www.cbre.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:f9:61:f4:47:55:4a:95:ac:e0:a7:2b:6d:97:af:3f:23:41 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cbre.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:61:f4:47:55:4a:95:ac:e0:a7:2b:6d:97:af:3f:23:41
Serial Number (int): 433309656573187841836535028465347694895937
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:a5:d1:6f:25:f2:70:60:27:ad:55:23:05:99:b1:6e:95:4d:6d:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:d9:af:fd:90:ac:f7:c2:55:79:c7:2b:34:e0:5b:be:70:02:93:49
Fingerprint (sha256): e7:b8:ac:98:6c:e9:f5:32:cf:6c:c0:81:ee:cf:3d:f7:16:66:de:d8:23:7f:84:c9:f6:29:bd:cb:73:aa:79:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cbre.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbre.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbre.bg
cbre.ca
cbrevietnam.com
commerciallistings.cbre.co.nz
dev.cbreresidential.com
dev.commerciallistings.cbre.co.uk
uat-www.cbre.ae
uat-www.cbre.at
uat-www.cbre.bh
uat-www.cbre.ca
uat-www.cbre.ch
uat-www.cbre.co.il
uat-www.cbre.co.nz
uat-www.cbre.co.uk
uat-www.cbre.com.tr
uat-www.cbre.de
uat-www.cbre.es
uat-www.cbre.it
uat-www.cbre.no
uat-www.cbre.pt
uat-www.cbre.rs
uat-www.cbrevietnam.com
uat.cbreinmuebles.cbre.es
uat.cbreresidential.com
uat.commercial-listings.cbre.ae
uat.commercial-listings.cbre.ie
uat.commerciallistings.cbre.bh
uat.commerciallistings.cbre.ca
uat.commerciallistings.cbre.co.il
uat.commerciallistings.cbre.co.nz
uat.commerciallistings.cbre.co.uk
uat.commerciallistings.cbre.ma
uat.commerciallistings.cbre.no
uat.dataservices.cbre.eu
uat.gewerbeimmobilien.cbre.de
uat.immo.cbre.at
uat.immobiliare.cbre.it
uat.imobile.cbre.ro
uat.imoveis.cbre.pt
uat.lettings.cbre.ch
uat.listingsresource.cbre.eu
uat.nekretnine.cbre.rs
uat.ofisi.cbre.bg
uat.propertysearch.cbre.com.tr
uat.tilat.cbre.fi
www.cbre.ae
www.cbre.at
www.cbre.bg
www.cbre.bh
www.cbre.ca
www.cbre.ch
www.cbre.co.il
www.cbre.co.nz
www.cbre.co.uk
www.cbre.com.tr
www.cbre.de
www.cbre.es
www.cbre.fi
www.cbre.ie
www.cbre.it
www.cbre.ma
www.cbre.no
www.cbre.pt
www.cbre.ro
www.cbre.rs
www.cbreinmuebles.cbre.es
www.cbreresidential.com
www.cbrevietnam.com
www.commercial-listings.cbre.ae
www.commercial-listings.cbre.ie
www.commerciallistings.cbre.bh
www.commerciallistings.cbre.ca
www.commerciallistings.cbre.co.il
www.commerciallistings.cbre.co.uk
www.commerciallistings.cbre.ma
www.commerciallistings.cbre.no
www.dataservices.cbre.eu
www.gewerbeimmobilien.cbre.de
www.immo.cbre.at
www.immobiliare.cbre.it
www.imobile.cbre.ro
www.imoveis.cbre.pt
www.listingsresource.cbre.eu
www.nekretnine.cbre.rs
www.ofisi.cbre.bg
www.propertysearch.cbre.com.tr
www.tilat.cbre.fi

Other certificates including the domain name cbre.co.nz

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
www.cbre.co.nz
imperva.com
www.cbre.co.nz
imperva.com
cbre.co.in
www.cbre.co.nz
imperva.com
imperva.com
www.cbre.co.nz
imperva.com
imperva.com
www.cbre.co.nz
imperva.com
imperva.com
imperva.com
www.cbre.co.nz
myemail.cbre.com
imperva.com
imperva.com
www.cbreresidential.com
imperva.com
imperva.com
imperva.com
www.cbreresidential.com
www.cbre.com
imperva.com
www.cbre.co.nz
imperva.com
cbre.co.in
www.cbreresidential.com
imperva.com
www.cbre.co.nz
imperva.com
www.cbre.com
imperva.com
imperva.com
www.cbre.co.nz
imperva.com
imperva.com
imperva.com
imperva.com
www.cbreresidential.com
www.cbre.co.nz
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
www.cbreresidential.com
imperva.com
imperva.com
imperva.com
www.cbre.co.nz
imperva.com
imperva.com
www.cbreresidential.com
imperva.com
imperva.com
imperva.com
www.cbre.com
imperva.com
imperva.com
www.cbre.com
imperva.com
imperva.com
imperva.com
uat-www.cbre.com
O365ExchangeCDC.cbre.com
imperva.com
imperva.com
imperva.com
www.cbrekorea.com
www.cbre.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
cbre.co.in
vas.tops.cbre.co.nz
www.cbre.co.nz
www.cbre.co.nz
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for www.cbre.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHf9lYaD/Zan+W+PEp1k
NQVG6oFOvwkLHTd3taQIpW/p4zPAOIQhL9INvD/O0yXQf51Jw/9RZ43V/NSKyP3a
OmzGxSitvcNnHhli3MKrrts5NzeYBoDzf6YbXR2mPqT9iHlQz+wHahjT5T0deZgI
