www.cbre.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:e5:ae:be:78:4f:6c:59:60:37:be:ed:e7:47:79:7a:69:9b was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cbre.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:ae:be:78:4f:6c:59:60:37:be:ed:e7:47:79:7a:69:9b
Serial Number (int): 339493794468027054758780662531514009545115
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:a5:d1:6f:25:f2:70:60:27:ad:55:23:05:99:b1:6e:95:4d:6d:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:a7:0a:75:f5:8d:ea:48:71:d0:78:53:6c:b3:4f:a6:74:f4:79:35
Fingerprint (sha256): b4:e2:0f:8b:88:75:a2:02:26:09:c3:e7:a6:8f:2e:23:d0:1a:1e:69:47:a6:4a:ee:7a:b5:71:d7:ed:df:f6:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cbre.co.nz

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbre.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

commerciallistings.cbre.co.nz
dev.cbreresidential.com
dev.commerciallistings.cbre.co.uk
fte1-www.cbre.co.nz
fte1-www.cbre.co.uk
fte1-www.cbre.de
fte1-www.cbre.es
uat-www.cbre.ae
uat-www.cbre.at
uat-www.cbre.bh
uat-www.cbre.ch
uat-www.cbre.co.il
uat-www.cbre.co.nz
uat-www.cbre.co.uk
uat-www.cbre.com.tr
uat-www.cbre.de
uat-www.cbre.es
uat-www.cbre.it
uat-www.cbre.pt
uat-www.cbre.rs
uat.cbreinmuebles.cbre.es
uat.cbreresidential.com
uat.commercial-listings.cbre.ae
uat.commercial-listings.cbre.ie
uat.commerciallistings.cbre.bh
uat.commerciallistings.cbre.co.il
uat.commerciallistings.cbre.co.nz
uat.commerciallistings.cbre.co.uk
uat.commerciallistings.cbre.ma
uat.commerciallistings.cbre.no
uat.dataservices.cbre.eu
uat.gewerbeimmobilien.cbre.de
uat.immo.cbre.at
uat.immobiliare.cbre.it
uat.imobile.cbre.ro
uat.imoveis.cbre.pt
uat.lettings.cbre.ch
uat.listingsresource.cbre.eu
uat.nekretnine.cbre.rs
uat.propertysearch.cbre.com.tr
uat.tilat.cbre.fi
www.cbre.ae
www.cbre.at
www.cbre.bh
www.cbre.ca
www.cbre.ch
www.cbre.co.il
www.cbre.co.nz
www.cbre.co.uk
www.cbre.com.tr
www.cbre.de
www.cbre.es
www.cbre.fi
www.cbre.ie
www.cbre.it
www.cbre.ma
www.cbre.no
www.cbre.pt
www.cbre.ro
www.cbre.rs
www.cbreinmuebles.cbre.es
www.cbreresidential.com
www.cbrevietnam.com
www.commercial-listings.cbre.ae
www.commercial-listings.cbre.ie
www.commerciallistings.cbre.bh
www.commerciallistings.cbre.ca
www.commerciallistings.cbre.co.il
www.commerciallistings.cbre.co.uk
www.commerciallistings.cbre.ma
www.commerciallistings.cbre.no
www.dataservices.cbre.eu
www.gewerbeimmobilien.cbre.de
www.immo.cbre.at
www.immobiliare.cbre.it
www.imobile.cbre.ro
www.imoveis.cbre.pt
www.listingsresource.cbre.eu
www.nekretnine.cbre.rs
www.propertysearch.cbre.com.tr
www.tilat.cbre.fi

Other certificates including the domain name cbre.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cbre.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHf9lYaD/Zan+W+PEp1k
NQVG6oFOvwkLHTd3taQIpW/p4zPAOIQhL9INvD/O0yXQf51Jw/9RZ43V/NSKyP3a
OmzGxSitvcNnHhli3MKrrts5NzeYBoDzf6YbXR2mPqT9iHlQz+wHahjT5T0deZgI
Hag0Dla8+9FoP9mhMb7R5FtI9nRF/UmEOfCaHsYf4k6ifW/Kfwfb++DrNBaDNOv+
UiMIrvDUa3umDqSMpBLGPD6GEptgnLmf0Z0A0PKwHK39uq4fYY8vcBLaoThdqX0q
ANqW+UfLPAPTNcppNUAfg/MyGfUqU4da3FgFpg4nMxc9MNcqZviu3wXwxjnmEJ/v
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339493794468027054758780662531514009545115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-01 03:52:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-01 03:52:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cbre.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19247391906650460448653914377989605162382767068698598048181435955731867302085530236955230200239963305388265939698652824684475505437279427447522271136699937817652875237438508158136238152557128732665774617907621862826125165624588366016027180286713905487106431786340165978664036583971638367920015974495766059490105435178082193288023857059759117631586080660537950351956564582845546006417072316749696275307720661893568618511456426893386831738227558022252585553739319408347636704596206895644754910871810082892523468716038338242320733521527035870253811537638784834619019792940227684969742512887661131058182178471595500105681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a5d16f25f2706027ad55230599b16e954d6db1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1839 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerciallistings.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fte1-www.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fte1-www.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fte1-www.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fte1-www.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cbreinmuebles.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commercial-listings.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commercial-listings.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.dataservices.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gewerbeimmobilien.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.immo.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.immobiliare.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.imobile.cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.imoveis.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.lettings.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.listingsresource.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nekretnine.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.propertysearch.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tilat.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreinmuebles.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrevietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dataservices.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewerbeimmobilien.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immo.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immobiliare.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imobile.cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoveis.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listingsresource.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nekretnine.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertysearch.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tilat.cbre.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d745635a90000040300483046022100c3ac5a97bb97e8fb0b859647fe9c560fece2794d93f0914bc85f2b8073307087022100f76a06e924fcbddc39afae78825beb5bf0c9a72f947687649789042397a331a700760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017d745635e700000403004730450221009997d1a4b0282f505d8c200a07b2d1cbf5004c10f30a96195ac0b80befd2d187022020b196841db9cca562743f1a30d85b84627e3fc17324902e1a316a4650d11e5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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