imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q4

About this certificate

This digital certificate with serial number 01:74:9c:c8:c9:d8:0e:61:cf:0a:ed:b0:af:16:69:ac was issued on by GlobalSign nv-sa.

With 140 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:74:9c:c8:c9:d8:0e:61:cf:0a:ed:b0:af:16:69:ac
Serial Number (int): 1934714395373311259778051213463284140
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d0:c7:1a:ec:5c:7e:c7:02:6a:b6:9a:96:db:39:03:60:16:85:bf:b0
AuthorityKeyId: aa:11:71:8f:95:c4:58:98:8b:b1:6e:0f:3b:50:68:24:bc:b8:19:bc

Fingerprint (sha1): 22:a4:0d:9c:a5:00:da:00:9a:df:b8:e7:dc:7b:82:30:c8:c9:5b:db
Fingerprint (sha256): 97:53:94:9b:50:24:7a:9c:c6:1b:36:e3:ce:93:2f:75:a5:0a:92:a7:b9:e5:e1:1e:3b:de:99:37:4a:77:49:5e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl

Check the revocation status for certificate imperva.com

140

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbre.ie
scj-archibus.buildingi.com
www.cbre.it
www.cbre.co.in
cbre.com.sg
vaws.serviceinsightlocal.cbre.eu
www.cbre.ie
emerald.cbre.com
cbre.co.in
www.commerciallistings.cbre.co.uk
cbre.pt
www.cbre.ae
mediaassets.cbre.com
www.cbrevietnam.com
cbre.hr
cbrepreprod.simmsonline.com
cbre.com.au
www.imoveis.cbre.pt
di.serviceinsightlocal.cbre.eu
leaseaccountingtool.cbre.com
tstadfs.mainstreamsasp.com
www.cbrekorea.com
oman.cbre.com
www.cbre.com.hk
www.cbre.pt
www.tilat.cbre.fi
www.cbre.hr
gwsfmpadmin.cbre.com
lseg-archibus.buildingi.com
io-cbre.buildingi.com
cbre.sk
cbre.sa
cbre.com.hk
www.cbre.co.th
blueprint.cbre.com
news.cbre.cz
www.gewerbeimmobilien.cbre.de
agribusiness.cbre.com
cbre.bg
www.highstreet.cbre.es
www.nekretnine.cbre.rs
cbre.bh
support.cbre.com
dev.tether.cbre.com
imperva.com
apacresearch.cbre.com
rafay-test.cbrehost.com
qa.performanceiq.cbre.com
www.ofisi.cbre.bg
cbre.ru
crsp.serviceinsightlocal.cbre.eu
www.cbre.nl
archibus-test.buildingi.com
www.cbre.co.uk
www.cbre.no
cbre.ae
www.cbre.fi
f5-archibus.buildingi.com
cbre.it
test.builder.cbre.com
www.cbrehotels.com
www.cbre.es
cbre.ma
gwsfmpadmin-uat.cbre.com
www.commerciallistings.cbre.no
test-agile.cbre.com
tst-cmms.cbre.eu
authbridge.serviceinsightlocal.cbre.eu
www.cbre.com.my
cbre.dk
kuwait.cbre.com
emeainsightreporting.cbre.com
dev-agile.cbre.com
www.cbreinmuebles.cbre.es
cbrekorea.com
cbre.de
www.trammellcrow.com
vantage-analytics.cbre.com
www.cms.cbre.co.jp
www.cbre.ma
philippines.cbre.com
wstopscre.cbre.co.nz
cbre.co.nz
cbre.cz
cmms.cbre.eu
noti.serviceinsightlocal.cbre.eu
vantageanalytics.cbre.com
ess1.cbre.co.in
cbre.com.my
marketinsights.cbre.com
www.cbre.co.nz
www.cbre.com.tw
www.cbre.com.tr
www.cbre.de
cbre.ch
latam.cbre.com
cbreglobalinvestors.com
www.cbre.dk
dev.autobuild.cbre.com
www.cbre.com.sg
indonesia.cbre.com
cbre.co.th
jordan.cbre.com
dealiq.cbre.com
www.cbre.cz
scen.serviceinsightlocal.cbre.eu
www.immobiliare.cbre.it
cfg.serviceinsightlocal.cbre.eu
pakistan.cbre.com
cbre.com.tw
www.cbreglobalinvestors.com
broad-archibus.buildingi.com
www.cbre.com.co
enterprise.serviceinsight.cbre.com
www.cbre.ch
www.cbre.com.cn
cbre.com.tr
www.cbre.com.au
cbre.nl
www.cbre.sa
cbre.co.uk
cbre.no
retailtxok.cbre.us
cbre.fi
dyin.serviceinsightlocal.cbre.eu
www.cbre.sk
emeainsightreporting-test.cbre.com
news.cbre.fr
trammellcrow.com
cbre.com.co
cbre.com.cn
cbre.es
cbrevietnam.com
www.cbre.ru
www.cbre.bh
pmservice.serviceinsightlocal.cbre.eu
www.cbre.bg
cms.cbre.co.jp
cbrehotels.com
crsm.serviceinsightlocal.cbre.eu

