brf-br.com

- BRF Brasil Foods S/A -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 82:76:93:4e:fb:cf:3e:83:00:00:00:00:50:e1:6e:27 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BRF Brasil Foods S/A

Organization: BRF Brasil Foods S/A
State / Province: Parana
Locality: Curitiba
Country: BR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 82:76:93:4e:fb:cf:3e:83:00:00:00:00:50:e1:6e:27
Serial Number (int): 173415318253285866358895421010055622183
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1f:cb:8e:dd:7d:14:8b:4e:e1:69:c7:9e:d6:7b:f6:ec:e3:b9:e6:0b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 43:95:a7:cc:a9:f8:81:df:91:85:d6:1b:46:26:18:1f:f5:03:06:b2
Fingerprint (sha256): 4b:53:a2:9a:b3:af:24:0c:72:f3:d2:87:42:ac:51:10:dd:98:df:55:0e:8d:6d:de:d7:d0:4f:59:b7:0f:05:4f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate brf-br.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brf-br.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brf-br.com
www.brf-br.com

Other certificates including the domain name brf-br.com

(limited to 100 certificates)
sip.brf-corp.com
brf-br.com
imperva.com
mobile.brfprevidencia.com.br
brf-br.com
compras.brf-br.com
*.brf-br.com
ecom.brf-br.com
*.brf-br.com
brf-br.com
sip.brf-corp.com
webmail.brasilfoods.com
imperva.com
rfb.brf-br.com
vpn.brf-br.com
brf-br.com
brf-br.com
autodiscover.brf.com
mobile.brfprevidencia.com.br
sip.brf-corp.com
sip.brf-corp.com
brf-br.com
sip.brf-corp.com
brf-br.com
brf-br.com
brf-br.com
brf-br.com
paymentsystem.brf-br.com
imperva.com
kits.brf-br.com
brf-br.com
imperva.com
brf-br.com
webmail.brasilfoods.com
imperva.com
webmail.brasilfoods.com
sip.brf-corp.com
brf-br.com
brf-br.com
Sip.brf-corp.com
webmail.brasilfoods.com
paymentsystem.brf-br.com
mobile.brfprevidencia.com.br
imperva.com
webmail.brasilfoods.com
www.brf-br.com
brf-br.com
sip.brf-corp.com
compras.brf-br.com
sip.brf-corp.com
mobile.brf-br.com
brf-br.com
sip.brf-corp.com
brf-br.com

Certificate

The complete raw certificate details for brf-br.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 173415318253285866358895421010055622183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 11:18:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 11:48:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Curitiba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRF Brasil Foods S/A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brf-br.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871463515743859545630266527133836407057356889264062174291507858146393628444618974823855094455489074911604462740668804208944642112727074589812209076187633280804370469018478801407371391524782039988735220579721487562277136283113141489835415385800102935316588847802718158337132655125043877475146457019233744638650711415918165756402414374918584950215416276672078839015779135428719363520738283716257341861959931195995878180662973122727369652781218325826919921494585822787590578768482590426308632640267135136638883476714723073807289881239709040666826889359162911441259635152019288496197092479070589665329853880101598396139824960122497259701346658085737045276749203041547783593283978849192898720715209364774753300259815932369963589661703671508627209058107822633689173207392023382764858018745930700851941551141141262557743981010607198834444138638998076768996319540615059806055475023497126890661291358002516883096588212658637929017026943867971383799559789222469710366111309566960783823701796525055905468554360562583148637128626305679810764214592467100381460779599470510911625756787929393766466224266552066996060793143607609047441510547215817549986998435693853865449045402424213937313462781293979915485497097831893709876525066492194816531683117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brf-br.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brf-br.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fcb8edd7d148b4ee169c79ed67bf6ece3b9e60b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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