mobile.brfprevidencia.com.br

- BRF Brasil Foods S.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 16:85:25:b5:99:6b:a8:5f:00:00:00:00:50:e4:64:97 was issued on by Entrust, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BRF Brasil Foods S.A.

Organization: BRF Brasil Foods S.A.
State / Province: Parana
Locality: Curitiba
Country: BR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:85:25:b5:99:6b:a8:5f:00:00:00:00:50:e4:64:97
Serial Number (int): 29934356226387388147503471758451958935
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 33:3b:f8:b2:bb:4a:49:66:8a:d4:43:ce:df:fb:61:d4:86:d6:8b:c9
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 5c:38:0a:85:f1:5a:b1:5e:20:4d:9d:d7:ea:fd:b8:f8:d5:13:55:ea
Fingerprint (sha256): 65:89:04:02:fe:9a:7a:48:c1:0c:c7:5b:3b:51:74:c8:0b:31:3c:ac:3a:07:e2:cf:27:b6:18:79:ff:f4:ce:f3

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate mobile.brfprevidencia.com.br

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobile.brfprevidencia.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mobile.brfprevidencia.com.br
www.brf-br.com
financas.brf-br.com
imprensa.brf-global.com
mobileagro.brf-corp.com
www.brfprevidencia.com.br

Other certificates including the domain name brfprevidencia.com.br

(limited to 100 certificates)
brf-br.com
*.brfprevidencia.com.br
mobile.brfprevidencia.com.br
imperva.com
brfprevidencia.com.br
www.brfprevidencia.com.br
dev.amigoindica.brfprevidencia.com.br
mobile.brfprevidencia.com.br
*.brfprevidencia.com.br
brf-br.com
brf-br.com
brf-br.com
imperva.com
imperva.com
brf-br.com
imperva.com
brfprevidencia.com.br
brf-br.com
brf-br.com
amigoindica.brfprevidencia.com.br
mobile.brfprevidencia.com.br
imperva.com
mobile.brfprevidencia.com.br
brf-br.com
brf-br.com

Certificate

The complete raw certificate details for mobile.brfprevidencia.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwS8z9S15mcrn8Zf3FyH
jtd7O/V1DFCb4Y+zGZzCTOGdoNsDR37XQAlDnDTp9P7mIJj0iFP/EmJdUNnwhKcv
3G7laUcPpv7SUTVFUeLyBkeh58MRrGWn89jX5mHXwAzmr7/7c+iG3XJg4o+z7S3H
xPayo5/v2KpwCXLxTOLq6gyArRHM17pnIKkQXzBkEt+KKRB1WvdwVXARUx4Odojh
CBsfGdzZ83L0LHxDhU7lAEiPlPOdvdeMuZXj+USnq/yBnyVDi3IrCW3EV+REOptK
9B+UcjPSJCHok7Qy8ESAOCRyZEwSapz6HP0mzBEcrXieawbrf0P1Fs1uvzUeU5hB
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29934356226387388147503471758451958935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 20:06:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 20:36:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Curitiba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRF Brasil Foods S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mobile.brfprevidencia.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22094039540185375064082500461813832217318052029969131801253772195846655940941212910971461849655550252017342762620315797211959195012422743427365494208088256474760842040914479784075640419306809211313312677105381557288919532125661398692245771163535382285106339837827346199796301337456415359863938465757990892375748031502478952180856641114775069897963758201131130459233137421293057113650836125896654273225271922260330222373001831227082471048736018813840106026758604994719768558790121269792678488304136827352676966136230631878451220946600378586796990611772131290415599115099149151674801664535657163126618444070618761019821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.brfprevidencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brf-br.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financas.brf-br.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imprensa.brf-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileagro.brf-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brfprevidencia.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							333bf8b2bb4a49668ad443cedffb61d486d68bc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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