imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:28:36:4d:94:ca:a2:49:59:41:0b:77:6f:e3:67:58 was issued on by GlobalSign nv-sa.

With 130 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:28:36:4d:94:ca:a2:49:59:41:0b:77:6f:e3:67:58
Serial Number (int): 1538021266862170612137116646250866520
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:68:b2:5c:92:94:1b:4b:29:bd:07:22:16:28:42:fd:4d:ff:62:91
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): d3:30:0c:4e:73:29:b9:fd:1c:ad:89:bc:e8:14:3b:88:e5:2f:1c:26
Fingerprint (sha256): 44:eb:ad:3f:89:57:f4:bc:4c:da:ec:f7:ab:a7:68:28:78:14:d1:0e:dd:62:ae:29:c1:f4:23:33:1e:f1:bb:97

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

130

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.cbreim.com
ecm-ags.cbreim.com
c-hunter.cbre.eu
topsnet.cbre.com.hk
costlab.cbre.com
uat-ol-tops2.cbre.com
uat2.sequentraqa.com
avm.cbre.com
previewtopsnet.cbre.co.nz
pulsetech.cbre.com.hk
uat.devx.cbre.com
internal-vas-plat-apis.cbre.com
ticketweb.cbre.eu
pulse-test.cbre.com
ventes-portfolio.cbre.fr
uat.efficy.cbre.be
ecm.cbreim.com
mywork.cbre.com
tasaciones.cbre.es
build3dstaging.cbre.com
ecmtest-ags.cbreim.com
previewwstopscre.cbre.com.au
previewtopsnet.cbre.com.au
devapi.devx.cbre.com
myaccess-uat.cbre.com
previewwstopsjobs2.cbre.com.au
pulse-rec.cbre.com
topsnet.cbre.co.nz
previewwstopsapi2.cbre.com.au
uat-harbour.cbre.com
pulse-uat.cbre.com
assetintel-uat.cbre.com
devx.cbre.com
previewtopsnet.cbre.com.sg
www.commercialloanservices.com
build3ddev.cbre.com
costlibrary.cbre.com
previewtopsnet.cbre.com.hk
pulse-pes.cbre.com
test-costlab.cbre.com
commercialloanservices.com
go-test.cbreim.com
previewwstopsara2.cbre.com.au
pulse.cbre.com
sequentra.eu
imperva.com
sequentraqa.com
stage.avm.cbre.com
workplace.cbre.com
uatapi.pjmtech-np.cbre.com
assetintel.cbre.com
ecm-auth.cbreim.com
vas-tops2-uat.cbre.com
dev.devx.cbre.com
build.cbre.com
topsnet.cbre.co.in
uat-www.cbre.com.sg
vas-uat.cbre.com
pulseresponse.cbre.co.in
pjmtech.cbre.com
previewwstopscre2.cbre.com.au
previewwstops2.cbre.com.au
harbour.cbre.com
previewwstopsara.cbre.co.nz
mapping.cbre.com
uat.pjmtech-np.cbre.com
wstops.cbre.com.hk
api.pjmtech.cbre.com
myaccess-dev.cbre.com
vas-plat-apis.cbre.com
dev-workplace.cbre.com
vas-plat-apis-green.cbre.com
previewwstops.cbre.com.sg
myservice.cbre.com
wstops.cbre.com.sg
pulseresponse.cbre.com.hk
agile.cbre.com
tfe.cloudeng.cbre.com
dev-erix-research.cbre.eu
myservice-uat.cbre.com
borrowerportal.cbreloanservices.com
commercialloanservices.uat.cbre.com
uatcompass.cbre.com.au
www.sequentra.net
pulsetech.cbre.co.in
www.us.sequentra.net
vas-tops2.cbre.com
gps-selfservice.cbre.com
www.sequentraqa.com
previewtopsnet.cbre.co.in
previewwstops.cbre.com.au
erix.cbre.eu
sequentra.net
wstops.cbre.com.au
walter.cbre.eu
previewwstopsjobs.cbre.com.au
internalapi.devx.cbre.com
efficy.cbre.be
wstopsjobs.cbre.com.au
wstopscre.cbre.com.au
uatapi.devx.cbre.com
ecmtest.cbreim.com
wstopsapi.cbre.com.au
api.devx.cbre.com
mywork-uat.cbre.com
test-workplace.cbre.com
compass.cbre.com.au
dev-costlab.cbre.com
ecmtest-auth.cbreim.com
topsnet.cbre.com.au
plansdev.cbre.com
previewwstops.cbre.com.hk
myaccess.cbre.com
cyprus-uat.cbre.com
www.us.sequentraqa.com
www.sequentra.eu
walter-dev.cbre.eu
previewtopsnet2.cbre.com.au
previewwstopsara.cbre.com.au
uat-erix-api.cbre.eu
wstopsara.cbre.com.au
cyprus.cbre.com
borrowerportal.uat.cbre.com
internal.devx.cbre.com
plansstaging.cbre.com
test-tasaciones.cbre.es
topsnet.cbre.com.sg
dev.avm.cbre.com
uat-erix-research.cbre.eu
plans.cbre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQG72/koV85RnwCkjQBJ
eezO6dUfbTznGuRbzI06v6GdETRddGDsPjVq25pm5S+PZ2ooRu+ibNXpHlHVoleg
SDqaDwhRvwIx1AkxjMVRWaAzst/0EFK+KqMMlSX4VzqAeVua4h8uAFNHIWTrBFut
Bwnnp0Fmn+Q4YtUVe/eIWOYCzFoCSUzH6p+cEG7tCImsVv7iP5YXbNfXSxbfa031
hpbcqRoGt4EQExq1lnsN1+jwJ+GxjO6JPJg8ZvYlXOcR+S1zGtTb3tLiGHn8nKwh
5seDpS4glAtwprei3ORDfTt8gAyb9dwo2RTP9IlyGtqjONvFDa+U6jO4IwYMPPUJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1538021266862170612137116646250866520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 01:15:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 01:15:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20325222080644494961406406823077646962838499748649809277855952289997936121683028693717178128629739199761194616104353807204466301555068650767066435165647858258547946750422256902969652830248884433978960470514030488714112360468889329918455589538605612808585651435284221930388252374006213927652501073382383106904014406281409476640757412329364799854806892892127988067712320657031271838709833841801845082040097047993364792878418110377484225817133382831549090898333129571224762836637917701240245594033854562240455365205857992744493809616886955359977861785107832966859400607755764057305075276578187412352768617347444576160113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2933 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm-ags.