GdETRddGDsPjVq25pm5S+PZ2ooRu+ibNXpHlHVoleg
SDqaDwhRvwIx1AkxjMVRWaAzst/0EFK+KqMMlSX4VzqAeVua4h8uAFNHIWTrBFut
Bwnnp0Fmn+Q4YtUVe/eIWOYCzFoCSUzH6p+cEG7tCImsVv7iP5YXbNfXSxbfa031
hpbcqRoGt4EQExq1lnsN1+jwJ+GxjO6JPJg8ZvYlXOcR+S1zGtTb3tLiGHn8nKwh
5seDpS4glAtwprei3ORDfTt8gAyb9dwo2RTP9IlyGtqjONvFDa+U6jO4IwYMPPUJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2023222266109468266248746774873218712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-17 20:52:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 20:52:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20325222080644494961406406823077646962838499748649809277855952289997936121683028693717178128629739199761194616104353807204466301555068650767066435165647858258547946750422256902969652830248884433978960470514030488714112360468889329918455589538605612808585651435284221930388252374006213927652501073382383106904014406281409476640757412329364799854806892892127988067712320657031271838709833841801845082040097047993364792878418110377484225817133382831549090898333129571224762836637917701240245594033854562240455365205857992744493809616886955359977861785107832966859400607755764057305075276578187412352768617347444576160113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm-ags.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-hunter.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs-staging.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaces-staging.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ol-tops2.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsetech.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translate.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-vas-plat-apis.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketweb.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventes-portfolio.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.efficy.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasaciones.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toulouse.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build3dstaging.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest-ags.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopscre.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsjobs2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-rec.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsapi2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetintel-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build3ddev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaces.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlibrary.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-pes.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-test.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.project.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.pjmtech-np.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetintel.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm-auth.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-tops2-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseresponse.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjmtech.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopscre2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapping.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pjmtech-np.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventes-total-uat.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pjmtech.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-plat-apis.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-plat-apis-green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myservice.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseresponse.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agile.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfe.cloudeng.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-erix-research.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forecaster.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myservice-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borrowerportal.cbreloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialloanservices.uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcompass.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsetech.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-tops2.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gps-selfservice.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erix.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walter.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsjobs.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efficy.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsjobs.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopscre.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsapi.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.host-building.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest-auth.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plansdev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyprus-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walter-dev.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-erix-api.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsara.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyprus.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borrowerportal.uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plansstaging.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-tasaciones.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-erix-research.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plans.cbre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec68b25c92941b4b29bd0722162842fd4dff6291
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000edac47cc5d7cd82a02d9951d9c25160039b33efccda29bb720f2c0c9faa3f1ec68a492ff75a663bb144ce48f239e9045a09b1161d98aec892ccca4967a806b374a3f25078a06309b0e54d614a82318ef92f086d7eb51593b0131f9cc3d27006ca215a7597c1e7bd3fe2f62b86f51d402ceefdef6f3196ffcd381c55bac1a4d4dcba35aa755b83cea1681fb2e16fc7bd8beda9db0df6797f35ad45d29d6c16378541608d40757aba66a5061648bc13936717fb58b1d8e77153f52446176607422f9544dc6526b6628e2c594ecc1850b4a1c76423dce5dddbc2e0ac01424b071c9753058a02c0b118d3d607a2dc1ba2e25c3304d62fe3c1af5576c5bfcb6fc944