imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:5a:12:dd:03:e4:34:fe:b0:17:1f:d0:fd:18:aa:92 was issued on by GlobalSign nv-sa.

With 150 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:5a:12:dd:03:e4:34:fe:b0:17:1f:d0:fd:18:aa:92
Serial Number (int): 1796917307054172119512711013030472338
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d0:c7:1a:ec:5c:7e:c7:02:6a:b6:9a:96:db:39:03:60:16:85:bf:b0
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 53:9b:fa:cb:53:f3:0c:13:4d:ae:2f:0d:8d:0d:53:c8:d8:2a:c9:53
Fingerprint (sha256): 5c:bf:aa:cc:aa:81:03:61:61:1b:f9:b4:80:fe:8a:59:77:e1:c0:56:0d:9e:cd:4a:59:77:25:7c:22:dd:6e:47

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

150

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbre.ie
scj-archibus.buildingi.com
www.cbre.it
www.cbre.co.in
cbre.com.sg
vaws.serviceinsightlocal.cbre.eu
www.cbre.ie
emerald.cbre.com
cbre.co.in
www.commerciallistings.cbre.co.uk
cbre.pt
www.cbre.ae
mediaassets.cbre.com
www.cbrevietnam.com
cbreresidential.com
cbre.hr
nefiber.com
cbrepreprod.simmsonline.com
cbre.com.au
www.imoveis.cbre.pt
di.serviceinsightlocal.cbre.eu
leaseaccountingtool.cbre.com
www.commerciallistings.cbre.ca
tstadfs.mainstreamsasp.com
www.cbrekorea.com
oman.cbre.com
www.cbre.com.hk
www.cbre.pt
www.tilat.cbre.fi
www.cbre.hr
gwsfmpadmin.cbre.com
lseg-archibus.buildingi.com
cbre.ca
io-cbre.buildingi.com
cbre.sk
www.cbreresidential.com
cbre.sa
cbre.com.hk
www.cbre.co.th
blueprint.cbre.com
news.cbre.cz
www.gewerbeimmobilien.cbre.de
agribusiness.cbre.com
cbre.bg
www.highstreet.cbre.es
www.nekretnine.cbre.rs
cbre.bh
support.cbre.com
dev.tether.cbre.com
imperva.com
apacresearch.cbre.com
rafay-test.cbrehost.com
qa.performanceiq.cbre.com
www.ofisi.cbre.bg
cbre.ru
crsp.serviceinsightlocal.cbre.eu
www.nefiber.com
www.cbre.nl
archibus-test.buildingi.com
www.cbre.co.uk
www.cbre.no
cbre.ae
www.cbre.fi
f5-archibus.buildingi.com
cbre.it
test.builder.cbre.com
www.cbrehotels.com
www.cbre.es
cbre.ma
gwsfmpadmin-uat.cbre.com
www.commerciallistings.cbre.no
test-agile.cbre.com
tst-cmms.cbre.eu
authbridge.serviceinsightlocal.cbre.eu
www.cbre.com.my
cbre.dk
kuwait.cbre.com
emeainsightreporting.cbre.com
dev-agile.cbre.com
www.cbreinmuebles.cbre.es
cbrekorea.com
cbre.de
www.trammellcrow.com
vantage-analytics.cbre.com
www.cms.cbre.co.jp
www.cbre.ma
philippines.cbre.com
wstopscre.cbre.co.nz
cbre.co.nz
cbre.cz
cmms.cbre.eu
noti.serviceinsightlocal.cbre.eu
vantageanalytics.cbre.com
ess1.cbre.co.in
cbre.com.my
marketinsights.cbre.com
www.cbre.co.nz
www.cbre.com.tw
www.cbre.com.tr
www.cbre.de
cbre.ch
latam.cbre.com
cbreglobalinvestors.com
www.cbre.dk
dev.autobuild.cbre.com
www.cbre.com.sg
indonesia.cbre.com
cbre.co.th
www.cbre.com.br
jordan.cbre.com
dealiq.cbre.com
www.cbre.cz
scen.serviceinsightlocal.cbre.eu
www.immobiliare.cbre.it
www.cbre.ca
cfg.serviceinsightlocal.cbre.eu
pakistan.cbre.com
cbre.com.tw
www.cbreglobalinvestors.com
broad-archibus.buildingi.com
www.cbre.com.co
enterprise.serviceinsight.cbre.com
www.cbre.ch
www.cbre.com.cn
cbre.com.tr
www.cbre.com.au
cbre.nl
www.cbre.sa
cbre.co.uk
cbre.no
www.cbrecap.com
retailtxok.cbre.us
cbre.fi
dyin.serviceinsightlocal.cbre.eu
www.cbre.sk
emeainsightreporting-test.cbre.com
news.cbre.fr
trammellcrow.com
cbre.com.co
cbre.com.cn
cbre.es
cbrevietnam.com
www.cbre.ru
www.cbre.bh
pmservice.serviceinsightlocal.cbre.eu
www.cbre.bg
cms.cbre.co.jp
cbrecap.com
cbrehotels.com
crsm.serviceinsightlocal.cbre.eu

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57xj8VNNBVlERCn3/vfr
OS+vBZh4qzkNKKX/UZl2MoMLyjZOKLhJrJSn+fr4YTQ2qI5i+NrgdhdUqZqZOI43
Yu7GZZ08e0onbSiCkKvrtNUnX1JOdV32Blhu+ECJTqDac4BOYLhsMOEOuBs8nwH2
mzptwNB4cnJnmSj41fWPF8oNog08ul48tqKF+Xex9v07N2R55y1gi/EHeOTrLdbR
Lf/U7yKeCwwsFp5P1FUFdXvWzyXXD6ZGqeWSHoYaACmOQqbE5k3uHQVcufsRHupi
sD1jTPtcOihz/nyUCPiZwvQCCFT2gw11eaF5Cj8nqpn877iBpcDEHuSuRHBVhDmz
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1796917307054172119512711013030472338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 21:33:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 21:33:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29253947216318250746468545427746777449010310797163302614467070432882380979549265958848603025009294637366161476338137729389679138661125364775521659242064483131038840648624870688243295703489171878076676781295961128783727631577678466172393275851991347406627706890032377799531780657556481466736850485965710452906189718476249456009134252769850730673481282364940524546456383453987592565374318376337563675991255015194726540034018553234068322764537664311822928736053062912475962088745233618255183704778201295793632860425703308321155255503292297535941107138025879583545667957231462973455180186114920358926803665223839756432273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2838 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scj-archibus.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerald.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrevietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nefiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrepreprod.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoveis.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaseaccountingtool.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstadfs.mainstreamsasp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrekorea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oman.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tilat.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwsfmpadmin.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lseg-archibus.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io-cbre.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprint.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.cbre.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewerbeimmobilien.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agribusiness.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highstreet.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nekretnine.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tether.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apacresearch.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafay-test.cbrehost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.performanceiq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofisi.cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nefiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus-test.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-archibus.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.builder.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwsfmpadmin-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-agile.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-cmms.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuwait.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeainsightreporting.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-agile.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreinmuebles.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrekorea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trammellcrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantage-analytics.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms.cbre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippines.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopscre.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantageanalytics.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess1.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketinsights.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latam.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreglobalinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.autobuild.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesia.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordan.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealiq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immobiliare.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistan.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreglobalinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broad-archibus.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrecap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailtxok.cbre.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeainsightreporting-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trammellcrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrevietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cbre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrecap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0c71aec5c7ec7026ab69a96db3903601685bfb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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