gabvirtual1.trt10.jus.br

- ICP-Brasil -

Issued by AC CAIXA-JUS v2

About this certificate

This digital certificate with serial number 4e:6c:fe:55:b8:6d:70:d3 was issued on by ICP-Brasil.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Cert-JUS Equipamento Servidor-A1
Organization unit: Autoridade Certificadora da Justica-AC-JUS v4
Organization unit: TRIBUNAL REGIONAL DO TRABALHO 10A REGIAO-TRT10
Organization unit: CDTEC/SETIN
Country: BR

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Autoridade Certificadora da Justica - AC-JUS
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:6c:fe:55:b8:6d:70:d3
Serial Number (int): 5651171276562985171
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 8f:dd:39:cf:58:03:11:b9:ba:97:a5:15:2f:d2:15:1b:22:4b:4e:8e
AuthorityKeyId: d4:b1:c3:29:49:97:ad:4e:66:36:db:e9:4e:00:4a:6a:d8:c3:da:c4

Fingerprint (sha1): c0:81:ed:91:02:0d:f8:6a:3d:cc:cd:ec:bc:11:0a:3f:e4:5a:ff:d5
Fingerprint (sha256): 00:df:a7:f3:0f:f6:4f:6d:38:d2:b1:f7:4d:4e:08:14:e4:4d:7f:25:83:c5:ec:cf:76:c8:48:98:fc:6c:08:17

Issuing Certificate URL: http://certificadodigital.caixa.gov.br/aia/accaixajusv2.p7b

Revocation information

CRL Distribution Point: http://lcr.caixa.gov.br/accaixajusv2.crl
CRL Distribution Point: http://lcr2.caixa.gov.br/accaixajusv2.crl
CRL Distribution Point: http://repositorio.icpbrasil.gov.br/lcr/CAIXA/ACCAIXAJUS/accaixajusv2.crl

Check the revocation status for certificate gabvirtual1.trt10.jus.br

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gabvirtual1.trt10.jus.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name trt10.jus.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for gabvirtual1.trt10.jus.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxEtZTmP6YQUvDSeSSn
TRJ8yAXdGo8Bz+2f6L4M9/VxrmHYSR50NnOmR/CnRBmeyLkh99AZRxUw4wjy5UhP
I85IuxvsS4dSMhgjdLXrvv06JfI65tF8uJWHq2lYV6DGRyLamhyW3aME3wDziLfj
tYMqJdvMjuuzs64bsXX5Qy8pNPIamLqOR2MreTntMLXFXJ7Y8e9DZass/IZBQQr/
pgVLc6NEjzeGePQikSM7ztizrSifeoZkvVcXPXrLTBaN0Onb0K2+cYw+U+TYkkWJ
ciNu689YMHAB9RdInrKNPcA8kpysULrUtW6Q56SDcszZnWGYTFKJioKOBUo1WKst
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5651171276562985171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Autoridade Certificadora da Justica - AC-JUS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC CAIXA-JUS v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-20 17:20:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-20 17:20:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cert-JUS Equipamento Servidor-A1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Autoridade Certificadora da Justica-AC-JUS v4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TRIBUNAL REGIONAL DO TRABALHO 10A REGIAO-TRT10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CDTEC/SETIN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gabvirtual1.trt10.jus.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22452798373182885398570977595003247261471917396264187219951154374266192656857897623811242101000072735259695155354757449714981686935492038314608109006904429879559967277876273405367483938946379648646153405870416716675906793478606373302449338655120538811413714034265470216722112111993385020410977272691701674000527182271101048847347823674662272222357017759653918667544515813836033739228569653399443003325182619025033678152110293331566169366534148001605013143233783630467663667960184471674974309318587820159845120317440231612787383257867301957187247442690422438477050314589979470345471296379243005216510633539256709754323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fdd39cf580311b9ba97a5152fd2151b224b4e8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d4b1c3294997ad4e6636dbe94e004a6ad8c3dac4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
										54524942554e414c20524547494f4e414c20444f2054524142414c484f2044412031302052454749414f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
										313830313139363532353937373237303137383030303030303030303030303030303033353038383138323930444554524446
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
										3032303131353734303030313930
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
										524f424552544f2050455452554646
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.2.1.22
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificadodigital.caixa.gov.br/documentos/dpcac-caixajus.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://lcr.caixa.gov.br/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://lcr2.caixa.gov.br/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repositorio.icpbrasil.gov.br/lcr/CAIXA/ACCAIXAJUS/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificadodigital.caixa.gov.br/aia/accaixajusv2.p7b'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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