tms.brf-corp.com

- BRF Brasil Foods S.A. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b2:d2:2c:87:0e:d0:39:cf:00:00:00:00:50:e3:d9:dd was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BRF Brasil Foods S.A.

Organization: BRF Brasil Foods S.A.
State / Province: Parana
Locality: Curitiba
Country: BR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b2:d2:2c:87:0e:d0:39:cf:00:00:00:00:50:e3:d9:dd
Serial Number (int): 237693868716416358979397510426024729053
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a0:98:27:7b:47:30:bb:11:2f:31:2f:24:06:67:59:0d:56:a9:5e:60
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 0b:cb:2a:a8:18:72:a7:32:a3:5d:df:ad:fd:3a:64:d1:c5:c0:c8:ea
Fingerprint (sha256): 85:01:21:fc:4a:de:ec:b1:37:7e:41:19:db:52:19:1d:0a:4d:2c:c9:d9:25:8e:16:95:68:1d:1e:24:90:68:79

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tms.brf-corp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tms.brf-corp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tms.brf-corp.com
jdaprd.brf-corp.com

Other certificates including the domain name brf-corp.com

(limited to 100 certificates)
citrixonline.brf-corp.com
centraldearquivos.brf-corp.com
sip.brf-corp.com
brf-br.com
mobile.brfprevidencia.com.br
bi.brf-corp.com
riskcontrol.brf-corp.com
tms.brf-corp.com
tms.brf-corp.com
projuris.brf-corp.com
sip.brf-corp.com
webmail.brasilfoods.com
integration.brf-corp.com
bi.brf-corp.com
projurisqa.brf-corp.com
brf-br.com
bi.brf-corp.com
mobileagroteste.brf-corp.com
citrixonline.brf-corp.com
olhaahora.brf-corp.com
autodiscover.brf.com
riskcontrolftps.brf-corp.com
tms.brf-corp.com
mobile.brfprevidencia.com.br
olhaahora.brf-corp.com
sip.brf-corp.com
sip.brf-corp.com
brf-br.com
citrixonline.brf-corp.com
sip.brf-corp.com
citrixweb.brf-corp.com
brf-br.com
brf-br.com
brf-br.com
brf-br.com
cmslnxbwdd1.brf-corp.com
citrixonline.brf-corp.com
citrixonline.brf-corp.com
azudp01brf.brf-corp.com
tms.brf-corp.com
store.brf-corp.com
brf-br.com
webmail.brasilfoods.com
webmail.brasilfoods.com
sip.brf-corp.com
integration.brf-corp.com
brf-br.com
brf-br.com
Sip.brf-corp.com
integration.brf-corp.com
webmail.brasilfoods.com
citrixonline.brf-corp.com
mobile.brfprevidencia.com.br
analytics.brf-corp.com
tms.brf-corp.com
webmail.brasilfoods.com
tms.brf-corp.com
projuris.brf-corp.com
capex.brf-corp.com
sip.brf-corp.com
sip.brf-corp.com
brf-br.com
mobileagro.brf-corp.com
sip.brf-corp.com
brf-br.com
citrixonline.brf-corp.com

Certificate

The complete raw certificate details for tms.brf-corp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy7QvN7sQiLiwqbNNqE6
MMLZCSmmbDwTIQUqeBKVCYGWzcjkbmbi/6eGoMWnzcnzyH0NKSUP/LrpxtohyltU
1a/DtoT8c2Fp1UVsxN+JrZboEq+wbjEr9mKlOi3LepC74IW/vMnK0AkWdJ0Ys6Z3
LBofxPRuTCYp+4kobQye5HTB3ErDUsbHc16PmJn0ZBhxrZ6sns4M0beXGYbdy8om
lXGqkdn2OPeTRmGW+TE06QPXRm9pDrPIl2wfubJAQ0SRerpR+iCBcNY1Zg1/Ht2p
TLZ375phsKNzcSxhs27WTu5QLDnAfZGm+YF0U75rS4C2PtJOvNHbj7Db9Lll5Utd
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 237693868716416358979397510426024729053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-14 19:28:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 19:58:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Curitiba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRF Brasil Foods S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tms.brf-corp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17065256695661631197381907129260707112464862463627327601177540584286494576103608018718064340165669465477009544141915718225737733856364934580411094620162600098878173343110167037459402724565676710677160464373504563278221691451545048703655722467137563466698069146600719330472014888909038392121839285794631432367036243601676847248574643294963677679991959955805071485151436815572179029303419765052285683748815567768559960870228439366965492685104192437860127625721424994168195921091805391536740944244252075175875058611154883799645029067076071292370453516677542893823945420391285940738246172749236753595299408046474369129887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.brf-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdaprd.brf-corp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a098277b4730bb112f312f240667590d56a95e60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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