www.lexus.com.sg

- Toyota Motor Asia Pacific Pte Ltd -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 69:d9:19:84:51:c3:c8:cc:fb:fe:cf:59:99:82:3f:f4 was issued on by GeoTrust Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Toyota Motor Asia Pacific Pte Ltd

Organization: Toyota Motor Asia Pacific Pte Ltd
Organization unit: Information Technology
State / Province: Singapore
Locality: Singapore
Country: SG

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 69:d9:19:84:51:c3:c8:cc:fb:fe:cf:59:99:82:3f:f4
Serial Number (int): 140696185519380742009888367014865682420
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): f8:fe:66:63:87:30:41:dc:c5:50:d8:4b:81:61:77:b8:57:c8:67:54
Fingerprint (sha256): ea:0a:d6:b9:25:c2:5a:57:f0:4e:e4:5b:3a:1b:01:c1:f6:17:6b:62:84:f3:9f:12:74:7b:9e:66:eb:85:32:57

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.lexus.com.sg

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lexus.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lexusperu.com.pe
www.lexusindia.co.in
www.lexuscostarica.com
www.lexus.com.vn
www.lexus.com.ph
www.lexus.com.my
www.lexus.com.do
www.lexus.com.br
www.lexus.com.bo
www.lexus.com.bn
www.lexus.co.th
www.lexus.co.nz
www.lexus.co.id
www.lexus.cl
www.lexus.com.sg
lexus.com.sg

Other certificates including the domain name lexus.com.sg

(limited to 100 certificates)
www.lexus.com.sg
forms.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
sni.cloudflaressl.com
www.lexus.com.sg
www.lexus.com.sg
*.lexus.com.sg
auction.lexus.com.sg
auction.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
*.lexus.com.sg
www.lexus.com.sg

Certificate

The complete raw certificate details for www.lexus.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriBKbRgPX+s2MdiPgt71
GwMruOiDVzrTjVz0iJmLdSK0TAZM8DjsgiHCQJSTemXsq6wwcbJ3BO+fBu2ZyFHq
lmqS/F6jCLSCSVmNRDaLDBYVVjLOdKO5x0fpfxS6rV+6Sep1tK/3WeYWWrdX93PM
tNyOMoACTIPujBhhD+p4EcZKLzm/WWi72lCFBA998PeS3fx2juaLf+Jko6BEuMVT
p6BIwr7oIWvhewoxRfmPaZ0HhZ8d6U59o9xxBkxitCU2iySLO9IOfblJdQGmqfmh
4dXaTZ0nAS92CIzAYSPnrU9b9MAMzcdcg7ALAPALLbGb9Fm6//rbKJuCi0YdvJZO
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140696185519380742009888367014865682420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Toyota Motor Asia Pacific Pte Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lexus.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21981388215111934955039816227066174786793549543073809957879946345131233092923254280226741744881014732405163925482810259850629357692089806928430305364656310614328932318116939822386296020788748354600395615290209736343499856582075945193982728210824458164962735028401012808909435682935654028864234797954167421125478440262413572434901335514202099087307194351022232956354119834683486366514037129485979498640419313307297320941341441155567931108457734551236205759168454662927359669985527326348344180460970853676261068692576429202543188832419329242898659769713289228138501588631648789685818753599058621332205035905935671185013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (295 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexusperu.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexusindia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexuscostarica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.bn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexus.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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