imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:75:78:f8:bb:88:c1:c5:c9:e1:50:fb:08:6d:44:41 was issued on by GlobalSign nv-sa.

With 127 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:75:78:f8:bb:88:c1:c5:c9:e1:50:fb:08:6d:44:41
Serial Number (int): 1939180324009258256794363091946914881
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:68:b2:5c:92:94:1b:4b:29:bd:07:22:16:28:42:fd:4d:ff:62:91
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): 95:a4:c4:76:e8:ae:4f:8c:e7:db:00:46:7d:d1:2c:28:36:15:1f:4b
Fingerprint (sha256): 4b:ba:4c:d2:c8:56:96:01:2c:de:b5:2d:6b:10:ae:9a:7d:fa:8a:bd:8a:c4:88:57:9d:35:d8:62:66:0f:43:ee

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate imperva.com

127

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.cbreim.com
ecm-ags.cbreim.com
c-hunter.cbre.eu
topsnet.cbre.com.hk
costlab.cbre.com
uat-ol-tops2.cbre.com
uat2.sequentraqa.com
avm.cbre.com
previewtopsnet.cbre.co.nz
pulsetech.cbre.com.hk
uat.devx.cbre.com
internal-vas-plat-apis.cbre.com
ticketweb.cbre.eu
pulse-test.cbre.com
ventes-portfolio.cbre.fr
uat.efficy.cbre.be
ecm.cbreim.com
mywork.cbre.com
tasaciones.cbre.es
build3dstaging.cbre.com
ecmtest-ags.cbreim.com
previewwstopscre.cbre.com.au
previewtopsnet.cbre.com.au
devapi.devx.cbre.com
myaccess-uat.cbre.com
previewwstopsjobs2.cbre.com.au
pulse-rec.cbre.com
topsnet.cbre.co.nz
previewwstopsapi2.cbre.com.au
uat-harbour.cbre.com
pulse-uat.cbre.com
assetintel-uat.cbre.com
devx.cbre.com
previewtopsnet.cbre.com.sg
www.commercialloanservices.com
build3ddev.cbre.com
costlibrary.cbre.com
previewtopsnet.cbre.com.hk
pulse-pes.cbre.com
test-costlab.cbre.com
commercialloanservices.com
go-test.cbreim.com
previewwstopsara2.cbre.com.au
pulse.cbre.com
sequentra.eu
imperva.com
sequentraqa.com
stage.avm.cbre.com
uatapi.pjmtech-np.cbre.com
assetintel.cbre.com
ecm-auth.cbreim.com
vas-tops2-uat.cbre.com
dev.devx.cbre.com
build.cbre.com
topsnet.cbre.co.in
uat-www.cbre.com.sg
vas-uat.cbre.com
pulseresponse.cbre.co.in
pjmtech.cbre.com
previewwstopscre2.cbre.com.au
previewwstops2.cbre.com.au
harbour.cbre.com
previewwstopsara.cbre.co.nz
mapping.cbre.com
uat.pjmtech-np.cbre.com
wstops.cbre.com.hk
api.pjmtech.cbre.com
myaccess-dev.cbre.com
vas-plat-apis.cbre.com
vas-plat-apis-green.cbre.com
previewwstops.cbre.com.sg
myservice.cbre.com
wstops.cbre.com.sg
pulseresponse.cbre.com.hk
agile.cbre.com
tfe.cloudeng.cbre.com
dev-erix-research.cbre.eu
myservice-uat.cbre.com
borrowerportal.cbreloanservices.com
commercialloanservices.uat.cbre.com
uatcompass.cbre.com.au
www.sequentra.net
pulsetech.cbre.co.in
www.us.sequentra.net
vas-tops2.cbre.com
gps-selfservice.cbre.com
www.sequentraqa.com
previewtopsnet.cbre.co.in
previewwstops.cbre.com.au
erix.cbre.eu
sequentra.net
wstops.cbre.com.au
walter.cbre.eu
previewwstopsjobs.cbre.com.au
internalapi.devx.cbre.com
efficy.cbre.be
wstopsjobs.cbre.com.au
wstopscre.cbre.com.au
uatapi.devx.cbre.com
ecmtest.cbreim.com
wstopsapi.cbre.com.au
api.devx.cbre.com
mywork-uat.cbre.com
compass.cbre.com.au
dev-costlab.cbre.com
ecmtest-auth.cbreim.com
topsnet.cbre.com.au
plansdev.cbre.com
previewwstops.cbre.com.hk
myaccess.cbre.com
cyprus-uat.cbre.com
www.us.sequentraqa.com
www.sequentra.eu
walter-dev.cbre.eu
previewtopsnet2.cbre.com.au
previewwstopsara.cbre.com.au
uat-erix-api.cbre.eu
wstopsara.cbre.com.au
cyprus.cbre.com
borrowerportal.uat.cbre.com
internal.devx.cbre.com
plansstaging.cbre.com
test-tasaciones.cbre.es
topsnet.cbre.com.sg
dev.avm.cbre.com
uat-erix-research.cbre.eu
plans.cbre.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQG72/koV85RnwCkjQBJ
eezO6dUfbTznGuRbzI06v6GdETRddGDsPjVq25pm5S+PZ2ooRu+ibNXpHlHVoleg
SDqaDwhRvwIx1AkxjMVRWaAzst/0EFK+KqMMlSX4VzqAeVua4h8uAFNHIWTrBFut
Bwnnp0Fmn+Q4YtUVe/eIWOYCzFoCSUzH6p+cEG7tCImsVv7iP5YXbNfXSxbfa031
hpbcqRoGt4EQExq1lnsN1+jwJ+GxjO6JPJg8ZvYlXOcR+S1zGtTb3tLiGHn8nKwh
5seDpS4glAtwprei3ORDfTt8gAyb9dwo2RTP9IlyGtqjONvFDa+U6jO4IwYMPPUJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1939180324009258256794363091946914881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 15:15:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 15:15:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20325222080644494961406406823077646962838499748649809277855952289997936121683028693717178128629739199761194616104353807204466301555068650767066435165647858258547946750422256902969652830248884433978960470514030488714112360468889329918455589538605612808585651435284221930388252374006213927652501073382383106904014406281409476640757412329364799854806892892127988067712320657031271838709833841801845082040097047993364792878418110377484225817133382831549090898333129571224762836637917701240245594033854562240455365205857992744493809616886955359977861785107832966859400607755764057305075276578187412352768617347444576160113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm-ags.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-hunter.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-ol-tops2.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsetech.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-vas-plat-apis.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketweb.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventes-portfolio.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.efficy.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasaciones.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build3dstaging.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest-ags.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopscre.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsjobs2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-rec.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsapi2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetintel-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build3ddev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costlibrary.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-pes.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-test.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.pjmtech-np.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetintel.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm-auth.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-tops2-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseresponse.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjmtech.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopscre2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapping.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pjmtech-np.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pjmtech.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-plat-apis.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-plat-apis-green.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myservice.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseresponse.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agile.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfe.cloudeng.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-erix-research.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myservice-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borrowerportal.cbreloanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialloanservices.uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcompass.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsetech.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas-tops2.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gps-selfservice.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erix.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequentra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walter.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsjobs.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efficy.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsjobs.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopscre.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsapi.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-costlab.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmtest-auth.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plansdev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccess.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyprus-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.sequentraqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequentra.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walter-dev.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewtopsnet2.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewwstopsara.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-erix-api.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopsara.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyprus.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borrowerportal.uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.devx.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plansstaging.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-tasaciones.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsnet.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.avm.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-erix-research.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plans.cbre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec68b25c92941b4b29bd0722162842fd4dff6291
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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