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-hunter.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ol-tops2.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsetech.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-vas-plat-apis.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketweb.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventes-portfolio.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.efficy.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasaciones.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build3dstaging.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest-ags.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopscre.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsjobs2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-rec.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsapi2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetintel-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build3ddev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlibrary.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-pes.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-test.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.pjmtech-np.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetintel.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm-auth.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-tops2-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseresponse.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjmtech.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopscre2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapping.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pjmtech-np.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pjmtech.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-plat-apis.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-plat-apis-green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myservice.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseresponse.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agile.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfe.cloudeng.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-erix-research.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myservice-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borrowerportal.cbreloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialloanservices.uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcompass.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsetech.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-tops2.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gps-selfservice.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erix.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walter.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsjobs.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efficy.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsjobs.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopscre.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsapi.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workplace.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest-auth.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plansdev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyprus-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walter-dev.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-erix-api.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsara.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyprus.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borrowerportal.uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plansstaging.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-tasaciones.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-erix-research.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plans.cbre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec68b25c92941b4b29bd0722162842fd4dff6291
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c0934e40bd38dbf69edcc93eb19949bd697bd236ad46314ce579f7438fb20978ea7cc614d51917eb1a5c3859d7957d30ced4473d7564fe93fe25bb095e8d6d1bee5a7f68f3ab51b8d4bb656f1be16cdeeab3c28b2e7d54beb62f08408022f203a786eef6439c9644b242a3ec45f17fe9c1ceec1c92daadf98e2b0dd574c83da779fdd56f2b6955b811e31060194d2c9081edd761ac35daa5d144f000d4fe236c5a79f30372b9d0432ae2a75a2eb4e87477f95ed93a4b61235314e9f386d658ecf8913fb86cd16a7ae426267dd7abeeff0e969ab3a04b96eb51b4585ee8613b8aae852939076c71645c02ed3dd859a63b674478f7b5e41c87f1302945601fd293