drivers.lexus.com.my

- UMW TOYOTA MOTOR SDN BHD -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 30:12:54:38:af:d8:f4:79:9e:93:d2:71 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UMW TOYOTA MOTOR SDN BHD

Organization: UMW TOYOTA MOTOR SDN BHD
State / Province: Selangor
Locality: Shah Alam
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 30:12:54:38:af:d8:f4:79:9e:93:d2:71
Serial Number (int): 14877438860651002156662641265
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 8a:d2:1e:e3:26:de:93:74:54:59:5f:9b:36:3f:06:86:74:8e:f8:73
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 12:74:f1:54:ca:7f:00:7b:da:29:4f:59:7e:a8:7c:94:21:ee:53:37
Fingerprint (sha256): a8:b3:b1:5c:f8:29:3a:1a:99:93:61:cd:8b:b4:d5:f6:45:c0:b2:e1:96:c0:4e:66:a0:7b:d4:23:31:8d:b3:a2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2

Check the revocation status for certificate drivers.lexus.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drivers.lexus.com.my

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drivers.lexus.com.my

Other certificates including the domain name lexus.com.my

(limited to 100 certificates)
golf.lexus.com.my
www.lexus.com.sg
drivers.lexus.com.my
apps.lexus.com.my
www.golf.lexus.com.my
golf.lexus.com.my
www.lexus.com.my
www.golf.lexus.com.my
lexus.com.my
www.lexus.com.sg
*.lexus.com.my
www.lexus.com.sg
*.lexus.com.my
www.lexus.com.sg
drivers.lexus.com.my
sni.cloudflaressl.com
www.lexus.com.sg
drivers.lexus.com.my
*.lexus.com.my
www.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
lexus.com.my

Certificate

The complete raw certificate details for drivers.lexus.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgIMMBJUOK/Y9Hmek9JxMA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTkwNDIzMDIzNjEzWhcNMjEwNDIzMDIzNjEzWjB2MQswCQYDVQQGEwJN
WTERMA8GA1UECBMIU2VsYW5nb3IxEjAQBgNVBAcTCVNoYWggQWxhbTEhMB8GA1UE
ChMYVU1XIFRPWU9UQSBNT1RPUiBTRE4gQkhEMR0wGwYDVQQDExRkcml2ZXJzLmxl
eHVzLmNvbS5teTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMsoW8+D
JFyb+gb0eVdr8exz962t4aXyJPhN5Sr1WE5VRGexKd0qyoeCLjdZfFB6oK6Tzc16
B7tfr52r2LeCb15EcuTCKAj2ygDfqyK9wfFdFozQEA2OH60AsiL3GOGuTstGnsbK
5qzVTfevtko+xlwt2XpNMaMGksOOWjSbhwKKYcSWjlT47B7lM/Zb57wl4wbe35pi
JLqWrNFVVK6ToVfMe+MI2/V7xfiGu7hpijXQM1cAsf7CXhaxMOeqQCVgnHeuzy0X
uaAfYJ4OUkM42tMDIZBfeoJDO8GNtifh+aQ0Fcs7TpqkNRTTVYbBrHASxVSKqNNP
l27pdSNr8IVQ3iMit0608ZDMgqegDVWsC09D+8HrrGeaRNieXqhr2s9L8PxRzq09
cXkVo9sMS0qjncWeEWKQHgQj9ND+1jRJ/NoQFZh4ykTdmbu5hcDjZ0+hEytq3TLS
UQRWRGzoVjC/oM+KhYP/wqhkGOpC4rpFUqhs6/AnKQ/j3VMwvkkaGN9wRlmeslV5
9MV8IyZ+z9dMS03HSyp1newdlibzpHAREWPmD4ZzqFg2AJ5ATHztSpJjP+UjBDg3
WOhLz0nFh0buyEigc+EPDOBpECgpRGHJem98kH7RM8xlivqUe3j2HqMafG1EHKgm
I+7BEsC3org3HJInB84wAodDjm8bzAuXg8UpAgMBAAGjggGvMIIBqzAOBgNVHQ8B
Af8EBAMCBaAwgaAGCCsGAQUFBwEBBIGTMIGQME0GCCsGAQUFBzAChkFodHRwOi8v
c2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc29yZ2FuaXphdGlvbnZhbHNo
YTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0cDovL29jc3AyLmdsb2JhbHNpZ24u
Y29tL2dzb3JnYW5pemF0aW9udmFsc2hhMmcyMFYGA1UdIARPME0wQQYJKwYBBAGg
MgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3Jl
cG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMB8GA1UdEQQYMBaCFGRyaXZl
cnMubGV4dXMuY29tLm15MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAd
BgNVHQ4EFgQUitIe4ybek3RUWV+bNj8GhnSO+HMwHwYDVR0jBBgwFoAUlt5h8b0c
FilTHMDMfTuDAEDmGnwwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL
BQADggEBAL9quEsEpdG1V7zo0JX1r9tXGWi43yW/EK6a/michZhqfOync6/46K6Q
npR3x1s1KpFX4mpmOEh4YIBGWbiQ0VyOApN1bJC6WSYsTJfkSY8P4Hai4Gv/fEpG
lu35vusKdN9b8ZePPC9YWJKBh0Pkjea/kAh1aNq25FZ8GDfhsLb4klCz1vBJ+g4r
qJGr8dp7vbnKW06ddWMQMZIFzyVjFVm9HEwEAc1uyZgA4Mw9WxDf7cC7VQp9AO1i
8lrHquYWtwlnCljTyFY83K8x47FbgyQvVtMX7iheDVGZmR5Sz948CaDPfqneLf+k
mIgHiUdxbdwQbYxxdRo2gR2blDAZdLE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14877438860651002156662641265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 02:36:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-23 02:36:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selangor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shah Alam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UMW TOYOTA MOTOR SDN BHD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drivers.lexus.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828810905442562394154890280373265092879568538837637797287936505078368375277532936976024788290071481427526196842207458535343981143893153055187152555751524663674122807640604250756582181084095916734336221177490819997607186827451148319749358425726455268906293468550189796114039340060287667914747932801886899299833444535865372310024524903350914732683898932348430593036449632232262914156550250426601893891679213727927068276828842302121699011843666705857291109712086929814775017995301603414875956021458445898149347489242668334431051325418463722033264203813970082037553289288625616334395054967672121123607157997894933148851869490524436917674864178044732904902564109808145506217502216763888535150915180909546437675456729197983364502393546793396899074477133507215030600967188529819675249853859112325303562520734308636924854264819518686280902202162055432411025852268698933966925888751011694509730378694339466849418015097222302850916781581010984280300422841053578317368111416672633863563783566484409909573897553268872500943793056789875721381989123264295017391601993637597498255523015564476545117662246399158936177498865932674547346707947461745850547536409886221660024610656803011585403157775369885378192547633178517566501476979400048837124146473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivers.lexus.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ad21ee326de937454595f9b363f0686748ef873
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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