imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2024 Q1

About this certificate

This digital certificate with serial number 01:6c:fa:91:bc:6f:df:dd:88:68:ba:c1:c0:8e:97:d7 was issued on by GlobalSign nv-sa.

With 109 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:6c:fa:91:bc:6f:df:dd:88:68:ba:c1:c0:8e:97:d7
Serial Number (int): 1895078205309584529395567047933335511
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5d:13:28:13:0b:c5:73:04:43:3d:8a:f2:de:bb:4c:01:64:ce:2d:64
AuthorityKeyId: 66:c0:c7:a3:9a:cd:fe:f3:ea:ce:4b:53:0b:61:5e:af:33:05:b3:e1

Fingerprint (sha1): 13:c1:84:d1:e5:82:fd:f1:35:b1:67:c8:be:bc:9a:6c:f6:3f:9a:ed
Fingerprint (sha256): 6d:fb:14:90:da:98:85:74:69:8b:8d:5c:dc:a3:20:b8:12:e9:b6:4c:a9:91:97:ac:b3:6e:cf:3d:cd:63:e8:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl

Check the revocation status for certificate imperva.com

109

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbre.com
uatara.nonprodtops.cbre.com.au
www.cbre.co.il
www.cbre.at
uatapi.nonprodtops.cbre.com.au
uat.nonprodtops.cbre.com.sg
cbre.co.il
cbre.hu
uatara2.nonprodtops.cbre.com.au
uatjobs.nonprodtops.cbre.com.au
api.staging2.finishline.cbre.com
highstreetresidential.com
qa.vantage-analytics.cbre.com
cbre.pl
cbreclarion.com
www.cbre.hu
apacfinishline.cbre.com
uatara.nonprodtops.cbre.com.sg
www.cbre.co.jp
cbre.pe
staging-cmms.serviceinsight.cbre.com
staging.apacfinishline.cbre.com
uat.nonprodtops.cbre.com.au
www.cbre.pl
staging2.finishline.cbre.com
valuetrack-uat.cbre.com
cbre.co.jp
staging2.apacfinishline.cbre.com
www.commercial-listings.cbre.ae
www.commerciallistings.cbre.bh
www.commercial-listings.cbre.ie
uat.nonprodtops.cbre.co.in
www.cbre.pe
api.china.apacfinishline.cbre.com
staging-cmms-auth.serviceinsight.cbre.com
www.immo.cbre.at
uatara.nonprodtops.cbre.com.hk
cbre.se
api.select.cbre.com
uatproptrack.nonprodtops.cbre.com.au
uatcre2.nonprodtops.cbre.com.au
uatcre.nonprodtops.cbre.co.nz
api.chinastaging.apacfinishline.cbre.com
api.chinastaging2.apacfinishline.cbre.com
imperva.com
www.cbre.fr
api.staging.apacfinishline.cbre.com
cbre.ro
uatcre.nonprodtops.cbre.com.au
www.cbreim.com
zoning.staging.finishline.cbre.com
api.apacfinishline.cbre.com
cbre.rs
uat-malware-scanner-harbour.cbre.com
www.cbreclarion.com
cbre.be
www.propertysearch.cbre.com.tr
www.cbre.com
www.commerciallistings.cbre.co.il
www.nefcap.com
apiazapac.cbre.com
zoning.staging2.finishline.cbre.com
cbre.at
tst.mainstreamsasp.com
uatjobs2.nonprodtops.cbre.com.au
uat.nonprodtops.cbre.com.hk
cbre.us
ticketwebtest.cbre.eu
zoning.finishline.cbre.com
apiazemea.cbre.com
lettings.cbre.ch
hongkongcms.cbre.com
www.cbre.us
api.cbre.com
uat.nonprodtops.cbre.co.nz
preview.cbre.com
cbre.lu
rams.cbre.com
uatara.nonprodtops.cbre.co.nz
sitech.serviceinsightlocal.cbre.eu
egypt.cbre.com
rams-test.cbre.com
cbredemoutility.cbre.com
apiaz.cbre.com
staging.finishline.cbre.com
vas.tops.cbre.com.hk
www.cbre.lu
vas.tops.cbre.co.in
cbre.fr
restservice.staging2.finishline.cbre.com
api.staging2.apacfinishline.cbre.com
kenya.cbre.com
nefcap.com
training.vantageanalytics.cbre.com
apikey.cbre.com
www.cbre.se
uat2.nonprodtops.cbre.com.au
valuetrack.cbre.com
ticketwebtd.cbre.eu
vas.tops.cbre.com.sg
www.highstreetresidential.com
uatproptrack2.nonprodtops.cbre.com.au
www.cbre.ro
www.cbre.rs
www.cbre.be
rams-dev.cbre.com
uatapi2.nonprodtops.cbre.com.au
cbreim.com
novinky.cbre.cz

Other certificates including the domain name imperva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzAaYmtzt5RqlhDH93hP
NUmB5lTHHJRURz17vMs7f/RsjRiC5sObP0rhpRVFAgFm8k5arIDiqRgniyXQg+l5
WUU+Le959oeAFToiYxX7OEO1ixkIe0ke08fss/tq8tf54iPvO7wFtGI/JAKx74/d
SYFKNyo+OKl0jjHsNhAjtiz1At/blBceA7Pb3BLhUDKb4upTMTcUnKoubSQhCBf8
wF6U/CuV0aSpB2VEk+zgPPR19GC0MKoxXs40ij1KnutX6mc5J6QDPt4uStRo+5MC
TQf6/mvHamGP6kykg8/0spbkGBUJuzHeXWM939caH5afV+EkzXRQRvTpKGEPEfjv
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1895078205309584529395567047933335511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2024 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 02:14:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 02:14:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21610470654260903842822591605117347049774337620413971486021392369147456963804252840093982418452974598358769844659120999711313982755166254431724973940434988383135540806698389578266612129850849899520143208103196277179948811266607142861557685779619745036941700862775076438128134700710884398094226208410164670795318444736133242241213523915997862609854434958399627665910119847186455575574041404827727135910456867340655483719448057161566406618080034668531179874148447176493860344123438746652527318164441239972692108668766832781875071450162974827511133804299034127480195292309662161072716977861047943438806645269964871233289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2560 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatjobs.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging2.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highstreetresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.vantage-analytics.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreclarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara.nonprodtops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-cmms.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging2.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuetrack-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging2.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.china.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-cmms-auth.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immo.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara.nonprodtops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.select.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatproptrack.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcre2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcre.nonprodtops.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.chinastaging.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.chinastaging2.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcre.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoning.staging.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-malware-scanner-harbour.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreclarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertysearch.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nefcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiazapac.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoning.staging2.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.mainstreamsasp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatjobs2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketwebtest.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoning.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiazemea.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lettings.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongkongcms.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nonprodtops.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rams.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatara.nonprodtops.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitech.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egypt.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rams-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbredemoutility.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiaz.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas.tops.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas.tops.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restservice.staging2.finishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging2.apacfinishline.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenya.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nefcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.vantageanalytics.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apikey.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuetrack.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketwebtd.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas.tops.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highstreetresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatproptrack2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rams-dev.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi2.nonprodtops.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novinky.cbre.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d1328130bc57304433d8af2debb4c0164ce2d64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2024q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2024q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66c0c7a39acdfef3eace4b530b615eaf3305b3e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2024q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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