*.brfprevidencia.com.br

- BRF S.A -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 47:e5:41:39:a5:34:81:38:dc:61:e3:67:61:ab:a7:1a was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BRF S.A

Organization: BRF S.A
State / Province: Santa Catarina
Locality: Itajai
Country: BR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 47:e5:41:39:a5:34:81:38:dc:61:e3:67:61:ab:a7:1a
Serial Number (int): 95565546605091504172064663505520535322
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 55:e3:91:20:33:f4:62:7d:a9:74:b7:eb:45:09:df:c8:b1:4a:04:af
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 70:30:15:55:62:4b:80:3b:7c:b8:3d:96:bf:34:46:43:0f:a1:69:ea
Fingerprint (sha256): 65:f3:9b:b3:05:1a:7b:4c:ea:cf:76:17:1a:37:38:5e:27:5b:af:68:97:52:c4:d2:e6:c8:d7:b1:8b:03:e6:9c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.brfprevidencia.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.brfprevidencia.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.brfprevidencia.com.br
brfprevidencia.com.br

Other certificates including the domain name brfprevidencia.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.brfprevidencia.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95565546605091504172064663505520535322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-10 18:06:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 18:06:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Catarina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Itajai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRF S.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brfprevidencia.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722767279193389440710058730783868804548096941818548346049803601118934836460451010303897325837601449526343920289760120686254640856346578736310344937423987935381794652728450407895086748020171013057702695981265971730432416869922097507367907458697892165374364734801363963793375438815128078326396352696149698244621690870644786904076984400346095818105607922194465996312858327030974628807798754754092215323586925893272796181147886271343262997240857527537654218293491566448002531976917544294188910077008013368995130762531745520364273321881283849732721352702147072576204721155127533455847443184164380638386860333235433453354081272066737665344428939470265598428939215693582943456221880981686837649091493848235837624732342642797282144594822860560415652280974689985329485130686583434081701693043278762464006785042963594259872615106763540694864843991118561478529187444663607456811629449926358545872129385289303268103343981658046459944168517581849589298246604810843794898666767689172809700967662302399755270252641471449490719708590251628078594687916323355809675277488832306601624613850918454388303283432952340958719218258548285421650669900807659972724878721908628584350596386018586153471357694575069301767917607649789303151957672890911194257904237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55e3912033f4627da974b7eb4509dfc8b14a04af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brfprevidencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brfprevidencia.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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