Hag0Dla8+9FoP9mhMb7R5FtI9nRF/UmEOfCaHsYf4k6ifW/Kfwfb++DrNBaDNOv+
UiMIrvDUa3umDqSMpBLGPD6GEptgnLmf0Z0A0PKwHK39uq4fYY8vcBLaoThdqX0q
ANqW+UfLPAPTNcppNUAfg/MyGfUqU4da3FgFpg4nMxc9MNcqZviu3wXwxjnmEJ/v
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433309656573187841836535028465347694895937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-16 00:15:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-17 00:15:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cbre.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19247391906650460448653914377989605162382767068698598048181435955731867302085530236955230200239963305388265939698652824684475505437279427447522271136699937817652875237438508158136238152557128732665774617907621862826125165624588366016027180286713905487106431786340165978664036583971638367920015974495766059490105435178082193288023857059759117631586080660537950351956564582845546006417072316749696275307720661893568618511456426893386831738227558022252585553739319408347636704596206895644754910871810082892523468716038338242320733521527035870253811537638784834619019792940227684969742512887661131058182178471595500105681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a5d16f25f2706027ad55230599b16e954d6db1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1938 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbrevietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerciallistings.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.cbrevietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cbreinmuebles.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commercial-listings.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commercial-listings.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.commerciallistings.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.dataservices.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gewerbeimmobilien.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.immo.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.immobiliare.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.imobile.cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.imoveis.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.lettings.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.listingsresource.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nekretnine.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.ofisi.cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.propertysearch.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tilat.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreinmuebles.cbre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbreresidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrevietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercial-listings.cbre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerciallistings.cbre.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dataservices.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewerbeimmobilien.cbre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immo.cbre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immobiliare.cbre.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imobile.cbre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoveis.cbre.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listingsresource.cbre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nekretnine.cbre.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofisi.cbre.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertysearch.cbre.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tilat.cbre.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002eb05c41d27dcf7f2054f8ed574aff8f3bd6cd5a7fbdf4a9ce058519648a9a743783a9b86712f06d826ae9feca0ff5a2f972d0c2a49476d6a3f7268f15b8b8d2f004883df1a323d0bf567b1ad665e17e8c6273642c84f85ed05372de59fab622d9f681839a7f05863932731b2d20101566d4d15c71202b2f26b204d8d66af9977a358b1b1f9edc8a6a7519ea36cb74704311c2f7231310dead66707b0f66a1f6560c9fb173b27a52b892a2c0f0704a1e885eb8e53e161e428814c523575b46335f319d4501bd34a35d7e8fe41387625a86d00671042266288d5179f5c9dab2b7a03b0e54dea6afdafcbd588a0be504678e9e030ef8b930146ac921dd14b4020a