www.brf.com

- BRFKREDIT A/S -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5c:d7:6b:36:37:5c:a8:85:9b:35:a4:05 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BRFKREDIT A/S

Organization: BRFKREDIT A/S
State / Province: Kongens Lyngby
Locality: Kongens Lyngby
Country: DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:d7:6b:36:37:5c:a8:85:9b:35:a4:05
Serial Number (int): 28733046248107987289326855173
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9f:3e:12:19:01:dc:9a:2b:de:e4:f8:01:ec:bd:12:46:af:ee:f1:33
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 02:66:38:51:34:70:77:5d:46:ab:f6:2e:43:85:a5:7e:11:91:9f:34
Fingerprint (sha256): 78:3b:64:16:e5:ed:11:34:28:64:90:a0:2c:36:15:18:23:29:e1:30:06:b1:82:a3:8f:4c:80:96:f5:ce:33:52

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.brf.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.brf.com
brf.com

Other certificates including the domain name brf.com

(limited to 100 certificates)
sip.brf-corp.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
brf.com
brf.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
meerwel.sqiffer.com
confero-staging.televic.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
pied.app
akamaisecure7.qualtrics.com
www.elton.codes
essencia.brf.com
www.brf.com
nickromero.dev
akamaisecure7.qualtrics.com
www.brf-global.com
staging.boettinger.media
autodiscover.brf.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
njbbc.org
akamaisecure7.qualtrics.com
www.jyskerealkredit.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
brf.com
memegram.apptget.com
sip.brf-corp.com
sip.brf-corp.com
www.brf.com
www.elton.codes
akamaisecure7.qualtrics.com
resident.fetch.st
essencia.brf.com
talents.brf.com
imperva.com
imperva.com
akamaisecure7.qualtrics.com
akamaisecure7.qualtrics.com
*.brf.com
imperva.com
stg.ab6ix.re2fe.com
akamaisecure7.qualtrics.com
www.foreignconnect.org
*.brf.com
pokeprice.io
akamaisecure7.qualtrics.com
www.jyskerealkredit.com
pokeprice.io
admissaodigitalteste.brf.com
imperva.com
talents.brf.com
www.brf.com
confero-staging.televic.com
jamat.org
*.brf.com
homologacao.contratepitzi.online
www.ortura.com
www.clingirahmet.com
akamaisecure7.qualtrics.com
investorsurvey.pwc.com
admissaodigitalteste.brf.com
*.brf.com
www.brf-global.com
*.brf.com
akamaisecure7.qualtrics.com
assets.gamifier.co
conecta.brf.com
akamaisecure7.qualtrics.com
linear-sso.brf.com
akamaisecure7.qualtrics.com
sip.brf-corp.com
akamaisecure7.qualtrics.com
sip.brf-corp.com
*.brf.com
f1recap.barnazagoni.com

Certificate

The complete raw certificate details for www.brf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UK2Np6qnpd0tmhSOM4P
YogcwaZn+3Yvzc11reZN+eb76mHgvALD0pcpzSE/0RIea0abuRZ4bPuK2UCI0Si1
HZ+u5XjW2He+Nuj+FFrWMwLH0AS3tzIwaJDAx3qIqeLpRPe9+jHpFsLh9yHTtKaG
Q6kx4Q/lALyS/dXjhYUyTnszDN40bTylj04mIxDvpB/nwBTvpUDt6AfWRucnl/M0
mETYfXlAR8SN9OV4Motf8ZknB9pKajjJe3ZwetZV53uKeSWJCkbDXT7ENRcqvlDI
71GeAhqXZjbVpfy/K5DgiPJw9h4olvzHZ4F1SMJYP5UyVhYr9ox2If7i3kZGfADG
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28733046248107987289326855173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-20 10:54:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 10:54:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kongens Lyngby'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kongens Lyngby'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRFKREDIT A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27931562197825998823654711738495526817829120707089938646398453394150260486073396531596036701426640941250688277634245161594996450893626221428470990898894190019359356695581467918447190509306612124690524165511028244425004892670891856546936499460050943332703583984574996385268261994673199801497893788087616465725520743222947911892948641078781102109528627763948638818288437794283414178615356834944033433078800718444416174298172662192493238985661197841633395257251553820604941270749180966895558968069087576381891766874725217489057434635889925970158805173340861032204104492361151668311277388488527029573803903821709184124639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f3e121901dc9a2bdee4f801ecbd1246afeef133
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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