brand.cbre.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:9f:c6:b1:9b:e5:78:c2:bf:46:00:34:0c:33:f2:e9:34 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brand.cbre.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:9f:c6:b1:9b:e5:78:c2:bf:46:00:34:0c:33:f2:e9:34
Serial Number (int): 421141666809646553917928092779456134048052
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f8:25:88:97:a6:17:a6:24:fd:b9:d8:98:35:9d:2b:c1:31:02:3e:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:b3:d0:9e:23:81:a1:e3:a1:6b:9d:7f:fd:53:1e:ff:39:c1:3a:b4
Fingerprint (sha256): c0:f0:68:23:3a:28:aa:d9:01:ed:4c:70:66:6a:52:90:45:c6:44:8f:fb:2b:9d:82:d8:81:3a:c5:00:7e:28:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brand.cbre.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brand.cbre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brand.cbre.com
cbre.beam3.monigle.net

Other certificates including the domain name cbre.com

(limited to 100 certificates)
imperva.com
ava-dev.cbre.com
uat.locator.cbre.com
itrack-test.cbre.com
glv-consulting.cbre.com
vantage-analytics.cbre.com
myportaluat.cbre.com
navigator.cbre.com
corpcomms.cbre.com
uiweb.cbre.com
brokerhub.cbre.com
imperva.com
lsintraapps.cbre.com
po.cbre.com
imperva.com
dev.autobuild.cbre.com
opus.cbre.com
myocs.cbre.com
dev-reports-int.cbre.com
protofit-east.cbrebuild.com
vcse01.cbre.com
imperva.com
assetintel.cbre.com
imperva.com
flooredproducts.cbre.com
brand.cbre.com
navigator.cbre.com
www.highq.com
www.highq.com
looplink-pm4-1.loopnet.com
workplace.cbre.com
ecm.cbre.com
dev.api.autobuild.cbre.com
myportal.cbre.com
dashboard.cbre.com
imperva.com
imperva.com
imperva.com
staging.api.myproperty.cbre.com
test.horizons.cbre.com
imperva.com
ess.cbre.com
imperva.com
marketing.cbre.com
mypc.cbre.com
imperva.com
imperva.com
imperva.com
mapping.cbre.com
imperva.com
imperva.com
borrowerservices.cbre.com
sce-dev.intrepid.cbre.com
csgdr.cbre.com
vas-plat-apis.cbre.com
digitalfirst.firstsource.com
vas.cbre.com
myreimfin.cbre.com
screening.cbre.com
mymeeting.cbre.com
remote.cbre.com
vantage-analytics-prod.cbre.com
welcomegws.cbre.com
imperva.com
careers.cbre.com
us.artifactory.gcsonp.cbre.com
lmapi.cbre.com
myim.cbre.com
imperva.com
imperva.com
*.cbre.com
ess.cbre.com
imperva.com
imperva.com
imperva.com
imperva.com
dev.experience.cbre.com
imperva.com
cbre.com
api.ea.login.cbre.com
imperva.com
staging.api.ea.login.cbre.com
imperva.com
ssl364736.cloudflaressl.com
imperva.com
imperva.com
dealroom.salesloft.com
imperva.com
proptech-feedback.cbre.com
rolls-royce.locator.cbre.com
imperva.com
sso-test.cbre.com
hig.intrepid.cbre.com
imperva.com
myservice-uat.cbre.com
insightportal.cbre.com
imperva.com
mysupplier.cbre.com
test.horizons.cbre.com
imperva.com

Certificate

The complete raw certificate details for brand.cbre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81/qf4MU3nnV7y9cWbiI
FiqEqB8nAOsxh/BNbEW+2oOk3aTG+FiIEeMP5e5qshVdUTuYKizqBCagTrhs40HU
KZcnFTYFHiu9xXzaqLngAA7YZa2xNalS9R3QnOa17jEuSi8KGlxGptbKOok1CjR3
wzSYzf+GBSGSCW/LYYWOZV7ttTZ/JBtS3MpTG4XxHhG6CYmhAQcP6pjBq1PqRknq
42plJ0HAGBjT2Bz5NAj/rPmW9czaf+Fam6Lwj7q1KMN3zkyQrap7YVU1hJ1hoTvN
rL9uALbae+dEvMukyxKVGtMhgLgadOjLF5zx1YVDX2+E3z6GmLvvFLRIrr4FQLCB
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421141666809646553917928092779456134048052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 19:13:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-30 19:13:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brand.cbre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30723206053204052689345831884133712449822826764202594896666679814920515145131588248801184713987385772700916965590892505928613551236044638608858134004849207349717714086750896874425326272637617138178441219423537117451866530040220170288925166776447506093021782031273723621740379345705938839613088927403120149461170506507745622714945540631933991995289688631159177665501759939094136053744582988297221833679643823177362982550244259171159216188985587070250003079886873328640626084662238287914296372100923770021599567925374810161756222011985874492798887154276144638467882913403304642226473442166732540107842595529909567783391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8258897a617a624fdb9d898359d2bc131023e35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.cbre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.beam3.monigle.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018604507c100000040300483046022100c257d75e06e810f7dfb9b1a514b1cdff3083b75199ebe99859324ed26f0a9b70022100a400759d78b405d102c6f3bb464313f137381f129ef91bb7fcce569cd990509b0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018604507c2400000403004630440220083d90a57383435eab2e64789b77ced875fec1f0ab49a02fb310463372c99952022003576951ed625139299a45c340566d3a06038b2e934ae1005e6d588277c5d27a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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