www.cbreresidential.com

- CBRE -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 5f:a6:f0:c3:a8:19:79:95:98:51:fd:3f:3d:42:0e:1e was issued on by thawte, Inc..

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CBRE

Organization: CBRE
Organization unit: EMEA IT
State / Province: London
Locality: London
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:a6:f0:c3:a8:19:79:95:98:51:fd:3f:3d:42:0e:1e
Serial Number (int): 127143464157904634956006774898518265374
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): d7:b9:81:5d:55:ba:bd:19:35:0f:df:64:7f:68:5c:66:4f:db:2e:fd
Fingerprint (sha256): 7c:3c:80:c0:b3:1c:17:38:be:ed:5e:eb:21:d4:d5:3a:5a:2e:06:cf:8f:f4:a4:bb:20:b7:4b:60:02:f1:59:3c

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www.cbreresidential.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbreresidential.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat.imoveis.cbre.pt
www.tilat.cbre.fi
uat.commerciallistings.cbre.co.uk
uat.tilat.cbre.fi
uat.cbreresidential.com
www.commerciallistings.cbre.co.uk
www.commercial-listings.cbre.ie
uat.commercial-listings.cbre.ie
www.imoveis.cbre.pt
www.cbreresidential.com
cbreresidential.com

Other certificates including the domain name cbreresidential.com

(limited to 100 certificates)
www.cbre.co.nz
www.cbre.co.nz
www.cbreresidential.com
www.cbre.co.nz
www.cbre.co.nz
imperva.com
www.cbre.co.nz
www.cbre.co.nz
imperva.com
www.cbreresidential.com
www.cbreresidential.com
www.cbreresidential.com
www.cbre.co.nz
www.cbreresidential.com
www.cbre.co.nz
www.cbreresidential.com
www.cbre.co.nz
www.cbreresidential.com
www.cbreresidential.com
www.cbre.co.nz
www.cbreresidential.com
www.cbre.co.nz
www.cbreresidential.com
www.cbreresidential.com
cbre.co.uk
www.cbreresidential.com
imperva.com
www.cbre.co.nz
www.cbre.co.nz
imperva.com
www.cbre.co.nz
imperva.com
imperva.com
uat-www.cbre.com
www.cbreresidential.com
www.cbreresidential.com
www.cbreresidential.com
www.cbreresidential.com
www.cbreresidential.com
www.cbre.co.nz
www.cbreresidential.com
www.cbreresidential.com
actualwww.cbreresidential.com
www.cbre.co.nz
www.cbre.co.nz
imperva.com
imperva.com
actualwww.cbreresidential.com
www.cbre.co.nz
www.listingsresource.cbre.eu
www.cbreresidential.com
www.cbreresidential.com
www.cbre.co.nz
cbre.co.uk
imperva.com
www.cbre.com
www.cbreresidential.com
www.cbre.com
imperva.com
www.cbre.co.nz
www.cbre.co.nz
www.cbreresidential.com
www.cbre.co.nz
www.cbreresidential.com
uat-www.cbre.com
www.cbre.co.nz
www.listingsresource.cbre.eu
www.cbre.co.nz
www.cbre.co.nz
www.cbre.com
www.cbreresidential.com
www.cbre.co.nz
www.cbre.co.nz
www.cbreresidential.com
www.cbre.co.nz
cbre.co.uk
www.cbreresidential.com
www.cbre.co.nz
actualwww.cbreresidential.com
www.cbreresidential.com
www.cbre.co.nz
www.cbreresidential.com
imperva.com
imperva.com
www.cbre.co.nz
www.cbre.co.nz
www.cbreresidential.com
imperva.com
www.cbreresidential.com
www.cbreresidential.com
www.cbreresidential.com
www.cbreresidential.com
cbre.co.uk
www.cbreresidential.com
imperva.com

Certificate

The complete raw certificate details for www.cbreresidential.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjm6ZkjIq4F1SPvKhmhn
ETTW3FKWYz235UFtUKIyaWxNfvdG+T0qdsRRkG5W7VaNxULcLNXvD13+nQSjgm5f
rvwhyouYzz8wEVPMJFMnksS2jT6widqhOTE2CPRkBfDAa7m1kADTw5tGBNZD2pnb
mgS8tHZr5MpthbuDhRYWoyKQ+k/YIpJhYrTFsr5kLnSNzMnP8DOvBm8OrDJagGsQ
rBWUBkn9xUuEX23oUwHuhhkijvkGbWs3hWFTIEXnyY+NJvbdo9Br31mOAVLLbaWy
eqOyCps7Bt97/7nNV6q6W0unGQfhBJJKfQf3wFwZilXU3f81OuZ3G0AmCUZp0O8P
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127143464157904634956006774898518265374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CBRE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EMEA IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.cbreresidential.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19469165763312189695322730670028278656679537666180605595373459077325975525119802397633125255273429091971151528474034404554673425601584285174227374624560568962250132789138950245647378824168892030573456931155948320323605470842541351702955240011552665892347564650515139133220509946104369262249503647216453099140792111467361402019373651677267016117649641135421715607417376487154968479041215474517359271483888673200294264210368138292012682735837065379046596306022267629829483043240639856256768040990575819469277983574656363617575440095601494667727689042629870210119021455563867393149949804869805213711588956123870994042729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.imoveis.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tilat.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tilat.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commercial-listings.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoveis.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreresidential.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c2b01246da4f28ad0af534c00bf1c712ed24d138a4210758094770f3f45a2344b27f32f631a4dd0af0192d15f6e948adfd6472837724126904adf2cd0d3cd856d80aabd79db38acac97dc0a40b8a7a038af90e23de6671b2358f5ab0722773be9b8ce04bcd7b160fadabf028122d40117be11589a42b757aadb12c4c7554d8be1acf94ecdf07d7a679895da14a95ffac7b94924f77bbfba437930f44a07062e1f3a3af27778022cffbd92fd131be7c8f46ed8ff084a6f3f58d357c852543dbaafe1ba6b9789c319d936c86c2b544deb97c53dd43983335ab4447bb1a4b8237a3444c93f18694c8a8442e28acade49a5ce172e397970e2775d3c0a9d51486f7a