gabvirtual2.trt10.jus.br

- ICP-Brasil -

Issued by AC CAIXA-JUS v2

About this certificate

This digital certificate with serial number 32:61:9d:f1:28:6c:b1:ab was issued on by ICP-Brasil.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Cert-JUS Equipamento Servidor-A1
Organization unit: Autoridade Certificadora da Justica-AC-JUS v4
Organization unit: TRIBUNAL REGIONAL DO TRABALHO 10A REGIAO-TRT10
Organization unit: CDTEC/SETIN
Country: BR

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Autoridade Certificadora da Justica - AC-JUS
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 32:61:9d:f1:28:6c:b1:ab
Serial Number (int): 3630356433728221611
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: bb:d2:9d:ba:dd:f0:b8:53:2d:48:85:14:51:ba:2f:96:34:d8:d4:5d
AuthorityKeyId: d4:b1:c3:29:49:97:ad:4e:66:36:db:e9:4e:00:4a:6a:d8:c3:da:c4

Fingerprint (sha1): 0a:4a:34:f4:96:1b:3e:7f:dc:75:12:f4:ff:2f:8b:b8:d8:82:98:3b
Fingerprint (sha256): 19:d2:9f:9d:14:8a:a7:79:f6:6c:8b:56:b1:ba:6e:5d:50:49:bf:01:0b:6d:0c:e0:28:1e:ef:d7:aa:87:95:df

Issuing Certificate URL: http://certificadodigital.caixa.gov.br/aia/accaixajusv2.p7b

Revocation information

CRL Distribution Point: http://lcr.caixa.gov.br/accaixajusv2.crl
CRL Distribution Point: http://lcr2.caixa.gov.br/accaixajusv2.crl
CRL Distribution Point: http://repositorio.icpbrasil.gov.br/lcr/CAIXA/ACCAIXAJUS/accaixajusv2.crl

Check the revocation status for certificate gabvirtual2.trt10.jus.br

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gabvirtual2.trt10.jus.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name trt10.jus.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for gabvirtual2.trt10.jus.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYMwz3kNq3Vv/sidbMZI
msnXeu9DxSR2V/QyAXgI3EtIqEBnWVDeFOicbmanxFWGLzGY26+XfZRhkOPDEQqX
SXg4Fe7oKCKXoyh34kACY8tbRLaOF/eohMggsr5H67qJ6ZZoNNpBkkbhUVO4zPRV
nsYm/VYL7EkBxQv9QGMoOyLg4Lw16icrKxjIgRrAFmqSCu2eQNaVCeu3TXv8nSGS
1zBezYOHSHMJjI+1igzJMWDaH2/PY4m1LvRUlIW+MtwqmfO/ICCi1mGNoca73ePX
hcfaG/0xh4yXmPAmzBgW5CRbxpl957RNYbLSd4KCsipHl7cq/GbjOpRc+F10NgQt
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3630356433728221611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Autoridade Certificadora da Justica - AC-JUS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC CAIXA-JUS v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-20 17:28:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-20 17:28:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cert-JUS Equipamento Servidor-A1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Autoridade Certificadora da Justica-AC-JUS v4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TRIBUNAL REGIONAL DO TRABALHO 10A REGIAO-TRT10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CDTEC/SETIN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gabvirtual2.trt10.jus.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20389059627957417848880619654296713237552225076127144662329582040588036041890929903218292652598908053485388284733702951519587120464721123635518894877140165997104654215135098206655508185415251009547194591546780876511042716976851496673541994537568435636262061800600631070705535266219941894228577215676708027147420676248706922899297759798070289837060977269672383785544937724159571556889924786436309467406728803212642403718463895209421465080765713535447471618699623343026352071991157346832198859247185023360711173515481885100242399801812327518497770895608377275072483863517675892189382824138669372409630770791627958267277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbd29dbaddf0b8532d48851451ba2f9634d8d45d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d4b1c3294997ad4e6636dbe94e004a6ad8c3dac4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
										54524942554e414c20524547494f4e414c20444f2054524142414c484f2044412031302052454749414f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
										313830313139363532353937373237303137383030303030303030303030303030303033353038383138323930444554524446
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
										3032303131353734303030313930
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
										524f424552544f2050455452554646
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.2.1.22
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificadodigital.caixa.gov.br/documentos/dpcac-caixajus.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://lcr.caixa.gov.br/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://lcr2.caixa.gov.br/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repositorio.icpbrasil.gov.br/lcr/CAIXA/ACCAIXAJUS/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificadodigital.caixa.gov.br/aia/accaixajusv2.p7b'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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