intranet.trt10.jus.br

- ICP-Brasil -

Issued by AC CAIXA-JUS v2

About this certificate

This digital certificate with serial number 7f:35:dd:68:f9:43:c6:85 was issued on by ICP-Brasil.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Cert-JUS Equipamento Servidor-A1
Organization unit: Autoridade Certificadora da Justica-AC-JUS v4
Organization unit: TRIBUNAL REGIONAL DO TRABALHO 10A REGIAO-TRT10
Organization unit: COORDENADORIA DE TECNOLOGIA
Country: BR

ICP-Brasil

Organization: ICP-Brasil
Organization unit: Autoridade Certificadora da Justica - AC-JUS
Country: BR

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:35:dd:68:f9:43:c6:85
Serial Number (int): 9166476059510818437
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 22:aa:27:27:e5:c2:73:7b:b7:f8:57:b0:6f:a0:6e:f5:25:92:2a:2f
AuthorityKeyId: d4:b1:c3:29:49:97:ad:4e:66:36:db:e9:4e:00:4a:6a:d8:c3:da:c4

Fingerprint (sha1): 88:ba:9a:40:59:d2:3d:11:b1:4e:dd:4a:a2:ad:ee:89:56:40:50:4e
Fingerprint (sha256): 94:93:9f:b2:3a:0f:6e:f0:ed:6d:f0:a6:e4:33:94:dd:59:01:b8:af:2a:3c:9c:97:ba:52:49:c3:f1:d8:cc:88

Issuing Certificate URL: http://certificadodigital.caixa.gov.br/aia/accaixajusv2.p7b

Revocation information

CRL Distribution Point: http://lcr.caixa.gov.br/accaixajusv2.crl
CRL Distribution Point: http://lcr2.caixa.gov.br/accaixajusv2.crl
CRL Distribution Point: http://repositorio.icpbrasil.gov.br/lcr/CAIXA/ACCAIXAJUS/accaixajusv2.crl

Check the revocation status for certificate intranet.trt10.jus.br

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.trt10.jus.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name trt10.jus.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for intranet.trt10.jus.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VrSaiAeY13sG79HnZLb
Pntoi1NXqoK92+WUQOGOcxC6dG9XHd+Ap1I5y0JyB8vYAdiYQkWbVeBAiLMEL1kl
n7PXlWkkvoR2kg235I+pBc5GCkI4pUTieWIaz9o/LCD/vFHIkkRKSg+miMQhXe+J
QM7iwoA+/DmEVX1XAgsNixbPRC4VW/aCkmtkIifFYHHq1vJkq+bv5NMtaSAJWkiS
tzVWSwYPq4XF208l2eyq81E/HPrKm9dW8yv6D7HqoZGeTp1TIVoaN7RHjycZvGjH
P2ZYzi1LSQdHhiYJg857joA4rrEfBVuaiy2LUwOQYz7u5FsK+mKypF8B09/G+EC3
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9166476059510818437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Autoridade Certificadora da Justica - AC-JUS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC CAIXA-JUS v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-27 18:45:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-26 18:45:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICP-Brasil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cert-JUS Equipamento Servidor-A1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Autoridade Certificadora da Justica-AC-JUS v4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TRIBUNAL REGIONAL DO TRABALHO 10A REGIAO-TRT10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'COORDENADORIA DE TECNOLOGIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'intranet.trt10.jus.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28953357801016448281950137191722035632184477009020794529397193701372064882571806354308563553715690886696118931400107241012832975318288389164970834382613244626638806406216182555470596355607808700951598693814686144295760528458475928216417806280077515768452484236187213773826888165641792570115128763323193726922623392698904909507172971499876621279552577435182038448963686566007246508961799562870907384316490453097274675562858773785810235377293812242700180977289351772232693162426191636294528528584521029509913398356805171553773191135486972192753256379305361538583306431599714069893961808602442169019862691508320970258401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22aa2727e5c2737bb7f857b06fa06ef525922a2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d4b1c3294997ad4e6636dbe94e004a6ad8c3dac4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
										2054524942554e414c20524547494f4e414c20444f2054524142414c484f2044412031302052454749414f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
										3234303831393639343137333335383431353330303030303030303030303030303030303030313031383031395452544446
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
										3032303131353734303030313930
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
										4755535441564f20444520414c4d4549444120524f434841
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.76.1.2.1.22
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certificadodigital.caixa.gov.br/documentos/dpcac-caixajus.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://lcr.caixa.gov.br/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://lcr2.caixa.gov.br/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repositorio.icpbrasil.gov.br/lcr/CAIXA/ACCAIXAJUS/accaixajusv2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificadodigital.caixa.gov.br/aia/accaixajusv2.p7b'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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