www.golf.lexus.com.my

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 05:89:89:d3:bf:9d:d5:7c:98:f9:44:69 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.golf.lexus.com.my,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 05:89:89:d3:bf:9d:d5:7c:98:f9:44:69
Serial Number (int): 1713698756672508998375261289
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 04:f8:72:23:e8:5d:fc:34:9e:e7:95:9a:38:14:bf:e7:d0:fd:34:5d
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 4d:c0:50:8c:6a:b7:f3:4f:cc:c1:21:5d:f7:26:e9:86:e7:7a:7a:74
Fingerprint (sha256): 1f:7d:fb:d2:33:96:48:d5:e3:6f:de:b5:86:a6:11:42:56:7e:61:ce:b6:a6:5c:8b:a3:41:09:0d:b9:9b:86:f8

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.golf.lexus.com.my

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.golf.lexus.com.my

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.golf.lexus.com.my
golf.lexus.com.my

Other certificates including the domain name lexus.com.my

(limited to 100 certificates)
golf.lexus.com.my
www.lexus.com.sg
drivers.lexus.com.my
apps.lexus.com.my
www.golf.lexus.com.my
golf.lexus.com.my
www.lexus.com.my
www.golf.lexus.com.my
lexus.com.my
www.lexus.com.sg
*.lexus.com.my
www.lexus.com.sg
*.lexus.com.my
www.lexus.com.sg
drivers.lexus.com.my
sni.cloudflaressl.com
www.lexus.com.sg
drivers.lexus.com.my
*.lexus.com.my
www.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
lexus.com.my

Certificate

The complete raw certificate details for www.golf.lexus.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs1P55nd84Ru6IWRfuru1
A+Xpb8DwMdwYiz/ybiRW/Bv/wK/oxa2WLWpWN28LLWOo8z+4FKL2++n2NaI3Fj/p
Iy8CM1k3mBUG0C/GYRl32JMTYWmaywZz4pJPwU1LXuMKZ8mrSyBO1ObgvvllEXnJ
GZmsOgNJIBj0LSLh4smvs/FBuF9U6ZvmAgAXq33NrRRv2cthYcVUIzBEv2AIJFaa
+qs7G5YPr3PY5xyrsCHfnWRZB2p9ANUiB5khfs4iIuKdr0mvjH8CcdzIStFi3jjU
edDC0xJTlW/6pLnh++d9p524LdlaGt1uj+IcZOTMNicQIrkRFh+JPYffC/FpyQPr
G88BjqiAaw20bLaBEBfwGjSo8IWMPKg6HR/26P0BrcYDuzP3PPBcZqMQf8i4H0cg
ocYb9yY1hzLCoLKYl4gkCNaotNv2WzASAY0WEFmJdrQVb7M+eYjy8A1lNKpI0MGa
dY0/1XC0kf9pzIUWvL1mRZwpbCxqbNifYsxEJ0hki4JZ5knRLOrqbxtWiAvSd28s
kI8BqQII1rQuPO8n2kpJo2ivcfXyCS6p5othV/fzUvmh0t8CqAAATeCc5v+m5ilj
uChLZ8ME56G0jGIciDYZtqdM0jN7zcVrMa80i7AwU+PmmYT+5VTNuPZ4pQz+QP1b
flIVTlMLXPSN6Z28+KvthzkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1713698756672508998375261289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 05:34:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 05:34:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.golf.lexus.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731594541674040433317695386450735326633633765565396005057450747842472190485212255178344571216702481978211115146042207297135554575606526975839267918501987736898885309271221951017682206433128126200637227331894345000287236855691243856753173131791893209231292422465358485127109393682383145593667477961678563133642849518007328943356056477061784846312328981605707545725680922859978172395689159741231183476409505156414784862760034789300457753513907802344273753235500318951606047980884347282370186089217436620070838737852162069341544698871171056899515320149397794096347973028459258188654342622480677799311653895053217764965873795379827888012444159645030163432201946875484418038028123924409363601545284498411302926653087480892033168981849511389825474152770335328612995551502499399738982055469661793504854431240167182313468581421893169907056100345666930010891303636523300292484023189790447019099288008270783462586229057082064042434066065045724186283216173772128635936321764309027531326249246470891814499700253935247539742168408227130329247943837516155402833876327116439555236734821667609425218011415080034113299729009259823615481285465537669357700722223123447854142899051641851167849106689233638762679485373804251065661861658530915451556169529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golf.lexus.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golf.lexus.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04f87223e85dfc349ee7959a3814bfe7d0fd345d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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