rfb.brf-br.com

- ICP-Brasil -

Issued by AC Certisign Multipla G5

About this certificate

This digital certificate with serial number 11:e8:e6:36:09:84:63:6a:a7:a7:72:25:26:1f:07:f7 was issued on by ICP-Brasil.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Autenticado por Certisign Certificadora Digital
Organization unit: Assinatura Tipo A1
Organization unit: ID - 4408571
Country: BR

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Certisign Certificadora Digital S.A.
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:e8:e6:36:09:84:63:6a:a7:a7:72:25:26:1f:07:f7
Serial Number (int): 23806158034998678281954195699310462967
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9d:50:cf:bd:ff:24:ca:af:b1:33:eb:17:e2:42:7a:8e:69:2a:8e:53

Fingerprint (sha1): 3e:a6:e3:3d:1a:1b:52:2e:2a:3c:13:59:2b:4f:92:ef:bd:58:25:fb
Fingerprint (sha256): 36:df:9c:fe:6b:e2:11:a1:e1:fd:af:fc:22:27:84:20:96:fb:b0:af:98:e8:71:16:d9:23:2c:53:81:1f:b5:d9

Issuing Certificate URL: http://icp-brasil.certisign.com.br/repositorio/certificados/AC_Certisign_Multipla_G5.p7c

Revocation information

OCSP Server: http://ocsp.certisign.com.br
CRL Distribution Point: http://icp-brasil.certisign.com.br/repositorio/lcr/ACCertisignMultiplaG5/LatestCRL.crl
CRL Distribution Point: http://icp-brasil.outralcr.com.br/repositorio/lcr/ACCertisignMultiplaG5/LatestCRL.crl
CRL Distribution Point: http://repositorio.icpbrasil.gov.br/lcr/Certisign/ACCertisignMultiplaG5/LatestCRL.crl

Check the revocation status for certificate rfb.brf-br.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rfb.brf-br.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name brf-br.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for rfb.brf-br.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBciBf9xMFLWoJ1dZG+d
kGiSodkU6xeXBTiu8dHCqRCcrt+o7fkaaa42lIttkub1onRCrTFDpfcsfIzaGMeV
cFvQa6ewGsb+VkoLajn4zua6iMOqLRfpZSMqOw2d0Ph75/vwKHWmOJ2XL+BQoO4A
UgYrmotEQkxsrfsYLWeKui05mHqAUodRF01tZc15ID2xGR9I211jIqc9tZsQdJhk
foabFpY8lx9vn9Wwxe+KE6pQn8hkCLX60sjnrxdPdLGG1yhTFTg6obotZ0gZsTaf
JYRWdGXsMJ/Q/XQ55M1TwpnOCJfcnQpV4/S18pb4oSqk4K7f2H/jt5GWevIbzt3u
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23806158034998678281954195699310462967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certisign Certificadora Digital S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC Certisign Multipla G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Autenticado por Certisign Certificadora Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Assinatura Tipo A1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ID - 4408571'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rfb.brf-br.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23744208593745435544317558932128721321016043797407714840871728977547517470841691164788799392743100830191066927747977308496372297434953621638991984236233115080984087664101088124741108607046564253495944609830599867685169603788176324035460171897323036858657158493348648169851293621510012280577559421296888525962550292226213920057699787392869753642778035100957659057119537329795824503225628147694963763539511448629487768253571613108247660166902592619675679857460581848620941929817323751603294179878229434506881847546023937323211776954713347508321386019742167000551537261611957012919003747403365514136762248579412024749569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (7 bytes)
										42524620532041
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
										3031383338373233303336343037
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
										4a6f7365204c6f7572656e636f205065726f74746f6e69
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
										3137303531393633343637333839393139393130303030303030303030303030303030303030313330393837357373705343
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9d50cfbdff24caafb133eb17e2427a8e692a8e53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://icp-brasil.certisign.com.br/repositorio/lcr/ACCertisignMultiplaG5/LatestCRL.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://icp-brasil.outralcr.com.br/repositorio/lcr/ACCertisignMultiplaG5/LatestCRL.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repositorio.icpbrasil.gov.br/lcr/Certisign/ACCertisignMultiplaG5/LatestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://icp-brasil.certisign.com.br/repositorio/dpc/AC_Certisign_Multipla/DPC_AC_CertiSignMultipla.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://icp-brasil.certisign.com.br/repositorio/certificados/AC_Certisign_Multipla_G5.p7c'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.certisign.com.br'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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