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57xj8VNNBVlERCn3/vfr
OS+vBZh4qzkNKKX/UZl2MoMLyjZOKLhJrJSn+fr4YTQ2qI5i+NrgdhdUqZqZOI43
Yu7GZZ08e0onbSiCkKvrtNUnX1JOdV32Blhu+ECJTqDac4BOYLhsMOEOuBs8nwH2
mzptwNB4cnJnmSj41fWPF8oNog08ul48tqKF+Xex9v07N2R55y1gi/EHeOTrLdbR
Lf/U7yKeCwwsFp5P1FUFdXvWzyXXD6ZGqeWSHoYaACmOQqbE5k3uHQVcufsRHupi
sD1jTPtcOihz/nyUCPiZwvQCCFT2gw11eaF5Cj8nqpn877iBpcDEHuSuRHBVhDmz
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1934714395373311259778051213463284140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 23:56:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 23:56:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29253947216318250746468545427746777449010310797163302614467070432882380979549265958848603025009294637366161476338137729389679138661125364775521659242064483131038840648624870688243295703489171878076676781295961128783727631577678466172393275851991347406627706890032377799531780657556481466736850485965710452906189718476249456009134252769850730673481282364940524546456383453987592565374318376337563675991255015194726540034018553234068322764537664311822928736053062912475962088745233618255183704778201295793632860425703308321155255503292297535941107138025879583545667957231462973455180186114920358926803665223839756432273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2661 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scj-archibus.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaws.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerald.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrevietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrepreprod.simmsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoveis.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'di.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaseaccountingtool.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstadfs.mainstreamsasp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrekorea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oman.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tilat.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwsfmpadmin.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lseg-archibus.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io-cbre.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprint.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.cbre.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewerbeimmobilien.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agribusiness.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highstreet.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nekretnine.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tether.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apacresearch.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafay-test.cbrehost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.performanceiq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofisi.cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crsp.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus-test.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-archibus.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.builder.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwsfmpadmin-uat.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-agile.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-cmms.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authbridge.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuwait.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeainsightreporting.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-agile.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreinmuebles.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrekorea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trammellcrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantage-analytics.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms.cbre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippines.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstopscre.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmms.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noti.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantageanalytics.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess1.cbre.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketinsights.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latam.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbreglobalinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.autobuild.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesia.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordan.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealiq.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scen.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immobiliare.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfg.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistan.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreglobalinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broad-archibus.buildingi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise.serviceinsight.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailtxok.cbre.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyin.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeainsightreporting-test.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.cbre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trammellcrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrevietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmservice.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cbre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crsm.serviceinsightlocal.cbre.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0c71aec5c7ec7026ab69a96db3903601685bfb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aa11718f95c458988bb16e0f3b506824bcb819bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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